last executing test programs:

4.392572164s ago: executing program 4 (id=3421):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=@ipv4_delrule={0x30, 0x21, 0x1, 0x201, 0x25dfdbfb, {0x2, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd}, [@FRA_SRC={0x8, 0x2, @local}, @FRA_TUN_ID={0xc, 0xc, 0x1, 0x0, 0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x4010}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x1e, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000071180f000000000095000000000000001cd5336ac170f2dccf8c25e2582ff3fb500f851afca52dfe868a525f3b40e40cead10ed6b6b66952bce7b266aaf0105172d839322214f578c59deab090526e9dbd78c7415d78e804513cdd7ab951c4921cc462be5b4567bc2add84b6cb932bfee4ce03575300f6fc1bd0f7f14f07310dcc0fff540195980864c13b00bb301cf55a63f71842382f39fb548e97f89b90f2cf2de5bddd85b34d308e8785b82e43721b3ec5e7b6c455aa6f49"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x24}, 0x94)
r1 = socket(0x2b, 0x1, 0x1)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000180)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x8000000, 0x0, 0xff, 0x1, 0x0, 0x1000}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000000c0)={@remote, 0x8000000, 0x2, 0x0, 0x0, 0x3, 0x1}, 0x20)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB="780000000206010800000000000000000000000405000500050000000500010007000000050005000a0000000500010007000000440007800500070073000001ffffff404e2300000500150000000000ff01ffffffffffff060005404e23000008000b4000000006060004404e230000050007000c000000"], 0x78}, 0x1, 0x0, 0x0, 0x4000814}, 0x15)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000240)=<r5=>0x0)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0x13c, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {}, {0xffffffffffffffff, 0x0, 0x0, 0x17ffffffffffe}, 0x40}, [@tmpl={0x84, 0x5, [{{@in6=@private1, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, {{@in6=@loopback, 0x4d4, 0x6c}, 0x2, @in=@rand_addr=0x64010100, 0x10001000, 0x2, 0x0, 0x2, 0x0, 0x3}]}]}, 0x13c}}, 0x0)
sendmsg$NFC_CMD_DISABLE_SE(r3, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x2c, r4, 0x8, 0x70bd28, 0x25dfdbfd, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_SE_INDEX={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24004054}, 0x800)
socket$netlink(0x10, 0x3, 0x0) (async)
sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=@ipv4_delrule={0x30, 0x21, 0x1, 0x201, 0x25dfdbfb, {0x2, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd}, [@FRA_SRC={0x8, 0x2, @local}, @FRA_TUN_ID={0xc, 0xc, 0x1, 0x0, 0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x4010}, 0x0) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x1e, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000071180f000000000095000000000000001cd5336ac170f2dccf8c25e2582ff3fb500f851afca52dfe868a525f3b40e40cead10ed6b6b66952bce7b266aaf0105172d839322214f578c59deab090526e9dbd78c7415d78e804513cdd7ab951c4921cc462be5b4567bc2add84b6cb932bfee4ce03575300f6fc1bd0f7f14f07310dcc0fff540195980864c13b00bb301cf55a63f71842382f39fb548e97f89b90f2cf2de5bddd85b34d308e8785b82e43721b3ec5e7b6c455aa6f49"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x24}, 0x94) (async)
socket(0x2b, 0x1, 0x1) (async)
socket$inet6_udp(0xa, 0x2, 0x0) (async)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000180)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x8000000, 0x0, 0xff, 0x1, 0x0, 0x1000}, 0x20) (async)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000000c0)={@remote, 0x8000000, 0x2, 0x0, 0x0, 0x3, 0x1}, 0x20) (async)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB="780000000206010800000000000000000000000405000500050000000500010007000000050005000a0000000500010007000000440007800500070073000001ffffff404e2300000500150000000000ff01ffffffffffff060005404e23000008000b4000000006060004404e230000050007000c000000"], 0x78}, 0x1, 0x0, 0x0, 0x4000814}, 0x15) (async)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$nfc(&(0x7f0000000200), 0xffffffffffffffff) (async)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000240)) (async)
socket$nl_xfrm(0x10, 0x3, 0x6) (async)
sendmsg$nl_xfrm(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0x13c, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {}, {0xffffffffffffffff, 0x0, 0x0, 0x17ffffffffffe}, 0x40}, [@tmpl={0x84, 0x5, [{{@in6=@private1, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, {{@in6=@loopback, 0x4d4, 0x6c}, 0x2, @in=@rand_addr=0x64010100, 0x10001000, 0x2, 0x0, 0x2, 0x0, 0x3}]}]}, 0x13c}}, 0x0) (async)
sendmsg$NFC_CMD_DISABLE_SE(r3, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x2c, r4, 0x8, 0x70bd28, 0x25dfdbfd, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_SE_INDEX={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24004054}, 0x800) (async)

4.221074387s ago: executing program 4 (id=3424):
unshare(0x6a040000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x20000800)
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1)
bind$nfc_llcp(r0, &(0x7f0000001040)={0x27, 0x0, 0xffffffffffffffff, 0x5, 0x2, 0x0, "d32984bd1ca44c066af5160e961701a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000001200000000001900", 0x3c}, 0x60)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000600000004000000000000070000000000000000000000010500000000000c0000000000010000050000000004000000020000000000000000000000da"], &(0x7f0000000340)=""/142, 0x52, 0x8e, 0x1}, 0x28)
sendmsg$IPSET_CMD_RENAME(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[], 0x4c}, 0x1, 0x0, 0x0, 0x48000}, 0x4000000)
sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="5400000007060102000000000000000003000009"], 0x14}, 0x1, 0x0, 0x0, 0x20000090}, 0x881)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, 0x0, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newlink={0x28, 0x10, 0x801, 0x70bd2c, 0xffffffff, {0x0, 0x0, 0x0, 0x0, 0x1feff, 0x1}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0)
r3 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r3, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4)
recvmmsg(r3, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="060000000400000008"], 0x50)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700)
pwritev(r4, &(0x7f00000004c0)=[{0x0}, {0x0}, {&(0x7f0000000200)="db", 0xfffff000}], 0x3, 0x8040000, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[], 0x0, 0x3c}, 0x28)
socket$l2tp6(0xa, 0x2, 0x73)
r5 = socket$inet_sctp(0x2, 0x5, 0x84)
sendmmsg$inet_sctp(r5, &(0x7f0000005d80), 0x0, 0x44)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x14}}], 0x10)
openat$tun(0xffffffffffffff9c, &(0x7f0000000a40), 0x3, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
accept(0xffffffffffffffff, &(0x7f0000000000)=@can, 0x0)
bind$nfc_llcp(r0, &(0x7f00000000c0)={0x27, 0x0, 0x1, 0x4, 0x0, 0xff, "bac5115c7dad488702b535116fad55baf63cdd52fc30106310abb622a1c3c01c13c04df6b906288e64e96754059e65c39c5759b069d6e6d9589e5f2348878c", 0x24}, 0x60)

3.367488744s ago: executing program 1 (id=3430):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}}, 0x20004450)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000740)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NG_TYPE={0x8}, @NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_NG_DREG={0x8, 0x1, 0x1, 0x0, 0x1}]}}}, {0x10, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @val={0x4}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x94}, 0x1, 0x0, 0x0, 0x20004000}, 0x24000840)
r1 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$inet6_IPV6_DSTOPTS(0xffffffffffffffff, 0x29, 0x3b, &(0x7f0000000040)={0x84, 0x9, '\x00', [@padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x40, {0x3, 0xe, 0x7f, 0x6, [0xfffffffffffffffa, 0x9, 0xd, 0x6, 0x0, 0x3, 0x1]}}]}, 0x58)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="50000000100001002dbd7000fedbdf25000000000a4ebd36fe09f225668d182de3d8ea595ba162e1e9389c2de5fa247c7ca642", @ANYRES32=0x0, @ANYBLOB="0000000008900000140003006e657464657673696d3000000000000014001680100001800c00030001000000ffff000008000a00", @ANYRES32=0x0, @ANYBLOB], 0x50}, 0x1, 0x0, 0x0, 0x6000080}, 0x4000844)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}}, 0x20004450) (async)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000740)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NG_TYPE={0x8}, @NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_NG_DREG={0x8, 0x1, 0x1, 0x0, 0x1}]}}}, {0x10, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @val={0x4}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x94}, 0x1, 0x0, 0x0, 0x20004000}, 0x24000840) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
setsockopt$inet6_IPV6_DSTOPTS(0xffffffffffffffff, 0x29, 0x3b, &(0x7f0000000040)={0x84, 0x9, '\x00', [@padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x40, {0x3, 0xe, 0x7f, 0x6, [0xfffffffffffffffa, 0x9, 0xd, 0x6, 0x0, 0x3, 0x1]}}]}, 0x58) (async)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="50000000100001002dbd7000fedbdf25000000000a4ebd36fe09f225668d182de3d8ea595ba162e1e9389c2de5fa247c7ca642", @ANYRES32=0x0, @ANYBLOB="0000000008900000140003006e657464657673696d3000000000000014001680100001800c00030001000000ffff000008000a00", @ANYRES32=0x0, @ANYBLOB], 0x50}, 0x1, 0x0, 0x0, 0x6000080}, 0x4000844) (async)

2.83709885s ago: executing program 2 (id=3433):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000002f000903feff00000000000006"], 0x14}, 0x1, 0x0, 0x0, 0x42804}, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x1c, 0x2f, 0x9, 0x70bd27, 0x25dfdbfd, {0x4}, [@typed={0x7, 0xb, 0x0, 0x0, @str='\x05\x00\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x20040004)
pipe(&(0x7f0000000300)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
write$cgroup_devices(r3, &(0x7f0000000080)=ANY=[], 0x9)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
r5 = openat$cgroup_devices(r4, &(0x7f00000001c0)='devices.deny\x00', 0x2, 0x0)
splice(r2, 0x0, r5, 0x0, 0x5, 0x0)
recvmsg(r0, &(0x7f0000000700)={0x0, 0x0, 0x0}, 0x2000)
r6 = socket$inet_udp(0x2, 0x2, 0x0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_DESTROY(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000030405200000000000000013102e78c03500010007000000"], 0x1c}, 0x1, 0x0, 0x0, 0x20008804}, 0x0)
r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=ANY=[@ANYBLOB="600000000206010200000000000000000000000005000100070000000900020073797a300000000005000500020000001400078005001500010000000800124000000000050004000000000011000300686173683a69702c6d61726b0000000d"], 0x60}, 0x1, 0x0, 0x0, 0x4840}, 0x0)
r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
r11 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0)
r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x8, 0x1000000}, 0xfffffedf, 0x10, &(0x7f0000000040), 0xeafcf7e0, 0x0, 0xffffffffffffffff, 0xd}, 0x48)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r13=>0xffffffffffffffff, <r14=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r13, 0x1, 0x32, &(0x7f00000000c0)=r12, 0x4)
sendmsg$unix(r14, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x2)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94)
sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r10, 0x0, 0x0)
r15 = syz_open_procfs$namespace(0x0, &(0x7f0000000480)='ns/mnt\x00')
sendmsg$RDMA_NLDEV_CMD_SYS_SET(r8, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000500)={&(0x7f0000000740)=ANY=[@ANYBLOB="3c000000071401002abd7000fbdbdf2505005400010000000900020073797a310000000008004400", @ANYRES32=r10, @ANYBLOB='\b\x00D\x00', @ANYRES32=r11, @ANYBLOB='\b\x00D\x00', @ANYRES32=r15, @ANYBLOB="d29a0f90bf87adfb9a7698a40a3d054075db51b7f99e57e66c509b95fb022b2356d4ed277aeb7ec75b4bbb1f6622dd7d3970d647d8589563598da7bbfadbd232878fb0d373500ad4b153420cb2b9afd430719fdb2822e21fc64243df8fc09a9906bdf5f3b017425c90513b7795824f8bd5c811b3"], 0x3c}, 0x1, 0x0, 0x0, 0x4010}, 0x800)
setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x3d0, 0xffffffff, 0x250, 0x1b8, 0x250, 0xffffffff, 0xffffffff, 0x338, 0x338, 0x338, 0xffffffff, 0x4, 0x0, {[{{@ip={@empty, @multicast2, 0x0, 0x0, 'geneve0\x00', 'wlan0\x00', {}, {}, 0x11}, 0x0, 0x190, 0x1b8, 0x0, {0x100000000000000}, [@common=@inet=@recent0={{0xf8}, {0xd06, 0x2, 0x2, 0x0, 'syz0\x00', 0x4}}, @common=@unspec=@cgroup0={{0x28}, {0x7, 0x1}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x5}}}, {{@uncond, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x5}}}, {{@ip={@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_virt_wifi\x00', '\x00', {}, {}, 0xff}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@addrtype={{0x30}, {0x6b7, 0x500, 0x1}}, @common=@socket0={{0x20}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x7}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x430)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000080)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000180)="aabbcc", 0x3}], 0x1}}, {{&(0x7f00000001c0)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c, &(0x7f0000000200)=[{&(0x7f0000000240)="aabbcc", 0x3}], 0x1}}], 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000015c0)=@security={'security\x00', 0xe, 0x4, 0x5c8, 0xffffffff, 0x2f0, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x4f8, 0x4f8, 0x4f8, 0xffffffff, 0x4, &(0x7f0000000580), {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x3, 0x5, 0x4}, {0x3, 0x6, 0x7}}}}, {{@ipv6={@private0, @local, [0x0, 0xff000000, 0xff000000, 0xff], [0xffffff00, 0xffffffff, 0xffffff00, 0xffffffff], 'pim6reg1\x00', 'batadv0\x00', {0xff}, {}, 0x32, 0x8, 0x1, 0x50}, 0x0, 0x1e0, 0x220, 0x0, {}, [@common=@rt={{0x138}, {0x4, [0x3, 0xe], 0x22fe7ef8, 0x2, 0x2, [@private1={0xfc, 0x1, '\x00', 0x87}, @local, @loopback, @mcast1, @mcast2, @dev={0xfe, 0x80, '\x00', 0x1b}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private1, @local, @dev={0xfe, 0x80, '\x00', 0x18}, @mcast2, @loopback, @empty, @private1, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @dev={0xfe, 0x80, '\x00', 0x13}]}}]}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0xff, 0xf, 0x10000, 0x101, 0xa, 0x8, 0x1ff, 0x9]}}}, {{@uncond, 0x0, 0x1e0, 0x208, 0x0, {}, [@common=@rt={{0x138}, {0x0, [0x6, 0xfffffffd], 0x3, 0x2, 0x882f8339e16e0479, [@local, @private1={0xfc, 0x1, '\x00', 0x1}, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x36}, @ipv4={'\x00', '\xff\xff', @remote}, @remote, @local, @ipv4={'\x00', '\xff\xff', @remote}, @ipv4={'\x00', '\xff\xff', @loopback}, @remote, @local, @dev={0xfe, 0x80, '\x00', 0x40}, @remote, @remote, @empty, @ipv4={'\x00', '\xff\xff', @multicast1}], 0xd}}]}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x8000, 0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x628)

2.836298002s ago: executing program 1 (id=3434):
r0 = socket$alg(0x26, 0x5, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r1)
sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)={0x28, r2, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000003b40), r3)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r5)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_ADD_IFACE(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000002100000005002000000000000c001f00706879300a"], 0x28}}, 0x0)
sendmsg$IEEE802154_DISASSOCIATE_REQ(r3, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRES16=r6, @ANYBLOB="01002dbd7000fedbdf250300000006000800000000000500120007000000060008000000000006000800a3aa00000c0009000202aaaaaaaaaaaa0500120001000000050012000100000006000800a2aa00000c0009000201aaaaaaaaaaaa"], 0x64}, 0x1, 0x0, 0x0, 0x4010}, 0x20000000)
syz_emit_ethernet(0x46, &(0x7f0000000a80)=ANY=[@ANYBLOB="bbbbbbbbbbbb0180c200000f88a840008100100086dd66e295e600081100000000000000000000000000000000000000000000000156e04d2100089078"], 0x0)
sendmsg$NLBL_CIPSOV4_C_LISTALL(r3, &(0x7f0000003c40)={0x0, 0x0, &(0x7f0000003c00)={&(0x7f0000003b80)={0x14, r4, 0x309, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x81}, 0x4040000)
syz_genetlink_get_family_id$ieee802154(0x0, r3)
r8 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3)
setsockopt$bt_rfcomm_RFCOMM_LM(r8, 0x12, 0x3, &(0x7f0000000000)=0x8, 0x4)
bind$alg(r0, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)

2.041114129s ago: executing program 4 (id=3437):
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[], 0x31)
sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0)
r0 = socket$inet(0x2, 0x2, 0x0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4001, 0xfffffffe, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3d}, 0x1c)
clock_gettime(0x0, &(0x7f0000004a40)={<r2=>0x0, <r3=>0x0})
recvmmsg(r1, &(0x7f00000048c0)=[{{0x0, 0x0, 0x0}, 0x4}, {{0x0, 0x0, &(0x7f00000045c0)=[{0x0}, {&(0x7f00000031c0)=""/225, 0xe1}, {&(0x7f0000000100)=""/4100, 0x1004}], 0x3}, 0xfe4}, {{0x0, 0x0, &(0x7f0000002340)=[{&(0x7f0000001140)=""/4096, 0x1000}], 0x1}, 0x5}], 0x3, 0x40000021, &(0x7f0000004a80)={r2, r3+10000000})
setsockopt$sock_int(r0, 0x1, 0x5, &(0x7f0000000340)=0x6, 0x4)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x8000002)
sendmsg$inet(r0, &(0x7f0000001040)={&(0x7f0000000040)={0x2, 0xffff, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000007000000830b040a0101027f00000100000000001c000000000000000000000008"], 0x40}, 0x20008024)

2.040683149s ago: executing program 0 (id=3438):
r0 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000520001002abd70000000000002000000080001d5feffffff"], 0x1c}, 0x1, 0x0, 0x0, 0x40091}, 0x40040)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$SEG6_CMD_DUMPHMAC(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x14, r2, 0x313}, 0x14}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002d40)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48)

1.953772172s ago: executing program 3 (id=3439):
socket$nl_generic(0x10, 0x3, 0x10) (async)
r0 = socket$inet6_sctp(0xa, 0x5, 0x84) (async)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e20, @loopback}]}, &(0x7f00000002c0)=0x10) (async)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb01be1800000000000000340000003400000002000000000000000500000d000000000d0000000200000000000000e703e733aa17d0260100000006000000010000000c000000030000000400000003000000000086d813196f236acb001a8d0ce9c9ae69212b896e24d1d4cf05fcab045b97c151020000006b73db3f9088591810c34864327b107a90a362f476e848c41e4068311ad3ace7d719a62539941c"], &(0x7f00000011c0)=""/62, 0x4e, 0x3e, 0x1, 0x8}, 0x28)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={<r2=>0x0}, &(0x7f00000004c0)=0x8)
setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000280)=@assoc_value={r2, 0xff}, 0x8) (async)
bind$alg(0xffffffffffffffff, &(0x7f0000000500)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-intel\x00'}, 0x58) (async)
socket$inet(0x2, 0x3, 0x2) (async)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$TIPC_NL_KEY_SET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000017000000540006803c00040067636d286165732900000000000000000000000000000000000000000000000014000000e3de3d7b4cd07ec3ee777de774fc7987cca41989140003"], 0x68}}, 0x4008014) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
r5 = socket$nl_route(0x10, 0x3, 0x0) (async)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000500)={r6, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x4, 0x600, 0x1}}, 0x20) (async)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000080)={r6, 0xffffffffffffffff, 0x91914fb46dc00a54, 0x0, @void}, 0x10) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000c3a0f8ff4100000095"], &(0x7f0000000000)='GPL\x00', 0xc, 0x96, &(0x7f00000015c0)=""/150}, 0x94)
syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/net\x00') (async)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x16, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180000002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000004c0)={r7, 0x3, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x44) (async)
r8 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000003f00760000bb7b09417833723eab440dc0bfc752900000800000f195"], &(0x7f0000000140)='GPL\x00'}, 0x94)
bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000040)={0x0, <r9=>0x0}, 0x8)
r10 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000002c0)=r9, 0x4)
bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000000)={r10, r8, 0x4, r8}, 0x10)
sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[], 0x54}, 0x1, 0x0, 0x0, 0x24004845}, 0x2800c812)

1.856491099s ago: executing program 1 (id=3440):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
recvfrom(r0, &(0x7f0000000000)=""/4096, 0x1000, 0x120, 0x0, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001000)=@base={0xc, 0x9, 0x6, 0x3, 0x2d, 0x1, 0xfffffffe, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x4, 0x3}, 0x50)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000001080)={'batadv_slave_0\x00', <r2=>0x0})
r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000010c0)=0xffffffffffffffff, 0x4)
bpf$MAP_CREATE(0x0, &(0x7f0000001100)=@base={0xf, 0xfffffff7, 0x8, 0xb5cd, 0x1862, r1, 0xc0b9, '\x00', r2, r3, 0x0, 0x5, 0x3}, 0x50)
ioctl$XFS_IOC_SCRUBV_METADATA(r3, 0xc0285840, &(0x7f00000011c0)={0x5, 0x2, 0xb3, 0x0, 0x0, 0x4, 0x0, &(0x7f0000001180)=[{0x11, 0x589bb3387d002cff, 0x10001}, {0xc, 0xfe, 0x71b7}, {0x1f, 0xfe, 0x7}, {0x1, 0x1ff, 0xffff}]})
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001200)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f0000001240), 0x3)
r6 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000001280), 0x2, 0x0)
write$cgroup_type(r6, &(0x7f00000012c0), 0x9)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001300)='./cgroup/syz1\x00', 0x200002, 0x0)
r7 = socket(0x25, 0xa, 0x7f)
sendto$l2tp(r7, &(0x7f0000001340)="0b584d622ad3af3c5965442ee337009bf3d9d1928053ff4d34471c13984efbeb67cff36d2f6cc02f0550c143755a35f58a0fbb2095a21f90a9a10305d7c89f8bff3c319bbe83573066dd8ad469d22497ef45993c924ba323d1ebb77c17", 0x5d, 0x2c004, &(0x7f00000013c0)={0x2, 0x0, @broadcast, 0x3}, 0x10)
setsockopt$sock_linger(r5, 0x1, 0xd, &(0x7f0000001400)={0x0, 0xe}, 0x8)
ioctl$F2FS_IOC_MOVE_RANGE(r4, 0xc020f509, &(0x7f0000001440)={<r8=>r1, 0x101, 0x2, 0x4})
setsockopt$inet6_tcp_TLS_TX(r8, 0x11a, 0x1, &(0x7f0000001480)=@ccm_128={{0x303}, "4b42571efdf6ca6b", "d39f5c6b46bda8e12a2803979cf8f04f", "d22332be", "7d09fae999c185f4"}, 0x28)
setsockopt$inet6_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f00000014c0)='veno', 0x4)
sendmsg$nl_netfilter(r7, &(0x7f00000015c0)={&(0x7f0000001500)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001580)={&(0x7f0000001540)={0x20, 0x11, 0x3, 0x5, 0x70bd29, 0x25dfdbfd, {0x1, 0x0, 0x3}, [@nested={0xc, 0xbd, 0x0, 0x1, [@typed={0x8, 0x28, 0x0, 0x0, @fd=r6}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x20004000}, 0x810)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$batadv(&(0x7f0000001640), r7)
sendmsg$BATADV_CMD_SET_MESH(r9, &(0x7f0000001740)={&(0x7f0000001600)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001700)={&(0x7f0000001680)={0x4c, r10, 0x400, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x89}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x9}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0xe3e5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xf0}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xfe}]}, 0x4c}, 0x1, 0x0, 0x0, 0x80}, 0x0)
ioctl$sock_inet6_SIOCDELRT(r5, 0x890c, &(0x7f0000001780)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4, 0x40, 0x3, 0x0, 0x1, 0x1300000, r2})
r11 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
setsockopt$bt_BT_VOICE(r11, 0x112, 0xb, &(0x7f0000001800)=0x3, 0x2)
socket$inet_tcp(0x2, 0x1, 0x0)
bind$unix(r7, &(0x7f0000001840)=@file={0x0, './file0\x00'}, 0x6e)
getsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f00000018c0)={{{@in=@initdev, @in6=@initdev}}, {{@in6=@initdev}}}, &(0x7f00000019c0)=0xe8)
setsockopt$XDP_UMEM_FILL_RING(0xffffffffffffffff, 0x11b, 0x5, &(0x7f0000001a00)=0x1200001, 0x4)

1.793349231s ago: executing program 2 (id=3441):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv4_newaddr={0x28, 0x14, 0x509, 0x8070bd28, 0xfffffffa, {0x2, 0x18, 0x16d, 0x0, r1}, [@IFA_ADDRESS={0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x28}}, @IFA_LOCAL={0x8, 0x2, @loopback}]}, 0x28}, 0x1, 0x0, 0x0, 0x871ac4b30833d133}, 0x0)
r2 = socket$rxrpc(0x21, 0x2, 0xa)
setsockopt$RXRPC_SECURITY_KEY(r2, 0x110, 0x1, &(0x7f0000000080)='batadv_slave_1\x00', 0xf)
writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)="4805000015", 0x5}], 0x1)
r3 = socket$inet6(0x10, 0x3, 0x0)
sendto$inet6(r3, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b)

1.784102778s ago: executing program 0 (id=3442):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x3, 0xc, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffbfffb702000008000000b703000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = socket$l2tp6(0xa, 0x2, 0x73)
sendmmsg$inet6(r1, &(0x7f0000002880)=[{{&(0x7f00000000c0)={0xa, 0x4e21, 0xf772, @local, 0x64}, 0x1c, 0x0, 0x0, &(0x7f0000000b00)=[@flowinfo={{0x14, 0x29, 0xb, 0x4}}, @flowinfo={{0x14, 0x29, 0xb, 0x4}}, @dontfrag={{0x14, 0x29, 0x3e, 0x8000}}], 0x48}}], 0x1, 0x8000)
socket$inet_tcp(0x2, 0x1, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000006f5c000006"], 0x48)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={<r3=>r1})
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r4)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r6=>0x0})
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)={0x40, r5, 0x1, 0x72bd29, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_TX_RATES={0x24, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x14, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x3c}]}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r7)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r9=>0x0})
r10 = socket$nl_generic(0x10, 0x3, 0x10)
r11 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r10)
sendmsg$ETHTOOL_MSG_CHANNELS_SET(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x4c, r11, 0x205, 0xfffffffc, 0x25dfdbfe, {}, [@ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x1}, @ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}]}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x5}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x6}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0xfff}]}, 0x4c}, 0x1, 0x0, 0x0, 0x13fea3995e811172}, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={r0, 0xe0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, <r12=>0x0, 0x0, 0x0, 0x0, 0x4, 0x1, &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000480)=[0x0], 0x0, 0x1a, &(0x7f0000000500)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000540), &(0x7f0000000580), 0x8, 0xb, 0x8, 0x8, &(0x7f00000005c0)}}, 0x10)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000740)={'batadv0\x00', <r13=>0x0})
sendmsg$ETHTOOL_MSG_DEBUG_SET(r4, &(0x7f0000000d80)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000d40)={&(0x7f0000000b80)={0x1a0, r11, 0x10, 0x70bd2b, 0x25dfdbfd, {}, [@ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}]}, @ETHTOOL_A_DEBUG_HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}]}, @ETHTOOL_A_DEBUG_HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}]}, @ETHTOOL_A_DEBUG_MSGMASK={0xd0, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x6}, @ETHTOOL_A_BITSET_MASK={0xc3, 0x5, "0fe94078b43890557e1cef7f18c8daa035bdcc22f51f296240530e2b6cae24fc24e5c689303c43a991e804b6f30cd904b3d93316726e55c742bb28696f36f328bb1181f0cfffae1fea8f3e3067c226350928f1e648912873371549a9ae6e20d0e232878fb1e29a4635e6a600b06eb92858a9d973ab155aba84789b081468eb788029595a7353d38de86a5f427ecb4371db07bb7fde86867d487f56a5cac8d073f416385c9e927faa6679691c425adeac9f9b71c2ed5beac77b037b4a977e05"}]}]}, 0x1a0}, 0x1, 0x0, 0x0, 0x10008810}, 0x4000)
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x34, r8, 0x1, 0x73bd29, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_TX_RATES={0x18, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x14, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x5, 0x2, [{0x0, 0x2}]}, @NL80211_TXRATE_LEGACY={0x5, 0x1, [0x48]}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
sendmsg$NL80211_CMD_PROBE_CLIENT(r3, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000280)={&(0x7f0000000140)={0x4c, r5, 0x200, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x1ff, 0x3c}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000000}, 0xc804)
bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r2, 0x0, &(0x7f0000001700)=""/44}, 0x20)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r0, 0x0, 0x22, 0x0, &(0x7f0000000940)="e02742e8680d0100f510772f080070e9b38c62d9cfd853c08a6a6d605a791871001c", 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

1.662377744s ago: executing program 3 (id=3443):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000002000000851000000600000018020000", @ANYRES32, @ANYBLOB="00000000000000ffe500020000000000180000000000000000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1a00fe00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000280)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x58}, 0x94)
r1 = socket$igmp(0x2, 0x3, 0x2)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x1, 0xbf27, 0x500}, 0x48)
mmap(&(0x7f0000fa2000/0x3000)=nil, 0x3000, 0x3, 0x13, r2, 0xf3fc3000)
setsockopt$MRT_FLUSH(r1, 0x0, 0xd1, &(0x7f0000000000)=0x9, 0x4)
r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000012c0)=ANY=[@ANYBLOB="1b0000000000000000f0f5000000000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), r4)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x15, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014001a00b7060000000000008500000005000038bc0010000000000035090100b0ff00009500000000b3cee2acdb3edf7f2455a6a465ccb1000000b742000000000000db9af0fff1000000b50900000000007dd80e28ed1708b800be8a00000000000007080000f8ffff9ca26af90000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf9800000000000056080000000000008500000007000000b7000000000000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sk_reuseport, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$inet_sctp(0x2, 0x5, 0x84)

1.49923737s ago: executing program 2 (id=3444):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) (async)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c01000010000100000000000000000000000000000000000000000000000000fe8000000000000000000000000000bb0000fff720000001000000003b000000e1e4c736c00c86aecd7ed14860e8a7dd2a65cd103df1fa12b86cc6fadc57b94911640787a269d81b255c81892465742c96d222", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="64010102000000000000000000000000000000006c000000ac1414bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300000000000000000000000000000004000000000000000000000000000000000000000080000004000000000000000000004000000000000000000000000000000000000000000000000025bd70000000000002000001000000000000000008001f0004000005000000000000006c617465000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c001c00", @ANYRES32=0x0, @ANYRES8=r1], 0x14c}}, 0x4810)
unshare(0x8040480) (async)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0x32600) (async)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) (async)
r4 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x800)
sendmmsg$alg(r4, 0x0, 0x0, 0x40800) (async)
bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x3, @none, 0x3}, 0xe) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x15, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x4, 0x0, 0x0, 0x40f00}, 0x94)
bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @multicast1}, 0x10) (async)
sendto$inet(r0, &(0x7f0000000200)="ed204fbd3f91c1353b4f43d159bef1a1c20db5104800d991c35ea8cce8a0dbf11c6ffa57632c40ce553bcdb76c2815d4580bb550e2747eb806ca12a0dacb8d34d80fc2ee5036fe02b7a843bf38d07d3b7b60054d933bc45a7b2c1134ffbd49b208e3572302268c8d00000000", 0x6c, 0x1, &(0x7f0000000140)={0x2, 0x4e1c, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10)
r5 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_INIT(r5, 0x0, 0xc8, &(0x7f0000000000)=0x1, 0x4) (async)
setsockopt$MRT_ADD_VIF(r4, 0x0, 0xca, &(0x7f0000000040)={0x0, 0x4, 0x81, 0xfffffffd, @vifc_lcl_addr=@dev={0xac, 0x14, 0x14, 0x25}, @empty}, 0x10)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000800000002002000ffff000005"], 0x48)
bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x9, r7}, 0x38)
write(r6, &(0x7f0000000280)="340000001a000100000000000000000002202000000000000000000008000100e001020308000200ac1414bb0800030001000000d76eabe3135bcdb1175e7662abd37754840893da7a8d55ada8007a424c6b4385b4f0787d", 0x58)
close(0xffffffffffffffff)
r8 = socket$l2tp6(0xa, 0x2, 0x73)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r8, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x800, 0x0, 0x3, 0x1, 0x8}, 0x20)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x3a, &(0x7f0000000040)=0x2005, 0x4) (async)
socket$netlink(0x10, 0x3, 0x15)
r9 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000000)=0xffffffffffffffff, 0x4) (async)
connect$inet(r5, &(0x7f0000000080)={0x2, 0xe26, @local}, 0xa) (async)
connect$inet(r9, &(0x7f0000000180)={0x2, 0xfffa, @local}, 0x10)

1.498431627s ago: executing program 0 (id=3445):
unshare(0x6a040000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x10, 0xffffffffffffffff, 0x0)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x20000800)
socket$tipc(0x1e, 0x2, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="280000002600010328bd7000000500000000378d39000000000245cd295c87000000"], 0x28}, 0x1, 0x0, 0x0, 0x40008840}, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r2=>0x0})
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0x9, &(0x7f0000000300)=ANY=[@ANYBLOB="b7020000020000207b2ac0ff00000000632ac8ff00000000bfa200000000000007020000c0ffffffb703000040000000b704000000000000850000004500000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r3, r2, 0x25, 0x0, @void}, 0x10)
socket$inet6(0xa, 0x3, 0x7)
socketpair(0x1e, 0x3, 0xc330, 0x0)
syz_emit_ethernet(0xfdef, &(0x7f0000000100)=ANY=[], 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x101401, 0x0)
socket$can_bcm(0x1d, 0x2, 0x2)
socket(0x10, 0x3, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
socket$kcm(0xa, 0x5, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="1000000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB="fcffff0700000000000000000000000000009d972937e762f777571a", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x3, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket(0x400000000010, 0x3, 0x0)
socket$unix(0x1, 0x1, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet_udp(0x2, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000005a0000008500000022000000180100002020702500000000002020200100000000000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)

1.32754219s ago: executing program 4 (id=3446):
r0 = socket$inet6_sctp(0xa, 0x801, 0x84) (async)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0xc, &(0x7f0000000000)=@assoc_value={<r2=>0x0}, &(0x7f0000000100)=0x8)
setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r1, 0x84, 0x23, &(0x7f0000000080)={r2}, 0x8)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000700)={r2, 0x64, &(0x7f0000000680)=[@in6={0xa, 0x4e23, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}, 0xd997}, @in6={0xa, 0x4e23, 0xfffffffb, @private1={0xfc, 0x1, '\x00', 0x1}, 0xfffffffb}, @in6={0xa, 0x4e24, 0x5, @mcast1, 0x6}, @in={0x2, 0x4e24, @local}]}, &(0x7f0000000740)=0x10)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000d80)={@fallback, 0xffffffffffffffff, 0x1a, 0x28}, 0x20) (async)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @private1, 0x200000}, 0x1c) (async)
sendto$inet6(r0, &(0x7f00000001c0)='O', 0x1, 0x80, &(0x7f0000000280)={0xa, 0x0, 0x0, @private2}, 0x1c) (async)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000780)={'netdevsim0\x00'}) (async)
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x1}]}, 0x38}}, 0x0) (async)
ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f0000000000)={<r4=>r3, 0x7, 0xfff, 0xa0000000000})
sendmsg$nl_route_sched(r3, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newtfilter={0x2c, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0xffffffff, {0x0, 0xc}, {0x1}, {0x300, 0xa}}, [@TCA_RATE={0x6, 0x5, {0x3f, 0x81}}]}, 0x2c}}, 0x0)
r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000002100)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x8, &(0x7f0000000540)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r5}}]}, &(0x7f0000000640)='syzkaller\x00', 0x7, 0xf9, &(0x7f0000000080)=""/249}, 0x31)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xb, 0x6, &(0x7f0000000000)=@framed={{0x6, 0x0, 0x0, 0x0, 0x0, 0x69, 0x11, 0x4b}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x8c}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70)
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000180)=@o_path={&(0x7f0000000100)='./file0\x00', 0x0, 0x10}, 0x18)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_GET(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000080)={0x34, r7, 0xf03, 0x0, 0x0, {0x34}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x0) (async)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000400)={'sit0\x00', &(0x7f0000000340)={'gre0\x00', 0x0, 0x700, 0x700, 0x67b6, 0x8, {{0x26, 0x4, 0x2, 0xe, 0x98, 0x64, 0x0, 0x71, 0x29, 0x0, @local, @private=0xa010100, {[@ssrr={0x89, 0x7, 0xf3, [@initdev={0xac, 0x1e, 0x1, 0x0}]}, @end, @rr={0x7, 0xb, 0x12, [@private=0xa010102, @dev={0xac, 0x14, 0x14, 0x18}]}, @noop, @generic={0x92, 0xb, "de4e90419856e2a66b"}, @timestamp={0x44, 0x18, 0xcf, 0x0, 0x8, [0x5, 0x6, 0x9, 0xfff, 0x1]}, @generic={0x7, 0xa, "2feb6905935610a2"}, @generic={0x86, 0x12, "ae435c97b3e5d049aad067f7ecd931d6"}, @timestamp_prespec={0x44, 0x4, 0x6e, 0x3, 0x8}, @timestamp_prespec={0x44, 0x2c, 0x5, 0x3, 0xd, [{@multicast1, 0x166}, {@multicast2, 0x1ff}, {@broadcast, 0x7fffffff}, {@rand_addr=0x64010100, 0x8}, {@dev={0xac, 0x14, 0x14, 0xb}, 0xc0f7}]}]}}}}}) (async)
shutdown(r0, 0x1)
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r9 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NBD_CMD_CONNECT(r8, &(0x7f0000001c40)={0x0, 0x0, &(0x7f0000001c00)={&(0x7f0000000bc0)={0x30, r9, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x9}]}, 0x30}}, 0x0)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000300)={0x0, 0x4}, 0x8) (async)
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7c, &(0x7f00000000c0), &(0x7f0000000180)=0x8)

1.30415504s ago: executing program 3 (id=3447):
r0 = socket(0x2b, 0x80801, 0x1)
connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e23, 0x1, @ipv4={'\x00', '\xff\xff', @empty}, 0xfffffffe}, 0x1c)
setsockopt$WPAN_WANTLQI(r0, 0x300, 0x3, 0x0, 0x0)
r1 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'vlan1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001300)=@newtfilter={0x4c, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x8, 0xfff3}, {}, {0xfff3, 0xffff}}, [@filter_kind_options=@f_flow={{0x12}, {0x1c, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x11442}, @TCA_FLOW_DIVISOR={0x8, 0x8, 0x74}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20041090}, 0x50)

1.161199253s ago: executing program 2 (id=3448):
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[], 0x31)
sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0)
r0 = socket$inet(0x2, 0x2, 0x0)
setsockopt$sock_int(r0, 0x1, 0x5, &(0x7f0000000340)=0x6, 0x4)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x8000002)
sendmsg$inet(r0, &(0x7f0000001040)={&(0x7f0000000040)={0x2, 0xffff, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000001100000000000007000000830b040a0101027f00000100000000001c000000000000000000000008"], 0x40}, 0x20008024)

1.066529345s ago: executing program 4 (id=3449):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3f}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MULTI_BOOLOPT={0xc, 0x2e, {0x0, 0x3}}]}}}]}, 0x40}}, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$devlink(&(0x7f00000009c0), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r1, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000a00)={0x64, r2, 0x1, 0x70bd2d, 0x25dfdbff, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x4}, {0x6, 0x16, 0xb}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x80}, {0x8, 0xb, 0x6}}]}, 0x64}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
ioctl$NILFS_IOCTL_RESIZE(r1, 0x40086e8b, &(0x7f0000000040)=0x8000000000000)
r3 = socket$nl_rdma(0x10, 0x3, 0x14)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000b40)=@base={0x19, 0x4, 0x8, 0x5}, 0x50)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r4, <r6=>0xffffffffffffffff}, &(0x7f0000000380), &(0x7f0000000580)=r5}, 0x20)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
r7 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="200000001500010000000000000000002d"], 0x20}}, 0x0)
ioctl$int_in(r6, 0x5421, &(0x7f0000000080)=0x800)
r8 = socket(0x28, 0x5, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r4, &(0x7f00000003c0)="6814", &(0x7f00000004c0)=@tcp=r8}, 0x20)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r5, 0x702, 0xb90, 0x0, &(0x7f0000000380)="eb00140000000010000000000000", 0x0, 0x3d6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000700)=ANY=[@ANYBLOB="2000000017140197"], 0x20}}, 0x0)

1.039231252s ago: executing program 3 (id=3450):
pipe(&(0x7f0000019480)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
vmsplice(r1, &(0x7f0000000b40)=[{&(0x7f00000000c0)="dc", 0x1}, {&(0x7f0000000c40)="76ea7117b1", 0x5}, {&(0x7f0000000480)="eb", 0x1}, {&(0x7f0000000000)='`', 0x1}, {&(0x7f0000000080)="cb", 0x1}, {&(0x7f00000011c0)="b4", 0x1}, {&(0x7f0000000340)='t', 0x1}, {&(0x7f0000000180)="a2", 0x1}, {&(0x7f0000000580)="fa", 0x1}, {&(0x7f0000000640)="c0", 0x1}, {&(0x7f0000000700)="ad", 0x1}, {&(0x7f0000000740)="b1", 0x1}, {&(0x7f0000000200)="c5", 0x1}, {&(0x7f0000000880)="e5", 0x1}, {&(0x7f0000000940)="c5", 0x1}, {&(0x7f0000000a40)="94", 0x1}], 0x10, 0x3)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff)
sendmsg$TIPC_NL_LINK_SET(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01060000000000000000090000003c0004801300010062726f6164636173742d6c696e6b000024000780080005000000000008000300ff00"], 0x50}}, 0x0)
sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=@newsa={0x19c, 0x10, 0x1, 0x70bc2c, 0x8000000, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0xecdf, 0x0, 0x0, 0x2}, {@in6=@ipv4={'\x00', '\xff\xff', @multicast1}, 0x0, 0x32}, @in6=@empty, {0xfffffffffffffffe, 0xfffffffffffffffe, 0x3, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x9}, {0x1, 0x400800, 0x9, 0x292}, {0x1000}, 0x0, 0x3507, 0x2, 0x4, 0x0, 0x2c}, [@algo_crypt={0x60, 0x2, {{'cbc(twofish)\x00'}, 0xc0, "6e000b000018002000000000000000007ffffffe00001818"}}, @algo_auth_trunc={0x4c, 0x14, {{'hmac(sha256)\x00'}, 0x0, 0x60}}]}, 0x19c}}, 0x44050)
close(r1)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000300)=0x1, 0x4)
connect$inet(r5, &(0x7f00000006c0)={0x2, 0x0, @empty}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000000900)=0xffffffffffffffff, 0x4)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), r1)
splice(r0, 0x0, r1, 0x0, 0x10500, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000400), 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000dc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=@newlink={0x74, 0x10, 0x400, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x1000, 0x8000}, [@IFLA_PROTO_DOWN={0x5, 0x27, 0x3}, @IFLA_LINK_NETNSID={0x8, 0x25, 0x1}, @IFLA_GROUP={0x8, 0x1b, 0x1}, @IFLA_IFNAME={0x14, 0x3, 'pim6reg1\x00'}, @IFLA_EXT_MASK={0x8, 0x1d, 0x5}, @IFLA_LINK_NETNSID={0x8, 0x25, 0x3}, @IFLA_PORT_SELF={0x18, 0x19, 0x0, 0x1, [@IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "407821a937b778553111f37747612b9f"}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x2000c000}, 0x40000)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r6, 0x2800000002000000, 0xe, 0x55, &(0x7f0000000140)="a06ad876d56a0064d082778c3938", &(0x7f0000000380)=""/85, 0x600, 0x4000000}, 0x28)
pipe(&(0x7f0000019480)) (async)
vmsplice(r1, &(0x7f0000000b40)=[{&(0x7f00000000c0)="dc", 0x1}, {&(0x7f0000000c40)="76ea7117b1", 0x5}, {&(0x7f0000000480)="eb", 0x1}, {&(0x7f0000000000)='`', 0x1}, {&(0x7f0000000080)="cb", 0x1}, {&(0x7f00000011c0)="b4", 0x1}, {&(0x7f0000000340)='t', 0x1}, {&(0x7f0000000180)="a2", 0x1}, {&(0x7f0000000580)="fa", 0x1}, {&(0x7f0000000640)="c0", 0x1}, {&(0x7f0000000700)="ad", 0x1}, {&(0x7f0000000740)="b1", 0x1}, {&(0x7f0000000200)="c5", 0x1}, {&(0x7f0000000880)="e5", 0x1}, {&(0x7f0000000940)="c5", 0x1}, {&(0x7f0000000a40)="94", 0x1}], 0x10, 0x3) (async)
socket$nl_xfrm(0x10, 0x3, 0x6) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff) (async)
sendmsg$TIPC_NL_LINK_SET(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01060000000000000000090000003c0004801300010062726f6164636173742d6c696e6b000024000780080005000000000008000300ff00"], 0x50}}, 0x0) (async)
sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=@newsa={0x19c, 0x10, 0x1, 0x70bc2c, 0x8000000, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0xecdf, 0x0, 0x0, 0x2}, {@in6=@ipv4={'\x00', '\xff\xff', @multicast1}, 0x0, 0x32}, @in6=@empty, {0xfffffffffffffffe, 0xfffffffffffffffe, 0x3, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x9}, {0x1, 0x400800, 0x9, 0x292}, {0x1000}, 0x0, 0x3507, 0x2, 0x4, 0x0, 0x2c}, [@algo_crypt={0x60, 0x2, {{'cbc(twofish)\x00'}, 0xc0, "6e000b000018002000000000000000007ffffffe00001818"}}, @algo_auth_trunc={0x4c, 0x14, {{'hmac(sha256)\x00'}, 0x0, 0x60}}]}, 0x19c}}, 0x44050) (async)
close(r1) (async)
socket$inet_tcp(0x2, 0x1, 0x0) (async)
setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000300)=0x1, 0x4) (async)
connect$inet(r5, &(0x7f00000006c0)={0x2, 0x0, @empty}, 0x10) (async)
setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000000900)=0xffffffffffffffff, 0x4) (async)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), r1) (async)
splice(r0, 0x0, r1, 0x0, 0x10500, 0x0) (async)
write$cgroup_subtree(r1, &(0x7f0000000400), 0x0) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000dc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) (async)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=@newlink={0x74, 0x10, 0x400, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x1000, 0x8000}, [@IFLA_PROTO_DOWN={0x5, 0x27, 0x3}, @IFLA_LINK_NETNSID={0x8, 0x25, 0x1}, @IFLA_GROUP={0x8, 0x1b, 0x1}, @IFLA_IFNAME={0x14, 0x3, 'pim6reg1\x00'}, @IFLA_EXT_MASK={0x8, 0x1d, 0x5}, @IFLA_LINK_NETNSID={0x8, 0x25, 0x3}, @IFLA_PORT_SELF={0x18, 0x19, 0x0, 0x1, [@IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "407821a937b778553111f37747612b9f"}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x2000c000}, 0x40000) (async)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r6, 0x2800000002000000, 0xe, 0x55, &(0x7f0000000140)="a06ad876d56a0064d082778c3938", &(0x7f0000000380)=""/85, 0x600, 0x4000000}, 0x28) (async)

941.695551ms ago: executing program 2 (id=3451):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newlink={0x38, 0x10, 0x801, 0xfffffffd, 0x8000000, {0x0, 0x0, 0x0, 0x0, 0x1000}, [@IFLA_GROUP={0x8}, @IFLA_AF_SPEC={0x10, 0x1a, 0x0, 0x1, [@AF_INET6={0xc, 0x2d, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x3e}]}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4040000}, 0x8024)
socket$inet6_sctp(0xa, 0x1, 0x84)
r1 = socket$kcm(0x21, 0x2, 0x2)
r2 = socket$xdp(0x2c, 0x3, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0)
r3 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_mreqsrc(r3, 0x0, 0x28, &(0x7f0000000000)={@rand_addr=0x64010101, @empty, @dev={0xac, 0x14, 0x14, 0xf}}, 0xc)
r4 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r4, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
recvmmsg(r4, &(0x7f0000005700)=[{{0x0, 0x0, &(0x7f0000003380)}, 0x4}], 0x1, 0x0, 0x0)
r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
bind$bt_l2cap(r5, &(0x7f00000007c0)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x4}, 0xe)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = socket$inet6_udp(0xa, 0x2, 0x0)
r7 = socket(0xa, 0x5, 0x0)
syz_emit_ethernet(0x46, 0x0, 0x0)
sendmsg$inet_sctp(r7, &(0x7f0000001640)={&(0x7f0000000080)=@in={0x2, 0x4e22, @local}, 0x10, 0x0, 0xa0c799938c8633f6, &(0x7f0000000200)=ANY=[@ANYBLOB="300000010000000084000000010000000100e900048000005df2000008000000080000000100000003000000a7d544b8cdf00e601ff054465f91439f3b8b311b4fa175019734c8385a00cf985e32fb579cadd3db531c201a139b1d446205f6af867d6562f9f8e5b1862d2df50d73c11c541b7f162afefec7b0f6e09912788a934bc6c2e104b6ea63e607ff0f2f2ad566af46cff5b339", @ANYRES32=r7], 0x30, 0x4040800}, 0x28040841)
setsockopt$inet6_int(r7, 0x29, 0xb, 0x0, 0x0)
setsockopt$inet6_udp_int(r6, 0x11, 0x66, &(0x7f0000000180)=0x5, 0x4)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1000000000021, 0x0, 0x0)
syz_emit_ethernet(0x86, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x23, 0x1, "56805c734ee222c29de4125f81f6e030a5441a99f362cd24e0a1ac2291500733", "467f517bd818d5a4a8d26ae61b4cbf13", {"31ffc21d2e9bfb1eb3c03976ed837b6f", "876605ac29dcb96a8901e0711afb3db3"}}}}}}}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x60ff78ce1cb3c070}, 0x94)
r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000007300)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000006200)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c)
ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r4, 0x4058587a, &(0x7f0000000700)={{r1, &(0x7f00000004c0)='\x00', 0x503102, &(0x7f0000000500)={@_ha_fsid={[0xffff, 0xffffffff]}, {0x100, 0x9e, 0x5, 0x7e}}, 0x1, &(0x7f0000000540), &(0x7f00000005c0)=0x8}, {[0x7, 0x400, 0x2, 0x5]}, 0x6, 0x3e, &(0x7f00000006c0)=""/62})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e20, @remote}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0)
sendmsg$kcm(r1, 0x0, 0x20000000)
sendmsg$kcm(r1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="1800000000000000100100000100000051d833483cc75d51900000000000000004000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62"], 0x10b8}, 0x0)

829.590205ms ago: executing program 1 (id=3452):
unshare(0x2020600)
unshare(0x4040c00) (async)
unshare(0x4040c00)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/mnt\x00')
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newlink={0x3c, 0x10, 0x49920d862a92153b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x403}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x3f, 0x2, 0x0, 0x1, @void}}}, @IFLA_NET_NS_FD={0x8, 0x1c, r1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x0)

659.898071ms ago: executing program 1 (id=3453):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="fc0000001900010000000000fcdbdf2500000000000000000000000000000000fe8000000000000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000040000000000000000000000006c00000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000010000000000000044000500"], 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x4000000)

585.665254ms ago: executing program 0 (id=3454):
r0 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000100000)=""/8169, 0x2000, 0x800, 0x0, 0x2}, 0x20)
bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYRESDEC=r0, @ANYRES16=r0, @ANYBLOB="00000000000000ff2d855c96ffffe20000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0x10, &(0x7f0000000600)=ANY=[@ANYRES16=r0, @ANYRES32, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES8=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x18, 0x10, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESOCT=0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4)
sendmsg$unix(r3, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x4008000)
setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000040)=0x10, 0x4)
setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000080)=0x10, 0x4)
setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x10, 0x4)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, &(0x7f00000001c0)={'wg1\x00'})
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00', <r6=>0x0})
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r9=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r9, @ANYBLOB="080005001900000073c18b73792543af174ecfa8b71e09b0b8b88231bc56aab9dba742f0cb369733c4fa61eee3c2e2ba1ac4bf4c6df795d3bdaffed5428816851c03c5ae3d8a16c7d9fdfd"], 0x24}}, 0x0)
r10 = socket$netlink(0x10, 0x3, 0x0)
r11 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
getsockopt$sock_buf(r11, 0x1, 0x1c, &(0x7f0000000400)=""/230, &(0x7f0000000500)=0xe6)
ioctl$sock_SIOCBRDELBR(r10, 0x89a2, &(0x7f0000000000)='bridge0\x00')
syz_80211_join_ibss(&(0x7f00000002c0)='wlan1\x00', 0x0, 0x0, 0x0)
bind$xdp(r0, &(0x7f00000003c0)={0x2c, 0x2, r6, 0x0, 0x0}, 0x10)
r12 = socket$inet6_tcp(0xa, 0x1, 0x0)
r13 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
sendmmsg$inet(r13, &(0x7f0000002b40)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000280)={0x2, 0x4e26, @local}, 0x10, &(0x7f00000002c0)=[{0x0}], 0x1}}], 0x2, 0x2000c044)
setsockopt$inet6_tcp_int(r12, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4)

585.023973ms ago: executing program 4 (id=3455):
r0 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4)
ioctl$sock_bt_bnep_BNEPCONNDEL(r0, 0x400442c9, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x3, 0x4, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8}, [@generic={0x91, 0x1, 0x1, 0x80}]}, &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb}, 0x94)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB], 0xc8}}, 0x20050800)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x9, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000180)=r3, 0x4)
sendmsg$inet(r5, 0x0, 0x20000000)
pipe(&(0x7f0000000040)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
ppoll(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a090000000000000000000200000009000200737903000000000008000440000000000900010073797a300000"], 0x64}}, 0x0)
sendmsg$IPSET_CMD_FLUSH(r1, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000200)={&(0x7f0000000900)=ANY=[@ANYBLOB="300000004ebfde528e5128040b010200000000200000000200000505000100070000100900020073797a310000000005f70000010472d20413c4326e4b5f628cbc3c6e8979d26b3e83a29f6bc4c3f9794e9201be02f2eebb5185c485ecec7daa914d99a3e6ceebc0a04db24ccd0d336b4a33f657e535873cf7749e2782de0ab243d2311a7c6a7c1fae3054786fe3c6494a246389e76212518341953a9078b2e6172919b805c4bf"], 0x30}, 0x1, 0x0, 0x0, 0x4040}, 0x4000000)
r9 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$inet6_tcp_int(r9, 0x6, 0xc, &(0x7f0000000500)=0x6, 0x4)
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r10, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=ANY=[@ANYBLOB="2400000003010102000000000000363f01"], 0x24}, 0x1, 0x0, 0x0, 0x8010}, 0x20004c00)
socket$nl_netfilter(0x10, 0x3, 0xc)
r11 = syz_genetlink_get_family_id$batadv(&(0x7f0000000380), r7)
sendmsg$BATADV_CMD_GET_VLAN(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000800)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="08002abd7000fedbdf25110000000600280003000000080031000400000008002b0008000000dd7f3858d39fd0058f9ea209581f8d2438de7da548bae0e11817b27d5b8146f80d88e9987a70ca1bfdb4b2cc8f3e12cc038c87225ee20fcc2f403308c630a7a52877f747775acc669eff2c5548346732d780c8cf07509b9f8345233aaecdf58c381995c0e93678e9e13e3913a768df4cd26250b8d23b3b15e0fcee49dce5a5301d3974b0ee2cc589d48a3111e080f0028b56c182c3d444f93a948f6a900abb5c3dd08d169e5ebc1969843d59319e2d534b21495e1f485d8167fc33962c00fdd1d3ef1a705da2fb"], 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x4000)
r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r13 = syz_genetlink_get_family_id$nbd(&(0x7f0000000580), 0xffffffffffffffff)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={<r14=>0xffffffffffffffff})
sendmsg$NBD_CMD_CONNECT(r12, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x3c, r13, 0x1, 0xfffffffe, 0x0, {}, [@NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r14}}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffff}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000001}, 0x20000000)
r15 = socket$nl_generic(0x10, 0x3, 0x10)
r16 = syz_genetlink_get_family_id$tipc2(&(0x7f0000006340), 0xffffffffffffffff)
sendmsg$TIPC_NL_PEER_REMOVE(r15, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000700)=ANY=[@ANYBLOB="20000000d9579736125545a1c1d1d70173c9103f397f3916596e5436dc3af4193723e09235680d7fbe1b0f979650d89bf589f8e4975803a44b60c551a667729a0e1fee11575914cb28933e8e72df72cab3eeac9f7e9f5072218a9062fec88bc8074fa205ecfdbc809de703c550f00437beee3c1933c2d8a174614da6d1c0366d9426a1c1874356f284b91c409ab9358d306422a47f4f98dfcab2fd96202be539b8cae15187802fa85433429b70f77785e6b368f929ba38de5c", @ANYRES16=r16, @ANYBLOB="000125bd7000ffdbdf25140000000c0007800800020000000000"], 0x20}, 0x1, 0x0, 0x0, 0x60000000}, 0x4000000)

552.391332ms ago: executing program 3 (id=3456):
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[], 0x31)
sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0)
r0 = socket$inet(0x2, 0x2, 0x0)
setsockopt$sock_int(r0, 0x1, 0x5, &(0x7f0000000340)=0x6, 0x4)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1f, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005080000000000008200000018010000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000048000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a6000000850000000700000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x35, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x8000002)
sendmsg$can_raw(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000200)=@can={{0x0, 0x1, 0x1}, 0x1, 0x3, 0x0, 0x0, "0000000000000005"}, 0x10}, 0x2, 0x0, 0x0, 0x24000884}, 0x0)
r3 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r3, &(0x7f00000014c0)={0x2, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="0218000014000000000000000000000005000500000000000a00ffff00000000fe8000000000000000000000000000aa0000000000000000080012000000000003000000000000003000000000000000000000000000000002000002000000000000000000000000fc010000000000000000000000000000050006006c0000000a"], 0xa0}}, 0x0)
sendmsg$inet(r0, &(0x7f0000001040)={&(0x7f0000000040)={0x2, 0xffff, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000007000000830b040a0101027f00000100000000001c000000000000000000000008"], 0x40}, 0x20008024)

362.742475ms ago: executing program 1 (id=3457):
epoll_create1(0x0)
socket(0x29, 0x800, 0x1)
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000380)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c)
sendmmsg$sock(r0, &(0x7f00000048c0)=[{{&(0x7f0000000400)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x4, 0x0, 0x3, 0x0, {0xa, 0x4e23, 0x0, @private2, 0x1}}}, 0x80, 0x0}}], 0x1, 0x24050070)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x2c, 0x10, 0x801, 0x70bd2e, 0x25dfdbf7, {0x0, 0x0, 0x0, 0x0, 0x2202e}, [@IFLA_XDP={0x4}, @IFLA_GROUP={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20048050}, 0x20000090)
r2 = socket$igmp6(0xa, 0x3, 0x2)
r3 = socket$netlink(0x10, 0x3, 0xc)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, 0x0, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000700)={0x1b, 0x0, 0x0, 0x40000}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001380)={0x11, 0x14, 0x0, &(0x7f00000001c0)='GPL\x00', 0x9, 0x0, 0x0, 0x41100, 0x61}, 0x94)
r5 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r5, &(0x7f00000000c0)={0x18, 0x0, {0x4, @local, 'veth0_to_team\x00'}}, 0x1e)
r6 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r6, &(0x7f0000000040)={0x18, 0x0, {0x1, @broadcast, 'ip6gre0\x00'}}, 0x1e)
r7 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r7, &(0x7f0000000080)={0x18, 0x0, {0x4, @remote, 'veth0_virt_wifi\x00'}}, 0x1e)
ioctl$XFS_IOC_SCRUB_METADATA(r3, 0xc040583c, &(0x7f00000004c0)={0x0, 0x121, 0x7, 0x2f, 0x6})
r8 = socket$igmp(0x2, 0x3, 0x2)
getsockopt$EBT_SO_GET_INFO(r8, 0x0, 0x80, &(0x7f0000000040)={'broute\x00', 0x0, 0x0, 0x0, [0x0, 0x80000001, 0x6, 0x1, 0x6, 0x424a244d]}, &(0x7f00000000c0)=0x78)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r9, 0x0, 0x4000080)
accept$packet(r0, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0)
r10 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r10, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0xfffffffd, @empty, 0x3}, 0x1c)
setsockopt$inet6_int(r10, 0x29, 0x2, &(0x7f0000004240)=0xc3, 0x4)
getsockopt$inet6_opts(r2, 0x29, 0x36, &(0x7f0000000380)=""/95, &(0x7f0000000400)=0x5f)
setsockopt$inet6_int(r10, 0x29, 0x8, &(0x7f0000000000)=0x7f, 0x4)

362.398695ms ago: executing program 3 (id=3458):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000200)={r0, <r1=>0xffffffffffffffff}, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xb}, [@generic={0x91, 0x1, 0x1, 0xba}]}, &(0x7f0000000c40)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffff9}, 0x57) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000007b8a00fe0000000087080000000000007b8af0ff00000000bda100000000000027000000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000008000000850000004900000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)

305.62812ms ago: executing program 0 (id=3459):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
connect$tipc(0xffffffffffffffff, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x2, {0x0, 0x0, 0x3}}, 0x10)
sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000300)=ANY=[], 0xb0}, 0x1, 0x0, 0x0, 0x4040840}, 0xc011)
sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x510000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="280000000306010300000000000000000200000705000100070000000900020073797a3000000000473fa45a345d6e6c6fb76cbb3ccdb50c016dfdb814c91f7c94b237f506bfbaea229de7a4f3c115e77fa9d16e2758352d5aae8989debe821d7b279d48b304891d26551a4d6b79f6804d5a17753eb8668d0c14ed6a15f2291720f5ccd2"], 0x28}, 0x1, 0x0, 0x0, 0x90}, 0x8)

133.131676ms ago: executing program 0 (id=3460):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008188040f46ecdb4cb9cca7480ef441000000e3bd6efb440009000e000a000d000000ba8000001201", 0x2e}], 0x1}, 0x24000040)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'gretap0\x00', <r2=>0x0})
socket$kcm(0xa, 0x922000000003, 0x11)
r3 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="48000000150081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418f0f000000d6e74703c48f93b8", 0x48}], 0x1}, 0x0)
r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x12, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000008f000000000000000500000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000700008500000086000000bf09200000000000770901000000000095000000000000001800000004000000000000000c000000cd90fcff00000000bf91000000000000b702000003000000850000002a000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x1, 0x0, 0x0, 0x41100}, 0x94)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010000104fcffffff8000000000000000", @ANYRES32=0x0, @ANYBLOB="05170000fffe0002140012800b0001006d616373656300000400028008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00B'], 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0)

0s ago: executing program 2 (id=3461):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x9}]}, &(0x7f00000002c0)=0x10)
setsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000000)={0x0, 0x6, 0x42964110, 0x10}, 0x10)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000000)={0x1, [<r2=>0x0]}, &(0x7f0000000080)=0x8)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x84, &(0x7f0000000280)={r2, @in={{0x2, 0x4e24, @empty}}, 0x0, 0x83}, 0x90)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
ioctl$TUNSETQUEUE(r3, 0x400454d9, &(0x7f0000000280)={'ipvlan1\x00', 0x400})
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x8, 0x32, 0xffffffffffffffff, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000700000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000340)={@empty, 0x3, 0x0, 0x1, 0x2, 0x2, 0x4}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r4, <r6=>0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000200)=r5}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{r6}, &(0x7f0000000180)=0x20000, &(0x7f00000001c0)=r5}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r6}, &(0x7f0000000500)=0x2000000, &(0x7f0000000540)=r5}, 0x20)
r7 = socket$inet6_udp(0xa, 0x2, 0x0)
r8 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'bridge0\x00', <r9=>0x0})
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f0000000140)={'ip6_vti0\x00', &(0x7f00000005c0)={'syztnl2\x00', <r10=>r9, 0x29, 0x4, 0x3, 0x80000001, 0x2e, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, @private1, 0x20, 0x8, 0x100, 0x1}})
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r7, 0x89f3, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000040)={'syztnl2\x00', r10, 0x29, 0x84, 0x4, 0x4038a0b, 0x11, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2={0xff, 0x5}, 0x20, 0x0, 0x0, 0x4}})
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000480)={r6, &(0x7f00000005c0)}, 0x20)
r11 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000300)={r11, <r12=>0xffffffffffffffff}, 0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x11, 0x10, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000020000007b8af0ff00000000bfa100000000000004010000f8ffffffbfa400000000000007040000f0ffffffb70200000800002f18230000", @ANYRES32=r12, @ANYBLOB="0000000000000000b70500000800000085000000a50000009500000000000000"], &(0x7f0000000240)='GPL\x00', 0x4, 0x4, &(0x7f0000002500)=""/4105, 0x0, 0x68}, 0x94)
r13 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
ioctl$TUNSETIFF(r13, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x7101})
close(r13)

kernel console output (not intermixed with test programs):

stack_lvl+0xe8/0x150
[  375.889479][T15260]  should_fail_ex+0x410/0x560
[  375.889518][T15260]  should_failslab+0xa8/0x100
[  375.889550][T15260]  __kmalloc_noprof+0xfe/0x720
[  375.889577][T15260]  ? security_sk_alloc+0x52/0x360
[  375.889694][T15260]  ? security_sk_alloc+0x52/0x360
[  375.889725][T15260]  ? __kmalloc_noprof+0x1af/0x720
[  375.889755][T15260]  security_sk_alloc+0x52/0x360
[  375.889783][T15260]  sk_prot_alloc+0x101/0x210
[  375.889821][T15260]  ? sk_alloc+0x27/0x390
[  375.889854][T15260]  sk_alloc+0x3a/0x390
[  375.889890][T15260]  bpf_prog_test_run_skb+0x3a6/0x2230
[  375.889948][T15260]  ? __fget_files+0x3a2/0x420
[  375.889978][T15260]  ? __fget_files+0x2a/0x420
[  375.890013][T15260]  ? __pfx_bpf_prog_test_run_skb+0x10/0x10
[  375.890049][T15260]  bpf_prog_test_run+0x2c5/0x340
[  375.890087][T15260]  __sys_bpf+0xa22/0xd90
[  375.890128][T15260]  ? __pfx___sys_bpf+0x10/0x10
[  375.890172][T15260]  ? __fget_files+0x2a/0x420
[  375.890222][T15260]  ? ksys_write+0x242/0x270
[  375.890279][T15260]  ? __pfx_ksys_write+0x10/0x10
[  375.890318][T15260]  __x64_sys_bpf+0xba/0xd0
[  375.890349][T15260]  do_syscall_64+0x166/0x520
[  375.890374][T15260]  ? trace_irq_disable+0x3b/0x140
[  375.890403][T15260]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  375.890426][T15260]  ? clear_bhb_loop+0x70/0xc0
[  375.890454][T15260]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  375.890477][T15260] RIP: 0033:0x7f3e8399e0d9
[  375.890498][T15260] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  375.890517][T15260] RSP: 002b:00007f3e84926028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  375.890541][T15260] RAX: ffffffffffffffda RBX: 00007f3e83c25fa0 RCX: 00007f3e8399e0d9
[  375.890556][T15260] RDX: 000000000000004c RSI: 0000200000000240 RDI: 000000000000000a
[  375.890570][T15260] RBP: 00007f3e84926090 R08: 0000000000000000 R09: 0000000000000000
[  375.890584][T15260] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  375.890597][T15260] R13: 00007f3e83c26038 R14: 00007f3e83c25fa0 R15: 00007ffcd6b08a48
[  375.890632][T15260]  </TASK>
[  376.288857][T15267] FAULT_INJECTION: forcing a failure.
[  376.288857][T15267] name failslab, interval 1, probability 0, space 0, times 0
[  376.323307][T15270] Bluetooth: hci0: invalid length 0, exp 2 for type 0
[  376.340475][T15267] CPU: 0 UID: 0 PID: 15267 Comm: syz.1.2596 Not tainted syzkaller #0 PREEMPT(full) 
[  376.340512][T15267] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  376.340524][T15267] Call Trace:
[  376.340533][T15267]  <TASK>
[  376.340542][T15267]  dump_stack_lvl+0xe8/0x150
[  376.340583][T15267]  should_fail_ex+0x410/0x560
[  376.340625][T15267]  should_failslab+0xa8/0x100
[  376.340659][T15267]  kmem_cache_alloc_noprof+0xa6/0x5f0
[  376.340686][T15267]  ? dst_alloc+0x105/0x170
[  376.340824][T15267]  ? dst_alloc+0x105/0x170
[  376.340855][T15267]  dst_alloc+0x105/0x170
[  376.340898][T15267]  ip_route_output_key_hash_rcu+0x14ac/0x2720
[  376.340993][T15267]  ? ip_route_output_key_hash_rcu+0x1331/0x2720
[  376.341026][T15267]  ? ip_route_output_key_hash+0xd8/0x2a0
[  376.341051][T15267]  ip_route_output_key_hash+0x18d/0x2a0
[  376.341079][T15267]  ? __pfx_ip_route_output_key_hash+0x10/0x10
[  376.341122][T15267]  ip_route_output_flow+0x2a/0x150
[  376.341154][T15267]  ? security_sk_classify_flow+0x6d/0x150
[  376.341186][T15267]  raw_sendmsg+0x110d/0x1a20
[  376.341264][T15267]  ? __pfx_raw_sendmsg+0x10/0x10
[  376.341352][T15267]  ? aa_sk_perm+0x6e0/0x910
[  376.341434][T15267]  ? sock_rps_record_flow+0x19/0x350
[  376.341484][T15267]  ? inet_sendmsg+0x298/0x320
[  376.341509][T15267]  ? __pfx_inet_sendmsg+0x10/0x10
[  376.341530][T15267]  sock_sendmsg_nosec+0x10e/0x180
[  376.341558][T15267]  ____sys_sendmsg+0x54e/0x850
[  376.341598][T15267]  ? __pfx_____sys_sendmsg+0x10/0x10
[  376.341642][T15267]  ? import_iovec+0x73/0xa0
[  376.341670][T15267]  ___sys_sendmsg+0x2a5/0x360
[  376.341702][T15267]  ? __lock_acquire+0x683/0x2cf0
[  376.341741][T15267]  ? __pfx____sys_sendmsg+0x10/0x10
[  376.341814][T15267]  ? __fget_files+0x2a/0x420
[  376.341844][T15267]  ? __fget_files+0x3a2/0x420
[  376.341894][T15267]  __x64_sys_sendmsg+0x1b1/0x290
[  376.341931][T15267]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  376.341989][T15267]  do_syscall_64+0x166/0x520
[  376.342017][T15267]  ? trace_irq_disable+0x3b/0x140
[  376.342046][T15267]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  376.342069][T15267]  ? clear_bhb_loop+0x70/0xc0
[  376.342095][T15267]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  376.342116][T15267] RIP: 0033:0x7f9f5719e0d9
[  376.342135][T15267] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  376.342153][T15267] RSP: 002b:00007f9f57ff6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  376.342176][T15267] RAX: ffffffffffffffda RBX: 00007f9f57425fa0 RCX: 00007f9f5719e0d9
[  376.342192][T15267] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003
[  376.342206][T15267] RBP: 00007f9f57ff6090 R08: 0000000000000000 R09: 0000000000000000
[  376.342230][T15267] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  376.342254][T15267] R13: 00007f9f57426038 R14: 00007f9f57425fa0 R15: 00007ffed5b042f8
[  376.342289][T15267]  </TASK>
[  376.788100][   T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  376.979638][T15288] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2604'.
[  377.028441][T15290] ���*�A^�m��: renamed from lo (while UP)
[  377.052350][T15288] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR
[  377.295222][T15301] block nbd2: server does not support multiple connections per device.
[  377.402127][T15301] block nbd2: shutting down sockets
[  377.611888][T15328] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2617'.
[  377.631653][T15328] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2617'.
[  377.655068][T15328] netlink: 'syz.3.2617': attribute type 18 has an invalid length.
[  377.934634][   T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  377.984610][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  378.035254][T15314] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  378.043788][T15314] Bluetooth: hci1: Error when powering off device on rfkill (-4)
[  378.078050][T15314] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  378.087364][T15314] Bluetooth: hci3: Error when powering off device on rfkill (-4)
[  378.116861][T15314] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  378.124056][T15314] Bluetooth: hci4: Error when powering off device on rfkill (-4)
[  378.128206][ T3323] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  378.140165][ T3323] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  378.186057][T15314] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  378.200457][T15314] Bluetooth: hci2: Error when powering off device on rfkill (-4)
[  378.530892][T15366] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  378.772580][ T1309] ieee802154 phy0 wpan0: encryption failed: -22
[  379.006234][    C1] net_ratelimit: 3 callbacks suppressed
[  379.006257][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  379.047010][   T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  379.079479][T15394] __nla_validate_parse: 1 callbacks suppressed
[  379.079500][T15394] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2635'.
[  379.700115][T15427] rdma_op ffff888031471238 conn xmit_rdma 0000000000000000
[  379.832970][T15427] ip6tnl4: entered promiscuous mode
[  379.920428][T15432] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2646'.
[  379.969810][T15433] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2646'.
[  380.046005][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  380.167370][  T173] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  380.300596][T15445] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2651'.
[  381.210358][T15493] netlink: 'syz.2.2666': attribute type 1 has an invalid length.
[  381.304645][   T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  381.323802][T15493] bond9: option mode: invalid value (9)
[  381.341287][T15494] netlink: 'syz.2.2666': attribute type 10 has an invalid length.
[  381.398742][T15493] bond9 (unregistering): Released all slaves
[  381.412272][T15494] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2666'.
[  381.469045][T15497] dummy0: left promiscuous mode
[  381.630552][T15502] bond8: option packets_per_slave: mode dependency failed, not supported in mode balance-tlb(5)
[  381.674291][T15502] bond8 (unregistering): Released all slaves
[  381.693913][T15511] FAULT_INJECTION: forcing a failure.
[  381.693913][T15511] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  381.708070][T15511] CPU: 1 UID: 0 PID: 15511 Comm: syz.1.2670 Not tainted syzkaller #0 PREEMPT(full) 
[  381.708100][T15511] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  381.708113][T15511] Call Trace:
[  381.708122][T15511]  <TASK>
[  381.708130][T15511]  dump_stack_lvl+0xe8/0x150
[  381.708168][T15511]  should_fail_ex+0x410/0x560
[  381.708207][T15511]  _copy_to_user+0x31/0xb0
[  381.708233][T15511]  bpf_test_finish+0x52e/0x690
[  381.708268][T15511]  ? __pfx_bpf_test_finish+0x10/0x10
[  381.708304][T15511]  bpf_prog_test_run_skb+0x11fe/0x2230
[  381.708364][T15511]  ? __fget_files+0x3a2/0x420
[  381.708394][T15511]  ? __fget_files+0x2a/0x420
[  381.708429][T15511]  ? __pfx_bpf_prog_test_run_skb+0x10/0x10
[  381.708466][T15511]  bpf_prog_test_run+0x2c5/0x340
[  381.708504][T15511]  __sys_bpf+0xa22/0xd90
[  381.708546][T15511]  ? __pfx___sys_bpf+0x10/0x10
[  381.708589][T15511]  ? __fget_files+0x2a/0x420
[  381.708641][T15511]  ? ksys_write+0x242/0x270
[  381.708677][T15511]  ? __pfx_ksys_write+0x10/0x10
[  381.708724][T15511]  __x64_sys_bpf+0xba/0xd0
[  381.708757][T15511]  do_syscall_64+0x166/0x520
[  381.708782][T15511]  ? trace_irq_disable+0x3b/0x140
[  381.708811][T15511]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  381.708834][T15511]  ? clear_bhb_loop+0x70/0xc0
[  381.708862][T15511]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  381.708884][T15511] RIP: 0033:0x7f9f5719e0d9
[  381.708905][T15511] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  381.708923][T15511] RSP: 002b:00007f9f57ff6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  381.708946][T15511] RAX: ffffffffffffffda RBX: 00007f9f57425fa0 RCX: 00007f9f5719e0d9
[  381.708962][T15511] RDX: 000000000000004c RSI: 0000200000000240 RDI: 000000000000000a
[  381.708976][T15511] RBP: 00007f9f57ff6090 R08: 0000000000000000 R09: 0000000000000000
[  381.708990][T15511] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  381.709002][T15511] R13: 00007f9f57426038 R14: 00007f9f57425fa0 R15: 00007ffed5b042f8
[  381.709038][T15511]  </TASK>
[  381.930614][T15513] netlink: 'syz.3.2669': attribute type 11 has an invalid length.
[  381.939002][T15513] netlink: 4320 bytes leftover after parsing attributes in process `syz.3.2669'.
[  381.949221][T15494] dummy0: entered promiscuous mode
[  382.012856][T15516] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  382.100956][T15516] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  382.137644][T15516] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  382.180291][T15517] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  382.195154][T15517] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  382.309264][T15525] netlink: 5 bytes leftover after parsing attributes in process `syz.4.2674'.
[  382.360025][T15529] netlink: 176 bytes leftover after parsing attributes in process `syz.2.2676'.
[  382.399646][T15530] netlink: 176 bytes leftover after parsing attributes in process `syz.2.2676'.
[  382.409837][T15532] bridge0: entered allmulticast mode
[  382.420515][T15532] team0: left allmulticast mode
[  382.439652][T15532] team_slave_0: left allmulticast mode
[  382.455133][T15532] team_slave_1: left allmulticast mode
[  382.470463][T15532] veth5: left allmulticast mode
[  382.488279][T15532] team0: left promiscuous mode
[  382.513616][T15532] team_slave_0: left promiscuous mode
[  382.531536][T15532] team_slave_1: left promiscuous mode
[  382.545831][T15532] veth5: left promiscuous mode
[  382.556242][T15532] bridge0: port 3(team0) entered disabled state
[  382.577928][T15532] bridge_slave_1: left allmulticast mode
[  382.590616][T15532] bridge_slave_1: left promiscuous mode
[  382.623324][T15532] bridge0: port 2(bridge_slave_1) entered disabled state
[  382.688076][T15539] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2680'.
[  382.724999][T15532] bridge_slave_0: left allmulticast mode
[  382.746878][T15532] bridge_slave_0: left promiscuous mode
[  382.764797][T15532] bridge0: port 1(bridge_slave_0) entered disabled state
[  383.045412][T15555] tipc: New replicast peer: 255.255.255.255
[  383.052365][T15555] tipc: Enabled bearer <udp:syz2>, priority 10
[  383.069979][T15555] netlink: 'syz.3.2683': attribute type 1 has an invalid length.
[  383.278163][T15555] bond7: entered promiscuous mode
[  383.313567][T15555] 8021q: adding VLAN 0 to HW filter on device bond7
[  383.431310][T15563] bond7: (slave bridge3): making interface the new active one
[  383.441023][T15571] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  383.472170][T15563] bridge3: entered promiscuous mode
[  383.483892][T15563] bond7: (slave bridge3): Enslaving as an active interface with an up link
[  384.046566][    C1] net_ratelimit: 9 callbacks suppressed
[  384.046591][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  384.380248][T15606] __nla_validate_parse: 7 callbacks suppressed
[  384.380269][T15606] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2700'.
[  384.482765][T15606] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2700'.
[  384.504974][T15611] netlink: 'syz.3.2700': attribute type 1 has an invalid length.
[  384.697054][  T173] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  385.086605][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  385.241127][   T59] nci: nci_ntf_packet: unknown ntf opcode 0x104
[  385.826303][ T3323] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  386.298487][T15690] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2727'.
[  386.967280][   T59] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  387.032592][T15702] syzkaller0: entered promiscuous mode
[  387.059548][T15702] syzkaller0: entered allmulticast mode
[  387.068458][T15699] syzkaller0: left promiscuous mode
[  387.074103][T15699] syzkaller0: left allmulticast mode
[  388.056645][T15639] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  388.065776][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  388.074742][   T59] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  388.089454][T15699] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2730'.
[  388.832874][T15734] netlink: 'syz.2.2736': attribute type 10 has an invalid length.
[  388.863148][T15715] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  388.896752][T15715] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  389.084518][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  389.214971][ T3323] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  389.645356][  T173] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  389.653655][  T173] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  389.662533][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  389.741587][T15759] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2744'.
[  389.762687][T15764] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2745'.
[  389.829429][T15771] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2747'.
[  390.124619][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  390.142812][T15779] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2749'.
[  390.324777][T15779] bond8: option lacp_active: invalid value (5)
[  390.355107][  T135] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  390.374626][T15779] bond8 (unregistering): Released all slaves
[  390.762106][T15801] netlink: 'syz.1.2757': attribute type 10 has an invalid length.
[  390.787142][T15801] netlink: 2 bytes leftover after parsing attributes in process `syz.1.2757'.
[  390.822545][T15801] bond0: entered promiscuous mode
[  390.829887][T15801] bond_slave_0: entered promiscuous mode
[  390.836358][T15801] bond_slave_1: entered promiscuous mode
[  390.842915][T15801] bridge0: port 1(bond0) entered blocking state
[  390.850809][T15801] bridge0: port 1(bond0) entered disabled state
[  390.860022][T15801] bond0: entered allmulticast mode
[  390.865661][T15801] bond_slave_0: entered allmulticast mode
[  390.871658][T15801] bond_slave_1: entered allmulticast mode
[  390.894837][T15801] bridge0: port 1(bond0) entered blocking state
[  390.901361][T15801] bridge0: port 1(bond0) entered listening state
[  390.956247][T15809] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2759'.
[  391.203808][T15808] bond9: option active_slave: mode dependency failed, not supported in mode balance-rr(0)
[  391.256074][T15808] bond9 (unregistering): Released all slaves
[  391.484831][   T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  391.580953][T15835] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  391.598437][T15835] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  392.192827][T15831] netlink: 'syz.4.2765': attribute type 10 has an invalid length.
[  392.779403][T15885] netlink: 180 bytes leftover after parsing attributes in process `syz.2.2784'.
[  393.670753][T15928] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2798'.
[  393.698613][T15928] dummy0: left promiscuous mode
[  393.719598][T15928] netlink: 'syz.2.2798': attribute type 10 has an invalid length.
[  393.758452][T15928] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2798'.
[  393.789948][T15928] dummy0: entered promiscuous mode
[  394.107194][T15939] net_ratelimit: 7 callbacks suppressed
[  394.107216][T15939] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  394.125777][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  394.133983][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  394.171732][T15942] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  394.834862][  T135] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  395.166048][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  395.301411][T15974] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2809'.
[  395.385258][T15977] netlink: 172 bytes leftover after parsing attributes in process `syz.2.2809'.
[  395.405527][   T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  395.413837][   T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  395.422899][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  395.492178][T15984] netlink: 'syz.4.2813': attribute type 10 has an invalid length.
[  395.501135][T15984] netlink: 2 bytes leftover after parsing attributes in process `syz.4.2813'.
[  395.510668][T15984] bond0: entered promiscuous mode
[  395.516687][T15984] bond_slave_1: entered promiscuous mode
[  395.524495][T15984] 8021q: adding VLAN 0 to HW filter on device bond0
[  395.532015][T15984] bridge0: port 3(bond0) entered blocking state
[  395.539832][T15984] bridge0: port 3(bond0) entered disabled state
[  395.547460][T15984] bond0: entered allmulticast mode
[  395.552706][T15985] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2811'.
[  395.552861][T15984] bond_slave_1: entered allmulticast mode
[  395.571049][T15984] bond0: left allmulticast mode
[  395.576399][T15984] bond_slave_1: left allmulticast mode
[  395.583916][T15985] dummy0: left promiscuous mode
[  395.596374][T15985] netlink: 'syz.0.2811': attribute type 10 has an invalid length.
[  395.604885][T15985] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2811'.
[  395.614151][T15985] dummy0: entered promiscuous mode
[  395.636103][ T3323] bond0: (slave bond_slave_1): link status definitely down, disabling slave
[  395.650782][ T3323] bond0: now running without any active interface!
[  395.974741][ T3323] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  397.809243][T15955] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  398.054625][T15992] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2815'.
[  398.069888][T15999] xt_hashlimit: max too large, truncated to 1048576
[  398.539923][T16023] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2826'.
[  398.561781][T16014] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2825'.
[  398.836242][T16029] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2828'.
[  398.881413][T16029] dummy0: left promiscuous mode
[  398.926087][T16029] netlink: 'syz.4.2828': attribute type 10 has an invalid length.
[  398.965325][T16029] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2828'.
[  398.982240][T16029] dummy0: entered promiscuous mode
[  399.167592][    C1] net_ratelimit: 2186 callbacks suppressed
[  399.167616][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  399.249233][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  399.346664][  T173] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  400.204596][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  400.465083][ T1165] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  400.524618][    C0] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured!
[  401.165307][   T59] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  401.173577][   T59] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  401.182302][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  401.574721][ T1165] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  401.871135][T16034] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  402.255405][T16137] __nla_validate_parse: 4 callbacks suppressed
[  402.255426][T16137] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2857'.
[  402.299726][T16137] openvswitch: netlink: Missing key (keys=40, expected=100)
[  402.918568][T16163] sctp: [Deprecated]: syz.2.2866 (pid 16163) Use of int in max_burst socket option.
[  402.918568][T16163] Use struct sctp_assoc_value instead
[  402.991752][ T5629] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  403.007333][ T5629] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  403.019817][ T5629] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  403.032776][ T5629] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  403.040745][ T5629] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  403.089509][ T5621] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  403.097844][ T5621] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  403.106464][ T5621] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  403.122776][ T5621] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  403.132736][ T5621] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  403.530859][ T3323] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 4352 - 0
[  403.561480][ T3323] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 48450 - 0
[  403.753717][ T3323] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 4352 - 0
[  403.782246][ T3323] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 48450 - 0
[  403.914003][ T3323] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 4352 - 0
[  403.957583][ T3323] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 48450 - 0
[  404.075433][ T3323] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 4352 - 0
[  404.085540][ T3323] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 48450 - 0
[  404.214503][    C1] net_ratelimit: 3 callbacks suppressed
[  404.214525][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  404.248377][T16165] lo speed is unknown, defaulting to 1000
[  404.306337][T16165] lo speed is unknown, defaulting to 1000
[  404.538098][T16218] IPVS: set_ctl: invalid protocol: 47 224.0.0.1:20003
[  404.925398][  T135] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  405.144087][ T3323] dvmrp8: left allmulticast mode
[  405.165150][ T5621] Bluetooth: hci5: command tx timeout
[  405.179778][ T3323] batman_adv: batadv0: Interface deactivated: gretap1
[  405.245458][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  405.661347][ T3323] batman_adv: batadv0: Removing interface: gretap1
[  405.803001][ T3323] bond7 (unregistering): (slave bridge3): Releasing backup interface
[  405.817368][ T3323] bridge3 (unregistering): left promiscuous mode
[  405.840000][ T3323] bond0 (unregistering): Released all slaves
[  405.851671][ T3323] bond1 (unregistering): Released all slaves
[  405.871102][ T3323] bond2 (unregistering): Released all slaves
[  405.901320][ T3323] bond3 (unregistering): Released all slaves
[  405.918578][ T3323] bond4 (unregistering): Released all slaves
[  405.938866][ T3323] bond5 (unregistering): Released all slaves
[  405.961585][ T3323] bond6 (unregistering): Released all slaves
[  405.979698][ T3323] bond7 (unregistering): Released all slaves
[  406.015879][T16236] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2883'.
[  406.025564][T16236] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2883'.
[  406.047071][   T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  406.314126][ T3323] tipc: Disabling bearer <eth:syzkaller0>
[  406.347822][ T3323] tipc: Disabling bearer <udp:syz0>
[  406.371903][ T3323] tipc: Disabling bearer <udp:syz2>
[  406.411805][ T3323] tipc: Left network mode
[  406.930676][   T59] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  406.938968][   T59] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  406.948093][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  407.190878][ T1012] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  407.244715][ T5621] Bluetooth: hci5: command tx timeout
[  407.462781][T16288] lo speed is unknown, defaulting to 1000
[  407.612882][T16288] lo speed is unknown, defaulting to 1000
[  407.740483][T16305] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2897'.
[  407.790354][T16309] dummy0: Caught tx_queue_len zero misconfig
[  407.797195][T16165] bridge0: port 1(bridge_slave_0) entered blocking state
[  407.807759][T16165] bridge0: port 1(bridge_slave_0) entered disabled state
[  407.815510][T16165] bridge_slave_0: entered allmulticast mode
[  407.823505][T16165] bridge_slave_0: entered promiscuous mode
[  407.860291][T16313] netlink: 'syz.1.2897': attribute type 10 has an invalid length.
[  407.869268][T16313] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2897'.
[  407.887448][T16311] dummy0: left promiscuous mode
[  407.918123][T16165] bridge0: port 2(bridge_slave_1) entered blocking state
[  407.949665][T16165] bridge0: port 2(bridge_slave_1) entered disabled state
[  407.972262][T16165] bridge_slave_1: entered allmulticast mode
[  407.981819][T16165] bridge_slave_1: entered promiscuous mode
[  407.991467][T16313] dummy0: entered promiscuous mode
[  408.088332][T16318] netlink: 'syz.4.2899': attribute type 2 has an invalid length.
[  408.147308][ T5274] 8021q: adding VLAN 0 to HW filter on device eth1
[  408.225174][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  408.271823][T16165] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  408.325812][   T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  408.359330][T16165] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  408.386180][T16325] netlink: 'syz.0.2902': attribute type 13 has an invalid length.
[  408.465425][T16327] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2902'.
[  408.615161][T16165] team0: Port device team_slave_0 added
[  408.857178][T16165] team0: Port device team_slave_1 added
[  409.060517][T16165] batman_adv: batadv0: Adding interface: batadv_slave_0
[  409.095859][T16165] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  409.169621][T16351] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2905'.
[  409.187149][T16165] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  409.236712][T16165] batman_adv: batadv0: Adding interface: batadv_slave_1
[  409.244509][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  409.254472][T16165] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  409.293498][T16165] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  409.325857][ T5621] Bluetooth: hci5: command tx timeout
[  409.391577][ T3323] hsr_slave_0: left promiscuous mode
[  409.398565][ T3323] hsr_slave_1: left promiscuous mode
[  409.456918][   T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  409.978918][ T5274] 8021q: adding VLAN 0 to HW filter on device eth2
[  410.083996][T16165] hsr_slave_0: entered promiscuous mode
[  410.091811][T16165] hsr_slave_1: entered promiscuous mode
[  410.099850][T16165] debugfs: 'hsr0' already exists in 'hsr'
[  410.106164][T16165] Cannot create hsr debugfs directory
[  410.284561][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  410.485922][ T3323] IPVS: stop unused estimator thread 0...
[  410.585260][ T3323] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  410.962396][T16165] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  410.977679][T16165] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  410.987608][T16165] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  411.002154][T16165] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  411.013602][T16165] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  411.028621][T16165] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  411.037869][T16165] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  411.049666][T16165] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  411.179729][T16165] 8021q: adding VLAN 0 to HW filter on device bond0
[  411.205578][T16165] 8021q: adding VLAN 0 to HW filter on device team0
[  411.224559][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[  411.231797][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[  411.250934][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[  411.258192][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[  411.405122][ T5621] Bluetooth: hci5: command tx timeout
[  411.706013][ T1012] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  411.852506][T16165] 8021q: adding VLAN 0 to HW filter on device batadv0
[  411.926125][T16165] veth0_vlan: entered promiscuous mode
[  411.941971][T16165] veth1_vlan: entered promiscuous mode
[  411.992441][T16165] veth0_macvtap: entered promiscuous mode
[  412.009171][T16165] veth1_macvtap: entered promiscuous mode
[  412.040768][T16165] batman_adv: batadv0: Interface activated: batadv_slave_0
[  412.062285][T16165] batman_adv: batadv0: Interface activated: batadv_slave_1
[  412.116929][ T1012] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  412.189204][   T59] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  412.233374][   T59] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  412.252332][   T59] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  412.282112][ T1012] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  412.298037][ T1012] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  412.351824][ T1012] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  412.361825][ T1012] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  412.685739][   T59] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  412.694110][   T59] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  412.702788][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  412.840271][ T3323] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  413.274704][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  414.294581][    C1] net_ratelimit: 1 callbacks suppressed
[  414.294602][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  415.044721][ T1165] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  415.324642][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  416.144999][ T1165] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  417.245016][   T59] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  418.304624][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  418.354842][   T59] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  418.445272][   T59] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  418.453491][   T59] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  418.462192][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  419.324574][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  419.454635][   T59] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  420.364789][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  420.554969][   T59] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  421.004824][    C0] bridge0: port 1(bond0) entered learning state
[  421.654751][   T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  422.755203][   T59] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  423.344656][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  423.855029][   T59] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  424.206008][ T3323] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  424.214254][ T3323] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  424.364570][    C1] net_ratelimit: 1 callbacks suppressed
[  424.364594][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  424.955445][ T1012] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  425.404575][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  426.055099][   T59] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  427.154961][ T1012] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  427.404976][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  428.255138][   T59] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  428.384609][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  429.325498][   T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  429.333695][   T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  429.404565][    C1] net_ratelimit: 2 callbacks suppressed
[  429.404588][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  430.444636][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  430.465101][   T59] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  431.565132][ T1012] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  432.665434][   T59] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  433.424616][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  433.764954][ T1012] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  434.446327][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  434.874923][ T1012] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  435.086317][ T1012] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  435.094687][ T1012] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  435.103388][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  435.484712][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  435.985246][ T1012] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  437.085402][   T59] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  438.204878][ T3323] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  438.464746][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  439.484558][    C1] net_ratelimit: 1 callbacks suppressed
[  439.484581][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  440.205989][ T1309] ieee802154 phy0 wpan0: encryption failed: -22
[  440.415070][ T1012] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  440.524731][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  440.845813][ T3323] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  440.854108][ T3323] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  440.863047][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  441.514816][   T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  442.614830][   T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  443.504689][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  443.714885][ T1012] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  444.524596][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  444.835261][   T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  445.564588][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  445.934815][   T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  446.605638][ T3323] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  446.613923][ T3323] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  446.622667][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  447.044866][ T1012] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  448.144897][ T1012] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  448.544602][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  449.564547][    C1] net_ratelimit: 1 callbacks suppressed
[  449.564570][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  450.354854][ T1012] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  450.604645][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  451.084512][    C0] bridge0: port 1(bond0) entered forwarding state
[  451.091018][    C0] bridge0: topology change detected, propagating
[  451.454820][ T3323] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  452.365657][ T1012] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  452.373878][ T1012] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  452.382701][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  452.554876][ T3323] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  453.584530][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  453.655081][ T3323] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  454.604584][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  454.754789][   T59] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  455.644513][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  455.854871][ T1165] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  456.954939][ T1165] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  458.064880][ T1012] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  458.125640][   T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  458.133879][   T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  458.142520][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  458.624578][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  459.644593][    C1] net_ratelimit: 1 callbacks suppressed
[  459.644675][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  460.275072][   T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  460.684699][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  461.375026][   T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  462.474706][ T1165] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  463.584703][   T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  463.664575][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  463.885262][ T3323] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  463.893481][ T3323] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  463.902578][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  464.684538][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  464.694950][ T1165] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  465.725028][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  465.805496][ T1165] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  465.814833][    C0] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured!
[  466.924975][ T1165] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  468.024872][ T1165] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  468.704567][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  469.124930][   T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  469.645439][   T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  469.653709][   T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  469.724605][    C1] net_ratelimit: 1 callbacks suppressed
[  469.724623][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  470.234787][ T1165] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  470.764584][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  471.335060][ T3323] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  472.445203][ T1165] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  473.544838][ T3323] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  473.744507][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  474.644858][   T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  474.764588][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  474.773506][   T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  474.781725][   T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  474.790502][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  475.744932][   T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  475.804633][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  476.855050][   T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  477.954773][ T3323] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  478.784624][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  479.054852][ T1165] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  479.804523][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  479.885217][ T1165] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  479.893441][ T1165] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  479.902200][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  480.155034][ T1165] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  480.844623][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  481.254823][   T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  482.354637][ T1165] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  483.455113][ T1012] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  483.824650][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  484.844533][    C1] net_ratelimit: 1 callbacks suppressed
[  484.844560][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  485.006824][   T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  485.015086][   T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  485.023710][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  485.664796][ T3323] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  485.884573][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  486.284770][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  486.764729][ T1012] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  487.864997][ T3323] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  488.864569][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  489.884555][    C1] net_ratelimit: 1 callbacks suppressed
[  489.884577][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  490.064824][   T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  490.765229][ T1165] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  490.773486][ T1165] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  490.782176][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  490.924513][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  491.184688][ T1165] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  492.284757][ T3323] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  493.405110][ T1165] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  493.904538][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  494.924546][    C1] net_ratelimit: 1 callbacks suppressed
[  494.924568][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  495.614808][ T1012] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  495.964630][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  496.525527][ T1012] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  496.533740][ T1012] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  496.542414][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  496.724844][ T1012] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  497.825076][ T1012] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  498.924883][ T3323] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  498.944558][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  499.767844][T16512] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2907'.
[  499.800604][T16512] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2907'.
[  499.826829][T16512] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2907'.
[  499.856863][T16515] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2909'.
[  499.923447][T16515] netlink: 'syz.3.2909': attribute type 10 has an invalid length.
[  499.963742][T16515] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2909'.
[  499.973189][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  500.016503][T16515] dummy0: entered promiscuous mode
[  500.028070][   T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  500.102973][ T5629] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  500.127548][ T5629] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  500.147633][ T5629] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  500.159828][ T5629] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  500.169898][ T5629] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  500.682077][T16549] block nbd3: Unsupported socket: should be TCP or UNIX.
[  500.985188][T16557] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2920'.
[  501.004540][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  501.049574][   T12] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  501.064133][   T12] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  501.105301][T16557] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2920'.
[  501.164732][ T1165] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  501.337944][   T12] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  501.362152][   T12] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  501.378806][T16575] netlink: 'syz.2.2922': attribute type 16 has an invalid length.
[  501.424770][T16575] netlink: 'syz.2.2922': attribute type 17 has an invalid length.
[  501.443346][T16575] netlink: 'syz.2.2922': attribute type 27 has an invalid length.
[  501.493235][T16570] tipc: Resetting bearer <eth:syz_tun>
[  501.505350][T16570] tipc: Resetting bearer <eth:syz_tun>
[  501.649809][ T1309] ieee802154 phy0 wpan0: encryption failed: -22
[  501.665452][    T9] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured!
[  501.759091][   T12] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  501.784125][   T12] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  501.845700][T16521] lo speed is unknown, defaulting to 1000
[  501.851884][T16586] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  501.888723][T16521] lo speed is unknown, defaulting to 1000
[  501.943055][T16593] netlink: zone id is out of range
[  501.963923][T16593] netlink: zone id is out of range
[  501.993886][T16593] netlink: zone id is out of range
[  501.999609][ T5732] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured!
[  502.028898][T16593] netlink: zone id is out of range
[  502.064453][T16593] netlink: zone id is out of range
[  502.081521][   T12] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  502.122391][T16593] netlink: zone id is out of range
[  502.130178][   T12] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  502.204835][ T5621] Bluetooth: hci3: command tx timeout
[  502.401189][T16587] lo speed is unknown, defaulting to 1000
[  502.425365][T16587] lo speed is unknown, defaulting to 1000
[  502.825415][   T12] vlan2: left allmulticast mode
[  502.831837][   T12] veth1_to_bond: left allmulticast mode
[  502.857186][   T12] vlan2: left promiscuous mode
[  502.868756][   T12] veth1_to_bond: left promiscuous mode
[  502.888045][   T12] bridge0: port 2(vlan2) entered disabled state
[  502.916842][   T12] bridge_slave_0: left allmulticast mode
[  502.935555][   T12] bridge_slave_0: left promiscuous mode
[  502.942849][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  503.071462][T16626] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2934'.
[  503.243931][   T12] bond4 (unregistering): (slave geneve3): Releasing active interface
[  503.372446][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  503.389556][   T12] bond_slave_1: left promiscuous mode
[  503.396109][   T12] bond0 (unregistering): Released all slaves
[  503.408648][   T12] bond1 (unregistering): Released all slaves
[  503.424976][   T12] bond2 (unregistering): Released all slaves
[  503.442404][   T12] bond3 (unregistering): Released all slaves
[  503.458914][   T12] bond4 (unregistering): Released all slaves
[  503.476349][   T12] bond5 (unregistering): Released all slaves
[  503.507976][   T12] bond6 (unregistering): Released all slaves
[  503.525249][   T12] bond7 (unregistering): Released all slaves
[  503.712769][   T12] tipc: Disabling bearer <udp:syz2>
[  503.722817][   T12] tipc: Disabling bearer <udp:syz0>
[  503.752676][   T12] tipc: Left network mode
[  504.238757][T16649] Bluetooth: MGMT ver 1.23
[  504.294631][ T5621] Bluetooth: hci3: command tx timeout
[  505.004751][    C1] net_ratelimit: 11 callbacks suppressed
[  505.004776][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  505.022039][T16521] bridge0: port 1(bridge_slave_0) entered blocking state
[  505.047956][T16521] bridge0: port 1(bridge_slave_0) entered disabled state
[  505.074149][T16521] bridge_slave_0: entered allmulticast mode
[  505.113517][T16521] bridge_slave_0: entered promiscuous mode
[  505.141360][T16521] bridge0: port 2(bridge_slave_1) entered blocking state
[  505.177693][T16521] bridge0: port 2(bridge_slave_1) entered disabled state
[  505.202343][T16521] bridge_slave_1: entered allmulticast mode
[  505.232982][T16521] bridge_slave_1: entered promiscuous mode
[  505.269126][   T12] hsr_slave_0: left promiscuous mode
[  505.292728][   T12] hsr_slave_1: left promiscuous mode
[  505.316874][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  505.591287][T16697] netlink: 'syz.3.2946': attribute type 1 has an invalid length.
[  505.635985][ T3323] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  505.697233][   T12] team0 (unregistering): Port device team_slave_1 removed
[  505.732854][   T12] team0 (unregistering): Port device team_slave_0 removed
[  505.990247][T16699] netlink: 'syz.1.2947': attribute type 2 has an invalid length.
[  506.029978][ T5621] block nbd3: Receive control failed (result -104)
[  506.037279][ T5629] block nbd3: Receive control failed (result -32)
[  506.044469][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  506.088856][ T5274] 8021q: adding VLAN 0 to HW filter on device eth1
[  506.289597][T16521] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  506.302140][ T1165] smbdirect: ib_dev[syz2] removed
[  506.362808][T16521] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  506.386445][ T5621] Bluetooth: hci3: command tx timeout
[  506.583431][T16521] team0: Port device team_slave_0 added
[  506.616719][T16521] team0: Port device team_slave_1 added
[  506.797746][  T173] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  506.833407][T16521] batman_adv: batadv0: Adding interface: batadv_slave_0
[  506.847123][   T12] IPVS: stop unused estimator thread 0...
[  506.853549][T16521] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  506.918202][T16521] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  506.966764][T16521] batman_adv: batadv0: Adding interface: batadv_slave_1
[  507.006848][T16521] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  507.100167][T16521] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  507.118387][T16740] netlink: 6212 bytes leftover after parsing attributes in process `syz.1.2957'.
[  507.372650][T16521] hsr_slave_0: entered promiscuous mode
[  507.398841][T16521] hsr_slave_1: entered promiscuous mode
[  507.426160][T16521] debugfs: 'hsr0' already exists in 'hsr'
[  507.443439][T16521] Cannot create hsr debugfs directory
[  507.573634][T16754] syzkaller0: entered promiscuous mode
[  507.594622][T16754] syzkaller0: entered allmulticast mode
[  507.802673][T16764] syzkaller0: entered promiscuous mode
[  507.830854][T16764] syzkaller0: entered allmulticast mode
[  507.924623][  T173] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  508.330646][ T5274] 8021q: adding VLAN 0 to HW filter on device eth2
[  508.346632][T16785] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  508.355206][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  508.392274][T16785] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  508.403095][ T3323] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  508.424765][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  508.446808][ T5621] Bluetooth: hci3: command tx timeout
[  509.437147][T16830] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2973'.
[  509.991806][T16521] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  510.041943][T16848] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2977'.
[  510.044874][    C1] net_ratelimit: 4 callbacks suppressed
[  510.044944][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  510.099696][T16521] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  510.123148][T16853] dummy0: left promiscuous mode
[  510.156989][ T3323] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  510.171044][T16848] netlink: 'syz.2.2977': attribute type 10 has an invalid length.
[  510.171991][T16521] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  510.208284][T16848] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2977'.
[  510.210623][T16521] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  510.325896][T16855] bond5: Unable to set peer notification delay as MII monitoring is disabled
[  510.360889][T16855] bond5 (unregistering): Released all slaves
[  510.428405][T16521] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  510.479923][T16521] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  510.505814][T16848] dummy0: entered promiscuous mode
[  510.544016][T16521] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  510.591284][T16521] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  510.984197][T16521] 8021q: adding VLAN 0 to HW filter on device bond0
[  511.038187][T16521] 8021q: adding VLAN 0 to HW filter on device team0
[  511.084631][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  511.098500][ T3323] bridge0: port 1(bridge_slave_0) entered blocking state
[  511.105820][ T3323] bridge0: port 1(bridge_slave_0) entered forwarding state
[  511.202526][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[  511.209791][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[  511.285105][  T173] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  511.895282][    C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  512.204115][T16918] syzkaller0: entered promiscuous mode
[  512.227312][T16918] syzkaller0: entered allmulticast mode
[  512.281278][T16893] pim6reg: entered allmulticast mode
[  512.415994][   T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  512.887654][T16949] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2995'.
[  513.543277][  T135] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  514.064475][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  514.706196][  T135] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  515.084471][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  515.739838][  T173] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  515.748122][  T173] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  515.757063][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  515.824626][  T135] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  516.124606][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  516.929227][  T173] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  517.585386][T16521] 8021q: adding VLAN 0 to HW filter on device batadv0
[  517.603352][T17021] netlink: 'syz.0.3004': attribute type 2 has an invalid length.
[  517.631099][T17021] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3004'.
[  517.690524][T17028] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3004'.
[  517.795979][T17034] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3006'.
[  517.832116][T17032] netlink: 'syz.2.3005': attribute type 1 has an invalid length.
[  518.065214][ T1012] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  518.137709][T17020] netlink: 'syz.3.3002': attribute type 4 has an invalid length.
[  518.617851][T17066] ovs-s!: entered promiscuous mode
[  518.691344][T16521] veth0_vlan: entered promiscuous mode
[  518.754233][T16521] veth1_vlan: entered promiscuous mode
[  518.983424][T16521] veth0_macvtap: entered promiscuous mode
[  519.061735][T16521] veth1_macvtap: entered promiscuous mode
[  519.104653][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  519.138049][T17094] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  519.153824][T16521] batman_adv: batadv0: Interface activated: batadv_slave_0
[  519.206601][T17095] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3018'.
[  519.217492][T16521] batman_adv: batadv0: Interface activated: batadv_slave_1
[  519.253660][T17095] netlink: 140 bytes leftover after parsing attributes in process `syz.3.3018'.
[  519.267018][  T135] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  519.288382][  T135] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  519.317412][  T135] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  519.446222][  T135] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  519.605893][T17098] lo speed is unknown, defaulting to 1000
[  519.844829][ T3323] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  519.863059][ T3323] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  520.050886][  T135] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  520.081604][  T135] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  520.124559][    C1] net_ratelimit: 1 callbacks suppressed
[  520.124580][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  520.300419][ T3323] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  520.428470][T17140] syzkaller1: entered promiscuous mode
[  520.459144][T17140] syzkaller1: entered allmulticast mode
[  520.495863][T17146] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2910'.
[  520.522965][T17146] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2910'.
[  520.591933][T17135] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3027'.
[  520.726544][T17153] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3029'.
[  521.164490][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  521.368804][T17169] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  521.428182][T17169] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  521.443688][T17169] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  521.459220][  T135] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  521.472025][T17169] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  521.488236][T17169] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  521.495737][   T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  521.504040][   T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  521.512952][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  521.778452][T17181] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3037'.
[  522.647398][T17207] lo speed is unknown, defaulting to 1000
[  522.674786][   T59] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  523.048138][T17168] lo speed is unknown, defaulting to 1000
[  523.190798][T17236] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3046'.
[  523.285763][T17235] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3046'.
[  523.351852][T17243] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3048'.
[  523.568272][T17169] Bluetooth: hci1: command tx timeout
[  523.613184][T17256] ip_tables: iptables: counters copy to user failed while replacing table
[  523.689913][T17255] netlink: 'syz.4.3052': attribute type 6 has an invalid length.
[  523.727490][T17256] ip6t_srh: unknown srh invflags BA61
[  523.847468][   T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  524.203562][T17168] bridge0: port 1(bridge_slave_0) entered blocking state
[  524.229406][T17168] bridge0: port 1(bridge_slave_0) entered disabled state
[  524.263904][T17168] bridge_slave_0: entered allmulticast mode
[  524.283136][T17168] bridge_slave_0: entered promiscuous mode
[  524.338839][T17168] bridge0: port 2(bridge_slave_1) entered blocking state
[  524.368734][T17168] bridge0: port 2(bridge_slave_1) entered disabled state
[  524.390008][T17168] bridge_slave_1: entered allmulticast mode
[  524.407546][T17168] bridge_slave_1: entered promiscuous mode
[  524.512023][T17287] __nla_validate_parse: 6 callbacks suppressed
[  524.512045][T17287] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3059'.
[  524.517068][T17283] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3058'.
[  524.521911][T17168] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  524.581217][T17168] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  524.732364][T17168] team0: Port device team_slave_0 added
[  524.767629][T17291] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3061'.
[  524.778069][T17168] team0: Port device team_slave_1 added
[  524.822240][T17292] dummy0: left promiscuous mode
[  524.858139][T17292] netlink: 'syz.3.3061': attribute type 10 has an invalid length.
[  524.877245][T17292] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3061'.
[  524.934980][T17292] dummy0: entered promiscuous mode
[  524.946380][T17168] batman_adv: batadv0: Adding interface: batadv_slave_0
[  524.962418][T17168] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  525.036675][T17168] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  525.081632][T17168] batman_adv: batadv0: Adding interface: batadv_slave_1
[  525.122461][T17168] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  525.164541][    C1] net_ratelimit: 3 callbacks suppressed
[  525.164563][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  525.179964][T17168] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  525.251318][T17300] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  525.337961][T17298] syzkaller0: entered promiscuous mode
[  525.373645][T17298] syzkaller0: entered allmulticast mode
[  525.523873][T17168] hsr_slave_0: entered promiscuous mode
[  525.545605][T17168] hsr_slave_1: entered promiscuous mode
[  525.560517][T17168] debugfs: 'hsr0' already exists in 'hsr'
[  525.576915][T17168] Cannot create hsr debugfs directory
[  525.643661][T17323] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3070'.
[  525.653790][T17169] Bluetooth: hci1: command tx timeout
[  526.169287][T17334] lo speed is unknown, defaulting to 1000
[  526.178186][   T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  526.204606][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  526.294485][T17344] netlink: 'syz.4.3077': attribute type 1 has an invalid length.
[  526.319525][T17344] netlink: 52 bytes leftover after parsing attributes in process `syz.4.3077'.
[  526.348817][T17344] netlink: 'syz.4.3077': attribute type 1 has an invalid length.
[  526.364202][T17168] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  526.396708][T17168] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  526.654134][T17168] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  526.675051][T17168] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  526.853054][T17168] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  526.877662][T17168] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  527.020306][T17168] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  527.040605][T17168] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  527.253312][   T37] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  527.261614][   T37] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  527.270546][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  527.308852][  T135] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  527.503199][T17371] netlink: 2 bytes leftover after parsing attributes in process `syz.4.3083'.
[  527.727477][ T5621] Bluetooth: hci1: command tx timeout
[  527.750948][T17379] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3087'.
[  527.866128][T17168] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  527.883471][T17168] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  527.910217][T17168] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  527.952332][T17168] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  527.976445][T17168] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  527.989526][T17168] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  528.000953][T17168] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  528.019861][T17390] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  528.027417][T17168] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  528.057581][T17387] lo speed is unknown, defaulting to 1000
[  528.293712][T17404] x_tables: unsorted underflow at hook 4
[  528.333693][T17168] 8021q: adding VLAN 0 to HW filter on device bond0
[  528.446099][  T135] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  528.573789][T17414] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3095'.
[  528.596718][T17414] dummy0: left promiscuous mode
[  528.651621][T17414] netlink: 'syz.0.3095': attribute type 10 has an invalid length.
[  528.666947][T17414] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3095'.
[  528.709627][T17414] dummy0: entered promiscuous mode
[  528.751527][T17168] 8021q: adding VLAN 0 to HW filter on device team0
[  528.799509][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[  528.806788][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[  528.869466][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[  528.876821][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[  528.975317][T17421] netlink: 'syz.0.3097': attribute type 13 has an invalid length.
[  529.017730][T17421] netlink: 'syz.0.3097': attribute type 21 has an invalid length.
[  529.332756][ T5621] Bluetooth: hci5: command 0x0406 tx timeout
[  529.806793][T17169] Bluetooth: hci1: command tx timeout
[  530.000179][T17457] block nbd4: shutting down sockets
[  530.163347][T17476] netlink: 'syz.2.3112': attribute type 2 has an invalid length.
[  530.204443][    C1] net_ratelimit: 2 callbacks suppressed
[  530.204464][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  530.305022][T17481] __nla_validate_parse: 1 callbacks suppressed
[  530.305042][T17481] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3110'.
[  530.387828][T17481] netlink: 'syz.3.3110': attribute type 1 has an invalid length.
[  530.403876][T17482] syzkaller0: entered promiscuous mode
[  530.413076][T17478] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3110'.
[  530.419402][T17482] syzkaller0: entered allmulticast mode
[  530.429880][T17489] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3114'.
[  530.439185][T17478] netlink: 'syz.3.3110': attribute type 1 has an invalid length.
[  530.483428][T17489] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3114'.
[  530.631878][T17168] 8021q: adding VLAN 0 to HW filter on device batadv0
[  530.692365][ T3323] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  530.846528][T17168] veth0_vlan: entered promiscuous mode
[  530.881763][T17503] team0: No ports can be present during mode change
[  530.899997][T17168] veth1_vlan: entered promiscuous mode
[  530.901868][T17509] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3118'.
[  531.042227][T17168] veth0_macvtap: entered promiscuous mode
[  531.118111][T17168] veth1_macvtap: entered promiscuous mode
[  531.150944][T17168] batman_adv: batadv0: Interface activated: batadv_slave_0
[  531.195468][T17168] batman_adv: batadv0: Interface activated: batadv_slave_1
[  531.244474][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  531.248457][  T173] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  531.270105][T17519] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3122'.
[  531.300329][  T173] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  531.357252][T17527] tipc: Resetting bearer <eth:syz_tun>
[  531.509764][T17527] 8021q: adding VLAN 0 to HW filter on device bond7
[  531.535573][T17528] netlink: 'syz.2.3124': attribute type 3 has an invalid length.
[  531.556512][T17537] netlink: 'syz.3.3127': attribute type 9 has an invalid length.
[  531.557409][T17528] netlink: 'syz.2.3124': attribute type 3 has an invalid length.
[  531.564462][T17537] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3127'.
[  531.746716][  T173] netdevsim netdevsim2 eth3: set [1, 2] type 2 family 0 port 20002 - 0
[  531.826354][   T12] netdevsim netdevsim2 eth2: set [1, 2] type 2 family 0 port 20002 - 0
[  531.867301][   T37] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  531.882548][   T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  531.950504][T17548] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3131'.
[  532.000620][T17550] netlink: 188 bytes leftover after parsing attributes in process `syz.3.3132'.
[  532.071638][T17548] hsr_slave_1 (unregistering): left promiscuous mode
[  532.101118][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  532.111435][T17550] syzkaller1: left promiscuous mode
[  532.118741][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  532.130619][T17550] syzkaller1: left allmulticast mode
[  532.152704][T17550] 8021q: VLANs not supported on syzkaller1
[  532.166685][   T37] netdevsim netdevsim2 eth0: set [1, 2] type 2 family 0 port 20002 - 0
[  532.201859][T17550] syzkaller0: entered promiscuous mode
[  532.217944][T17550] syzkaller0: entered allmulticast mode
[  532.237356][T17554] syzkaller0: entered promiscuous mode
[  532.258774][T17554] syzkaller0: entered allmulticast mode
[  532.374295][   T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  532.382595][   T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  532.394739][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  532.441246][T17568] tipc: Started in network mode
[  532.448547][T17568] tipc: Node identity fa49c38d1cf3, cluster identity 4711
[  532.457600][T17568] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  532.467547][T17560] syzkaller0: entered promiscuous mode
[  532.473161][T17560] syzkaller0: entered allmulticast mode
[  532.500389][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  532.516674][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  532.529954][T17560] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) !
[  532.596365][T17569] syzkaller1: entered promiscuous mode
[  532.601964][T17569] syzkaller1: entered allmulticast mode
[  532.656036][   T59] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  532.679600][T17559] tipc: Resetting bearer <eth:syzkaller0>
[  532.781228][T17559] tipc: Disabling bearer <eth:syzkaller0>
[  532.856103][ T1012] netdevsim netdevsim2 eth1: set [1, 2] type 2 family 0 port 20002 - 0
[  533.015808][   T59] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  533.032953][T17591] syzkaller0: entered promiscuous mode
[  533.043949][T17591] syzkaller0: entered allmulticast mode
[  533.199251][T17593] netlink: 'syz.3.3142': attribute type 1 has an invalid length.
[  533.592114][ T5621] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  533.607168][ T5621] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  533.617459][ T5621] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  533.632293][ T5621] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  533.656595][ T5621] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  533.804847][T17602] nbd: couldn't find a device at index 0
[  534.139514][ T3323] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  534.224448][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  534.385607][ T5617] tipc: Resetting bearer <eth:syz_tun>
[  534.493947][ T5617] tipc: Disabling bearer <eth:syz_tun>
[  534.511198][T17635] netlink: 176 bytes leftover after parsing attributes in process `syz.4.3153'.
[  534.541982][T17623] bond0: (slave bond_slave_0): Releasing backup interface
[  534.592433][T17623] bond_slave_0: left allmulticast mode
[  534.629176][T17623] bond0: (slave bond_slave_1): Releasing backup interface
[  534.673906][T17623] bond_slave_1: left allmulticast mode
[  534.691308][T17623] team0: Port device team_slave_0 removed
[  534.712592][T17623] team0: Port device team_slave_1 removed
[  534.732683][T17623] batman_adv: batadv0: Removing interface: batadv_slave_0
[  534.751513][T17623] batman_adv: batadv0: Removing interface: batadv_slave_1
[  535.062782][   T59] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  535.081121][   T59] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  535.094113][   T59] netdevsim netdevsim2 eth3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  535.111221][   T59] netdevsim netdevsim2 eth3 (unregistering): unset [1, 2] type 2 family 0 port 20002 - 0
[  535.169320][T17651] netlink: 'syz.1.3156': attribute type 10 has an invalid length.
[  535.232257][T17653] vlan2: entered allmulticast mode
[  535.244529][    C1] net_ratelimit: 1 callbacks suppressed
[  535.244551][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  535.280051][T17653] bond0: entered allmulticast mode
[  535.300746][T17653] bond_slave_0: entered allmulticast mode
[  535.309573][T17653] bond_slave_1: entered allmulticast mode
[  535.326486][   T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  535.371972][T17651] dummy0: entered promiscuous mode
[  535.470584][T17600] lo speed is unknown, defaulting to 1000
[  535.557033][   T59] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  535.584807][   T59] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  535.606839][   T59] netdevsim netdevsim2 eth2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  535.623603][   T59] netdevsim netdevsim2 eth2 (unregistering): unset [1, 2] type 2 family 0 port 20002 - 0
[  535.724936][ T5621] Bluetooth: hci0: command tx timeout
[  535.759205][T17678] wg1: entered promiscuous mode
[  535.879918][   T59] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  535.898365][   T59] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  535.911149][   T59] netdevsim netdevsim2 eth1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  535.922899][   T59] netdevsim netdevsim2 eth1 (unregistering): unset [1, 2] type 2 family 0 port 20002 - 0
[  535.995653][T17690] __nla_validate_parse: 2 callbacks suppressed
[  535.995674][T17690] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3167'.
[  536.133638][   T59] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  536.180201][   T59] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  536.207515][   T59] netdevsim netdevsim2 eth0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  536.229110][   T59] netdevsim netdevsim2 eth0 (unregistering): unset [1, 2] type 2 family 0 port 20002 - 0
[  536.284581][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  536.455941][  T147] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  536.500782][T17702] bond1 (unregistering): Released all slaves
[  536.530994][T17712] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3174'.
[  536.587487][T17712] tipc: Invalid UDP bearer configuration
[  536.587544][T17712] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  536.624921][T17715] netlink: 810 bytes leftover after parsing attributes in process `syz.1.3173'.
[  536.815626][T17721] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3175'.
[  536.847660][T17721] netlink: 'syz.0.3175': attribute type 30 has an invalid length.
[  536.873726][T17723] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3175'.
[  536.900980][T17723] netlink: 'syz.0.3175': attribute type 30 has an invalid length.
[  537.013596][T17727] sctp: [Deprecated]: syz.1.3177 (pid 17727) Use of int in max_burst socket option deprecated.
[  537.013596][T17727] Use struct sctp_assoc_value instead
[  537.039667][T17728] sctp: [Deprecated]: syz.1.3177 (pid 17728) Use of int in max_burst socket option deprecated.
[  537.039667][T17728] Use struct sctp_assoc_value instead
[  537.217063][ T3323] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  537.261441][ T3323] netdevsim netdevsim0 
��: set [0, 0] type 1 family 0 port 8472 - 0
[  537.293952][ T3323] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  537.458502][   T59] dvmrp8: left allmulticast mode
[  537.564542][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  537.604456][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  537.763650][T17760] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3185'.
[  537.804575][ T5621] Bluetooth: hci0: command tx timeout
[  538.474637][   T59] bond8 (unregistering): (slave geneve3): Releasing active interface
[  538.623679][   T59] bond0 (unregistering): left promiscuous mode
[  538.630135][   T59] bond_slave_0: left promiscuous mode
[  538.636162][   T59] bond_slave_1: left promiscuous mode
[  538.661060][   T59] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  538.670329][   T59] bond_slave_0: left allmulticast mode
[  538.680700][   T59] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  538.690453][   T59] bond_slave_1: left allmulticast mode
[  538.699191][   T59] bond0 (unregistering): Released all slaves
[  538.714155][   T59] bond1 (unregistering): Released all slaves
[  538.739221][   T59] bond2 (unregistering): (slave batadv1): Releasing active interface
[  538.755173][   T59] bond2 (unregistering): Released all slaves
[  538.787078][   T59] bond3 (unregistering): Released all slaves
[  538.803268][   T59] bond4 (unregistering): Released all slaves
[  538.820997][   T59] bond5 (unregistering): (slave 
2
6���*�A^�m��): Releasing backup interface
[  538.831113][   T59] bond5 (unregistering): (slave 
2
6���*�A^�m��): last VLAN challenged slave left bond - VLAN blocking is removed
[  538.854143][   T59] bond5 (unregistering): Released all slaves
[  538.871483][   T59] bond6 (unregistering): Released all slaves
[  538.889126][   T59] bond7 (unregistering): Released all slaves
[  538.908819][   T59] bond8 (unregistering): Released all slaves
[  538.935868][ T1012] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  538.973810][ T5274] 8021q: adding VLAN 0 to HW filter on device eth1
[  539.404039][T17784] netlink: 'syz.4.3187': attribute type 10 has an invalid length.
[  539.603496][   T59] tipc: Left network mode
[  539.886179][ T5621] Bluetooth: hci0: command tx timeout
[  540.061457][T17600] bridge0: port 1(bridge_slave_0) entered blocking state
[  540.103290][T17600] bridge0: port 1(bridge_slave_0) entered disabled state
[  540.121192][T17600] bridge_slave_0: entered allmulticast mode
[  540.127758][T17816] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3193'.
[  540.162597][T17600] bridge_slave_0: entered promiscuous mode
[  540.258918][T17600] bridge0: port 2(bridge_slave_1) entered blocking state
[  540.272768][T17600] bridge0: port 2(bridge_slave_1) entered disabled state
[  540.310486][T17600] bridge_slave_1: entered allmulticast mode
[  540.349505][T17600] bridge_slave_1: entered promiscuous mode
[  540.629746][ T5274] 8021q: adding VLAN 0 to HW filter on device eth2
[  540.707899][T17600] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  540.741368][T17600] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  540.780122][T17837] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3198'.
[  540.850238][T17600] team0: Port device team_slave_0 added
[  540.865793][T17839] netlink: 'syz.4.3199': attribute type 15 has an invalid length.
[  540.918919][T17600] team0: Port device team_slave_1 added
[  541.137501][   T12] IPVS: starting estimator thread 0...
[  541.244459][T17850] IPVS: using max 29 ests per chain, 69600 per kthread
[  541.400055][T17860] netlink: 68 bytes leftover after parsing attributes in process `syz.4.3204'.
[  541.481871][T17600] batman_adv: batadv0: Adding interface: batadv_slave_0
[  541.504465][T17600] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  541.554543][T17600] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  541.576669][T17600] batman_adv: batadv0: Adding interface: batadv_slave_1
[  541.583691][T17600] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  541.624410][T17600] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  541.853545][T17869] can: request_module (can-proto-3) failed.
[  541.966267][ T5621] Bluetooth: hci0: command tx timeout
[  542.100392][T17888] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3210'.
[  542.110019][T17600] hsr_slave_0: entered promiscuous mode
[  542.122314][T17600] hsr_slave_1: entered promiscuous mode
[  542.129621][T17600] debugfs: 'hsr0' already exists in 'hsr'
[  542.138433][T17600] Cannot create hsr debugfs directory
[  542.261675][T17889] syzkaller1: entered allmulticast mode
[  542.762038][T17917] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode
[  542.784070][T17917] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode
[  542.800646][T17917] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  542.832765][T17922] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3217'.
[  542.862161][T17922] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3217'.
[  542.902866][T17922] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3217'.
[  542.927655][T17922] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3217'.
[  542.974600][T17922] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3217'.
[  543.016802][T17922] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3217'.
[  543.041731][T17922] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3217'.
[  543.052036][T17922] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3217'.
[  543.108365][   T59] hsr_slave_0: left promiscuous mode
[  543.127164][   T59] hsr_slave_1: left promiscuous mode
[  543.505038][   T59] team0 (unregistering): Port device team_slave_1 removed
[  543.542610][   T59] team0 (unregistering): Port device team_slave_0 removed
[  543.810539][ T5274] 8021q: adding VLAN 0 to HW filter on device eth3
[  543.909356][T17931] bridge0: port 2(bridge_slave_1) entered disabled state
[  543.917205][T17931] bridge0: port 1(bridge_slave_0) entered disabled state
[  544.010369][T17931] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  544.022611][T17931] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  544.166147][  T135] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  544.210998][T17936] lo speed is unknown, defaulting to 1000
[  544.239330][  T135] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  544.265732][  T135] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  544.280393][  T135] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  544.468178][   T59] IPVS: stop unused estimator thread 0...
[  545.800774][T18001] bond5: option lacp_active: invalid value (5)
[  545.828451][T18001] bond5 (unregistering): Released all slaves
[  545.890127][T18010] IPVS: set_ctl: invalid protocol: 44 127.0.0.1:20001
[  546.013013][ T1012] IPVS: starting estimator thread 0...
[  546.144856][T18015] IPVS: using max 36 ests per chain, 86400 per kthread
[  546.386736][T18028] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  546.493712][T18032] __nla_validate_parse: 63 callbacks suppressed
[  546.493733][T18032] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3240'.
[  546.512594][T17600] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  546.539585][T17600] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  546.557562][T18032] netlink: 144 bytes leftover after parsing attributes in process `syz.0.3240'.
[  546.579187][T17600] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  546.615710][T17600] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  546.717700][T17600] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  546.743024][T17600] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  546.751479][T17600] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  546.780008][T17600] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  546.893114][T18054] netlink: 'syz.3.3244': attribute type 1 has an invalid length.
[  547.040576][T18054] 8021q: adding VLAN 0 to HW filter on device bond1
[  547.184847][T17600] 8021q: adding VLAN 0 to HW filter on device bond0
[  547.230507][T18071] ip_tables: iptables: counters copy to user failed while replacing table
[  547.333423][T17600] 8021q: adding VLAN 0 to HW filter on device team0
[  547.356365][T18064] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3247'.
[  547.386445][  T147] bridge0: port 1(bridge_slave_0) entered blocking state
[  547.393669][  T147] bridge0: port 1(bridge_slave_0) entered forwarding state
[  547.459868][  T135] bridge0: port 2(bridge_slave_1) entered blocking state
[  547.467192][  T135] bridge0: port 2(bridge_slave_1) entered forwarding state
[  547.802904][T18088] FAULT_INJECTION: forcing a failure.
[  547.802904][T18088] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  547.848646][T18088] CPU: 1 UID: 0 PID: 18088 Comm: syz.3.3252 Not tainted syzkaller #0 PREEMPT(full) 
[  547.848678][T18088] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  547.848692][T18088] Call Trace:
[  547.848700][T18088]  <TASK>
[  547.848710][T18088]  dump_stack_lvl+0xe8/0x150
[  547.848752][T18088]  should_fail_ex+0x410/0x560
[  547.848803][T18088]  _copy_to_user+0x31/0xb0
[  547.848828][T18088]  simple_read_from_buffer+0xe1/0x170
[  547.848859][T18088]  proc_fail_nth_read+0x1bb/0x230
[  547.848920][T18088]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  547.848961][T18088]  ? rw_verify_area+0x24a/0x4c0
[  547.848990][T18088]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  547.849017][T18088]  vfs_read+0x213/0xa80
[  547.849047][T18088]  ? __pfx___mutex_lock+0x10/0x10
[  547.849129][T18088]  ? __pfx_vfs_read+0x10/0x10
[  547.849155][T18088]  ? __fget_files+0x2a/0x420
[  547.849183][T18088]  ? __fget_files+0x3a2/0x420
[  547.849205][T18088]  ? __fget_files+0x2a/0x420
[  547.849236][T18088]  ksys_read+0x150/0x270
[  547.849264][T18088]  ? __pfx_ksys_read+0x10/0x10
[  547.849299][T18088]  do_syscall_64+0x166/0x520
[  547.849319][T18088]  ? trace_irq_disable+0x3b/0x140
[  547.849344][T18088]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  547.849362][T18088]  ? clear_bhb_loop+0x70/0xc0
[  547.849383][T18088]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  547.849400][T18088] RIP: 0033:0x7f6eb615e90e
[  547.849418][T18088] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  547.849435][T18088] RSP: 002b:00007f6eb709afe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  547.849455][T18088] RAX: ffffffffffffffda RBX: 00007f6eb709b6c0 RCX: 00007f6eb615e90e
[  547.849468][T18088] RDX: 000000000000000f RSI: 00007f6eb709b0a0 RDI: 0000000000000004
[  547.849479][T18088] RBP: 00007f6eb709b090 R08: 0000000000000000 R09: 0000000000000000
[  547.849490][T18088] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  547.849500][T18088] R13: 00007f6eb6426038 R14: 00007f6eb6425fa0 R15: 00007fff220d27b8
[  547.849527][T18088]  </TASK>
[  548.128479][T18092] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3253'.
[  548.152116][T18092] bond0: invalid ARP target 255.255.255.255 specified for addition
[  548.167229][T18092] bond0: option arp_ip_target: invalid value (4294967295)
[  548.493982][T18108] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3256'.
[  548.507726][T18106] netlink: 'syz.0.3255': attribute type 1 has an invalid length.
[  548.552703][T18108] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  548.578271][T18109] netlink: 296 bytes leftover after parsing attributes in process `syz.3.3257'.
[  548.705147][T18115] netlink: 200 bytes leftover after parsing attributes in process `syz.4.3256'.
[  548.782767][T18115] openvswitch: netlink: Flow key attr not present in new flow.
[  548.895589][T18122] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3259'.
[  549.386709][T18147] netlink: 'syz.3.3264': attribute type 1 has an invalid length.
[  549.495252][T18153] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3264'.
[  549.543403][T17600] 8021q: adding VLAN 0 to HW filter on device batadv0
[  549.683798][T18147] syzkaller0: entered promiscuous mode
[  549.707938][T18147] syzkaller0: entered allmulticast mode
[  550.000096][T17600] veth0_vlan: entered promiscuous mode
[  550.033921][T17600] veth1_vlan: entered promiscuous mode
[  550.172846][T17600] veth0_macvtap: entered promiscuous mode
[  550.209112][T17600] veth1_macvtap: entered promiscuous mode
[  550.311836][T17600] batman_adv: batadv0: Interface activated: batadv_slave_0
[  550.347513][T18172] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3267'.
[  550.399373][T18172] bridge: RTM_NEWNEIGH with invalid ether address
[  550.471800][T17600] batman_adv: batadv0: Interface activated: batadv_slave_1
[  550.548613][   T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  550.585441][   T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  550.624139][T18177] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  550.741765][T18177] batman_adv: batadv0: Removing interface: batadv_slave_0
[  550.897824][  T173] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  550.984453][   T59] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  551.128233][ T1012] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  551.157570][ T1012] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  551.186040][T18195] syzkaller1: entered promiscuous mode
[  551.211507][T18195] syzkaller1: entered allmulticast mode
[  551.291716][  T173] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  551.321225][  T173] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  551.659597][T18213] __nla_validate_parse: 2 callbacks suppressed
[  551.659616][T18213] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3143'.
[  551.760840][T18213] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3143'.
[  551.888379][T17169] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  551.904554][T17169] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  551.922728][T17169] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  551.938070][T17169] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  551.940859][    C1] vcan0: j1939_tp_rxtimer: 0xffff8880555fc400: rx timeout, send abort
[  551.953996][    C1] vcan0: j1939_xtp_rx_abort_one: 0xffff8880555fc400: 0x20000: (3) A timeout occurred and this is the connection abort to close the session.
[  551.983388][T17169] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  552.235341][T18234] netlink: zone id is out of range
[  552.256847][T18234] netlink: zone id is out of range
[  552.295551][T18234] netlink: zone id is out of range
[  552.338705][T18234] netlink: zone id is out of range
[  552.385194][T18234] netlink: zone id is out of range
[  552.413565][T18234] netlink: zone id is out of range
[  552.438486][T18234] netlink: zone id is out of range
[  552.463455][T18234] netlink: zone id is out of range
[  552.491349][T18245] netlink: 'syz.3.3280': attribute type 2 has an invalid length.
[  552.531829][T18245] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3280'.
[  552.815725][T18245] : entered promiscuous mode
[  552.893133][T18260] netlink: 256 bytes leftover after parsing attributes in process `syz.2.3282'.
[  552.996841][T18260] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3282'.
[  553.719423][T18227] lo speed is unknown, defaulting to 1000
[  553.995518][T18308] netlink: 'syz.3.3292': attribute type 10 has an invalid length.
[  554.029213][T18308] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3292'.
[  554.044619][ T5621] Bluetooth: hci2: command tx timeout
[  554.432049][T18325] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT
[  554.476597][T18322] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3294'.
[  554.680096][T18333] net_ratelimit: 4 callbacks suppressed
[  554.680118][T18333] openvswitch: netlink: Missing key (keys=c0, expected=20100)
[  554.761587][T18339] Bluetooth: MGMT ver 1.23
[  554.768119][T18339] Bluetooth: hci0: unsupported parameter 5161
[  554.774474][T18339] Bluetooth: hci0: unsupported parameter 8192
[  554.780825][T18339] Bluetooth: hci0: unsupported parameter 5161
[  554.787491][T18339] Bluetooth: hci0: unsupported parameter 8192
[  554.888812][T18227] bridge0: port 1(bridge_slave_0) entered blocking state
[  554.896894][T18227] bridge0: port 1(bridge_slave_0) entered disabled state
[  554.904194][T18227] bridge_slave_0: entered allmulticast mode
[  554.912296][T18227] bridge_slave_0: entered promiscuous mode
[  554.912776][T18344] FAULT_INJECTION: forcing a failure.
[  554.912776][T18344] name failslab, interval 1, probability 0, space 0, times 0
[  554.932925][T18227] bridge0: port 2(bridge_slave_1) entered blocking state
[  554.958044][T18346] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  554.963158][T18227] bridge0: port 2(bridge_slave_1) entered disabled state
[  554.979115][T18344] CPU: 0 UID: 0 PID: 18344 Comm: syz.4.3300 Not tainted syzkaller #0 PREEMPT(full) 
[  554.979145][T18344] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  554.979158][T18344] Call Trace:
[  554.979167][T18344]  <TASK>
[  554.979177][T18344]  dump_stack_lvl+0xe8/0x150
[  554.979214][T18344]  should_fail_ex+0x410/0x560
[  554.979261][T18344]  should_failslab+0xa8/0x100
[  554.979350][T18344]  __kmalloc_cache_noprof+0xa8/0x660
[  554.979381][T18344]  ? genl_start+0x1c9/0x6d0
[  554.979409][T18344]  ? genl_start+0x1c9/0x6d0
[  554.979445][T18344]  genl_start+0x1c9/0x6d0
[  554.979494][T18344]  __netlink_dump_start+0x442/0x7b0
[  554.979618][T18344]  genl_family_rcv_msg_dumpit+0x213/0x310
[  554.979651][T18344]  ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10
[  554.979687][T18344]  ? genl_get_cmd+0x82f/0x960
[  554.979721][T18344]  ? __pfx_genl_start+0x10/0x10
[  554.979747][T18344]  ? __pfx_genl_dumpit+0x10/0x10
[  554.979773][T18344]  ? __pfx_genl_done+0x10/0x10
[  554.979802][T18344]  ? __lock_acquire+0x683/0x2cf0
[  554.979859][T18344]  genl_rcv_msg+0x5e1/0x7a0
[  554.979894][T18344]  ? __pfx_genl_rcv_msg+0x10/0x10
[  554.979921][T18344]  ? __pfx_netlbl_cipsov4_listall+0x10/0x10
[  554.980138][T18344]  netlink_rcv_skb+0x226/0x4a0
[  554.980161][T18344]  ? __pfx_genl_rcv_msg+0x10/0x10
[  554.980191][T18344]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  554.980229][T18344]  ? down_read+0x2be/0x330
[  554.980262][T18344]  genl_rcv+0x28/0x40
[  554.980297][T18344]  netlink_unicast+0x7bd/0x940
[  554.980343][T18344]  netlink_sendmsg+0x813/0xb40
[  554.980377][T18344]  ? __pfx_netlink_sendmsg+0x10/0x10
[  554.980404][T18344]  ? aa_sock_msg_perm+0xf6/0x1c0
[  554.980448][T18344]  ? __pfx_netlink_sendmsg+0x10/0x10
[  554.980470][T18344]  sock_sendmsg_nosec+0x13a/0x180
[  554.980501][T18344]  ____sys_sendmsg+0x54e/0x850
[  554.980549][T18344]  ? __pfx_____sys_sendmsg+0x10/0x10
[  554.980593][T18344]  ? import_iovec+0x73/0xa0
[  554.980622][T18344]  ___sys_sendmsg+0x2a5/0x360
[  554.980654][T18344]  ? __lock_acquire+0x683/0x2cf0
[  554.980689][T18344]  ? __pfx____sys_sendmsg+0x10/0x10
[  554.980762][T18344]  ? __fget_files+0x2a/0x420
[  554.980792][T18344]  ? __fget_files+0x3a2/0x420
[  554.980842][T18344]  __x64_sys_sendmsg+0x1b1/0x290
[  554.980878][T18344]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  554.980938][T18344]  do_syscall_64+0x166/0x520
[  554.980964][T18344]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  554.980988][T18344]  ? clear_bhb_loop+0x70/0xc0
[  554.981016][T18344]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  554.981040][T18344] RIP: 0033:0x7fbbfd59e0d9
[  554.981061][T18344] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  554.981080][T18344] RSP: 002b:00007fbbfe3eb028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  554.981104][T18344] RAX: ffffffffffffffda RBX: 00007fbbfd825fa0 RCX: 00007fbbfd59e0d9
[  554.981119][T18344] RDX: 0000000004040000 RSI: 0000200000003c40 RDI: 0000000000000005
[  554.981133][T18344] RBP: 00007fbbfe3eb090 R08: 0000000000000000 R09: 0000000000000000
[  554.981146][T18344] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  554.981159][T18344] R13: 00007fbbfd826038 R14: 00007fbbfd825fa0 R15: 00007ffcdb7b8028
[  554.981196][T18344]  </TASK>
[  554.988664][T18227] bridge_slave_1: entered allmulticast mode
[  555.316727][T18227] bridge_slave_1: entered promiscuous mode
[  555.370943][T18227] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  555.405199][T18227] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  555.582553][T18227] team0: Port device team_slave_0 added
[  555.605072][T18357] bond0: (slave netdevsim0): Error: Device can not be enslaved while up
[  555.624215][T18357] netlink: 128 bytes leftover after parsing attributes in process `syz.4.3303'.
[  555.646042][T18360] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3304'.
[  555.649713][T18227] team0: Port device team_slave_1 added
[  555.671004][T18357] Bluetooth: hci0: unsupported parameter 5135
[  555.679358][T18357] Bluetooth: hci0: unsupported parameter 8192
[  555.686846][T18357] Bluetooth: hci0: unsupported parameter 5135
[  555.693371][T18357] Bluetooth: hci0: unsupported parameter 8192
[  555.818239][T18227] batman_adv: batadv0: Adding interface: batadv_slave_0
[  555.837765][T18227] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  555.878867][T18227] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  555.981706][T18227] batman_adv: batadv0: Adding interface: batadv_slave_1
[  556.009466][T18227] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  556.012811][T18370] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3305'.
[  556.097688][T18227] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  556.125273][ T5621] Bluetooth: hci2: command tx timeout
[  556.182619][T18370] batman_adv: batadv0: Removing interface: batadv_slave_1
[  556.219555][T18386] netlink: 'syz.4.3311': attribute type 11 has an invalid length.
[  556.491298][T18227] hsr_slave_0: entered promiscuous mode
[  556.498633][T18227] hsr_slave_1: entered promiscuous mode
[  556.505941][T18227] debugfs: 'hsr0' already exists in 'hsr'
[  556.512017][T18227] Cannot create hsr debugfs directory
[  556.542495][T18396] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  556.583197][T18363] lo speed is unknown, defaulting to 1000
[  557.091952][T18408] syzkaller0: entered promiscuous mode
[  557.097935][T18408] syzkaller0: entered allmulticast mode
[  557.127453][T18408] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  557.401616][T18413] __nla_validate_parse: 1 callbacks suppressed
[  557.401638][T18413] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3321'.
[  557.426457][T18227] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  557.511995][T18415] bridge1: port 1(erspan0) entered blocking state
[  557.555158][T18415] bridge1: port 1(erspan0) entered disabled state
[  557.574964][T18415] erspan0: entered allmulticast mode
[  557.586770][T18415] erspan0: entered promiscuous mode
[  557.699616][T18227] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  557.975973][T18227] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  558.192521][T18227] netdevsim netdevsim0 
�� (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  558.204539][ T5621] Bluetooth: hci2: command tx timeout
[  558.362475][ T5732] tipc: Node number set to 3870999437
[  558.425628][T18405] syz.4.3319 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000
[  558.535355][T18405] CPU: 0 UID: 0 PID: 18405 Comm: syz.4.3319 Not tainted syzkaller #0 PREEMPT(full) 
[  558.535387][T18405] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  558.535401][T18405] Call Trace:
[  558.535409][T18405]  <TASK>
[  558.535418][T18405]  dump_stack_lvl+0xe8/0x150
[  558.535457][T18405]  dump_header+0xd3/0x4b0
[  558.535532][T18405]  oom_kill_process+0x3ab/0x970
[  558.535597][T18405]  out_of_memory+0x1064/0x1480
[  558.535630][T18405]  ? try_charge_memcg+0xbce/0x1590
[  558.535672][T18405]  ? __pfx_out_of_memory+0x10/0x10
[  558.535700][T18405]  ? do_raw_spin_unlock+0xf5/0x200
[  558.535735][T18405]  try_charge_memcg+0xc78/0x1590
[  558.535777][T18405]  ? __pfx_try_charge_memcg+0x10/0x10
[  558.535823][T18405]  ? charge_memcg+0x20/0x2b0
[  558.535851][T18405]  charge_memcg+0x19c/0x2b0
[  558.535879][T18405]  __mem_cgroup_charge+0x25/0x80
[  558.535905][T18405]  filemap_add_folio+0x140/0x4e0
[  558.535942][T18405]  __filemap_get_folio_mpol+0x4ff/0x1000
[  558.535973][T18405]  filemap_fault+0xa84/0x13b0
[  558.536003][T18405]  ? __pfx_filemap_fault+0x10/0x10
[  558.536027][T18405]  ? __pfx_filemap_map_pages+0x10/0x10
[  558.536062][T18405]  __do_fault+0x138/0x2a0
[  558.536096][T18405]  ? do_pte_missing+0x140c/0x34b0
[  558.536120][T18405]  do_pte_missing+0x2215/0x34b0
[  558.536156][T18405]  ? handle_mm_fault+0xec/0x3080
[  558.536180][T18405]  handle_mm_fault+0x1b36/0x3080
[  558.536213][T18405]  ? handle_mm_fault+0xec/0x3080
[  558.536243][T18405]  ? __pfx_handle_mm_fault+0x10/0x10
[  558.536260][T18405]  ? lock_vma_under_rcu+0x45a/0x500
[  558.536313][T18405]  do_user_addr_fault+0xa4f/0x1340
[  558.536366][T18405]  ? trace_page_fault_user+0x84/0x1e0
[  558.536400][T18405]  exc_page_fault+0x6a/0xc0
[  558.536430][T18405]  asm_exc_page_fault+0x26/0x30
[  558.536451][T18405] RIP: 0033:0x7fbbfd56c085
[  558.536471][T18405] Code: 0f 1f 44 00 00 72 14 0f b6 0e 0f b6 07 29 c8 c3 0f 1f 44 00 00 19 c0 83 c8 01 c3 31 c0 c3 0f 1f 80 00 00 00 00 48 0f 38 f0 07 <48> 0f 38 f0 0e 48 29 c8 75 e1 48 0f 38 f0 44 17 f8 48 0f 38 f0 4c
[  558.536489][T18405] RSP: 002b:00007ffcdb7b80b8 EFLAGS: 00010202
[  558.536507][T18405] RAX: 0c00140013000c00 RBX: 00007fbbfe355720 RCX: 000000000001f144
[  558.536522][T18405] RDX: 000000000000000c RSI: 0000001b2d404ebc RDI: 0000001b2d423f74
[  558.536535][T18405] RBP: 0000001b2d404ebc R08: 00000000005ffde8 R09: 0000000000000006
[  558.536555][T18405] R10: 0000001b2ce24218 R11: 000000000000000c R12: 000000000001f138
[  558.536568][T18405] R13: 000000000000008c R14: 0000001b2ce24220 R15: 0000001b2ce24218
[  558.536601][T18405]  </TASK>
[  558.542470][T18405] memory: usage 307200kB, limit 307200kB, failcnt 852
[  558.800305][T18405] memory+swap: usage 307372kB, limit 9007199254740988kB, failcnt 0
[  558.808587][T18405] kmem: usage 307156kB, limit 9007199254740988kB, failcnt 0
[  558.816374][T18405] Memory cgroup stats for /syz4:
[  558.816706][T18405] cache 0
[  558.871944][T18405] rss 0
[  558.877532][T18405] rss_huge 0
[  558.883923][T18405] shmem 0
[  558.897039][T18405] mapped_file 0
[  558.912490][T18405] dirty 0
[  558.936453][T18405] writeback 0
[  558.949139][T18405] workingset_refault_anon 16
[  558.966140][T18405] workingset_refault_file 197
[  558.997260][T18405] swap 176128
[  559.013280][T18405] swapcached 286720
[  559.025055][T18405] pgpgin 139156
[  559.034349][T18405] pgpgout 139145
[  559.042007][T18405] pgfault 196224
[  559.049181][T18405] pgmajfault 11
[  559.058820][T18405] inactive_anon 40960
[  559.069176][T18405] active_anon 4096
[  559.081090][T18405] inactive_file 0
[  559.092623][T18405] active_file 0
[  559.101693][T18405] unevictable 0
[  559.111003][T18405] hierarchical_memory_limit 314572800
[  559.122092][T18449] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3330'.
[  559.141936][T18405] hierarchical_memsw_limit 9223372036854771712
[  559.160008][T18405] total_cache 0
[  559.173413][T18405] total_rss 0
[  559.189979][T18405] total_rss_huge 0
[  559.199932][T18405] total_shmem 0
[  559.216972][T18405] total_mapped_file 0
[  559.235747][T18405] total_dirty 0
[  559.251806][T18405] total_writeback 0
[  559.266976][T18405] total_workingset_refault_anon 16
[  559.289672][T18405] total_workingset_refault_file 197
[  559.309815][T18405] total_swap 176128
[  559.321800][T18405] total_swapcached 286720
[  559.338113][T18405] total_pgpgin 139158
[  559.350362][T18405] total_pgpgout 139147
[  559.378033][T18405] total_pgfault 198786
[  559.394026][T18405] total_pgmajfault 11
[  559.411344][T18405] total_inactive_anon 40960
[  559.429640][T18405] total_active_anon 4096
[  559.446540][T18405] total_inactive_file 0
[  559.465523][T18405] total_active_file 0
[  559.478715][T18405] total_unevictable 0
[  559.491375][T18405] anon_cost 0
[  559.509789][T18405] file_cost 0
[  559.513183][T18405] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.3319,pid=18405,uid=0
[  559.532435][T18227] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  559.552422][T18405] Memory cgroup out of memory: Killed process 18405 (syz.4.3319) total-vm:104492kB, anon-rss:1252kB, file-rss:23388kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000
[  559.637022][T18227] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  559.671040][T18227] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  559.771986][T18227] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  559.786464][T18462] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3333'.
[  559.800710][T18227] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  559.857591][T18227] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  559.869284][T18465] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3333'.
[  559.891693][T18227] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  559.952370][T18227] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  560.079546][T18406] tipc: Resetting bearer <eth:syzkaller0>
[  560.168708][T18406] tipc: Disabling bearer <eth:syzkaller0>
[  560.286636][ T5621] Bluetooth: hci2: command tx timeout
[  560.520144][T18227] 8021q: adding VLAN 0 to HW filter on device bond0
[  560.565536][T18227] 8021q: adding VLAN 0 to HW filter on device team0
[  560.608036][  T135] bridge0: port 1(bridge_slave_0) entered blocking state
[  560.615379][  T135] bridge0: port 1(bridge_slave_0) entered forwarding state
[  560.673859][ T1012] bridge0: port 2(bridge_slave_1) entered blocking state
[  560.681153][ T1012] bridge0: port 2(bridge_slave_1) entered forwarding state
[  561.092083][T18502] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3346'.
[  561.140650][T18502] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3346'.
[  561.191742][T18502] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3346'.
[  561.644077][T18511] netlink: 'syz.3.3347': attribute type 1 has an invalid length.
[  561.867635][T18516] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3348'.
[  561.920815][T18511] 8021q: adding VLAN 0 to HW filter on device bond2
[  561.990843][T18512] batadv0: entered allmulticast mode
[  562.019711][T18512] 8021q: adding VLAN 0 to HW filter on device batadv0
[  562.117862][T18512] bond2: (slave batadv0): Enslaving as a backup interface with an up link
[  562.140398][   T59] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  562.286277][  T135] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  562.338058][T18516] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000
[  562.382677][T18516] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6
[  562.413811][T18531] netlink: 'syz.3.3351': attribute type 4 has an invalid length.
[  562.465728][T18531] netlink: 'syz.3.3351': attribute type 4 has an invalid length.
[  562.491741][T18516] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008
[  562.571538][T18227] 8021q: adding VLAN 0 to HW filter on device batadv0
[  562.642375][T18516] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  562.872684][T18227] veth0_vlan: entered promiscuous mode
[  562.914081][T18227] veth1_vlan: entered promiscuous mode
[  562.946363][T18541] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3354'.
[  562.997238][  T135] smbdirect: ib_dev[syz2] removed
[  563.033101][T18543] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3356'.
[  563.087676][ T1309] ieee802154 phy0 wpan0: encryption failed: -22
[  563.118178][T18227] veth0_macvtap: entered promiscuous mode
[  563.147997][T18227] veth1_macvtap: entered promiscuous mode
[  563.320701][T18227] batman_adv: batadv0: Interface activated: batadv_slave_0
[  563.347178][T18227] batman_adv: batadv0: Interface activated: batadv_slave_1
[  563.374800][T18553] netlink: 'syz.2.3359': attribute type 1 has an invalid length.
[  563.485507][ T1012] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  563.496591][T18555] Cannot find del_set index 1 as target
[  563.503185][ T1012] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  563.633360][T18560] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3361'.
[  563.647643][   T59] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  563.730878][T18557] netlink: 'syz.3.3360': attribute type 1 has an invalid length.
[  563.745184][  T147] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  563.760335][T18557] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3360'.
[  563.818315][T18566] netlink: 79 bytes leftover after parsing attributes in process `syz.4.3362'.
[  563.835974][T18560] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3361'.
[  563.851674][T18560] openvswitch: netlink: Flow key attr not present in new flow.
[  563.887877][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  563.903344][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  563.996160][  T147] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  564.008629][  T147] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  564.029094][T18569] can: request_module (can-proto-0) failed.
[  564.307010][T18571] bridge0: port 2(bridge_slave_1) entered disabled state
[  564.314849][T18571] bridge0: port 1(bridge_slave_0) entered disabled state
[  564.409180][T18583] netlink: 'syz.2.3364': attribute type 1 has an invalid length.
[  564.488330][T18589] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3364'.
[  564.574756][T18595] netlink: 'syz.1.3370': attribute type 31 has an invalid length.
[  564.605060][T18571] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  564.687328][T18571] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  565.031891][T18578] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  565.124586][   T59] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  565.384973][  T135] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  565.416847][  T135] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  565.450521][T18625] syzkaller0: entered promiscuous mode
[  565.469438][T18625] syzkaller0: entered allmulticast mode
[  565.570235][T18639] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3374'.
[  565.606631][ T1012] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  565.629921][T18644] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3375'.
[  565.801418][T18639] bond1: Unable to set peer notification delay as MII monitoring is disabled
[  565.847923][T18639] bond1 (unregistering): Released all slaves
[  566.210413][T18659] lo speed is unknown, defaulting to 1000
[  566.387125][T18678] syzkaller1: entered promiscuous mode
[  566.393234][T18678] syzkaller1: entered allmulticast mode
[  566.573559][T18684] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3387'.
[  566.622038][T18688] netlink: zone id is out of range
[  566.650289][T18688] netlink: zone id is out of range
[  566.655583][T18688] netlink: zone id is out of range
[  566.660875][T18688] netlink: zone id is out of range
[  566.666123][T18688] netlink: zone id is out of range
[  566.671433][T18688] netlink: zone id is out of range
[  566.930642][T18683] lo speed is unknown, defaulting to 1000
[  567.753121][T18731] tipc: Started in network mode
[  567.768053][T18731] tipc: Node identity ac14140f, cluster identity 4711
[  567.795951][T18731] tipc: New replicast peer: 255.255.255.255
[  567.834758][T18731] tipc: Enabled bearer <udp:syz2>, priority 10
[  568.394796][T18761] x_tables: duplicate underflow at hook 1
[  568.830163][T18782] netlink: 'syz.2.3415': attribute type 5 has an invalid length.
[  568.944477][ T9882] tipc: Node number set to 2886997007
[  568.964385][T18786] __nla_validate_parse: 3 callbacks suppressed
[  568.964441][T18786] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3415'.
[  569.015264][T18786] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3415'.
[  569.126940][ T1012] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  569.154533][ T1012] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  569.885866][T18815] lo speed is unknown, defaulting to 1000
[  570.339273][T18831] bridge0: port 1(bridge_slave_0) entered disabled state
[  570.478947][T18841] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3430'.
[  571.042778][T18850] bridge1: port 1(erspan0) entered blocking state
[  571.049466][T18850] bridge1: port 1(erspan0) entered forwarding state
[  571.102438][T18850] 8021q: adding VLAN 0 to HW filter on device bond0
[  571.117256][T18850] 8021q: adding VLAN 0 to HW filter on device team0
[  571.165394][  T135] net_ratelimit: 500 callbacks suppressed
[  571.165418][  T135] bond2: (slave batadv0): link status up again after 0 ms
[  571.218346][ T1012] bond2: (slave batadv0): link status up again after 0 ms
[  571.244821][T18850] batman_adv: batadv0: Interface activated: batadv_slave_0
[  571.255139][  T135] bond2: (slave batadv0): link status up again after 0 ms
[  571.271113][T18850] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  571.284751][  T135] bond2: (slave batadv0): link status up again after 0 ms
[  571.306973][  T135] bond2: (slave batadv0): link status up again after 0 ms
[  571.331155][   T59] bridge0: port 1(bridge_slave_0) entered blocking state
[  571.338499][   T59] bridge0: port 1(bridge_slave_0) entered forwarding state
[  571.362870][   T59] bridge0: port 2(bridge_slave_1) entered blocking state
[  571.370285][   T59] bridge0: port 2(bridge_slave_1) entered forwarding state
[  571.377002][  T135] bond2: (slave batadv0): link status up again after 0 ms
[  571.427197][  T135] bond2: (slave batadv0): link status up again after 0 ms
[  571.474569][  T135] bond2: (slave batadv0): link status up again after 0 ms
[  571.525071][   T59] bond2: (slave batadv0): link status up again after 0 ms
[  571.575671][   T36] bond2: (slave batadv0): link status up again after 0 ms
[  572.111127][T18879] netlink: 1355 bytes leftover after parsing attributes in process `syz.2.3441'.
[  572.442146][T18895] netlink: 92 bytes leftover after parsing attributes in process `syz.2.3444'.
[  572.572876][T18897] lo speed is unknown, defaulting to 1000
[  572.619954][T18904] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3447'.
[  572.875798][T18918] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3450'.
[  572.946696][T18919] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3449'.
[  572.991832][T18915] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3449'.
[  573.067777][T18928] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3452'.
[  573.756279][T18952] netlink: 'syz.0.3460': attribute type 10 has an invalid length.
[  573.778686][T18946] nbd4: detected capacity change from 0 to 127
[  573.799866][   T11] 
[  573.802351][   T11] ======================================================
[  573.809433][   T11] WARNING: possible circular locking dependency detected
[  573.816635][   T11] syzkaller #0 Not tainted
[  573.821091][   T11] ------------------------------------------------------
[  573.828218][   T11] kworker/0:0H/11 is trying to acquire lock:
[  573.834250][   T11] ffff88807db41668 (&nsock->tx_lock){+.+.}-{4:4}, at: nbd_queue_rq+0x373/0x1150
[  573.843556][   T11] 
[  573.843556][   T11] but task is already holding lock:
[  573.851048][   T11] ffff8880270a0178 (&cmd->lock){+.+.}-{4:4}, at: nbd_queue_rq+0xc1/0x1150
[  573.859816][   T11] 
[  573.859816][   T11] which lock already depends on the new lock.
[  573.859816][   T11] 
[  573.870514][   T11] 
[  573.870514][   T11] the existing dependency chain (in reverse order) is:
[  573.879598][   T11] 
[  573.879598][   T11] -> #7 (&cmd->lock){+.+.}-{4:4}:
[  573.886962][   T11]        __mutex_lock+0x19d/0x1550
[  573.892126][   T11]        nbd_queue_rq+0xc1/0x1150
[  573.897200][   T11]        blk_mq_dispatch_rq_list+0x499/0x1990
[  573.903432][   T11]        __blk_mq_sched_dispatch_requests+0xd36/0x1580
[  573.910412][   T11]        blk_mq_sched_dispatch_requests+0xd7/0x190
[  573.916970][   T11]        blk_mq_run_work_fn+0x16c/0x300
[  573.922632][   T11]        process_scheduled_works+0xa88/0x14c0
[  573.928765][   T11]        worker_thread+0xa47/0xfb0
[  573.934049][   T11]        kthread+0x38b/0x480
[  573.938689][   T11]        ret_from_fork+0x514/0xb70
[  573.943877][   T11]        ret_from_fork_asm+0x1a/0x30
[  573.949211][   T11] 
[  573.949211][   T11] -> #6 (set->srcu){.+.+}-{0:0}:
[  573.956394][   T11]        __synchronize_srcu+0xc9/0x2f0
[  573.961912][   T11]        elevator_switch+0x1e8/0x7b0
[  573.967337][   T11]        elevator_change+0x2fa/0x480
[  573.972657][   T11]        elevator_set_default+0x375/0x440
[  573.978408][   T11]        blk_register_queue+0x3f3/0x4e0
[  573.984066][   T11]        __add_disk+0x6cb/0xe30
[  573.988932][   T11]        add_disk_fwnode+0x100/0x3a0
[  573.994236][   T11]        nbd_dev_add+0x733/0xb60
[  573.999202][   T11]        nbd_init+0x15f/0x1e0
[  574.004062][   T11]        do_one_initcall+0x250/0x870
[  574.009371][   T11]        do_initcall_level+0x10a/0x1a0
[  574.014885][   T11]        do_initcalls+0x59/0xa0
[  574.019751][   T11]        kernel_init_freeable+0x29d/0x3e0
[  574.025490][   T11]        kernel_init+0x22/0x1d0
[  574.030362][   T11]        ret_from_fork+0x514/0xb70
[  574.035494][   T11]        ret_from_fork_asm+0x1a/0x30
[  574.040807][   T11] 
[  574.040807][   T11] -> #5 (&q->elevator_lock){+.+.}-{4:4}:
[  574.048659][   T11]        __mutex_lock+0x19d/0x1550
[  574.053805][   T11]        elevator_change+0x1af/0x480
[  574.059159][   T11]        elevator_set_none+0xb5/0x140
[  574.064567][   T11]        blk_mq_update_nr_hw_queues+0x5ef/0x19f0
[  574.070917][   T11]        nbd_start_device+0x189/0xb30
[  574.076313][   T11]        nbd_genl_connect+0x1597/0x1c10
[  574.081915][   T11]        genl_family_rcv_msg_doit+0x233/0x340
[  574.088011][   T11]        genl_rcv_msg+0x614/0x7a0
[  574.093080][   T11]        netlink_rcv_skb+0x226/0x4a0
[  574.098385][   T11]        genl_rcv+0x28/0x40
[  574.102908][   T11]        netlink_unicast+0x7bd/0x940
[  574.108219][   T11]        netlink_sendmsg+0x813/0xb40
[  574.113519][   T11]        sock_sendmsg_nosec+0x13a/0x180
[  574.119086][   T11]        ____sys_sendmsg+0x54e/0x850
[  574.124390][   T11]        ___sys_sendmsg+0x2a5/0x360
[  574.129608][   T11]        __x64_sys_sendmsg+0x1b1/0x290
[  574.135129][   T11]        do_syscall_64+0x166/0x520
[  574.140266][   T11]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  574.146697][   T11] 
[  574.146697][   T11] -> #4 (&q->q_usage_counter(io)#52){++++}-{0:0}:
[  574.155322][   T11]        blk_alloc_queue+0x544/0x690
[  574.160642][   T11]        __blk_mq_alloc_disk+0x194/0x390
[  574.166289][   T11]        nbd_dev_add+0x494/0xb60
[  574.171250][   T11]        nbd_init+0x15f/0x1e0
[  574.175974][   T11]        do_one_initcall+0x250/0x870
[  574.181295][   T11]        do_initcall_level+0x10a/0x1a0
[  574.186866][   T11]        do_initcalls+0x59/0xa0
[  574.191731][   T11]        kernel_init_freeable+0x29d/0x3e0
[  574.197475][   T11]        kernel_init+0x22/0x1d0
[  574.202359][   T11]        ret_from_fork+0x514/0xb70
[  574.207507][   T11]        ret_from_fork_asm+0x1a/0x30
[  574.212825][   T11] 
[  574.212825][   T11] -> #3 (fs_reclaim){+.+.}-{0:0}:
[  574.220060][   T11]        fs_reclaim_acquire+0x71/0x100
[  574.225542][   T11]        kmem_cache_alloc_noprof+0x64/0x5f0
[  574.231453][   T11]        mas_alloc_nodes+0x291/0x350
[  574.236869][   T11]        mas_preallocate+0x2cf/0x630
[  574.242169][   T11]        vma_link+0x123/0x470
[  574.246868][   T11]        insert_vm_struct+0x1bf/0x290
[  574.252279][   T11]        create_init_stack_vma+0x5c1/0x9b0
[  574.258106][   T11]        alloc_bprm+0x50c/0x640
[  574.262976][   T11]        kernel_execve+0x85/0x9c0
[  574.268038][   T11]        try_to_run_init_process+0x13/0x60
[  574.273893][   T11]        kernel_init+0xb2/0x1d0
[  574.278770][   T11]        ret_from_fork+0x514/0xb70
[  574.283905][   T11]        ret_from_fork_asm+0x1a/0x30
[  574.289215][   T11] 
[  574.289215][   T11] -> #2 (&mm->mmap_lock){++++}-{4:4}:
[  574.296798][   T11]        __might_fault+0xcb/0x130
[  574.301844][   T11]        _copy_from_user+0x28/0xb0
[  574.306972][   T11]        copy_from_sockptr+0x5e/0x90
[  574.312293][   T11]        do_ip_setsockopt+0x1ac8/0x2e30
[  574.317865][   T11]        ip_setsockopt+0x66/0x110
[  574.322985][   T11]        do_sock_setsockopt+0x17c/0x1b0
[  574.328559][   T11]        __x64_sys_setsockopt+0x13d/0x1b0
[  574.334301][   T11]        do_syscall_64+0x166/0x520
[  574.339439][   T11]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  574.345873][   T11] 
[  574.345873][   T11] -> #1 (sk_lock-AF_INET6-NBD){+.+.}-{0:0}:
[  574.353974][   T11]        lock_sock_nested+0x41/0x100
[  574.359289][   T11]        inet_shutdown+0x6a/0x390
[  574.364329][   T11]        nbd_mark_nsock_dead+0x2cb/0x550
[  574.369996][   T11]        sock_shutdown+0x15e/0x260
[  574.375133][   T11]        nbd_clear_sock+0x24/0x170
[  574.380267][   T11]        nbd_config_put+0x35b/0x660
[  574.385486][   T11]        nbd_genl_connect+0x18f7/0x1c10
[  574.391051][   T11]        genl_family_rcv_msg_doit+0x233/0x340
[  574.397204][   T11]        genl_rcv_msg+0x614/0x7a0
[  574.402265][   T11]        netlink_rcv_skb+0x226/0x4a0
[  574.407578][   T11]        genl_rcv+0x28/0x40
[  574.412134][   T11]        netlink_unicast+0x7bd/0x940
[  574.417449][   T11]        netlink_sendmsg+0x813/0xb40
[  574.422751][   T11]        sock_sendmsg_nosec+0x13a/0x180
[  574.428668][   T11]        ____sys_sendmsg+0x54e/0x850
[  574.433977][   T11]        ___sys_sendmsg+0x2a5/0x360
[  574.439204][   T11]        __x64_sys_sendmsg+0x1b1/0x290
[  574.444728][   T11]        do_syscall_64+0x166/0x520
[  574.449863][   T11]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  574.456320][   T11] 
[  574.456320][   T11] -> #0 (&nsock->tx_lock){+.+.}-{4:4}:
[  574.464078][   T11]        __lock_acquire+0x1520/0x2cf0
[  574.469483][   T11]        lock_acquire+0x106/0x350
[  574.474532][   T11]        __mutex_lock+0x19d/0x1550
[  574.479665][   T11]        nbd_queue_rq+0x373/0x1150
[  574.484825][   T11]        blk_mq_dispatch_rq_list+0x499/0x1990
[  574.490939][   T11]        __blk_mq_sched_dispatch_requests+0xd36/0x1580
[  574.497811][   T11]        blk_mq_sched_dispatch_requests+0xd7/0x190
[  574.504331][   T11]        blk_mq_run_work_fn+0x16c/0x300
[  574.509907][   T11]        process_scheduled_works+0xa88/0x14c0
[  574.515999][   T11]        worker_thread+0xa47/0xfb0
[  574.521135][   T11]        kthread+0x38b/0x480
[  574.525757][   T11]        ret_from_fork+0x514/0xb70
[  574.530893][   T11]        ret_from_fork_asm+0x1a/0x30
[  574.536228][   T11] 
[  574.536228][   T11] other info that might help us debug this:
[  574.536228][   T11] 
[  574.546468][   T11] Chain exists of:
[  574.546468][   T11]   &nsock->tx_lock --> set->srcu --> &cmd->lock
[  574.546468][   T11] 
[  574.558573][   T11]  Possible unsafe locking scenario:
[  574.558573][   T11] 
[  574.566069][   T11]        CPU0                    CPU1
[  574.571446][   T11]        ----                    ----
[  574.576913][   T11]   lock(&cmd->lock);
[  574.580912][   T11]                                lock(set->srcu);
[  574.587435][   T11]                                lock(&cmd->lock);
[  574.593960][   T11]   lock(&nsock->tx_lock);
[  574.598397][   T11] 
[  574.598397][   T11]  *** DEADLOCK ***
[  574.598397][   T11] 
[  574.606552][   T11] locks held by kworker/0:0H/11: 4, last CPU#0:
[  574.612896][   T11]  #0: ffff88801eab2d40 ((wq_completion)kblockd){+.+.}-{0:0}, at: process_scheduled_works+0xa1a/0x14c0
[  574.624038][   T11]  #1: ffffc90000107c40 ((work_completion)(&(&hctx->run_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa1a/0x14c0
[  574.636946][   T11]  #2: ffff8880264a3218 (set->srcu){.+.+}-{0:0}, at: blk_mq_run_work_fn+0x144/0x300
[  574.646387][   T11]  #3: ffff8880270a0178 (&cmd->lock){+.+.}-{4:4}, at: nbd_queue_rq+0xc1/0x1150
[  574.655407][   T11] 
[  574.655407][   T11] stack backtrace:
[  574.661484][   T11] CPU: 0 UID: 0 PID: 11 Comm: kworker/0:0H Not tainted syzkaller #0 PREEMPT(full) 
[  574.661505][   T11] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  574.661516][   T11] Workqueue: kblockd blk_mq_run_work_fn
[  574.661542][   T11] Call Trace:
[  574.661551][   T11]  <TASK>
[  574.661560][   T11]  dump_stack_lvl+0xe8/0x150
[  574.661586][   T11]  print_circular_bug+0x2e1/0x300
[  574.661607][   T11]  check_noncircular+0x12e/0x150
[  574.661627][   T11]  __lock_acquire+0x1520/0x2cf0
[  574.661656][   T11]  ? irqentry_exit+0x218/0x910
[  574.661677][   T11]  ? __pfx___schedule+0x10/0x10
[  574.661691][   T11]  ? irqentry_exit+0x218/0x910
[  574.661713][   T11]  ? nbd_queue_rq+0x373/0x1150
[  574.661735][   T11]  lock_acquire+0x106/0x350
[  574.661758][   T11]  ? nbd_queue_rq+0x373/0x1150
[  574.661788][   T11]  __mutex_lock+0x19d/0x1550
[  574.661806][   T11]  ? nbd_queue_rq+0x373/0x1150
[  574.661829][   T11]  ? ret_from_fork_asm+0x1a/0x30
[  574.661854][   T11]  ? unwind_next_frame+0x8f/0x2550
[  574.661873][   T11]  ? nbd_queue_rq+0x373/0x1150
[  574.661897][   T11]  ? __pfx___mutex_lock+0x10/0x10
[  574.661916][   T11]  ? ret_from_fork_asm+0x1a/0x30
[  574.661949][   T11]  ? stack_trace_save+0xa9/0x100
[  574.662001][   T11]  ? __pfx_stack_trace_save+0x10/0x10
[  574.662026][   T11]  nbd_queue_rq+0x373/0x1150
[  574.662052][   T11]  ? __lock_acquire+0x13e8/0x2cf0
[  574.662077][   T11]  ? __pfx_nbd_queue_rq+0x10/0x10
[  574.662107][   T11]  blk_mq_dispatch_rq_list+0x499/0x1990
[  574.662140][   T11]  ? sbitmap_get+0x229/0x390
[  574.662220][   T11]  ? __pfx_blk_mq_dispatch_rq_list+0x10/0x10
[  574.662247][   T11]  ? __blk_mq_alloc_driver_tag+0x2e7/0x6e0
[  574.662276][   T11]  __blk_mq_sched_dispatch_requests+0xd36/0x1580
[  574.662304][   T11]  ? __pfx___blk_mq_sched_dispatch_requests+0x10/0x10
[  574.662324][   T11]  ? blk_mq_run_work_fn+0x144/0x300
[  574.662345][   T11]  ? blk_mq_run_work_fn+0x144/0x300
[  574.662369][   T11]  blk_mq_sched_dispatch_requests+0xd7/0x190
[  574.662387][   T11]  ? blk_mq_run_work_fn+0x144/0x300
[  574.662414][   T11]  blk_mq_run_work_fn+0x16c/0x300
[  574.662436][   T11]  ? process_scheduled_works+0xa1a/0x14c0
[  574.662455][   T11]  process_scheduled_works+0xa88/0x14c0
[  574.662487][   T11]  ? __pfx_process_scheduled_works+0x10/0x10
[  574.662508][   T11]  ? assign_work+0x3cf/0x5d0
[  574.662528][   T11]  worker_thread+0xa47/0xfb0
[  574.662560][   T11]  kthread+0x38b/0x480
[  574.662584][   T11]  ? __pfx_worker_thread+0x10/0x10
[  574.662603][   T11]  ? __pfx_kthread+0x10/0x10
[  574.662627][   T11]  ret_from_fork+0x514/0xb70
[  574.662652][   T11]  ? __pfx_ret_from_fork+0x10/0x10
[  574.662675][   T11]  ? __switch_to+0xc89/0x1420
[  574.662696][   T11]  ? __pfx_kthread+0x10/0x10
[  574.662720][   T11]  ret_from_fork_asm+0x1a/0x30
[  574.662752][   T11]  </TASK>
[  574.958361][ T5621] block nbd4: Receive control failed (result -32)
[  574.968539][   T11] block nbd4: Send control failed (result -32)
[  574.974899][   T11] block nbd4: Request send failed, requeueing
[  574.981492][   T11] block nbd4: Dead connection, failed to find a fallback
[  574.989646][   T11] block nbd4: shutting down sockets
[  574.995208][   T11] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  575.005066][   T11] Buffer I/O error on dev nbd4, logical block 0, async page read
[  575.013111][   T11] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 3 prio class 2
[  575.022791][   T11] Buffer I/O error on dev nbd4, logical block 1, async page read
[  575.031372][   T11] Buffer I/O error on dev nbd4, logical block 2, async page read
[  575.039285][   T11] Buffer I/O error on dev nbd4, logical block 3, async page read
[  575.122101][ T1652] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  575.131817][ T1652] Buffer I/O error on dev nbd4, logical block 0, async page read
[  575.139926][ T1652] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  575.149650][ T1652] Buffer I/O error on dev nbd4, logical block 1, async page read
[  575.158333][ T1652] I/O error, dev nbd4, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 2 prio class 2
[  575.169942][ T1652] Buffer I/O error on dev nbd4, logical block 2, async page read
[  575.178321][T18947] bridge0: port 2(bridge_slave_1) entered disabled state
[  575.179982][ T1652] Buffer I/O error on dev nbd4, logical block 3, async page read
[  575.186417][T18947] bridge0: port 1(bridge_slave_0) entered disabled state
[  575.195716][ T1652] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  575.210278][ T1652] Buffer I/O error on dev nbd4, logical block 0, async page read
[  575.219388][ T1652] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 3 prio class 2
[  575.229499][T18947] dummy0: left promiscuous mode
[  575.238187][ T1652] Buffer I/O error on dev nbd4, logical block 1, async page read
[  575.249126][   T11] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2
[  575.261391][   T11] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2
[  575.272301][   T11] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2
[  575.278264][T18947] wg1: left promiscuous mode
[  575.287547][T17024] ldm_validate_partition_table(): Disk read failed.
[  575.295339][T17024] Dev nbd4: unable to read RDB block 0
[  575.302004][T17024]  nbd4: unable to read partition table
[  575.313785][T17024] ldm_validate_partition_table(): Disk read failed.
[  575.321533][T17024] Dev nbd4: unable to read RDB block 0
[  575.330006][T17024]  nbd4: unable to read partition table
[  575.358342][T18947] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  575.459295][T18955] gretap0: entered promiscuous mode
[  575.465754][T18955] macsec1: entered allmulticast mode
[  575.471186][T18955] gretap0: entered allmulticast mode
[  575.478949][T18955] gretap0: left allmulticast mode
[  575.484069][T18955] gretap0: left promiscuous mode
[  575.506498][   T36] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  575.515584][   T36] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  575.524680][   T36] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  575.533620][   T36] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  576.174445][  T135] net_ratelimit: 36 callbacks suppressed
[  576.174469][  T135] bond2: (slave batadv0): failed to get link speed/duplex
[  576.294415][   T37] bond2: (slave batadv0): failed to get link speed/duplex
[  576.404577][   T36] bond2: (slave batadv0): failed to get link speed/duplex
[  576.514387][  T135] bond2: (slave batadv0): failed to get link speed/duplex
[  576.624423][  T135] bond2: (slave batadv0): failed to get link speed/duplex
[  576.734494][   T37] bond2: (slave batadv0): failed to get link speed/duplex
[  576.844449][   T36] bond2: (slave batadv0): failed to get link speed/duplex
[  576.954414][   T36] bond2: (slave batadv0): failed to get link speed/duplex
[  577.064608][   T12] bond2: (slave batadv0): failed to get link speed/duplex
[  577.175508][   T12] bond2: (slave batadv0): failed to get link speed/duplex
[  581.254491][   T12] net_ratelimit: 36 callbacks suppressed
[  581.254516][   T12] bond2: (slave batadv0): failed to get link speed/duplex
[  581.374401][   T37] bond2: (slave batadv0): failed to get link speed/duplex
[  581.484478][   T36] bond2: (slave batadv0): failed to get link speed/duplex
[  581.594416][   T12] bond2: (slave batadv0): failed to get link speed/duplex
[  581.704448][   T36] bond2: (slave batadv0): failed to get link speed/duplex
[  581.814445][   T36] bond2: (slave batadv0): failed to get link speed/duplex
[  581.934451][   T12] bond2: (slave batadv0): failed to get link speed/duplex
[  582.044597][  T135] bond2: (slave batadv0): failed to get link speed/duplex
[  582.154432][   T37] bond2: (slave batadv0): failed to get link speed/duplex
[  582.264472][   T12] bond2: (slave batadv0): failed to get link speed/duplex