last executing test programs:

7.243299004s ago: executing program 3 (id=4371):
socket$netlink(0x10, 0x3, 0x12)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00')
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000)
r0 = socket(0x8, 0x4, 0x3)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a010400000000000000000200ffff400004803c0001800b00010065787468647200002c000280050002009400000008000340030000f50800044000000001080006400000000208000140000000130900010073797a30000000000900020073797a32"], 0x94}}, 0x0)
ioctl$XFS_IOC_PATH_TO_HANDLE(r0, 0x400461f1, 0x0)

6.49229243s ago: executing program 3 (id=4380):
unshare(0x6a040000) (async)
ioctl$SIOCX25GSUBSCRIP(0xffffffffffffffff, 0x89e0, 0x0)
r0 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f00000000c0)={0x0, 0x1, 0xfc, 0xfffffff7, @vifc_lcl_addr=@rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10)
r1 = socket(0x11, 0x5, 0x0)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r5)
ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f00000000c0)=<r7=>0x0)
sendmsg$NFC_CMD_DEV_UP(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r7], 0x1c}}, 0x840) (async)
unshare(0x22020600) (async)
write$nci(r4, &(0x7f0000001440)=ANY=[@ANYBLOB="0f5a07aa21e7b3b5ecdc7b13ea0399b974650f9f1d51e9c74bbff7a127a0ea833f1ee521cd61cb2cfeef4521ad54cfb59671bd1f73d6f315468ba84f13582d571c963d6a3789cd428be8adfaa5515594bebdc03ebbac6b481cc86551b2919d56ba", @ANYRES64=r6, @ANYRES32=r1, @ANYRES64=r5, @ANYRES32=r0, @ANYRES16=r2, @ANYRES8=r7, @ANYRES8=r3, @ANYRESDEC=r5, @ANYRESOCT=0x0, @ANYRESDEC=r5, @ANYBLOB="b6eadf719a0c810e92fd668dd83a18c6d83fe75fe2143eea1a7d3c5dbfda6be82429eef205f0507d383d81478b9da8adcfdac1c66311a61447318f470299ed3afa45f072ff34113f816e9b4dc9c2141d568b3e8c02148b492bdf0d2dfc302fe89cfbea63dc97686c2ad85700a8eff26269a64948767b0260bab56b90efb4b48d79f591f468d18c498b70d62356ad102985a6ccdc225932c3da42226a24670e4ddc73ec57da838121bddf2da5533052da81da6edd6e37a1d782989d63fe5aee11fcdc5e5753048f98272cfe96bd66a86822d93f0a69c97c5997df2260c9fca5b7dae55e034f7ded9191e26cec77833c1a9e0c817b06bacfcfd11307a3c7fe3bda5d76728ee1583b0feb0f2df60ad1698501c7ae20e85dadbb26a54611b7f959b3b1ca68ac5a5e1a8ff709cd91af29bbac48459447c9023a158d27ded389fda64b5e3fb9b58c73dddc05422437006ec533521afc58f8ebc2ff7f3315f8715a3e69e4fd5a8742b5e1deaab2665bd701b23680d86d57d5b3e3c1f7447732067cae5c494f48194ce56b312a07485ed8aceeaaa7b15ca3630c355fc1ef8c983658143c35760356fff6e689f937067a8fdb7d4c33e20714ebecd0805e6215dc9cfa118339471e39cea019e644bff8521b91de502156e309783bb7458503a71181c0ff62dc87e9df28bab244a556d6c4876ae729f6f9cb80d0b149199080278d9acc52f2b110caa1efdcaee4165dbb57b6202b92f7f3b3dcc56b267d9ad4bc289b5c26fe44be88eddb95c8f5d8ef0b98c34997af6dab6f493cf9ae709914a022d92857a4b4dbfb5662e0ac2d570b45f736f044ef33c461731039fb735ed5c99a88b3a77c1d328b976579f955fce6c1ee33892116a8cc5d3d9c80a0fb5ce70f253642e9d75f6eca734725301bfe788b02cfae297d370b15ac2bf3f9b262b94f4af8c5e6e9f098245bd8754cb6cd5c3c555b4a766ac77303066a8b3f1268066402aabfc41a471d45e3ab5358fb58b662becc8e5d7a2a839095b4d001d49caf4fe806cf1e5746b34b4cda058443b55b26febe91ea8509a8630b395a7e8c87c7c1fb2b95b7c49ce351a50451d207f8bd267abeeca6d3cd1fee39d990b4317db3c0bab1a532286f554a07e155044da9986a7a8e44c448d884c9f1b657ee5fd4fa4fd59469007195ccaebec7298b4053060117a51643f6b13656011132af7e405fae0cf671caa166a55243cc4b48e6828ccbd36bf138a943cc5274f412341ffb42f779e78c3dd2e11178b89cb61097052979bf4ef2ee321df4b69476823bbd43dc4c150076fa87bdf0c0a11f09cffff587f04fb9bef93903ecf01c469a74cbeae355aeaf99b35a6822fb45bc4b6aeac4ce623b035df544f2b5751b968e14503fcfe8693a7beba6c9729ddc7a1f012bdbe40d2894f47ac609a256af591064453342f45c56d3cd20fb0dff63011fe377c48d4250d6a9e2eaa6a4f73c91d5d231690e9ac275cf70e01bec58bcd9f377f8f07606dc4b8ff6547f525fc342999a895151aaeb3b8ea7a1d0c164f2ac699b94b5abbed63f7c92f66a604d7f6f10431bc17a949be4f808f4067bd746dec017c6dbfcb6652d2203c1941a8218aff3c8e2bb3fb4673092ef7d68cbb92d09bd080c0f06dabbc27e3cab7e505ab4b14a27aaaca54b52e7a696a20d184b197423af93c888d4820544652d4c1f64d1da1b7c2ed5be217902603a166b8e8356953fef70b2abd18938d0b05c26c66098c65c47c6d1d4f4997eec3555b3bd29bc41c7aa13c8cbd2b81864f922b1de1fc9cf74d264e52b2f06ee7bdd6b5e2dfd2e24a5c631a2709750a6cc3e9593fe1369ee41314c7e298fed109bc32908ec87a28fead02be7cccd6750d2499a63ab810c8cdac714a7405f0cab69e73c07ca9f3ac8c7dd50e57750687d2613b04a34cc9d4c2af6235b77a6ea6cf7402fdabb0652d141173cd9e7f552888acbd513f5b5b1d692f2947a9cb6680a5f4a7317de21646db341727b25ba43acf5dbc70231bd7085f81ddd075edc6f24c2f0d1782d0e22de3c8a7ab0adbdf1682a9d48d864195d4b24a1f0f37795caf4d0e6ccd39f63311d2301ffbba1928d6b3b097ee2bd027869c95feab3a924b91575a3916d9f7efc4fd6f44cef4a94428c6c1f524a6a52a03f7c84eef015e0d32e13ecb61272803fd39f73c7ebd67ae9c4e7b4e0584f4944c99971b115f71e46e95a27a6b88f44cfb5592bf61be165934b06e0b6df7d071d31a43a10facf3608e23b78130d0188fb2c8e06a3f8b568f300262ff0de5d79f84a2c0d1192dad4a63c4a460fbd4997cebc30a1bab09ec87d934ee2e7d3d1f79727a372814a73a96a21f96ae7c16bb18ea44e8ae30b807801f701b3c9c576a164fe073d92c42511f6d15396ac89662469d9218cd289c6351becb6b95b32c6ac7e3221584bf54449a1e9711ea4c4b0abf71e62ea7deca9dcc2edf7917ae656b71224e606bc3e6f08c21f5bb972499ceb0b3571d66ef18d64e638522022e2c85330467680a0f13b9c7be9230f2c6b9683c6c3ef104d76c498e618944038d676435a5a50ce48850c4f7d4afffd206fdba5df84b909235ce680571799b64e6d18280a2cfc1ffccb0f7ae37f805b9474083a48e4dcb703dbcd884e6cdb5e29f22cca576ffff2ebce28bc566ede918d1edc8b9e9e105eaf81292a7b737ae0da0ed1b3860fee7d20e3408bd8195677ebd35a748782f7ce594e18dbfa3c6b93ce9243783e696c6232236a8c246bdf3dba9465b06a2bdc582209148e8e1ce404e1e055037094cf44e84a2fb1a1132ce5931738187dbf4a5d3133ea96d22cb54732997961818910f76419a211e721376ba95907bb25c6655881e2f9b2b5b7fb22bba3060c7004524edecdcefd89a92924994ff1ea326cd1f1314eaf2c05a5866be79184f4ceeb64df03c40c8f8cb6fe6014d73aa7617e5b4f89e91799bab8547de0de72540ea9e3a3bdcd81a096cdbb2b24edeb1477e120480f475f52074f9fd3a6fec6a87ac569caa719bca0b6615892709c726b9df7e3c6dec14912813d23bfe9dd672055370fc273a7a07013d59a20986952a068e03be5980149d3d6def90d5768da78a62cbd08c9298420bd36b57ea0cf1a3ea5cd6f105be88c5e8d4a9acf1c180e5efa9638edeafcdebacad962f4c22a7824c0a1368af48612ad44f0f514b8650fd03f2132cca8a5dc54b8cb969c099d4a0706d014f303e492a409e8d501301ffb6cb92d03f71da7f4ef84084ea7ab21c770e5919025d8a503e9e93f6284565ffc6f1d53c51de67597511677c42a2f973c7c1231d5e1cbada1ce7c844878476a8e4ccc4784188ef8f2dab91571c6c77cc97e8a808052954b3268d8e9eddd0eec411c5bed61c03a4ae4db3b2a5fcc3e3c818d6c69d5b7416cb1a3b84aa29069e7e0ccc6edc52b4cea11c65c803b442ec58246a40e41331f5a27f788ad8ce98eb0925ccc64ff38b1a77c2c5357398d8160a3235d82e4c0e397b1d28c9994de70cd9972aea5c05bdf84a4e2cd6bdc28eef8a4acfc0bf4e76e1326592e45b93d0293ddff34af1e566d3412eac69b67e0e713da975236f08c1ac080d791235f642e4c168971723347176d71b60fe825909596d06597958526013136820b690d2f8701253804b4d6786f0756a5fc1625f69c8e777a2f67b1f650d10c6a7dcbbff6c4a8f9be0622293afb6ebf88f0b3eff1d24e25b31331a006fb87aba791b4382d69cd883a82ddcf5e206348bb12020d872dffd673892ddf930ee977e980c295465dc2305078d148d97c4dfb3d5ab6abb768a38f414b213d4e156484cc7fb0fe1b22a01991f088b2fe00a0fbbec443d9b0d679c5093dedad0f7f11f9837cf22ae08b48081ee8c74c8cdaa0376834e52c057be3383769926b9e1c28962520f02bc5055619f9e40ccd688f0f843a2fc96651a7543445df6f94b657b708e8c8c0a8bf49c28b80c30f3fb9b69fe13e0d46a2ff33498bbc56e1838e2fa3cbfe01a9b842a8a4f4cbfcd0826f22dfec015b6e5dcf590026e5d93a3ecaff82b59b95f22ade5cab5eb69b62345a9c2d26c4361367c8940eb0ff8f1a162c1e8d12c970c5b52011cebadfe01729bdaeef762fb0df5ce44f313d6ecb1203a704234d31fb758663e6296ff3c74e4ac508a63a8e6144edc5de9a3f43814db214871d1c77c2a22ff221f6f05b89cf3acb47083e3ee2f176c598eb1ea41270db47493209d4a7b221e79c189621f79faee85963ec35addbbe681d0dd57587be7e8ef88b43f0b2d67696ec5bb0fe242ebeb8892eeff2a55c34598a889cbe07253fecc3b7060ce8bbb2f40239b101aadea7465ed3e35b40024e2a1fede5e803a7d0235068726dd8a22513cccdbb3a61163c6212d386996addd2a73b4d50f1d6f1b8f18349391a4615ab5f6337ff5a94f890acff116c7c36fdd212f13642b1ed8bee4f1a1c05b7e895789615aa982172c2612d9a904321b296564ab6e1335275663d2aeee4718298bd0fe3e6746a4222a18b73af5bc84a48206b22f25da39e5b78459b961511b859203bb16ed8594565ab87ae8246a50c2bb194024147aa048d29d63653f3afd0f31a1ee0932026a081e1cefbab92ed1bd6b4394ee6728b1f4ed632bdd1d14d6df843221c2b4e5d4e46d097fadcf3c99da75e8dde397b9dfb20627dd31c0efa6ea3a47757faa41a8c46ba233f8dbe75cb50c16b896ec842efee58ee27575856604d6ae2da73280bceb05034aac388d0a65305a7a0f6050425cccdb4598ba9f9a78996a2d7fd544734fda4594700078468e4ac6752b4977ddeca29afe86408fa343cdfbc1cd57db706c12c45a5eefb5b13fe8b95acdfa167ee02f55090d0668f45cb6bd8ffeeabac3022f8d5600adbe5cdf0f58c69e40c5a447c616c8af564f65d3d72fec7ce51143f0090d2e1c9bcd947cbc1e9cfc01ed8e85f7bd7a63b951016d2e0d1a5d0fb278b1bb7e78425ca2260af4fff6e12d08ff2b38488d31ef9c3e9905d1820775666536d999c3b640c5faeb1e50901b66a91de9bf8e41f18f86a8b40d750afd52ad726ca5b2ec5db5a4cdc5f1969104319492cfc21026d7297921d7e71a907a104e9398e9c40488a438e043b0cd300e7489d928c2ede2c360779837dc99b93fca70429548a853e877a9b9e03bef02d609a134f5a3c911cfe07136c2397a0698b659827bd716f0ebc47633a378b0adb09bb65baae914f960d606933b5239e62799bdbc9053f58636457fffa229d12134c3f9c8321dae958aa43f52ce29b55efa0e367ef3d0d0e6c9b61e12c5a0f85effe110201caefdfedfece74c2dd4457fe7a58404aaac1a972367fb6c2ac292a8887044e9cf159e2d668974cbb1dbf32e6e37c12b1933ef7382ee7440b09fc800a7d1bf4c1cbb334335075c5b9ceec9777d910aff68a23a76765be05953cd4d991f7802e654fa19181b88b2a3ff77efafc3169baca0ecb1dadff60b368d2b8bf907a2d233710c15a1219d7b086485e28fe4e4496e3632429ba20ffa420e10aa7d50f99a2258bd15ea24c81e93e437b16ead27b2659097e7c1edb74d3632e8f200e31cd548780ab99c76613a7b1a41a657d031489150be23c131fdd07bd395cc495687ec0a896ba98e40c5dfe8990c5750f68947499277a21ea5f2eabdad84aee09871dc23119ecf6727495961e0c162b5a6cb617c42d1094cee959e1724d72f0379fe1464240fb527ad8c6c4822d8528193434347094c7b9ecb14e653db1aa2817f33dc18f1300c8ec9d2545817e08c44e5c915af5529e94fef02abd907ab7bc5795", @ANYRES64=r1, @ANYRES16], 0x10)
sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000006800e97800000000000000ea0900000000000000040004"], 0x1c}}, 0x0) (async)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) (async)
r8 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r8, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000, 0x1}, 0x20)
r9 = socket$pppl2tp(0x18, 0x1, 0x1) (async)
r10 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r9, &(0x7f0000001040)=@pppol2tpv3={0x18, 0x1, {0x3, r10, {0x2, 0x0, @multicast2}, 0x20000003}}, 0x2e) (async, rerun: 32)
ioctl$PPPIOCGCHAN(r9, 0x80047437, &(0x7f0000001300)) (async, rerun: 32)
readv(r9, &(0x7f0000001240)=[{&(0x7f0000000040)=""/4090, 0xffa}, {0x0}, {&(0x7f0000001340)=""/224, 0xe0}], 0x3) (async)
r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0b0000000d000000cc0002000600000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702000002ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) (async)
r12 = socket$packet(0x11, 0x2, 0x300)
r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000001080)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$sock_attach_bpf(r12, 0x1, 0x32, &(0x7f0000000180)=r13, 0x4) (async)
syz_emit_ethernet(0x6e, &(0x7f0000000080)=ANY=[], 0x0) (async)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x24044044, &(0x7f0000000540)={0xa, 0x4e22, 0x0, @mcast2, 0x4}, 0x1c)

4.529767002s ago: executing program 4 (id=4393):
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
sendmsg$inet_sctp(r0, &(0x7f0000000240)={&(0x7f0000000000)=@in={0x2, 0x4e24, @local}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000300)="d9", 0x1}], 0x1, &(0x7f0000000100)=[@dstaddrv4={0x18, 0x84, 0x7, @loopback}], 0x18, 0x40d5}, 0x50)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c0000004100010028bd7000fedbdf250100000004004880100001800c0010800400068004004480040002"], 0x2c}, 0x1, 0x0, 0x0, 0x400c801}, 0x200080c4)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003200)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@private=0xa010102, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffffb}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x10000)
sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000900)=@newsa={0x14c, 0x1a, 0x1, 0xfffffffe, 0x100, {{@in=@multicast2, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4e20, 0x71a, 0x4e23, 0x5, 0xa, 0x0, 0x20, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, {0x300, 0x1000000000000192, 0x9ba3, 0xffff, 0x82519, 0x5, 0xfffffffffffffffc}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffe, 0x3fc}, 0x70bd26, 0x3505, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @coaddr={0x14, 0xe, @in=@empty}]}, 0x14c}}, 0x844)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r6=>0x0})
sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0)
r7 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000280)={0xffffffff}, 0x10)
sendmsg$nl_generic(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x14, 0x12, 0xa01, 0x0, 0x0, {0xa, 0x0, 0x300}}, 0x14}}, 0x20000000)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40003}, 0x4040850)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r9, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000780)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_DELTABLE={0x20, 0x2, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x48}, 0x1, 0x0, 0x0, 0x8840}, 0x10900)
sendmsg$NL80211_CMD_DISASSOCIATE(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x44000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r3, 0x100, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x0, 0x7e}}}}, [@NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x8010}, 0x10)
r10 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$FOU_CMD_DEL(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x24, r10, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@FOU_ATTR_AF={0x5, 0x2, 0x2}, @FOU_ATTR_PEER_V4={0x8, 0x8, @multicast2}]}, 0x24}, 0x1, 0x0, 0x0, 0x810}, 0x4000080)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000040))
write$tun(0xffffffffffffffff, &(0x7f0000000340)={@val={0x0, 0x6001}, @val={0x1, 0x0, 0xf404, 0x8, 0x1, 0xf879}, @x25={0x2, 0x7f, 0x5, "1949335cd7c0f3cc55c715d6cf541512ab0b11fc5def9e9410f960e2dae4f3b573b89b542c8eef824f960d515164133718603774bb7d26ae62116c0e6455717fb10be106ca4ccf784f27625e121ee0e165586a72a8a0291753a3bcd2409fd700358105b1e04e5f482eba71b62049caff4b71dce62d9c572ebde53bdebebbf3434520759ecedc3768f32fa82bc977d6b3f2ce96167f2e2c91322f70a108bfa26b1ed038985c8a"}}, 0xb7)

4.108989564s ago: executing program 4 (id=4396):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_tcp_int(r0, 0x6, 0xa, 0x0, 0x0)
bind$inet(r0, &(0x7f00000005c0)={0x2, 0x4e24, @multicast2}, 0x10)
sendmmsg$inet(r0, &(0x7f0000002f00)=[{{&(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10, &(0x7f0000000600)=[{&(0x7f0000000040)}], 0x1}}], 0x1, 0x20004000)
connect$inet(r0, &(0x7f0000000240)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x30}}, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b400000000000000611138000000000054000000000000009500000000000000bf4ab41f57177a09badf2d609444dce0a96da39d4a798136691a3acad1a53ca6ce540a262ed4d483bc474439e647a1fe8030f2b3decef1295ff730339c3b5ca0adc5f22a7b86087fcde36b3b7cb28db72bad9afec5d35b5e41055d58aa2e7cc3a7b823d0e6b013fb8d78d2bb25a3487045b6cc75954d55d645146a97a9b3467e370ad955419fe2164b973301d9ddc38b6281c82a230dc1f9e00e95f5874e6964663a4b40c9c46b665868aa5b296c1e5f80a8059d"], &(0x7f0000000080)='GPL\x00', 0x4, 0x3e0, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x76, 0x0, 0xffffffffffffffff, 0xffffff33}, 0x48)
connect$inet6(r3, &(0x7f0000000200)={0xa, 0x4e22, 0xb7, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000040), 0x1e)
setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_128={{0x304}, "dce02de9d7bd466b", "72e64b3892cb7025848c9f40363cf916", "cfff3c66", "e2b768b4bb9e0d9b"}, 0x28)
sendmsg$ETHTOOL_MSG_WOL_SET(r3, &(0x7f0000001c40)={0x0, 0x0, &(0x7f0000001c00)={&(0x7f0000001c80)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x8000)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000100)=@base={0x18, 0x4, 0xb, 0x0, 0x1, 0x1, 0x80000000, '\x00', 0x0, 0xffffffffffffffff, 0x4002, 0x5}, 0x50)
sendto$inet6(r3, &(0x7f0000000100)='0', 0xfffffffffffffdcd, 0x0, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r4 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
close(r4)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, r2, 0x7}, 0x14}, 0x1, 0x0, 0x0, 0x8081}, 0x20000840)

3.851605287s ago: executing program 4 (id=4399):
socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00')
unshare(0x6a040000)
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4)
syz_emit_ethernet(0x5e, &(0x7f0000002280)={@local, @link_local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, '\x00', 0x28, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast2, {[@srh={0x1, 0x4, 0x4, 0x2, 0x80, 0x38, 0x6, [@private2={0xfc, 0x2, '\x00', 0x1}, @private1]}]}}}}}, 0x0)
connect$inet(r0, &(0x7f0000000080)={0x2, 0xe26, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x10)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)={0x34, r4, 0x1, 0x70bd2c, 0x0, {{0x2}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x2, 0x25}}}}, [@NL80211_ATTR_CSA_C_OFFSETS_TX={0xa, 0xcd, [0x3, 0x6, 0xf7]}]}, 0x34}, 0x1, 0x0, 0x0, 0x8001}, 0x4040000)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700)
recvmsg$can_j1939(r1, &(0x7f0000000880)={&(0x7f0000000000)=@rc, 0x80, &(0x7f00000007c0)=[{&(0x7f00000000c0)=""/32, 0x20}, {&(0x7f0000000200)=""/175, 0xaf}, {&(0x7f00000002c0)=""/82, 0x52}, {&(0x7f0000000340)=""/99, 0x63}, {&(0x7f00000004c0)=""/230, 0xe6}, {&(0x7f00000005c0)=""/124, 0x7c}, {&(0x7f0000000640)=""/126, 0x7e}, {&(0x7f00000006c0)=""/243, 0xf3}], 0x8, &(0x7f0000000840)=""/26, 0x1a}, 0x40000002)
pipe(&(0x7f0000000740)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
ioctl$FICLONERANGE(r6, 0x4020940d, &(0x7f00000009c0)={{r7}, 0x100000000, 0x418b, 0x8})
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xe, 0x8010, r5, 0x952de000)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000005, 0x12, r1, 0x0)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="e93c77b4609337d8461508000000040000000400", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r9}, &(0x7f00000000c0), &(0x7f0000000100)}, 0x20)
sendmsg$nl_generic(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="c40000002700090025bdc587bd32df2512000000b0000100e4"], 0xc4}}, 0x4000080)

2.803323344s ago: executing program 3 (id=4408):
r0 = socket$kcm(0xa, 0x2, 0x0)
sendmsg$sock(r0, &(0x7f0000000400)={&(0x7f0000000580)=@un=@file={0x0, './file0\x00'}, 0x80, 0x0}, 0x0)
socket(0x10, 0x803, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ab4000000060a01040000000000000000020000280900010073797a30000000000900020073797a320000000088000480100001800c000100636f756e7465720014000180090001006d6173710000000004000280600001800a0001006c696d6974000000500002800c000140000000000000000808000440000000010c00014000000000000080010c00024000000000000000090800034000000fba0c00024000000000000000000c000140000000000000000714000000110001"], 0xdc}}, 0x0)
sendmsg$NFT_MSG_GETRULE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYBLOB="14000000fe0a0102"], 0x14}}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a300000000030000000060a010400000000000000000100000008000b40000000000900010073797a3000000000050007400800000014000000110001"], 0xa4}, 0x1, 0x0, 0x0, 0x2004c899}, 0x0)
recvmmsg(r1, &(0x7f000000c2c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
r3 = socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000040)={0x80, 0x207, 0x2, 0x800, <r4=>0x0}, &(0x7f0000000080)=0x10)
setsockopt$inet_sctp_SCTP_AUTH_KEY(r3, 0x84, 0x17, &(0x7f00000000c0)=ANY=[@ANYRES32=r4, @ANYBLOB="08003500833d9b1da2269f999b0971e37f663dbc6150a3a46c5c646bc3c15b1a79360f629c0f0eb894eab9c6a236c45166b1030436f1a75896"], 0x3d)
r5 = socket$can_raw(0x1d, 0x3, 0x1)
getsockopt$CAN_RAW_JOIN_FILTERS(r5, 0x65, 0x6, &(0x7f0000000100), &(0x7f0000000140)=0x4)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x4000}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)

2.6059075s ago: executing program 1 (id=4412):
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) (async, rerun: 64)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3000001, 0x31, 0xffffffffffffffff, 0x0) (async)
syz_emit_ethernet(0x3e, &(0x7f00000002c0)={@local, @multicast, @void, {@ipv6={0x86dd, @generic={0xc, 0x6, '\x00', 0x8, 0x2c, 0xff, @empty, @mcast2, {[@fragment={0xff, 0x0, 0x4, 0x1, 0x0, 0xa, 0x66}]}}}}}, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r4 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) (async)
write$tun(r3, &(0x7f00000002c0)=ANY=[@ANYBLOB="000086dd00011100"], 0xfdef)
ioctl$TUNSETVNETBE(r2, 0x400454de, &(0x7f0000000080)) (async)
sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001cc0)={0x34, r1, 0x1, 0x70bd29, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x20, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb7}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'batadv0\x00'}}]}]}, 0x34}}, 0x0)

2.591234341s ago: executing program 3 (id=4414):
bind$llc(0xffffffffffffffff, &(0x7f0000000140)={0x1a, 0x0, 0xfe, 0x0, 0x2, 0x9}, 0x10)
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000140))
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3800000041000701fefffffffeffffff017c0000040042800c00018006000600050a0000140002"], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000)

2.427898683s ago: executing program 1 (id=4415):
r0 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4)
ioctl$NILFS_IOCTL_GET_CPINFO(r0, 0x80186e82, 0x0)
r1 = socket(0xa, 0x5, 0x0)
sendmsg$inet_sctp(r1, &(0x7f0000001640)={&(0x7f0000000080)=@in={0x2, 0x4e24, @local}, 0x10, &(0x7f0000000280)=[{&(0x7f0000000040)=')', 0x1}], 0x1, &(0x7f00000007c0)=ANY=[@ANYBLOB="180000000000000084008ac52e8e9ba5dffd0f0005000000"], 0x18, 0x4008000}, 0x28008841)
sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={<r4=>0xffffffffffffffff})
r5 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYRESHEX=r1, @ANYRESHEX], 0x128}, 0x4008080)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
r7 = socket$vsock_stream(0x28, 0x1, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c00000044f95dcb", @ANYRES32=0x0, @ANYBLOB="21000000000000002c001280080001006774700020000280050005000000000014000800fc010000000000000000000000000001"], 0x4c}}, 0x40)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1e000000"], 0x40}, 0x20000000)
r9 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYRES8=r2, @ANYRESHEX=r4, @ANYRESDEC=r0, @ANYRES32=0x0, @ANYRES32=r0], 0x48)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000480)={r9, &(0x7f0000000380)}, 0x20)
r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f00000001c0)=ANY=[], &(0x7f0000000080)='GPL\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r10, 0x0, 0xe, 0x0, &(0x7f0000000000)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
bind$vsock_stream(r7, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10)
setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r7, 0x28, 0x2, &(0x7f00000000c0)=0x33, 0x8)
listen(r7, 0x0)
accept4(r7, 0x0, 0x0, 0x0)
unshare(0x2c020400)
r11 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r11, 0x107, 0x12, &(0x7f0000000040)={0x2, 0x7}, 0x4)
setsockopt$sock_int(r11, 0x1, 0x2c, &(0x7f00000000c0)=0xbfe, 0x4)
setsockopt$packet_fanout_data(r11, 0x107, 0x16, 0x0, 0x0)

2.42690786s ago: executing program 0 (id=4416):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000800000002000000ffff000005"], 0x48)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000680)={r0, &(0x7f0000000500), 0x0}, 0x20)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, 0x0, 0x2400c000)
sendmmsg(0xffffffffffffffff, &(0x7f0000001440)=[{{&(0x7f0000000200)=@xdp={0x2c, 0xd, 0x0, 0x4}, 0x80, 0x0}}], 0x1, 0x4044000)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000380), r1)
sendmsg$NFC_CMD_LLC_SET_PARAMS(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010026bd7000fedbdf2510000000050010000100000005000f000200000008000100", @ANYRES32=0x0, @ANYBLOB="06001100a8ba"], 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x8080)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r4, &(0x7f0000000080)=ANY=[], 0x10448)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0)
syz_emit_ethernet(0x74, &(0x7f0000000000)=ANY=[@ANYBLOB="0180c200000000000000000008004d00001f00130fa4f973907800000300e000000100"/50], 0x0)
r5 = socket$inet(0x2, 0x3, 0x30)
getsockopt$inet_mreqsrc(r5, 0x0, 0x53, 0x0, &(0x7f0000000080))

2.413591042s ago: executing program 3 (id=4417):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="bc010000190001000000000010000000e0000001000000000000000000000000fe8000000000000000000000000000244e22000bffff00000a00808062000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000033000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000900000000000000800000000000000000000000000000000000000000000000000000000000000004010500fc000000000000000000000000000000000000003c00000000000000ac1414bb000000000000000000000000ff3400000002000000000000000000006e000000ac1414aa000000000000000000000000000000003c"], 0x1bc}}, 0x80c4)

2.26385307s ago: executing program 0 (id=4419):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="d80000001b0001000000000000000000fc000000000000000000000000000000fe88000000000000000000000000000100000000000000000000002000000000", @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffffffffffff00000000000000000000000000000000000000000000000000000000000000000c00150000000000000000000c000800081d"], 0xd8}, 0x1, 0x0, 0x0, 0x4044001}, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r2)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0xae0, 0x6361, 0x5, 0xffffffff, 0x3}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x4, 0x7fffffffffffffff, 0x0, 0x1000, 0xc, 0x215}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r5)
sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
close(r7)
r8 = socket$unix(0x1, 0x5, 0x0)
r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0x10, &(0x7f0000000700)=ANY=[@ANYBLOB="a12232cc44811b3cba35e707011c1334e0e2319540a529fdf0a95aead83fc0d84fbd752dbafd87c4875ff104dfb6ac93a1c385b94518da5fe9bdcd5ef9caaf064cbdf63e2a00"/85, @ANYRES32=r9, @ANYBLOB="0000000000000000b702000014000000b7030000000000018500000086000000bf09000000000000550901000000000095000000000000002d6a010000000000bf91000000000000b7020000ffffffff8500000084000000b7000000000000009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0xe, 0xff6, &(0x7f0000001cc0)=""/4086, 0x41100, 0x27, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
r10 = socket$nl_route(0x10, 0x3, 0x0)
r11 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r12=>0x0})
sendmsg$nl_route_sched(r11, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r12, {0x0, 0xd}, {0xffff, 0xb}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x4890)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r13=>0x0})
sendmsg$nl_route_sched(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=@newqdisc={0x38, 0x24, 0x800, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r13, {0x4, 0xb}, {0xfff1, 0x8}, {0xffff, 0x5}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x240080c1}, 0x80)
ioctl$SIOCSIFHWADDR(r7, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})
socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={<r14=>0xffffffffffffffff})
r15 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_SIOCETHTOOL(r15, 0x8946, &(0x7f00000000c0)={'team_slave_1\x00', &(0x7f0000000000)=@ethtool_eee={0x45, 0x7, 0x8, 0xa07b, 0x7, 0x7b24, 0x80000001, 0x0, [0x7, 0x4]}})
ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000200)={'wlan0\x00'})

2.253225331s ago: executing program 3 (id=4420):
unshare(0x6a040000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=<r5=>r2], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r3, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYRESOCT=r5, @ANYRES64=r1, @ANYRESOCT=r4, @ANYRES16=r0, @ANYRES8=r4, @ANYRES8=r3, @ANYRESDEC=r4], 0x50}, 0x1, 0x0, 0x0, 0x40d5}, 0x0)

1.799763172s ago: executing program 0 (id=4423):
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e22, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x1c)
socket$nl_route(0x10, 0x3, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
syz_emit_ethernet(0x8c, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x0)
setsockopt$inet_sctp_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000001300)=ANY=[@ANYRES32=0x0, @ANYRESOCT=0x0], 0x806)
syz_emit_ethernet(0x66, &(0x7f0000000c80)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa86dd60f4adf700302c0000000000000000000000ffffac1414bbff020000000000000000000000000001290300000000000007180000f5ff04050200090000000000000068300000000000000000000000008100907800000000c11685fb6b24282fa5fc80b1cd03f1e585110749ab71b53a088977e201e0003f6e8888f99d375129f5250bf3bd465f7033099202febcbd26c954ba7282d15ff1433f653dcb51d28d20f9a43a28e3cfc072f68b9d523e409cc01b3d465df9f1055247fce3c87bc4be4393178eb0b0e58a7d75dc016e9aac07a91c1ff4d729649c40a611d7fd45668f9e5c655e4f2d85710b0394eaa5efd09e44587681df1c272a5b42fbe7929b4a36a77a4a8ee6cba90e8586e706588e2ab9"], 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000b40)=ANY=[@ANYBLOB="f8000000160001000000000000000000ff010000000000000000000000000001ff01000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fe880000000000000000000000000001000000003200000000000000000000000000ffffac14142900000000000000000000000000000000004b6e9396c31790b91bc7a90000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff0000000000000000000000000000000a00"/187], 0xf8}}, 0x0)
socket(0x10, 0x803, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000440)=ANY=[@ANYBLOB='#\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010028bd7000fcdbdf251700000054000680040003004c00040067636d2861657329000000000000000000000000000000000000000000000000240000009ea2d328893918792a5ca222a6ad614b6f3aa3a6a6ad7ee8dbe23a9348494694ca269b3c"], 0x68}, 0x1, 0x0, 0x0, 0x4000001}, 0x0)
sendto$packet(0xffffffffffffffff, &(0x7f0000000400)="05d936277c6f5422007f83477ca1b278e3e4018a34e7bfd3de1a00ad6762646c95c716727eb53b", 0x27, 0x40880, &(0x7f0000000200)={0x11, 0x86dd, 0x0, 0x1, 0x4, 0x6, @local}, 0x14)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r5 = socket(0x400000000010, 0x3, 0x0)
r6 = socket$unix(0x1, 0x1, 0x0)
sendmsg$unix(r5, &(0x7f0000000b00)={&(0x7f0000000140)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000000a80)=[{&(0x7f0000000280)="eba124b963742a7b02eca3a8b5bbe003f9c21fc58c685bb0661b55e5518a1aadf8a21f6165b8bebd894e54ab2d3e408f3dec1ebc92261f4a722fca59eec7c3aff2b3559dd4c0", 0x46}, {&(0x7f0000000380)="aff9f0039b9b4afb335e6d727d7ac43ca6fd0118193ece782985884f5e77e4ef05c3f053c268f727c5c6bae0826a4e170c42e131bc95205a3a05bfa62843640bf6fea1c4527db684ae67bfbc1b097686a476", 0x52}, {&(0x7f00000004c0)="761df7c49f4515d9a9f143b49686655a421430b78bcacfba1eaf0d6651cbb214c2891f27110bb2ae3c97fe1187c0fefcbcf440e79b67caca", 0x38}, {&(0x7f00000007c0)="25372dc29bc359769cdeb1eb65254715414ca45ec12e52e093646f8bc35aa02bb4aaa079ae85606a1a6f4616ac69077275bf9f73afbd45b4050f8e61daa705751b9a521caa6d67e7ab743eac88efd219fa0af474ab5ff0b7713e6b1988380a50ab03a15ac11bfc31fb8d63d9cddcd1e1a6e1451df14997e826effe9e476646a6ff4f8b5d03edc0ed4ab1583e7b50e34c27958b843fdffb62ee8bd04d76c6192f23404bbfbf7953815c85821fdc309a613e59f72ee0da5e8bc42348f0cda79db203", 0xc1}, {&(0x7f00000008c0)="13add88fb28265aa819ec13437ced01a890bcd7a892b1ead512b8542237ae43d2bb7de9af503bef1da48ec04318928279127feab41928266e5d4af1189e6423dd0577ee27b4cc3a93243fb536d0e65d78773e76b71353c76dc70cecaa1ff8d3bb63894e2c9c608f8e0abb576dd5a079742202688b492d957525f99d04d67543e73d2b26c98117787f95ff61b0b8fab52d4ce80f41a361f1074", 0x99}, {&(0x7f0000000980)="3ff15e3b59b99140e0db288c4c8d22b3325dfad087120e9eb627d866e5fde34109068b291e3835390ce05372c8c2693249a705463d07e6830d0f3dc09a2cb6ffa20de7159eedd79e8250f0890b344f6883ce6e89004fb6409f1817a93f26a3c92c9748bff28fcd11e162f70842e1fa4dacf42508355da80ced20f5e32546da683139e7ea595784", 0x87}, {&(0x7f0000000a40)="7a7d25351a8a0613cda6a622dea361b0e4", 0x11}], 0x7, 0x0, 0x0, 0x804}, 0x0)
r7 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r7, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x21)
syz_emit_ethernet(0xffffffffffffffac, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b142b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c04594282423424d00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2003}, 0x94)
r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x9}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
recvmmsg(r7, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000008c0)=""/226, 0xe2}], 0x1}, 0x6}], 0x1, 0x40000003, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1, 0x8}}}]}, 0x38}}, 0x0)

1.794688308s ago: executing program 2 (id=4424):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x13, 0x3, &(0x7f0000000280)=ANY=[@ANYRESDEC], &(0x7f0000000480)='syzkaller\x00'}, 0x94)
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r1, &(0x7f0000000380)={0x2, 0x4e22, @multicast1}, 0x10)
setsockopt$sock_int(r1, 0x1, 0x800000000f, &(0x7f0000000080)=0x7, 0x4)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_int(r3, 0x29, 0x1a, &(0x7f00000007c0)=0x40000401, 0x4)
setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4)
bind$inet6(r3, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty, 0xffffffff}, 0x1c)
setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000000)=0x2, 0x4)
bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x10000000}, 0x1c)
listen(r1, 0xb5d6)
listen(r2, 0xe0a5)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000001a000100a84b0000fcffffff81008000000000000000000014000200fe8000000000000000000000000000bb140001"], 0x44}}, 0x0)
setsockopt$packet_int(r0, 0x107, 0x18, &(0x7f0000000100)=0xa, 0x4)
recvmsg(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000002c0), 0x64}, 0x20)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r5, &(0x7f00000006c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x43}}, 0x10)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f00000000c0)={'team0\x00', <r8=>0x0})
r9 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000040)={'bridge0\x00', <r10=>0x0})
sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@setlink={0x28, 0x13, 0x1, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r10, 0x1020, 0x409}, [@IFLA_MASTER={0x8, 0xa, r8}]}, 0x28}, 0x1, 0x0, 0x0, 0x24004000}, 0x8804)
setsockopt$inet_udp_int(r5, 0x11, 0x67, &(0x7f0000000000)=0x507, 0x4)
r11 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="1c0000002400090243bd7000fedbdf25080000000600040058"], 0x1c}}, 0x8800)
sendmsg$nl_xfrm(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="b80000001900674c0000000000000000fc010000000000000000000000000001fc010000000000000000000000000000000000004e2200020a00808000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000ffffffffffffffff01000000000000000000000000000000000000000000000000000000000000000081d391f34107247da238220cdd486fab00"/128], 0xb8}}, 0x48000)

1.503309995s ago: executing program 2 (id=4425):
r0 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8)
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$FICLONE(r1, 0x40049409, r0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1a, 0x6, &(0x7f0000000000)=ANY=[@ANYRESHEX], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x41000, 0x0, '\x00', 0x0, @tracing=0x19, 0xffffffffffffffff, 0x6}, 0x94)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000200)={'gretap0\x00', &(0x7f0000000180)={'tunl0\x00', <r3=>0x0, 0x10, 0x8000, 0xff, 0x693, {{0x13, 0x4, 0x1, 0x2e, 0x4c, 0x66, 0x0, 0x6, 0x4, 0x0, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@noop, @timestamp_addr={0x44, 0x34, 0x90, 0x1, 0x8, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x6}, {@local, 0x3}, {@remote, 0x80}, {@broadcast, 0x3}, {@dev={0xac, 0x14, 0x14, 0x39}}, {@dev={0xac, 0x14, 0x14, 0xe}, 0x9}]}]}}}}})
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000340)={'gretap0\x00', &(0x7f0000000240)={'ip_vti0\x00', r3, 0x1, 0x700, 0x2d, 0x8, {{0x2c, 0x4, 0x0, 0x18, 0xb0, 0x68, 0x0, 0x3, 0x2b, 0x0, @dev={0xac, 0x14, 0x14, 0x3d}, @empty, {[@cipso={0x86, 0x71, 0x3, [{0x6, 0x12, "5b3452ab2c01c74b9f39dacbc1f20cd2"}, {0x6, 0x8, "92e71e2a3505"}, {0x5, 0x12, "327cd5bfce3630313b1548d07727b150"}, {0x1, 0xd, "860c9572ae4097374e70b7"}, {0x6, 0x6, "93ae158d"}, {0x5, 0xe, "88e10c7f0e394b435b4ee9bd"}, {0x6, 0xa, "769f21aefdb04b1e"}, {0x6, 0x2}, {0x0, 0x8, "fe580fd26a38"}, {0x6, 0xa, "dc78561830c4bbff"}]}, @timestamp_prespec={0x44, 0x14, 0x86, 0x3, 0xf, [{@empty, 0x3ff}, {@loopback, 0x3}]}, @timestamp_prespec={0x44, 0x14, 0xe5, 0x3, 0x0, [{@rand_addr=0x64010101, 0x3}, {@multicast2, 0x5}]}]}}}}})

1.484543822s ago: executing program 1 (id=4426):
r0 = socket$l2tp(0x2, 0x2, 0x73)
ioctl$sock_inet_SIOCGARP(r0, 0x8954, &(0x7f0000000000)={{0x2, 0x4e23, @broadcast}, {0x0, @remote}, 0x26, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x15}}, 'ip6tnl0\x00'})

1.47361435s ago: executing program 2 (id=4427):
socket$nl_route(0x10, 0x3, 0x0)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet_sctp(0x2, 0x1, 0x84) (async)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000040)={<r1=>0x0, 0xfffffff8}, &(0x7f0000000080)=0x8)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f00000000c0)={r1, @in={{0x2, 0x4e22, @local}}, 0xf8b4, 0x3}, 0x90)
r2 = socket$kcm(0xa, 0x2, 0x0) (async)
setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, 0x0, 0x0) (async, rerun: 32)
r3 = socket$packet(0x11, 0x3, 0x300) (rerun: 32)
setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000)={0x4, 0x3}, 0x4) (async)
r4 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000040)=0x80000001, 0x4) (async, rerun: 64)
setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000000)={0x4, 0x3}, 0x4) (async, rerun: 64)
r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2673004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) (async)
recvmmsg(r4, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f00000009c0)=""/216, 0xd8}], 0x1}, 0x2}], 0x1, 0x0, 0x0) (async)
sendmsg$sock(r2, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev, 0x9}, 0x80, 0x0, 0x0, &(0x7f0000000300)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0)
r6 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000001ec0)='ns/time\x00')
syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) (async)
ioctl$F2FS_IOC_FLUSH_DEVICE(r6, 0x4008f50a, 0x0)

1.311947145s ago: executing program 1 (id=4428):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_group_source_req(r1, 0x0, 0x2e, &(0x7f0000000140)={0x4, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @dev}}}, 0x108)
setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000100)={0x4, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @local}}}, 0x108)
r2 = socket$netlink(0x10, 0x3, 0x0)
writev(r2, &(0x7f0000000000)=[{&(0x7f0000000280)="390000001300090468fe0700000000001000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007208", 0x39}], 0x1)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x600, 0x0, 0x0, 0x6}, [@IFLA_ADDRESS={0xa, 0x3, @random="08e7eebc872f"}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x40}}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_DEBUG_SET(r3, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e0000000000000000001800028008000200200000000400010008"], 0x44}}, 0x0)
writev(r2, &(0x7f0000000040)=[{&(0x7f0000000380)="3900000013000318680907070000000f0000ff3f04000000170a001700000000040037000f00030001332564aaee7b1d58b9a64411f6bbf44d", 0x39}], 0x1)

1.200787277s ago: executing program 2 (id=4429):
unshare(0x6a040000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8010, 0xffffffffffffffff, 0x0) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8010, 0xffffffffffffffff, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000050002000900010073797a30000000002c000000030a01010000000000000000050000000900010073797a30000000000900030073797a30000000004c000000060a010400000000000000000500000008000b400000000024000480200001800d00010073796e70726f7879000000000c00028008000340000000050900010073797a30"], 0xc0}, 0x1, 0x0, 0x0, 0x20020014}, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x4e1f, @initdev={0xac, 0x1e, 0x3, 0x0}}, 0x10)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) (async)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = socket$unix(0x1, 0x1, 0x0)
socket(0x400000000010, 0x3, 0x0) (async)
r3 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd21, 0xfbffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}}, 0x24}}, 0x400)
sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000980)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd23, 0x65dfdc00, {0x0, 0x0, 0x0, r4, {0xfff2, 0xf}, {}, {0x7, 0x3}}, [@filter_kind_options=@f_matchall={{0xd}, {0x8, 0x2, [@TCA_MATCHALL_ACT={0x4}]}}]}, 0x3c}}, 0x4800)
openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) (async)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r5) (async)
close(r5)
socket$inet6(0xa, 0x3, 0x1)
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x7}}) (async)
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x7}})
r6 = socket$kcm(0x11, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$kcm(r6, &(0x7f0000000500)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r7, 0x3f}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)='\r', 0x1}], 0x1}, 0x60)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x10, &(0x7f00000004c0)=ANY=[@ANYRESHEX=r3, @ANYRES8=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000086000000bf0900000000000036090100000001ff95000000000000007d0afeff00000000bf91000000000000b702000002000000850000002a0000e6b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x9, 0x1000, &(0x7f0000000cc0)=""/4096, 0x0, 0x5}, 0x94)
r8 = socket$netlink(0x10, 0x3, 0xe)
bind$netlink(r8, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
socket$inet(0x2, 0x1, 0x0) (async)
r9 = socket$inet(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r9, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x290, 0x0, 0xb, 0xd0e0011, 0x120, 0xc6, 0x1f8, 0x1d8, 0x190, 0x1f8, 0x1d8, 0x3, 0x0, {[{{@ip={@rand_addr, @broadcast, 0x0, 0x0, 'nr0\x00', '\x00', {}, {}, 0x1}, 0x0, 0xd8, 0x120, 0x7000000, {}, [@common=@icmp={{0x28}, {0xd, "0010"}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x33f}}}, {{@ip={@remote, @multicast1, 0x0, 0x0, 'bridge_slave_1\x00', 'virt_wifi0\x00'}, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x9, 0x0, 0x0, 0x20000, 'syz1\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2f0)
openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) (async)
openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0)
r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
socket(0x400000000010, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffda5, 0x0, 0x0, 0x0}, 0x94) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffda5, 0x0, 0x0, 0x0}, 0x94)

867.401174ms ago: executing program 1 (id=4430):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="b8000000190001002dbd7000fedbdf25fe8000000000000000000000800000aafe8000000000000000000000000000aaff000000000004020a0028303a000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="02000000000000000c00000000000000000000000000000009000000000000000400000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a00000000000803000080000000000200000000000008000000000000000001"], 0xb8}}, 0x0)
r2 = socket$kcm(0xa, 0x2, 0x0)
sendmsg$inet(r2, 0x0, 0x0)
r3 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r3, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000000)={0x2, 0xc, 0x3, 0x6, 0xb, 0x0, 0x70bd25, 0x25dfdbfb, [@sadb_address={0x3, 0x7, 0x0, 0x80, 0x0, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x10}}}, @sadb_sa={0x2, 0x1, 0x4d3, 0x5, 0x4, 0x1e, 0x3, 0x60000001}, @sadb_sa={0x2, 0x1, 0x4d6, 0x0, 0x2, 0xf8, 0x0, 0x40000000}, @sadb_sa={0x2, 0x1, 0x4d2, 0xf, 0xc, 0xb6, 0x0, 0x20000000}]}, 0x58}}, 0x40)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet_mptcp(0x2, 0x1, 0x106)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0)
sendmmsg$inet6(r0, &(0x7f0000002fc0)=[{{&(0x7f0000000340)={0xa, 0x4e23, 0xfffffff9, @dev={0xfe, 0x80, '\x00', 0x36}, 0x9}, 0x1c, &(0x7f00000004c0)=[{&(0x7f00000005c0)="05", 0x1}], 0x1}}], 0x1, 0x24000045)

736.074406ms ago: executing program 0 (id=4431):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)={0x24, 0x3f, 0x107, 0x70bd2b, 0x0, {0x4, 0x7c}, [@nested={0x4, 0x2fc}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x6, 0x0, 0x0, @pid}]}]}, 0x24}, 0x1, 0x0, 0x0, 0xc000}, 0x4040)
socket$nl_netfilter(0x10, 0x3, 0xc)
openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'team0\x00', <r3=>0x0})
sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="5400000010000504fcfffffffcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0255040004000000240012800b0001006970766c616e0000140002800600020002000000060001000200000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r3], 0x54}, 0x1, 0x0, 0x0, 0x4001}, 0x0)

717.278564ms ago: executing program 2 (id=4432):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000003880)=@base={0x1d, 0xffff7fff, 0x6, 0x0, 0x330, 0x1, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x3, 0x2}, 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000003900)={&(0x7f0000000040)="7f6c700252901afd41a550e9d0a2cdd62a53f1b76f820b48d53ff8f78e96e42ebcd3cc37d7c769f86ae8ab91f3114bc593befd2815dab4c962653e5939b0da5f8454d5416f036250db88", &(0x7f00000000c0)=""/156, &(0x7f0000001880)="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", &(0x7f0000002880)="fb11ddd0ca54d24129e4192c831b734a5d38963cf6fe997a6aadb688f6495a6e96ae582909c4413548c3feae6445960e7c8217004156434d689c38129634af268f1065c016d6f806fa411493958c996c7387e885768b8c44df84093281322733c0420da2af2674c4440218568bdc861f1c87c305c80a744a66243e98229dddb85401d9ed7f1ac1ceca21b66b1e76792c742352031a4e1334d28e1ac56ad7c28dad71ba2de3950907e9292a4e5cd6e079ea280cdd7ff8ea6e9cfa431c4f1f0cc5c0d6d3dff6968d2f92f4ee60b384b4abfe368605107806f810b995c75ce88bdb8c4dc07c1f7a33e1259ff6eb32ea1f6d867a1daed7cbe4790f553dcfa78e1f6e31026ea68a5e3e2acb62cf227499911b1e4cf887f4c0c9d986c5045961cafc4e722592fe0e7d3f2cbffbcfcfd7aa81e72599c1e8fe021473a876d9ee64dbafcfe4af085b33ae9a575551e76cbe673635a403b2490b1f759249f8ed0e37d7c348f5614b74e89ead5667583fdf61c4a39893194d2cb1a7617eab8eae1c1543523ddfd48304ef26cee3e60656fbca260e810fdf081d4414c711365d1fe6a9841ec9c6125ec192b10ff9503827a5ffaf7e87aa4396bf9f9dc02838c4965425b6238bea9bd0473f5dcd03d7642e1e1247eb771e19633929e54d84b56a0f9f043cf4e48631a284d28cf26ae598c199c102d3681d956b2536986ed3d8147b33ef21dee3b11a6983bf897c40a251bca0e447fa35f4b9f57107354afb8074b4f5f2e76a12997b298be95af688d23d132f09eed79a7abd6a366d62efe8ac0c5bafc4e188d9ea0a0ec25ef8294a8f07f51af1e44c79490570e7b0af486f72edc14ff08408314682d37d9edd619f7663257129ab2120808c9d4173811918041ee03528bc323946ec4356f0f3dca941aa3c1262ab51cfc0f6d5c55b3274377f1e18ec2f7a4c9d92759f1ff43c1ac2534bf0b57242f19250ae98d54d1ef6ef7d596ba8d826e23ecab7e646e61462052b501b2130abd64012aea19951b4a7342815fc50bbf0004078f807e354eab318a66bd62e167e686907d935bcd2e5c0c5f9ff5e2c71839080dad8c24ebb40a057fd0263d80acf9bc80bbef8e87baaf8193be66e0bc0f00dba0bc899eb079464ddef6ed46779a79269481f813a03f053064168046f1795c963e83b3989b0a0431487a3f78d99e44e0f5407b9e58d437138a0ccd79da911527d7bb8abfb45efd914d2411036e8819f277d3e0ac83e67b7e8657bbd863b25f99346138aacbeb2add914d3edb7dfaaa357d207d44159046685201b98a1ed117b357ec8520873f58ac989668ad75466aff1a144beab3f69cf64ba4159288c358be7f39b238074fa755d47bc38cd6c7bbe765817e397ed47920e93d96d316583e9b51496b391c020978e3b7e11c776ca720f1f81164bf71cfcea75c6527fb334472f7b669ac76ee2de10fd21a45ddbf00b3ac4709761ec7c68d91c9356888e2d5b8664dc05384549aecf7d69048052ac672bd46f01c2d054181a48ff0ed9a46e8b199beba453c6f65b389f0302c672eafde7f9536170221f741b2903d7e7af78c7002abe8a786f0a83148a5d6dbbe4a34647377029b23190ea5a888637031d539439a2a7c9f42234ef8a2679aac67512c07451b049f80ead9a5ae56f83b29868848e62e0c93239834ff68c163689853a8ac53aefb002b7bc64fcb74bb67b5c5d97f57474c25d89a00946c8dfb282d3ae560c7391dd96028d13797b27f261899fb505629c6ed48acaf1d4b8d0ebcfdcb752a9ace95b0ec3345717ac536b4141c3680485bfa00a8812de5036657bc4c2a4c797de143ce7e664d25c6a69ca7d84be2fd5f2aab77e764f81932a37b58734656e6e34067657eced7dd6e57ab9c07153ece024dc5256ad846dbf861e2d24570dd793f2d0a8773887bb5538fd30744a026bd7bfbba21cb0c376711d8cdce1b74a41d3be22a706236723bffaf8692dabf15e510fd05b3046966ddac85dedb0aab0bcdc5923e1cde4763b31f32be9c25b3e76a8af8a3afa9952c222fedcfd1d96e778d9951bc65776abbcf0c264b3df9bd8b8057de6ebf5f290d0363ec7819ffcfb8515337e3d00c440896fc18566eea8cc429c1ffd3e9b49b066274c69dfd20b2df7870c36dec8d8f14f12f05071d9e158ecd172fef2cf034efee17e372bc0a7f0b50949446adf7458779891908d08f94e8bbb330195b0e25bc11918a23637f8423588edd642a4c5085d156c98681a0a1d1a8204e7973677837bb855f642308ae3630b623a284a72aa6fe285d89de0599e3c53fa8d98165a1798b976dd5b0b65553d2f48571d8f98199c920573156b0e13d0a6b0c45aed4fd137a128fe79bcd9131d32c011932c855fb0b5d9d636921f36ca57c7fe76a8c440aeda34f6f15bad59256ffc10fa5c190d6deb26d5c4ac955ee7a29720943561fac0474d301f9883e11fef76a6981c86dcea59bd75cb9ef2913528bdfd726035b4caafe96c4bdb016940934d69f64d49e40b4b96d01b783a90bb5968d669184b27e7db2826daf7136c1d27c12201a98b684bb52c34b2871e3fe6297e0ba1f3807d9e3f78441361b64f5aff4c1098973df6d43d410a04c0d6ad4897245baacc6eb7dd15e5586845d15dc7c66c5ff55b6bcf9b280cc13883f3f2e7e8cb0244b05d50faa548009c608520361b6837757f7a2c730222405adfca942b30d9ffd593de1aacc6cabafb49d07c8105ac261b46dacda71c1be2bfea0fc5f4420f136741b0f21e36d307fb8d9ff6cabc286f75af307f95e6d8646a3c5e1830e52b9f2dab1f907f8a7802b67bf6d731a5c53f26b79d85b9ba3fb75ecb8ae1332ec0d1d7dfb2f3b7b3b6aa26754faf6d8e4b9ecb57d670e5bedbd22fa7197712f01d87648f9f0b06092893edb25fb36951742f2edfc40817aa3fdc0675cfcc719a0dac18f33a5c9e897dadd4af83a35519a7bb0c663409ed60c4de32bc2df8ec7afd8bace247a41d21a621dd10edcd3554ce032482bebdcace665732499dbe2f39c45e2ff9a969b0195f3882df74a9fb302d35e2b809d4e98c35d60896ae11db691dfde758db3c468ca559775222ff1c19071ca39b9c3b2f195f32d50666eaff86ec435d92ca5685fc135e1249ce72d1567c375ed9eb1fd5a30e71e8542bdc4ac54ac186cfc7c8380bc43370d0929c48793c482ec5c4bc2384fe8d6dc58ec77de269202c7688d426e1b9b97337dfa814f43f53fd5d3e63a8908aed3d45ac1906358cc2478f97854b1ab4cd2edc003fe70f0018e47d9d0cf72ddeed3f821047560171086590d9844f65da5f748956efbbe841a6c99ecf25b65cff484cc740b9cc12171a1b411affb9d6cc10b934256e8c39e3f3d8f5c652f0b3f1c29917a0a9269e2b371b6faaa599f3f5414e45b5bbe6f05cc508ba61f41fdc4d11bfa01f5ad27a3cce296236a71361d14937bfe60810287ab694254eaf798897a9194dff6a974174b1e912537a511572c778a7642db06ce6e29ec862657e92be4be1063bb55b9c59c0e7bc2ae6c51da4abd16d7561f8b2fcbf4001fc3bca5b4c1e133b64bdcc227912db0de07183ed3efad63d4210cc2908846606432ff142c378a482fdd3ea2307a794ae505d997c98857add3c76d62fa50272770f2c6b237f1f098df5312412ae2dc3040d1c97702f9468365942ed1b4098bf0215923f8e1c382aff6b8a1e7bb918867c9286d86c0725be9c76ae4717b1e371f1b200bd94a9fcb8d3ab385fa9c147837701cd5b1947de74f9cb0afa9acd5917df77c14fd9cffbb61e112755f49c75b84217007e9c8a22c1434474747a3548355d6c2408d840040565b8d2830db32698dcc96bd120a974b9071a35bf65449834a7cf1d48b86ca4111565936774cb15db4831127fddca402b56af37e688d23b79f1901373faf3ac41807e51cb15afe3171c3d42c870b5c370353a81d6d33e1dad78490f8ae22014003d274196b96d6617315dc92c05a0d5c272f5cf2a665a668080cd2500a8ed80daa6ba863b20f02bd2393f48383057efef9b293dab615addf387c130a196fd9c59f7fdd724563b6d0e47d73c74f8488f7009a7807e5ecfb776c4df3a176359446a6ab57de3d4daf8720876fd1a7162d7d9b81292475fc1a6c52084f9fa3a0687618540210b6ba332eaf163c627293844850d0dcd0f979b65138867cd5c7de5d7e902fc10878c94518a505c26fad4e9f9382ad4440c66018b1c5e2fba1fc3e2438c5ab041d3ea9d6008de4c68103df9bbeac7d04c83c33ad3cf3d3d51efcdef8ae14ab081b12256fb9daf98a47544432a6c27898f7a45cb440865cbb7ca5f1ace11709fd2c34b85272f00f29a25fdaa98bb646ad8ae7c9b0c2f7997db5bea5082dbfd28506b83274222ab669242a553bfee5008b23937e0312cce750aa3844e6b2b5359f660247336ead4f8441edf90d4d99b08ca012ddba2745277c97f3871ec126edd91a386056466c62278b7b0e8d421a7e18cac88d64d708135e22199906b65ceea37a4f68d85abd33d1b6929ce6fbebbc72d3d4c046235ff84a35543626343f1972b49c9b021e2a60f403a63a2a3735fb04428386f06433c501abba3d0a1cde46233eeceae84031d2c8bd366a2563c5864aadca144b44080a09b41e039afd9fcef26402038f215e73dbbed79efb1cd25bf25fbe76b8c590ad4a07db548498f24fa0c9d2d6c6321d2d19dd774d4d4d52ca65e3707e4b9cefe1e3a5292a2bbad21f7d24d79917754618c16b9262a7bd98b340ed93dbea033b3bed98d3552943f6da1d3c7e91bf84d6a113d7b5948bfa066d530ca9e4221ae33e483273ef4901101dd9e836e93f3d4d11ba3ce1f0d335f083d07f8feec86e433eb2221a430c37adb2d1cad9db4a987b0c96d12798980068e0c9599ffd3810c6c03deb166c62866bc93eb8479b912aa0d3bf89c9dd3d26cea71158a188126e5c1e127a393a70d0e28dc94180331e10fba3a6b8b1d7ba95adf76aa93b07574a5871626c5d9ee03db7d796f167fd42ea5a447c7c57a25bebde7caffbddb854c7b7db49a39d251d8b3ca3646b19038f6dcb630ce7566ae8173646806729eb988c2508cf060bab7612e866d7949d468ed981a672f784b4d8c837e6d7b95874c61b592b27be4a9b00bc68a0ce53130395c50cc57331ed160bebcc8fc1b19932d245e1922dc9c9528592f3f38987c50c57122a1ce0980d1d6aff57cd98c1b1f7ac36d6cac778d1ea2e9318759a88a1f410f314bc62dc874641f13828d67548dcee078fcbb6df261e4b5d360856cba0d36be5505b021be413ba0c46e869419601b2d6421d6ba300d8ae5404a7c159b8f7ce7ec073a98d78c68c9b5efb5891cef51a163449d5b051c88e07844171ba021352047e3a280509448acbfa3abb7bc1ae1092e2a479c0b27dd68b0541213c96efc68f28abdeefddc76c438630e5f7e20967b322cd0ec7246077b65d69756d52123bda6eedc5f570210f3b99230491a8e89a86d39b6a910b1fb278972a4ad9bce7a6248f34d9ff5d35a7e3185af08cc9dbc9266246dd5e8671af0e2b6d59a4985f74ff62fb6f9517169fe85d69e6fa0610a947041db219b228c83d0ed4e2605ad97cf24f983659db89a7b74669632e649c074c2f02554631a09a38cb456555070851c4a8a3936c63a20841ba990500bfd2ee5f23988d75fb2d24da1a20d0a02ad54f0fe80c4a4da3e41e9ed7d5274138815611bd82a5b3d084fe2a5e30c6226d199d8522db2b0d48f9c8f6f85dab01b74a2418c4bc254e716bcaf68528f2f3075", 0x40, r0, 0x4}, 0x38)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={0x0, 0x84}, 0x1, 0x0, 0x0, 0x2000c851}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000ac0)=ANY=[@ANYBLOB="b700000081000000bfa3000000000000070300000cfeffff720af0fff8ffffff71a4f0ff000000002d030000000000001d400500000000004704000001ed00007203feff000000001d44000000000000db0a08fee10000007303000000000000b500f3ff000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e96753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b393cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c7bc46dd12305a1ae9dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ad1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef67"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
r1 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x1, @empty, 0x4000ca}, 0x1c)
recvmmsg(r1, &(0x7f0000002e80), 0x4000071, 0x830b, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
sendto$inet6(r2, 0x0, 0x0, 0x4098884, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c)
sendto$inet6(r2, &(0x7f0000000040), 0x3000, 0x0, 0x0, 0x0)

630.148328ms ago: executing program 4 (id=4433):
r0 = socket$netlink(0x10, 0x3, 0x6)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r1 = socket$netlink(0x10, 0x3, 0x6)
bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000100)=0x1800, 0x4)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001cc0)=ANY=[@ANYBLOB="ac0100001700010000000000000000007f0000010000000000000000000000000000fefffffffffffd8000000000000000000000000000bbac1414bb000000000000000000000000ffffff2b6b57a470b83fce00000000004e210000000000000000006400000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc0200000000000000000000060000000000000000000000000000000000000100000000000000000a00802000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000200000000f9ffffff00000000000000000000000084000500ffffffff000000000000000000000000000004d33c0000000a00000000000000000000000000000000000001053500000200ac0003000000010000000900000000000000000000000000000000000001000004d56c"], 0x1ac}}, 0x0)

628.755883ms ago: executing program 1 (id=4434):
r0 = socket$kcm(0x10, 0x8461871d1669dd29, 0x4)
socket$kcm(0x11, 0x3, 0x0) (async)
r1 = socket$kcm(0x11, 0x3, 0x0)
sendmsg$kcm(r1, &(0x7f0000000040)={&(0x7f0000000100)=@ieee802154={0x24, @long={0x3, 0x2, {0xaaaaaaaaaaaa0102}}}, 0x80, 0x0}, 0x20000009)
socket$netlink(0x10, 0x3, 0x9) (async)
r2 = socket$netlink(0x10, 0x3, 0x9)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000ed03014000000000000000000000000a14000000f9034c2319c67d42e594f54c80f0d4a454a48bfd8752ffff7f6d9a19b0fbf2085b2c947b0e30c0d35e00628788fc3c7315b72a637dba0a1b9e0f7fbec3bc1842e57cd7b523808b46038bbb1ecd07644455602b081bfa4bca0268af2404ca2aae9fb45ccd162d1b7926cf865e82d59dea87f7838fcdd2cfb3450e1d5e18bc6750356a7208b57b38459565a9a5a7f0860886bee6e4037069c9024abd5ed38d0ec5acf76bb35a963cc33fe19f74bebfc8f7788abd3dc4468f901af08af8817cf24abbec7d"], 0x28}}, 0x0)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000180)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha384\x00'}, 0x58)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000200)="2e8de698b61e701e312f0be3b332d85a0f879a7af8632227cfa5c5c7c153e11a87c22f27f3ad2a9e730149417c0710c2ab092287f15b684bc66187fb73fe5db5edd42cf0d932e114008277848a0622bf809bdc16475112c67755a99d07e29c24c81ae913c3fa6a032fd70cd965597454cb57", 0x72, 0x4010, &(0x7f0000000280)={0xa, 0x4e23, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7fffffff}, 0x1c)
r4 = accept4(r3, 0x0, 0x0, 0x80000)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000000)="ad00"/16, 0x10) (async)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000000)="ad00"/16, 0x10)
recvmmsg(r4, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0)
r5 = accept(r2, &(0x7f00000003c0)=@nfc_llcp, &(0x7f0000000440)=0x80)
r6 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), r2)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r5, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x3c, r6, 0x100, 0x70bd28, 0x25dfdbff, {}, [@ETHTOOL_A_COALESCE_PKT_RATE_LOW={0x8}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES_IRQ={0x8, 0x5, 0x7}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES={0x8, 0x7, 0x9}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES_HIGH={0x8, 0x16, 0x81}, @ETHTOOL_A_COALESCE_STATS_BLOCK_USECS={0x8, 0xa, 0x3}]}, 0x3c}}, 0x0) (async)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r5, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x3c, r6, 0x100, 0x70bd28, 0x25dfdbff, {}, [@ETHTOOL_A_COALESCE_PKT_RATE_LOW={0x8}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES_IRQ={0x8, 0x5, 0x7}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES={0x8, 0x7, 0x9}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES_HIGH={0x8, 0x16, 0x81}, @ETHTOOL_A_COALESCE_STATS_BLOCK_USECS={0x8, 0xa, 0x3}]}, 0x3c}}, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x21, &(0x7f0000000100)=[{&(0x7f0000000040)="89000000120081ae08060cdc030000017f03e3f7000000006ee2ffca1b1f00ff0f00000000000050375ed08a56331dbf9ed78105001ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00010004080c00bdad01409bbc7a46e39a54cbbda812176679df069163ce955fed0009d78f0a947ee2b49e33538afaeb2713f450ebd010a20ff27fff", 0x89}], 0x1, 0x0, 0x0, 0x7}, 0x8084)

431.033672ms ago: executing program 2 (id=4435):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
connect$inet6(r0, &(0x7f00000004c0)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x10d}, 0x1c)
syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/net\x00')
bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000002740)={&(0x7f0000002480)="e9b2a8b398655f33b294a60e540376dc65d657e2458ac8607489f2a444e5691442f965dfb7a41cf0d1499a8c1eeaaa5fba4e9e55126dbab4cfada5c34265a82006547618216070861c58e4c44c0db08f25e8b1909f70cf2ccf000df6606be9000f0f1d1d868bb49758d0c3a6da1b068d8513b541eb7e7c014618a0317a997a7626eaa9b9fb635cf783bbbb396f0d47c5579980c853425dc7bb671163d3ab6f45a477fa7b326cbb7a6317902c80d50b68371827ea0186a83a5df4736e76e5469cbf807c143d4cb0d2fc0da138d2345c9163", &(0x7f0000002580)=""/77, &(0x7f0000002600)="cb961bd88706f33111538709c35711d970e06ced2c00760fd16d842cbdf9d483e0293621a02f07ee989ac2a3cec8a27d1ba166", &(0x7f0000002640)="42e7d6e5ebe5a9e9a0aab861485c750b55dceb7054dbb25b51a044f73e48e2d2fcb37c0d7e3e71fa3c9c69c469c264bf662120c5030f300fa216445d692554d917f480f71144c3b0fc625ad6004a437b8431cb629f6e7a66319b7445132355ec70fb699138b1078267ca9be6b426f37ab4b15d3e39ca564d188cf1c8c89e22a2a1de1cf91b939623ba5191e9523ac62316105bc088a758938c7ea58b2dd72652125d468a2946b1", 0x4e3, 0xffffffffffffffff, 0x4}, 0x38) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000040)='syzkaller\x00'}, 0x94) (async)
write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000200), 0x12) (async)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1d, 0x5, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x1f4, 0xd, 0x0, &(0x7f0000000100)="ff412ffc886496c78100000000", 0x0, 0x20303, 0x300, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x2}, 0x50)
ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454ca, &(0x7f0000000100)=ANY=[@ANYBLOB='..'])
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xa, 0x31, 0xffffffffffffffff, 0x0)
r3 = socket$netlink(0x10, 0x3, 0xf)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r3, 0x10e, 0x1, 0x0, 0x0) (async)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000080000000b"], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000700)="33ac346d28", &(0x7f0000000800), 0x4eaa, r4}, 0x38)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000001440)={'syztnl1\x00', &(0x7f00000013c0)={'syztnl0\x00', <r5=>0x0, 0x4, 0x6, 0xb, 0xff, 0x3, @mcast2, @private2, 0x20, 0x20, 0xd, 0x9}})
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x2, 0x14, &(0x7f0000000880)=ANY=[@ANYBLOB="1800000003000000000000000040000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000005000000850000000600000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', r5, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r6}, 0xc) (async)
getsockopt$netlink(r3, 0x10e, 0x7, &(0x7f0000001480)=""/42, &(0x7f0000001500)=0x2a) (async)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001300)={r2, 0x0, 0x0, 0x0, &(0x7f0000000040), &(0x7f0000000080), 0x0, 0x0, 0x1000, 0xe4, &(0x7f0000000200)="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", &(0x7f0000001200)="672c4d07c99f57acd5ccc31a7367c3a51025a5f1be908e7f1bef71069b626f9609495b55719b8053449e809341b4be997a32ac14cb6359b17b16bfd02cf6ebd546d2cdc4d67d883d168d792293564b17bf6dc3000d83b061013d5a1502e2d38dca449cf491bf9f9facfdbe636f4c190c6d2a7f7d8a285e472bd4d84f6ed262de21a2531123e640657a96ce6ef46f9cae6dc60055c0cc98fe5a021fd8492e6fa8c3f57291b93d67868d02546f0d9c1d9ce43ef608d665411911bc4c58502c3f7678ec17a45b67387cb5b929fc77a425bb5c06a7f0a459f2ae33864cf7e393c14f02f54605", 0x0, 0x0, 0x5}, 0xfffffffffffffd69) (async)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0)
r7 = syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/time\x00')
mkdirat$cgroup(r7, &(0x7f0000000000)='syz0\x00', 0x1ff) (async)
r8 = socket$l2tp6(0xa, 0x2, 0x73) (async)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r9, 0x0, 0x44000) (async)
ioctl$PPPIOCATTCHAN(r2, 0x40047438, &(0x7f0000001380)=0x4) (async)
getsockopt$inet6_buf(r8, 0x29, 0xca, 0x0, 0x0) (async)
sendmmsg$inet6(r0, &(0x7f00000003c0)=[{{0x0, 0x0, &(0x7f0000000240)}}], 0x1, 0x4400c060)

340.06766ms ago: executing program 0 (id=4436):
r0 = socket(0x10, 0x803, 0x0)
r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000100), r0)
sendmsg$SMC_PNETID_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x38, r1, 0x400, 0x70bd26, 0x25dfdbff, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x24000090)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, @loopback={0xff00000000000000}, 0x1, 0x0, 0x1, 0x1}})

339.34846ms ago: executing program 4 (id=4437):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000740)=ANY=[@ANYBLOB="48000000090603000000000000000000050000000900020073797a3100000000050001000700000020000780060004404e21000005000700ff0000000c000180080001400a01010107e24eef21b016a3d14b9913d9f1f7601732d31824829f06948e7d32b3a23fd9407100ea6c8648ca351367610b1c63d27804644728158437f2d36dd11712329f7848a9f823c7e3f626d752bc009b8ad23d2a372595b2e7471a1c76551133e122ba1ca530ba10c7ddcef354a35f2f25b7e7e9c211ffba17dae31826e88c3a624883ea6503d4c9377b518f9e5742e98f080c57a82e59b4882a139811f86f9f641d5021189c6a4f7c266f200f"], 0x48}, 0x1, 0x0, 0x0, 0x10004893}, 0x80)
r1 = socket$inet6(0x10, 0x3, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) (async)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000c00)={'batadv0\x00', <r4=>0x0}) (async)
r5 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$bt_hci(r5, 0x84, 0x7d, &(0x7f0000000840)=""/4127, &(0x7f0000000000)=0x101f) (async)
sendmsg$ETHTOOL_MSG_WOL_GET(r2, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000c40)={0x34, r3, 0x1, 0x70bd28, 0x25dfdbff, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x2820142b6b7ef621}, 0x40000) (async, rerun: 32)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6) (rerun: 32)
sendmsg$nl_xfrm(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001940)=@newpolicy={0xb8, 0x13, 0x100, 0x70bd28, 0x25dfdbfd, {{@in=@multicast1, @in=@broadcast, 0x4e20, 0x4, 0x4e21, 0x1, 0x2, 0x20, 0x20, 0xff, r4, 0xee01}, {0x0, 0x5, 0x3, 0x7e, 0x1, 0x1, 0x4, 0x1}, {0x6, 0x5, 0xb0f, 0x7}, 0x7fffffff, 0x6e6bba, 0x2, 0x0, 0x2, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x44004}, 0x0) (async, rerun: 64)
socketpair$unix(0x1, 0x1, 0x0, 0x0) (rerun: 64)
r7 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000001c0)={'syz_tun\x00', <r8=>0x0})
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x41, '\x00', r8, @fallback, 0x0, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000a479df"], 0x0, 0x80, 0x0, 0x0, 0x0, 0x2c, '\x00', r8, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r9, 0x0, 0x0, 0x0, 0x0}, 0x94)
r10 = bpf$PROG_LOAD(0x5, &(0x7f0000001880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r10, r8, 0x25, 0x0, @val=@netkit={@void, @value=r9}}, 0x1c) (async)
syz_emit_ethernet(0x2596, &(0x7f0000005100)=ANY=[], 0x0) (async)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000380)=@newnexthop={0xc8, 0x68, 0x200, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x1, 0x0, 0x20}, [@NHA_RES_GROUP={0x3c, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x9}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x64b}, @NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x7}, @NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x6}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0x4}, @NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x7}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0xffffffff}]}, @NHA_BLACKHOLE={0x4}, @NHA_RES_GROUP={0x2c, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x1}, @NHA_RES_GROUP_BUCKETS={0x6}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0x4}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x5d57}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x2}]}, @NHA_GATEWAY={0x14, 0x6, @ip4=@multicast1}, @NHA_ENCAP={0xc, 0x8, 0x0, 0x1, @SEG6_LOCAL_NH4={0x8, 0x4, @loopback}}, @NHA_GROUP={0xc, 0x2, [{0x1}]}, @NHA_ENCAP_TYPE={0x6, 0x7, 0x4}, @NHA_OIF={0x8, 0x5, r4}, @NHA_ENCAP_TYPE={0x6, 0x7, 0x7}]}, 0xc8}, 0x1, 0x0, 0x0, 0x90}, 0x20000800) (async)
r11 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r12 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff)
r13 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r2)
r14 = socket$nl_route(0x10, 0x3, 0x0)
r15 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r15, 0x8933, &(0x7f0000000000)={'bond0\x00', <r16=>0x0})
sendmsg$nl_route(r14, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=@newlink={0x4c, 0x10, 0x403, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20101, 0x1c564}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_MODE={0x6, 0x1, 0x2}]}}}, @IFLA_LINK={0x8, 0x5, r16}, @IFLA_MASTER={0x8, 0xa, r16}]}, 0x4c}, 0x1, 0xba01, 0x0, 0x40d0}, 0x810) (async)
sendmsg$NL80211_CMD_LEAVE_OCB(r11, &(0x7f0000000500)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x14, r13, 0x800, 0x70bd26, 0x25dfdbfc, {{}, {@void, @void}}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x811}, 0x8100) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000001a00)={0x4, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="1802000003000000000000000000000085000000a000000095000000000000001f4a4b535644698f12dc939f95a296"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$GTP_CMD_DELPDP(r11, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x40, r12, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_TID={0xc, 0x3, 0x3}, @GTPA_FLOW={0x6, 0x6, 0x2}, @GTPA_I_TEI={0x8, 0x8, 0x1}, @GTPA_FAMILY={0x5, 0xd, 0x29}]}, 0x40}, 0x1, 0x0, 0x0, 0x4080}, 0x4)

80.788339ms ago: executing program 0 (id=4438):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0x25, 0x1, 0x2, 0x10001}, {0x7, 0xd9, 0x9, 0xfffffff7}, {0x84, 0x9, 0xff, 0x3}]}, 0x10)
r1 = socket$nl_audit(0x10, 0x3, 0x9)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000900)={'bridge0\x00', @remote})
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0xe, 0x4, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x100}, 0x50)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r4, &(0x7f0000001380), &(0x7f0000000000)=""/10, 0x2}, 0x20)
ioctl$SIOCSIFHWADDR(r3, 0x89a1, &(0x7f0000000900)={'bridge0\x00', @broadcast})
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$team(&(0x7f0000000100), r5)
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000040))
r7 = socket(0x2, 0x3, 0x1)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'team_slave_1\x00'})
r8 = socket$inet(0x2, 0x2, 0x1)
bind$inet(r8, &(0x7f0000000000)={0x2, 0x6e24, @empty}, 0x10)
r9 = socket$inet(0x2, 0x2, 0x1)
bind$inet(r9, &(0x7f0000000000)={0x2, 0x6e24, @empty}, 0x10)
r10 = socket(0x2, 0x2, 0x1)
bind$unix(r10, &(0x7f0000000000)=@abs, 0x6e)
r11 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000240)={'syzkaller0\x00', <r12=>0x0})
sendmsg$nl_route_sched(r11, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r12, {0x0, 0xffe0}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x20000000, 0x8, 0xfffffffb, 0x2, 0x2}, 0x5, 0x1, 0x80000000, 0x2, 0x8, 0x17, 0x2, 0x1, 0x0, 0xe, {0x0, 0x7fff, 0x22, 0x3, 0x0, 0x4}}}}]}, 0x78}}, 0x0)
sendmsg$nl_route_sched(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newtfilter={0x38, 0x2c, 0xd27, 0x170bd2b, 0x2, {0x0, 0x0, 0x0, r12, {}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x8, 0x2, [@TCA_FLOW_ACT={0x4}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x884}, 0x40)
sendmsg$TEAM_CMD_OPTIONS_SET(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)={0x20, r6, 0x1, 0x70bd30, 0x25dfdbff, {}, [{{0x30, 0x1, r12}, {0x68}}]}, 0x20}, 0x1, 0x0, 0x0, 0x20008494}, 0xc081)
r13 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r13, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x25dfdbfe, {}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0)
r14 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r14, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000040)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a00100000000280", 0x2a}, {&(0x7f0000000400)="03000000", 0x4}], 0x2}, 0x0)

0s ago: executing program 4 (id=4439):
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x4001, 0x3, 0x290, 0x0, 0xb, 0x148, 0x0, 0x148, 0x1f8, 0x230, 0x242, 0x1f8, 0x215, 0x3, 0x0, {[{{@ip={@local, @dev={0xac, 0x14, 0x14, 0x30}, 0xff, 0x0, 'batadv_slave_0\x00', 'macvtap0\x00', {}, {0xff}, 0x73, 0x2, 0xa}, 0x0, 0xc0, 0x128, 0x0, {0xff0f000000000000}, [@common=@inet=@l2tp={{0x30}, {0x1, 0x0, 0x3, 0x0, 0xe}}, @common=@socket0={{0x20}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x9, 0x7ff, 0x5, 'netbios-ns\x00', 'syz1\x00', {0x1}}}}, {{@uncond, 0xec010000, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x4, [0x1, 0x6, 0x4, 0x5, 0x8, 0x4], 0x0, 0x5}, {0x0, [0x1, 0x0, 0x2, 0x0, 0x3, 0x2], 0x0, 0x7}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2f0)
r1 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4)
setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f00000003c0)={0x3, &(0x7f0000000100)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x48, 0x83, 0x0, 0x6}, {0x6, 0x4, 0x60, 0x5}]}, 0x10)
syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b142b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c04594282423424d00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2003}, 0x94)
sendmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x4060019}, 0x20000041)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000140)='veth1_to_bridge\x00', 0x10)
getsockopt$sock_buf(r2, 0x1, 0x19, &(0x7f00000002c0)=""/245, &(0x7f0000000280)=0xf5)
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x9}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)

kernel console output (not intermixed with test programs):

[ T8721] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  434.188830][ T8721] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  434.230645][ T8721] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  434.454389][T17503] netlink: 'syz.1.3053': attribute type 3 has an invalid length.
[  434.486389][T11092] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  434.508864][T11092] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  434.548193][T17508] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3055'.
[  434.629748][T11092] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  434.661787][T11092] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  434.865304][T17515] netlink: 'syz.0.3057': attribute type 1 has an invalid length.
[  434.886998][T17522] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3059'.
[  434.967040][T17526] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3058'.
[  435.200439][T17538] netlink: 'syz.0.3062': attribute type 1 has an invalid length.
[  435.370974][T17540] bond1: (slave veth3): Enslaving as an active interface with a down link
[  435.507989][T17538] 8021q: adding VLAN 0 to HW filter on device bond1
[  435.600563][T17542] syzkaller0: refused to change device tx_queue_len
[  435.656266][ T5620] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  435.676919][ T5620] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  435.687231][ T5620] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  435.698563][ T5620] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  435.709397][ T5620] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  435.820111][    C1] net_ratelimit: 1 callbacks suppressed
[  435.820131][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  436.382765][T11090] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  436.394236][T11092] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  437.260207][    C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  437.740223][ T5620] Bluetooth: hci0: command tx timeout
[  439.064398][T17582] __nla_validate_parse: 3 callbacks suppressed
[  439.064420][T17582] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3073'.
[  439.095276][T17584] netlink: 'syz.4.3071': attribute type 23 has an invalid length.
[  439.136876][T17586] ipt_ECN: cannot use operation on non-tcp rule
[  439.157309][T17587] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3071'.
[  439.204893][T17589] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3074'.
[  439.267137][T17594] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3071'.
[  439.283684][T17589] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  439.320870][T17594] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3071'.
[  439.353466][T17589] batman_adv: batadv0: Removing interface: batadv_slave_1
[  439.661269][T17551] lo speed is unknown, defaulting to 1000
[  439.694036][T17606] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3077'.
[  439.707997][T17606] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3077'.
[  439.820207][ T5620] Bluetooth: hci0: command tx timeout
[  439.878629][T17606] bridge0: port 2(bridge_slave_1) entered disabled state
[  439.886497][T17606] bridge0: port 1(bridge_slave_0) entered disabled state
[  439.952971][T17618] netlink: 'syz.1.3082': attribute type 11 has an invalid length.
[  440.115784][T17606] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  440.134008][T17606] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  440.226800][ T1317] ieee802154 phy0 wpan0: encryption failed: -22
[  440.355924][T17551] lo speed is unknown, defaulting to 1000
[  440.356260][ T8721] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  440.428008][ T8721] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  440.450552][T17551] lo speed is unknown, defaulting to 1000
[  440.451977][ T8721] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  440.489878][ T8721] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  440.530774][T17625] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3085'.
[  440.583907][T17631] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3087'.
[  440.616928][T17633] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3087'.
[  440.644863][T17634] nbd: must specify a device to reconfigure
[  441.073564][T17643] veth11: entered allmulticast mode
[  441.087125][T17643] bond18: (slave veth11): Enslaving as an active interface with an up link
[  441.510386][  T448] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  441.519656][ T8721] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  441.900223][ T5620] Bluetooth: hci0: command tx timeout
[  442.137838][T17715] 8021q: adding VLAN 0 to HW filter on device bond2
[  442.346492][T17551] bridge0: port 1(bridge_slave_0) entered blocking state
[  442.359978][T17551] bridge0: port 1(bridge_slave_0) entered disabled state
[  442.386073][T17551] bridge_slave_0: entered allmulticast mode
[  442.406237][T17551] bridge_slave_0: entered promiscuous mode
[  442.429635][T17551] bridge0: port 2(bridge_slave_1) entered blocking state
[  442.447845][T17551] bridge0: port 2(bridge_slave_1) entered disabled state
[  442.479420][T17551] bridge_slave_1: entered allmulticast mode
[  442.488857][T17551] bridge_slave_1: entered promiscuous mode
[  442.666485][T17551] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  442.707689][T17551] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  442.874571][T17551] team0: Port device team_slave_0 added
[  442.905151][T17551] team0: Port device team_slave_1 added
[  442.966856][T17753] x_tables: duplicate underflow at hook 1
[  443.037955][T17551] batman_adv: batadv0: Adding interface: batadv_slave_0
[  443.064611][T17551] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  443.149243][T17551] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  443.176846][T17551] batman_adv: batadv0: Adding interface: batadv_slave_1
[  443.192574][T17551] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  443.284715][T17551] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  443.339397][T17760] netlink: 'syz.0.3115': attribute type 1 has an invalid length.
[  443.420178][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  443.587978][T17760] bond3: (slave geneve2): making interface the new active one
[  443.615613][T17760] bond3: (slave geneve2): Enslaving as an active interface with an up link
[  443.707081][T17767] 8021q: adding VLAN 0 to HW filter on device bond3
[  443.748822][T17551] hsr_slave_0: entered promiscuous mode
[  443.769080][T17551] hsr_slave_1: entered promiscuous mode
[  443.788866][T17551] debugfs: 'hsr0' already exists in 'hsr'
[  443.815755][T17551] Cannot create hsr debugfs directory
[  443.982101][ T5620] Bluetooth: hci0: command tx timeout
[  444.124561][  T448] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0
[  444.135764][  T448] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0
[  444.206072][T17789] bond1 (unregistering): Released all slaves
[  444.402866][T17813] FAULT_INJECTION: forcing a failure.
[  444.402866][T17813] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  444.414506][T17809] x_tables: ip6_tables: ipcomp match: only valid for protocol 108
[  444.416910][T17813] CPU: 0 UID: 0 PID: 17813 Comm: syz.3.3124 Not tainted syzkaller #0 PREEMPT(full) 
[  444.416983][T17813] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  444.417016][T17813] Call Trace:
[  444.417037][T17813]  <TASK>
[  444.417059][T17813]  dump_stack_lvl+0xe8/0x150
[  444.417161][T17813]  should_fail_ex+0x40c/0x560
[  444.417251][T17813]  _copy_from_user+0x2d/0xb0
[  444.417324][T17813]  btf_new_fd+0x301/0xbb0
[  444.417399][T17813]  __sys_bpf+0xd2e/0xd90
[  444.417510][T17813]  ? __pfx___sys_bpf+0x10/0x10
[  444.417643][T17813]  ? __fget_files+0x2a/0x420
[  444.417772][T17813]  ? ksys_write+0x242/0x270
[  444.417840][T17813]  ? __pfx_ksys_write+0x10/0x10
[  444.417911][T17813]  __x64_sys_bpf+0xba/0xd0
[  444.417977][T17813]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  444.418044][T17813]  do_syscall_64+0x174/0x580
[  444.418115][T17813]  ? trace_irq_disable+0x3b/0x140
[  444.418188][T17813]  ? clear_bhb_loop+0x40/0x90
[  444.418261][T17813]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  444.418316][T17813] RIP: 0033:0x7fe718f9de99
[  444.418369][T17813] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  444.418419][T17813] RSP: 002b:00007fe719ed2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  444.418480][T17813] RAX: ffffffffffffffda RBX: 00007fe719225fa0 RCX: 00007fe718f9de99
[  444.418533][T17813] RDX: 0000000000000028 RSI: 0000200000000800 RDI: 0000000000000012
[  444.418575][T17813] RBP: 00007fe719ed2090 R08: 0000000000000000 R09: 0000000000000000
[  444.418614][T17813] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  444.418646][T17813] R13: 00007fe719226038 R14: 00007fe719225fa0 R15: 00007ffe0f2da328
[  444.418741][T17813]  </TASK>
[  444.876925][  T448] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0
[  444.892290][  T448] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0
[  445.086918][T17828] __nla_validate_parse: 10 callbacks suppressed
[  445.086939][T17828] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3126'.
[  445.146990][T17831] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3127'.
[  445.323188][T17828] tipc: Started in network mode
[  445.340064][    C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  445.344898][T17828] tipc: Node identity ac14140f, cluster identity 4711
[  445.369301][T17828] tipc: New replicast peer: 172.20.20.187
[  445.393332][T17828] tipc: Enabled bearer <udp:syz2>, priority 10
[  445.483968][T17843] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3130'.
[  445.661997][T17859] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3133'.
[  445.834283][T17861] syzkaller0: entered promiscuous mode
[  445.852122][T17861] syzkaller0: entered allmulticast mode
[  445.893136][T17861] rdma_rxe: rxe_newlink: failed to add lo
[  445.929507][T17551] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  445.941402][T17551] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0
[  445.980599][    C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  446.145480][T17551] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  446.181278][T17551] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0
[  446.341142][T17551] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  446.383311][T17551] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0
[  446.518932][T17890] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks
[  446.529376][  T808] tipc: Node number set to 2886997007
[  446.622977][  T448] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  446.715906][T17551] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  446.743512][T17551] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0
[  446.831772][T17901] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  446.859552][T17889] tipc: Disabling bearer <eth:syzkaller0>
[  447.262986][    C0] bridge0: port 2(bridge_slave_1) entered forwarding state
[  447.266034][T14392] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  447.270283][    C0] bridge0: topology change detected, propagating
[  447.271042][    C0] bridge0: port 1(bridge_slave_0) entered forwarding state
[  447.292348][    C0] bridge0: topology change detected, propagating
[  447.366799][T17920] syzkaller0: entered promiscuous mode
[  447.374278][T17920] syzkaller0: entered allmulticast mode
[  447.423562][T17920] rdma_rxe: rxe_newlink: failed to add lo
[  447.548755][T17551] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  447.563182][T17551] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  447.571677][T17551] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  447.600725][T17551] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  447.618338][T17551] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  447.664527][T17931] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  447.677206][T17551] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  447.711061][T17551] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  447.739193][T17551] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  448.000904][T17551] 8021q: adding VLAN 0 to HW filter on device bond0
[  448.026334][T17951] netlink: 'syz.3.3154': attribute type 9 has an invalid length.
[  448.047178][T17551] 8021q: adding VLAN 0 to HW filter on device team0
[  448.065394][  T448] bridge0: port 1(bridge_slave_0) entered blocking state
[  448.072649][  T448] bridge0: port 1(bridge_slave_0) entered forwarding state
[  448.174768][  T448] bridge0: port 2(bridge_slave_1) entered blocking state
[  448.182106][  T448] bridge0: port 2(bridge_slave_1) entered forwarding state
[  448.591613][T17971] syzkaller0: entered promiscuous mode
[  448.617769][T17971] syzkaller0: entered allmulticast mode
[  448.712371][T17971] rdma_rxe: rxe_newlink: failed to add lo
[  448.877133][T17977] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3161'.
[  448.974419][T17979] netlink: 'syz.0.3161': attribute type 3 has an invalid length.
[  449.032008][T17979] netlink: 'syz.0.3161': attribute type 3 has an invalid length.
[  449.073182][T17977] nbd3: detected capacity change from 0 to 63
[  449.130360][ T5620] block nbd3: Receive control failed (result -104)
[  449.245851][T17990] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3164'.
[  449.384778][T17998] netlink: 104 bytes leftover after parsing attributes in process `syz.1.3166'.
[  449.591570][T17551] 8021q: adding VLAN 0 to HW filter on device batadv0
[  449.603949][T18008] netlink: 'syz.4.3170': attribute type 1 has an invalid length.
[  449.626728][T18008] netlink: 193500 bytes leftover after parsing attributes in process `syz.4.3170'.
[  449.646593][T18008] netlink: 2060 bytes leftover after parsing attributes in process `syz.4.3170'.
[  449.772729][T17551] veth0_vlan: entered promiscuous mode
[  449.817328][T17551] veth1_vlan: entered promiscuous mode
[  449.927706][T18019] rdma_rxe: rxe_newlink: failed to add lo
[  449.958123][T17551] veth0_macvtap: entered promiscuous mode
[  450.008467][T17551] veth1_macvtap: entered promiscuous mode
[  450.106844][T17551] batman_adv: batadv0: Interface activated: batadv_slave_0
[  450.155503][T17551] batman_adv: batadv0: Interface activated: batadv_slave_1
[  450.177401][T18024] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3175'.
[  450.207015][T14392] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  450.238494][T14392] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  450.399968][T14392] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  450.418754][T14392] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  451.075003][T11092] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  451.124549][T11092] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  451.194600][T18045] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3181'.
[  451.232849][T11092] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  451.259286][T11092] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  451.349950][T18051] Bluetooth: MGMT ver 1.23
[  451.487009][T18067] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3186'.
[  451.586768][T18071] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3064'.
[  451.619167][T18071] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  451.695048][T18071] batman_adv: batadv0: Removing interface: batadv_slave_1
[  452.016782][T18083] netlink: 'syz.2.3192': attribute type 11 has an invalid length.
[  452.040037][T18082] netlink: 'syz.2.3192': attribute type 11 has an invalid length.
[  452.128827][ T5621] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  452.146845][ T5621] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  452.162782][ T5621] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  452.172759][ T5621] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  452.192286][ T5621] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  452.391285][  T448] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  452.524788][T18105] ieee802154 phy0 wpan0: encryption failed: -22
[  452.647685][T18110] netlink: 3 bytes leftover after parsing attributes in process `syz.0.3197'.
[  452.688919][T18112] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3195'.
[  452.798235][T18106] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3195'.
[  452.818940][T18106] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  452.849696][T18110] 0ªX¹¦À: renamed from batadv0 (while UP)
[  452.870631][T18110] 0ªX¹¦À: entered allmulticast mode
[  452.879087][T18110] A link change request failed with some changes committed already. Interface 
60ªX¹¦À may have been left with an inconsistent configuration, please check.
[  453.021046][  T448] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  453.256127][T18132] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3199'.
[  453.286549][T18122] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3198'.
[  453.445009][T18139] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3203'.
[  453.544221][T18139] bond0: entered promiscuous mode
[  453.570836][T18139] bond_slave_0: entered promiscuous mode
[  453.589039][T18139] bond_slave_1: entered promiscuous mode
[  453.612307][T18139] gretap0: entered promiscuous mode
[  453.619471][T18139] hsr1: entered promiscuous mode
[  453.626973][T18143] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  453.645252][T18143] netlink: 'syz.4.3204': attribute type 1 has an invalid length.
[  453.777546][T18143] bond12: entered promiscuous mode
[  453.798325][T18143] 8021q: adding VLAN 0 to HW filter on device bond12
[  453.812721][T18146] bond12: entered allmulticast mode
[  453.861120][T18143] bond12: (slave bridge8): making interface the new active one
[  453.868794][T18143] bridge8: entered promiscuous mode
[  453.876531][T18143] bridge8: entered allmulticast mode
[  453.885814][T18143] bond12: (slave bridge8): Enslaving as an active interface with an up link
[  453.897892][T18152] netlink: 'syz.2.3207': attribute type 1 has an invalid length.
[  453.907952][T18086] lo speed is unknown, defaulting to 1000
[  453.924048][T18152] netlink: 'syz.2.3207': attribute type 2 has an invalid length.
[  454.302044][ T5621] Bluetooth: hci3: command tx timeout
[  454.488416][T18169] netlink: 'syz.4.3211': attribute type 1 has an invalid length.
[  454.688147][T14392] dvmrp0: left allmulticast mode
[  456.025181][T14392] bond0 (unregistering): Released all slaves
[  456.043136][T14392] bond1 (unregistering): Released all slaves
[  456.063533][T14392] bond2 (unregistering): Released all slaves
[  456.083336][T14392] bond3 (unregistering): Released all slaves
[  456.115011][T14392] bond4 (unregistering): Released all slaves
[  456.135923][T14392] bond5 (unregistering): Released all slaves
[  456.152424][T14392] bond6 (unregistering): Released all slaves
[  456.174873][T14392] bond7 (unregistering): Released all slaves
[  456.192265][T14392] bond8 (unregistering): Released all slaves
[  456.214202][T14392] bond9 (unregistering): Released all slaves
[  456.241364][T14392] bond10 (unregistering): Released all slaves
[  456.262609][T14392] bond11 (unregistering): Released all slaves
[  456.283056][T14392] bond12 (unregistering): Released all slaves
[  456.304548][T14392] bond13 (unregistering): Released all slaves
[  456.322054][T14392] bond14 (unregistering): Released all slaves
[  456.338558][T14392] bond15 (unregistering): Released all slaves
[  456.359595][T14392] bond16 (unregistering): Released all slaves
[  456.386160][T14392] bond17 (unregistering): Released all slaves
[  456.390399][ T5621] Bluetooth: hci3: command tx timeout
[  456.408874][T14392] bond18 (unregistering): (slave veth11): Releasing backup interface
[  456.428233][T14392] bond18 (unregistering): Released all slaves
[  456.444803][T18169] workqueue: Failed to create a rescuer kthread for wq "bond13": -EINTR
[  456.448647][T18086] lo speed is unknown, defaulting to 1000
[  456.488300][ T5281] 8021q: adding VLAN 0 to HW filter on device eth1
[  456.505937][T18086] lo speed is unknown, defaulting to 1000
[  456.684707][T18204] __nla_validate_parse: 2 callbacks suppressed
[  456.684727][T18204] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3215'.
[  456.796186][T18204] batman_adv: batadv0: Removing interface: batadv_slave_1
[  456.835834][T18212] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3218'.
[  456.943218][T18212] veth1_to_bridge: entered allmulticast mode
[  457.202639][T14392] tipc: Left network mode
[  457.560451][T18240] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  457.996903][T18251] netlink: 'syz.2.3224': attribute type 1 has an invalid length.
[  458.154823][T14394] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  458.390892][ T5281] 8021q: adding VLAN 0 to HW filter on device eth2
[  458.461942][ T5621] Bluetooth: hci3: command tx timeout
[  458.780280][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  458.791699][ T6378] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  459.458977][T18307] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3236'.
[  459.575570][T18086] bridge0: port 1(bridge_slave_0) entered blocking state
[  459.594478][T18086] bridge0: port 1(bridge_slave_0) entered disabled state
[  459.623888][T18086] bridge_slave_0: entered allmulticast mode
[  459.647672][T18086] bridge_slave_0: entered promiscuous mode
[  459.756917][T18086] bridge0: port 2(bridge_slave_1) entered blocking state
[  459.798073][T18086] bridge0: port 2(bridge_slave_1) entered disabled state
[  459.826880][T18086] bridge_slave_1: entered allmulticast mode
[  459.863471][T18086] bridge_slave_1: entered promiscuous mode
[  460.081136][T18086] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  460.165165][T18086] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  460.210791][ T5281] 8021q: adding VLAN 0 to HW filter on device eth3
[  460.465851][T18086] team0: Port device team_slave_0 added
[  460.540075][ T5621] Bluetooth: hci3: command tx timeout
[  460.570259][T18086] team0: Port device team_slave_1 added
[  460.918586][T18086] batman_adv: batadv0: Adding interface: batadv_slave_0
[  460.930742][T18086] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  460.993184][T18086] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  461.025185][T18086] batman_adv: batadv0: Adding interface: batadv_slave_1
[  461.050343][T18086] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  461.095468][T18349] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3244'.
[  461.115700][T18086] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  461.184702][T18346] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3244'.
[  461.225753][T18358] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3245'.
[  461.254766][T18349] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3244'.
[  461.505635][T18086] hsr_slave_0: entered promiscuous mode
[  461.521537][T18086] hsr_slave_1: entered promiscuous mode
[  461.546068][T18086] debugfs: 'hsr0' already exists in 'hsr'
[  461.556939][T18086] Cannot create hsr debugfs directory
[  461.587459][T18363] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3248'.
[  462.034837][T18386] netlink: 204 bytes leftover after parsing attributes in process `syz.0.3255'.
[  462.620116][    C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  462.912047][T18406] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3257'.
[  463.494444][ T5281] 8021q: adding VLAN 0 to HW filter on device eth4
[  463.504405][T18426] netlink: 'syz.4.3262': attribute type 10 has an invalid length.
[  463.556773][T18426] dummy0: left promiscuous mode
[  463.805363][T18432] xt_connbytes: Forcing CT accounting to be enabled
[  463.827283][T18432] x_tables: ip_tables: icmp match: only valid for protocol 1
[  463.901735][T11092] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  463.937668][T18432] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3264'.
[  464.008257][T18438] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  464.541053][T11090] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  464.739653][T14392] IPVS: stop unused estimator thread 0...
[  464.791372][T18463] syzkaller0: entered promiscuous mode
[  464.811748][T18463] syzkaller0: entered allmulticast mode
[  465.296774][T18475] IPv6: NLM_F_CREATE should be specified when creating new route
[  466.813782][T18086] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  466.846690][T18086] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  466.863142][T18086] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  466.912815][T18086] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  466.939341][T18086] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  466.971453][T18086] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  466.993053][T18086] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  467.033155][T18086] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  467.061988][T18541] syzkaller0: tun_chr_ioctl cmd 35108
[  467.360766][T18559] IPVS: length: 232 != 24
[  467.455068][T18556] can: request_module (can-proto-0) failed.
[  467.461477][T18086] 8021q: adding VLAN 0 to HW filter on device bond0
[  467.630057][T18086] 8021q: adding VLAN 0 to HW filter on device team0
[  467.734206][ T8720] bridge0: port 1(bridge_slave_0) entered blocking state
[  467.741529][ T8720] bridge0: port 1(bridge_slave_0) entered forwarding state
[  467.865218][  T448] bridge0: port 2(bridge_slave_1) entered blocking state
[  467.872671][  T448] bridge0: port 2(bridge_slave_1) entered forwarding state
[  468.201254][T18586] netlink: 'syz.2.3292': attribute type 21 has an invalid length.
[  468.238269][T18586] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3292'.
[  468.249869][T18588] netlink: 52 bytes leftover after parsing attributes in process `syz.4.3293'.
[  468.262648][T18586] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3292'.
[  468.291282][T18592] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3292'.
[  468.643700][T18607] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3295'.
[  468.662033][T18605] netlink: 'syz.0.3297': attribute type 11 has an invalid length.
[  468.683198][T18605] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3297'.
[  468.921468][T18612] syzkaller0: entered promiscuous mode
[  468.938025][T18612] syzkaller0: entered allmulticast mode
[  468.948550][T18619] openvswitch: netlink: IP tunnel TTL not specified.
[  468.974566][T18619] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  468.992121][T18612] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  469.059715][T18611] tipc: Resetting bearer <eth:syzkaller0>
[  469.161268][T18611] tipc: Disabling bearer <eth:syzkaller0>
[  469.668024][T11090] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  469.711728][T18086] 8021q: adding VLAN 0 to HW filter on device batadv0
[  469.896735][T18086] veth0_vlan: entered promiscuous mode
[  469.942577][T18086] veth1_vlan: entered promiscuous mode
[  470.094027][T18086] veth0_macvtap: entered promiscuous mode
[  470.128912][T18086] veth1_macvtap: entered promiscuous mode
[  470.200358][T18086] batman_adv: batadv0: Interface activated: batadv_slave_0
[  470.263599][T18086] batman_adv: batadv0: Interface activated: batadv_slave_1
[  470.300749][ T6378] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  470.321518][T14394] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  470.340332][T14394] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  470.368839][T14394] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  470.390251][T14394] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  470.419590][ T5738] IPVS: starting estimator thread 0...
[  470.540145][T18656] IPVS: using max 26 ests per chain, 62400 per kthread
[  470.917341][ T6378] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  470.956427][ T6378] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  471.107441][ T6378] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  471.132654][ T6378] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  471.308590][T18683] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3311'.
[  471.553020][T18690] bridge_slave_0: left allmulticast mode
[  471.569118][T18690] bridge_slave_0: left promiscuous mode
[  471.593348][T18690] bridge0: port 1(bridge_slave_0) entered disabled state
[  471.639165][T18690] bridge_slave_1: left allmulticast mode
[  471.647342][T18690] bridge_slave_1: left promiscuous mode
[  471.659702][T18690] bridge0: port 2(bridge_slave_1) entered disabled state
[  471.675457][T18690] bond0: (slave bond_slave_0): Releasing backup interface
[  471.691405][T18690] bond0: (slave bond_slave_1): Releasing backup interface
[  471.732970][T18690] team0: Port device team_slave_0 removed
[  471.769387][T18690] team0: Port device team_slave_1 removed
[  471.789352][T18690] batman_adv: batadv0: Removing interface: batadv_slave_0
[  471.823895][T18690] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  472.191735][T18714] pim6reg: entered allmulticast mode
[  472.480233][T18721] syzkaller0: entered promiscuous mode
[  472.501647][T18721] syzkaller0: entered allmulticast mode
[  472.543769][ T5620] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[  472.551286][ T5620] Bluetooth: hci0: command 0x0c1a tx timeout
[  472.673698][T18721] netlink: 'syz.3.3319': attribute type 13 has an invalid length.
[  472.829026][ T5620] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  472.847210][ T5620] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  472.864097][ T5620] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  472.875770][ T5620] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  472.884924][ T5620] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  473.468012][T18752] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3323'.
[  473.495210][T18751] netlink: 'syz.1.3324': attribute type 6 has an invalid length.
[  473.532763][T18747] syzkaller0: entered promiscuous mode
[  473.548566][T18747] syzkaller0: entered allmulticast mode
[  473.601999][T18747] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3322'.
[  474.213198][T18761] vlan2: entered promiscuous mode
[  474.218298][T18761] bond_slave_1: entered promiscuous mode
[  474.896174][T18730] lo speed is unknown, defaulting to 1000
[  474.940758][ T5620] Bluetooth: hci1: command tx timeout
[  475.032191][T18811] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3335'.
[  475.410189][T18730] lo speed is unknown, defaulting to 1000
[  475.416072][T18811] lo speed is unknown, defaulting to 1000
[  475.422358][  T448] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  475.434178][T18730] lo speed is unknown, defaulting to 1000
[  476.059955][T18833] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3339'.
[  476.076470][T11092] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  476.095406][T18833] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3339'.
[  476.207791][T18811] lo speed is unknown, defaulting to 1000
[  476.213036][T18837] syzkaller0: entered promiscuous mode
[  476.219351][T18837] syzkaller0: entered allmulticast mode
[  476.261974][T18811] lo speed is unknown, defaulting to 1000
[  476.577184][T18843] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3344'.
[  476.604929][T18843] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3344'.
[  477.011962][T18856] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  477.032427][ T5620] Bluetooth: hci1: command tx timeout
[  477.321181][T18867] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3350'.
[  477.338792][T18730] bridge0: port 1(bridge_slave_0) entered blocking state
[  477.347672][T18867] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3350'.
[  477.357028][T18730] bridge0: port 1(bridge_slave_0) entered disabled state
[  477.364659][T18730] bridge_slave_0: entered allmulticast mode
[  477.376498][T18730] bridge_slave_0: entered promiscuous mode
[  477.436314][T18867] bond_slave_0: entered promiscuous mode
[  477.442207][T18867] bond_slave_0: entered allmulticast mode
[  477.517007][T18730] bridge0: port 2(bridge_slave_1) entered blocking state
[  477.540219][T18730] bridge0: port 2(bridge_slave_1) entered disabled state
[  477.547717][T18730] bridge_slave_1: entered allmulticast mode
[  477.561082][T18730] bridge_slave_1: entered promiscuous mode
[  477.877708][T18730] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  477.932190][T18730] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  478.093082][T18871] lo speed is unknown, defaulting to 1000
[  478.131348][T18730] team0: Port device team_slave_0 added
[  478.138761][T18882] Cannot find del_set index 0 as target
[  478.163772][T18730] team0: Port device team_slave_1 added
[  478.318278][T18730] batman_adv: batadv0: Adding interface: batadv_slave_0
[  478.338615][T18730] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  478.422122][T18730] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  478.478080][T18730] batman_adv: batadv0: Adding interface: batadv_slave_1
[  478.493342][T18730] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  478.544350][T18730] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  478.848136][T18730] hsr_slave_0: entered promiscuous mode
[  478.868050][T18730] hsr_slave_1: entered promiscuous mode
[  478.881819][T18730] debugfs: 'hsr0' already exists in 'hsr'
[  478.897191][T18730] Cannot create hsr debugfs directory
[  479.017383][T18871] lo speed is unknown, defaulting to 1000
[  479.086488][T18871] lo speed is unknown, defaulting to 1000
[  479.101026][ T5620] Bluetooth: hci1: command tx timeout
[  479.264973][ T1593] block nbd3: Possible stuck request ffff888027530000: control (read@0,1024B). Runtime 30 seconds
[  479.277406][ T1593] block nbd3: Possible stuck request ffff8880275301c0: control (read@1024,1024B). Runtime 30 seconds
[  479.291097][ T1593] block nbd3: Possible stuck request ffff888027530380: control (read@2048,1024B). Runtime 30 seconds
[  479.303336][ T1593] block nbd3: Possible stuck request ffff888027530540: control (read@3072,1024B). Runtime 30 seconds
[  479.940185][T18730] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  479.981976][T18730] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  480.531368][T18952] xt_ecn: cannot match TCP bits for non-tcp packets
[  480.544604][T11092] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  480.743023][T18730] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  480.770378][T18730] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  480.813038][T18957] syzkaller0: entered promiscuous mode
[  480.838024][T18957] syzkaller0: entered allmulticast mode
[  480.863634][T18961] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  481.011358][T18730] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  481.035517][T18730] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  481.096244][T18952] tipc: Resetting bearer <eth:syzkaller0>
[  481.162795][T18951] tipc: Resetting bearer <eth:syzkaller0>
[  481.183940][ T5620] Bluetooth: hci1: command tx timeout
[  481.193907][T11092] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  481.258239][T18951] tipc: Disabling bearer <eth:syzkaller0>
[  481.321477][T18730] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  481.346758][T18730] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  481.540435][T18971] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3372'.
[  481.704497][T18978] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3374'.
[  481.778474][T18983] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3376'.
[  481.797742][T18983] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3376'.
[  481.865833][T18989] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3375'.
[  481.999606][T11090] tipc: Subscription rejected, illegal request
[  482.347620][T18730] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  482.393518][T18730] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  482.418088][T18730] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  482.439110][T19006] xt_cgroup: path and classid specified
[  482.446602][T18730] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  482.488076][T18730] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  482.525083][T18730] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  482.554425][T18730] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  482.592519][T18730] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  482.744574][T19013] lo speed is unknown, defaulting to 1000
[  482.754151][T19018] netdevsim netdevsim3 netdevsim0: entered allmulticast mode
[  482.781026][T19018] netlink: 80 bytes leftover after parsing attributes in process `syz.3.3382'.
[  483.087101][T18730] 8021q: adding VLAN 0 to HW filter on device bond0
[  483.171235][T19042] netlink: 108 bytes leftover after parsing attributes in process `syz.2.3386'.
[  483.188954][T19042] netlink: 108 bytes leftover after parsing attributes in process `syz.2.3386'.
[  483.223048][T18730] 8021q: adding VLAN 0 to HW filter on device team0
[  483.238000][T19045] Unsupported ieee802154 address type: 0
[  483.254595][T11092] bridge0: port 1(bridge_slave_0) entered blocking state
[  483.261842][T11092] bridge0: port 1(bridge_slave_0) entered forwarding state
[  483.308560][T14394] bridge0: port 2(bridge_slave_1) entered blocking state
[  483.315827][T14394] bridge0: port 2(bridge_slave_1) entered forwarding state
[  483.651868][T19056] netlink: 160 bytes leftover after parsing attributes in process `syz.1.3391'.
[  483.951504][T19018] dvmrp0: entered allmulticast mode
[  483.973132][T19013] lo speed is unknown, defaulting to 1000
[  483.988661][T19013] lo speed is unknown, defaulting to 1000
[  484.186196][T19077] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3396'.
[  484.518726][T19090] IPVS: set_ctl: invalid protocol: 0 172.20.20.187:20004
[  484.567637][T19090] lo: entered allmulticast mode
[  484.637634][T19094] netlink: 'syz.0.3399': attribute type 4 has an invalid length.
[  484.653061][T19095] lo: left allmulticast mode
[  484.844539][T18730] 8021q: adding VLAN 0 to HW filter on device batadv0
[  485.259535][T19114] netlink: 'syz.1.3400': attribute type 10 has an invalid length.
[  485.564845][T18730] veth0_vlan: entered promiscuous mode
[  485.611461][T18730] veth1_vlan: entered promiscuous mode
[  485.662087][ T6378] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  485.775760][T18730] veth0_macvtap: entered promiscuous mode
[  485.813219][T18730] veth1_macvtap: entered promiscuous mode
[  485.852689][T18730] batman_adv: batadv0: Interface activated: batadv_slave_0
[  485.908966][T18730] batman_adv: batadv0: Interface activated: batadv_slave_1
[  486.002727][ T6378] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  486.013374][ T6378] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  486.039683][ T6378] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  486.078622][ T6378] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  486.181395][T19140] netlink: 'syz.1.3407': attribute type 12 has an invalid length.
[  486.303759][ T6378] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  486.422765][T19147] netlink: 'syz.1.3409': attribute type 1 has an invalid length.
[  486.438819][ T8721] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  486.462988][ T8721] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  486.547191][T19147] 8021q: adding VLAN 0 to HW filter on device bond1
[  486.598875][T11092] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  486.607806][T11092] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  486.676615][T19147] bond1: (slave geneve2): making interface the new active one
[  486.711101][T19147] bond1: (slave geneve2): Enslaving as an active interface with an up link
[  487.148605][T19176] bond2 (unregistering): Released all slaves
[  487.220945][T19187] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  487.324241][T19176] syzkaller1: entered promiscuous mode
[  487.330885][T19195] __nla_validate_parse: 4 callbacks suppressed
[  487.330908][T19195] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3419'.
[  487.361518][T19176] syzkaller1: entered allmulticast mode
[  487.369330][T19198] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3421'.
[  487.405535][T19195] ip6gre1: entered promiscuous mode
[  487.410874][T19176] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3415'.
[  487.427833][T19195] ip6gre1: entered allmulticast mode
[  487.434937][T19200] žÿ: renamed from team_slave_1 (while UP)
[  487.466023][T19190] 8021q: adding VLAN 0 to HW filter on device bond1
[  487.473503][T19190] bridge0: port 3(bond1) entered blocking state
[  487.480985][T19190] bridge0: port 3(bond1) entered disabled state
[  487.491101][T19190] bond1: entered allmulticast mode
[  487.504440][T19190] bond1: entered promiscuous mode
[  487.510919][T19190] bridge0: port 3(bond1) entered blocking state
[  487.517433][T19190] bridge0: port 3(bond1) entered forwarding state
[  487.738096][T19214] x_tables: unsorted entry at hook 1
[  487.850521][T19214] ip6gretap0: entered promiscuous mode
[  488.273948][T14392] bridge0: port 3(bond1) entered disabled state
[  488.638928][T19258] sctp: [Deprecated]: syz.4.3435 (pid 19258) Use of int in max_burst socket option deprecated.
[  488.638928][T19258] Use struct sctp_assoc_value instead
[  488.975975][T19270] team0: Device xfrm0 is of different type
[  489.153428][T19288] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3440'.
[  489.283945][T19295] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3440'.
[  489.502594][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  490.450117][T19344] syzkaller0: entered promiscuous mode
[  490.471582][T19344] syzkaller0: entered allmulticast mode
[  491.092732][T19379] sctp: [Deprecated]: syz.0.3455 (pid 19379) Use of struct sctp_assoc_value in delayed_ack socket option.
[  491.092732][T19379] Use struct sctp_sack_info instead
[  491.313177][T19381] RDS: rds_bind could not find a transport for fe80::28, load rds_tcp or rds_rdma?
[  491.404064][T19390] Unsupported ieee802154 address type: 0
[  491.418162][T19390] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3457'.
[  491.443349][ T6378] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  491.453439][T19390] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3457'.
[  492.062957][ T8718] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  492.672086][T19428] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3465'.
[  492.761224][T19399] netlink: 76 bytes leftover after parsing attributes in process `syz.4.3460'.
[  492.838645][T19434] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3460'.
[  492.958028][T19447] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3469'.
[  493.003770][T19447] sctp: [Deprecated]: syz.1.3469 (pid 19447) Use of int in maxseg socket option.
[  493.003770][T19447] Use struct sctp_assoc_value instead
[  494.613475][T19527] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3488'.
[  494.815435][T19530] x_tables: ip6_tables: socket match: used from hooks FORWARD, but only valid from PREROUTING/INPUT
[  494.887736][T19533] x_tables: ip6_tables: socket match: used from hooks FORWARD, but only valid from PREROUTING/INPUT
[  495.013007][T19545] IPVS: set_ctl: invalid protocol: 0 100.1.1.0:20000
[  495.037424][T19545] IPVS: set_ctl: invalid protocol: 0 100.1.1.0:20000
[  495.045993][T19545] IPVS: set_ctl: invalid protocol: 0 100.1.1.0:20000
[  495.053452][T19545] IPVS: set_ctl: invalid protocol: 0 100.1.1.0:20000
[  495.060692][T19545] IPVS: set_ctl: invalid protocol: 0 100.1.1.0:20000
[  495.068880][T19545] IPVS: set_ctl: invalid protocol: 0 100.1.1.0:20000
[  495.095406][T19545] IPVS: set_ctl: invalid protocol: 0 100.1.1.0:20000
[  495.120735][T19545] IPVS: set_ctl: invalid protocol: 0 100.1.1.0:20000
[  495.137934][T19545] IPVS: set_ctl: invalid protocol: 0 100.1.1.0:20000
[  495.157983][T19545] IPVS: set_ctl: invalid protocol: 0 100.1.1.0:20000
[  495.174791][T19545] IPVS: set_ctl: invalid protocol: 0 100.1.1.0:20000
[  495.192054][T19545] IPVS: set_ctl: invalid protocol: 0 100.1.1.0:20000
[  495.228635][T19545] IPVS: set_ctl: invalid protocol: 0 100.1.1.0:20000
[  495.248345][T19545] IPVS: set_ctl: invalid protocol: 0 100.1.1.0:20000
[  495.256248][T19545] IPVS: set_ctl: invalid protocol: 0 100.1.1.0:20000
[  495.262824][    C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  495.302230][T19545] IPVS: set_ctl: invalid protocol: 0 100.1.1.0:20000
[  495.326685][T19545] IPVS: set_ctl: invalid protocol: 0 100.1.1.0:20000
[  495.371530][T19545] IPVS: set_ctl: invalid protocol: 0 100.1.1.0:20000
[  495.401295][T19545] IPVS: set_ctl: invalid protocol: 0 100.1.1.0:20000
[  495.425396][T19545] IPVS: set_ctl: invalid protocol: 0 100.1.1.0:20000
[  495.448072][T19545] IPVS: set_ctl: invalid protocol: 0 100.1.1.0:20000
[  495.458113][T19557] netlink: 260 bytes leftover after parsing attributes in process `syz.3.3497'.
[  495.473746][T19545] IPVS: set_ctl: invalid protocol: 0 100.1.1.0:20000
[  495.483743][T19558] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3496'.
[  495.494132][T19545] IPVS: set_ctl: invalid protocol: 0 100.1.1.0:20000
[  495.502409][T19557] netlink: 'syz.3.3497': attribute type 1 has an invalid length.
[  495.517529][T19545] IPVS: set_ctl: invalid protocol: 0 100.1.1.0:20000
[  495.523780][T19558] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3496'.
[  495.535935][T19557] netlink: 756 bytes leftover after parsing attributes in process `syz.3.3497'.
[  495.553623][T19545] IPVS: set_ctl: invalid protocol: 0 100.1.1.0:20000
[  495.567726][T19545] IPVS: set_ctl: invalid protocol: 0 100.1.1.0:20000
[  495.597133][T19545] IPVS: set_ctl: invalid protocol: 0 100.1.1.0:20000
[  495.627472][T19545] IPVS: set_ctl: invalid protocol: 0 100.1.1.0:20000
[  495.641541][T19545] IPVS: set_ctl: invalid protocol: 0 100.1.1.0:20000
[  495.657444][T19545] IPVS: set_ctl: invalid protocol: 0 100.1.1.0:20000
[  495.681718][T19545] IPVS: set_ctl: invalid protocol: 0 100.1.1.0:20000
[  495.691602][T19564] netlink: 104 bytes leftover after parsing attributes in process `syz.0.3499'.
[  495.703544][T19545] IPVS: set_ctl: invalid protocol: 0 100.1.1.0:20000
[  495.717301][T19545] IPVS: set_ctl: invalid protocol: 0 100.1.1.0:20000
[  495.731237][T19545] IPVS: set_ctl: invalid protocol: 0 100.1.1.0:20000
[  495.746302][T19545] IPVS: set_ctl: invalid protocol: 0 100.1.1.0:20000
[  495.770909][T19545] IPVS: set_ctl: invalid protocol: 0 100.1.1.0:20000
[  495.793288][T19545] IPVS: set_ctl: invalid protocol: 0 100.1.1.0:20000
[  495.811898][T19545] IPVS: set_ctl: invalid protocol: 0 100.1.1.0:20000
[  495.926859][T19566] lo speed is unknown, defaulting to 1000
[  496.038066][T19571] netlink: 'syz.4.3501': attribute type 1 has an invalid length.
[  496.311897][T19571] hsr_slave_1 (unregistering): left promiscuous mode
[  496.404808][T19576] vlan2: entered promiscuous mode
[  496.420029][T19576] syz_tun: entered promiscuous mode
[  496.427763][T19576] vlan2: entered allmulticast mode
[  496.435653][T19576] syz_tun: entered allmulticast mode
[  496.970512][T19566] lo speed is unknown, defaulting to 1000
[  496.986367][T19566] lo speed is unknown, defaulting to 1000
[  497.087260][T19602] syzkaller0: entered promiscuous mode
[  497.105944][T19602] syzkaller0: entered allmulticast mode
[  497.185744][T11090] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  497.822948][ T8718] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  497.885036][T19638] __nla_validate_parse: 5 callbacks suppressed
[  497.885059][T19638] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3515'.
[  498.121767][T19643] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  498.626473][T19656] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3520'.
[  498.708115][T19656] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3520'.
[  499.170469][T19690] xt_l2tp: v2 doesn't support IP mode
[  499.609965][T19706] syzkaller0: entered promiscuous mode
[  499.630431][T19706] syzkaller0: entered allmulticast mode
[  499.726806][T19714] netlink: 'syz.3.3538': attribute type 1 has an invalid length.
[  499.817544][T19721] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3540'.
[  499.932923][T19714] 8021q: adding VLAN 0 to HW filter on device bond1
[  500.074970][T19716] bond1: (slave veth3): Enslaving as an active interface with a down link
[  500.126821][T19721] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3540'.
[  500.218274][T19723] 8021q: adding VLAN 0 to HW filter on device bond0
[  500.237972][T19723] 8021q: adding VLAN 0 to HW filter on device team0
[  500.268950][T19723] 8021q: adding VLAN 0 to HW filter on device batadv0
[  500.357707][T19723] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  500.369448][T19723] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  500.399250][T19723] veth1_vlan: left promiscuous mode
[  500.406270][T19723] veth0_vlan: left promiscuous mode
[  500.414154][T19723] veth0_vlan: entered promiscuous mode
[  500.422477][T19723] veth1_vlan: entered promiscuous mode
[  500.444185][T19723] netdevsim netdevsim3 netdevsim0: left allmulticast mode
[  500.453633][T19723] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  500.464608][T19723] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  500.476308][T19723] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  500.487833][T19723] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  500.514985][T19723] ip6gre1: left promiscuous mode
[  500.529923][T19723] ip6gre1: left allmulticast mode
[  500.654240][T19727] 8021q: adding VLAN 0 to HW filter on device batadv1
[  500.681977][T19727] bond1: (slave batadv1): making interface the new active one
[  500.698211][T19727] batadv1: entered promiscuous mode
[  500.713520][T19727] bond1: (slave batadv1): Enslaving as an active interface with an up link
[  500.838090][ T8721] bond1: (slave veth3): link status definitely up, 10000 Mbps full duplex
[  500.996811][T19747] tipc: Started in network mode
[  501.002620][T19747] tipc: Node identity d29d031d397b, cluster identity 4711
[  501.014819][T19747] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  501.035371][ T8720] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  501.058689][ T8720] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  501.091443][T19748] syzkaller0: entered promiscuous mode
[  501.101964][T19748] syzkaller0: entered allmulticast mode
[  501.195586][T19750] tipc: Resetting bearer <eth:syzkaller0>
[  501.233209][ T8720] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  501.342883][ T8720] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  501.494263][T19750] tipc: Resetting bearer <eth:syzkaller0>
[  501.555677][T19750] tipc: Disabling bearer <eth:syzkaller0>
[  502.152781][   T29] audit: type=1107 audit(1784940300.124:12): pid=19809 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=''
[  502.372907][T19817] netlink: 'syz.4.3561': attribute type 8 has an invalid length.
[  502.397092][T19817] netlink: 'syz.4.3561': attribute type 9 has an invalid length.
[  502.818757][T19841] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3564'.
[  502.951368][T11092] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  503.590887][T11092] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  506.096445][T19829] syzkaller0: entered allmulticast mode
[  506.102818][T19834] tipc: Enabling of bearer <eth:syzkaller0
> rejected, failed to enable media
[  506.129577][T19841] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  506.162320][T19841] batman_adv: batadv0: Removing interface: batadv_slave_1
[  506.448019][T19856] lo speed is unknown, defaulting to 1000
[  506.619578][T19868] bridge3: entered promiscuous mode
[  506.635935][T19868] bridge3: entered allmulticast mode
[  507.300760][T19856] lo speed is unknown, defaulting to 1000
[  507.306793][T19895] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3578'.
[  507.328798][T19856] lo speed is unknown, defaulting to 1000
[  507.465785][T19895] hsr_slave_1 (unregistering): left promiscuous mode
[  507.710747][T19909] FAULT_INJECTION: forcing a failure.
[  507.710747][T19909] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  507.758856][T19909] CPU: 1 UID: 0 PID: 19909 Comm: syz.0.3579 Not tainted syzkaller #0 PREEMPT(full) 
[  507.758887][T19909] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  507.758901][T19909] Call Trace:
[  507.758910][T19909]  <TASK>
[  507.758919][T19909]  dump_stack_lvl+0xe8/0x150
[  507.758960][T19909]  should_fail_ex+0x40c/0x560
[  507.759076][T19909]  _copy_from_iter+0x1d3/0x1660
[  507.759169][T19909]  ? kmem_cache_alloc_node_noprof+0x111/0x610
[  507.759200][T19909]  ? rcu_is_watching+0x15/0xb0
[  507.759222][T19909]  ? trace_kmem_cache_alloc+0x29/0xe0
[  507.759251][T19909]  ? kmem_cache_alloc_node_noprof+0x3b8/0x610
[  507.759278][T19909]  ? __pfx__copy_from_iter+0x10/0x10
[  507.759307][T19909]  ? __alloc_skb+0x276/0x7a0
[  507.759360][T19909]  ? __alloc_skb+0x276/0x7a0
[  507.759388][T19909]  ? netlink_sendmsg+0x650/0xb40
[  507.759447][T19909]  ? skb_put+0x112/0x210
[  507.759472][T19909]  netlink_sendmsg+0x6c0/0xb40
[  507.759510][T19909]  ? __pfx_netlink_sendmsg+0x10/0x10
[  507.759542][T19909]  ? aa_sock_msg_perm+0xf1/0x1b0
[  507.759596][T19909]  ? __pfx_netlink_sendmsg+0x10/0x10
[  507.759621][T19909]  sock_sendmsg_nosec+0x13a/0x180
[  507.759679][T19909]  ____sys_sendmsg+0x54e/0x850
[  507.759711][T19909]  ? __pfx_____sys_sendmsg+0x10/0x10
[  507.759747][T19909]  ? import_iovec+0x73/0xa0
[  507.759785][T19909]  ___sys_sendmsg+0x2a5/0x360
[  507.759809][T19909]  ? __lock_acquire+0x683/0x2cf0
[  507.759853][T19909]  ? __pfx____sys_sendmsg+0x10/0x10
[  507.759917][T19909]  ? __fget_files+0x2a/0x420
[  507.759956][T19909]  ? __fget_files+0x3a2/0x420
[  507.759998][T19909]  __x64_sys_sendmsg+0x1b1/0x290
[  507.760026][T19909]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  507.760072][T19909]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  507.760097][T19909]  do_syscall_64+0x174/0x580
[  507.760156][T19909]  ? trace_irq_disable+0x3b/0x140
[  507.760185][T19909]  ? clear_bhb_loop+0x40/0x90
[  507.760213][T19909]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  507.760234][T19909] RIP: 0033:0x7f051df9de99
[  507.760265][T19909] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  507.760290][T19909] RSP: 002b:00007f051eeb7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  507.760313][T19909] RAX: ffffffffffffffda RBX: 00007f051e226180 RCX: 00007f051df9de99
[  507.760329][T19909] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000005
[  507.760343][T19909] RBP: 00007f051eeb7090 R08: 0000000000000000 R09: 0000000000000000
[  507.760356][T19909] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  507.760369][T19909] R13: 00007f051e226218 R14: 00007f051e226180 R15: 00007ffe13f2ba58
[  507.760403][T19909]  </TASK>
[  508.701367][ T6378] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  508.762308][T19946] IPVS: length: 232 != 24
[  508.817747][T19942] netlink: 300 bytes leftover after parsing attributes in process `syz.1.3590'.
[  509.119477][T19964] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3596'.
[  509.132935][T19965] FAULT_INJECTION: forcing a failure.
[  509.132935][T19965] name failslab, interval 1, probability 0, space 0, times 0
[  509.171805][T19965] CPU: 0 UID: 0 PID: 19965 Comm: syz.2.3595 Not tainted syzkaller #0 PREEMPT(full) 
[  509.171836][T19965] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  509.171850][T19965] Call Trace:
[  509.171858][T19965]  <TASK>
[  509.171867][T19965]  dump_stack_lvl+0xe8/0x150
[  509.171907][T19965]  should_fail_ex+0x40c/0x560
[  509.171939][T19965]  should_failslab+0xa8/0x100
[  509.171974][T19965]  kmem_cache_alloc_noprof+0xa6/0x5f0
[  509.172002][T19965]  ? skb_clone+0x212/0x3a0
[  509.172027][T19965]  ? skb_clone+0x212/0x3a0
[  509.172059][T19965]  skb_clone+0x212/0x3a0
[  509.172088][T19965]  __netlink_deliver_tap+0x413/0x860
[  509.172128][T19965]  ? netlink_deliver_tap+0x2e/0x1b0
[  509.172156][T19965]  netlink_deliver_tap+0x19c/0x1b0
[  509.172186][T19965]  netlink_unicast+0x77f/0x940
[  509.172228][T19965]  netlink_sendmsg+0x813/0xb40
[  509.172265][T19965]  ? __pfx_netlink_sendmsg+0x10/0x10
[  509.172297][T19965]  ? aa_sock_msg_perm+0xf1/0x1b0
[  509.172326][T19965]  ? __pfx_netlink_sendmsg+0x10/0x10
[  509.172350][T19965]  sock_sendmsg_nosec+0x13a/0x180
[  509.172382][T19965]  ____sys_sendmsg+0x54e/0x850
[  509.172412][T19965]  ? __pfx_____sys_sendmsg+0x10/0x10
[  509.172448][T19965]  ? import_iovec+0x73/0xa0
[  509.172486][T19965]  ___sys_sendmsg+0x2a5/0x360
[  509.172508][T19965]  ? __lock_acquire+0x683/0x2cf0
[  509.172548][T19965]  ? __pfx____sys_sendmsg+0x10/0x10
[  509.172610][T19965]  ? __fget_files+0x2a/0x420
[  509.172639][T19965]  ? __fget_files+0x3a2/0x420
[  509.172679][T19965]  __x64_sys_sendmsg+0x1b1/0x290
[  509.172707][T19965]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  509.172758][T19965]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  509.172782][T19965]  do_syscall_64+0x174/0x580
[  509.172808][T19965]  ? trace_irq_disable+0x3b/0x140
[  509.172841][T19965]  ? clear_bhb_loop+0x40/0x90
[  509.172869][T19965]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  509.172891][T19965] RIP: 0033:0x7ffb2fb9de99
[  509.172912][T19965] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  509.172932][T19965] RSP: 002b:00007ffb2ddb4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  509.172971][T19965] RAX: ffffffffffffffda RBX: 00007ffb2fe26180 RCX: 00007ffb2fb9de99
[  509.172986][T19965] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000005
[  509.172999][T19965] RBP: 00007ffb2ddb4090 R08: 0000000000000000 R09: 0000000000000000
[  509.173012][T19965] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  509.173024][T19965] R13: 00007ffb2fe26218 R14: 00007ffb2fe26180 R15: 00007ffdc3b55078
[  509.173059][T19965]  </TASK>
[  509.173181][T19965] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3595'.
[  509.355404][ T8718] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  509.416074][ T1593] block nbd3: Possible stuck request ffff888027530000: control (read@0,1024B). Runtime 60 seconds
[  509.469603][ T1593] block nbd3: Possible stuck request ffff8880275301c0: control (read@1024,1024B). Runtime 60 seconds
[  509.481163][ T1593] block nbd3: Possible stuck request ffff888027530380: control (read@2048,1024B). Runtime 60 seconds
[  509.492169][ T1593] block nbd3: Possible stuck request ffff888027530540: control (read@3072,1024B). Runtime 60 seconds
[  509.675300][T19976] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  509.682872][T19975] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3599'.
[  509.693621][T19975] netlink: 5 bytes leftover after parsing attributes in process `syz.4.3599'.
[  509.720608][T19975] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3599'.
[  509.725738][T19971] syzkaller0: entered promiscuous mode
[  509.736359][T19975] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3599'.
[  509.749372][T19971] syzkaller0: entered allmulticast mode
[  509.842063][T19973] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) !
[  509.920836][T19985] netlink: 'syz.1.3600': attribute type 3 has an invalid length.
[  510.045131][T19986] tipc: Resetting bearer <eth:syzkaller0>
[  510.070488][T19975] syzkaller0: entered promiscuous mode
[  510.086903][T19975] syzkaller0: entered allmulticast mode
[  510.160518][T19970] tipc: Resetting bearer <eth:syzkaller0>
[  510.294407][T19970] tipc: Disabling bearer <eth:syzkaller0>
[  510.758190][T20013] lo speed is unknown, defaulting to 1000
[  510.793013][T20023] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  510.940489][T20023] batman_adv: batadv0: Removing interface: batadv_slave_0
[  511.304034][T20047] syzkaller1: entered promiscuous mode
[  511.342435][T20047] syzkaller1: entered allmulticast mode
[  511.612950][T20059] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3617'.
[  511.951251][T20013] lo speed is unknown, defaulting to 1000
[  511.957177][T20066] lo speed is unknown, defaulting to 1000
[  511.973866][T20013] lo speed is unknown, defaulting to 1000
[  512.387539][T20093] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3622'.
[  512.555714][T20093] FAULT_INJECTION: forcing a failure.
[  512.555714][T20093] name failslab, interval 1, probability 0, space 0, times 0
[  512.585016][T14390] batadv1: left promiscuous mode
[  512.596555][T20093] CPU: 1 UID: 0 PID: 20093 Comm: syz.1.3622 Not tainted syzkaller #0 PREEMPT(full) 
[  512.596586][T20093] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  512.596599][T20093] Call Trace:
[  512.596608][T20093]  <TASK>
[  512.596617][T20093]  dump_stack_lvl+0xe8/0x150
[  512.596656][T20093]  should_fail_ex+0x40c/0x560
[  512.596690][T20093]  should_failslab+0xa8/0x100
[  512.596725][T20093]  kmem_cache_alloc_node_noprof+0xb3/0x610
[  512.596753][T20093]  ? local_lock_release+0x9c/0x160
[  512.596777][T20093]  ? __alloc_skb+0x1d7/0x7a0
[  512.596796][T20093]  ? __alloc_skb+0x1d7/0x7a0
[  512.596825][T20093]  __alloc_skb+0x1d7/0x7a0
[  512.596851][T20093]  netlink_ack+0x136/0xb30
[  512.596875][T20093]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  512.596978][T20093]  ? ref_tracker_free+0x689/0x830
[  512.597039][T20093]  ? __pfx_ref_tracker_free+0x10/0x10
[  512.597081][T20093]  netlink_rcv_skb+0x2a4/0x4a0
[  512.597116][T20093]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  512.597142][T20093]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  512.597182][T20093]  ? netlink_deliver_tap+0x2e/0x1b0
[  512.597208][T20093]  ? netlink_deliver_tap+0x2e/0x1b0
[  512.597240][T20093]  netlink_unicast+0x7bb/0x940
[  512.597276][T20093]  netlink_sendmsg+0x813/0xb40
[  512.597313][T20093]  ? __pfx_netlink_sendmsg+0x10/0x10
[  512.597345][T20093]  ? aa_sock_msg_perm+0xf1/0x1b0
[  512.597376][T20093]  ? __pfx_netlink_sendmsg+0x10/0x10
[  512.597403][T20093]  sock_sendmsg_nosec+0x13a/0x180
[  512.597437][T20093]  ____sys_sendmsg+0x54e/0x850
[  512.597468][T20093]  ? __pfx_____sys_sendmsg+0x10/0x10
[  512.597504][T20093]  ? import_iovec+0x73/0xa0
[  512.597542][T20093]  ___sys_sendmsg+0x2a5/0x360
[  512.597570][T20093]  ? __lock_acquire+0x683/0x2cf0
[  512.597606][T20093]  ? __pfx____sys_sendmsg+0x10/0x10
[  512.597671][T20093]  ? __fget_files+0x2a/0x420
[  512.597700][T20093]  ? __fget_files+0x3a2/0x420
[  512.597741][T20093]  __x64_sys_sendmsg+0x1b1/0x290
[  512.597771][T20093]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  512.597817][T20093]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  512.597842][T20093]  do_syscall_64+0x174/0x580
[  512.597867][T20093]  ? trace_irq_disable+0x3b/0x140
[  512.597895][T20093]  ? clear_bhb_loop+0x40/0x90
[  512.597922][T20093]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  512.597943][T20093] RIP: 0033:0x7f290b59de99
[  512.597963][T20093] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  512.597982][T20093] RSP: 002b:00007f290c400028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  512.598005][T20093] RAX: ffffffffffffffda RBX: 00007f290b826180 RCX: 00007f290b59de99
[  512.598022][T20093] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000005
[  512.598035][T20093] RBP: 00007f290c400090 R08: 0000000000000000 R09: 0000000000000000
[  512.598048][T20093] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  512.598061][T20093] R13: 00007f290b826218 R14: 00007f290b826180 R15: 00007ffdf86e28e8
[  512.598096][T20093]  </TASK>
[  513.655452][T20066] lo speed is unknown, defaulting to 1000
[  513.663438][T20121] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3628'.
[  513.740510][  T448] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  513.784815][T20066] lo speed is unknown, defaulting to 1000
[  513.791851][T20118] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3628'.
[  513.983621][ T5621] Bluetooth: hci5: command 0x0405 tx timeout
[  514.202145][T20144] bridge2: entered promiscuous mode
[  514.214231][T20144] bridge2: entered allmulticast mode
[  514.235580][T20143] netlink: 148 bytes leftover after parsing attributes in process `syz.4.3632'.
[  515.089386][T20175] xt_TPROXY: Can be used only with -p tcp or -p udp
[  515.101531][  T448] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  516.153206][T20198] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3640'.
[  516.843826][T20225] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3647'.
[  516.863047][T20229] xt_NFQUEUE: number of total queues is 0
[  516.870578][T20224] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3647'.
[  516.886754][T20229] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3649'.
[  517.210522][T20237] netlink: 2736 bytes leftover after parsing attributes in process `syz.1.3652'.
[  517.481606][T20249] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3657'.
[  518.053884][T20262] x_tables: duplicate underflow at hook 2
[  518.234501][T20268] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3663'.
[  518.397887][T20278] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3666'.
[  518.431303][T20278] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3666'.
[  518.672720][T20261] netlink: 'syz.4.3661': attribute type 13 has an invalid length.
[  518.875544][T20294] syzkaller0: entered promiscuous mode
[  518.900011][T20294] syzkaller0: entered allmulticast mode
[  518.942575][ T6378] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  518.979127][T20294] rdma_rxe: rxe_newlink: failed to add lo
[  519.115756][T20308] block nbd0: NBD_DISCONNECT
[  519.127251][T20311] netlink: 'syz.3.3675': attribute type 2 has an invalid length.
[  519.146039][T20308] block nbd0: Send disconnect failed -32
[  519.175404][T20308] block nbd0: shutting down sockets
[  519.226961][T20308] netlink: 'syz.0.3674': attribute type 10 has an invalid length.
[  519.252356][T20308] ipvlan0: entered allmulticast mode
[  519.257809][T20308] veth0_vlan: entered allmulticast mode
[  519.298149][T20308] team0: Device ipvlan0 failed to register rx_handler
[  520.127714][T20368] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3691'.
[  520.136990][T20368] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3691'.
[  520.172136][T20366] netlink: 'syz.3.3689': attribute type 8 has an invalid length.
[  520.199963][T20363] netlink: 'syz.3.3689': attribute type 8 has an invalid length.
[  520.212113][T20363] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3689'.
[  520.245302][T20366] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3689'.
[  520.273190][T20363] bond0: entered promiscuous mode
[  520.287864][T20363] gretap0: entered promiscuous mode
[  520.296900][T20363] dummy0: entered promiscuous mode
[  520.308479][T20363] debugfs: 'hsr1' already exists in 'hsr'
[  520.325623][T20363] Cannot create hsr debugfs directory
[  520.331996][T20363] hsr1: entered promiscuous mode
[  520.337880][T20374] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3693'.
[  520.749676][T20387] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3696'.
[  520.860897][ T8718] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  521.113693][T20396] xt_hashlimit: size too large, truncated to 1048576
[  521.613444][ T5723] IPVS: starting estimator thread 0...
[  521.654863][T20427] IPVS: set_ctl: invalid protocol: 60 10.1.1.0:20001
[  521.665734][T20423] bond2: option active_slave: mode dependency failed, not supported in mode balance-rr(0)
[  521.677944][T20423] bond2 (unregistering): Released all slaves
[  521.721435][T20424] IPVS: using max 30 ests per chain, 72000 per kthread
[  522.163228][T20445] Bluetooth: MGMT ver 1.23
[  522.383946][T20428] tipc: Enabled bearer <eth:batadv0>, priority 10
[  522.615408][T20465] __nla_validate_parse: 26 callbacks suppressed
[  522.615428][T20465] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3722'.
[  522.642269][T20465] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3722'.
[  523.815333][T20484] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3727'.
[  523.861267][T20483] netlink: 'syz.3.3724': attribute type 1 has an invalid length.
[  523.871975][T20485] netlink: 'syz.2.3727': attribute type 1 has an invalid length.
[  524.055023][T20483] 8021q: adding VLAN 0 to HW filter on device bond2
[  524.195218][T20485] 8021q: adding VLAN 0 to HW filter on device bond2
[  524.701823][T14389] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  525.668772][ T4986] udevd[4986]: worker [5631] /devices/virtual/block/nbd3 is taking a long time
[  526.622445][T14390] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  527.417893][T20484] bond2: (slave veth3): Enslaving as an active interface with a down link
[  527.507813][T20488] 8021q: adding VLAN 0 to HW filter on device batadv1
[  527.566848][T20488] bond2: (slave batadv1): making interface the new active one
[  527.599304][T20488] batadv1: entered promiscuous mode
[  527.630686][T20488] bond2: (slave batadv1): Enslaving as an active interface with an up link
[  527.649042][T20505] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.3731'.
[  527.720474][T20506] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.3731'.
[  527.777590][T20489] bond2 (unregistering): (slave veth3): Releasing active interface
[  527.816320][T20489] bond2 (unregistering): (slave batadv1): Releasing active interface
[  527.855550][T20489] bond2 (unregistering): Released all slaves
[  528.186056][T20533] x_tables: duplicate underflow at hook 1
[  528.773520][T20569] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3747'.
[  528.828497][T20569] syzkaller0: entered promiscuous mode
[  528.849965][T20569] syzkaller0: entered allmulticast mode
[  528.882851][T20569] rdma_rxe: rxe_newlink: failed to add lo
[  528.924483][T20575] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3750'.
[  528.949041][T20576] xt_bpf: check failed: parse error
[  528.955310][T20575] xt_bpf: check failed: parse error
[  529.005747][   T29] audit: type=1107 audit(1784940326.974:13): pid=20577 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
[  529.016559][T20580] syzkaller1: entered promiscuous mode
[  529.159161][T20580] syzkaller1: entered allmulticast mode
[  529.246520][T20586] netlink: 96 bytes leftover after parsing attributes in process `syz.2.3753'.
[  529.608276][T20607] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3758'.
[  529.701697][T20613] netlink: 'syz.2.3760': attribute type 12 has an invalid length.
[  529.820405][ T8718] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  529.848754][T20607] veth3: entered allmulticast mode
[  529.907033][T20613] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3760'.
[  530.449664][T20627] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3762'.
[  530.458849][T20627] netlink: 43 bytes leftover after parsing attributes in process `syz.3.3762'.
[  530.496303][T20627] netlink: 'syz.3.3762': attribute type 6 has an invalid length.
[  530.516821][T20627] netlink: 'syz.3.3762': attribute type 5 has an invalid length.
[  530.525557][T20627] netlink: 43 bytes leftover after parsing attributes in process `syz.3.3762'.
[  531.669353][ T6378] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  533.051085][T20613] ip6tnl2: entered allmulticast mode
[  533.058210][T20626] macvlan0: entered promiscuous mode
[  533.296922][T20642] syzkaller0: entered promiscuous mode
[  533.308328][T20642] syzkaller0: entered allmulticast mode
[  533.352529][T20642] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  533.424905][T20641] tipc: Resetting bearer <eth:syzkaller0>
[  533.553082][T20641] tipc: Disabling bearer <eth:syzkaller0>
[  533.579528][T20652] xt_hashlimit: size too large, truncated to 1048576
[  533.705850][T20654] 
@0Ù: renamed from bond_slave_1 (while UP)
[  533.906238][T20659] bridge1: entered promiscuous mode
[  533.930197][T20659] bridge1: entered allmulticast mode
[  534.340161][T20683] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3778'.
[  535.135559][T20724] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3792'.
[  535.285090][T20724] 8021q: adding VLAN 0 to HW filter on device bond2
[  535.471611][T20738] netlink: 'syz.2.3794': attribute type 1 has an invalid length.
[  535.585264][T11092] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  535.629248][T20741] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input7
[  535.916311][T20738] 8021q: adding VLAN 0 to HW filter on device bond2
[  535.979420][T20731] bond2: (slave geneve2): making interface the new active one
[  536.024062][T20731] bond2: (slave geneve2): Enslaving as an active interface with an up link
[  536.324302][T20759] netlink: 35 bytes leftover after parsing attributes in process `syz.0.3797'.
[  536.335789][T20747] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  536.704892][T14390] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  536.902335][T20777] netlink: 14 bytes leftover after parsing attributes in process `syz.4.3799'.
[  537.220110][T20794] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3801'.
[  537.273900][T20800] netlink: 'syz.4.3803': attribute type 11 has an invalid length.
[  537.445781][T20794] 8021q: adding VLAN 0 to HW filter on device bond4
[  537.513294][T20804] bond4: entered promiscuous mode
[  537.527168][T20804] bond4: entered allmulticast mode
[  537.623347][T20801] lo speed is unknown, defaulting to 1000
[  537.696452][T20815] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3804'.
[  537.744139][T20815] xt_AUDIT: Audit type out of range (valid range: 0..2)
[  537.906995][T20819] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3806'.
[  537.940425][T20819] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3806'.
[  537.968760][T20819] netlink: 'syz.2.3806': attribute type 14 has an invalid length.
[  538.011117][T20819] netlink: 'syz.2.3806': attribute type 13 has an invalid length.
[  538.521549][T20820] bridge0: port 2(bridge_slave_1) entered disabled state
[  538.529425][T20820] bridge0: port 1(bridge_slave_0) entered disabled state
[  538.833186][T20820] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  539.190468][T20801] lo speed is unknown, defaulting to 1000
[  539.196795][T14389] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  539.224025][T20801] lo speed is unknown, defaulting to 1000
[  539.231251][T14389] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  539.271378][T14389] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  539.299557][T14389] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  540.062798][ T1593] block nbd3: Possible stuck request ffff888027530000: control (read@0,1024B). Runtime 90 seconds
[  540.073638][ T1593] block nbd3: Possible stuck request ffff8880275301c0: control (read@1024,1024B). Runtime 90 seconds
[  540.084671][ T1593] block nbd3: Possible stuck request ffff888027530380: control (read@2048,1024B). Runtime 90 seconds
[  540.096091][ T1593] block nbd3: Possible stuck request ffff888027530540: control (read@3072,1024B). Runtime 90 seconds
[  540.217078][T20884] netlink: 'syz.2.3816': attribute type 4 has an invalid length.
[  540.704722][T14394] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  541.184292][T20907] netlink: 'syz.2.3823': attribute type 10 has an invalid length.
[  541.222322][T20907] team0: Device veth1_virt_wifi failed to register rx_handler
[  541.274855][T20907] xt_HMARK: spi-set and port-set can't be combined
[  541.820755][T14390] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  542.289986][T20929] bridge0: port 2(bridge_slave_1) entered disabled state
[  542.297736][T20929] bridge0: port 1(bridge_slave_0) entered disabled state
[  542.756472][T20929] batman_adv: 
60ªX¹¦À: Interface deactivated: batadv_slave_0
[  543.421275][T14394] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  543.454573][T14394] netdevsim netdevsim0 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0
[  543.484413][T11092] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  543.515010][T11092] netdevsim netdevsim0 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0
[  543.555425][T11092] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  543.595838][T11092] netdevsim netdevsim0 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0
[  543.625822][T11092] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  543.662315][T11092] netdevsim netdevsim0 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0
[  543.671995][T20947] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3836'.
[  543.764196][T20958] netlink: 100 bytes leftover after parsing attributes in process `syz.1.3833'.
[  543.862527][T20947] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  544.275009][T20979] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3841'.
[  544.336694][T20980] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  545.038432][T21006] netlink: 'syz.3.3848': attribute type 1 has an invalid length.
[  545.058941][T21007] netlink: 'syz.3.3848': attribute type 1 has an invalid length.
[  545.132465][T21006] bond3: entered promiscuous mode
[  545.138199][T21006] 8021q: adding VLAN 0 to HW filter on device bond3
[  545.750797][T21037] netdevsim netdevsim2 netdevsim0: entered allmulticast mode
[  545.777463][T21037] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  545.844150][T21041] syzkaller0: entered promiscuous mode
[  545.854346][T21041] syzkaller0: entered allmulticast mode
[  546.446715][T21061] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[  546.462889][T14390] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  546.591331][T21068] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3864'.
[  546.742363][T21080] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3867'.
[  546.814482][T21079] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  546.864285][T11092] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  546.885341][T21080] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3867'.
[  546.915463][T21087] netlink: 'syz.3.3869': attribute type 10 has an invalid length.
[  546.949469][T21087] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3869'.
[  547.125501][T21096] lo speed is unknown, defaulting to 1000
[  547.216786][ T8718] nci: nci_rsp_packet: unknown rsp opcode 0x6
[  547.369994][T21121] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3874'.
[  547.815012][T21096] lo speed is unknown, defaulting to 1000
[  547.823262][T21096] lo speed is unknown, defaulting to 1000
[  548.149029][T21100] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  548.185659][T21135] gretap0: entered promiscuous mode
[  548.313167][T21134] gretap0: left promiscuous mode
[  549.387050][T21158] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3884'.
[  549.820044][ T5620] Bluetooth: hci2: command 0x0406 tx timeout
[  550.046518][T21098] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  550.274071][T21166] netlink: 'syz.1.3886': attribute type 4 has an invalid length.
[  550.323061][T21168] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3888'.
[  550.342828][T21171] netlink: 'syz.1.3886': attribute type 4 has an invalid length.
[  550.527243][T21183] netlink: 'syz.3.3891': attribute type 1 has an invalid length.
[  550.597634][T21186] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3891'.
[  550.618058][T21186] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3891'.
[  550.635171][T21188] netlink: 'syz.0.3892': attribute type 1 has an invalid length.
[  550.664932][T21187] netlink: 'syz.1.3893': attribute type 1 has an invalid length.
[  550.754928][T21183] bond4: entered promiscuous mode
[  550.762353][T21183] 8021q: adding VLAN 0 to HW filter on device bond4
[  550.869533][T21186] netlink: 580 bytes leftover after parsing attributes in process `syz.3.3891'.
[  551.320558][ T5620] block nbd0: Receive control failed (result -32)
[  551.328774][T20961] block nbd0: Receive control failed (result -32)
[  551.435244][T21218] netlink: 72 bytes leftover after parsing attributes in process `syz.2.3901'.
[  551.445156][T21218] netlink: 72 bytes leftover after parsing attributes in process `syz.2.3901'.
[  551.539456][T21223] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  551.571048][T21223] syzkaller0: entered promiscuous mode
[  551.581180][T11092] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  551.592183][T21223] syzkaller0: entered allmulticast mode
[  551.618325][T21227] 8021q: VLANs not supported on ip_vti0
[  551.626567][T21223] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3900'.
[  551.643853][T21227] 8021q: VLANs not supported on ip_vti0
[  551.653423][T21223] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3900'.
[  551.663686][T21229] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3903'.
[  551.757209][T21223] tipc: Resetting bearer <eth:syzkaller0>
[  551.775448][T21222] tipc: Resetting bearer <eth:syzkaller0>
[  551.819642][T21236] netlink: 'syz.3.3906': attribute type 1 has an invalid length.
[  551.837261][T21236] netlink: 'syz.3.3906': attribute type 2 has an invalid length.
[  551.847970][T21222] tipc: Disabling bearer <eth:syzkaller0>
[  552.220298][T11092] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  552.320280][T21255] openvswitch: netlink: Key type 31 is not supported
[  552.338645][T21262] Cannot find add_set index 0 as target
[  552.558594][T21270] syzkaller0: entered promiscuous mode
[  552.583313][T21270] syzkaller0: entered allmulticast mode
[  552.860034][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  552.998928][  T808] hid-generic 0005:0007:1005.0003: item fetching failed at offset 1/5
[  553.013209][  T808] hid-generic 0005:0007:1005.0003: probe with driver hid-generic failed with error -22
[  553.739416][T21296] netlink: 'syz.4.3928': attribute type 11 has an invalid length.
[  553.772300][T21296] netlink: 'syz.4.3928': attribute type 11 has an invalid length.
[  554.148217][T21324] syzkaller0: entered promiscuous mode
[  554.161865][T21324] syzkaller0: entered allmulticast mode
[  554.179042][T21324] openvswitch: netlink: Missing key (keys=40, expected=2000)
[  554.195877][T21322] lo speed is unknown, defaulting to 1000
[  554.271972][T21329] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR
[  554.441965][T21340] openvswitch: netlink: Key 0 has unexpected len 4 expected 0
[  554.506560][T21342] batman_adv: batadv0: Adding interface: gretap1
[  554.513510][T21342] batman_adv: batadv0: The MTU of interface gretap1 is too small (1438) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  554.629908][T21342] batman_adv: batadv0: Interface activated: gretap1
[  554.828202][T21322] lo speed is unknown, defaulting to 1000
[  554.846570][T21322] lo speed is unknown, defaulting to 1000
[  554.965299][T21360] xt_hashlimit: size too large, truncated to 1048576
[  555.153348][T21373] __nla_validate_parse: 9 callbacks suppressed
[  555.153369][T21373] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3948'.
[  555.205592][T21373] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3948'.
[  555.384162][T21379] netlink: 'syz.2.3950': attribute type 2 has an invalid length.
[  555.492008][T21379] : entered promiscuous mode
[  555.544474][T21380] tipc: Enabling of bearer <ib:rose0> rejected, failed to enable media
[  555.635187][T21390] netlink: 260 bytes leftover after parsing attributes in process `syz.2.3954'.
[  555.712883][T21393] netlink: 'syz.2.3954': attribute type 9 has an invalid length.
[  555.731853][T21395] netlink: 260 bytes leftover after parsing attributes in process `syz.2.3954'.
[  556.132033][T21405] syzkaller0: entered promiscuous mode
[  556.137816][T21405] syzkaller0: entered allmulticast mode
[  556.181956][T21413] openvswitch: netlink: nsh attribute has unmatched MD type 0.
[  556.307642][T21415] netlink: 276 bytes leftover after parsing attributes in process `syz.1.3961'.
[  556.704558][ T6378] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  557.995371][ T8718] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  559.742895][T21432] kthread_run failed with err -4
[  559.793693][T21438] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3966'.
[  559.871863][T21454] netlink: 'syz.0.3968': attribute type 1 has an invalid length.
[  559.991782][T21458] netlink: zone id is out of range
[  559.996997][T21458] netlink: zone id is out of range
[  560.002824][T21458] netlink: zone id is out of range
[  560.008059][T21458] netlink: zone id is out of range
[  560.013932][T21458] netlink: zone id is out of range
[  560.019161][T21458] netlink: zone id is out of range
[  560.025840][T21458] netlink: zone id is out of range
[  560.031175][T21458] netlink: zone id is out of range
[  560.060218][T20961] Bluetooth: hci0: command 0x0c1a tx timeout
[  560.074232][T21454] 8021q: adding VLAN 0 to HW filter on device bond5
[  560.225985][T21468] syzkaller0: entered promiscuous mode
[  560.249824][T21468] syzkaller0: entered allmulticast mode
[  560.363963][T21485] SET target dimension over the limit!
[  560.373584][T21485] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3977'.
[  560.638347][T21503] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3984'.
[  560.704005][T21500] bond3: option lacp_rate: invalid value (3)
[  560.748338][T21500] bond3 (unregistering): Released all slaves
[  560.884028][T21516] block nbd4: server does not support multiple connections per device.
[  560.958287][T21516] block nbd4: shutting down sockets
[  561.610658][T21516] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  561.618908][T21516] Bluetooth: hci5: Error when powering off device on rfkill (-4)
[  561.645615][T21516] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  561.652304][T21516] Bluetooth: hci2: Error when powering off device on rfkill (-4)
[  561.667644][T21516] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  561.674531][T21516] Bluetooth: hci0: Error when powering off device on rfkill (-4)
[  561.687221][T21516] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  561.695031][T21516] Bluetooth: hci3: Error when powering off device on rfkill (-4)
[  561.717357][T21516] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  561.723465][T21516] Bluetooth: hci1: Error when powering off device on rfkill (-4)
[  561.830291][ T8718] net_ratelimit: 13 callbacks suppressed
[  561.830311][ T8718] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  562.189295][T21574] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3999'.
[  562.223798][T21567] netlink: 'syz.2.3997': attribute type 4 has an invalid length.
[  562.339564][T21574] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3999'.
[  562.456078][T21581] netlink: 64 bytes leftover after parsing attributes in process `syz.0.4000'.
[  562.591270][T21585] netlink: 'syz.3.4001': attribute type 4 has an invalid length.
[  562.647940][T21586] netlink: 'syz.3.4001': attribute type 4 has an invalid length.
[  562.693209][ T5623] udevd[5623]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory
[  562.825328][T21586] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  563.036729][T21598] netlink: 'syz.0.4004': attribute type 1 has an invalid length.
[  563.069815][T21585] tipc: Resetting bearer <eth:batadv0>
[  563.317452][T21598] 8021q: adding VLAN 0 to HW filter on device bond6
[  563.742219][T11092] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  564.089356][T21626] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4013'.
[  564.122822][T20829] IPVS: starting estimator thread 0...
[  564.231538][T21628] IPVS: using max 25 ests per chain, 60000 per kthread
[  564.349298][T21633] netlink: 'syz.2.4010': attribute type 2 has an invalid length.
[  564.905177][T21642] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_rx_wq": -EINTR
[  565.595146][T21670] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4023'.
[  565.718737][T21683] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4025'.
[  565.913514][T21694] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4028'.
[  565.914771][T21673] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4024'.
[  565.948259][T21694] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4028'.
[  565.968558][T21694] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4028'.
[  566.274956][T21705] IPv6: Can't replace route, no match found
[  566.583269][T21718] Cannot find del_set index 1 as target
[  566.763401][T21723] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4039'.
[  566.987172][T21723] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4039'.
[  567.167611][T21740] xt_TCPMSS: Only works on TCP SYN packets
[  567.382931][T21749] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4048'.
[  567.582398][T11092] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  567.694298][T21761] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4053'.
[  567.842179][T21766] IPVS: set_ctl: invalid protocol: 191 172.30.1.2:20001
[  568.342956][T21749] bridge_slave_1 (unregistering): left allmulticast mode
[  568.353425][T21749] bridge_slave_1 (unregistering): left promiscuous mode
[  568.362058][T21749] bridge0: port 2(bridge_slave_1) entered disabled state
[  568.556235][T21771] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  568.682899][T21776] syzkaller0: entered promiscuous mode
[  568.698970][T21776] syzkaller0: entered allmulticast mode
[  568.860897][T14394] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  569.047137][T21800] vlan0: entered promiscuous mode
[  569.085746][T21802] 8021q: VLANs not supported on lo
[  569.416908][T21825] FAULT_INJECTION: forcing a failure.
[  569.416908][T21825] name failslab, interval 1, probability 0, space 0, times 0
[  569.460141][T21825] CPU: 1 UID: 0 PID: 21825 Comm: syz.4.4070 Not tainted syzkaller #0 PREEMPT(full) 
[  569.460175][T21825] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  569.460188][T21825] Call Trace:
[  569.460196][T21825]  <TASK>
[  569.460205][T21825]  dump_stack_lvl+0xe8/0x150
[  569.460242][T21825]  should_fail_ex+0x40c/0x560
[  569.460275][T21825]  should_failslab+0xa8/0x100
[  569.460311][T21825]  __kmalloc_cache_noprof+0xa8/0x660
[  569.460343][T21825]  ? tcp_sendmsg_fastopen+0x1e7/0x5f0
[  569.460445][T21825]  ? tcp_sendmsg_fastopen+0x1e7/0x5f0
[  569.460476][T21825]  tcp_sendmsg_fastopen+0x1e7/0x5f0
[  569.460508][T21825]  mptcp_sendmsg_fastopen+0x17b/0x540
[  569.460604][T21825]  mptcp_sendmsg+0x1a69/0x1d10
[  569.460656][T21825]  ? aa_sk_perm+0x6d5/0x900
[  569.460717][T21825]  ? __pfx_mptcp_sendmsg+0x10/0x10
[  569.460743][T21825]  ? __pfx_aa_sk_perm+0x10/0x10
[  569.460769][T21825]  ? inet_sendmsg+0x298/0x320
[  569.460820][T21825]  ? __pfx_inet_sendmsg+0x10/0x10
[  569.460841][T21825]  sock_sendmsg_nosec+0x10e/0x180
[  569.460876][T21825]  ____sys_sendmsg+0x54e/0x850
[  569.460908][T21825]  ? __pfx_____sys_sendmsg+0x10/0x10
[  569.460944][T21825]  ? import_iovec+0x73/0xa0
[  569.460981][T21825]  ___sys_sendmsg+0x2a5/0x360
[  569.461011][T21825]  ? __lock_acquire+0x683/0x2cf0
[  569.461055][T21825]  ? __pfx____sys_sendmsg+0x10/0x10
[  569.461088][T21825]  ? kstrtouint+0x6e/0xe0
[  569.461193][T21825]  ? __fget_files+0x2a/0x420
[  569.461223][T21825]  ? __fget_files+0x3a2/0x420
[  569.461265][T21825]  __sys_sendmmsg+0x273/0x4d0
[  569.461297][T21825]  ? __pfx___sys_sendmmsg+0x10/0x10
[  569.461338][T21825]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  569.461413][T21825]  ? ksys_write+0x242/0x270
[  569.461438][T21825]  ? __pfx_ksys_write+0x10/0x10
[  569.461467][T21825]  __x64_sys_sendmmsg+0xa0/0xc0
[  569.461493][T21825]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  569.461516][T21825]  do_syscall_64+0x174/0x580
[  569.461542][T21825]  ? trace_irq_disable+0x3b/0x140
[  569.461570][T21825]  ? clear_bhb_loop+0x40/0x90
[  569.461597][T21825]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  569.461618][T21825] RIP: 0033:0x7f4f6cb9de99
[  569.461639][T21825] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  569.461657][T21825] RSP: 002b:00007f4f6da08028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  569.461680][T21825] RAX: ffffffffffffffda RBX: 00007f4f6ce25fa0 RCX: 00007f4f6cb9de99
[  569.461696][T21825] RDX: 0000000000000001 RSI: 0000200000002f00 RDI: 0000000000000003
[  569.461709][T21825] RBP: 00007f4f6da08090 R08: 0000000000000000 R09: 0000000000000000
[  569.461722][T21825] R10: 0000000020004000 R11: 0000000000000246 R12: 0000000000000001
[  569.461735][T21825] R13: 00007f4f6ce26038 R14: 00007f4f6ce25fa0 R15: 00007ffc3e017d58
[  569.461771][T21825]  </TASK>
[  569.750953][T21827] netlink: 'syz.1.4069': attribute type 1 has an invalid length.
[  569.808899][T21827] bond3: entered promiscuous mode
[  569.814855][T21827] 8021q: adding VLAN 0 to HW filter on device bond3
[  569.892293][T21826] 8021q: adding VLAN 0 to HW filter on device bond3
[  569.902407][T21826] bond3: (slave gre1): The slave device specified does not support setting the MAC address
[  569.914970][T21826] bond3: (slave gre1): Setting fail_over_mac to active for active-backup mode
[  569.933406][T21826] bond3: (slave gre1): making interface the new active one
[  569.956241][T21826] gre1: entered promiscuous mode
[  569.973005][T21826] bond3: (slave gre1): Enslaving as an active interface with an up link
[  570.091724][T21840] 0ªX¹¦À: left allmulticast mode
[  570.098502][T21840] veth1_to_bridge: left allmulticast mode
[  570.110720][T21840] ip6tnl2: left allmulticast mode
[  570.118165][T21840] bond4: left promiscuous mode
[  570.123947][T21840] bond4: left allmulticast mode
[  570.145899][T21842] vlan0: entered promiscuous mode
[  570.151549][ T1593] block nbd3: Possible stuck request ffff888027530000: control (read@0,1024B). Runtime 120 seconds
[  570.162530][ T1593] block nbd3: Possible stuck request ffff8880275301c0: control (read@1024,1024B). Runtime 120 seconds
[  570.166849][T21842] hsr0: entered promiscuous mode
[  570.182246][ T1593] block nbd3: Possible stuck request ffff888027530380: control (read@2048,1024B). Runtime 120 seconds
[  570.194217][ T1593] block nbd3: Possible stuck request ffff888027530540: control (read@3072,1024B). Runtime 120 seconds
[  570.215943][T21842] vlan0: entered allmulticast mode
[  570.226180][T21842] hsr0: entered allmulticast mode
[  570.233055][T21842] hsr_slave_0: entered allmulticast mode
[  570.239339][T21842] hsr_slave_1: entered allmulticast mode
[  570.436811][T21860] netlink: 'syz.1.4079': attribute type 4 has an invalid length.
[  570.776737][T21873] FAULT_INJECTION: forcing a failure.
[  570.776737][T21873] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  570.800325][T21873] CPU: 0 UID: 0 PID: 21873 Comm: syz.1.4084 Not tainted syzkaller #0 PREEMPT(full) 
[  570.800356][T21873] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  570.800369][T21873] Call Trace:
[  570.800378][T21873]  <TASK>
[  570.800387][T21873]  dump_stack_lvl+0xe8/0x150
[  570.800423][T21873]  should_fail_ex+0x40c/0x560
[  570.800464][T21873]  _copy_to_user+0x31/0xb0
[  570.800487][T21873]  simple_read_from_buffer+0xe1/0x170
[  570.800525][T21873]  proc_fail_nth_read+0x1bb/0x230
[  570.800558][T21873]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  570.800593][T21873]  ? rw_verify_area+0x24a/0x4c0
[  570.800630][T21873]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  570.800661][T21873]  vfs_read+0x213/0xa80
[  570.800688][T21873]  ? __pfx___mutex_lock+0x10/0x10
[  570.800716][T21873]  ? __pfx_vfs_read+0x10/0x10
[  570.800739][T21873]  ? __fget_files+0x2a/0x420
[  570.800774][T21873]  ? __fget_files+0x3a2/0x420
[  570.800803][T21873]  ? __fget_files+0x2a/0x420
[  570.800842][T21873]  ksys_read+0x150/0x270
[  570.800867][T21873]  ? __pfx_ksys_read+0x10/0x10
[  570.800896][T21873]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  570.800921][T21873]  do_syscall_64+0x174/0x580
[  570.800946][T21873]  ? trace_irq_disable+0x3b/0x140
[  570.800976][T21873]  ? clear_bhb_loop+0x40/0x90
[  570.801011][T21873]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  570.801033][T21873] RIP: 0033:0x7f290b55e6ce
[  570.801052][T21873] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  570.801071][T21873] RSP: 002b:00007f290c441fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  570.801094][T21873] RAX: ffffffffffffffda RBX: 00007f290c4426c0 RCX: 00007f290b55e6ce
[  570.801110][T21873] RDX: 000000000000000f RSI: 00007f290c4420a0 RDI: 0000000000000004
[  570.801123][T21873] RBP: 00007f290c442090 R08: 0000000000000000 R09: 0000000000000000
[  570.801138][T21873] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  570.801150][T21873] R13: 00007f290b826038 R14: 00007f290b825fa0 R15: 00007ffdf86e28e8
[  570.801187][T21873]  </TASK>
[  571.145657][T21853] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  571.199136][T21879] __nla_validate_parse: 7 callbacks suppressed
[  571.199157][T21879] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4087'.
[  571.438981][T21890] tipc: Failed to remove unknown binding: 66,0,0/0:333490507/333490509
[  571.461179][T21890] tipc: Failed to remove unknown binding: 66,0,0/0:333490507/333490508
[  571.470446][T21885] tipc: Failed to remove unknown binding: 66,0,0/0:333490507/333490509
[  571.526181][T21885] tipc: Failed to remove unknown binding: 66,0,0/0:333490507/333490508
[  571.731015][T21905] ip6t_REJECT: ECHOREPLY is not supported
[  571.839561][T21906] syzkaller0: entered promiscuous mode
[  571.853686][T21906] syzkaller0: entered allmulticast mode
[  571.951275][T21915] x_tables: duplicate underflow at hook 3
[  572.206365][T21933] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4106'.
[  572.235119][T21936] batadv_slave_0: entered promiscuous mode
[  572.242257][T14394] nci: nci_ntf_packet: unsupported ntf opcode 0xf00
[  572.314438][T21947] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4106'.
[  572.390482][T21952] x_tables: duplicate underflow at hook 3
[  572.399079][T21952] x_tables: duplicate underflow at hook 3
[  572.417051][T21952] x_tables: duplicate underflow at hook 3
[  572.424807][T21952] x_tables: duplicate underflow at hook 3
[  572.434127][T21952] x_tables: duplicate underflow at hook 3
[  572.442391][T21952] x_tables: duplicate underflow at hook 3
[  572.442903][T21950] openvswitch: netlink: Duplicate or invalid key (type 0).
[  572.456986][T21950] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  572.460865][T21952] x_tables: duplicate underflow at hook 3
[  572.487534][T21952] x_tables: duplicate underflow at hook 3
[  572.493688][T21952] x_tables: duplicate underflow at hook 3
[  572.833458][T21972] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4114'.
[  572.912836][T21923] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  572.927589][T21936] batadv_slave_0: left promiscuous mode
[  573.265452][T21987] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4119'.
[  573.354404][T11092] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  573.462361][T21995] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4121'.
[  573.551071][T22001] gretap1: entered promiscuous mode
[  573.725179][T22001] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4122'.
[  573.849455][T22018] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4125'.
[  574.024428][T22025] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  574.046826][T22025] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4128'.
[  574.058976][T22026] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4128'.
[  574.621590][T14392] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  574.915170][T22066] smc: removing ib device s
z1
[  575.055708][T22074] xt_hashlimit: size too large, truncated to 1048576
[  575.072169][T22066] smbdirect: ib_dev[s
z1] removed
[  575.463442][T22087] Cannot find add_set index 32767 as target
[  576.116409][T22107] lo speed is unknown, defaulting to 1000
[  576.146220][T22114] netlink: 'syz.0.4151': attribute type 1 has an invalid length.
[  576.178181][T22107] lo speed is unknown, defaulting to 1000
[  576.708501][T22122] __nla_validate_parse: 4 callbacks suppressed
[  576.708523][T22122] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4153'.
[  577.691319][T22132] syzkaller0: refused to change device tx_queue_len
[  578.066875][T22146] netlink: 'syz.0.4159': attribute type 7 has an invalid length.
[  578.320775][T22157] syzkaller0: entered promiscuous mode
[  578.343797][T22157] syzkaller0: entered allmulticast mode
[  579.104600][T14394] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  579.140340][T22176] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4166'.
[  579.449928][T22173] bond4: option resend_igmp: invalid value (2878)
[  579.461565][T22173] bond4: option resend_igmp: allowed values 0 - 255
[  579.507879][T22173] bond4 (unregistering): Released all slaves
[  580.384691][T14392] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  580.742126][T22194] syzkaller1: tun_chr_ioctl cmd 2147767521
[  580.811136][T22199] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  580.834647][T22199] syzkaller0: entered promiscuous mode
[  580.846758][T22199] syzkaller0: entered allmulticast mode
[  580.957402][T22199] tipc: Resetting bearer <eth:syzkaller0>
[  581.004785][T22199] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4175'.
[  581.063734][T22199] 8021q: VLANs not supported on vcan0
[  581.103385][T22198] tipc: Resetting bearer <eth:syzkaller0>
[  581.156226][T22217] netlink: 'syz.0.4180': attribute type 29 has an invalid length.
[  581.199085][T22198] tipc: Disabling bearer <eth:syzkaller0>
[  581.226802][T22222] Cannot find map_set index 65532 as target
[  581.248857][T22220] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4183'.
[  581.270756][T22216] kthread_run failed with err -4
[  581.516646][T22235] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2
[  581.945554][T22251] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4190'.
[  582.035684][T22254] netlink: 200 bytes leftover after parsing attributes in process `syz.3.4192'.
[  582.117470][T22258] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4194'.
[  582.743895][T22290] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4204'.
[  582.877836][T22300] netlink: 'syz.1.4207': attribute type 5 has an invalid length.
[  583.193912][T22318] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4212'.
[  583.349838][T22325] TCP: tcp_parse_options: Illegal window scaling value 81 > 14 received
[  583.523978][T22335] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4217'.
[  583.794329][T22348] nbd: must specify at least one socket
[  583.959546][T22353] ipt_rpfilter: unknown options
[  583.968318][T22351] netlink: 'syz.0.4222': attribute type 12 has an invalid length.
[  583.987028][T22351] netlink: 'syz.0.4222': attribute type 29 has an invalid length.
[  584.008961][T22351] netlink: 148 bytes leftover after parsing attributes in process `syz.0.4222'.
[  584.032080][T22351] netlink: 'syz.0.4222': attribute type 1 has an invalid length.
[  584.051089][T22351] netlink: 'syz.0.4222': attribute type 2 has an invalid length.
[  584.069294][T22351] netlink: 11 bytes leftover after parsing attributes in process `syz.0.4222'.
[  584.290409][T22367] xt_hashlimit: size too large, truncated to 1048576
[  584.335260][T22367] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  584.503131][T22375] openvswitch: netlink: Message has 1 unknown bytes.
[  584.521451][T22375] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  584.801589][T22382] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4230'.
[  584.843934][T22389] xt_check_table_hooks: 24 callbacks suppressed
[  584.843955][T22389] x_tables: duplicate underflow at hook 2
[  584.870476][T11092] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  585.045047][T22397] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4233'.
[  585.580299][T22424] netlink: 'syz.1.4244': attribute type 3 has an invalid length.
[  585.607570][T22427] IPv6: Can't replace route, no match found
[  585.829826][T22441] tipc: Enabling of bearer <eth:batadv0> rejected, failed to enable media
[  586.141802][T11092] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  586.436965][T22464] netlink: zone id is out of range
[  586.459632][T22464] netlink: zone id is out of range
[  586.674060][T22476] IPv6: Can't replace route, no match found
[  586.903261][T22494] gretap0: entered promiscuous mode
[  586.923741][T22494] 0ªî{X¹¦: renamed from gretap0
[  586.949356][T22494] 0ªî{X¹¦: left promiscuous mode
[  586.966394][T22494] 0ªî{X¹¦: entered allmulticast mode
[  586.978528][T22494] A link change request failed with some changes committed already. Interface 
30ªî{X¹¦ may have been left with an inconsistent configuration, please check.
[  586.996555][T22499] __nla_validate_parse: 4 callbacks suppressed
[  586.996577][T22499] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4263'.
[  587.306295][T22514] netlink: 128 bytes leftover after parsing attributes in process `syz.0.4269'.
[  587.323777][T22512] netlink: 'syz.1.4267': attribute type 1 has an invalid length.
[  587.348910][T22516] syzkaller1: tun_chr_ioctl cmd 1074025677
[  587.356968][T22512] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4267'.
[  587.376847][T22516] syzkaller1: linktype set to 786
[  587.452104][T22522] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  587.525284][T22522] syzkaller0: entered promiscuous mode
[  587.532081][T22522] syzkaller0: entered allmulticast mode
[  587.538470][T22522] tipc: Resetting bearer <eth:syzkaller0>
[  587.573765][T22526] IPv6: Can't replace route, no match found
[  587.595882][T22521] tipc: Resetting bearer <eth:syzkaller0>
[  587.688793][T22534] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4274'.
[  587.709460][T22536] IPVS: set_ctl: invalid protocol: 115 172.30.0.5:20001
[  587.748441][T22541] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4274'.
[  587.927546][T22546] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4276'.
[  590.623193][T14392] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  591.365124][T22521] tipc: Disabling bearer <eth:syzkaller0>
[  591.379550][ T5723] tipc: Node number set to 1951312274
[  591.571783][T22578] netlink: 766 bytes leftover after parsing attributes in process `syz.1.4280'.
[  591.608993][T22582] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4281'.
[  591.652327][T22582] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4281'.
[  591.681653][T22589] IPv6: Can't replace route, no match found
[  591.901248][T14389] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  592.098602][T22612] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  592.169963][T22618] netlink: 'syz.0.4289': attribute type 21 has an invalid length.
[  592.182756][T22618] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4289'.
[  592.226938][T22612] mac80211_hwsim hwsim39 syzkaller0: entered promiscuous mode
[  592.253001][T22612] mac80211_hwsim hwsim39 syzkaller0: entered allmulticast mode
[  592.559842][T22634] xt_hashlimit: size too large, truncated to 1048576
[  592.700005][T22630] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4293'.
[  595.202859][T22638] IPv6: Can't replace route, no match found
[  595.244547][T22644] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4296'.
[  595.264461][T22643] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4296'.
[  595.490919][T22654] netlink: 84 bytes leftover after parsing attributes in process `syz.0.4299'.
[  595.584824][T22660] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4301'.
[  595.689531][T22659] lo speed is unknown, defaulting to 1000
[  595.737090][T22659] lo speed is unknown, defaulting to 1000
[  595.951981][T22678] bridge0: port 1(bridge_slave_0) entered disabled state
[  595.962325][T22678] bridge0: port 2(bridge_slave_1) entered disabled state
[  596.033524][   T24] IPVS: starting estimator thread 0...
[  596.098907][T22686] SET target dimension over the limit!
[  596.140765][T22688] IPVS: using max 29 ests per chain, 69600 per kthread
[  596.162060][T22694] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  596.360246][T22697] IPv6: Can't replace route, no match found
[  596.381960][T14390] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  596.477479][T22689] netlink: 'syz.2.4306': attribute type 3 has an invalid length.
[  596.836863][T22705] syzkaller0: entered promiscuous mode
[  596.858628][T22705] syzkaller0: entered allmulticast mode
[  596.928564][T22705] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4310'.
[  597.661476][T14392] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  597.841275][T22741] syzkaller1: entered promiscuous mode
[  597.846982][T22741] syzkaller1: entered allmulticast mode
[  597.859257][T22748] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[  598.199880][T22748] block nbd0: reconnected socket
[  598.309651][T22761] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4323'.
[  598.538639][ T5620] block nbd0: Receive control failed (result -32)
[  599.202141][T22805] netlink: 68 bytes leftover after parsing attributes in process `syz.0.4340'.
[  599.743715][T22827] nbd: nbd1 already in use
[  599.754096][T22827] nbd: couldn't find device at index 16771328
[  599.785079][T22831] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4348'.
[  599.798084][T22831] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4348'.
[  599.823357][T22831] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4348'.
[  599.841605][T22831] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4348'.
[  599.869156][T22832] pim6reg1: entered promiscuous mode
[  599.871613][T22828] netlink: 76 bytes leftover after parsing attributes in process `syz.1.4346'.
[  599.890160][T22832] pim6reg1: entered allmulticast mode
[  599.909295][T22835] netlink: 76 bytes leftover after parsing attributes in process `syz.1.4346'.
[  600.229345][ T1593] block nbd3: Possible stuck request ffff888027530000: control (read@0,1024B). Runtime 150 seconds
[  600.240393][ T1593] block nbd3: Possible stuck request ffff8880275301c0: control (read@1024,1024B). Runtime 150 seconds
[  600.251898][ T1593] block nbd3: Possible stuck request ffff888027530380: control (read@2048,1024B). Runtime 150 seconds
[  600.263291][T22855] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4354'.
[  600.263304][ T1593] block nbd3: Possible stuck request ffff888027530540: control (read@3072,1024B). Runtime 150 seconds
[  600.374639][T22863] batman_adv: batadv0: Adding interface: dummy0
[  600.410690][T22863] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  600.440222][T22863] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active
[  600.597169][T22868] geneve4: entered promiscuous mode
[  600.604536][T22863] openvswitch: netlink: Tunnel attr 0 has unexpected len 16 expected 8
[  600.619421][T14394] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  600.646103][T14394] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  600.672376][T14394] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  600.707217][T14394] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  600.846318][T22878] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4358'.
[  601.584255][T22912] netlink: 'syz.1.4370': attribute type 8 has an invalid length.
[  601.781404][T22916] atm:do_vcc_ioctl: ATM_SETSC is obsolete; used by syz.3.4371:22916
[  601.815361][T22922] netlink: 'syz.1.4373': attribute type 12 has an invalid length.
[  602.141842][T14394] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  602.237393][T22928] bond2: option lacp_active: mode dependency failed, not supported in mode balance-alb(6)
[  602.266124][T22928] bond2 (unregistering): Released all slaves
[  602.490753][T22931] ip6gretap0: left promiscuous mode
[  602.543460][T22931] 8021q: adding VLAN 0 to HW filter on device bond0
[  602.599136][T22931] 8021q: adding VLAN 0 to HW filter on device team0
[  602.758076][T22931] batman_adv: batadv0: Interface activated: dummy0
[  602.769328][T22931] batadv0: mtu less than device minimum
[  602.835028][T22931] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  602.846862][T22931] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  602.858735][T22931] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  602.870633][T22931] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  602.882515][T22931] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  602.894521][T22931] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  602.906427][T22931] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  603.052671][T22931] 8021q: adding VLAN 0 to HW filter on device batadv0
[  603.110176][T22931] batman_adv: batadv0: Interface activated: batadv_slave_0
[  603.144515][T22931] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  603.167386][T14394] bridge0: port 1(bridge_slave_0) entered blocking state
[  603.174781][T14394] bridge0: port 1(bridge_slave_0) entered listening state
[  603.207834][T22952] veth1_to_hsr: entered allmulticast mode
[  603.222798][T22944] syzkaller0: entered promiscuous mode
[  603.239545][T22944] syzkaller0: entered allmulticast mode
[  603.330687][T22951] lo speed is unknown, defaulting to 1000
[  603.358950][T22951] lo speed is unknown, defaulting to 1000
[  604.320215][T23002] __nla_validate_parse: 6 callbacks suppressed
[  604.320239][T23002] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4391'.
[  604.353558][T23002] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4391'.
[  604.385493][T23002] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4391'.
[  605.073379][T23035] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4398'.
[  605.351681][   T29] audit: type=1804 audit(1784940403.324:14): pid=23051 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.4399" name="/newroot/200/memory.events" dev="tmpfs" ino=1046 res=1 errno=0
[  605.376419][   T29] audit: type=1800 audit(1784940403.324:15): pid=23051 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.4399" name="memory.events" dev="tmpfs" ino=1046 res=0 errno=0
[  605.398666][   T29] audit: type=1804 audit(1784940403.374:16): pid=23051 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.4399" name="/newroot/200/memory.events" dev="tmpfs" ino=1046 res=1 errno=0
[  605.434749][T23039] bond4: (slave macvlan1): Enslaving as an active interface with an up link
[  605.460481][T23041] bond4 (unregistering): (slave macvlan1): Releasing backup interface
[  605.483155][T23041] bond4 (unregistering): Released all slaves
[  605.549164][T23052] netlink: 65051 bytes leftover after parsing attributes in process `syz.0.4401'.
[  605.647730][T23040] lo speed is unknown, defaulting to 1000
[  605.672314][T23040] lo speed is unknown, defaulting to 1000
[  605.685629][T23054] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw
[  606.194289][T23078] IPv6: NLM_F_CREATE should be specified when creating new route
[  606.746027][T23107] syzkaller0: entered promiscuous mode
[  606.765057][T23107] syzkaller0: entered allmulticast mode
[  606.819871][T23107] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  606.831671][T23109] lo speed is unknown, defaulting to 1000
[  606.864656][T23109] lo speed is unknown, defaulting to 1000
[  606.877857][T23107] tipc: Resetting bearer <eth:syzkaller0>
[  606.913411][T23106] tipc: Resetting bearer <eth:syzkaller0>
[  606.952271][T23106] tipc: Disabling bearer <eth:syzkaller0>
[  606.983720][T23116] vxcan2: entered promiscuous mode
[  606.988962][T23116] vxcan2: entered allmulticast mode
[  607.144255][T23118] netlink: 15 bytes leftover after parsing attributes in process `syz.0.4423'.
[  607.194091][T23120] bridge0: port 1(bridge_slave_0) entered disabled state
[  607.202128][T14394] net_ratelimit: 52 callbacks suppressed
[  607.202149][T14394] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a
[  607.224807][T14394] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  607.239119][T23120] bridge0: port 1(bridge_slave_0) entered blocking state
[  607.239545][T23120] bridge0: port 1(bridge_slave_0) entered listening state
[  607.274351][T23120] team0: Port device bridge0 added
[  607.675997][T23134] netlink: 9 bytes leftover after parsing attributes in process `syz.1.4428'.
[  607.714801][T23134] gretap0: entered promiscuous mode
[  607.772949][T14394] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a
[  607.787779][T14394] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  607.802818][T23135] netlink: 5 bytes leftover after parsing attributes in process `syz.1.4428'.
[  607.848183][T23135] 0ªî{X¹¦: renamed from gretap0
[  607.872307][T23135] 0ªî{X¹¦: left promiscuous mode
[  607.877452][T23135] 0ªî{X¹¦: entered allmulticast mode
[  607.907095][T14394] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  607.918395][T23135] A link change request failed with some changes committed already. Interface 
30ªî{X¹¦ may have been left with an inconsistent configuration, please check.
[  608.226516][T23148] ip_vti0: Master is either lo or non-ether device
[  608.324226][ T8718] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a
[  608.338703][ T8718] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  608.460860][ T8718] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  608.643440][T23164] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4436'.
[  608.857098][T23172] bridge0: entered allmulticast mode
[  608.900091][ T8718] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a
[  608.934180][T23174] 
[  608.936586][T23174] ======================================================
[  608.943649][T23174] WARNING: possible circular locking dependency detected
[  608.950724][T23174] syzkaller #0 Not tainted
[  608.955173][T23174] ------------------------------------------------------
[  608.962231][T23174] syz.0.4438/23174 is trying to acquire lock:
[  608.968343][T23174] ffff88801c295180 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_remove_by_name_ns+0x4e/0x140
[  608.978696][T23174] 
[  608.978696][T23174] but task is already holding lock:
[  608.986105][T23174] ffff88801c2952a0 (&root->kernfs_supers_rwsem){++++}-{4:4}, at: kernfs_remove_by_name_ns+0x3f/0x140
[  608.997053][T23174] 
[  608.997053][T23174] which lock already depends on the new lock.
[  608.997053][T23174] 
[  609.007494][T23174] 
[  609.007494][T23174] the existing dependency chain (in reverse order) is:
[  609.016727][T23174] 
[  609.016727][T23174] -> #10 (&root->kernfs_supers_rwsem){++++}-{4:4}:
[  609.025680][T23174]        down_read+0x4a/0x330
[  609.030455][T23174]        kernfs_remove_by_name_ns+0x3f/0x140
[  609.036469][T23174]        internal_create_group+0x58e/0x1180
[  609.042401][T23174]        sysfs_update_groups+0x60/0x130
[  609.047981][T23174]        pmu_dev_alloc+0x29b/0x300
[  609.053125][T23174]        perf_event_sysfs_init+0x76/0x100
[  609.058894][T23174]        do_one_initcall+0x250/0x870
[  609.064481][T23174]        do_initcall_level+0x10a/0x1a0
[  609.069985][T23174]        do_initcalls+0x59/0xa0
[  609.074868][T23174]        kernel_init_freeable+0x29d/0x3e0
[  609.080623][T23174]        kernel_init+0x1d/0x1d0
[  609.085592][T23174]        ret_from_fork+0x514/0xb70
[  609.090738][T23174]        ret_from_fork_asm+0x1a/0x30
[  609.096063][T23174] 
[  609.096063][T23174] -> #9 (pmus_lock){+.+.}-{4:4}:
[  609.103308][T23174]        __mutex_lock+0x19d/0x1550
[  609.108465][T23174]        perf_event_init_cpu+0x1d1/0x7a0
[  609.114159][T23174]        cpuhp_invoke_callback+0x434/0x810
[  609.120024][T23174]        cpuhp_thread_fun+0x362/0x780
[  609.125444][T23174]        smpboot_thread_fn+0x57c/0xa80
[  609.131052][T23174]        kthread+0x388/0x470
[  609.135685][T23174]        ret_from_fork+0x514/0xb70
[  609.140844][T23174]        ret_from_fork_asm+0x1a/0x30
[  609.146163][T23174] 
[  609.146163][T23174] -> #8 (cpuhp_state-up){+.+.}-{0:0}:
[  609.153877][T23174]        cpuhp_thread_fun+0x127/0x780
[  609.159313][T23174]        smpboot_thread_fn+0x57c/0xa80
[  609.164811][T23174]        kthread+0x388/0x470
[  609.169637][T23174]        ret_from_fork+0x514/0xb70
[  609.174792][T23174]        ret_from_fork_asm+0x1a/0x30
[  609.180114][T23174] 
[  609.180114][T23174] -> #7 (cpu_hotplug_lock){++++}-{0:0}:
[  609.187981][T23174]        cpus_read_lock+0x42/0x160
[  609.193146][T23174]        static_key_slow_inc+0x12/0x30
[  609.198652][T23174]        nbd_genl_reconfigure+0x1301/0x1e80
[  609.204744][T23174]        genl_family_rcv_msg_doit+0x233/0x340
[  609.210854][T23174]        genl_rcv_msg+0x614/0x7a0
[  609.215915][T23174]        netlink_rcv_skb+0x226/0x4a0
[  609.221231][T23174]        genl_rcv+0x28/0x40
[  609.225767][T23174]        netlink_unicast+0x7bb/0x940
[  609.231081][T23174]        netlink_sendmsg+0x813/0xb40
[  609.236386][T23174]        sock_sendmsg_nosec+0x13a/0x180
[  609.241963][T23174]        ____sys_sendmsg+0x54e/0x850
[  609.247284][T23174]        ___sys_sendmsg+0x2a5/0x360
[  609.252525][T23174]        __x64_sys_sendmsg+0x1b1/0x290
[  609.258011][T23174]        do_syscall_64+0x174/0x580
[  609.263149][T23174]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  609.269725][T23174] 
[  609.269725][T23174] -> #6 (&nsock->tx_lock){+.+.}-{4:4}:
[  609.277434][T23174]        __mutex_lock+0x19d/0x1550
[  609.282579][T23174]        nbd_queue_rq+0x373/0x1150
[  609.287742][T23174]        blk_mq_dispatch_rq_list+0x499/0x1990
[  609.293936][T23174]        __blk_mq_sched_dispatch_requests+0xd36/0x1580
[  609.300858][T23174]        blk_mq_sched_dispatch_requests+0xd7/0x190
[  609.307398][T23174]        blk_mq_run_work_fn+0x16c/0x300
[  609.312963][T23174]        process_scheduled_works+0xa8e/0x14e0
[  609.319058][T23174]        worker_thread+0xa47/0xfb0
[  609.324211][T23174]        kthread+0x388/0x470
[  609.328838][T23174]        ret_from_fork+0x514/0xb70
[  609.334004][T23174]        ret_from_fork_asm+0x1a/0x30
[  609.339309][T23174] 
[  609.339309][T23174] -> #5 (&cmd->lock){+.+.}-{4:4}:
[  609.346580][T23174]        __mutex_lock+0x19d/0x1550
[  609.351728][T23174]        nbd_queue_rq+0xc1/0x1150
[  609.356772][T23174]        blk_mq_dispatch_rq_list+0x499/0x1990
[  609.362874][T23174]        __blk_mq_sched_dispatch_requests+0xd36/0x1580
[  609.369768][T23174]        blk_mq_sched_dispatch_requests+0xd7/0x190
[  609.376338][T23174]        blk_mq_run_work_fn+0x16c/0x300
[  609.381915][T23174]        process_scheduled_works+0xa8e/0x14e0
[  609.388188][T23174]        worker_thread+0xa47/0xfb0
[  609.393513][T23174]        kthread+0x388/0x470
[  609.398140][T23174]        ret_from_fork+0x514/0xb70
[  609.403290][T23174]        ret_from_fork_asm+0x1a/0x30
[  609.408607][T23174] 
[  609.408607][T23174] -> #4 (set->srcu){.+.+}-{0:0}:
[  609.415853][T23174]        __synchronize_srcu+0xc9/0x2f0
[  609.421355][T23174]        elevator_switch+0x1e8/0x7b0
[  609.426781][T23174]        elevator_change+0x2fa/0x480
[  609.432093][T23174]        elevator_set_default+0x375/0x440
[  609.437847][T23174]        blk_register_queue+0x3f3/0x4e0
[  609.443470][T23174]        __add_disk+0x6cb/0xe30
[  609.448343][T23174]        add_disk_fwnode+0x100/0x3a0
[  609.453651][T23174]        nbd_dev_add+0x733/0xb60
[  609.458607][T23174]        nbd_init+0x15f/0x1e0
[  609.463309][T23174]        do_one_initcall+0x250/0x870
[  609.468644][T23174]        do_initcall_level+0x10a/0x1a0
[  609.474159][T23174]        do_initcalls+0x59/0xa0
[  609.479059][T23174]        kernel_init_freeable+0x29d/0x3e0
[  609.484831][T23174]        kernel_init+0x1d/0x1d0
[  609.489749][T23174]        ret_from_fork+0x514/0xb70
[  609.494920][T23174]        ret_from_fork_asm+0x1a/0x30
[  609.500273][T23174] 
[  609.500273][T23174] -> #3 (&q->elevator_lock){+.+.}-{4:4}:
[  609.508168][T23174]        __mutex_lock+0x19d/0x1550
[  609.513437][T23174]        elevator_change+0x1af/0x480
[  609.518768][T23174]        elevator_set_none+0xb5/0x140
[  609.524221][T23174]        blk_mq_update_nr_hw_queues+0x5ef/0x19f0
[  609.530682][T23174]        nbd_start_device+0x189/0xb30
[  609.536101][T23174]        nbd_genl_connect+0x1597/0x1c10
[  609.541677][T23174]        genl_family_rcv_msg_doit+0x233/0x340
[  609.547791][T23174]        genl_rcv_msg+0x614/0x7a0
[  609.552919][T23174]        netlink_rcv_skb+0x226/0x4a0
[  609.558254][T23174]        genl_rcv+0x28/0x40
[  609.562794][T23174]        netlink_unicast+0x7bb/0x940
[  609.568100][T23174]        netlink_sendmsg+0x813/0xb40
[  609.573424][T23174]        sock_sendmsg_nosec+0x13a/0x180
[  609.579003][T23174]        ____sys_sendmsg+0x54e/0x850
[  609.584336][T23174]        ___sys_sendmsg+0x2a5/0x360
[  609.589600][T23174]        __x64_sys_sendmsg+0x1b1/0x290
[  609.595089][T23174]        do_syscall_64+0x174/0x580
[  609.600413][T23174]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  609.606852][T23174] 
[  609.606852][T23174] -> #2 (&q->q_usage_counter(io)#49){++++}-{0:0}:
[  609.615485][T23174]        blk_alloc_queue+0x544/0x690
[  609.620800][T23174]        __blk_mq_alloc_disk+0x194/0x390
[  609.626454][T23174]        nbd_dev_add+0x494/0xb60
[  609.631410][T23174]        nbd_init+0x15f/0x1e0
[  609.636113][T23174]        do_one_initcall+0x250/0x870
[  609.641431][T23174]        do_initcall_level+0x10a/0x1a0
[  609.646922][T23174]        do_initcalls+0x59/0xa0
[  609.651846][T23174]        kernel_init_freeable+0x29d/0x3e0
[  609.657622][T23174]        kernel_init+0x1d/0x1d0
[  609.662515][T23174]        ret_from_fork+0x514/0xb70
[  609.667698][T23174]        ret_from_fork_asm+0x1a/0x30
[  609.673026][T23174] 
[  609.673026][T23174] -> #1 (fs_reclaim){+.+.}-{0:0}:
[  609.680273][T23174]        fs_reclaim_acquire+0x71/0x100
[  609.685767][T23174]        kmem_cache_alloc_lru_noprof+0x65/0x5f0
[  609.692050][T23174]        alloc_inode+0xb8/0x1b0
[  609.696952][T23174]        iget_locked+0x131/0x6a0
[  609.701939][T23174]        kernfs_get_inode+0x4f/0x770
[  609.707271][T23174]        kernfs_get_tree+0x5cd/0x980
[  609.712588][T23174]        vfs_get_tree+0x92/0x2a0
[  609.717545][T23174]        do_new_mount+0x319/0xdc0
[  609.722701][T23174]        __se_sys_mount+0x31d/0x420
[  609.727950][T23174]        do_syscall_64+0x174/0x580
[  609.733098][T23174]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  609.739541][T23174] 
[  609.739541][T23174] -> #0 (&root->kernfs_rwsem){++++}-{4:4}:
[  609.747560][T23174]        __lock_acquire+0x1520/0x2cf0
[  609.752964][T23174]        lock_acquire+0x106/0x350
[  609.758024][T23174]        down_write+0x96/0x200
[  609.762816][T23174]        kernfs_remove_by_name_ns+0x4e/0x140
[  609.768823][T23174]        del_nbp+0x93/0x9f0
[  609.773405][T23174]        br_dev_delete+0x6e/0x130
[  609.778447][T23174]        br_del_bridge+0xb1/0xf0
[  609.783407][T23174]        br_ioctl_stub+0x746/0xd60
[  609.788631][T23174]        sock_ioctl+0x4e1/0x7e0
[  609.793598][T23174]        __se_sys_ioctl+0xfc/0x170
[  609.798763][T23174]        do_syscall_64+0x174/0x580
[  609.804008][T23174]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  609.810443][T23174] 
[  609.810443][T23174] other info that might help us debug this:
[  609.810443][T23174] 
[  609.820697][T23174] Chain exists of:
[  609.820697][T23174]   &root->kernfs_rwsem --> pmus_lock --> &root->kernfs_supers_rwsem
[  609.820697][T23174] 
[  609.834633][T23174]  Possible unsafe locking scenario:
[  609.834633][T23174] 
[  609.842119][T23174]        CPU0                    CPU1
[  609.847500][T23174]        ----                    ----
[  609.852906][T23174]   rlock(&root->kernfs_supers_rwsem);
[  609.858388][T23174]                                lock(pmus_lock);
[  609.864853][T23174]                                lock(&root->kernfs_supers_rwsem);
[  609.872766][T23174]   lock(&root->kernfs_rwsem);
[  609.877556][T23174] 
[  609.877556][T23174]  *** DEADLOCK ***
[  609.877556][T23174] 
[  609.885735][T23174] 3 locks held by syz.0.4438/23174:
[  609.890961][T23174]  #0: ffffffff9000e240 (br_ioctl_mutex){+.+.}-{4:4}, at: sock_ioctl+0x4b8/0x7e0
[  609.900312][T23174]  #1: ffffffff9002d500 (rtnl_mutex){+.+.}-{4:4}, at: br_ioctl_stub+0x1a8/0xd60
[  609.909431][T23174]  #2: ffff88801c2952a0 (&root->kernfs_supers_rwsem){++++}-{4:4}, at: kernfs_remove_by_name_ns+0x3f/0x140
[  609.920791][T23174] 
[  609.920791][T23174] stack backtrace:
[  609.926789][T23174] CPU: 0 UID: 0 PID: 23174 Comm: syz.0.4438 Not tainted syzkaller #0 PREEMPT(full) 
[  609.926811][T23174] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  609.926823][T23174] Call Trace:
[  609.926832][T23174]  <TASK>
[  609.926840][T23174]  dump_stack_lvl+0xe8/0x150
[  609.926871][T23174]  print_circular_bug+0x2e1/0x300
[  609.926892][T23174]  check_noncircular+0x12e/0x150
[  609.926912][T23174]  __lock_acquire+0x1520/0x2cf0
[  609.926939][T23174]  ? lockdep_unlock+0x5d/0xd0
[  609.926965][T23174]  ? ktime_get+0x45/0x220
[  609.926991][T23174]  ? kernfs_remove_by_name_ns+0x4e/0x140
[  609.927009][T23174]  lock_acquire+0x106/0x350
[  609.927040][T23174]  ? kernfs_remove_by_name_ns+0x4e/0x140
[  609.927064][T23174]  down_write+0x96/0x200
[  609.927087][T23174]  ? kernfs_remove_by_name_ns+0x4e/0x140
[  609.927105][T23174]  ? __pfx_down_write+0x10/0x10
[  609.927129][T23174]  ? down_read+0x2be/0x330
[  609.927153][T23174]  kernfs_remove_by_name_ns+0x4e/0x140
[  609.927173][T23174]  del_nbp+0x93/0x9f0
[  609.927192][T23174]  ? full_name_hash+0x92/0xe0
[  609.927217][T23174]  br_dev_delete+0x6e/0x130
[  609.927235][T23174]  br_del_bridge+0xb1/0xf0
[  609.927253][T23174]  br_ioctl_stub+0x746/0xd60
[  609.927273][T23174]  ? trace_contention_end+0x3d/0x140
[  609.927292][T23174]  ? __mutex_lock+0x30d/0x1550
[  609.927313][T23174]  ? __pfx_br_ioctl_stub+0x10/0x10
[  609.927333][T23174]  ? __pfx_do_vfs_ioctl+0x10/0x10
[  609.927354][T23174]  ? sock_ioctl+0x4b8/0x7e0
[  609.927379][T23174]  ? hook_file_ioctl+0x1f0/0x5f0
[  609.927403][T23174]  ? __pfx_br_ioctl_stub+0x10/0x10
[  609.927422][T23174]  sock_ioctl+0x4e1/0x7e0
[  609.927446][T23174]  ? __pfx_sock_ioctl+0x10/0x10
[  609.927470][T23174]  ? __fget_files+0x2a/0x420
[  609.927493][T23174]  ? __fget_files+0x3a2/0x420
[  609.927517][T23174]  ? __fget_files+0x2a/0x420
[  609.927543][T23174]  ? bpf_lsm_file_ioctl+0x9/0x20
[  609.927565][T23174]  ? __pfx_sock_ioctl+0x10/0x10
[  609.927588][T23174]  __se_sys_ioctl+0xfc/0x170
[  609.927605][T23174]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  609.927623][T23174]  do_syscall_64+0x174/0x580
[  609.927645][T23174]  ? trace_irq_disable+0x3b/0x140
[  609.927668][T23174]  ? clear_bhb_loop+0x40/0x90
[  609.927687][T23174]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  609.927705][T23174] RIP: 0033:0x7f051df9de99
[  609.927723][T23174] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  609.927738][T23174] RSP: 002b:00007f051eed8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  609.927756][T23174] RAX: ffffffffffffffda RBX: 00007f051e226090 RCX: 00007f051df9de99
[  609.927769][T23174] RDX: 0000200000000900 RSI: 00000000000089a1 RDI: 0000000000000009
[  609.927781][T23174] RBP: 00007f051e033eaf R08: 0000000000000000 R09: 0000000000000000
[  609.927791][T23174] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  609.927802][T23174] R13: 00007f051e226128 R14: 00007f051e226090 R15: 00007ffe13f2ba58
[  609.927822][T23174]  </TASK>
[  610.306296][T23174] bridge_slave_1: left allmulticast mode
[  610.323042][T23174] bridge_slave_1: left promiscuous mode
[  610.351258][T23174] bridge0: port 2(bridge_slave_1) entered disabled state
[  610.396862][T23175] xt_CT: No such helper "netbios-ns"
[  610.417308][T23174] bridge_slave_0: left allmulticast mode
[  610.439245][T23174] bridge_slave_0: left promiscuous mode
[  610.473000][T23174] bridge0: port 1(bridge_slave_0) entered disabled state
[  610.519416][T23181] netlink: 'syz.0.4438': attribute type 10 has an invalid length.
[  610.569965][T23183] veth0: entered promiscuous mode
[  610.576780][T23172] bond0: (slave bond_slave_0): Releasing backup interface
[  610.589577][T23172] bond0: (slave bond_slave_1): Releasing backup interface
[  610.622284][T23172] team0: Port device team_slave_0 removed
[  610.641623][T23172] team0: Port device team_slave_1 removed
[  610.647820][T23172] batman_adv: 
60ªX¹¦À: Removing interface: batadv_slave_0
[  610.662187][T23181] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  610.674738][T23181] team0: Port device netdevsim1 added
[  610.681285][T23178] veth0: left promiscuous mode
[  612.330299][T14390] net_ratelimit: 10 callbacks suppressed
[  612.330316][T14390] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a
[  612.350408][T14390] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  612.870093][T14392] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a
[  612.884549][T14392] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  613.020634][T14392] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  613.409955][ T8718] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a
[  613.424719][ T8718] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  613.670255][ T8718] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  613.939876][ T8718] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a
[  613.954266][ T8718] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  617.530003][T14394] net_ratelimit: 12 callbacks suppressed
[  617.530020][T14394] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a
[  617.550380][T14394] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  618.069928][ T8718] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a
[  618.084294][ T8718] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  618.600034][T14389] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a
[  618.614646][T14389] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  618.781205][T14389] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog