last executing test programs:

9.361758714s ago: executing program 1 (id=6957):
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) (async)
recvmmsg(r0, &(0x7f0000004540)=[{{0x0, 0x0, &(0x7f0000004140)=[{&(0x7f0000000280)=""/79, 0x4f}], 0x1}, 0x3}], 0x1, 0x0, 0x0) (async)
syz_emit_ethernet(0x86, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x3, 0x1, "56805c734ee222c29de4125f81f6e030a5441a99f362cd24e0a1ac2291500733", "467f517bd818d5a4a8d26ae61b4cbf13", {"31ffc21d2e9bfb1eb3c03976ed837b6f", "876605ac29dcb96a8901e0711afb3db3"}}}}}}}, 0x0) (async, rerun: 32)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x60ff78ce1cb3c070}, 0x94) (rerun: 32)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000007300)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000006200)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) (async)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r2 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000100)=0x8) (async)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) (async)
write$tun(r3, &(0x7f0000000000)=ANY=[], 0x38) (async)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r3, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r4, 0x0, 0x0, 0x3, 0x1) (async)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) (async, rerun: 64)
r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) (rerun: 64)
writev(r5, &(0x7f0000019880)=[{&(0x7f0000000400)="fb", 0xffffff5c}, {&(0x7f00000197c0)="1902eb02d5e5f29e59e1a7caec33eb76d2430da474d87e367f6598d026438b65eda8341073b6752abdcee080c8e1e876b25227c37d7dd79886ce33f13e857c8eda1cecf6ac36c03dbf54e3cb5136da5a33fee76fb3113f8b6700e9e5fc006b8eed665fed48738d59395ad07438c3610ae3976aac75caf2facafa21c25be3c2", 0x7f}], 0x2)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) (async)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r7, &(0x7f0000000200), 0x806000)
ioctl$FS_IOC_RESVSP(r7, 0x40305829, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x9ffffc}) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r6], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r8, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 64)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (rerun: 64)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r9, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) (async, rerun: 32)
r10 = socket$netlink(0x10, 0x3, 0x0) (rerun: 32)
sendmsg$netlink(r10, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)={0x28, 0x10, 0x1, 0x0, 0x0, "", [@nested={0xffffffffffffff85, 0x0, 0x0, 0x0, [@typed={0x3e, 0x0, 0x0, 0x0, @u64}, @typed={0x8, 0x1c, 0x0, 0x0, @u32=0xc9}]}]}, 0x28}], 0x1, 0x0, 0x0, 0xb305e06d8ab48277}, 0x0)

8.869848035s ago: executing program 1 (id=6961):
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_route(0x10, 0x3, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0xb, 0x9}, 0x48)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
socket(0x10, 0x3, 0x0)
r2 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$sock_int(r2, 0x1, 0x21, &(0x7f0000000100), 0x4)
unshare(0x22020400)
r3 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$IPT_SO_SET_ADD_COUNTERS(r3, 0x0, 0x41, 0x0, 0x78)
setsockopt$sock_int(r2, 0x1, 0x12, &(0x7f00000000c0), 0x4)
r4 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0xfffffffd, 0x4000}, 0xfffffffffffffe31)
r5 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000000), 0x4)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r5, 0x10e, 0x4, &(0x7f0000000100)=0x1800, 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r5)
r6 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r6, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x58)
r7 = accept4(r6, 0x0, 0x0, 0x0)
poll(&(0x7f0000000380)=[{r7, 0x10}], 0x1, 0x2d)
ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000040)=@ethtool_link_settings={0x2, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x20, 0x8, [0x0, 0x0, 0x0, 0x100, 0x5, 0xfffffffc, 0x0, 0x2]}})
recvmsg(r1, &(0x7f0000004ac0)={0x0, 0x0, 0x0}, 0x4002)
recvmsg(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000002440)=[{&(0x7f0000002a00)=""/4106, 0x679}, {&(0x7f0000001440)=""/4096, 0x1000}], 0x2}, 0x100)
sendmsg$nl_generic(r1, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c0000001000010700000000000000000a0000000600010018"], 0x1c}}, 0x0)
bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20)
write(r0, &(0x7f0000000400)="5f78644a041d3aafb12673378982f9e815aa0978a0e2c6e20a98ac8181eefa4fd2e00624b73b7562d58032093361fc75559cb78ddfbf6b8a7e9867d509dcdebfba5404ed2b045b319f34a17cdeeb123e352e379515178482a139c14551ea881144e8eef10e0e92ef96bc8076fa4765f4531282b74393e09b278d9bc8df8ed6cf775adfe16241e46f6a069a7e8206325dab2405bb556a4da1705fe14ae714659b3939d9658bd14338083c8adeb17275175b408d117551de842000d3a7a828d7c65dc6c4f569837166aa3bd8bf689a8bfe84a37a88", 0xd4)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001100)={r0, 0x0, &(0x7f00000003c0)=""/61}, 0x20)
mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x80010, r1, 0x93e22000)

7.852031625s ago: executing program 1 (id=6969):
sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xd1}, 0x50)
sendmsg$ETHTOOL_MSG_DEBUG_GET(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008004}, 0x20000080)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="2c385a7af3", 0x5)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
r2 = accept4(r1, 0x0, 0x0, 0x80800)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x6, &(0x7f0000000500)=0x8, 0x4)
writev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000002c0)="aefd", 0x2}], 0x1)
sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0x17, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000074f6967d00000000000000180100002020702500000000002020207baaf8ff00000000bda100000000000027010000f8ffffffb702000008000000b7030000000000002500000006000000be91000000000000b502ecffffff00008500000005000000b70000000000000095"], &(0x7f00000002c0)='GPL\x00', 0xf, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r6=>0x0})
sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x8044)

7.744100644s ago: executing program 4 (id=6973):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'virt_wifi0\x00', <r2=>0x0})
setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000000)={@remote, r2}, 0x14)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="2400000000000907020000000000008007050000", @ANYRES32=0x0, @ANYBLOB="0c000180060002000f000000"], 0x24}, 0x1, 0x5502000000000000}, 0x4000)
sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newtfilter={0x4c, 0x11, 0xd27, 0x2000, 0x0, {0x0, 0x0, 0x74, r2, {}, {0xafabc05531515610, 0xfff3}, {0x8, 0x5}}, [@TCA_RATE={0x6, 0x5, {0xdc}}, @TCA_RATE={0x6, 0x5, {0xff, 0x7}}, @TCA_RATE={0x6, 0x5, {0x76, 0x2}}, @TCA_CHAIN={0x8, 0xb, 0x18cb}, @TCA_CHAIN={0x8, 0xb, 0x1}]}, 0x4c}, 0x1, 0xf0ffffffffffff, 0x0, 0x1c005}, 0x24048004)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x80, 0x0)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="380000001800dd8d00000000fbdbdf25020000100000000500000000060015000200000014001680100008800c00018005"], 0x38}}, 0x0)
bind$inet(r5, 0x0, 0x0)
r7 = socket$nl_xfrm(0x10, 0x3, 0x6)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r7, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4)
r8 = socket$nl_xfrm(0x10, 0x3, 0x6)
pread64(r4, &(0x7f0000000340)=""/129, 0x81, 0x6)
sendmsg$nl_xfrm(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="fc0000001900010000000000fcdbdf2500000000000000000000000000000000fe8000000002000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000004000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000001000000000000004400050000000000000000000000000000000000000000022b0000000a000000fe8000000000000000000000000000aa0000000004"], 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0)
r9 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r9, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10)
setsockopt$sock_int(r9, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4)
r10 = socket(0x2b, 0x80801, 0x1)
setsockopt$inet6_mtu(r10, 0x29, 0x1e, 0x0, 0x15)
connect$inet(r9, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10)
sendmmsg$inet(r9, &(0x7f0000004d00)=[{{0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x400000000000284, 0xf00)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, 0x0, 0x0)
openat$cgroup_pressure(r4, &(0x7f0000000040)='io.pressure\x00', 0x2, 0x0)
close(0x4)

7.504455731s ago: executing program 3 (id=6977):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0)
sendmmsg$inet(r0, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000340)="b9cd14c222ee", 0x4b}], 0x1}}], 0x1, 0x20008000)

7.480785128s ago: executing program 0 (id=6979):
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
socket$inet6(0xa, 0x2, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
close(r0)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
connect$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe)
setsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, &(0x7f0000000080)={0x4, 0x4}, 0x2)

7.339274992s ago: executing program 3 (id=6980):
sendmsg$ETHTOOL_MSG_DEBUG_GET(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f00000008c0)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="140002"], 0x17c}, 0x1, 0x0, 0x0, 0x4008004}, 0x20000080)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
pipe(&(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x840)
sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x20000040}, 0x24004000)
r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r6, <r7=>0xffffffffffffffff}, 0x4)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702100000000002020267b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000fffffff88500000004000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70500000800000085000000a700000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r8}, 0xc)
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r9=>0xffffffffffffffff})
splice(r4, 0x0, r9, 0x0, 0xf3a, 0x0)
write(r2, &(0x7f0000000240)="94", 0x1)
vmsplice(r9, &(0x7f0000000380)=[{&(0x7f0000013580)="0dd2e7c8926dc6acd0ae6c178054e95986faff9544de5fc4c30adf404da41181a77466ac5075905ea5f50134fdd517a957fe2ee59b61f9fe8d7aabe595ea23de2723e437af0423a56686a4c2d957be1a0ab922fbbd3cb1d8c6ab0d58440a327c8eb05d445b4ac5f20abe449e4084f8b996268d0564f67980d3ed3479e0edfe5cec7b4f89bface391c9c4c58ad123b91c33173c72326d1df18804a9ea20f9ece48f784d8ca2318e3d2b316666b5dfb7295c4915989d5bcb120e8fedaa97b93a137c256ce4", 0x20013644}, {&(0x7f0000013680)="c578381bf5113dad8319d9ea5294285ae9a90384ce23866477bef9de4399237d8b3522c9c194e71edaf3332a2f169682f9d8fa271683d4d441b710409e506333e0c3b64e52e8720734b6787f4a84f5bebb046649c6c697d978affd349031b2cd874c7a8961a586a9f2d62f945e7a5bf2f5f7a31684c0503704881d2578a2a98ac3ef4e4a4b0dcdb70db735d5c1652eed3848b2dd4131bb0eb7cfadfaf5", 0x9d}], 0x2, 0x0)
tee(r1, r9, 0x8f5, 0x0)
write(r3, 0x0, 0x0)
r10 = socket(0xa, 0x3, 0x87)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000080)={'gretap0\x00', <r11=>0x0})
ioctl$sock_inet6_SIOCSIFADDR(r10, 0x8916, &(0x7f0000000000)={@dev={0xfe, 0x80, '\x00', 0xa}, 0x78, r11})
ioctl$sock_inet6_tcp_SIOCINQ(r10, 0x8936, &(0x7f0000000000))
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="2c385a7af3", 0x5)
sendmsg$NFNL_MSG_ACCT_GET(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000300), 0xc, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB="380000000107050000000000000000000000000709001a0073797a30000000000c000340000000000000007a3000000000a26759ca0edb590dfcb53c18f2bbd2da9c186e80e9b62a34"], 0x38}}, 0x80)
r12 = accept4(r0, 0x0, 0x0, 0x800)
sendmmsg$alg(r12, &(0x7f0000000640)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9c52163448412ba8000000000000", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58e925e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x1, 0x40800)
recvmsg(r12, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r13 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r13, 0x8933, &(0x7f00000013c0)={'wlan1\x00'})

7.329794595s ago: executing program 0 (id=6981):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="48000000400007012bbd700000000000017c0000040042801400018010000400cab1893820b8d2a935215e0a1c0002801800118014001c000a"], 0x48}, 0x1, 0x0, 0x0, 0x48814}, 0x4048080) (fail_nth: 7)

6.822344306s ago: executing program 2 (id=6982):
r0 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000580)={0x0, @in={{0x2, 0x4e21, @private=0xa010100}}, 0xfff, 0x4}, &(0x7f0000000640)=0x90)
socket$inet6_tcp(0xa, 0x1, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10)
syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1d19cb307b3472ab9cdb042d2", "643fcbb2c5a57df67d074af6e8dafe09"}}}}}}}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x60ff78ce1cb3c070}, 0x94)
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
recvmmsg(r1, &(0x7f0000000940)=[{{0x0, 0xffffff07, &(0x7f0000000540), 0x2}, 0x3b61}], 0x4000048, 0x0, 0x0)

6.699209707s ago: executing program 0 (id=6983):
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.idle_time\x00', 0x0, 0x0)
connect$l2tp(r0, &(0x7f0000000040)={0x2, 0x0, @rand_addr=0x64010101}, 0x10)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x1f, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x1b}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000200000000000000100850000007b"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYRES32=r2, @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="03000000040000000400000009"], 0x48)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[], 0x48)
r6 = socket$unix(0x1, 0x1, 0x0)
setsockopt$sock_attach_bpf(r6, 0x1, 0x4c, &(0x7f0000000000), 0x4)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x20)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r7, <r8=>0xffffffffffffffff}, 0x4)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x11, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000004b000000b7080000000000007b8af8ff00000000b7080000070000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r8, @ANYBLOB="0000000000000000b70500000800000085000000b6000000850000000700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000007c0)={r9, r8}, 0xc)
connect$unix(r6, &(0x7f0000000100)=@abs={0x1}, 0x6e)
ioctl$BTRFS_IOC_QGROUP_ASSIGN(r6, 0x40189429, &(0x7f0000000300)={0x0, 0xc, 0x643})
r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x18, 0x7, &(0x7f00000001c0)=ANY=[@ANYRES64=r1, @ANYRES32=r4, @ANYBLOB="000000000000000018100000", @ANYRES32=r5, @ANYBLOB="000000000000000095"], &(0x7f0000000a00)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={r10, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000900)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
ioctl$BTRFS_IOC_SNAP_DESTROY(r5, 0x5000940f, &(0x7f0000000a40)={{r4}, "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"})
bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r3, 0x0, 0x0}, 0x10)

6.679507358s ago: executing program 1 (id=6984):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000005a0000008500000022000000180100002020702500000000002020200100000000000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r0, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc92b18236457ee3c8", 0x0, 0x8001, 0x2000, 0x0, 0x0, 0x0, 0x0}, 0x50)

6.575188431s ago: executing program 1 (id=6985):
r0 = socket(0x40000000015, 0x5, 0x0)
setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000000)=0x400001, 0x4) (async, rerun: 64)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (rerun: 64)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async)
r2 = socket(0x400000000010, 0x3, 0x0) (async)
r3 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) (async)
sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@newtfilter={0x60, 0x2c, 0xd3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xb, 0xfff2}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x30, 0x2, [@TCA_BASIC_EMATCHES={0x2c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6248}}, @TCA_EMATCH_TREE_LIST={0x20, 0x2, 0x0, 0x1, [@TCF_EM_META={0x1c, 0x1, 0x0, 0x0, {{0x7, 0x4, 0x4}, [@TCA_EM_META_LVALUE={0x4}, @TCA_EM_META_HDR={0xc, 0x1, {{0x5, 0x6}, {0x5, 0x40, 0x2}}}]}}]}]}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async)
syz_genetlink_get_family_id$SEG6(&(0x7f0000000140), r2)

6.539422212s ago: executing program 3 (id=6986):
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000a00)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x68, 0x68, 0x2, [@func_proto={0x0, 0x0, 0x0, 0xd, 0xa}, @enum={0x0, 0x1, 0x0, 0x6, 0x4, [{0x1, 0x5000}]}, @struct={0xe, 0x3, 0x0, 0x4, 0x0, 0x10, [{0xf, 0x1, 0x5}, {0x5, 0x0, 0x1}, {0x0, 0x2, 0x9}]}, @union={0xd, 0x1, 0x0, 0x5, 0x0, 0x9, [{0x6, 0x4, 0xfffffffe}]}]}}, &(0x7f0000000f40)=""/4089, 0x82, 0xff9, 0xb, 0x1}, 0x28)
r0 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$MRT6_ASSERT(r0, 0x29, 0xcf, &(0x7f0000000040)=0x1, 0x4)
r1 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r2=>0x0})
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x41100, 0x19, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000003c0)={0x5, 0x9, 0x6, 0x6}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x1c3081, 0x0)
close(r4)
r5 = socket$inet6(0xa, 0x2, 0x3a)
connect$inet6(r5, &(0x7f0000000180)={0xa, 0x4e1e, 0xb, @local, 0x9}, 0x1c)
sendto$inet6(r5, &(0x7f0000000040)="800037bbfa9ba1ce", 0xffe9, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080))
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000500)={'syzkaller0\x00', @link_local})
write$cgroup_subtree(r3, &(0x7f0000000380)=ANY=[@ANYBLOB="8fedcb5d07081196f37538e486dd6372ce22667f2c00dbf6e97158b33d4fec877f1b6d76745b686158bbcfe8875afdef00010000000029"], 0x66)
sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x1, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffe0}, {0xfff1, 0x4}, {0x1}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_BETA={0x8, 0x6, 0x8}, @TCA_FQ_PIE_LIMIT={0x8, 0x1, 0x9000000}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2}, 0x2404441c)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x1, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x14318, 0x1a2a1}, [@IFLA_IFNAME={0x14, 0x3, 'xfrm0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000884}, 0x0)

6.491044102s ago: executing program 0 (id=6987):
socketpair(0x5, 0xa, 0x4, &(0x7f0000000200)={<r0=>0xffffffffffffffff})
sendto$inet(r0, &(0x7f00000003c0)="e34f595b422654f60b132a2eaf47bf342e0361ca9158ab695e54ccdfa3ad105fc3f393154bce7baeb663be437911ba2254a26b000eca1fe8f765cec5bcd441e34f847073", 0x44, 0x20000080, 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000008000000000000005000100070000000900020073797a30000000001400078008001200000000000500150004000000050005000000000005000400000000000d000300686173683a6d6163"], 0x5c}}, 0x0)
r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000), 0x4)
ioctl$XFS_IOC_START_COMMIT(r2, 0x80585882, &(0x7f0000000040))
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1600000004000000080000000b00000000000000", @ANYRES32, @ANYBLOB="0000000000001800"/20, @ANYRES32=0x0, @ANYRES32=r2, @ANYBLOB='\x00'/28], 0x50)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b70300000000ff80850000002d00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000380)={r4}, 0xc)
setsockopt$IP6T_SO_SET_ADD_COUNTERS(r0, 0x29, 0x41, &(0x7f0000000500)=ANY=[@ANYBLOB="35186558edcadb860000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000b5ef40bc68aa2deeff0000000000000000000000000000000000000000000000000000000000000000000000000000452ff6656f93f4c28b5e301dabd6b931ee4f8952cce869b559b2067d9bd5fc05e3689173c611c7af04d902524bc2c687e27129b3"], 0x68)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000340)={'batadv_slave_1\x00', <r6=>0x0})
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_PAUSE_GET(r7, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000001940)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r8, @ANYRES16=r6, @ANYRES32=r6], 0x20}}, 0x0)

6.489378533s ago: executing program 4 (id=6988):
r0 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000580)={0x0, @in={{0x2, 0x4e21, @private=0xa010100}}, 0xfff, 0x4}, &(0x7f0000000640)=0x90)
socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x15, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x7}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x401}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0xabb58da18564204b}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8001}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0xa6}}]}, &(0x7f0000000000)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x19}, 0x94)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10)
syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1d19cb307b3472ab9cdb042d2", "643fcbb2c5a57df67d074af6e8dafe09"}}}}}}}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x60ff78ce1cb3c070}, 0x94)
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
recvmmsg(r2, &(0x7f0000000940)=[{{0x0, 0xffffff07, &(0x7f0000000540), 0x2}, 0x3b61}], 0x4000048, 0x0, 0x0)

6.144697502s ago: executing program 0 (id=6989):
r0 = socket$kcm(0x11, 0x3, 0x0)
r1 = accept(r0, &(0x7f0000000440)=@pppol2tp={0x18, 0x1, {0x0, <r2=>0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, &(0x7f0000000500)=0x80)
getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000540)={<r3=>0x0, 0x8}, &(0x7f0000001780)=0x8)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f00000017c0)={r3, 0x1}, &(0x7f0000001800)=0x8)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001840)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a20000000000a03000000000000000000070080000900010073797a30000000005c000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d18001280140001800e000100636f6e6e6c696d697400000008000340000001101400000010000100bacf8b95000000000084000a"], 0xa4}}, 0x7c854)
setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4)
r5 = socket(0x10, 0x3, 0x0)
r6 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001000070100dd21200100005b91325b38", @ANYRES32=0x0, @ANYBLOB="000000000080000008001b00000000000500100005"], 0x30}}, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x905, 0x0, 0x0, {0x0, 0x0, 0x4c, 0x0, 0x20081, 0x300}, [@IFLA_GROUP={0x8}, @IFLA_OPERSTATE={0x5, 0x10, 0x6}]}, 0x30}, 0x1, 0xffffa888}, 0x0)
r7 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$PPPIOCGCHAN(r2, 0x80047437, &(0x7f00000001c0))
sendmsg$NFT_BATCH(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000d40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000070000000900010073797a3000000000c8000000090a010400000000000000000700000108000a40000000000900020073797a31000000000900010073797a300000000008000540000000041c000980100002800c0001800800014000000002080001400000ffff6d000d"], 0x110}, 0x1, 0x0, 0x0, 0x8840}, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="400000001000030400"/20, @ANYRESDEC=r1, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES32=<r9=>r7, @ANYBLOB='\b\x00\n\x00', @ANYRES64=r5, @ANYRES8=r6, @ANYBLOB="874920767e70fd358cd8cddd03d55781eb8ffdfd77a0b57cbd25e6f47f1adb20b7397658cd0075faaec62bf72f7cf5721a950e89ebbaff5f71e00b6183af2fd1edd77b7ef078a6688cacae68a93776e91754868a1c230e40d7f970d3df8811dfcba43d8f0199cd1182c6f7339de30705877ce86ca139a86e47d973b971bffb754c76fa0340d0a4"], 0x40}}, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080))
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000300)={"272f7181078b520a09ba9984181865d9", 0x0, 0x0, {0x80, 0x3}, {0x2, 0xffffffff}, 0xd434, [0x3, 0xfffffffffffffffa, 0x7, 0x4, 0x8, 0x400, 0x5, 0x7bd, 0x92, 0x8, 0xb, 0x0, 0xf14b, 0x7fffffffffffffff, 0x10e, 0x6]})
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x8010, 0xffffffffffffffff, 0xfffff000)
r10 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r10, 0x107, 0xc, &(0x7f0000000040)=0xffffffff, 0x4)
r11 = bpf$MAP_CREATE(0x0, &(0x7f0000001900)=ANY=[@ANYRESOCT=r9], 0x50)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000100)={r11, &(0x7f00000016c0)="bdd1812863dc04ec1a88d427e765b45358b6e7a49b8a6f98812f9e61b17444741d6c3312dba780ae7ed533a9f4f9a3775141d37bc861d6ffd809ecc7999f9caeb962073fb1c5ad012c8c1c34731c45d560f0f290774ca6418e4e1630007d18448be4b2a22c4aca7b0386c715a9aff8a12a0b8b6b9b0e3151607cde8f79afdbf730fbe9b5f7091f8c5283c4ad232446d6b156ba9e105ec453a131c97ee40c3c2ca8ec9d6ea25c854ec031ca341f5e9d6a68"}, 0x20)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
getsockname$packet(r11, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000240)=0xfffffffffffffdac)
pipe(&(0x7f0000000200)={<r12=>0xffffffffffffffff, <r13=>0xffffffffffffffff})
write(r13, &(0x7f0000000340), 0x11000)
vmsplice(r12, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
write$cgroup_int(r13, &(0x7f0000000040)=0x4, 0x12)

5.955268372s ago: executing program 2 (id=6990):
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) (async)
unshare(0x8000000)
r0 = socket$kcm(0xa, 0x2, 0x0)
sendmsg$sock(r0, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e25, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) (async)
sendmsg$sock(r0, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e20, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0xfffffffc}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) (async)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="01000000050000000100000007"], 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000740), 0x20075, r1}, 0x38) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x1c, 0x39, 0x1, 0x7fffa, 0x4, {0x1}, [@typed={0x8, 0xec, 0x0, 0x0, @u32=0x410c}]}, 0x1c}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0xfffffffffffffe8b, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async)
r3 = bpf$ITER_CREATE(0xb, 0x0, 0x0)
close(r3)
write$nci(r3, &(0x7f0000000480)=@NCI_OP_RF_INTF_ACTIVATED_NTF={0x1, 0x1, 0x3, 0x5, 0x2, @b={0x7, 0x2, 0x2, 0x1, 0x2, 0x3, 0x65, {0x44, "2c00b38a5357f4712e384c2cf7792324488372a67928406a9fdeed4f45143b7923eaf9b75fd33b392992fc29c9d927ffcbb048f89d8b9edd11b038b0b96b09069f598762"}, 0x2, 0x2f, 0x7, 0xf6, 0x1b, "d76475a5826c9ba44d9891a8bfa19f926f81f0e8071b24de6ea0c1"}}, 0x6f) (async)
syz_emit_ethernet(0x82, &(0x7f0000000100)={@multicast, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x74, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x1, 0x0, 0x3, 0x61, 0x0, {0x16, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x2f, 0x9, @dev={0xac, 0x14, 0x14, 0x10}, @remote, {[@timestamp_addr={0x44, 0x44, 0x0, 0x1, 0x0, [{@rand_addr=0x86dd}, {@remote}, {@dev={0xac, 0x14, 0x14, 0x32}}, {@rand_addr, 0x4f}, {@multicast2}, {@loopback}, {@local, 0x4}, {@multicast1}]}]}}}}}}}, 0x0) (async)
r4 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x21c000, 0x800}, 0x20) (async)
r5 = socket$tipc(0x1e, 0x2, 0x0) (async)
setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000500)={0x0, @in6={{0xa, 0x4e23, 0x8, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xffff}}}, 0x84) (async)
r6 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$sock_int(r6, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4)
sendmmsg(r6, &(0x7f0000000c80)=[{{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000000)='\b', 0x1}], 0x1, &(0x7f0000000500)=ANY=[], 0x218}}], 0x1, 0x4008845)
setsockopt$XDP_UMEM_COMPLETION_RING(r4, 0x11b, 0x6, &(0x7f00000000c0)=0x20000, 0x4) (async)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000400)={'dummy0\x00', <r7=>0x0})
setsockopt$XDP_UMEM_FILL_RING(r4, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4)
bind$xdp(r4, &(0x7f0000000100)={0x2c, 0x0, r7}, 0x10) (async)
r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r8}, 0x8) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x10, 0x8, &(0x7f0000001340)=ANY=[@ANYBLOB="beaa00000000000079a008000000000018120000", @ANYRES32=r8, @ANYBLOB="0000000000000000bf0300000000000085000000c9000000b70000000000000095"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xf}, 0x94)

5.432758408s ago: executing program 4 (id=6991):
r0 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4)
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000300)={"272f7181078b520a09ba9984181865d9", 0x0, <r1=>0x0, {0x80, 0x3}, {0x2, 0xffffffff}, 0xd434, [0x3, 0xfffffffffffffffa, 0x7, 0x4, 0x8, 0x400, 0x5, 0x7bd, 0x92, 0x8, 0xb, 0x0, 0xf14b, 0x7fffffffffffffff, 0x10e, 0x6]})
ioctl$BTRFS_IOC_RM_DEV_V2(r0, 0x5000943a, &(0x7f00000006c0)={{r0}, r1, 0xc, @unused=[0x17a184f9, 0x1ff, 0x3, 0x100000001], @subvolid=0x80000001})
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="07000000040000000800000003"], 0x50)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000100)={r2}, 0x20) (fail_nth: 4)
r3 = socket$nl_route(0x10, 0x3, 0x0)
pipe(&(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
write(r5, &(0x7f0000000340), 0x11000)
vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
write$cgroup_int(r5, &(0x7f0000000040)=0x4, 0x12)
sendmsg$nl_route(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000000)=@ipv4_newaddr={0x18, 0x14, 0x509, 0x70bd27, 0x25dfdbfc, {0x2, 0x38, 0x0, 0xff}}, 0x18}, 0x1, 0x0, 0x0, 0x4040014}, 0x0)
sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000100)=@phonet={0x23, 0x5, 0x0, 0x13}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000240)="2705020059feff000600002fb96dbcf706e105000700810000060806accb", 0x1e}, {&(0x7f00000002c0)="88a8", 0x2}, {&(0x7f00000005c0)="ac37979d1e439e19a3fab5e73acb3e944e5067314670e86878ea780b34a68a9f01b15a9ff9522b89b6c88218d5f257529aa4e34fab88a671ab48b27ac6a4207fe8a270d3d5b82f100a392980a058dddf565e7deaddd88af7ee746b611a2c5033762a03a3b3e135cf3e1b253385ed8c0de1a820324943afbf72b1509334a4815debe79c5d881fe356404ebd716994cc31b9279965133894ceca066cba08977bfd328ee08749c20449017c661b7cfb27f29f4c2a5ef569403ee926899deada9ab15aba6b7054dc68cf2a65ca130aa11ca288230c24a6f2cd9a865615ce0bdeceb0d07f6a9b693d9aea5629b7578a843b98a8", 0xf1}], 0x3}, 0x894)

5.050273626s ago: executing program 2 (id=6992):
syz_emit_ethernet(0x3e, &(0x7f0000000000)={@link_local={0x3}, @random="f287a0060f06", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x5, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x3, 0x0}, @local}, @time_exceeded={0x3, 0x8998bcce58ae484, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, @multicast1, @dev={0xac, 0x14, 0x14, 0x3f}}}}}}}, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x5, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}, [@tmpl={0x44, 0x5, [{{@in=@dev={0xac, 0x14, 0x14, 0x40}, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3}]}]}, 0xfc}}, 0x0)
sendmsg$nl_xfrm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=@migrate={0x138, 0x21, 0x1, 0x0, 0xfffffffe, {{@in6=@empty, @in6=@dev={0xfe, 0x80, '\x00', 0x1d}, 0xfffc, 0x0, 0x1, 0x0, 0xa, 0xe0, 0x80}, 0x2}, [@migrate={0xe8, 0x11, [{@in6=@dev={0xfe, 0x80, '\x00', 0x11}, @in=@multicast2, @in=@multicast1, @in6=@remote, 0x3c, 0x0, 0x0, 0x0, 0xa, 0xa}, {@in6=@local, @in=@multicast2, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x2b, 0x1, 0x0, 0x3504, 0xa, 0x2}, {@in=@private=0xa010102, @in6=@private0, @in6=@remote, @in=@broadcast, 0x33, 0x1, 0x0, 0x0, 0x2, 0xa}]}]}, 0x138}, 0x1, 0x0, 0x0, 0x800}, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000600), 0x420000, 0x0)
ioctl$PPPIOCGIDLE32(r1, 0x8008743f, &(0x7f0000000640))
ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r1, 0x4048587b, &(0x7f0000001e00)={{<r2=>r1, &(0x7f0000000680)='\x00', 0x40, &(0x7f00000006c0)={@align=0x1, {0x100, 0x1, 0x8, 0x2}}, 0xd, &(0x7f0000000780)={@_ha_fsid}, &(0x7f00000007c0)}, 0x7, &(0x7f0000001d00)=[{0x3, 0x3, &(0x7f0000000800)='%)-(!$\x00', &(0x7f0000000840)="b85240d908bc0591dafb1fd20f9f111a591266ea12306a1808da4f88d818b278c3bab852b2e98d43b66e29e36fb3c264", 0x30, 0x30}, {0x3, 0xd3e9, &(0x7f0000000880)='$\x00', &(0x7f00000008c0)="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", 0x1000, 0x2a}, {0x2, 0x3, &(0x7f00000018c0)='/dev/ppp\x00', &(0x7f0000001900)="d2fab43306c6d91ad9e7a5a37637d2f29eedbeb5a930b5c5eb4cb30580f6c4ec60de1265d41b2d4977fc2c940e64eedb3857a109d3be9ec03a21880ae63c115719afd81edce4867d4a7e43812796e1b05ae0ed4cec4e49608650f3ef311935", 0x5f, 0xa}, {0x2, 0x0, &(0x7f0000001980)='nl80211\x00', &(0x7f00000019c0)="284b771c5a62486cc9f3e3db8697a416d432f016aec6f92c5960b6ad2c", 0x1d, 0x18}, {0x2, 0x2e4d, 0x0, &(0x7f0000001a40)="614abe70104720497fcbd2bebfe010f3318ed5e9245a7f2eb12dc7fa9ca4f33854494312249005fff6887c28147024f9832dddc8f34b734ea6905ed0dbc3bbd3725b2d55a0854f158ac00202818d8caa5c73ef5c716f78dc5c4f370fb44d5641f6ce2789b9fe61458f67021a6bb005f4f79f777ff30158120336fe7ff3597b85235ff450f68cbfe4510397c929277826b6ca20c533422404c4b40c17840667abe773", 0xa2, 0x1}, {0x2, 0x4, &(0x7f0000001b00)='\xbb\xbb\xbb\xbb\xbb\xbb', &(0x7f0000001b40)="6b8d7aac4a4ca906342a09df918635970da30f3335adf688b7d8463770391ad5b4d92a38d856c5e8e6aabf35bf665a35573bd293f8dd4ae5071cc87f1479326acf5b0cd613f54dbc80b1490dae7e7729130c6bbe77c0d4295d43f62323c7142ad30a7c15372a60f031a9c9e8a0fa74603bd888fb5e694087369006e0e5957b3fb6b1fa3adca511fab8e705f93eb9c05bfc63da50189fbc7fd0", 0x99, 0x22}, {0x2, 0x61, &(0x7f0000001c00)='\xfb#}\']{\\\x00', &(0x7f0000001c40)="2f64133db8caf5009235e9fe974ce180c69693fc1c9e53e2e64a2330e2eada8aaf7b087c665c1f7676f72e952efad372a908572136aa621038f6ba39aaffa37ee714aa73782b607f24f3b54ce6ab264b727276beace8d79891e670f191fb471780090e7618b71a7627c92988445f60c5d313581c475a20737b9daf6fe36243bed2de5e2ef69c2fd5dbcdbc7a", 0x8c, 0x2}]})
ioctl$TUNSETVNETBE(r2, 0x400454de, &(0x7f0000001e80))
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000700)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000340), 0x0)
r4 = accept4(r3, 0x0, 0x0, 0x800)
sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0xd, 0x20000000ec071, 0xffffffffffffffff, 0x0)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), r5)
sendmsg$NL80211_CMD_START_SCHED_SCAN(r5, &(0x7f0000000580)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x2c, r6, 0x20, 0x70bd29, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0x4}, @NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x800}, @NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x800}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4080}, 0x24040050)
recvfrom$inet(r4, &(0x7f0000001ec0), 0x0, 0x40000101, &(0x7f0000001f00)={0x2, 0x4e21, @private=0xa010100}, 0x10)
mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0)
sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x38}}, 0x0)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
writev(0xffffffffffffffff, &(0x7f00000001c0), 0x0)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r8 = getpid()
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r7, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000340)='./cgroup/cgroup.procs\x00', &(0x7f00000008c0)=[0x45c, 0x9], 0x0, 0x0, 0x2, 0x1, r8}}, 0x40)
sendmsg$nl_generic(r5, &(0x7f00000022c0)={&(0x7f0000001ec0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000002240)={&(0x7f0000001f80)={0x298, 0x1f, 0x1, 0x70bd29, 0x25dfdbff, {0xf}, [@nested={0x30, 0x130, 0x0, 0x1, [@typed={0x4, 0xed}, @typed={0x8, 0x11d, 0x0, 0x0, @pid=r8}, @typed={0x14, 0xd0, 0x0, 0x0, @ipv6=@mcast1}, @typed={0x8, 0x132, 0x0, 0x0, @u32=0x4}, @nested={0x4, 0x4c}]}, @generic="cafa9bd16b32f5b4d6b9a169e6563097bfb639c71554180362b3", @nested={0x4, 0x3f}, @generic="da24d1f81a040088ca774aca9fa3d38246676458ffab9a4e7199de46e3c9c105cc10582f86c80d00ff7abcccee9891c664584052516ee250ebf2f40a8eb6d8be36eba9302ab9f8766f6aa1b065850114c90d77785f0472e664010267e6d1962a9ddd6a1f2a7120d5726201021878bbf7b18ecb5c01f59bc1c9aa0a040b3a38f0b9d8be109c6a", @typed={0x103, 0x84, 0x0, 0x0, @binary="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"}, @typed={0xb, 0xe3, 0x0, 0x0, @str='%)-(!$\x00'}, @nested={0x9d, 0x10c, 0x0, 0x1, [@generic="ca8d7eb4806b91600d8a6893170c7d4d89dc3d7e354defaba9313604e4607059a56180f7d0acde648dd05b02bb1b4f491c9c810a144223ff6af7138f1243c6f78e110e766c0b3bbf538a53693ad251425c5b200ee7ebed9a2969fa8069b8cb8f193b8f97d2857198b6b2a2b4e8297461d83408d4ec4f19f01b1d101705b582f0c342b9f91df7dab59ff0e883ec8ebd206109f30da065496ab9"]}]}, 0x298}, 0x1, 0x0, 0x0, 0x40000}, 0x20000004)

4.964867006s ago: executing program 4 (id=6993):
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'vlan0\x00'})
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080))
r1 = socket$tipc(0x1e, 0x5, 0x0)
r2 = socket$tipc(0x1e, 0x2, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000007c0)={'xfrm0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=@newqdisc={0x8c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x50}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x5c, 0x2, {{0x0, 0x0, 0x400}, [@TCA_NETEM_RATE={0x14, 0xd, {0x0, 0x0, 0x3}}, @TCA_NETEM_SLOT={0x2c, 0xc, {0x1, 0x1000, 0x2, 0xffffffff, 0xde, 0x5}}]}}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x80}, 0x0)
bind$tipc(r2, &(0x7f0000000200)=@name={0x1e, 0x2, 0x2, {{0x40, 0x3}, 0x4}}, 0x10)
r5 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r1, &(0x7f0000000100)=@name={0x1e, 0x2, 0x2, {{0x42}, 0x4}}, 0x10)
bind$tipc(r5, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10)
r6 = socket(0x1d, 0x2, 0x6)
ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000000)={'vcan0\x00', <r7=>0x0})
bind$can_j1939(r6, &(0x7f0000000040)={0x1d, r7, 0x8000000000000003, {}, 0xff}, 0x18)
sendto$inet6(r6, 0x0, 0x8, 0x4040004, 0x0, 0x0)
bind$tipc(r5, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10)
r8 = socket$tipc(0x1e, 0x5, 0x0)
connect$tipc(r5, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x2, 0x3, 0x2}}, 0x10)
bind$tipc(r8, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10)
setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000140)={0x200042, 0x4}, 0x10)
bind$tipc(r1, 0x0, 0x0)
close(r1)

4.547090117s ago: executing program 2 (id=6994):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
writev(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}, {0x0}, {&(0x7f0000001480)}], 0x3)
ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0x40305839, &(0x7f0000000000)=ANY=[@ANYBLOB="00000000000800000000000000000000000000000002"])
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$sock_timeval(r1, 0x1, 0x2, 0x0, 0x48)
getsockopt$inet6_mptcp_buf(r1, 0x11c, 0x4, &(0x7f0000000000)=""/152, &(0x7f00000005c0)=0x98)
r2 = socket$tipc(0x1e, 0x5, 0x0)
r3 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000100)=@req={0x3fc, 0x0, 0x0, 0x6}, 0x10)
r4 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10)
recvmmsg$unix(r3, &(0x7f0000001bc0)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000480)=""/4060, 0xfdc}], 0x1}}], 0x1, 0x0, 0x0)
recvmmsg(r3, &(0x7f0000008280)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)=""/47, 0x2f}], 0x1}, 0x8}], 0x15, 0x0, 0x0)
close(r4)
bind$tipc(r2, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x41}, 0x3}}, 0x10)
listen(r2, 0x0)
r5 = socket$tipc(0x1e, 0x5, 0x0)
sendmsg$tipc(r5, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, 0x0}, 0x4)
close(r5)
accept4(r2, &(0x7f0000000180)=@xdp, &(0x7f0000000100)=0x80, 0x80800)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0xd2}, 0xfffffffffffffe88)
bind$inet6(r0, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x7e)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x3, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94)
r7 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r6, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x1}}, 0x40)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000680)={r7, 0x23, 0x0}, 0x10)
setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000000)={0x0, 0x1, 0x8001, 0x6}, 0x10)
sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="2800000010000108feffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="080000002f1c060008001b"], 0x28}}, 0x0)
close(0x3)

469.664571ms ago: executing program 2 (id=6995):
r0 = socket(0x40000000015, 0x5, 0x0)
connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10)
bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57)
sendmsg$xdp(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x44040)
socket$nl_audit(0x10, 0x3, 0x9)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2})
ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000040)={0x4, &(0x7f0000000000)=[{0x61, 0x4}, {0x45, 0x0, 0x23}, {0x2}, {0x6, 0x0, 0x0, 0x2}]})
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'bridge0\x00', <r4=>0x0})
r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r6=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=ANY=[@ANYBLOB="6c0000001000010400d201000072f60000020000", @ANYRES32=r6, @ANYBLOB="05"], 0x6c}, 0x1, 0x0, 0x0, 0x10004000}, 0x0)
r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
setsockopt$inet_opts(r7, 0x0, 0xd, 0x0, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="780000001000830404000000fedbdf2500007400", @ANYRES32=r4, @ANYBLOB="0008000007500500580012800b0001006272696467650000480002800500190002000000050017"], 0x78}, 0x1, 0x0, 0x0, 0x800}, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x9}, 0x0)

463.38891ms ago: executing program 4 (id=6996):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={{0x14, 0x10, 0x1, 0x2400}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_NAT_TYPE={0x8}, @NFTA_NAT_REG_PROTO_MIN={0x8, 0x5, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x78}}, 0x0)

452.305226ms ago: executing program 0 (id=6997):
unshare(0x6a040000)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x3, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="1820000004000000000000000000fad20000850000002a000000180100002020702500000000002020207b1af8ff0000005784a100000000000007010000f8ffffffb702000008000000b703000020000000f74a52302fbd128000009b00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @sched_cls=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffff51, 0x0, 0x0, 0x0, 0x80000000}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0x8, 0x0, &(0x7f00000001c0)="0000004b0835d25f72461fc660270000000000", &(0x7f0000000340)=""/1, 0x0, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x6}, 0x50)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
socket$netlink(0x10, 0x3, 0xf)
socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
r3 = socket$inet6_mptcp(0xa, 0x1, 0x106)
connect$inet6(r3, &(0x7f0000000240)={0xa, 0x4e23, 0x27bf, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xa}}, 0x3}, 0x1c)
r4 = socket$kcm(0x2, 0x200000000000001, 0x106)
getgid()
sendmsg$inet(r4, &(0x7f0000000240)={&(0x7f0000000200)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x2f}}, 0x10, 0x0}, 0x300060c1)
r5 = socket$netlink(0x10, 0x3, 0x8000000004)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001080)={0x14, 0x18, 0x301, 0x270bd24, 0x25dfdbfa, {0xf}}, 0x14}}, 0x0)
writev(r5, &(0x7f0000000280)=[{&(0x7f0000000440)="580000001400192340834b80040d8c560a06ffffff7f000000010000000058000b480400945f64009400050038925a01000000800000008004000000ff0109000000fff5dd0000000800030006010000418e01400004fcff", 0x58}], 0x1)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
pipe(&(0x7f0000000100)={<r8=>0xffffffffffffffff})
r9 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000400)={r9, r8, 0x26, 0x0, @val=@netfilter={0x0, 0x1, 0xea}}, 0x20)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r7, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0)
sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4c00000010001fff26bd70008000000000000000", @ANYRES32=0x0, @ANYBLOB="05160000740f0000240012800b000108007265746170000000e611ac767060b517c8c82c1400028006000e0002000000", @ANYRES32=r7, @ANYBLOB], 0x4c}}, 0x4000)
r10 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSARP(r10, 0x8955, &(0x7f00000003c0)={{0x2, 0x4e22, @empty}, {0x20000010304, @local}, 0x0, {0x2, 0x4e20, @rand_addr=0x64010101}})

367.368354ms ago: executing program 1 (id=6998):
r0 = socket$key(0xf, 0x3, 0x2)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000240)={'wg2\x00'})
ioctl$XFS_IOC_PATH_TO_HANDLE(0xffffffffffffffff, 0xc0385869, &(0x7f0000000380)={<r1=>0xffffffffffffffff, &(0x7f0000000280)='\x00', 0x101001, &(0x7f00000002c0)={@align=0x8, {0x2, 0x1, 0x72, 0xf8}}, 0x3, &(0x7f0000000300), &(0x7f0000000340)=0x81})
sendto$inet6(r1, &(0x7f00000003c0)="1be86042ed0f9359b9260fcb510d08ee498d26c319d23f1db8f232575e1f34e1102fbf6eaf87b6d56742fff7fc79a8b093e2b8166871a671e0e9e8c980303723376d8d97d6d677f212dcecdff1e17759952a75c4f26fb5389f15b00f2de590a7bbf6fa1e2ff65d505a39e920b50c8203030e0cf2ee70d99606de69fbb590223c4e32c2acb1d32c1d071c4c031949cb0f905649280ce9fbe47d3b86265ad902b809a99ae6f322cffd207b9179afd98998be7843d9e4a7ac0e1cb79fbe2588d8928743247317de5119ff1d8e07e56f11bf50feddf3ccf6b69efe7b", 0xda, 0x4040004, &(0x7f00000004c0)={0xa, 0x4e20, 0x4, @mcast2, 0x5}, 0x1c)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x80c0}, 0x2400c854)
sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000600)=ANY=[@ANYRES16=r2], 0xa0}}, 0x4040080)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff)
r4 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_TIOCOUTQ(r4, 0x5411, &(0x7f0000000500))
sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000002c0)=ANY=[], 0x30}}, 0x0)
r5 = syz_genetlink_get_family_id$nfc(&(0x7f00000005c0), 0xffffffffffffffff)
ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000740)=<r6=>0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000780))
r7 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r8)
ioctl$IOCTL_GET_NCIDEV_IDX(r7, 0x0, &(0x7f00000000c0)=<r10=>0x0)
sendmsg$NFC_CMD_DEV_UP(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r9, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r10], 0x1c}}, 0x840)
sendmsg$NFC_CMD_DEV_UP(r8, &(0x7f00000009c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x1280000}, 0xc, &(0x7f0000000980)={&(0x7f0000000a00)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="000825bd7000fcdbdf250200000008000100", @ANYRES32=r6, @ANYBLOB="0800aebd", @ANYRESDEC=r7, @ANYBLOB="081a0100", @ANYRES8=r4, @ANYBLOB], 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x4000001)
r11 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r11, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xa006}, 0x4)
r12 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r12, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r13 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r13, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(0xffffffffffffffff, &(0x7f00000007c0)=ANY=[@ANYBLOB="0800080006000600000014000003000000000000002b92799a25d0100797196a5a4397b5fa5cb89fedafd304a13ed07a746b59ac0437a7924044c292e4ea60507cc844448800", @ANYBLOB="3369fd2da82ed373ed323a3f46b2d5ea8123f0e18c5832d98829f3709a4bdbcf89f3f8f455fddf6a6e35c737fcfa85b1cf2f817e5ca98b8f39ccf5740132a829300eabe2a1dc37bc15fef3715958709e5d535ff7b916e48146003c7163dd462036353d74268e812a007bbdb5166659bbd280", @ANYRESHEX=r4], 0xfce)
ioctl$FS_IOC_SETFSLABEL(r13, 0x41009432, &(0x7f0000000640)="5ea7ce0e2bae6774e9d34e01d1b6bd3115c101ab07fedd5a04978b26ce8acefc4b9719eb62d4ae47bb1e9160b9500f139fecd9a9dea28c5d16c78d226570d478ff6558a3791ff5ab5e0976ce6853150753c773e11a4d2410766e67c1ef01d4cbfaf5ee3b2b0aaa75a36bf7a6a8cd137c7684a8c1391e3ad86d2b2111bd9edd9eb1eef5b97c0782a129c74d88e117f329f9b43e4254bfc8d8f1fd86e86ac22e8e194c2fbecd0e88815d1f15fc714ae284b700d6c75343adbeb92b66fb9830b1e913cead7dabcc8e1d52dda9021d6eb06bef888c2fd29c4a8305006d1370b6a3a7cfd8cff8a702b93815875773441c880f6f8d7c0514434c88c8367404713ca6b8")
sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000180)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="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", @ANYRES32=r0, @ANYBLOB="00042bbd7000fbdbdf250e00e57eaab66ed2102cfa91c6000008000500090000006800018007000600666f000008000800ffffffff0c0007000000000000000000070006006e71000008000b00736970001400030000000000000000000000000000000001060004004e24000014000300ac1e0001000000000000000000000000060002003c00000008000400ec0000000800040001000000000001000000010038000000020000000800060003"], 0xb4}, 0x1, 0x0, 0x0, 0x24044001}, 0x4004040)

366.866859ms ago: executing program 3 (id=6999):
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001500)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x2000}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x2}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x0, 0x0, 0x2}]}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x20000000)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00', <r3=>0x0})
r4 = socket(0x10, 0x803, 0x0)
getsockname$packet(r4, &(0x7f0000000180)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="7c00000010003704030000000300000000000000", @ANYRES32=r5, @ANYBLOB="0b1b0500000000005c0012800b00010069703667726500004c00028008000100", @ANYRES32=r5, @ANYBLOB="14000600fe8000000000000000000000000000bb14000700fe"], 0x7c}, 0x1, 0x0, 0x0, 0x48800}, 0x4000010)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x28, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x18fa, 0x0, 0x0, 0x0, 0xb}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @call={0x85, 0x0, 0x0, 0x54}, @map_idx={0x18, 0x2, 0x5, 0x0, 0x8}, @alu={0x4, 0x1, 0x6, 0xb, 0x2, 0x40, 0xffffffffffffffff}, @map_val={0x18, 0xb, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8}, @tail_call, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @initr0={0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x2}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000280)='syzkaller\x00', 0x745, 0x64, &(0x7f00000002c0)=""/100, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x2, 0x4}, 0x8, 0x10, &(0x7f0000000380)={0x1, 0xe, 0xffffffff, 0x7}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94)
ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, &(0x7f0000000480)={r1, r6})
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x6c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_EXPRESSIONS={0x28, 0x12, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0x7}, @NFTA_NG_DREG={0x8, 0x1, 0x1, 0x0, 0xf}]}}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x110}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x7, 0x84}}}, 0xb4}, 0x1, 0x0, 0x0, 0x40000}, 0x20040084)
sendmsg$NL80211_CMD_VENDOR(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000c40)={0x30, r0, 0x1, 0x70bd25, 0x0, {{}, {@void, @val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x0, 0x20}}}}, [@NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x1374}]}, 0x30}}, 0x0)

337.631876ms ago: executing program 4 (id=7000):
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="58000000100001082cbd7000fdffffff00000000", @ANYRES32=r1, @ANYBLOB="01310000048a00001c002b"], 0x58}}, 0x400c040)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000040)={0xec3, 0x8, 0xff, 0x6, <r2=>0x0}, &(0x7f0000000080)=0x10)
getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f00000000c0)={r2, 0x5}, &(0x7f0000000100)=0x8)
r3 = socket(0x2, 0x80805, 0x0)
r4 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r4, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000200)={<r5=>r2, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10)
r6 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000180)={0xffffffffffffffff, 0x4, 0x18}, 0xc)
r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f00000002c0)=ANY=[@ANYBLOB="9feb010018000000000000003f0000003f00000007000000010000000400000f03000000040000000400000040000000030000007f000000020000000100000006000000050000000500000006000000ffffffff37a3de000000b6a0002e00"], &(0x7f0000000400)=""/226, 0x5f, 0xe2}, 0x28)
r8 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
close(r8)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00')
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x24}, 0x94)
r9 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r9, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa)
r10 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$inet(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)="5c00000015006b0300224ed86e6c1d000a117ea6e070d6064e22000300000000250002000f00000017d34460bc24eab556a705251e6182949a00003d3b48dfd8cdbf9767b4fa51f62a64c9f4060046d88037e786a6d0a5d700000017", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
r11 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r11, &(0x7f0000000080)={0x0, 0x8408, &(0x7f0000000680)=[{&(0x7f0000000180)="5c00000014006b03c84e21008bf32c19021800f80200000044000200ac14143705251e6182949a36c23d3b48dfd8cdbf9367b498fa51f60a64c9f4d4938037e786a6d0bdd77f6f60c1504bb9189d9193e9bd1c1b7800000000000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x1, 0x2, 0x9, 0x9, 0x23009, r6, 0x9, '\x00', 0x0, r7, 0x5, 0x1, 0x5}, 0x50)
vmsplice(r4, &(0x7f00000007c0)=[{&(0x7f0000000600)="62bb0744444210a76962affb201353bd893327fccd115c38030ebc5becd2142e6749815a4aa2b4f3e290d7cf1e57040e16c2621f26b223797f02c53ee23a723765901f309bb959b005f5e805cd9047c1447ea6dc78df34c0323d2220a919c1afcd156603a6f7591c5912155611dc53cf0dc2337186037c0ab8a331fdf4ef3c401c6e95be4682cda4eee1be634da6a1df694d59a1d202ff82a764e338a3", 0x9d}, {&(0x7f00000006c0)="de768a13d9f905dc74e2105d3c93c284810760fe8fb5a7b266718fe50cf358fc2fdb9173848d562b4be8eb721ef2c502b690004f778241b261e54c84b220e2914ebfbf16978f249777fa6d4210393863695d66c9949533bbb9f88f5151e49acf617a2cd3e62d2d939c33f07e9826ed3f66e81990ffe62b4fe29fced87f4853215088a211247412bc5823a47875774668b560da8f178bb94881b0efb2837a68419f76cc7bb07286c9b6c68d202c577e56351520ab50af37515feb84944083202a9a1f789e3cbbe0c2f4779e493acfb72e968cd0c005e5c979faf87e", 0xdb}], 0x2, 0x7)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x7a, &(0x7f0000000340)={<r12=>r5, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)
r13 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
openat$cgroup_ro(r13, &(0x7f0000000280)='blkio.throttle.io_serviced\x00', 0x0, 0x0)
poll(&(0x7f0000000180), 0x0, 0xa87d)
getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000080)={r12, 0x3}, &(0x7f00000000c0)=0x8)
socket$nl_generic(0x10, 0x3, 0x10)

131.865731ms ago: executing program 2 (id=7001):
r0 = socket$igmp(0x2, 0x3, 0x2)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000014000780080012460000000005001500010000000500010006000000050005000200000005000400000000000900020073797a32000000000d000300686173683a6e657400000000"], 0x5c}, 0x1, 0x0, 0x0, 0x4004000}, 0x0)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='veth1_to_team\x00', 0x10)
setsockopt$EBT_SO_SET_COUNTERS(r0, 0x0, 0x81, &(0x7f0000000100)={'nat\x00', 0x0, 0x0, 0x0, [0x9, 0x0, 0xa, 0x5, 0x5, 0x100], 0x1, &(0x7f0000000000)=[{}, {}, {}, {}], 0x0, [{}]}, 0x88)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r2)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000001300)={'batadv0\x00', <r4=>0x0})
sendmsg$BATADV_CMD_GET_DAT_CACHE(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)={0x1c, r3, 0x83625fc5352ba305, 0x70bd2b, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}]}, 0x1c}}, 0x0)
r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r6=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000007000010010ab4be68e8da23507000000", @ANYRES32=r6, @ANYBLOB="1000018004000480080001"], 0x28}}, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000640)={'ip6_vti0\x00', &(0x7f00000005c0)={'syztnl0\x00', <r7=>0x0, 0x29, 0x9, 0x5, 0x1c81, 0x3, @dev={0xfe, 0x80, '\x00', 0x41}, @dev={0xfe, 0x80, '\x00', 0x13}, 0x10, 0x7, 0x2, 0x1}})
getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000680)={<r8=>0x0, @loopback, @multicast1}, &(0x7f00000006c0)=0xc)
getpeername$packet(0xffffffffffffffff, &(0x7f0000000700)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000740)=0x14)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000840)={'tunl0\x00', &(0x7f0000000780)={'tunl0\x00', <r10=>0x0, 0x20, 0x700, 0xc, 0x6, {{0x1f, 0x4, 0x0, 0x3a, 0x7c, 0x67, 0x0, 0xf, 0x4, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x12}, {[@lsrr={0x83, 0x23, 0xf5, [@empty, @local, @broadcast, @dev={0xac, 0x14, 0x14, 0x44}, @loopback, @loopback, @remote, @local]}, @cipso={0x86, 0x22, 0x3, [{0x1, 0x6, "6e6594ac"}, {0x7, 0xb, "b0e107a458027e4b53"}, {0x7, 0x8, "0e791923dbe9"}, {0x0, 0x3, "d2"}]}, @lsrr={0x83, 0x23, 0x62, [@broadcast, @private=0xa010100, @multicast1, @private=0xa010100, @multicast1, @local, @dev={0xac, 0x14, 0x14, 0x18}, @loopback]}]}}}}})
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000880)={'team0\x00', <r11=>0x0})
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000940)={0xffffffffffffffff, 0x58, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r12=>0x0}}, 0x10)
r13 = socket$nl_route(0x10, 0x3, 0x0)
socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={<r14=>0xffffffffffffffff})
getsockname$packet(r14, &(0x7f0000000100)={0x11, 0x0, <r15=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14)
sendmsg$nl_route_sched(r13, &(0x7f0000006280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000b00)=@newtaction={0x68, 0x30, 0x1, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x0, 0x10000000}, 0x1, r15}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000980)={'wg0\x00', <r16=>0x0})
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000009c0)={'team0\x00', <r17=>0x0})
getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000a00)=<r18=>0x0, &(0x7f0000000a40)=0x4)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000b00)={'syztnl1\x00', &(0x7f0000000a80)={'syztnl2\x00', <r19=>0x0, 0xa2e85ac14fe554b0, 0x1, 0xff, 0x7, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x2e}, 0x8700, 0xf886, 0x4, 0x4}})
getpeername$packet(0xffffffffffffffff, &(0x7f0000000b40)={0x11, 0x0, <r20=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000b80)=0x14)
sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f00000014c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001480)={&(0x7f0000001500)=ANY=[@ANYBLOB="98080000", @ANYRES16=0x0, @ANYBLOB="000325bd7000ffdbdf250100000008000100", @ANYRES32=0x0, @ANYBLOB="4400028040000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000300000008000600", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="3c00028038000100240001006e6f746966795f70656572735f636f756e7400000000000000000000000000000500030003000000080004000400000008000100", @ANYRES32=0x0, @ANYBLOB="3c00028038000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000500030003000000080004000600000008000100", @ANYRES32=0x0, @ANYBLOB="f800028040000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e00000008000400ff7f000008000600", @ANYRES32=0x0, @ANYBLOB="3c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="40000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000300000008000600", @ANYRES32=0x0, @ANYBLOB="38000100240001006e6f746966795f70656572735f696e74657276616c0000000000000000000000050003000300000008000400ffffffff08000100", @ANYRES32=0x0, @ANYBLOB="7c00028040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004004000000008000600", @ANYRES32=r4, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f4b9ebc34b2297f94634f420b39ce1b827e908492b3206d81c06f756e74000000000000da23e38408a59ee2bd0000000000000000050003000300000008000400", @ANYRES32=r6, @ANYBLOB="0c0202804c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000019000400686173685f746f5f706f72745f6d617070696e6700000000400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000100000008000600", @ANYRES32=r7, @ANYBLOB="38000100240001006c625f73746174735f726566726573685f696e74657276616c00000000000000050003000300000008000400000000003c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r8, @ANYBLOB="40000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000600000008000600", @ANYRES32=0x0, @ANYBLOB="400001002400010071756575655f696400000000000000000000000000000000000000000000000005000300030000000800040039e2000008000600", @ANYRES32=r9, @ANYBLOB="3c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r10, @ANYBLOB="4c000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b0000001c00040003000a0205000000030008010000000000000181f1ffffff08000100", @ANYRES32=r11, @ANYBLOB="b400028040000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b0000000800040001000100080007000000000038000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000500030003000000080004000200000038000100240001006e6f746966795f70656572735f696e74657276616c0000000000000000000000050003000300000008000400ea25000008000100", @ANYRES32=0x0, @ANYBLOB="780002803c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000009000400686173680000000038000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000500030003000000080004000008000008000100", @ANYRES32=r12, @ANYBLOB="e00102803c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000009000400686173680000000040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000600000008000600", @ANYRES32=r15, @ANYBLOB="3c000100240001006c625f74785f6d6574686f64000000000000000000000000000000000000000005000300050000000900040068617368000000003800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=r16, @ANYBLOB="38000100240001006e6f746966795f70656572735f636f756e7400000000000000000000000000000500030003000000080004008000000038000100240001006e6f746966795f70656572735f696e74657276616c0000000000000000000000050003000300000008000400100000003c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r17, @ANYBLOB="40000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b0000000800040004000000080007000000000008000100", @ANYRES32=r18, @ANYBLOB="ec0002803c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=r19, @ANYBLOB="3c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=r20, @ANYBLOB="38000100240001006c625f73746174735f726566726573685f696e74657276616c00000000000000050003000300000008000400ff00000038000100240001006c625f73746174735f726566726573685f696e74657276616c00000000000000050003000300000008000400f7ffffff"], 0x898}, 0x1, 0x0, 0x0, 0x40}, 0x0)
sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x2, 0x4e22, @private=0xa010102}, 0x10)
recvmmsg(r0, &(0x7f0000000340)=[{{0x0, 0x0, 0x0}, 0x28008a}], 0x4000054, 0x40000022, 0x0)

63.241738ms ago: executing program 3 (id=7002):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x5, '\x00', 0x0, 0x0}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8ab8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000010040000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)

0s ago: executing program 3 (id=7003):
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00'})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYRES64=r3, @ANYRESDEC=r0, @ANYRES64=r1, @ANYRES16=r4], 0x3c}, 0x1, 0x0, 0x0, 0x20008040}, 0x0)
r5 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000001300)=@raw={'raw\x00', 0x3c1, 0x3, 0x2f0, 0x0, 0x8, 0x7f02ae, 0x0, 0x200, 0x220, 0x2e8, 0x2e8, 0x220, 0x2e8, 0x3, 0x0, {[{{@ipv6={@mcast1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0xff, 0xff000000, 0xffffff00, 0xff000000], [0xffffff, 0xff000000, 0xff, 0xff000000], 'syz_tun\x00', 'pim6reg0\x00', {}, {}, 0x1, 0x7, 0x4, 0x8}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x12, 0x8490, 0x101, 0x30000000, 'syz0\x00', 'syz1\x00', {0x2}}}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x13, 0xec, 0x8, 0x400, '\x00', 'syz0\x00', {0xffffffff8cdbbefd}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x350)
r6 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_tx_ring(r6, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x56401, 0xfffffbfc, 0x8, 0x3, 0x3}, 0x1c)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
recvmmsg(r7, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0}, 0x4}, {{0x0, 0xfffffffffffffcf9, 0x0}, 0x98fd}, {{0x0, 0x0, &(0x7f0000002800)}, 0x101}], 0x3, 0x120, 0x0)
sendmsg$nl_generic(r7, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002b40)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x24000080)
r8 = socket$key(0xf, 0x3, 0x2)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000900)={&(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000880)=""/107, 0xaf, 0x6b}, 0x28)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000080)={'wlan0\x00'})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r7, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x804000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x8014}, 0x8040)
sendmsg$key(r8, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000001180)=[{{&(0x7f0000000780)=@pppol2tpin6={0x18, 0x1, {0x0, r6, 0x4, 0x3, 0x4, 0x2, {0xa, 0x4e26, 0x81, @private1, 0x7f}}}, 0x80, &(0x7f0000000e00)=[{&(0x7f0000000800)="26bbd418c23489ae267aed1d416e8741", 0x10}, {&(0x7f0000000bc0)="abb4f1c5e42b11e0acbeb0e96d7cf37e9b9f2a672f306ec8db660083c3d28ec147bddab22f083aef2fe68937b5f37514e22349b5efbfa73269a03d02d0902af411145281400d1cc2798848f3f87358bf84bc8c542bfe260ceb55a2f4d6169870dca017bd217cd096e1af3d7f641a1290b5121f354b74623d0e0b76a6b86befb3bd113e3196e0c0676a57b9eac98c1e34cfc9b4a91edd69c92528de89956df2421d8a", 0xa2}, {&(0x7f0000000c80)="65586e5fc6c3cdda48f293ee989f75069527920bb006edeb6a28f25d47fa6f57320cfd7769c57cbd300320f2a117a47a51f87d3c35c20f8e9764ed12c60e0ce48cbb9361e0d14c60c96d44102b0665f69690297ff92b39c36ee9bf58fdbd069f85a0304cea100b7f737b9042ff44b41fe931b418ff0b77f3800035c800ea6218f17c537bce8c8452da4af5fb119d0376cb84f9915dbf3927cadaf4d7c62d92e985ba321e", 0xa4}, {&(0x7f0000000d40)="2fb8932e6b96cbfd2a330f22c0e513858ac919883ff007b2a8ba7ba89d5b16eca553c0bb7e8331f639f93a835a67adb24f4a044f95c29cac15b5f24942e77870e8e729", 0x43}, {&(0x7f0000000dc0)="b76be30f77dfc1b5ad501ae66d95f08d707c35d2a8747ff787b2d5b909d1f5d7b1d0f0c5aa388e4048fe2eccdb9013e76db0ae0f387344e19e8b", 0x3a}], 0x5, &(0x7f0000000e80)=ANY=[@ANYBLOB="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"], 0x2f0}}], 0x1, 0x10)
sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="5800000010001fff0000", @ANYRES32=0x0, @ANYBLOB="0000000008440000300012800b00010067656e6576650000200002801400", @ANYRES32=r4, @ANYBLOB], 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24040884}, 0x14)
socket$packet(0x11, 0x3, 0x300)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x60ff78ce1cb3c070}, 0x94)
syz_emit_ethernet(0x6a, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffff00000000000008004500005c0000000000119078000000000000000000001b590048907803000000000000004b3f7633015a209fa5e73369ed3ed4f938752184f1af202914ef0f501fd4f4fcc1dd3a3f54de27091ffa0d232b48a86ef0222fb636476697"], 0x0)
getsockopt$inet6_tcp_int(r1, 0x6, 0x3, &(0x7f0000000180), &(0x7f00000001c0)=0x4)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0x72, 0x0, &(0x7f0000000b40)="df7cd7bdb2c485fdbe1de5ea3d040d898de06a7de705d96cf9412ebe3b4e7da52cb179971f594b55972f1ce077bbbea6c88bb4ca0bb6d25fd34c239bdfb3b9279e252144e01fe0813b61f1929d80f8d4103908a34cb2d5ed85f6f36180e8b50e9e261422117e0d982bd733911564c70d6e40", 0x0, 0x200d01, 0x0, 0x0, 0x4c, 0x0, 0x0, 0x5, 0x0, 0x1}, 0x50)

kernel console output (not intermixed with test programs):

ibutes in process `syz.1.6434'.
[  818.646738][ T5640] Bluetooth: hci1: command tx timeout
[  818.797985][T26031] bridge0: port 1(bridge_slave_0) entered blocking state
[  818.816644][T26031] bridge0: port 1(bridge_slave_0) entered disabled state
[  818.828179][T26031] bridge_slave_0: entered allmulticast mode
[  818.847032][T26031] bridge_slave_0: entered promiscuous mode
[  818.858869][T26031] bridge0: port 2(bridge_slave_1) entered blocking state
[  818.867114][T26031] bridge0: port 2(bridge_slave_1) entered disabled state
[  818.878769][T26031] bridge_slave_1: entered allmulticast mode
[  818.886315][ T6189] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  818.891539][T26031] bridge_slave_1: entered promiscuous mode
[  818.976429][T26031] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  819.008609][T26031] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  819.166855][T26031] team0: Port device team_slave_0 added
[  819.202339][T26031] team0: Port device team_slave_1 added
[  819.276353][T26031] batman_adv: batadv0: Adding interface: batadv_slave_0
[  819.314549][T26031] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  819.366480][T26031] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  819.403916][T26031] batman_adv: batadv0: Adding interface: batadv_slave_1
[  819.421478][T26102] netlink: 1688 bytes leftover after parsing attributes in process `syz.0.6438'.
[  819.429998][T26104] ieee802154 phy0 wpan0: encryption failed: -90
[  819.431355][T26031] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  819.483423][T26031] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  819.738478][T26031] hsr_slave_0: entered promiscuous mode
[  819.764660][T26031] hsr_slave_1: entered promiscuous mode
[  819.790265][T26031] debugfs: 'hsr0' already exists in 'hsr'
[  819.838771][T26031] Cannot create hsr debugfs directory
[  820.332171][T26104] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR
[  820.398790][T26121] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6445'.
[  820.424623][T26121] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  820.425405][T26123] FAULT_INJECTION: forcing a failure.
[  820.425405][T26123] name failslab, interval 1, probability 0, space 0, times 0
[  820.449674][T26123] CPU: 1 UID: 0 PID: 26123 Comm: syz.1.6446 Not tainted syzkaller #0 PREEMPT(full) 
[  820.449699][T26123] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  820.449709][T26123] Call Trace:
[  820.449716][T26123]  <TASK>
[  820.449724][T26123]  dump_stack_lvl+0xe8/0x150
[  820.449749][T26123]  should_fail_ex+0x412/0x560
[  820.449774][T26123]  should_failslab+0xa8/0x100
[  820.449793][T26123]  __kvmalloc_node_noprof+0x178/0x8a0
[  820.449815][T26123]  ? rhashtable_init_noprof+0x52e/0xad0
[  820.449833][T26123]  ? rhashtable_init_noprof+0x12d/0xad0
[  820.449853][T26123]  rhashtable_init_noprof+0x52e/0xad0
[  820.449877][T26123]  rhltable_init_noprof+0x1e/0x60
[  820.449895][T26123]  nf_tables_newtable+0x68f/0x1910
[  820.449936][T26123]  nfnetlink_rcv+0x123e/0x27b0
[  820.449979][T26123]  ? __pfx_nfnetlink_rcv+0x10/0x10
[  820.450010][T26123]  ? ref_tracker_free+0x693/0x840
[  820.450053][T26123]  ? __netlink_deliver_tap+0x807/0x850
[  820.450080][T26123]  ? netlink_deliver_tap+0x2e/0x1b0
[  820.450097][T26123]  ? netlink_deliver_tap+0x2e/0x1b0
[  820.450120][T26123]  netlink_unicast+0x75c/0x8e0
[  820.450145][T26123]  netlink_sendmsg+0x813/0xb40
[  820.450169][T26123]  ? __pfx_netlink_sendmsg+0x10/0x10
[  820.450190][T26123]  ? aa_sock_msg_perm+0xf1/0x1b0
[  820.450214][T26123]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  820.450239][T26123]  ____sys_sendmsg+0x972/0x9f0
[  820.450257][T26123]  ? __might_fault+0xaf/0x130
[  820.450284][T26123]  ? __pfx_____sys_sendmsg+0x10/0x10
[  820.450309][T26123]  ? import_iovec+0x73/0xa0
[  820.450331][T26123]  ___sys_sendmsg+0x2a5/0x360
[  820.450348][T26123]  ? __lock_acquire+0x6b5/0x2cf0
[  820.450371][T26123]  ? __pfx____sys_sendmsg+0x10/0x10
[  820.450416][T26123]  ? __fget_files+0x2a/0x420
[  820.450444][T26123]  ? __fget_files+0x3a0/0x420
[  820.450471][T26123]  __x64_sys_sendmsg+0x1bd/0x2a0
[  820.450492][T26123]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  820.450520][T26123]  ? __pfx_ksys_write+0x10/0x10
[  820.450551][T26123]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  820.450570][T26123]  do_syscall_64+0x174/0x580
[  820.450587][T26123]  ? trace_irq_disable+0x3b/0x140
[  820.450609][T26123]  ? clear_bhb_loop+0x40/0x90
[  820.450629][T26123]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  820.450646][T26123] RIP: 0033:0x7ff53e59ce59
[  820.450663][T26123] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  820.450677][T26123] RSP: 002b:00007ff53c7f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  820.450695][T26123] RAX: ffffffffffffffda RBX: 00007ff53e815fa0 RCX: 00007ff53e59ce59
[  820.450705][T26123] RDX: 0000000000000000 RSI: 000020000000c2c0 RDI: 0000000000000003
[  820.450715][T26123] RBP: 00007ff53c7f6090 R08: 0000000000000000 R09: 0000000000000000
[  820.450730][T26123] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  820.450740][T26123] R13: 00007ff53e816038 R14: 00007ff53e815fa0 R15: 00007ffecae79ff8
[  820.450765][T26123]  </TASK>
[  820.451171][T26121] batman_adv: batadv0: Removing interface: batadv_slave_1
[  820.722890][ T5633] Bluetooth: hci1: command tx timeout
[  820.836712][   T57] net_ratelimit: 12 callbacks suppressed
[  820.836729][   T57] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  820.838939][   T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  820.843561][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  820.851335][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  820.937973][T26128] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6447'.
[  820.966967][T26128] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6447'.
[  821.022411][ T5633] block nbd151: Receive control failed (result -32)
[  821.032912][ T5640] block nbd151: Receive control failed (result -32)
[  821.036733][ T5645] block nbd151: Receive control failed (result -32)
[  821.129375][T22382] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  821.363188][T26134] FAULT_INJECTION: forcing a failure.
[  821.363188][T26134] name failslab, interval 1, probability 0, space 0, times 0
[  821.387802][T26134] CPU: 1 UID: 0 PID: 26134 Comm: syz.2.6449 Not tainted syzkaller #0 PREEMPT(full) 
[  821.387828][T26134] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  821.387839][T26134] Call Trace:
[  821.387846][T26134]  <TASK>
[  821.387854][T26134]  dump_stack_lvl+0xe8/0x150
[  821.387880][T26134]  should_fail_ex+0x412/0x560
[  821.387904][T26134]  should_failslab+0xa8/0x100
[  821.387923][T26134]  __kmalloc_noprof+0xe8/0x760
[  821.387955][T26134]  ? bpf_test_init+0x9f/0x150
[  821.387979][T26134]  bpf_test_init+0x9f/0x150
[  821.388001][T26134]  bpf_prog_test_run_xdp+0x529/0x1160
[  821.388034][T26134]  ? __pfx_bpf_prog_test_run_xdp+0x10/0x10
[  821.388057][T26134]  ? __fget_files+0x2a/0x420
[  821.388082][T26134]  ? __pfx_bpf_prog_test_run_xdp+0x10/0x10
[  821.388101][T26134]  bpf_prog_test_run+0x2c7/0x340
[  821.388123][T26134]  __sys_bpf+0x643/0x950
[  821.388147][T26134]  ? __pfx___sys_bpf+0x10/0x10
[  821.388183][T26134]  ? ksys_write+0x242/0x270
[  821.388208][T26134]  ? __pfx_ksys_write+0x10/0x10
[  821.388234][T26134]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  821.388252][T26134]  __x64_sys_bpf+0x7c/0x90
[  821.388273][T26134]  do_syscall_64+0x174/0x580
[  821.388291][T26134]  ? trace_irq_disable+0x3b/0x140
[  821.388313][T26134]  ? clear_bhb_loop+0x40/0x90
[  821.388333][T26134]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  821.388348][T26134] RIP: 0033:0x7f432ff9ce59
[  821.388365][T26134] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  821.388379][T26134] RSP: 002b:00007f4330de2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  821.388397][T26134] RAX: ffffffffffffffda RBX: 00007f4330215fa0 RCX: 00007f432ff9ce59
[  821.388409][T26134] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a
[  821.388420][T26134] RBP: 00007f4330de2090 R08: 0000000000000000 R09: 0000000000000000
[  821.388430][T26134] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  821.388439][T26134] R13: 00007f4330216038 R14: 00007f4330215fa0 R15: 00007ffeb98f7b08
[  821.388466][T26134]  </TASK>
[  821.598653][ T5730] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  822.166179][ T5730] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  822.641837][ T5730] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  822.745353][T26150] openvswitch: netlink: nsh attr 14384 is out of range max 3
[  822.759904][T26150] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  822.777854][T26150] ÿ: renamed from bond_slave_0 (while UP)
[  822.801707][ T5640] Bluetooth: hci1: command tx timeout
[  823.396160][T26162] netlink: 'syz.4.6457': attribute type 8 has an invalid length.
[  823.432186][T26169] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw
[  823.688771][T26179] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6463'.
[  823.704419][T26031] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  823.830544][T26185] Bluetooth: MGMT ver 1.23
[  824.096906][T26031] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  824.107023][T26031] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  824.599876][T26031] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  824.646855][T26031] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  824.675366][T26031] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  824.704743][T26031] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  824.754114][T26031] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  824.799304][T26191] syzkaller0: entered promiscuous mode
[  824.828793][T26191] syzkaller0: entered allmulticast mode
[  824.846095][T26203] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0
[  824.858814][T26191] syzkaller0: tun_net_xmit 14
[  824.862310][T26200] IPVS: stopping master sync thread 26203 ...
[  824.880202][ T5640] Bluetooth: hci1: command tx timeout
[  825.016885][T22864] IPVS: starting estimator thread 0...
[  825.069317][T26209] netlink: 52 bytes leftover after parsing attributes in process `syz.2.6469'.
[  825.114520][T26209] netlink: 52 bytes leftover after parsing attributes in process `syz.2.6469'.
[  825.126463][T26207] IPVS: using max 36 ests per chain, 86400 per kthread
[  825.223953][T26206] bond2: entered promiscuous mode
[  825.239035][T26206] 8021q: adding VLAN 0 to HW filter on device bond2
[  825.256062][T26215] netlink: 'syz.0.6471': attribute type 10 has an invalid length.
[  825.290975][T26221] bridge1: entered promiscuous mode
[  825.297087][T26221] bond2: (slave bridge1): Enslaving as an active interface with an up link
[  825.323371][T26031] 8021q: adding VLAN 0 to HW filter on device bond0
[  825.346464][T26215] FAULT_INJECTION: forcing a failure.
[  825.346464][T26215] name failslab, interval 1, probability 0, space 0, times 0
[  825.360579][T26215] CPU: 0 UID: 0 PID: 26215 Comm: syz.0.6471 Not tainted syzkaller #0 PREEMPT(full) 
[  825.360602][T26215] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  825.360612][T26215] Call Trace:
[  825.360618][T26215]  <TASK>
[  825.360625][T26215]  dump_stack_lvl+0xe8/0x150
[  825.360653][T26215]  should_fail_ex+0x412/0x560
[  825.360676][T26215]  should_failslab+0xa8/0x100
[  825.360695][T26215]  kmem_cache_alloc_node_noprof+0x8f/0x690
[  825.360718][T26215]  ? __alloc_skb+0x1d0/0x7d0
[  825.360733][T26215]  ? __local_bh_enable_ip+0xd0/0x130
[  825.360755][T26215]  __alloc_skb+0x1d0/0x7d0
[  825.360775][T26215]  rtmsg_ifinfo_build_skb+0x84/0x260
[  825.360813][T26215]  rtmsg_ifinfo+0x8c/0x1a0
[  825.360838][T26215]  netif_open+0xec/0x190
[  825.360859][T26215]  ? __pfx_netif_open+0x10/0x10
[  825.360878][T26215]  ? trace_kmalloc+0x2a/0xf0
[  825.360903][T26215]  dev_open+0x125/0x260
[  825.360922][T26215]  team_add_slave+0x6a6/0x2820
[  825.361082][T26215]  ? __pfx_team_add_slave+0x10/0x10
[  825.361097][T26215]  ? __dev_notify_flags+0x1f3/0x310
[  825.361117][T26215]  ? __pfx___dev_notify_flags+0x10/0x10
[  825.361131][T26215]  ? __dev_change_flags+0x5a0/0x7e0
[  825.361153][T26215]  ? __pfx___dev_change_flags+0x10/0x10
[  825.361172][T26215]  ? mutex_is_locked+0x17/0x50
[  825.361194][T26215]  do_set_master+0x533/0x6d0
[  825.361217][T26215]  do_setlink+0x103d/0x45a0
[  825.361245][T26215]  ? __pfx_do_setlink+0x10/0x10
[  825.361263][T26215]  ? lockdep_hardirqs_on+0x7a/0x110
[  825.361281][T26215]  ? irqentry_exit+0x218/0x8b0
[  825.361307][T26215]  ? do_raw_spin_lock+0x12b/0x2f0
[  825.361345][T26215]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  825.361368][T26215]  ? lockdep_hardirqs_on+0x7a/0x110
[  825.361386][T26215]  ? __mutex_lock+0xef8/0x1550
[  825.361402][T26215]  ? __pfx___nla_validate_parse+0x10/0x10
[  825.361426][T26215]  ? __mutex_lock+0x608/0x1550
[  825.361446][T26215]  ? rtnl_newlink+0x883/0x1bb0
[  825.361463][T26215]  ? __pfx___mutex_lock+0x10/0x10
[  825.361488][T26215]  ? ns_capable+0x89/0xe0
[  825.361505][T26215]  ? rtnl_link_get_net_capable+0xd3/0x310
[  825.361522][T26215]  rtnl_newlink+0x15ad/0x1bb0
[  825.361547][T26215]  ? __pfx_rtnl_newlink+0x10/0x10
[  825.361567][T26215]  ? __lock_acquire+0x6b5/0x2cf0
[  825.361584][T26215]  ? __lock_acquire+0x6b5/0x2cf0
[  825.361610][T26215]  ? unwind_next_frame+0xa6/0x2550
[  825.361645][T26215]  ? unwind_next_frame+0xa6/0x2550
[  825.361666][T26215]  ? is_bpf_text_address+0x26/0x2b0
[  825.361696][T26215]  ? is_bpf_text_address+0x26/0x2b0
[  825.361719][T26215]  ? __lock_acquire+0x6b5/0x2cf0
[  825.361740][T26215]  ? kernel_text_address+0xa5/0xe0
[  825.361767][T26215]  ? __kernel_text_address+0xd/0x30
[  825.361787][T26215]  ? unwind_get_return_address+0x4d/0x90
[  825.361811][T26215]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  825.361839][T26215]  ? arch_stack_walk+0xfb/0x150
[  825.361878][T26215]  ? rtnetlink_rcv_msg+0x1b9/0xbe0
[  825.361909][T26215]  ? __pfx_rtnl_newlink+0x10/0x10
[  825.361925][T26215]  rtnetlink_rcv_msg+0x7d5/0xbe0
[  825.361940][T26215]  ? kmem_cache_alloc_node_noprof+0x384/0x690
[  825.361961][T26215]  ? netlink_sendmsg+0x5d4/0xb40
[  825.361981][T26215]  ? rtnetlink_rcv_msg+0x1b9/0xbe0
[  825.361996][T26215]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  825.362032][T26215]  ? __lock_acquire+0x6b5/0x2cf0
[  825.362061][T26215]  netlink_rcv_skb+0x232/0x4b0
[  825.362081][T26215]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  825.362099][T26215]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  825.362128][T26215]  ? netlink_deliver_tap+0x2e/0x1b0
[  825.362145][T26215]  ? netlink_deliver_tap+0x2e/0x1b0
[  825.362166][T26215]  netlink_unicast+0x75c/0x8e0
[  825.362191][T26215]  netlink_sendmsg+0x813/0xb40
[  825.362216][T26215]  ? __pfx_netlink_sendmsg+0x10/0x10
[  825.362238][T26215]  ? aa_sock_msg_perm+0xf1/0x1b0
[  825.362263][T26215]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  825.362288][T26215]  ____sys_sendmsg+0x972/0x9f0
[  825.362306][T26215]  ? __might_fault+0xaf/0x130
[  825.362333][T26215]  ? __pfx_____sys_sendmsg+0x10/0x10
[  825.362361][T26215]  ? import_iovec+0x73/0xa0
[  825.362383][T26215]  ___sys_sendmsg+0x2a5/0x360
[  825.362400][T26215]  ? __lock_acquire+0x6b5/0x2cf0
[  825.362421][T26215]  ? __pfx____sys_sendmsg+0x10/0x10
[  825.362474][T26215]  ? __fget_files+0x2a/0x420
[  825.362493][T26215]  ? __fget_files+0x3a0/0x420
[  825.362521][T26215]  __x64_sys_sendmsg+0x1bd/0x2a0
[  825.362542][T26215]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  825.362569][T26215]  ? __pfx_ksys_write+0x10/0x10
[  825.362597][T26215]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  825.362616][T26215]  do_syscall_64+0x174/0x580
[  825.362633][T26215]  ? trace_irq_disable+0x3b/0x140
[  825.362655][T26215]  ? clear_bhb_loop+0x40/0x90
[  825.362676][T26215]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  825.362692][T26215] RIP: 0033:0x7f67d759ce59
[  825.362709][T26215] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  825.362723][T26215] RSP: 002b:00007f67d84c4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  825.362740][T26215] RAX: ffffffffffffffda RBX: 00007f67d7815fa0 RCX: 00007f67d759ce59
[  825.362752][T26215] RDX: 0000000000000000 RSI: 0000200000000600 RDI: 0000000000000004
[  825.362763][T26215] RBP: 00007f67d84c4090 R08: 0000000000000000 R09: 0000000000000000
[  825.362772][T26215] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  825.362782][T26215] R13: 00007f67d7816038 R14: 00007f67d7815fa0 R15: 00007fffcb36dfd8
[  825.362818][T26215]  </TASK>
[  825.364448][T26215] 8021q: adding VLAN 0 to HW filter on device bond0
[  825.421215][T26224] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw
[  825.428241][T26215] team0: Port device bond0 added
[  825.924540][   T57] net_ratelimit: 14 callbacks suppressed
[  825.924570][   T57] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  825.924780][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  825.936117][   T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  825.971986][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  826.037404][T26031] 8021q: adding VLAN 0 to HW filter on device team0
[  826.105363][ T6189] bridge0: port 1(bridge_slave_0) entered blocking state
[  826.112644][ T6189] bridge0: port 1(bridge_slave_0) entered forwarding state
[  826.141848][ T6189] bridge0: port 2(bridge_slave_1) entered blocking state
[  826.149101][ T6189] bridge0: port 2(bridge_slave_1) entered forwarding state
[  826.335404][ T5730] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  826.458361][T26242] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6477'.
[  826.564764][   T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  826.564764][   T57] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  826.564915][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  826.573669][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  826.663698][T26244] netlink: 84 bytes leftover after parsing attributes in process `syz.1.6478'.
[  826.688940][T26244] netlink: 84 bytes leftover after parsing attributes in process `syz.1.6478'.
[  826.783497][T26252] xfrm1: entered allmulticast mode
[  826.800969][ T5730] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  826.918589][T26260] netlink: 'syz.4.6483': attribute type 4 has an invalid length.
[  826.963500][T26260] netlink: 'syz.4.6483': attribute type 4 has an invalid length.
[  826.976155][T26265] netlink: 192 bytes leftover after parsing attributes in process `syz.1.6482'.
[  827.104461][T26260] bridge0: port 2(bridge_slave_1) entered disabled state
[  827.112020][T26260] bridge0: port 1(bridge_slave_0) entered disabled state
[  827.137254][T26276] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw
[  827.325385][T26260] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  827.359166][T26260] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  827.645805][T26289] netlink: 'syz.0.6488': attribute type 10 has an invalid length.
[  827.670392][T26031] 8021q: adding VLAN 0 to HW filter on device batadv0
[  827.693104][ T6189] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  827.750245][ T6189] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  827.762727][ T6189] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  827.772509][ T6189] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  827.814316][T26295] FAULT_INJECTION: forcing a failure.
[  827.814316][T26295] name failslab, interval 1, probability 0, space 0, times 0
[  827.855637][T26295] CPU: 0 UID: 0 PID: 26295 Comm: syz.1.6490 Not tainted syzkaller #0 PREEMPT(full) 
[  827.855669][T26295] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  827.855680][T26295] Call Trace:
[  827.855687][T26295]  <TASK>
[  827.855695][T26295]  dump_stack_lvl+0xe8/0x150
[  827.855722][T26295]  should_fail_ex+0x412/0x560
[  827.855745][T26295]  should_failslab+0xa8/0x100
[  827.855763][T26295]  ? skb_clone+0x212/0x3a0
[  827.855783][T26295]  kmem_cache_alloc_noprof+0x87/0x650
[  827.855805][T26295]  ? __netlink_lookup+0xc6/0x8b0
[  827.855833][T26295]  skb_clone+0x212/0x3a0
[  827.855855][T26295]  __netlink_deliver_tap+0x404/0x850
[  827.855885][T26295]  ? netlink_deliver_tap+0x2e/0x1b0
[  827.855904][T26295]  netlink_deliver_tap+0x19c/0x1b0
[  827.855923][T26295]  netlink_unicast+0x730/0x8e0
[  827.855949][T26295]  netlink_sendmsg+0x813/0xb40
[  827.855976][T26295]  ? __pfx_netlink_sendmsg+0x10/0x10
[  827.855997][T26295]  ? aa_sock_msg_perm+0xf1/0x1b0
[  827.856021][T26295]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  827.856044][T26295]  ____sys_sendmsg+0x972/0x9f0
[  827.856063][T26295]  ? __might_fault+0xaf/0x130
[  827.856088][T26295]  ? __pfx_____sys_sendmsg+0x10/0x10
[  827.856113][T26295]  ? import_iovec+0x73/0xa0
[  827.856135][T26295]  ___sys_sendmsg+0x2a5/0x360
[  827.856152][T26295]  ? __lock_acquire+0x6b5/0x2cf0
[  827.856174][T26295]  ? __pfx____sys_sendmsg+0x10/0x10
[  827.856231][T26295]  ? __fget_files+0x2a/0x420
[  827.856255][T26295]  ? __fget_files+0x3a0/0x420
[  827.856281][T26295]  __x64_sys_sendmsg+0x1bd/0x2a0
[  827.856302][T26295]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  827.856329][T26295]  ? __pfx_ksys_write+0x10/0x10
[  827.856357][T26295]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  827.856374][T26295]  do_syscall_64+0x174/0x580
[  827.856391][T26295]  ? trace_irq_disable+0x3b/0x140
[  827.856413][T26295]  ? clear_bhb_loop+0x40/0x90
[  827.856433][T26295]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  827.856449][T26295] RIP: 0033:0x7ff53e59ce59
[  827.856464][T26295] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  827.856477][T26295] RSP: 002b:00007ff53c7f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  827.856494][T26295] RAX: ffffffffffffffda RBX: 00007ff53e815fa0 RCX: 00007ff53e59ce59
[  827.856506][T26295] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003
[  827.856515][T26295] RBP: 00007ff53c7f6090 R08: 0000000000000000 R09: 0000000000000000
[  827.856525][T26295] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  827.856534][T26295] R13: 00007ff53e816038 R14: 00007ff53e815fa0 R15: 00007ffecae79ff8
[  827.856559][T26295]  </TASK>
[  828.204467][T26031] veth0_vlan: entered promiscuous mode
[  828.225569][T26031] veth1_vlan: entered promiscuous mode
[  828.324801][T26031] veth0_macvtap: entered promiscuous mode
[  828.366843][T26299] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add()
[  828.393638][T26031] veth1_macvtap: entered promiscuous mode
[  828.451557][T26031] batman_adv: batadv0: Interface activated: batadv_slave_0
[  828.521284][T26319] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw
[  828.537546][T26031] batman_adv: batadv0: Interface activated: batadv_slave_1
[  828.585108][ T6189] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  828.600920][ T6189] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  828.611473][ T6189] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  828.630728][ T6189] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  828.935860][ T5633] block nbd152: Receive control failed (result -32)
[  828.959324][ T5645] block nbd152: Receive control failed (result -32)
[  828.966060][ T5640] block nbd152: Receive control failed (result -32)
[  829.197114][  T158] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  829.221391][  T158] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  829.288429][   T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  829.308522][   T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  829.464747][T26345] FAULT_INJECTION: forcing a failure.
[  829.464747][T26345] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  829.493192][T26334] sock: sock_timestamping_bind_phc: sock not bind to device
[  829.495074][T26345] CPU: 0 UID: 0 PID: 26345 Comm: syz.2.6505 Not tainted syzkaller #0 PREEMPT(full) 
[  829.495114][T26345] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  829.495134][T26345] Call Trace:
[  829.495148][T26345]  <TASK>
[  829.495163][T26345]  dump_stack_lvl+0xe8/0x150
[  829.495190][T26345]  should_fail_ex+0x412/0x560
[  829.495216][T26345]  _copy_from_user+0x2d/0xb0
[  829.495237][T26345]  ___sys_sendmsg+0x1c6/0x360
[  829.495256][T26345]  ? __lock_acquire+0x6b5/0x2cf0
[  829.495278][T26345]  ? __pfx____sys_sendmsg+0x10/0x10
[  829.495326][T26345]  ? __fget_files+0x2a/0x420
[  829.495346][T26345]  ? __fget_files+0x3a0/0x420
[  829.495372][T26345]  __x64_sys_sendmsg+0x1bd/0x2a0
[  829.495393][T26345]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  829.495419][T26345]  ? __pfx_ksys_write+0x10/0x10
[  829.495457][T26345]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  829.495491][T26345]  do_syscall_64+0x174/0x580
[  829.495508][T26345]  ? trace_irq_disable+0x3b/0x140
[  829.495529][T26345]  ? clear_bhb_loop+0x40/0x90
[  829.495549][T26345]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  829.495564][T26345] RIP: 0033:0x7f432ff9ce59
[  829.495580][T26345] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  829.495594][T26345] RSP: 002b:00007f4330de2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  829.495612][T26345] RAX: ffffffffffffffda RBX: 00007f4330215fa0 RCX: 00007f432ff9ce59
[  829.495623][T26345] RDX: 0000000000000004 RSI: 0000200000000100 RDI: 0000000000000003
[  829.495634][T26345] RBP: 00007f4330de2090 R08: 0000000000000000 R09: 0000000000000000
[  829.495644][T26345] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  829.495652][T26345] R13: 00007f4330216038 R14: 00007f4330215fa0 R15: 00007ffeb98f7b08
[  829.495678][T26345]  </TASK>
[  829.512219][T26349] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6422'.
[  829.773188][   T29] audit: type=1804 audit(1780500360.460:5): pid=26354 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.6507" name="/newroot/125/cgroup.controllers" dev="tmpfs" ino=668 res=1 errno=0
[  829.815924][   T29] audit: type=1800 audit(1780500360.460:6): pid=26354 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.6507" name="cgroup.controllers" dev="tmpfs" ino=668 res=0 errno=0
[  829.935678][T26362] syzkaller1: entered promiscuous mode
[  829.954072][T26362] syzkaller1: entered allmulticast mode
[  830.034127][T26371] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw
[  830.090648][T26362] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6509'.
[  830.224569][T26376] xt_TCPMSS: Only works on TCP SYN packets
[  830.345434][T26376] syzkaller1: entered promiscuous mode
[  830.361497][T26376] syzkaller1: entered allmulticast mode
[  830.686427][T26387] tipc: Started in network mode
[  830.696683][T26387] tipc: Node identity fa47c3f4fadd, cluster identity 4711
[  830.712731][T26387] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  830.736321][T26387] syzkaller0: entered promiscuous mode
[  830.742308][T26387] syzkaller0: entered allmulticast mode
[  830.766262][T26386] tipc: Resetting bearer <eth:syzkaller0>
[  830.805619][T26386] tipc: Disabling bearer <eth:syzkaller0>
[  830.960850][T22379] net_ratelimit: 15 callbacks suppressed
[  830.960867][T22379] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  831.158080][T26404] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6521'.
[  831.158863][T26402] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6520'.
[  831.387907][T26418] FAULT_INJECTION: forcing a failure.
[  831.387907][T26418] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  831.402319][T26418] CPU: 1 UID: 0 PID: 26418 Comm: syz.4.6525 Not tainted syzkaller #0 PREEMPT(full) 
[  831.402344][T26418] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  831.402355][T26418] Call Trace:
[  831.402362][T26418]  <TASK>
[  831.402370][T26418]  dump_stack_lvl+0xe8/0x150
[  831.402396][T26418]  should_fail_ex+0x412/0x560
[  831.402421][T26418]  _copy_from_user+0x2d/0xb0
[  831.402442][T26418]  kstrtouint_from_user+0xd6/0x180
[  831.402468][T26418]  ? __pfx_kstrtouint_from_user+0x10/0x10
[  831.402502][T26418]  proc_fail_nth_write+0x8e/0x210
[  831.402526][T26418]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  831.402555][T26418]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  831.402577][T26418]  vfs_write+0x29a/0xb90
[  831.402608][T26418]  ? __pfx_vfs_write+0x10/0x10
[  831.402631][T26418]  ? __fget_files+0x2a/0x420
[  831.402655][T26418]  ? __fget_files+0x3a0/0x420
[  831.402673][T26418]  ? __fget_files+0x2a/0x420
[  831.402700][T26418]  ksys_write+0x150/0x270
[  831.402724][T26418]  ? __pfx_ksys_write+0x10/0x10
[  831.402754][T26418]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  831.402773][T26418]  do_syscall_64+0x174/0x580
[  831.402790][T26418]  ? trace_irq_disable+0x3b/0x140
[  831.402813][T26418]  ? clear_bhb_loop+0x40/0x90
[  831.402832][T26418]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  831.402847][T26418] RIP: 0033:0x7fb45155d68e
[  831.402862][T26418] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  831.402875][T26418] RSP: 002b:00007fb45250efe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  831.402891][T26418] RAX: ffffffffffffffda RBX: 00007fb45250f6c0 RCX: 00007fb45155d68e
[  831.402902][T26418] RDX: 0000000000000001 RSI: 00007fb45250f0a0 RDI: 0000000000000004
[  831.402912][T26418] RBP: 00007fb45250f090 R08: 0000000000000000 R09: 0000000000000000
[  831.402922][T26418] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  831.402931][T26418] R13: 00007fb451816038 R14: 00007fb451815fa0 R15: 00007ffdbad64108
[  831.402959][T26418]  </TASK>
[  831.430683][T26420] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6524'.
[  831.539844][T26423] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw
[  831.643642][T26420] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6524'.
[  831.655862][T22379] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  831.684113][   T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  831.692979][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  831.702407][   T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  831.711458][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  831.720835][   T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  831.729460][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  832.000417][T22379] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  832.099957][T26435] syzkaller0: entered promiscuous mode
[  832.122224][T26435] syzkaller0: entered allmulticast mode
[  832.315034][T26459] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6533'.
[  832.323577][ T5633] Bluetooth: hci1: command tx timeout
[  832.325326][T26459] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6533'.
[  832.334253][   T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  836.161508][ T5767] net_ratelimit: 15 callbacks suppressed
[  836.161528][ T5767] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  836.960215][T22382] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  837.039332][T26488] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue
[  837.062192][T26491] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw
[  837.100918][T26494] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6543'.
[  837.121244][T26488] syzkaller0: entered promiscuous mode
[  837.131419][T26488] syzkaller0: entered allmulticast mode
[  837.204439][ T5767] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  837.318690][T26495] netlink: 84 bytes leftover after parsing attributes in process `syz.2.6542'.
[  837.329705][T26495] netlink: 84 bytes leftover after parsing attributes in process `syz.2.6542'.
[  837.441045][   T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  837.449496][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  837.450401][   T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  837.466851][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  837.475028][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  837.483501][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  837.484435][ T6189] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  837.515068][T26509] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6547'.
[  837.551566][T26509] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6547'.
[  837.567909][T26514] netlink: 84 bytes leftover after parsing attributes in process `syz.1.6549'.
[  837.580012][T26514] netlink: 84 bytes leftover after parsing attributes in process `syz.1.6549'.
[  837.724810][T26525] FAULT_INJECTION: forcing a failure.
[  837.724810][T26525] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  837.784695][T26525] CPU: 1 UID: 0 PID: 26525 Comm: syz.0.6545 Not tainted syzkaller #0 PREEMPT(full) 
[  837.784721][T26525] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  837.784731][T26525] Call Trace:
[  837.784739][T26525]  <TASK>
[  837.784746][T26525]  dump_stack_lvl+0xe8/0x150
[  837.784770][T26525]  should_fail_ex+0x412/0x560
[  837.784791][T26525]  _copy_to_user+0x31/0xb0
[  837.784810][T26525]  simple_read_from_buffer+0xe1/0x170
[  837.784833][T26525]  proc_fail_nth_read+0x1bb/0x230
[  837.784856][T26525]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  837.784880][T26525]  ? rw_verify_area+0x2a6/0x4d0
[  837.784899][T26525]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  837.784934][T26525]  vfs_read+0x20c/0xa70
[  837.784959][T26525]  ? __pfx___mutex_lock+0x10/0x10
[  837.784977][T26525]  ? __pfx_vfs_read+0x10/0x10
[  837.784998][T26525]  ? __fget_files+0x2a/0x420
[  837.785019][T26525]  ? __fget_files+0x3a0/0x420
[  837.785035][T26525]  ? __fget_files+0x2a/0x420
[  837.785062][T26525]  ksys_read+0x150/0x270
[  837.785085][T26525]  ? __pfx_ksys_read+0x10/0x10
[  837.785116][T26525]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  837.785133][T26525]  do_syscall_64+0x174/0x580
[  837.785148][T26525]  ? trace_irq_disable+0x3b/0x140
[  837.785169][T26525]  ? clear_bhb_loop+0x40/0x90
[  837.785187][T26525]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  837.785201][T26525] RIP: 0033:0x7f67d755d68e
[  837.785217][T26525] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  837.785230][T26525] RSP: 002b:00007f67d84a2fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  837.785247][T26525] RAX: ffffffffffffffda RBX: 00007f67d84a36c0 RCX: 00007f67d755d68e
[  837.785258][T26525] RDX: 000000000000000f RSI: 00007f67d84a30a0 RDI: 0000000000000004
[  837.785267][T26525] RBP: 00007f67d84a3090 R08: 0000000000000000 R09: 0000000000000000
[  837.785277][T26525] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  837.785286][T26525] R13: 00007f67d7816128 R14: 00007f67d7816090 R15: 00007fffcb36dfd8
[  837.785312][T26525]  </TASK>
[  838.274282][T26539] netlink: 'syz.3.6556': attribute type 1 has an invalid length.
[  838.322884][T26543] FAULT_INJECTION: forcing a failure.
[  838.322884][T26543] name failslab, interval 1, probability 0, space 0, times 0
[  838.336075][T26543] CPU: 0 UID: 0 PID: 26543 Comm: syz.3.6557 Not tainted syzkaller #0 PREEMPT(full) 
[  838.336099][T26543] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  838.336109][T26543] Call Trace:
[  838.336117][T26543]  <TASK>
[  838.336126][T26543]  dump_stack_lvl+0xe8/0x150
[  838.336151][T26543]  should_fail_ex+0x412/0x560
[  838.336175][T26543]  should_failslab+0xa8/0x100
[  838.336191][T26543]  ? ovs_flow_alloc+0x24/0x1f0
[  838.336289][T26543]  kmem_cache_alloc_noprof+0x87/0x650
[  838.336308][T26543]  ovs_flow_alloc+0x24/0x1f0
[  838.336321][T26543]  ovs_flow_cmd_new+0x2b9/0xe80
[  838.336335][T26543]  ? kasan_save_track+0x3e/0x80
[  838.336353][T26543]  ? __pfx_ovs_flow_cmd_new+0x10/0x10
[  838.336398][T26543]  ? __nla_parse+0x40/0x60
[  838.336412][T26543]  ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0
[  838.336427][T26543]  ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0
[  838.336445][T26543]  genl_family_rcv_msg_doit+0x22a/0x330
[  838.336462][T26543]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  838.336482][T26543]  ? bpf_lsm_capable+0x9/0x20
[  838.336493][T26543]  ? security_capable+0x7e/0x2c0
[  838.336510][T26543]  genl_rcv_msg+0x61c/0x7a0
[  838.336527][T26543]  ? __pfx_genl_rcv_msg+0x10/0x10
[  838.336540][T26543]  ? __pfx_ovs_flow_cmd_new+0x10/0x10
[  838.336554][T26543]  ? __pfx_ref_tracker_free+0x10/0x10
[  838.336571][T26543]  netlink_rcv_skb+0x232/0x4b0
[  838.336582][T26543]  ? __pfx_genl_rcv_msg+0x10/0x10
[  838.336596][T26543]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  838.336615][T26543]  ? down_read+0x270/0x2e0
[  838.336626][T26543]  ? genl_rcv+0xd/0x40
[  838.336640][T26543]  genl_rcv+0x28/0x40
[  838.336652][T26543]  netlink_unicast+0x75c/0x8e0
[  838.336668][T26543]  netlink_sendmsg+0x813/0xb40
[  838.336693][T26543]  ? __pfx_netlink_sendmsg+0x10/0x10
[  838.336714][T26543]  ? aa_sock_msg_perm+0xf1/0x1b0
[  838.336737][T26543]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  838.336763][T26543]  ____sys_sendmsg+0x972/0x9f0
[  838.336782][T26543]  ? __might_fault+0xaf/0x130
[  838.336806][T26543]  ? __pfx_____sys_sendmsg+0x10/0x10
[  838.336833][T26543]  ? import_iovec+0x73/0xa0
[  838.336854][T26543]  ___sys_sendmsg+0x2a5/0x360
[  838.336871][T26543]  ? __lock_acquire+0x6b5/0x2cf0
[  838.336901][T26543]  ? __pfx____sys_sendmsg+0x10/0x10
[  838.336953][T26543]  ? __fget_files+0x2a/0x420
[  838.336971][T26543]  ? __fget_files+0x3a0/0x420
[  838.337000][T26543]  __x64_sys_sendmsg+0x1bd/0x2a0
[  838.337014][T26543]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  838.337029][T26543]  ? __pfx_ksys_write+0x10/0x10
[  838.337048][T26543]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  838.337059][T26543]  do_syscall_64+0x174/0x580
[  838.337073][T26543]  ? trace_irq_disable+0x3b/0x140
[  838.337088][T26543]  ? clear_bhb_loop+0x40/0x90
[  838.337100][T26543]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  838.337112][T26543] RIP: 0033:0x7fea4219ce59
[  838.337129][T26543] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  838.337143][T26543] RSP: 002b:00007fea43033028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  838.337162][T26543] RAX: ffffffffffffffda RBX: 00007fea42415fa0 RCX: 00007fea4219ce59
[  838.337174][T26543] RDX: 0000000004048080 RSI: 0000200000000140 RDI: 0000000000000003
[  838.337185][T26543] RBP: 00007fea43033090 R08: 0000000000000000 R09: 0000000000000000
[  838.337195][T26543] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  838.337205][T26543] R13: 00007fea42416038 R14: 00007fea42415fa0 R15: 00007ffd2489e348
[  838.337229][T26543]  </TASK>
[  838.762895][T26544] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw
[  838.848247][T26548] syzkaller0: entered promiscuous mode
[  838.855988][T26548] syzkaller0: entered allmulticast mode
[  838.934900][T26547] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue
[  838.983286][T26547] syzkaller0: entered promiscuous mode
[  838.988914][T26547] syzkaller0: entered allmulticast mode
[  839.017760][T26554] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6561'.
[  839.027652][T26554] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6561'.
[  839.674560][T26591] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw
[  839.733368][T26589] netlink: 'syz.1.6572': attribute type 3 has an invalid length.
[  839.774952][T26589] netlink: 666 bytes leftover after parsing attributes in process `syz.1.6572'.
[  840.366265][T26628] FAULT_INJECTION: forcing a failure.
[  840.366265][T26628] name failslab, interval 1, probability 0, space 0, times 0
[  840.380299][T26628] CPU: 1 UID: 0 PID: 26628 Comm: syz.4.6579 Not tainted syzkaller #0 PREEMPT(full) 
[  840.380321][T26628] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  840.380331][T26628] Call Trace:
[  840.380338][T26628]  <TASK>
[  840.380345][T26628]  dump_stack_lvl+0xe8/0x150
[  840.380370][T26628]  should_fail_ex+0x412/0x560
[  840.380393][T26628]  should_failslab+0xa8/0x100
[  840.380413][T26628]  kmem_cache_alloc_node_noprof+0x8f/0x690
[  840.380434][T26628]  ? __alloc_skb+0x186/0x7d0
[  840.380450][T26628]  ? __alloc_skb+0x1d0/0x7d0
[  840.380464][T26628]  ? __local_bh_enable_ip+0xd0/0x130
[  840.380486][T26628]  __alloc_skb+0x1d0/0x7d0
[  840.380502][T26628]  ? netlink_ack_tlv_len+0x6c/0x210
[  840.380523][T26628]  netlink_ack+0x146/0xa50
[  840.380544][T26628]  ? __pfx___up_read+0x10/0x10
[  840.380573][T26628]  rdma_nl_rcv+0x3ee/0xa10
[  840.380625][T26628]  ? __pfx_rdma_nl_rcv+0x10/0x10
[  840.380664][T26628]  ? netlink_deliver_tap+0x2e/0x1b0
[  840.380682][T26628]  ? netlink_deliver_tap+0x2e/0x1b0
[  840.380705][T26628]  netlink_unicast+0x75c/0x8e0
[  840.380730][T26628]  netlink_sendmsg+0x813/0xb40
[  840.380756][T26628]  ? __pfx_netlink_sendmsg+0x10/0x10
[  840.380777][T26628]  ? aa_sock_msg_perm+0xf1/0x1b0
[  840.380801][T26628]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  840.380825][T26628]  ____sys_sendmsg+0x972/0x9f0
[  840.380843][T26628]  ? __might_fault+0xaf/0x130
[  840.380869][T26628]  ? __pfx_____sys_sendmsg+0x10/0x10
[  840.380894][T26628]  ? import_iovec+0x73/0xa0
[  840.380916][T26628]  ___sys_sendmsg+0x2a5/0x360
[  840.380933][T26628]  ? __lock_acquire+0x6b5/0x2cf0
[  840.380954][T26628]  ? __pfx____sys_sendmsg+0x10/0x10
[  840.381002][T26628]  ? __fget_files+0x2a/0x420
[  840.381019][T26628]  ? __fget_files+0x3a0/0x420
[  840.381047][T26628]  __x64_sys_sendmsg+0x1bd/0x2a0
[  840.381068][T26628]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  840.381093][T26628]  ? __pfx_ksys_write+0x10/0x10
[  840.381117][T26628]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  840.381131][T26628]  do_syscall_64+0x174/0x580
[  840.381144][T26628]  ? trace_irq_disable+0x3b/0x140
[  840.381162][T26628]  ? clear_bhb_loop+0x40/0x90
[  840.381178][T26628]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  840.381190][T26628] RIP: 0033:0x7fb45159ce59
[  840.381204][T26628] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  840.381214][T26628] RSP: 002b:00007fb45250f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  840.381229][T26628] RAX: ffffffffffffffda RBX: 00007fb451815fa0 RCX: 00007fb45159ce59
[  840.381238][T26628] RDX: 0000000020000080 RSI: 0000200000000140 RDI: 0000000000000003
[  840.381246][T26628] RBP: 00007fb45250f090 R08: 0000000000000000 R09: 0000000000000000
[  840.381261][T26628] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  840.381269][T26628] R13: 00007fb451816038 R14: 00007fb451815fa0 R15: 00007ffdbad64108
[  840.381291][T26628]  </TASK>
[  840.785228][ T5640] block nbd153: Receive control failed (result -32)
[  840.786345][ T5645] block nbd153: Receive control failed (result -32)
[  840.796434][ T5633] block nbd153: Receive control failed (result -32)
[  841.206242][T26651] netlink: 'syz.1.6584': attribute type 3 has an invalid length.
[  841.364800][T22382] net_ratelimit: 14 callbacks suppressed
[  841.364819][T22382] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  841.422159][T26662] syzkaller0: entered promiscuous mode
[  841.428238][T26662] syzkaller0: entered allmulticast mode
[  841.724132][T26670] syzkaller0: entered promiscuous mode
[  841.733547][T26670] syzkaller0: entered allmulticast mode
[  842.160205][T22382] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  842.203871][T26707] netlink: 'syz.0.6598': attribute type 3 has an invalid length.
[  842.212559][T26707] __nla_validate_parse: 11 callbacks suppressed
[  842.212576][T26707] netlink: 666 bytes leftover after parsing attributes in process `syz.0.6598'.
[  842.382472][T26711] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6599'.
[  842.410080][T22382] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  842.569417][   T57] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  842.578120][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  843.207986][ T6196] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  843.216215][T22382] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  843.224348][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  843.454543][T22379] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  844.275978][T22382] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  846.370704][T22379] net_ratelimit: 9 callbacks suppressed
[  846.370725][T22379] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  846.425996][ T6196] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  846.434225][   T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  846.442402][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  846.569937][ T5767] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  846.813182][T26733] netlink: 84 bytes leftover after parsing attributes in process `syz.3.6603'.
[  846.842964][T26733] netlink: 84 bytes leftover after parsing attributes in process `syz.3.6603'.
[  846.862200][T26739] batman_adv: batadv0: Adding interface: dummy0
[  846.872148][T26739] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  846.901280][T26739] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active
[  846.915349][T26742] netlink: 'syz.0.6602': attribute type 1 has an invalid length.
[  847.046450][ T6187] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  847.055433][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  847.249161][T26748] netlink: 56 bytes leftover after parsing attributes in process `syz.3.6608'.
[  847.268064][T26752] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6610'.
[  847.386505][T26756] netlink: 'syz.3.6611': attribute type 3 has an invalid length.
[  847.440680][T22379] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  847.505100][T26759] netlink: 'syz.0.6612': attribute type 3 has an invalid length.
[  847.533931][T26759] netlink: 666 bytes leftover after parsing attributes in process `syz.0.6612'.
[  847.604112][T22379] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  847.641883][T26765] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue
[  847.668900][T26765] syzkaller0: entered promiscuous mode
[  847.674932][T26765] syzkaller0: entered allmulticast mode
[  847.847794][T26779] bridge0: adding interface bridge_slave_0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  847.902856][T26782] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6622'.
[  847.913536][T26782] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6622'.
[  848.093660][T26792] netlink: 'syz.0.6625': attribute type 3 has an invalid length.
[  848.110026][T26792] netlink: 666 bytes leftover after parsing attributes in process `syz.0.6625'.
[  848.329946][   T57] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  848.721613][T26810] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue
[  848.782475][T26810] syzkaller0: entered promiscuous mode
[  848.804757][T26810] syzkaller0: entered allmulticast mode
[  848.828900][T26814] netlink: 'syz.4.6633': attribute type 1 has an invalid length.
[  849.124354][T26832] netlink: 'syz.3.6637': attribute type 3 has an invalid length.
[  849.146595][T26832] netlink: 666 bytes leftover after parsing attributes in process `syz.3.6637'.
[  849.485557][T26856] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw
[  849.548453][T26853] netlink: 56 bytes leftover after parsing attributes in process `syz.3.6643'.
[  849.945659][T26867] netlink: 'syz.1.6647': attribute type 4 has an invalid length.
[  850.074858][T26867] bridge0: port 2(bridge_slave_1) entered disabled state
[  850.082222][T26867] bridge0: port 1(bridge_slave_0) entered disabled state
[  850.215330][T26867] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  850.295437][T26867] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  850.386407][T26894] netlink: 80 bytes leftover after parsing attributes in process `syz.3.6650'.
[  850.593343][T26888] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue
[  850.620656][T26888] syzkaller0: entered promiscuous mode
[  850.626643][T26888] syzkaller0: entered allmulticast mode
[  850.652952][T26894] bridge0: port 1(bridge_slave_0) entered disabled state
[  850.661983][   T35] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  850.688834][   T35] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  850.715647][T26904] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6653'.
[  850.757832][   T35] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  850.767801][   T35] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  851.218220][T26929] syzkaller0: entered promiscuous mode
[  851.223978][T26929] syzkaller0: entered allmulticast mode
[  851.373332][ T5645] block nbd154: Receive control failed (result -32)
[  851.373332][ T5633] block nbd154: Receive control failed (result -32)
[  851.389849][ T5640] block nbd154: Receive control failed (result -32)
[  851.524386][   T35] net_ratelimit: 14 callbacks suppressed
[  851.524403][   T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  851.538282][   T57] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  851.546464][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  851.606658][T22379] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  851.663486][T26938] FAULT_INJECTION: forcing a failure.
[  851.663486][T26938] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  851.698974][T26938] CPU: 0 UID: 0 PID: 26938 Comm: syz.0.6665 Not tainted syzkaller #0 PREEMPT(full) 
[  851.698999][T26938] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  851.699009][T26938] Call Trace:
[  851.699016][T26938]  <TASK>
[  851.699023][T26938]  dump_stack_lvl+0xe8/0x150
[  851.699049][T26938]  should_fail_ex+0x412/0x560
[  851.699073][T26938]  _copy_to_user+0x31/0xb0
[  851.699096][T26938]  simple_read_from_buffer+0xe1/0x170
[  851.699121][T26938]  proc_fail_nth_read+0x1bb/0x230
[  851.699145][T26938]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  851.699167][T26938]  ? rw_verify_area+0x2a6/0x4d0
[  851.699189][T26938]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  851.699211][T26938]  vfs_read+0x20c/0xa70
[  851.699237][T26938]  ? __pfx___mutex_lock+0x10/0x10
[  851.699257][T26938]  ? __pfx_vfs_read+0x10/0x10
[  851.699283][T26938]  ? __fget_files+0x2a/0x420
[  851.699306][T26938]  ? __fget_files+0x3a0/0x420
[  851.699324][T26938]  ? __fget_files+0x2a/0x420
[  851.699349][T26938]  ksys_read+0x150/0x270
[  851.699371][T26938]  ? __pfx_ksys_read+0x10/0x10
[  851.699390][T26938]  ? fput+0xa0/0xd0
[  851.699414][T26938]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  851.699430][T26938]  do_syscall_64+0x174/0x580
[  851.699445][T26938]  ? trace_irq_disable+0x3b/0x140
[  851.699467][T26938]  ? clear_bhb_loop+0x40/0x90
[  851.699487][T26938]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  851.699503][T26938] RIP: 0033:0x7f67d755d68e
[  851.699520][T26938] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  851.699534][T26938] RSP: 002b:00007f67d84c3fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  851.699551][T26938] RAX: ffffffffffffffda RBX: 00007f67d84c46c0 RCX: 00007f67d755d68e
[  851.699563][T26938] RDX: 000000000000000f RSI: 00007f67d84c40a0 RDI: 0000000000000004
[  851.699573][T26938] RBP: 00007f67d84c4090 R08: 0000000000000000 R09: 0000000000000000
[  851.699583][T26938] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  851.699593][T26938] R13: 00007f67d7816038 R14: 00007f67d7815fa0 R15: 00007fffcb36dfd8
[  851.699620][T26938]  </TASK>
[  851.947656][T22379] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  852.023161][ T6189] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  852.058901][ T6189] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  852.089060][T26954] FAULT_INJECTION: forcing a failure.
[  852.089060][T26954] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  852.161829][   T57] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  852.170257][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  852.219598][T26954] CPU: 1 UID: 0 PID: 26954 Comm: syz.3.6669 Not tainted syzkaller #0 PREEMPT(full) 
[  852.219623][T26954] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  852.219633][T26954] Call Trace:
[  852.219640][T26954]  <TASK>
[  852.219648][T26954]  dump_stack_lvl+0xe8/0x150
[  852.219674][T26954]  should_fail_ex+0x412/0x560
[  852.219697][T26954]  _copy_from_iter+0x1d3/0x1670
[  852.219719][T26954]  ? rcu_is_watching+0x15/0xb0
[  852.219744][T26954]  ? __pfx__copy_from_iter+0x10/0x10
[  852.219769][T26954]  ? netlink_sendmsg+0x650/0xb40
[  852.219786][T26954]  ? skb_put+0x11b/0x210
[  852.219807][T26954]  netlink_sendmsg+0x6c0/0xb40
[  852.219833][T26954]  ? __pfx_netlink_sendmsg+0x10/0x10
[  852.219854][T26954]  ? aa_sock_msg_perm+0xf1/0x1b0
[  852.219877][T26954]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  852.219899][T26954]  ____sys_sendmsg+0x972/0x9f0
[  852.219916][T26954]  ? __might_fault+0xaf/0x130
[  852.219941][T26954]  ? __pfx_____sys_sendmsg+0x10/0x10
[  852.219965][T26954]  ? import_iovec+0x73/0xa0
[  852.219986][T26954]  ___sys_sendmsg+0x2a5/0x360
[  852.220001][T26954]  ? __lock_acquire+0x6b5/0x2cf0
[  852.220022][T26954]  ? __pfx____sys_sendmsg+0x10/0x10
[  852.220075][T26954]  ? __fget_files+0x2a/0x420
[  852.220093][T26954]  ? __fget_files+0x3a0/0x420
[  852.220118][T26954]  __x64_sys_sendmsg+0x1bd/0x2a0
[  852.220139][T26954]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  852.220166][T26954]  ? __pfx_ksys_write+0x10/0x10
[  852.220196][T26954]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  852.220222][T26954]  do_syscall_64+0x174/0x580
[  852.220241][T26954]  ? clear_bhb_loop+0x40/0x90
[  852.220261][T26954]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  852.220277][T26954] RIP: 0033:0x7fea4219ce59
[  852.220293][T26954] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  852.220307][T26954] RSP: 002b:00007fea42ff1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  852.220325][T26954] RAX: ffffffffffffffda RBX: 00007fea42416180 RCX: 00007fea4219ce59
[  852.220337][T26954] RDX: 0000000004000050 RSI: 0000200000000000 RDI: 0000000000000007
[  852.220348][T26954] RBP: 00007fea42ff1090 R08: 0000000000000000 R09: 0000000000000000
[  852.220358][T26954] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  852.220368][T26954] R13: 00007fea42416218 R14: 00007fea42416180 R15: 00007ffd2489e348
[  852.220396][T26954]  </TASK>
[  852.560514][T26962] __nla_validate_parse: 5 callbacks suppressed
[  852.560533][T26962] netlink: 56 bytes leftover after parsing attributes in process `syz.0.6671'.
[  852.656875][T22382] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  852.777370][T26977] netlink: 80 bytes leftover after parsing attributes in process `syz.1.6673'.
[  852.804861][   T57] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  852.813301][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  852.830955][T26978] netlink: 64 bytes leftover after parsing attributes in process `syz.3.6674'.
[  852.846550][T26966] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6672'.
[  853.114174][T26990] FAULT_INJECTION: forcing a failure.
[  853.114174][T26990] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  853.160045][T26990] CPU: 0 UID: 0 PID: 26990 Comm: syz.4.6678 Not tainted syzkaller #0 PREEMPT(full) 
[  853.160070][T26990] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  853.160079][T26990] Call Trace:
[  853.160093][T26990]  <TASK>
[  853.160101][T26990]  dump_stack_lvl+0xe8/0x150
[  853.160125][T26990]  should_fail_ex+0x412/0x560
[  853.160144][T26990]  _copy_to_user+0x31/0xb0
[  853.160161][T26990]  simple_read_from_buffer+0xe1/0x170
[  853.160180][T26990]  proc_fail_nth_read+0x1bb/0x230
[  853.160199][T26990]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  853.160217][T26990]  ? rw_verify_area+0x2a6/0x4d0
[  853.160234][T26990]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  853.160251][T26990]  vfs_read+0x20c/0xa70
[  853.160271][T26990]  ? __pfx___mutex_lock+0x10/0x10
[  853.160286][T26990]  ? __pfx_vfs_read+0x10/0x10
[  853.160304][T26990]  ? __fget_files+0x2a/0x420
[  853.160322][T26990]  ? __fget_files+0x3a0/0x420
[  853.160335][T26990]  ? __fget_files+0x2a/0x420
[  853.160356][T26990]  ksys_read+0x150/0x270
[  853.160374][T26990]  ? __pfx_ksys_read+0x10/0x10
[  853.160397][T26990]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  853.160410][T26990]  do_syscall_64+0x174/0x580
[  853.160422][T26990]  ? trace_irq_disable+0x3b/0x140
[  853.160441][T26990]  ? clear_bhb_loop+0x40/0x90
[  853.160455][T26990]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  853.160468][T26990] RIP: 0033:0x7fb45155d68e
[  853.160481][T26990] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  853.160492][T26990] RSP: 002b:00007fb45250efe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  853.160506][T26990] RAX: ffffffffffffffda RBX: 00007fb45250f6c0 RCX: 00007fb45155d68e
[  853.160515][T26990] RDX: 000000000000000f RSI: 00007fb45250f0a0 RDI: 0000000000000005
[  853.160523][T26990] RBP: 00007fb45250f090 R08: 0000000000000000 R09: 0000000000000000
[  853.160531][T26990] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  853.160538][T26990] R13: 00007fb451816038 R14: 00007fb451815fa0 R15: 00007ffdbad64108
[  853.160559][T26990]  </TASK>
[  853.540161][T26999] netlink: 48 bytes leftover after parsing attributes in process `syz.4.6682'.
[  853.683952][T27003] macsec0: entered promiscuous mode
[  853.736906][T27002] macsec0: left promiscuous mode
[  853.962601][T26980] netlink: 'syz.0.6675': attribute type 1 has an invalid length.
[  854.005729][T26980] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6675'.
[  854.014924][T26980] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6675'.
[  854.026162][T26980] netlink: 'syz.0.6675': attribute type 12 has an invalid length.
[  854.293966][T27038] netlink: 48 bytes leftover after parsing attributes in process `syz.2.6696'.
[  854.297087][  T158] bond0 (unregistering): Released all slaves
[  854.347609][T27027] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6692'.
[  854.367584][T22382] IPVS: starting estimator thread 0...
[  854.398623][T27041] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw
[  854.490362][T27040] IPVS: using max 57 ests per chain, 136800 per kthread
[  854.515907][T27027] netlink: 'syz.4.6692': attribute type 3 has an invalid length.
[  854.531071][T27027] netlink: 64 bytes leftover after parsing attributes in process `syz.4.6692'.
[  854.554461][T27045] netlink: 'syz.0.6697': attribute type 3 has an invalid length.
[  854.576357][T27045] netlink: 'syz.0.6697': attribute type 3 has an invalid length.
[  854.881738][ T6185] wlan1: Trigger new scan to find an IBSS to join
[  855.106021][T27061] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw
[  855.422640][T27080] xt_TCPMSS: Only works on TCP SYN packets
[  855.739171][T27101] FAULT_INJECTION: forcing a failure.
[  855.739171][T27101] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  855.783694][T27101] CPU: 1 UID: 0 PID: 27101 Comm: syz.3.6712 Not tainted syzkaller #0 PREEMPT(full) 
[  855.783720][T27101] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  855.783729][T27101] Call Trace:
[  855.783736][T27101]  <TASK>
[  855.783744][T27101]  dump_stack_lvl+0xe8/0x150
[  855.783769][T27101]  should_fail_ex+0x412/0x560
[  855.783793][T27101]  _copy_to_user+0x31/0xb0
[  855.783815][T27101]  bpf_test_finish+0x1db/0x6b0
[  855.783837][T27101]  ? __pfx_xdp_test_run_init_page+0x10/0x10
[  855.783855][T27101]  ? __pfx_bpf_test_finish+0x10/0x10
[  855.783877][T27101]  ? _copy_from_user+0x94/0xb0
[  855.783896][T27101]  ? bpf_test_init+0x113/0x150
[  855.783916][T27101]  bpf_prog_test_run_xdp+0x8fa/0x1160
[  855.783947][T27101]  ? __pfx_bpf_prog_test_run_xdp+0x10/0x10
[  855.783970][T27101]  ? __fget_files+0x2a/0x420
[  855.783993][T27101]  ? __pfx_bpf_prog_test_run_xdp+0x10/0x10
[  855.784013][T27101]  bpf_prog_test_run+0x2c7/0x340
[  855.784034][T27101]  __sys_bpf+0x643/0x950
[  855.784059][T27101]  ? __pfx___sys_bpf+0x10/0x10
[  855.784095][T27101]  ? ksys_write+0x242/0x270
[  855.784136][T27101]  ? __pfx_ksys_write+0x10/0x10
[  855.784162][T27101]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  855.784179][T27101]  __x64_sys_bpf+0x7c/0x90
[  855.784199][T27101]  do_syscall_64+0x174/0x580
[  855.784215][T27101]  ? trace_irq_disable+0x3b/0x140
[  855.784236][T27101]  ? clear_bhb_loop+0x40/0x90
[  855.784253][T27101]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  855.784268][T27101] RIP: 0033:0x7fea4219ce59
[  855.784285][T27101] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  855.784297][T27101] RSP: 002b:00007fea43033028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  855.784315][T27101] RAX: ffffffffffffffda RBX: 00007fea42415fa0 RCX: 00007fea4219ce59
[  855.784325][T27101] RDX: 0000000000000050 RSI: 0000200000000280 RDI: 000000000000000a
[  855.784335][T27101] RBP: 00007fea43033090 R08: 0000000000000000 R09: 0000000000000000
[  855.784344][T27101] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  855.784360][T27101] R13: 00007fea42416038 R14: 00007fea42415fa0 R15: 00007ffd2489e348
[  855.784385][T27101]  </TASK>
[  856.238116][T27111] veth0_to_bond: entered allmulticast mode
[  856.385117][ T5640] block nbd155: Receive control failed (result -32)
[  856.385117][ T5633] block nbd155: Receive control failed (result -32)
[  856.390752][ T5645] block nbd155: Receive control failed (result -32)
[  856.634211][T27127] netlink: 'syz.2.6720': attribute type 1 has an invalid length.
[  856.649556][ T6185] net_ratelimit: 14 callbacks suppressed
[  856.649576][ T6185] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  856.663793][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  856.801564][T22382] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  857.120082][T22382] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  857.273947][T27161] xt_HMARK: proto mask must be zero with L3 mode
[  857.287195][   T57] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  857.296037][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  857.304192][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  857.667005][T27172] FAULT_INJECTION: forcing a failure.
[  857.667005][T27172] name failslab, interval 1, probability 0, space 0, times 0
[  857.688520][T27172] CPU: 1 UID: 0 PID: 27172 Comm: syz.1.6735 Not tainted syzkaller #0 PREEMPT(full) 
[  857.688538][T27172] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  857.688544][T27172] Call Trace:
[  857.688550][T27172]  <TASK>
[  857.688558][T27172]  dump_stack_lvl+0xe8/0x150
[  857.688582][T27172]  should_fail_ex+0x412/0x560
[  857.688606][T27172]  should_failslab+0xa8/0x100
[  857.688633][T27172]  __kmalloc_cache_noprof+0x88/0x660
[  857.688656][T27172]  ? nfnetlink_rcv+0xfdf/0x27b0
[  857.688677][T27172]  nfnetlink_rcv+0xfdf/0x27b0
[  857.688717][T27172]  ? __pfx_nfnetlink_rcv+0x10/0x10
[  857.688756][T27172]  ? netlink_deliver_tap+0x2e/0x1b0
[  857.688773][T27172]  ? netlink_deliver_tap+0x2e/0x1b0
[  857.688784][T27172]  ? netlink_deliver_tap+0x2e/0x1b0
[  857.688797][T27172]  netlink_unicast+0x75c/0x8e0
[  857.688813][T27172]  netlink_sendmsg+0x813/0xb40
[  857.688829][T27172]  ? __pfx_netlink_sendmsg+0x10/0x10
[  857.688842][T27172]  ? aa_sock_msg_perm+0xf1/0x1b0
[  857.688859][T27172]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  857.688875][T27172]  ____sys_sendmsg+0x972/0x9f0
[  857.688887][T27172]  ? __might_fault+0xaf/0x130
[  857.688903][T27172]  ? __pfx_____sys_sendmsg+0x10/0x10
[  857.688919][T27172]  ? import_iovec+0x73/0xa0
[  857.688933][T27172]  ___sys_sendmsg+0x2a5/0x360
[  857.688943][T27172]  ? __lock_acquire+0x6b5/0x2cf0
[  857.688957][T27172]  ? __pfx____sys_sendmsg+0x10/0x10
[  857.688986][T27172]  ? __fget_files+0x2a/0x420
[  857.688998][T27172]  ? __fget_files+0x3a0/0x420
[  857.689018][T27172]  __x64_sys_sendmsg+0x1bd/0x2a0
[  857.689031][T27172]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  857.689047][T27172]  ? __pfx_ksys_write+0x10/0x10
[  857.689066][T27172]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  857.689079][T27172]  do_syscall_64+0x174/0x580
[  857.689102][T27172]  ? clear_bhb_loop+0x40/0x90
[  857.689122][T27172]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  857.689137][T27172] RIP: 0033:0x7ff53e59ce59
[  857.689155][T27172] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  857.689164][T27172] RSP: 002b:00007ff53c7f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  857.689176][T27172] RAX: ffffffffffffffda RBX: 00007ff53e815fa0 RCX: 00007ff53e59ce59
[  857.689183][T27172] RDX: 0000000020040040 RSI: 0000200000009b40 RDI: 0000000000000003
[  857.689189][T27172] RBP: 00007ff53c7f6090 R08: 0000000000000000 R09: 0000000000000000
[  857.689195][T27172] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  857.689201][T27172] R13: 00007ff53e816038 R14: 00007ff53e815fa0 R15: 00007ffecae79ff8
[  857.689217][T27172]  </TASK>
[  857.958478][   T57] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  857.960747][T22379] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  857.967299][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  858.183800][T27183] syzkaller0: entered promiscuous mode
[  858.189330][T27183] syzkaller0: entered allmulticast mode
[  858.477473][T27199] __nla_validate_parse: 9 callbacks suppressed
[  858.477487][T27199] netlink: 156 bytes leftover after parsing attributes in process `syz.4.6745'.
[  858.502772][T22382] IPVS: starting estimator thread 0...
[  858.589966][T27207] IPVS: using max 44 ests per chain, 105600 per kthread
[  858.975015][T27226] netlink: 56 bytes leftover after parsing attributes in process `syz.2.6749'.
[  859.526392][T27242] bridge0: port 3(erspan0) entered blocking state
[  859.534032][T27242] bridge0: port 3(erspan0) entered disabled state
[  859.543086][T27242] erspan0: entered allmulticast mode
[  859.555820][T27242] erspan0: entered promiscuous mode
[  859.562562][T27242] bridge0: port 3(erspan0) entered blocking state
[  859.571799][T27242] bridge0: port 3(erspan0) entered forwarding state
[  859.608296][T27245] erspan0: left allmulticast mode
[  859.621370][T27245] erspan0: left promiscuous mode
[  859.637879][T27245] bridge0: port 3(erspan0) entered disabled state
[  859.697522][T27249] netlink: 68 bytes leftover after parsing attributes in process `syz.3.6754'.
[  859.720863][T27249] netlink: 64 bytes leftover after parsing attributes in process `syz.3.6754'.
[  859.840680][   T35] wlan1: Trigger new scan to find an IBSS to join
[  859.954995][T27246] syzkaller0: entered promiscuous mode
[  859.966308][T27246] syzkaller0: entered allmulticast mode
[  860.815346][ T6196] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  861.762955][ T6196] net_ratelimit: 16 callbacks suppressed
[  861.762975][ T6196] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  861.778121][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  861.781469][  T158] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  861.795524][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  862.092827][T22392] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  862.342631][T22392] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  862.409867][  T158] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  862.418230][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  863.042382][  T158] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  863.141311][T22392] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  864.593182][T27266] bridge0: port 3(batadv1) entered blocking state
[  864.611442][T27266] bridge0: port 3(batadv1) entered disabled state
[  864.618125][T27266] batadv1: entered allmulticast mode
[  864.627079][T27266] batadv1: entered promiscuous mode
[  865.089522][  T158] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled
[  865.101476][  T158] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled
[  865.226726][T27300] netlink: 56 bytes leftover after parsing attributes in process `syz.1.6763'.
[  865.243042][T27302] netlink: 'syz.2.6767': attribute type 1 has an invalid length.
[  865.394609][T27280] netlink: 'syz.3.6762': attribute type 1 has an invalid length.
[  865.441832][T27280] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6762'.
[  865.451254][T27280] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6762'.
[  865.462911][T27280] netlink: 'syz.3.6762': attribute type 12 has an invalid length.
[  865.635155][T27315] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6770'.
[  865.678799][   T35] bond0 (unregistering): Released all slaves
[  865.717928][T27316] netlink: 84 bytes leftover after parsing attributes in process `syz.2.6769'.
[  865.727954][T27316] netlink: 84 bytes leftover after parsing attributes in process `syz.2.6769'.
[  865.970736][T27323] netdevsim netdevsim2: Firmware load for '..' refused, path contains '..' component
[  866.020870][T27323] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  866.047494][T27323] syzkaller0: entered promiscuous mode
[  866.067719][T27323] syzkaller0: entered allmulticast mode
[  866.121009][T27327] tipc: Resetting bearer <eth:syzkaller0>
[  866.130390][T27326] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6772'.
[  866.187594][T27327] tipc: Disabling bearer <eth:syzkaller0>
[  866.238161][T27338] netlink: 56 bytes leftover after parsing attributes in process `syz.2.6773'.
[  866.254986][T27326] netdevsim netdevsim4 netdevsim0: entered allmulticast mode
[  866.527101][T27353] netlink: 5 bytes leftover after parsing attributes in process `syz.3.6778'.
[  866.823570][T27365] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  866.831953][T27365] syzkaller0: entered promiscuous mode
[  866.837564][T27365] syzkaller0: entered allmulticast mode
[  866.889266][T27365] net_ratelimit: 13 callbacks suppressed
[  866.889283][T27365] syzkaller0: mtu greater than device maximum
[  866.904252][T27364] tipc: Resetting bearer <eth:syzkaller0>
[  866.934366][T27364] tipc: Disabling bearer <eth:syzkaller0>
[  866.944389][T27367] IPVS: Error connecting to the multicast addr
[  867.056867][T27377] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6784'.
[  867.291923][T22382] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  867.304445][T27386] syzkaller1: entered promiscuous mode
[  867.313599][T27386] syzkaller1: entered allmulticast mode
[  867.521040][T22382] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  867.568372][   T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  867.568424][ T6189] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  867.577232][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  867.584975][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  867.789335][T27384] netlink: 'syz.1.6788': attribute type 1 has an invalid length.
[  867.811356][T27402] bridge0: port 1(bridge_slave_0) entered disabled state
[  867.825075][T27402] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[  867.915254][T27384] netlink: 'syz.1.6788': attribute type 12 has an invalid length.
[  868.112661][T27423] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw
[  868.163317][ T6187] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  868.175929][  T158] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  868.232811][ T6189] bond0 (unregistering): Released all slaves
[  868.496109][T27427] syzkaller0: entered promiscuous mode
[  868.536890][T27427] syzkaller0: entered allmulticast mode
[  868.740914][T27445] IPVS: Error connecting to the multicast addr
[  868.786336][ T5640] block nbd156: Receive control failed (result -32)
[  868.804927][ T5645] block nbd156: Receive control failed (result -32)
[  868.810030][ T5633] block nbd156: Receive control failed (result -32)
[  869.026607][T27456] batman_adv: batadv0: Removing interface: batadv_slave_1
[  869.378002][T27479] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw
[  870.083583][ T1318] ieee802154 phy0 wpan0: encryption failed: -22
[  870.090011][ T1318] ieee802154 phy1 wpan1: encryption failed: -22
[  872.007880][ T6185] net_ratelimit: 15 callbacks suppressed
[  872.007900][ T6185] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  872.022566][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  872.491580][T22392] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  872.725091][   T57] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  872.733410][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  872.742354][T22392] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  873.295487][   T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  873.304777][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  873.567949][T22392] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  873.770009][T22382] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  873.860884][T27477] bond0: ARP target 170.170.170.170 is already present
[  873.867800][T27477] bond0: option arp_ip_target: invalid value (2863311530)
[  874.124161][T27507] Unsupported ieee802154 address type: 0
[  874.180953][T27510] __nla_validate_parse: 10 callbacks suppressed
[  874.180974][T27510] netlink: 44 bytes leftover after parsing attributes in process `syz.3.6820'.
[  874.211586][T27511] xt_TPROXY: Can be used only with -p tcp or -p udp
[  874.696325][T27535] FAULT_INJECTION: forcing a failure.
[  874.696325][T27535] name failslab, interval 1, probability 0, space 0, times 0
[  874.729924][T27535] CPU: 0 UID: 0 PID: 27535 Comm: syz.2.6829 Not tainted syzkaller #0 PREEMPT(full) 
[  874.729946][T27535] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  874.729958][T27535] Call Trace:
[  874.729965][T27535]  <TASK>
[  874.729973][T27535]  dump_stack_lvl+0xe8/0x150
[  874.729998][T27535]  should_fail_ex+0x412/0x560
[  874.730022][T27535]  should_failslab+0xa8/0x100
[  874.730038][T27535]  ? skb_clone+0x212/0x3a0
[  874.730057][T27535]  kmem_cache_alloc_noprof+0x87/0x650
[  874.730078][T27535]  ? __netlink_lookup+0xc6/0x8b0
[  874.730101][T27535]  skb_clone+0x212/0x3a0
[  874.730120][T27535]  __netlink_deliver_tap+0x404/0x850
[  874.730150][T27535]  ? netlink_deliver_tap+0x2e/0x1b0
[  874.730169][T27535]  netlink_deliver_tap+0x19c/0x1b0
[  874.730188][T27535]  netlink_unicast+0x730/0x8e0
[  874.730216][T27535]  netlink_sendmsg+0x813/0xb40
[  874.730244][T27535]  ? __pfx_netlink_sendmsg+0x10/0x10
[  874.730266][T27535]  ? aa_sock_msg_perm+0xf1/0x1b0
[  874.730291][T27535]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  874.730315][T27535]  ____sys_sendmsg+0x972/0x9f0
[  874.730334][T27535]  ? __might_fault+0xaf/0x130
[  874.730357][T27535]  ? __pfx_____sys_sendmsg+0x10/0x10
[  874.730381][T27535]  ? import_iovec+0x73/0xa0
[  874.730403][T27535]  ___sys_sendmsg+0x2a5/0x360
[  874.730419][T27535]  ? __lock_acquire+0x6b5/0x2cf0
[  874.730441][T27535]  ? __pfx____sys_sendmsg+0x10/0x10
[  874.730501][T27535]  ? __fget_files+0x2a/0x420
[  874.730521][T27535]  ? __fget_files+0x3a0/0x420
[  874.730549][T27535]  __x64_sys_sendmsg+0x1bd/0x2a0
[  874.730570][T27535]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  874.730595][T27535]  ? __pfx_ksys_write+0x10/0x10
[  874.730623][T27535]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  874.730639][T27535]  do_syscall_64+0x174/0x580
[  874.730659][T27535]  ? trace_irq_disable+0x3b/0x140
[  874.730678][T27535]  ? clear_bhb_loop+0x40/0x90
[  874.730697][T27535]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  874.730712][T27535] RIP: 0033:0x7f432ff9ce59
[  874.730727][T27535] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  874.730738][T27535] RSP: 002b:00007f4330de2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  874.730754][T27535] RAX: ffffffffffffffda RBX: 00007f4330215fa0 RCX: 00007f432ff9ce59
[  874.730765][T27535] RDX: 0000000004040004 RSI: 0000200000000000 RDI: 0000000000000003
[  874.730775][T27535] RBP: 00007f4330de2090 R08: 0000000000000000 R09: 0000000000000000
[  874.730784][T27535] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  874.730792][T27535] R13: 00007f4330216038 R14: 00007f4330215fa0 R15: 00007ffeb98f7b08
[  874.730819][T27535]  </TASK>
[  874.730886][T27535] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add()
[  874.849180][T27543] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6831'.
[  875.134582][T27548] netlink: 84 bytes leftover after parsing attributes in process `syz.2.6832'.
[  875.149437][T27548] netlink: 84 bytes leftover after parsing attributes in process `syz.2.6832'.
[  875.208014][T27552] gtp0: entered promiscuous mode
[  875.228329][T27552] gtp0: entered allmulticast mode
[  875.244441][T27552] team0: Device gtp0 is of different type
[  875.388663][T27541] netlink: 'syz.4.6828': attribute type 1 has an invalid length.
[  875.396994][T27559] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6836'.
[  875.454865][T27556] netlink: 128 bytes leftover after parsing attributes in process `syz.3.6836'.
[  875.467829][T27557] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6828'.
[  875.491922][T27557] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6828'.
[  875.630445][T27565] netlink: 'syz.4.6828': attribute type 12 has an invalid length.
[  875.644121][T27572] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6837'.
[  875.662948][T27564] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6838'.
[  875.766015][T27576] netlink: 'syz.2.6841': attribute type 3 has an invalid length.
[  876.316171][T27577] netlink: 'syz.3.6840': attribute type 1 has an invalid length.
[  877.127614][T22382] net_ratelimit: 16 callbacks suppressed
[  877.127631][T22382] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  877.621920][T27649] netlink: 'syz.2.6862': attribute type 4 has an invalid length.
[  877.767785][T27658] FAULT_INJECTION: forcing a failure.
[  877.767785][T27658] name failslab, interval 1, probability 0, space 0, times 0
[  877.769076][ T6187] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  877.789208][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  877.798217][T27649] bridge0: port 2(bridge_slave_1) entered disabled state
[  877.803283][ T5767] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  877.807507][T27658] CPU: 0 UID: 0 PID: 27658 Comm: syz.1.6866 Not tainted syzkaller #0 PREEMPT(full) 
[  877.807531][T27658] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  877.807540][T27658] Call Trace:
[  877.807547][T27658]  <TASK>
[  877.807555][T27658]  dump_stack_lvl+0xe8/0x150
[  877.807581][T27658]  should_fail_ex+0x412/0x560
[  877.807607][T27658]  should_failslab+0xa8/0x100
[  877.807626][T27658]  __kmalloc_noprof+0xe8/0x760
[  877.807645][T27658]  ? __kasan_kmalloc+0x93/0xb0
[  877.807667][T27658]  ? nla_strdup+0x9d/0x140
[  877.807684][T27658]  ? __kmalloc_cache_noprof+0x31c/0x660
[  877.807709][T27658]  nla_strdup+0x9d/0x140
[  877.807732][T27658]  nf_tables_newchain+0x1a9a/0x2890
[  877.807768][T27658]  ? __pfx_nf_tables_newchain+0x10/0x10
[  877.807817][T27658]  ? nfnl_pernet+0x23/0x240
[  877.807835][T27658]  ? nfnl_pernet+0x23/0x240
[  877.807859][T27658]  ? __nla_parse+0x40/0x60
[  877.807882][T27658]  nfnetlink_rcv+0x123e/0x27b0
[  877.807931][T27658]  ? __pfx_nfnetlink_rcv+0x10/0x10
[  877.807988][T27658]  ? netlink_deliver_tap+0x2e/0x1b0
[  877.808018][T27658]  ? netlink_deliver_tap+0x2e/0x1b0
[  877.808035][T27658]  ? netlink_deliver_tap+0x2e/0x1b0
[  877.808058][T27658]  netlink_unicast+0x75c/0x8e0
[  877.808085][T27658]  netlink_sendmsg+0x813/0xb40
[  877.808112][T27658]  ? __pfx_netlink_sendmsg+0x10/0x10
[  877.808133][T27658]  ? aa_sock_msg_perm+0xf1/0x1b0
[  877.808157][T27658]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  877.808182][T27658]  ____sys_sendmsg+0x972/0x9f0
[  877.808201][T27658]  ? __might_fault+0xaf/0x130
[  877.808228][T27658]  ? __pfx_____sys_sendmsg+0x10/0x10
[  877.808260][T27658]  ? import_iovec+0x73/0xa0
[  877.808283][T27658]  ___sys_sendmsg+0x2a5/0x360
[  877.808300][T27658]  ? __lock_acquire+0x6b5/0x2cf0
[  877.808321][T27658]  ? __pfx____sys_sendmsg+0x10/0x10
[  877.808372][T27658]  ? __fget_files+0x2a/0x420
[  877.808390][T27658]  ? __fget_files+0x3a0/0x420
[  877.808418][T27658]  __x64_sys_sendmsg+0x1bd/0x2a0
[  877.808438][T27658]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  877.808465][T27658]  ? __pfx_ksys_write+0x10/0x10
[  877.808495][T27658]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  877.808512][T27658]  do_syscall_64+0x174/0x580
[  877.808529][T27658]  ? trace_irq_disable+0x3b/0x140
[  877.808551][T27658]  ? clear_bhb_loop+0x40/0x90
[  877.808570][T27658]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  877.808586][T27658] RIP: 0033:0x7ff53e59ce59
[  877.808603][T27658] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  877.808616][T27658] RSP: 002b:00007ff53c7f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  877.808634][T27658] RAX: ffffffffffffffda RBX: 00007ff53e815fa0 RCX: 00007ff53e59ce59
[  877.808646][T27658] RDX: 0000000000000000 RSI: 000020000000c2c0 RDI: 0000000000000003
[  877.808655][T27658] RBP: 00007ff53c7f6090 R08: 0000000000000000 R09: 0000000000000000
[  877.808665][T27658] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  877.808674][T27658] R13: 00007ff53e816038 R14: 00007ff53e815fa0 R15: 00007ffecae79ff8
[  877.808703][T27658]  </TASK>
[  877.847768][T27661] netlink: 'syz.0.6867': attribute type 8 has an invalid length.
[  877.874270][ T6187] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  878.131489][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  878.160114][T22379] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  878.212849][T27649] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  878.358693][T27666] tipc: Cannot configure node identity twice
[  878.367404][ T6185] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  878.388995][ T6185] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  878.401099][   T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  878.409804][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  878.420334][ T6185] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  878.456307][ T6185] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  878.497896][ T6185] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  878.523751][ T6185] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  878.569275][ T6185] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  878.601172][ T6185] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  878.701283][T27673] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[  878.777053][T27689] FAULT_INJECTION: forcing a failure.
[  878.777053][T27689] name failslab, interval 1, probability 0, space 0, times 0
[  878.790388][T27689] CPU: 1 UID: 0 PID: 27689 Comm: syz.1.6877 Not tainted syzkaller #0 PREEMPT(full) 
[  878.790412][T27689] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  878.790422][T27689] Call Trace:
[  878.790429][T27689]  <TASK>
[  878.790437][T27689]  dump_stack_lvl+0xe8/0x150
[  878.790463][T27689]  should_fail_ex+0x412/0x560
[  878.790486][T27689]  should_failslab+0xa8/0x100
[  878.790505][T27689]  __kmalloc_noprof+0xe8/0x760
[  878.790526][T27689]  ? __kasan_kmalloc+0x93/0xb0
[  878.790548][T27689]  ? ovs_nla_copy_actions+0x68/0x3d0
[  878.790567][T27689]  ? __kmalloc_cache_noprof+0x31c/0x660
[  878.790590][T27689]  ovs_nla_copy_actions+0x68/0x3d0
[  878.790605][T27689]  ? __asan_memcpy+0x40/0x70
[  878.790629][T27689]  ovs_flow_cmd_new+0x615/0xe80
[  878.790658][T27689]  ? __pfx_ovs_flow_cmd_new+0x10/0x10
[  878.790725][T27689]  ? __nla_parse+0x40/0x60
[  878.790746][T27689]  ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0
[  878.790767][T27689]  ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0
[  878.790796][T27689]  genl_family_rcv_msg_doit+0x22a/0x330
[  878.790823][T27689]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  878.790854][T27689]  ? bpf_lsm_capable+0x9/0x20
[  878.790870][T27689]  ? security_capable+0x7e/0x2c0
[  878.790897][T27689]  genl_rcv_msg+0x61c/0x7a0
[  878.790922][T27689]  ? __pfx_genl_rcv_msg+0x10/0x10
[  878.790941][T27689]  ? __pfx_ovs_flow_cmd_new+0x10/0x10
[  878.790972][T27689]  netlink_rcv_skb+0x232/0x4b0
[  878.790989][T27689]  ? __pfx_genl_rcv_msg+0x10/0x10
[  878.791009][T27689]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  878.791040][T27689]  ? down_read+0x270/0x2e0
[  878.791068][T27689]  ? genl_rcv+0xd/0x40
[  878.791088][T27689]  genl_rcv+0x28/0x40
[  878.791106][T27689]  netlink_unicast+0x75c/0x8e0
[  878.791131][T27689]  netlink_sendmsg+0x813/0xb40
[  878.791156][T27689]  ? __pfx_netlink_sendmsg+0x10/0x10
[  878.791178][T27689]  ? aa_sock_msg_perm+0xf1/0x1b0
[  878.791202][T27689]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  878.791224][T27689]  ____sys_sendmsg+0x972/0x9f0
[  878.791242][T27689]  ? __might_fault+0xaf/0x130
[  878.791266][T27689]  ? __pfx_____sys_sendmsg+0x10/0x10
[  878.791295][T27689]  ? import_iovec+0x73/0xa0
[  878.791317][T27689]  ___sys_sendmsg+0x2a5/0x360
[  878.791334][T27689]  ? __lock_acquire+0x6b5/0x2cf0
[  878.791355][T27689]  ? __pfx____sys_sendmsg+0x10/0x10
[  878.791403][T27689]  ? __fget_files+0x2a/0x420
[  878.791420][T27689]  ? __fget_files+0x3a0/0x420
[  878.791447][T27689]  __x64_sys_sendmsg+0x1bd/0x2a0
[  878.791466][T27689]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  878.791491][T27689]  ? __pfx_ksys_write+0x10/0x10
[  878.791521][T27689]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  878.791539][T27689]  do_syscall_64+0x174/0x580
[  878.791554][T27689]  ? trace_irq_disable+0x3b/0x140
[  878.791576][T27689]  ? clear_bhb_loop+0x40/0x90
[  878.791596][T27689]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  878.791612][T27689] RIP: 0033:0x7ff53e59ce59
[  878.791627][T27689] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  878.791640][T27689] RSP: 002b:00007ff53c7f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  878.791657][T27689] RAX: ffffffffffffffda RBX: 00007ff53e815fa0 RCX: 00007ff53e59ce59
[  878.791668][T27689] RDX: 000000000800c000 RSI: 0000200000000000 RDI: 0000000000000003
[  878.791677][T27689] RBP: 00007ff53c7f6090 R08: 0000000000000000 R09: 0000000000000000
[  878.791687][T27689] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  878.791696][T27689] R13: 00007ff53e816038 R14: 00007ff53e815fa0 R15: 00007ffecae79ff8
[  878.791725][T27689]  </TASK>
[  879.221756][T27696] xt_TCPMSS: Only works on TCP SYN packets
[  879.320566][T27701] sctp: [Deprecated]: syz.4.6880 (pid 27701) Use of int in max_burst socket option.
[  879.320566][T27701] Use struct sctp_assoc_value instead
[  879.444566][T27682] netlink: 'syz.3.6875': attribute type 1 has an invalid length.
[  879.449080][ T5645] block nbd157: Receive control failed (result -32)
[  879.453416][ T5640] block nbd157: Receive control failed (result -32)
[  879.463278][ T5633] block nbd157: Receive control failed (result -32)
[  879.490127][T27682] __nla_validate_parse: 12 callbacks suppressed
[  879.490145][T27682] netlink: 96 bytes leftover after parsing attributes in process `syz.3.6875'.
[  879.626877][T27712] netlink: 'syz.2.6884': attribute type 10 has an invalid length.
[  879.735056][T27716] netlink: 56 bytes leftover after parsing attributes in process `syz.0.6886'.
[  880.386956][T27725] 8021q: adding VLAN 0 to HW filter on device bond2
[  880.559204][T27738] xt_TCPMSS: Only works on TCP SYN packets
[  880.784641][T27754] FAULT_INJECTION: forcing a failure.
[  880.784641][T27754] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  880.800312][T27754] CPU: 0 UID: 0 PID: 27754 Comm: syz.2.6895 Not tainted syzkaller #0 PREEMPT(full) 
[  880.800345][T27754] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  880.800354][T27754] Call Trace:
[  880.800360][T27754]  <TASK>
[  880.800367][T27754]  dump_stack_lvl+0xe8/0x150
[  880.800389][T27754]  should_fail_ex+0x412/0x560
[  880.800419][T27754]  _copy_from_iter+0x1d3/0x1670
[  880.800437][T27754]  ? rcu_is_watching+0x15/0xb0
[  880.800458][T27754]  ? __pfx__copy_from_iter+0x10/0x10
[  880.800477][T27754]  ? netlink_sendmsg+0x650/0xb40
[  880.800491][T27754]  ? skb_put+0x11b/0x210
[  880.800507][T27754]  netlink_sendmsg+0x6c0/0xb40
[  880.800528][T27754]  ? __pfx_netlink_sendmsg+0x10/0x10
[  880.800544][T27754]  ? aa_sock_msg_perm+0xf1/0x1b0
[  880.800565][T27754]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  880.800586][T27754]  ____sys_sendmsg+0x972/0x9f0
[  880.800601][T27754]  ? __might_fault+0xaf/0x130
[  880.800623][T27754]  ? __pfx_____sys_sendmsg+0x10/0x10
[  880.800644][T27754]  ? import_iovec+0x73/0xa0
[  880.800661][T27754]  ___sys_sendmsg+0x2a5/0x360
[  880.800677][T27754]  ? __lock_acquire+0x6b5/0x2cf0
[  880.800693][T27754]  ? __pfx____sys_sendmsg+0x10/0x10
[  880.800737][T27754]  ? __fget_files+0x2a/0x420
[  880.800752][T27754]  ? __fget_files+0x3a0/0x420
[  880.800774][T27754]  __x64_sys_sendmsg+0x1bd/0x2a0
[  880.800790][T27754]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  880.800811][T27754]  ? __pfx_ksys_write+0x10/0x10
[  880.800835][T27754]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  880.800851][T27754]  do_syscall_64+0x174/0x580
[  880.800865][T27754]  ? trace_irq_disable+0x3b/0x140
[  880.800888][T27754]  ? clear_bhb_loop+0x40/0x90
[  880.800904][T27754]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  880.800917][T27754] RIP: 0033:0x7f432ff9ce59
[  880.800932][T27754] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  880.800943][T27754] RSP: 002b:00007f4330de2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  880.800958][T27754] RAX: ffffffffffffffda RBX: 00007f4330215fa0 RCX: 00007f432ff9ce59
[  880.800968][T27754] RDX: 0000000000000004 RSI: 0000200000000180 RDI: 0000000000000003
[  880.800976][T27754] RBP: 00007f4330de2090 R08: 0000000000000000 R09: 0000000000000000
[  880.800985][T27754] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  880.800993][T27754] R13: 00007f4330216038 R14: 00007f4330215fa0 R15: 00007ffeb98f7b08
[  880.801017][T27754]  </TASK>
[  881.356263][ T5645] block nbd158: Receive control failed (result -32)
[  881.360099][ T5640] block nbd158: Receive control failed (result -32)
[  881.375155][ T5633] block nbd158: Receive control failed (result -32)
[  881.436071][T27776] xt_TCPMSS: Only works on TCP SYN packets
[  881.546677][T27784] netlink: 56 bytes leftover after parsing attributes in process `syz.1.6904'.
[  881.730983][T27795] netlink: 'syz.1.6908': attribute type 1 has an invalid length.
[  881.805211][T27798] SET target dimension over the limit!
[  881.933470][ T5645] block nbd159: Receive control failed (result -32)
[  881.936169][ T5640] block nbd159: Receive control failed (result -32)
[  881.943356][ T5633] block nbd159: Receive control failed (result -32)
[  882.024968][T27803] netlink: 'syz.2.6910': attribute type 10 has an invalid length.
[  882.055229][T27803] 8021q: adding VLAN 0 to HW filter on device bond0
[  882.088115][T27803] team0: Port device bond0 added
[  882.256403][T22379] net_ratelimit: 17 callbacks suppressed
[  882.256421][T22379] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  882.262244][T27813] bond3: option lp_interval: invalid value (0)
[  882.277258][T27813] bond3: option lp_interval: allowed values 1 - 2147483647
[  882.292526][T27813] bond3 (unregistering): Released all slaves
[  882.325348][T22379] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  882.427011][T27821] netlink: 'syz.4.6916': attribute type 61 has an invalid length.
[  882.451584][T27821] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6916'.
[  882.553011][T27825] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6918'.
[  882.605981][T27827] syzkaller0: entered promiscuous mode
[  882.621494][T27827] syzkaller0: entered allmulticast mode
[  882.731186][T27827] x_tables: ip6_tables: icmp6 match: only valid for protocol 58
[  882.821952][ T5645] block nbd160: Receive control failed (result -32)
[  882.830335][ T5633] block nbd160: Receive control failed (result -32)
[  882.836959][ T5640] block nbd160: Receive control failed (result -32)
[  883.117340][T27849] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6925'.
[  883.299063][T22379] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  883.362753][T22379] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  883.521173][ T6185] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  883.529593][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  883.538217][ T6187] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  883.541027][   T57] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  883.546872][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  883.555163][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  883.813703][T27881] netlink: 36 bytes leftover after parsing attributes in process `syz.1.6934'.
[  883.857423][T27886] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0
[  883.872031][T27883] IPVS: stopping master sync thread 27886 ...
[  883.879244][T27883] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6936'.
[  883.961485][T27896] FAULT_INJECTION: forcing a failure.
[  883.961485][T27896] name failslab, interval 1, probability 0, space 0, times 0
[  883.998474][T27896] CPU: 0 UID: 0 PID: 27896 Comm: syz.3.6940 Not tainted syzkaller #0 PREEMPT(full) 
[  883.998497][T27896] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  883.998506][T27896] Call Trace:
[  883.998513][T27896]  <TASK>
[  883.998526][T27896]  dump_stack_lvl+0xe8/0x150
[  883.998553][T27896]  should_fail_ex+0x412/0x560
[  883.998572][T27896]  should_failslab+0xa8/0x100
[  883.998587][T27896]  __kmalloc_cache_noprof+0x88/0x660
[  883.998606][T27896]  ? nft_trans_table_add+0x56/0x430
[  883.998620][T27896]  ? __asan_memset+0x22/0x50
[  883.998640][T27896]  nft_trans_table_add+0x56/0x430
[  883.998660][T27896]  nf_tables_newtable+0xce3/0x1910
[  883.998696][T27896]  nfnetlink_rcv+0x123e/0x27b0
[  883.998736][T27896]  ? __pfx_nfnetlink_rcv+0x10/0x10
[  883.998763][T27896]  ? ref_tracker_free+0x693/0x840
[  883.998800][T27896]  ? __netlink_deliver_tap+0x807/0x850
[  883.998822][T27896]  ? netlink_deliver_tap+0x2e/0x1b0
[  883.998836][T27896]  ? netlink_deliver_tap+0x2e/0x1b0
[  883.998866][T27896]  netlink_unicast+0x75c/0x8e0
[  883.998890][T27896]  netlink_sendmsg+0x813/0xb40
[  883.998913][T27896]  ? __pfx_netlink_sendmsg+0x10/0x10
[  883.998930][T27896]  ? aa_sock_msg_perm+0xf1/0x1b0
[  883.998952][T27896]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  883.998973][T27896]  ____sys_sendmsg+0x972/0x9f0
[  883.998990][T27896]  ? __might_fault+0xaf/0x130
[  883.999013][T27896]  ? __pfx_____sys_sendmsg+0x10/0x10
[  883.999035][T27896]  ? import_iovec+0x73/0xa0
[  883.999056][T27896]  ___sys_sendmsg+0x2a5/0x360
[  883.999069][T27896]  ? __lock_acquire+0x6b5/0x2cf0
[  883.999087][T27896]  ? __pfx____sys_sendmsg+0x10/0x10
[  883.999129][T27896]  ? __fget_files+0x2a/0x420
[  883.999143][T27896]  ? __fget_files+0x3a0/0x420
[  883.999166][T27896]  __x64_sys_sendmsg+0x1bd/0x2a0
[  883.999182][T27896]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  883.999204][T27896]  ? __pfx_ksys_write+0x10/0x10
[  883.999229][T27896]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  883.999243][T27896]  do_syscall_64+0x174/0x580
[  883.999257][T27896]  ? trace_irq_disable+0x3b/0x140
[  883.999276][T27896]  ? clear_bhb_loop+0x40/0x90
[  883.999293][T27896]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  883.999306][T27896] RIP: 0033:0x7fea4219ce59
[  883.999321][T27896] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  883.999333][T27896] RSP: 002b:00007fea43033028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  883.999352][T27896] RAX: ffffffffffffffda RBX: 00007fea42415fa0 RCX: 00007fea4219ce59
[  883.999362][T27896] RDX: 0000000000004000 RSI: 0000200000000480 RDI: 0000000000000003
[  883.999371][T27896] RBP: 00007fea43033090 R08: 0000000000000000 R09: 0000000000000000
[  883.999379][T27896] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  883.999386][T27896] R13: 00007fea42416038 R14: 00007fea42415fa0 R15: 00007ffd2489e348
[  883.999409][T27896]  </TASK>
[  884.806756][T27890] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6934'.
[  884.822210][T27907] FAULT_INJECTION: forcing a failure.
[  884.822210][T27907] name failslab, interval 1, probability 0, space 0, times 0
[  884.838037][T27907] CPU: 0 UID: 0 PID: 27907 Comm: syz.3.6941 Not tainted syzkaller #0 PREEMPT(full) 
[  884.838062][T27907] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  884.838072][T27907] Call Trace:
[  884.838080][T27907]  <TASK>
[  884.838087][T27907]  dump_stack_lvl+0xe8/0x150
[  884.838112][T27907]  should_fail_ex+0x412/0x560
[  884.838136][T27907]  should_failslab+0xa8/0x100
[  884.838155][T27907]  __kmalloc_noprof+0xe8/0x760
[  884.838175][T27907]  ? __kasan_kmalloc+0x93/0xb0
[  884.838197][T27907]  ? ovs_nla_copy_actions+0x68/0x3d0
[  884.838216][T27907]  ? __kmalloc_cache_noprof+0x31c/0x660
[  884.838241][T27907]  ovs_nla_copy_actions+0x68/0x3d0
[  884.838258][T27907]  ? __asan_memcpy+0x40/0x70
[  884.838284][T27907]  ovs_flow_cmd_new+0x615/0xe80
[  884.838305][T27907]  ? kasan_save_track+0x3e/0x80
[  884.838332][T27907]  ? __pfx_ovs_flow_cmd_new+0x10/0x10
[  884.838403][T27907]  ? __nla_parse+0x40/0x60
[  884.838427][T27907]  ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0
[  884.838450][T27907]  ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0
[  884.838478][T27907]  genl_family_rcv_msg_doit+0x22a/0x330
[  884.838501][T27907]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  884.838531][T27907]  ? bpf_lsm_capable+0x9/0x20
[  884.838546][T27907]  ? security_capable+0x7e/0x2c0
[  884.838571][T27907]  genl_rcv_msg+0x61c/0x7a0
[  884.838598][T27907]  ? __pfx_genl_rcv_msg+0x10/0x10
[  884.838619][T27907]  ? __pfx_ovs_flow_cmd_new+0x10/0x10
[  884.838642][T27907]  ? __pfx_ref_tracker_free+0x10/0x10
[  884.838670][T27907]  netlink_rcv_skb+0x232/0x4b0
[  884.838690][T27907]  ? __pfx_genl_rcv_msg+0x10/0x10
[  884.838713][T27907]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  884.838746][T27907]  ? down_read+0x270/0x2e0
[  884.838763][T27907]  ? genl_rcv+0xd/0x40
[  884.838785][T27907]  genl_rcv+0x28/0x40
[  884.838804][T27907]  netlink_unicast+0x75c/0x8e0
[  884.838832][T27907]  netlink_sendmsg+0x813/0xb40
[  884.838860][T27907]  ? __pfx_netlink_sendmsg+0x10/0x10
[  884.838891][T27907]  ? aa_sock_msg_perm+0xf1/0x1b0
[  884.838915][T27907]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  884.838937][T27907]  ____sys_sendmsg+0x972/0x9f0
[  884.838955][T27907]  ? __might_fault+0xaf/0x130
[  884.838979][T27907]  ? __pfx_____sys_sendmsg+0x10/0x10
[  884.839003][T27907]  ? import_iovec+0x73/0xa0
[  884.839027][T27907]  ___sys_sendmsg+0x2a5/0x360
[  884.839044][T27907]  ? __lock_acquire+0x6b5/0x2cf0
[  884.839066][T27907]  ? __pfx____sys_sendmsg+0x10/0x10
[  884.839118][T27907]  ? __fget_files+0x2a/0x420
[  884.839137][T27907]  ? __fget_files+0x3a0/0x420
[  884.839165][T27907]  __x64_sys_sendmsg+0x1bd/0x2a0
[  884.839186][T27907]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  884.839214][T27907]  ? __pfx_ksys_write+0x10/0x10
[  884.839245][T27907]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  884.839263][T27907]  do_syscall_64+0x174/0x580
[  884.839280][T27907]  ? trace_irq_disable+0x3b/0x140
[  884.839302][T27907]  ? clear_bhb_loop+0x40/0x90
[  884.839321][T27907]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  884.839337][T27907] RIP: 0033:0x7fea4219ce59
[  884.839356][T27907] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  884.839369][T27907] RSP: 002b:00007fea43033028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  884.839386][T27907] RAX: ffffffffffffffda RBX: 00007fea42415fa0 RCX: 00007fea4219ce59
[  884.839420][T27907] RDX: 000000000000c000 RSI: 0000200000000000 RDI: 0000000000000003
[  884.839429][T27907] RBP: 00007fea43033090 R08: 0000000000000000 R09: 0000000000000000
[  884.839439][T27907] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  884.839447][T27907] R13: 00007fea42416038 R14: 00007fea42415fa0 R15: 00007ffd2489e348
[  884.839476][T27907]  </TASK>
[  885.218079][T27909] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input29
[  885.282151][T27911] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6943'.
[  885.388765][T27917] netlink: 'syz.0.6945': attribute type 4 has an invalid length.
[  885.493692][T27924] FAULT_INJECTION: forcing a failure.
[  885.493692][T27924] name failslab, interval 1, probability 0, space 0, times 0
[  885.562306][ T6185] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  885.579246][T27924] CPU: 0 UID: 0 PID: 27924 Comm: syz.4.6947 Not tainted syzkaller #0 PREEMPT(full) 
[  885.579274][T27924] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  885.579285][T27924] Call Trace:
[  885.579292][T27924]  <TASK>
[  885.579301][T27924]  dump_stack_lvl+0xe8/0x150
[  885.579327][T27924]  should_fail_ex+0x412/0x560
[  885.579353][T27924]  should_failslab+0xa8/0x100
[  885.579369][T27924]  __kmalloc_cache_noprof+0x88/0x660
[  885.579390][T27924]  ? ip_set_pernet+0x23/0x240
[  885.579404][T27924]  ? ip_set_create+0x391/0x1a40
[  885.579424][T27924]  ip_set_create+0x391/0x1a40
[  885.579444][T27924]  ? trace_contention_end+0x3d/0x140
[  885.579472][T27924]  ? __pfx_ip_set_create+0x10/0x10
[  885.579520][T27924]  nfnetlink_rcv_msg+0xc03/0x12c0
[  885.579537][T27924]  ? __lock_acquire+0x6b5/0x2cf0
[  885.579553][T27924]  ? nfnetlink_rcv_msg+0x22a/0x12c0
[  885.579587][T27924]  ? __pfx_nfnetlink_rcv_msg+0x10/0x10
[  885.579630][T27924]  ? __lock_acquire+0x6b5/0x2cf0
[  885.579664][T27924]  netlink_rcv_skb+0x232/0x4b0
[  885.579684][T27924]  ? __pfx_nfnetlink_rcv_msg+0x10/0x10
[  885.579703][T27924]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  885.579732][T27924]  ? bpf_lsm_capable+0x9/0x20
[  885.579748][T27924]  ? security_capable+0x7e/0x2c0
[  885.579778][T27924]  nfnetlink_rcv+0x2c0/0x27b0
[  885.579797][T27924]  ? kernel_text_address+0xa5/0xe0
[  885.579821][T27924]  ? __kernel_text_address+0xd/0x30
[  885.579841][T27924]  ? unwind_get_return_address+0x4d/0x90
[  885.579861][T27924]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  885.579882][T27924]  ? arch_stack_walk+0xfb/0x150
[  885.579912][T27924]  ? stack_trace_save+0xa9/0x100
[  885.579936][T27924]  ? __lock_acquire+0x6b5/0x2cf0
[  885.579953][T27924]  ? __pfx_nfnetlink_rcv+0x10/0x10
[  885.579975][T27924]  ? kasan_save_track+0x4f/0x80
[  885.579994][T27924]  ? kasan_save_track+0x3e/0x80
[  885.580013][T27924]  ? __kasan_slab_alloc+0x6c/0x80
[  885.580031][T27924]  ? kmem_cache_alloc_node_noprof+0x384/0x690
[  885.580051][T27924]  ? __alloc_skb+0x27d/0x7d0
[  885.580065][T27924]  ? netlink_sendmsg+0x5d4/0xb40
[  885.580088][T27924]  ? __lock_acquire+0x6b5/0x2cf0
[  885.580113][T27924]  ? __netlink_lookup+0xc6/0x8b0
[  885.580138][T27924]  ? netlink_deliver_tap+0x2e/0x1b0
[  885.580157][T27924]  ? netlink_deliver_tap+0x2e/0x1b0
[  885.580188][T27924]  ? netlink_deliver_tap+0x2e/0x1b0
[  885.580205][T27924]  ? netlink_deliver_tap+0x2e/0x1b0
[  885.580228][T27924]  netlink_unicast+0x75c/0x8e0
[  885.580252][T27924]  netlink_sendmsg+0x813/0xb40
[  885.580279][T27924]  ? __pfx_netlink_sendmsg+0x10/0x10
[  885.580307][T27924]  ? aa_sock_msg_perm+0xf1/0x1b0
[  885.580335][T27924]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  885.580357][T27924]  ____sys_sendmsg+0x972/0x9f0
[  885.580374][T27924]  ? __might_fault+0xaf/0x130
[  885.580398][T27924]  ? __pfx_____sys_sendmsg+0x10/0x10
[  885.580420][T27924]  ? import_iovec+0x73/0xa0
[  885.580442][T27924]  ___sys_sendmsg+0x2a5/0x360
[  885.580457][T27924]  ? __lock_acquire+0x6b5/0x2cf0
[  885.580476][T27924]  ? __pfx____sys_sendmsg+0x10/0x10
[  885.580526][T27924]  ? __fget_files+0x2a/0x420
[  885.580543][T27924]  ? __fget_files+0x3a0/0x420
[  885.580576][T27924]  __x64_sys_sendmsg+0x1bd/0x2a0
[  885.580596][T27924]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  885.580621][T27924]  ? __pfx_ksys_write+0x10/0x10
[  885.580650][T27924]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  885.580666][T27924]  do_syscall_64+0x174/0x580
[  885.580684][T27924]  ? trace_irq_disable+0x3b/0x140
[  885.580705][T27924]  ? clear_bhb_loop+0x40/0x90
[  885.580725][T27924]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  885.580739][T27924] RIP: 0033:0x7fb45159ce59
[  885.580756][T27924] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  885.580769][T27924] RSP: 002b:00007fb45250f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  885.580787][T27924] RAX: ffffffffffffffda RBX: 00007fb451815fa0 RCX: 00007fb45159ce59
[  885.580797][T27924] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003
[  885.580808][T27924] RBP: 00007fb45250f090 R08: 0000000000000000 R09: 0000000000000000
[  885.580818][T27924] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  885.580827][T27924] R13: 00007fb451816038 R14: 00007fb451815fa0 R15: 00007ffdbad64108
[  885.580856][T27924]  </TASK>
[  886.004977][  T158] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  886.014445][  T158] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  886.023619][  T158] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  886.343289][T27925] netlink: 'syz.3.6944': attribute type 1 has an invalid length.
[  886.344586][T27942] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6950'.
[  886.433396][T27935] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6944'.
[  886.515612][T27935] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6944'.
[  886.536327][T27952] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6956'.
[  886.889028][T27955] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6956'.
[  887.167726][T27977] xt_hashlimit: size too large, truncated to 1048576
[  887.520463][T22382] net_ratelimit: 16 callbacks suppressed
[  887.520483][T22382] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  887.554660][T27980] nbd161: detected capacity change from 0 to 127
[  887.589335][ T5640] block nbd161: Receive control failed (result -104)
[  887.636406][T27992] netlink: 128 bytes leftover after parsing attributes in process `syz.0.6963'.
[  887.683521][T27992] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  887.765135][T27996] netlink: 'syz.2.6965': attribute type 4 has an invalid length.
[  887.768183][T27998] FAULT_INJECTION: forcing a failure.
[  887.768183][T27998] name failslab, interval 1, probability 0, space 0, times 0
[  887.789096][T27998] CPU: 1 UID: 0 PID: 27998 Comm: syz.0.6966 Not tainted syzkaller #0 PREEMPT(full) 
[  887.789122][T27998] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  887.789132][T27998] Call Trace:
[  887.789141][T27998]  <TASK>
[  887.789148][T27998]  dump_stack_lvl+0xe8/0x150
[  887.789175][T27998]  should_fail_ex+0x412/0x560
[  887.789199][T27998]  should_failslab+0xa8/0x100
[  887.789218][T27998]  __kmalloc_cache_noprof+0x88/0x660
[  887.789240][T27998]  ? nft_trans_table_add+0x56/0x430
[  887.789256][T27998]  ? __asan_memset+0x22/0x50
[  887.789283][T27998]  nft_trans_table_add+0x56/0x430
[  887.789306][T27998]  nf_tables_newtable+0xce3/0x1910
[  887.789346][T27998]  nfnetlink_rcv+0x123e/0x27b0
[  887.789388][T27998]  ? __pfx_nfnetlink_rcv+0x10/0x10
[  887.789450][T27998]  ? netlink_deliver_tap+0x2e/0x1b0
[  887.789480][T27998]  ? netlink_deliver_tap+0x2e/0x1b0
[  887.789497][T27998]  ? netlink_deliver_tap+0x2e/0x1b0
[  887.789521][T27998]  netlink_unicast+0x75c/0x8e0
[  887.789548][T27998]  netlink_sendmsg+0x813/0xb40
[  887.789576][T27998]  ? __pfx_netlink_sendmsg+0x10/0x10
[  887.789598][T27998]  ? aa_sock_msg_perm+0xf1/0x1b0
[  887.789623][T27998]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  887.789649][T27998]  ____sys_sendmsg+0x972/0x9f0
[  887.789667][T27998]  ? __might_fault+0xaf/0x130
[  887.789694][T27998]  ? __pfx_____sys_sendmsg+0x10/0x10
[  887.789722][T27998]  ? import_iovec+0x73/0xa0
[  887.789745][T27998]  ___sys_sendmsg+0x2a5/0x360
[  887.789762][T27998]  ? __lock_acquire+0x6b5/0x2cf0
[  887.789785][T27998]  ? __pfx____sys_sendmsg+0x10/0x10
[  887.789839][T27998]  ? __fget_files+0x2a/0x420
[  887.789858][T27998]  ? __fget_files+0x3a0/0x420
[  887.789887][T27998]  __x64_sys_sendmsg+0x1bd/0x2a0
[  887.789914][T27998]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  887.789939][T27998]  ? __pfx_ksys_write+0x10/0x10
[  887.789966][T27998]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  887.789985][T27998]  do_syscall_64+0x174/0x580
[  887.790002][T27998]  ? trace_irq_disable+0x3b/0x140
[  887.790023][T27998]  ? clear_bhb_loop+0x40/0x90
[  887.790042][T27998]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  887.790056][T27998] RIP: 0033:0x7f67d759ce59
[  887.790072][T27998] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  887.790084][T27998] RSP: 002b:00007f67d84c4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  887.790102][T27998] RAX: ffffffffffffffda RBX: 00007f67d7815fa0 RCX: 00007f67d759ce59
[  887.790112][T27998] RDX: 0000000020050800 RSI: 00002000000000c0 RDI: 0000000000000003
[  887.790122][T27998] RBP: 00007f67d84c4090 R08: 0000000000000000 R09: 0000000000000000
[  887.790132][T27998] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  887.790141][T27998] R13: 00007f67d7816038 R14: 00007f67d7815fa0 R15: 00007fffcb36dfd8
[  887.790168][T27998]  </TASK>
[  888.010084][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  888.090821][T22382] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  888.182979][T28005] ip6t_srh: unknown srh match flags  4000
[  888.247008][T28012] netlink: 36 bytes leftover after parsing attributes in process `syz.4.6973'.
[  888.306246][T28016] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6973'.
[  888.563244][T22379] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  888.723104][T28034] FAULT_INJECTION: forcing a failure.
[  888.723104][T28034] name failslab, interval 1, probability 0, space 0, times 0
[  888.759342][T28034] CPU: 1 UID: 0 PID: 28034 Comm: syz.0.6981 Not tainted syzkaller #0 PREEMPT(full) 
[  888.759365][T28034] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  888.759375][T28034] Call Trace:
[  888.759383][T28034]  <TASK>
[  888.759390][T28034]  dump_stack_lvl+0xe8/0x150
[  888.759424][T28034]  should_fail_ex+0x412/0x560
[  888.759451][T28034]  should_failslab+0xa8/0x100
[  888.759468][T28034]  kmem_cache_alloc_node_noprof+0x8f/0x690
[  888.759487][T28034]  ? kmem_cache_alloc_noprof+0x307/0x650
[  888.759504][T28034]  ? ovs_flow_alloc+0x24/0x1f0
[  888.759523][T28034]  ? ovs_flow_alloc+0x103/0x1f0
[  888.759545][T28034]  ovs_flow_alloc+0x103/0x1f0
[  888.759567][T28034]  ovs_flow_cmd_new+0x2b9/0xe80
[  888.759599][T28034]  ? __pfx_ovs_flow_cmd_new+0x10/0x10
[  888.759686][T28034]  ? __nla_parse+0x40/0x60
[  888.759709][T28034]  ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0
[  888.759731][T28034]  ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0
[  888.759759][T28034]  genl_family_rcv_msg_doit+0x22a/0x330
[  888.759787][T28034]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  888.759820][T28034]  ? bpf_lsm_capable+0x9/0x20
[  888.759835][T28034]  ? security_capable+0x7e/0x2c0
[  888.759863][T28034]  genl_rcv_msg+0x61c/0x7a0
[  888.759890][T28034]  ? __pfx_genl_rcv_msg+0x10/0x10
[  888.759908][T28034]  ? __pfx_ovs_flow_cmd_new+0x10/0x10
[  888.759943][T28034]  netlink_rcv_skb+0x232/0x4b0
[  888.759962][T28034]  ? __pfx_genl_rcv_msg+0x10/0x10
[  888.759984][T28034]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  888.760018][T28034]  ? down_read+0x270/0x2e0
[  888.760034][T28034]  ? genl_rcv+0xd/0x40
[  888.760055][T28034]  genl_rcv+0x28/0x40
[  888.760074][T28034]  netlink_unicast+0x75c/0x8e0
[  888.760101][T28034]  netlink_sendmsg+0x813/0xb40
[  888.760128][T28034]  ? __pfx_netlink_sendmsg+0x10/0x10
[  888.760149][T28034]  ? aa_sock_msg_perm+0xf1/0x1b0
[  888.760173][T28034]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  888.760197][T28034]  ____sys_sendmsg+0x972/0x9f0
[  888.760215][T28034]  ? __might_fault+0xaf/0x130
[  888.760246][T28034]  ? __pfx_____sys_sendmsg+0x10/0x10
[  888.760273][T28034]  ? import_iovec+0x73/0xa0
[  888.760295][T28034]  ___sys_sendmsg+0x2a5/0x360
[  888.760312][T28034]  ? __lock_acquire+0x6b5/0x2cf0
[  888.760338][T28034]  ? __pfx____sys_sendmsg+0x10/0x10
[  888.760390][T28034]  ? __fget_files+0x2a/0x420
[  888.760417][T28034]  ? __fget_files+0x3a0/0x420
[  888.760447][T28034]  __x64_sys_sendmsg+0x1bd/0x2a0
[  888.760468][T28034]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  888.760495][T28034]  ? __pfx_ksys_write+0x10/0x10
[  888.760526][T28034]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  888.760545][T28034]  do_syscall_64+0x174/0x580
[  888.760562][T28034]  ? trace_irq_disable+0x3b/0x140
[  888.760585][T28034]  ? clear_bhb_loop+0x40/0x90
[  888.760604][T28034]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  888.760620][T28034] RIP: 0033:0x7f67d759ce59
[  888.760637][T28034] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  888.760651][T28034] RSP: 002b:00007f67d84c4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  888.760669][T28034] RAX: ffffffffffffffda RBX: 00007f67d7815fa0 RCX: 00007f67d759ce59
[  888.760681][T28034] RDX: 0000000004048080 RSI: 0000200000000140 RDI: 0000000000000003
[  888.760693][T28034] RBP: 00007f67d84c4090 R08: 0000000000000000 R09: 0000000000000000
[  888.760704][T28034] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  888.760714][T28034] R13: 00007f67d7816038 R14: 00007f67d7815fa0 R15: 00007fffcb36dfd8
[  888.760743][T28034]  </TASK>
[  889.122713][T22382] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  889.295808][  T158] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  889.304627][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  889.314155][ T6185] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  889.314536][   T57] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  889.576916][T28047] xfrm0: entered allmulticast mode
[  890.028084][T28069] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6989'.
[  890.612639][T28076] FAULT_INJECTION: forcing a failure.
[  890.612639][T28076] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  890.657100][T28076] CPU: 0 UID: 0 PID: 28076 Comm: syz.4.6991 Not tainted syzkaller #0 PREEMPT(full) 
[  890.657133][T28076] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  890.657143][T28076] Call Trace:
[  890.657151][T28076]  <TASK>
[  890.657159][T28076]  dump_stack_lvl+0xe8/0x150
[  890.657185][T28076]  should_fail_ex+0x412/0x560
[  890.657210][T28076]  _copy_to_user+0x31/0xb0
[  890.657231][T28076]  simple_read_from_buffer+0xe1/0x170
[  890.657258][T28076]  proc_fail_nth_read+0x1bb/0x230
[  890.657282][T28076]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  890.657305][T28076]  ? rw_verify_area+0x2a6/0x4d0
[  890.657326][T28076]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  890.657347][T28076]  vfs_read+0x20c/0xa70
[  890.657374][T28076]  ? __pfx___mutex_lock+0x10/0x10
[  890.657395][T28076]  ? __pfx_vfs_read+0x10/0x10
[  890.657418][T28076]  ? __fget_files+0x2a/0x420
[  890.657440][T28076]  ? __fget_files+0x3a0/0x420
[  890.657457][T28076]  ? __fget_files+0x2a/0x420
[  890.657487][T28076]  ksys_read+0x150/0x270
[  890.657511][T28076]  ? __pfx_ksys_read+0x10/0x10
[  890.657540][T28076]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  890.657558][T28076]  do_syscall_64+0x174/0x580
[  890.657577][T28076]  ? clear_bhb_loop+0x40/0x90
[  890.657598][T28076]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  890.657614][T28076] RIP: 0033:0x7fb45155d68e
[  890.657630][T28076] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  890.657644][T28076] RSP: 002b:00007fb45250efe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  890.657663][T28076] RAX: ffffffffffffffda RBX: 00007fb45250f6c0 RCX: 00007fb45155d68e
[  890.657675][T28076] RDX: 000000000000000f RSI: 00007fb45250f0a0 RDI: 0000000000000005
[  890.657685][T28076] RBP: 00007fb45250f090 R08: 0000000000000000 R09: 0000000000000000
[  890.657695][T28076] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  890.657705][T28076] R13: 00007fb451816038 R14: 00007fb451815fa0 R15: 00007ffdbad64108
[  890.657743][T28076]  </TASK>
[  890.888724][ T2061] block nbd161: Connection timed out, retrying (0/1 alive)
[  890.906002][ T2061] block nbd161: Connection timed out, retrying (0/1 alive)
[  890.919210][ T2061] block nbd161: Connection timed out, retrying (0/1 alive)
[  890.927373][ T2061] block nbd161: Connection timed out, retrying (0/1 alive)
[  890.937364][ T2061] block nbd161: Dead connection, failed to find a fallback
[  890.950039][ T2061] block nbd161: shutting down sockets
[  890.956385][ T2061] I/O error, dev nbd161, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  890.971606][ T2061] Buffer I/O error on dev nbd161, logical block 3, async page read
[  890.981021][ T2061] I/O error, dev nbd161, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  890.990666][ T2061] Buffer I/O error on dev nbd161, logical block 2, async page read
[  891.003899][ T2061] I/O error, dev nbd161, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  891.013488][ T2061] Buffer I/O error on dev nbd161, logical block 1, async page read
[  891.022312][ T2061] I/O error, dev nbd161, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  891.032993][ T2061] Buffer I/O error on dev nbd161, logical block 0, async page read
[  891.044404][T27693] I/O error, dev nbd161, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  891.058255][T27693] Buffer I/O error on dev nbd161, logical block 0, async page read
[  891.077926][T27693] I/O error, dev nbd161, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  891.090161][T27693] Buffer I/O error on dev nbd161, logical block 1, async page read
[  891.102073][T27693] I/O error, dev nbd161, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  891.112127][T27693] Buffer I/O error on dev nbd161, logical block 2, async page read
[  891.120844][T27693] I/O error, dev nbd161, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  891.131140][T27693] Buffer I/O error on dev nbd161, logical block 3, async page read
[  891.139966][T27693] I/O error, dev nbd161, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  891.150517][T27693] Buffer I/O error on dev nbd161, logical block 0, async page read
[  891.163475][T28085] tipc: Failed to remove unknown binding: 66,0,0/0:500965966/500965967
[  891.167999][T27693] I/O error, dev nbd161, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  891.182154][T28085] tipc: Failed to remove unknown binding: 66,0,0/0:500965966/500965967
[  891.182946][T27693] Buffer I/O error on dev nbd161, logical block 1, async page read
[  891.206908][T27693] ldm_validate_partition_table(): Disk read failed.
[  891.269606][T27693] Dev nbd161: unable to read RDB block 0
[  891.283059][T27693]  nbd161: unable to read partition table
[  891.366288][T27693] ldm_validate_partition_table(): Disk read failed.
[  891.411194][T27693] Dev nbd161: unable to read RDB block 0
[  891.446815][T27693]  nbd161: unable to read partition table
[  892.732060][T22379] net_ratelimit: 16 callbacks suppressed
[  892.732080][T22379] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  893.314720][T22379] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  893.785457][T22379] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  894.333675][T22379] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  894.817669][T22382] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  895.060887][ T6187] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  895.063717][   T57] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  895.069217][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  895.077758][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  895.086452][ T6187] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  895.431500][T28067] xfrm0: left allmulticast mode
[  895.436675][T28067] geneve2: left promiscuous mode
[  895.442471][T28067] geneve2: left allmulticast mode
[  895.447638][T28067] xfrm1: left allmulticast mode
[  895.546372][T28091] netlink: 52 bytes leftover after parsing attributes in process `syz.2.6995'.
[  895.582678][T28091] netlink: 76 bytes leftover after parsing attributes in process `syz.2.6995'.
[  895.614402][T28091] netlink: 52 bytes leftover after parsing attributes in process `syz.2.6995'.
[  895.648577][T28101] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6999'.
[  895.684782][T28106] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7000'.
[  895.721733][T28101] ip6gre1: entered promiscuous mode
[  895.727210][T28101] ip6gre1: entered allmulticast mode
[  895.744660][T28106] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7000'.
[  895.774118][T28109] netlink: 'syz.4.7000': attribute type 2 has an invalid length.
[  896.024312][T28120] 
[  896.026700][T28120] ======================================================
[  896.033894][T28120] WARNING: possible circular locking dependency detected
[  896.041107][T28120] syzkaller #0 Not tainted
[  896.045600][T28120] ------------------------------------------------------
[  896.052669][T28120] syz.3.7003/28120 is trying to acquire lock:
[  896.058783][T28120] ffffffff8ea85600 (fs_reclaim){+.+.}-{0:0}, at: __kmalloc_cache_noprof+0x40/0x660
[  896.068232][T28120] 
[  896.068232][T28120] but task is already holding lock:
[  896.075609][T28120] ffff88805d8cc530 (&idev->mc_lock){+.+.}-{4:4}, at: __ipv6_dev_mc_inc+0x4e/0xa50
[  896.079117][T28095] netlink: 'syz.0.6997': attribute type 1 has an invalid length.
[  896.084889][T28120] 
[  896.084889][T28120] which lock already depends on the new lock.
[  896.084889][T28120] 
[  896.084902][T28120] 
[  896.084902][T28120] the existing dependency chain (in reverse order) is:
[  896.084909][T28120] 
[  896.084909][T28120] -> #7 (&idev->mc_lock){+.+.}-{4:4}:
[  896.085053][T28120]        __mutex_lock+0x1a3/0x1550
[  896.085078][T28120]        __ipv6_dev_mc_inc+0x4e/0xa50
[  896.085097][T28120]        addrconf_join_solict+0x104/0x190
[  896.085114][T28120]        __ipv6_dev_ac_inc+0x87b/0xaf0
[  896.085132][T28120]        ipv6_sock_ac_join+0x6a8/0x880
[  896.085148][T28120]        do_ipv6_setsockopt+0x203a/0x3150
[  896.085167][T28120]        ipv6_setsockopt+0x59/0x170
[  896.085187][T28120]        do_sock_setsockopt+0x17c/0x1b0
[  896.085202][T28120]        __x64_sys_setsockopt+0x13d/0x1b0
[  896.085216][T28120]        do_syscall_64+0x174/0x580
[  896.085231][T28120]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  896.085246][T28120] 
[  896.085246][T28120] -> #6 (sk_lock-AF_INET6){+.+.}-{0:0}:
[  896.085270][T28120]        lock_sock_nested+0x41/0x100
[  896.085289][T28120]        inet_shutdown+0x6a/0x390
[  896.085317][T28120]        nbd_mark_nsock_dead+0x2e9/0x560
[  896.085402][T28120]        recv_work+0x1c2e/0x1d40
[  896.085416][T28120]        process_scheduled_works+0xb5d/0x1860
[  896.085430][T28120]        worker_thread+0xa53/0xfc0
[  896.085444][T28120]        kthread+0x389/0x470
[  896.085461][T28120]        ret_from_fork+0x514/0xb70
[  896.085476][T28120]        ret_from_fork_asm+0x1a/0x30
[  896.085493][T28120] 
[  896.085493][T28120] -> #5 (&nsock->tx_lock){+.+.}-{4:4}:
[  896.085517][T28120]        __mutex_lock+0x1a3/0x1550
[  896.085530][T28120]        nbd_queue_rq+0x37b/0x1100
[  896.085546][T28120]        blk_mq_dispatch_rq_list+0xa70/0x1910
[  896.260059][T28120]        __blk_mq_sched_dispatch_requests+0xdcc/0x1600
[  896.267043][T28120]        blk_mq_sched_dispatch_requests+0xd7/0x190
[  896.273539][T28120]        blk_mq_run_hw_queue+0x348/0x4f0
[  896.279161][T28120]        blk_mq_dispatch_list+0xd16/0xe10
[  896.284878][T28120]        blk_mq_flush_plug_list+0x48d/0x570
[  896.290780][T28120]        __blk_flush_plug+0x3ed/0x4d0
[  896.296233][T28120]        __submit_bio+0x28d/0x580
[  896.301262][T28120]        submit_bio_noacct_nocheck+0x2f4/0xa40
[  896.307402][T28120]        block_read_full_folio+0x599/0x830
[  896.313207][T28120]        filemap_read_folio+0x137/0x3b0
[  896.318769][T28120]        do_read_cache_folio+0x358/0x590
[  896.324481][T28120]        read_part_sector+0xb6/0x2b0
[  896.329822][T28120]        adfspart_check_ICS+0xb1/0x960
[  896.335275][T28120]        bdev_disk_changed+0x817/0x1770
[  896.340810][T28120]        blkdev_get_whole+0x380/0x510
[  896.346256][T28120]        bdev_open+0x31e/0xd30
[  896.351096][T28120]        blkdev_open+0x470/0x610
[  896.356030][T28120]        do_dentry_open+0x822/0x13a0
[  896.361307][T28120]        vfs_open+0x3b/0x340
[  896.365893][T28120]        path_openat+0x2e08/0x3860
[  896.371018][T28120]        do_file_open+0x23e/0x4a0
[  896.376579][T28120]        do_sys_openat2+0x113/0x200
[  896.382022][T28120]        __x64_sys_openat+0x138/0x170
[  896.387396][T28120]        do_syscall_64+0x174/0x580
[  896.392581][T28120]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  896.398985][T28120] 
[  896.398985][T28120] -> #4 (&cmd->lock){+.+.}-{4:4}:
[  896.406181][T28120]        __mutex_lock+0x1a3/0x1550
[  896.411280][T28120]        nbd_queue_rq+0xc6/0x1100
[  896.416297][T28120]        blk_mq_dispatch_rq_list+0xa70/0x1910
[  896.422354][T28120]        __blk_mq_sched_dispatch_requests+0xdcc/0x1600
[  896.429192][T28120]        blk_mq_sched_dispatch_requests+0xd7/0x190
[  896.435686][T28120]        blk_mq_run_hw_queue+0x348/0x4f0
[  896.441314][T28120]        blk_mq_dispatch_list+0xd16/0xe10
[  896.447018][T28120]        blk_mq_flush_plug_list+0x48d/0x570
[  896.452901][T28120]        __blk_flush_plug+0x3ed/0x4d0
[  896.458270][T28120]        __submit_bio+0x28d/0x580
[  896.463280][T28120]        submit_bio_noacct_nocheck+0x2f4/0xa40
[  896.469419][T28120]        block_read_full_folio+0x599/0x830
[  896.475218][T28120]        filemap_read_folio+0x137/0x3b0
[  896.480774][T28120]        do_read_cache_folio+0x358/0x590
[  896.486416][T28120]        read_part_sector+0xb6/0x2b0
[  896.491701][T28120]        adfspart_check_ICS+0xb1/0x960
[  896.497161][T28120]        bdev_disk_changed+0x817/0x1770
[  896.502692][T28120]        blkdev_get_whole+0x380/0x510
[  896.508053][T28120]        bdev_open+0x31e/0xd30
[  896.512821][T28120]        blkdev_open+0x470/0x610
[  896.517762][T28120]        do_dentry_open+0x822/0x13a0
[  896.523045][T28120]        vfs_open+0x3b/0x340
[  896.527623][T28120]        path_openat+0x2e08/0x3860
[  896.532719][T28120]        do_file_open+0x23e/0x4a0
[  896.537729][T28120]        do_sys_openat2+0x113/0x200
[  896.542915][T28120]        __x64_sys_openat+0x138/0x170
[  896.548270][T28120]        do_syscall_64+0x174/0x580
[  896.553365][T28120]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  896.559763][T28120] 
[  896.559763][T28120] -> #3 (set->srcu){.+.+}-{0:0}:
[  896.566866][T28120]        __synchronize_srcu+0xca/0x300
[  896.572319][T28120]        elevator_switch+0x1e8/0x7a0
[  896.577589][T28120]        elevator_change+0x2cc/0x450
[  896.582858][T28120]        elevator_set_default+0x36c/0x430
[  896.588564][T28120]        blk_register_queue+0x3e9/0x4e0
[  896.594095][T28120]        __add_disk+0x677/0xd50
[  896.598935][T28120]        add_disk_fwnode+0xfb/0x480
[  896.604484][T28120]        nbd_dev_add+0x72c/0xb50
[  896.609431][T28120]        nbd_init+0x168/0x1f0
[  896.614215][T28120]        do_one_initcall+0x250/0x870
[  896.619494][T28120]        do_initcall_level+0x104/0x190
[  896.625029][T28120]        do_initcalls+0x59/0xa0
[  896.629954][T28120]        kernel_init_freeable+0x2a6/0x3e0
[  896.635720][T28120]        kernel_init+0x1d/0x1d0
[  896.640565][T28120]        ret_from_fork+0x514/0xb70
[  896.645661][T28120]        ret_from_fork_asm+0x1a/0x30
[  896.650930][T28120] 
[  896.650930][T28120] -> #2 (&q->elevator_lock){+.+.}-{4:4}:
[  896.658745][T28120]        __mutex_lock+0x1a3/0x1550
[  896.663849][T28120]        elevator_change+0x1b3/0x450
[  896.669124][T28120]        elevator_set_none+0xb5/0x140
[  896.674480][T28120]        blk_mq_update_nr_hw_queues+0x5e7/0x1a60
[  896.680796][T28120]        nbd_start_device+0x17f/0xb10
[  896.686158][T28120]        nbd_genl_connect+0x165b/0x1cf0
[  896.691689][T28120]        genl_family_rcv_msg_doit+0x22a/0x330
[  896.697747][T28120]        genl_rcv_msg+0x61c/0x7a0
[  896.702760][T28120]        netlink_rcv_skb+0x232/0x4b0
[  896.708026][T28120]        genl_rcv+0x28/0x40
[  896.712514][T28120]        netlink_unicast+0x75c/0x8e0
[  896.717781][T28120]        netlink_sendmsg+0x813/0xb40
[  896.723187][T28120]        ____sys_sendmsg+0x972/0x9f0
[  896.728456][T28120]        ___sys_sendmsg+0x2a5/0x360
[  896.733647][T28120]        __x64_sys_sendmsg+0x1bd/0x2a0
[  896.739529][T28120]        do_syscall_64+0x174/0x580
[  896.744624][T28120]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  896.751024][T28120] 
[  896.751024][T28120] -> #1 (&q->q_usage_counter(io)#49){++++}-{0:0}:
[  896.759793][T28120]        blk_alloc_queue+0x546/0x680
[  896.765075][T28120]        __blk_mq_alloc_disk+0x197/0x390
[  896.770701][T28120]        nbd_dev_add+0x499/0xb50
[  896.775655][T28120]        nbd_init+0x168/0x1f0
[  896.780342][T28120]        do_one_initcall+0x250/0x870
[  896.785620][T28120]        do_initcall_level+0x104/0x190
[  896.791074][T28120]        do_initcalls+0x59/0xa0
[  896.795947][T28120]        kernel_init_freeable+0x2a6/0x3e0
[  896.801656][T28120]        kernel_init+0x1d/0x1d0
[  896.806494][T28120]        ret_from_fork+0x514/0xb70
[  896.811593][T28120]        ret_from_fork_asm+0x1a/0x30
[  896.816873][T28120] 
[  896.816873][T28120] -> #0 (fs_reclaim){+.+.}-{0:0}:
[  896.824136][T28120]        __lock_acquire+0x15a5/0x2cf0
[  896.829502][T28120]        lock_acquire+0x106/0x350
[  896.834521][T28120]        fs_reclaim_acquire+0x71/0x100
[  896.839985][T28120]        __kmalloc_cache_noprof+0x40/0x660
[  896.845796][T28120]        __ipv6_dev_mc_inc+0x44f/0xa50
[  896.851258][T28120]        ipv6_add_dev+0xe34/0x13a0
[  896.856369][T28120]        addrconf_notify+0x771/0x1050
[  896.861736][T28120]        notifier_call_chain+0x1ad/0x3d0
[  896.867372][T28120]        register_netdevice+0x18c9/0x1ec0
[  896.873182][T28120]        br_add_bridge+0xa3/0xf0
[  896.878307][T28120]        br_ioctl_stub+0x588/0xd60
[  896.883405][T28120]        sock_ioctl+0x523/0x7f0
[  896.888248][T28120]        __se_sys_ioctl+0xfc/0x170
[  896.893353][T28120]        do_syscall_64+0x174/0x580
[  896.898455][T28120]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  896.904857][T28120] 
[  896.904857][T28120] other info that might help us debug this:
[  896.904857][T28120] 
[  896.915071][T28120] Chain exists of:
[  896.915071][T28120]   fs_reclaim --> sk_lock-AF_INET6 --> &idev->mc_lock
[  896.915071][T28120] 
[  896.927808][T28120]  Possible unsafe locking scenario:
[  896.927808][T28120] 
[  896.935315][T28120]        CPU0                    CPU1
[  896.940725][T28120]        ----                    ----
[  896.946173][T28120]   lock(&idev->mc_lock);
[  896.950493][T28120]                                lock(sk_lock-AF_INET6);
[  896.957642][T28120]                                lock(&idev->mc_lock);
[  896.964487][T28120]   lock(fs_reclaim);
[  896.968467][T28120] 
[  896.968467][T28120]  *** DEADLOCK ***
[  896.968467][T28120] 
[  896.976858][T28120] 3 locks held by syz.3.7003/28120:
[  896.982132][T28120]  #0: ffffffff8fda9b00 (br_ioctl_mutex){+.+.}-{4:4}, at: sock_ioctl+0x4fa/0x7f0
[  896.991306][T28120]  #1: ffffffff8fdc8e80 (rtnl_mutex){+.+.}-{4:4}, at: br_ioctl_stub+0x1a8/0xd60
[  897.000387][T28120]  #2: ffff88805d8cc530 (&idev->mc_lock){+.+.}-{4:4}, at: __ipv6_dev_mc_inc+0x4e/0xa50
[  897.010035][T28120] 
[  897.010035][T28120] stack backtrace:
[  897.015912][T28120] CPU: 0 UID: 0 PID: 28120 Comm: syz.3.7003 Not tainted syzkaller #0 PREEMPT(full) 
[  897.015929][T28120] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  897.015937][T28120] Call Trace:
[  897.015944][T28120]  <TASK>
[  897.015952][T28120]  dump_stack_lvl+0xe8/0x150
[  897.015969][T28120]  print_circular_bug+0x2e1/0x300
[  897.015987][T28120]  check_noncircular+0x12e/0x150
[  897.016004][T28120]  __lock_acquire+0x15a5/0x2cf0
[  897.016018][T28120]  ? preempt_schedule_common+0x82/0xd0
[  897.016032][T28120]  ? preempt_schedule_thunk+0x16/0x30
[  897.016050][T28120]  ? __mutex_lock+0x32d/0x1550
[  897.016066][T28120]  ? __kmalloc_cache_noprof+0x40/0x660
[  897.016082][T28120]  lock_acquire+0x106/0x350
[  897.016094][T28120]  ? __kmalloc_cache_noprof+0x40/0x660
[  897.016111][T28120]  ? __pfx___mutex_lock+0x10/0x10
[  897.016126][T28120]  fs_reclaim_acquire+0x71/0x100
[  897.016143][T28120]  ? __kmalloc_cache_noprof+0x40/0x660
[  897.016159][T28120]  __kmalloc_cache_noprof+0x40/0x660
[  897.016175][T28120]  ? __ipv6_dev_mc_inc+0x44f/0xa50
[  897.016191][T28120]  __ipv6_dev_mc_inc+0x44f/0xa50
[  897.016206][T28120]  ? addrconf_sysctl_register+0x1a9/0x1c0
[  897.016223][T28120]  ipv6_add_dev+0xe34/0x13a0
[  897.016239][T28120]  addrconf_notify+0x771/0x1050
[  897.016256][T28120]  notifier_call_chain+0x1ad/0x3d0
[  897.016274][T28120]  register_netdevice+0x18c9/0x1ec0
[  897.016295][T28120]  ? __pfx_register_netdevice+0x10/0x10
[  897.016307][T28120]  ? alloc_netdev_mqs+0xce1/0x1210
[  897.016322][T28120]  ? __kvmalloc_node_noprof+0x393/0x8a0
[  897.016345][T28120]  ? alloc_netdev_mqs+0xe00/0x1210
[  897.016361][T28120]  br_add_bridge+0xa3/0xf0
[  897.016379][T28120]  br_ioctl_stub+0x588/0xd60
[  897.016393][T28120]  ? do_vfs_ioctl+0x1166/0x1530
[  897.016405][T28120]  ? __pfx_br_ioctl_stub+0x10/0x10
[  897.016416][T28120]  ? __pfx_do_vfs_ioctl+0x10/0x10
[  897.016429][T28120]  ? sock_ioctl+0x4fa/0x7f0
[  897.016446][T28120]  ? do_futex+0x333/0x420
[  897.016490][T28120]  ? __pfx_br_ioctl_stub+0x10/0x10
[  897.016500][T28120]  sock_ioctl+0x523/0x7f0
[  897.016516][T28120]  ? __pfx_sock_ioctl+0x10/0x10
[  897.016530][T28120]  ? __fget_files+0x2a/0x420
[  897.016545][T28120]  ? __fget_files+0x3a0/0x420
[  897.016558][T28120]  ? __fget_files+0x2a/0x420
[  897.016572][T28120]  ? bpf_lsm_file_ioctl+0x9/0x20
[  897.016590][T28120]  ? __pfx_sock_ioctl+0x10/0x10
[  897.016604][T28120]  __se_sys_ioctl+0xfc/0x170
[  897.016621][T28120]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  897.016633][T28120]  do_syscall_64+0x174/0x580
[  897.016647][T28120]  ? trace_irq_disable+0x3b/0x140
[  897.016665][T28120]  ? clear_bhb_loop+0x40/0x90
[  897.016678][T28120]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  897.016690][T28120] RIP: 0033:0x7fea4219ce59
[  897.016703][T28120] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  897.016714][T28120] RSP: 002b:00007fea43033028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  897.016729][T28120] RAX: ffffffffffffffda RBX: 00007fea42415fa0 RCX: 00007fea4219ce59
[  897.016738][T28120] RDX: 0000200000000040 RSI: 00000000000089a0 RDI: 0000000000000003
[  897.016747][T28120] RBP: 00007fea42232d6f R08: 0000000000000000 R09: 0000000000000000
[  897.016755][T28120] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  897.016763][T28120] R13: 00007fea42416038 R14: 00007fea42415fa0 R15: 00007ffd2489e348
[  897.016778][T28120]  </TASK>
[  897.375213][T28100] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6997'.
[  897.384366][T28100] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6997'.
[  897.422799][T28120] xt_CT: No such helper "syz0"
[  897.466490][   T57] bond0 (unregistering): Released all slaves
[  897.605898][T28126] netlink: 56 bytes leftover after parsing attributes in process `syz.3.7003'.
[  898.081685][T22382] net_ratelimit: 11 callbacks suppressed
[  898.081700][T22382] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  898.096147][T22379] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  898.240539][   T57] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  898.248877][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  898.593833][T28097] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  899.121002][T22379] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  899.129230][T22382] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  899.520480][ T6185] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  900.170350][T22382] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  900.179981][T22379] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  900.800163][ T6185] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  902.879707][ T5633] Bluetooth: hci2: command 0x041b tx timeout
[  902.885802][   T50] Bluetooth: hci5: command 0x0419 tx timeout
[  903.282492][T22379] net_ratelimit: 15 callbacks suppressed
[  903.282505][T22379] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  903.296447][T22382] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  904.000346][   T57] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  904.008612][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  904.331900][T22382] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  904.340467][T22379] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  905.280272][  T158] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  905.362259][T22382] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  905.370771][ T5767] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog