last executing test programs:

4.464693903s ago: executing program 4 (id=3398):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00'})
socket$netlink(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x3, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r2)
getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
setsockopt$inet6_int(r0, 0x29, 0x4c, &(0x7f0000000080)=0x40000006, 0x4)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50)
bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB, @ANYBLOB="fbffffff00000000f31d84", @ANYRES16=r4], 0x50)
socket$kcm(0x10, 0x2, 0x0)
socket$igmp(0x2, 0x3, 0x2)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
socket$inet6_udp(0xa, 0x2, 0x0)
socket(0x2b, 0x3, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800"/14, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000140), 0x2, 0x0)
write$cgroup_freezer_state(r5, &(0x7f0000000040)='FROZEN\x00', 0x7)
getpid()
r6 = socket$kcm(0xa, 0x2, 0x0)
r7 = socket(0x2, 0x80805, 0x0)
setsockopt$IP_VS_SO_SET_ADD(r7, 0x0, 0x482, &(0x7f0000000240)={0x84, @rand_addr=0x64010102, 0x4e20, 0x3, 'nq\x00', 0x0, 0x660f537f, 0x70}, 0x2c)
setsockopt$IP_VS_SO_SET_ADDDEST(r7, 0x0, 0x487, &(0x7f0000000000)={{0x84, @multicast2, 0x4f29, 0x3, 'nq\x00', 0x5, 0x800000c, 0x26}, {@rand_addr=0x64010101, 0x4e22, 0x3, 0x1, 0x1, 0x8}}, 0x44)
sendmsg$sock(r6, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0xfd}}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0)
r8 = socket$inet_udp(0x2, 0x2, 0x0)
connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r8, {0x2, 0x0, @broadcast}, 0x2}}, 0x2e)

4.345972404s ago: executing program 3 (id=3400):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_int(r0, 0x29, 0xcf, &(0x7f0000000000), 0x4)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r1)
sendmsg$NL80211_CMD_SET_NOACK_MAP(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x30, r3, 0x100, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x3, 0x50}}}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x8}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0xa}]}, 0x30}, 0x1, 0x0, 0x0, 0x4008044}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00', <r4=>0x0})
sendmsg$NL80211_CMD_LEAVE_MESH(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x28, r3, 0x20, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x8001, 0x5c}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_TDLS_OPER(r5, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x30, r3, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_TDLS_OPERATION={0x5}, @NL80211_ATTR_MAC={0xa}]}, 0x30}, 0x1, 0x0, 0x0, 0x4044045}, 0x40400c5)
syz_emit_ethernet(0x101d, &(0x7f00000003c0)={@empty, @remote, @val={@void, {0x8100, 0x0, 0x0, 0x3}}, {@mpls_mc={0x8848, {[{0x8}, {0xfff, 0x0, 0x1}], @llc={@llc={0xf0, 0x2, "c1", "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"}}}}}}, &(0x7f0000001400)={0x1, 0x4, [0x2cb, 0x1, 0x9e2, 0x1cc]})
r6 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet6_opts(r6, 0x29, 0x37, &(0x7f0000001440)=@srh={0x16, 0x6, 0x4, 0x3, 0xc, 0x70, 0xacf, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private1, @dev={0xfe, 0x80, '\x00', 0x1e}]}, 0x38)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000001480)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in6={0xa, 0x4e23, 0x5, @mcast1, 0x8}], 0x2c)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_HEADER(r7, &(0x7f00000015c0)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001580)={&(0x7f0000001500)={0x60, 0xc, 0x6, 0x301, 0x0, 0x0, {0x5, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x60}, 0x1, 0x0, 0x0, 0x11}, 0x4001)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002700)={r7, 0x0, 0x0, 0x1f, &(0x7f0000001600), &(0x7f0000001640)=""/31, 0x2000, 0x0, 0x1000, 0x5a, &(0x7f0000001680)="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", &(0x7f0000002680)="ed7caf758d02c96fc607bcbfb56a27768ef1979f9c4bc5a449a116d7497bc78c47449c8a7468717c0635f28a784a632c95f0ded6f8503e2a3d118679901a4bd28c5d030927f3aa997eceb9445a8310d68164ccfc7d6233b2e67f", 0x6, 0x0, 0x6}, 0x50)
r8 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_SYS_GET(r8, &(0x7f0000002840)={&(0x7f0000002780)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000002800)={&(0x7f00000027c0)={0x30, 0x1406, 0x400, 0x70bd29, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000001}, 0x0)
r9 = syz_genetlink_get_family_id$fou(&(0x7f00000028c0), r1)
sendmsg$FOU_CMD_ADD(r5, &(0x7f0000002980)={&(0x7f0000002880)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000002940)={&(0x7f0000002900)={0x14, r9, 0x2, 0x70bd2a, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x200040b5}, 0x885)
ioctl$AUTOFS_IOC_PROTOVER(r0, 0x80049363, &(0x7f00000029c0))
openat$nci(0xffffffffffffff9c, &(0x7f0000002a00), 0x2, 0x0)
socket$kcm(0x29, 0x7, 0x0)
r10 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r10, &(0x7f0000002b00)={&(0x7f0000002a40)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000002ac0)={&(0x7f0000002a80)=@getneigh={0x14, 0x1e, 0x8, 0x70bd28, 0x25dfdbff, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x4)
r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002b80), r2)
sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r2, &(0x7f0000002c80)={&(0x7f0000002b40)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000002c40)={&(0x7f0000002bc0)={0x70, r11, 0x1, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x81, 0x61}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x3a5}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x33}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x28}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x70}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x4f}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0xe}]}, 0x70}, 0x1, 0x0, 0x0, 0x20004010}, 0x4000140)
r12 = bpf$ITER_CREATE(0x21, &(0x7f0000002cc0), 0x8)
ioctl$TUNSETQUEUE(r12, 0x400454d9, &(0x7f0000002d00)={'pimreg1\x00', 0x200})

3.841765691s ago: executing program 4 (id=3402):
socket(0x15, 0x3, 0x33de62fe)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'erspan0\x00', <r3=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_INDEX={0x8, 0x15, 0xf967f}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x40}}, 0x0)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1f}}, 0x10)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x41, &(0x7f0000000200)=0x439a, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendto$inet6(r4, 0x0, 0x0, 0x0, &(0x7f0000000180)={0xa, 0x4e20, 0xffffffff, @loopback, 0xbf}, 0x1c)
setsockopt$inet6_int(r4, 0x29, 0x8, &(0x7f0000000f40)=0x6c, 0x4)
recvmmsg(r4, &(0x7f0000000140)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002000)=""/4126, 0x101e}, 0x6}], 0x1, 0x2000, 0x0)

3.824268246s ago: executing program 3 (id=3403):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000180)={0x6, 0x2, 0x4, 0x1, 0x10, 0x8, 0x0, 0x9, 0x0, 0x8}, 0xe)
shutdown(r0, 0x0)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x0, 0x8, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x200088c5}, 0x800)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r3 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast})
write$tun(r2, &(0x7f0000000380)={@val={0x3, 0x800}, @val={0x1, 0x0, 0x0, 0x24, 0x14}, @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x68, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x1, 0x30, 0x4, 0x66, 0x80, 0x4, 0x32, 0xaf, @private=0xa010100, @local}, "50040124c5aee3f3"}}}, 0x46)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={<r4=>0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10)
getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000100)={r4, 0x41}, &(0x7f0000000140)=0x8)

3.467470077s ago: executing program 3 (id=3404):
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
bind$bt_hci(r0, &(0x7f0000000000)={0x27}, 0x74)
r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040)=0xffffffffffffffff, 0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0xd, &(0x7f00000000c0)=ANY=[@ANYRESDEC=r0], &(0x7f0000000000)='syzkaller\x00', 0x4, 0x98, &(0x7f00000001c0)=""/152, 0x41000, 0xa, '\x00', 0x0, 0x0, r1}, 0x94)

3.305959461s ago: executing program 3 (id=3405):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet6(r1, &(0x7f0000000300)={0xa, 0x1, 0xfffffffe, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2e}}}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000280)=@gcm_256={{0x303}, "1afc7c14d332bcc6", "a9ba0c85d68723369f51322151d9f41aaa2832bb07cc1e49ad714beac6f1ade8", "49960d8f", "bff2a81527ae4190"}, 0x38)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000200), r2)
sendmsg$NBD_CMD_CONNECT(r2, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002780)={&(0x7f00000002c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010029bd7000fbdbdf25010000000c00020000000000000000001c0007801800018008000100", @ANYBLOB="04"], 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0)
write$cgroup_int(r4, &(0x7f0000000000), 0xffffff6a)
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r4, 0x84, 0xf, &(0x7f0000000140)={<r5=>0x0, @in6={{0xa, 0x4e22, 0x4, @loopback}}, 0x4, 0x8, 0x8, 0x9, 0x7c24}, &(0x7f0000000240)=0x98)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000380)={r5, @in6={{0xa, 0x4e20, 0x7ff, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7}}, 0x7, 0x7ff, 0x2, 0x8, 0x0, 0x0, 0x2}, 0x9c)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000100)={0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETCHAIN(r6, 0x0, 0x80)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000340), 0x0)
bind$bt_hci(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0)
unshare(0x400)
r7 = socket(0x40000000015, 0x5, 0x0)
ppoll(&(0x7f0000000080)=[{r7, 0x800}], 0x1, &(0x7f0000000180)={0x0, 0x3938700}, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x4)
sendfile(r1, r4, 0x0, 0x20000000002)

2.945140596s ago: executing program 4 (id=3410):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(blowfish)\x00'}, 0x58)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r2 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000280)="f5", 0x1)
bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10)
sendmsg$netlink(r1, &(0x7f0000001600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000100000000073ad82270056f30000800100000001000000"], 0x30, 0x80}, 0x4000080)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000540)={{}, &(0x7f0000000340), &(0x7f00000004c0)='%-5lx  \x00'}, 0x20)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000780)={{{@in, @in=@loopback}}, {{@in6=@mcast2}, 0x0, @in=@broadcast}}, &(0x7f0000000180)=0xe8)
r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, 0x0, &(0x7f0000003b80))
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000003d80))
ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000280)={0x0, @l2tp={0x2, 0x0, @rand_addr=0x64010101, 0x3}, @nl=@proc={0x10, 0x0, 0x25dfdbff, 0x20000}, @isdn={0x22, 0x2, 0x7, 0x2, 0x9}, 0xa55c, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000240)='ip6_vti0\x00', 0x7, 0x4, 0x3})
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10)
r4 = socket(0xb, 0x3, 0x1)
sendmsg$nl_generic(r4, 0x0, 0x20008040)
socket$inet6_icmp(0xa, 0x2, 0x3a)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a34000000140affffffff00000000000002000009080003400000000a0900010073797a30000000000c000640000000000000000214000000020a010100000000000000000000000a140000"], 0x70}}, 0x0)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0)
unshare(0x20000400)
socket$phonet_pipe(0x23, 0x5, 0x2)
r5 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x4, 0x5, &(0x7f0000000500)=ANY=[@ANYBLOB="18020000feffffff000000000000000085000000220000008500"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x28, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
sendmsg$TIPC_NL_MEDIA_SET(r5, &(0x7f0000001800)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44054}, 0x8010)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r7, 0x8923, &(0x7f0000000080)={'bridge_slave_0\x00', @random="0131be7839ff"})

2.365661175s ago: executing program 3 (id=3413):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$team(&(0x7f0000000180), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', <r2=>0x0})
sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010029bd6080ffdbdf250100000008000100", @ANYRES32=r2, @ANYBLOB="d9fb915e"], 0x20}, 0x1, 0x400000000000000, 0x0, 0x98}, 0x4814)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'wlan0\x00', <r4=>0x0})
sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f00000005c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000580)={&(0x7f0000000480)={0xc8, r3, 0x0, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x11}, @val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x2c, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x2c, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0xc, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x1c, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}]}], @NL80211_ATTR_MESH_ID={0xa}]}, 0xc8}, 0x1, 0x0, 0x0, 0x40540c0}, 0x20000041)
r5 = socket$kcm(0x21, 0x2, 0x2)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x8, 0x1000000}, 0xfffffedf, 0x10, &(0x7f0000000040), 0xeafcf7e0, 0x0, 0xffffffffffffffff, 0xd}, 0x48)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r7, 0x1, 0x32, &(0x7f00000000c0)=r6, 0x4)
sendmsg$unix(r8, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000002c0)="8a04", 0x2}], 0x1, 0x0, 0x0, 0x800}, 0x40044)
r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x4504c0, 0x0)
ioctl$SIOCSIFHWADDR(r9, 0x8924, &(0x7f0000000240)={'pimreg0\x00', @local})
r10 = socket$netlink(0x10, 0x3, 0x0)
r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000008850000007600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80)
sendmsg$nl_route_sched(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000005c0)=@newtaction={0x8e0, 0x30, 0xffffffffffffffff, 0x0, 0x40002, {}, [{0x8cc, 0x1, [@m_bpf={0x4c, 0x1, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x64, 0x7, 0x8, 0x1}}, @TCA_ACT_BPF_FD={0x8, 0x5, r11}]}, {0x4}, {0xc}, {0xc}}}, @m_police={0x87c, 0x2, 0x0, 0x0, {{0xb}, {0x850, 0x2, 0x0, 0x1, [[@TCA_POLICE_AVRATE={0x8, 0x4, 0x8}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x28, 0xfffffff8, 0x3, 0x4, 0xffffffc0, 0x6, 0x5, 0x5, 0x2, 0x117, 0x10000, 0x8001, 0x2, 0x1, 0x7, 0x9, 0x80000000, 0xaa, 0x3ff, 0x4, 0x9, 0x0, 0x51, 0xf, 0x2, 0x1, 0x10000, 0x200, 0x7, 0x2, 0x6, 0x8, 0x101, 0x8, 0x0, 0x3, 0xe, 0x66d, 0x80000000, 0x3, 0x1, 0x8, 0x2, 0x7fff, 0xd, 0x4, 0x1ff, 0xffff, 0x7f, 0xfffffffd, 0x40, 0x7, 0x3, 0x400, 0x6, 0x8, 0x2, 0x1, 0x7, 0x9, 0x594, 0x0, 0x2900, 0x100, 0x4, 0x305c000, 0x7, 0xfffffff7, 0x7, 0x800, 0x5, 0xf24, 0x5, 0x7fffffff, 0x923, 0x101, 0x1155, 0x3, 0x1, 0x0, 0xffffffff, 0xcd2, 0xfffffffa, 0x800, 0x4, 0x81, 0x3, 0x0, 0x3, 0xf, 0x1, 0x1, 0xe, 0x3b2, 0x6, 0x4, 0x1ff, 0x6, 0x5, 0x1000, 0xe6, 0x7fff, 0x1, 0x8c, 0x1, 0x80, 0xfffffffb, 0x5, 0x7f0, 0xfffffff0, 0xffff, 0xfffffff7, 0xcfb6, 0x6, 0x4, 0x1194, 0xaf, 0xa, 0x2, 0xe0, 0x0, 0x7f, 0x6, 0x0, 0x2, 0x9a7, 0x7a2, 0x5, 0x83f, 0xa36e58b, 0x100, 0x9, 0x7, 0x8, 0x2, 0x1, 0xfffffffe, 0x1242, 0x579, 0x3, 0x5, 0x7, 0x0, 0x4, 0x8d, 0x3, 0x4, 0x5, 0x8, 0xc, 0x6, 0xffffffff, 0xaebe, 0x9, 0x90a, 0x7, 0x3, 0x2, 0x80000000, 0x9, 0x9, 0x5, 0xfffffff1, 0x3cd, 0xc, 0x4, 0x2, 0x9, 0x6, 0x4, 0x4, 0x7, 0x0, 0x2, 0x1, 0x5, 0x7f, 0xe6ef, 0x9, 0x6, 0x1, 0x7, 0x0, 0x7fffffff, 0x7, 0x0, 0x8, 0x9, 0x5, 0x8, 0x0, 0x6, 0x7, 0x1, 0x401, 0x8762, 0x9, 0x0, 0x4, 0x4, 0xff, 0x3, 0xc, 0x8, 0xf, 0x2, 0x6, 0x80000000, 0x3, 0x7f, 0xfffffffc, 0x2, 0x61, 0x8, 0x100, 0x5, 0xc56, 0xe, 0x0, 0x8, 0x8, 0x6, 0x9, 0x5b0, 0x6, 0xffff, 0x5f3, 0xc5f8, 0x1000, 0x2, 0x9, 0x7, 0x1, 0x1, 0x3, 0x0, 0x2, 0x200, 0x253a, 0xb, 0x9, 0x3, 0x0, 0xf, 0x1, 0x4, 0x2, 0x1000, 0x7fffffff, 0xb96, 0x3, 0xff, 0x8, 0x9, 0xb]}], [@TCA_POLICE_RATE={0x404, 0x2, [0x6, 0x1ff, 0x4835, 0x4c30, 0x8, 0x8, 0xffffff68, 0x1000000, 0x7, 0x1d, 0x8000, 0xd3d9, 0x2, 0x82fd, 0x3, 0x8000, 0x7f, 0x401, 0x800, 0x2, 0xe3a2, 0x2, 0x9, 0x1, 0x401, 0x400, 0x1855af6b, 0xff, 0xfffffffa, 0xf5, 0xffff70f3, 0x8, 0xfff, 0x6, 0x8, 0x7, 0x0, 0xf61, 0x8, 0x80000000, 0x5, 0xc2, 0x14c6, 0x4, 0x2, 0xfffff800, 0x3d3, 0x4, 0x0, 0x1, 0x163af427, 0x6, 0xfffffff8, 0xffff5f90, 0x9, 0x5, 0x6, 0xca41, 0x4, 0xffffffff, 0x7, 0x80000001, 0x7, 0x6, 0x80, 0x3, 0x9, 0x9, 0x8, 0x40, 0xe5, 0x6, 0x0, 0x4, 0xe, 0x9, 0xc7f, 0x7, 0x7363, 0x3, 0xc0000000, 0x7d2, 0x200, 0x13e, 0x5, 0x4d, 0x10000, 0x2, 0x1e7, 0x8, 0x7fff, 0xfffffff8, 0xc, 0x6, 0x3, 0xfffffff9, 0xb, 0x8001, 0x7, 0xfffffffe, 0x7, 0x0, 0x954, 0x8, 0x3ff, 0x8, 0x0, 0xab2e, 0xaf, 0x7, 0x2, 0x4, 0x3, 0x3, 0x6, 0x800e6, 0x8, 0x0, 0xfffffff8, 0x1, 0x2, 0xffffff52, 0x3, 0xf, 0x4, 0x2, 0x4, 0x6, 0x4, 0x3, 0x7, 0x7, 0xffffffff, 0x1, 0x9, 0x6, 0x4, 0x178, 0xbbfc, 0x8000, 0xc, 0x0, 0x7, 0x101, 0x9, 0xfff, 0x2, 0x4, 0x0, 0x2, 0x8, 0x0, 0x10, 0x8, 0x2, 0x62, 0x3, 0x6, 0x10000, 0x7, 0xe9, 0x6, 0x7f, 0x6, 0xfffffff8, 0x0, 0x0, 0x81, 0x2, 0x0, 0xd, 0x7f, 0x200000, 0x3, 0x2, 0x8839, 0x200, 0x80, 0xffff0000, 0x1ff, 0x6fc3eb4a, 0x8f, 0x2, 0x4, 0x6, 0x9, 0x7, 0x0, 0x1000, 0x7, 0x3, 0x8000, 0xb96, 0x200, 0x1, 0x80, 0xfff, 0xff, 0x400, 0xe7d, 0xd, 0x80000000, 0x9, 0xe122, 0x9, 0xffffff80, 0x2, 0x3, 0x3fffc000, 0x1ff, 0x6, 0x7, 0x0, 0x7, 0x7, 0x7, 0x6, 0x9000, 0xffffffff, 0x9, 0x800, 0x6, 0x1000, 0x0, 0xe, 0xcca, 0x7, 0x80, 0x0, 0x8, 0xef000000, 0x0, 0x3, 0x4, 0xba, 0x7ff, 0x1, 0x8, 0x5320, 0x7, 0xdd, 0x1, 0xfb, 0x1ff, 0x6, 0xc90, 0x40, 0xffffffff, 0x2, 0x7, 0xd, 0x1, 0x0, 0x1, 0x73be, 0x5]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x1, 0xfffffffffffffffa, 0xffff, 0x7, 0x401, {0x4, 0x2, 0x3ff, 0x5, 0x3ff, 0x2ddc}, {0xb, 0x0, 0x8, 0x6, 0x2, 0xc23}, 0x5, 0x800, 0xec3b}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}]}]}, 0x8e0}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
r12 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r12, 0x84, 0x1, 0x0, 0x0)
ioctl$FAT_IOCTL_SET_ATTRIBUTES(r5, 0x40047211, &(0x7f0000000300)=0x4)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xd, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000041ffffff00000000080000009111b5000000000095"], &(0x7f0000000c40)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9}, 0x94)
r13 = socket$inet_tcp(0x2, 0x1, 0x0)
r14 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_AUTOCLOSE(r14, 0x84, 0x4, &(0x7f0000000a80)=0xfffffffa, 0x4)
getsockopt$inet_tcp_int(r13, 0x6, 0x12, 0x0, &(0x7f00000003c0))
r15 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r15, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001140)={0x12c, 0x40, 0x1, 0x7fffc, 0x4, {0x1}, [@nested={0x4, 0x48}, @nested={0x10c, 0x1, 0x0, 0x1, [@nested={0x108, 0x10, 0x0, 0x1, [@nested={0x104, 0xf, 0x0, 0x1, [@nested={0x100, 0x38, 0x0, 0x1, [@nested={0xfa, 0x5b, 0x0, 0x1, [@generic="eb48ffd650d862ace57a733db7c84dfb76fb7cc7f09f6410e78f588818835a3a64dafe4bb579568c65ec4cf41a5aa9222d7eba6209ccfbc5bc3a05212e4345352317feb9e8c214c72f328fea276985cd79f963251b2b1a35842ac7998938a74869ec147c0f0f108f97d53b5bb37a506f8288a22c4eb3638c718c9def39956c7f3dd1ec10ae00db6fe5601e2f55174a0c149152a240bc15afc226d3abab26801cb029c5ae7b0d78039fffe5531135c28b3da97179254e37ca5847f2370a8cdf9b152474ed49be672edb204801f05803d6bf907f034b07a9cb266a9a7d815bbbad5e881c4628b5a5fa43d7012c957f9cceaee1aebc2cdd"]}]}]}]}]}, @typed={0x8, 0x2, 0x0, 0x0, @fd=r15}]}, 0x12c}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094)
sendmsg$kcm(r5, &(0x7f0000000000)={&(0x7f0000000180)=@sco={0x1f, @none}, 0xfffffe37, &(0x7f0000000140)=[{0x0}], 0x1, &(0x7f0000000040)=ANY=[@ANYRESOCT=r5, @ANYRES64=0x0, @ANYRES8=r13, @ANYBLOB="7982f61d0351a92852df374af4cc0e72904589912bc3a97b96cbafd14670f3656c7cada833f6c6888616264bd7913a64ed9381a520c3d1c05e5002ace5501fb589a41f4039ef19ce44186e5598f2b2698aa680f2ed2a021b32e432f648bf8fada38aa15da49687bc647d1603975ee6a00780e4b23403c291c6a2a6e1955155ac26d3cf98a6472150aa06fe7249c481da93eb5379774ef2ed686e86d7f523a9f6a733fee06c1704ec1f88f8"], 0x10b8}, 0xff00)

2.203736007s ago: executing program 1 (id=3414):
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000196000/0x1000)=nil, 0x1000, 0x0, 0x840000000000a132, 0xffffffffffffffff, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='freezer.parent_freezing\x00', 0x275a, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0)
mmap(&(0x7f0000215000/0x1000)=nil, 0x1000, 0x0, 0x6011, r2, 0x0)
mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x200000c, 0x11, r2, 0xaa0f4000)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
mmap(&(0x7f0000867000/0x2000)=nil, 0x2000, 0x0, 0x11, r3, 0x1000)
mmap(&(0x7f00005d3000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0xfffff000)
mmap(&(0x7f00008b7000/0x4000)=nil, 0x4000, 0x0, 0x13, r1, 0x0)
mmap(&(0x7f00004a3000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0)
mmap(&(0x7f0000071000/0x4000)=nil, 0x4000, 0x800000, 0x13, r1, 0x0)

2.060262837s ago: executing program 3 (id=3416):
r0 = accept4(0xffffffffffffffff, 0x0, 0x0, 0xc00)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000380)={0x0, 0x3}, 0x8)
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000001c0)={0x0, 0x80000001}, &(0x7f0000000480)=0x8)
ioctl$sock_bt_hci(r0, 0x400448e6, &(0x7f0000000340)="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")
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendto$inet6(r1, &(0x7f0000000080)='X', 0x1, 0x0, &(0x7f0000000140)={0xa, 0x0, 0x0, @private0}, 0x1c)
setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000100)={0x66, 0xfe, 0x4, 0x5, 0xa8, 0x20, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x9}, 0xe)
setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f0000000000)=0x6, 0x4)
pipe(&(0x7f0000019480)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000240), r3)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000300)={&(0x7f0000000200), 0xc, &(0x7f00000002c0)={&(0x7f0000001340)=ANY=[@ANYBLOB="34000000ac42e263ce233f7b8920fc243b8864ec6ff39729826c4cc24d79f36225e2e4de865b40b4fa5714044a0d9434411175a47eef1b212b175eaa18cc35316197044377dbadf20649e0f42a90dfefb18b3947c6594a99442c1171f0dfa620f012d075e841d6f72c40a6db071d031aab32cc63616bfc", @ANYRES16=r4, @ANYBLOB="000228bd7000fddbdf25010000000000000001410000001800170000001d000000007564703a73797a3000000000"], 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x24004049)
unshare(0x24020400)
close(r3)
splice(r2, 0x0, r3, 0x0, 0x10500, 0x0)
r5 = socket(0x2, 0x80805, 0x0)
setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000040)={0x84, @local, 0x4e21, 0x3, 'sh\x00', 0x1d, 0x9d43, 0x75}, 0x2c)
setsockopt$IP_VS_SO_SET_ADDDEST(r5, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@remote, 0x4e20, 0x10000, 0xcd}}, 0x44)
r6 = socket(0x840000000002, 0x3, 0x100)
connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x19}}, 0x10)
sendmmsg$inet(r6, &(0x7f0000005240), 0x4000095, 0x0)
getpeername$tipc(r6, 0x0, &(0x7f00000000c0))
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
sendmsg$RDMA_NLDEV_CMD_STAT_DEL(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[], 0x18}}, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BATADV_ALGO_NAME={0x10, 0x1, 'BATMAN_IV'}]}}}]}, 0x44}}, 0x0)
getsockopt$IP_SET_OP_GET_BYNAME(r6, 0x1, 0x53, &(0x7f0000000180)={0x6, 0x7, 'syz0\x00'}, &(0x7f00000001c0)=0x28)
setsockopt$inet_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f0000000040), 0x3)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1000002, 0x31, 0xffffffffffffffff, 0xf679000)
shutdown(r1, 0x1)
recvmmsg(r1, &(0x7f0000005000)=[{{0x0, 0x2a, 0x0, 0x0, &(0x7f00000000c0)=""/19, 0x13}, 0x3}], 0x4000169, 0x60, 0x0)

1.994366453s ago: executing program 1 (id=3417):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000000)={'ip6gre0\x00', &(0x7f00000005c0)={'syztnl0\x00', <r1=>0x0, 0x29, 0x10, 0x2, 0x66e03de5, 0x40, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xd}}, @private2={0xfc, 0x2, '\x00', 0x1}, 0x40, 0x8, 0x5, 0x77f87502}})
r2 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r2, &(0x7f00000049c0)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x1, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
unshare(0x400)
bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r6=>0x0})
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000003900000008000300", @ANYRES32=r6, @ANYBLOB="24005a8020000180140003000000060006000200010007000100fbff"], 0x40}}, 0x0)
r7 = socket$kcm(0x2, 0xa, 0x2)
r8 = socket$nl_audit(0x10, 0x3, 0x9)
setsockopt$netlink_NETLINK_CAP_ACK(r8, 0x10e, 0xa, 0x0, 0x0)
ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
r9 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
ioctl$XFS_IOC_GOINGDOWN(r9, 0x8004587d, &(0x7f0000000400)=0x5)
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
r11 = socket$alg(0x26, 0x5, 0x0)
syz_emit_ethernet(0x2a, &(0x7f0000000000)={@multicast, @remote, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @multicast, @multicast1, @link_local, @empty}}}}, 0x0)
bind$alg(r11, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'xcbc(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r11, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d4", 0x5)
r12 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r12, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)=@ipv6_newaddrlabel={0x30, 0x48, 0x100, 0x70bd2a, 0x25dfdbfb, {0xa, 0x0, 0x1, 0x0, r1, 0x8}, [@IFAL_ADDRESS={0x14, 0x1, @private0}]}, 0x30}, 0x1, 0x0, 0x0, 0x840}, 0x48000)
sendmsg$IPSET_CMD_CREATE(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x34, 0x2, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x34}}, 0x20008010)
socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000280)={'erspan0\x00', &(0x7f0000000200)={'sit0\x00', <r13=>0x0, 0x7800, 0x7fa1, 0x3, 0x101, {{0x16, 0x4, 0x0, 0x14, 0x58, 0x68, 0x0, 0xf, 0x4, 0x0, @empty, @multicast2, {[@ssrr={0x89, 0x23, 0x42, [@multicast2, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, @remote]}, @timestamp={0x44, 0x20, 0xbe, 0x0, 0xf, [0xfffffff6, 0x4259, 0x3, 0x8, 0x7f, 0x6, 0x7]}]}}}}})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x18, 0x4, &(0x7f0000000100)=ANY=[@ANYRES16=r3, @ANYRES8=r3, @ANYRES8=r9, @ANYRES16=0x0, @ANYRES16=r2], &(0x7f0000000000)='GPL\x00', 0x4000009, 0x0, 0x0, 0x41100, 0x6, '\x00', r13, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x4e}, 0x94)
socket$nl_generic(0x10, 0x3, 0x10)

1.968005678s ago: executing program 4 (id=3418):
r0 = socket(0x2b, 0x80801, 0x1)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000940)=@newtaction={0x48, 0x12, 0xbf68af9d17701211, 0x5, 0x0, {0x7}, [{0x4}, {0x30, 0x1, [@m_ct={0x2c, 0x0, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x1d, {0x3, 0x2}}}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x240000d0}, 0x0)
socket$netlink(0x10, 0x3, 0x14)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000480), r2)
unshare(0x8040480)
sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)=@newlink={0x50, 0x10, 0xffffff1f, 0x2, 0x81, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}}]}}}, @IFLA_MTU={0x8, 0x4, 0x9}]}, 0x50}}, 0x40002)
sendmsg$SOCK_DIAG_BY_FAMILY(r3, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0x114, 0x14, 0x8, 0x70bd27, 0x25dfdbfb, {0x3, 0x2e}, [@INET_DIAG_REQ_BYTECODE={0xa, 0x1, "29db53b12bd4"}, @INET_DIAG_REQ_BYTECODE={0xf2, 0x1, "99f14b310f922e59c52a7d5811569c19191eb57664af3cc7055878bfd7854d4d1e29c829197455964474fbc6dce47a28380702db29e67dde85c2240a96cfd1dd83ad27ab42e1e72338a829bec7f26d0bd905afacdb876c88dff512ee83f2668de51fe48d4078712cd3f9e5950675740b1f3d74aa99b63c2c8e66c51be7e4463d0839184b60ae50279d95e512b60b864b63351eade3712876fdc82bd253557a077055d5116fc639beb882c57100ea04a3a89737620631e058a64784cbddcf5b5a349f98bc8a5c050435bdc98292b7dda714c445b8da81377882f25a0c24ea37ca435d22e8651c38540c4936a42ff4"}]}, 0x114}, 0x1, 0x0, 0x0, 0x4000}, 0x48084)
setsockopt$inet6_mtu(r0, 0x29, 0x1e, &(0x7f0000000040)=0x5, 0x4)
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="6000000010001fff0000960e80a7bd0e285a09a96069ef00000000000000060000", @ANYRES32=0x0, @ANYBLOB="81efffff00000000380012800b00010065727370616e00002800028008001400ff030000080014000200000004001200060002000008000008000100", @ANYRES32=0x0, @ANYBLOB="08001f0008000000"], 0x60}, 0x1, 0x0, 0x0, 0x1}, 0x0)
listen(r4, 0x8)

1.939597871s ago: executing program 2 (id=3419):
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x12, 0x7, 0x4, 0x2}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1, <r2=>0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r0}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0xfb1585202ff31891}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r6}, &(0x7f0000000280), &(0x7f0000000240)=r3}, 0x20)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000410000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f00000000c0)=r7, 0x4)
sendmsg$inet(r5, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)

1.748799716s ago: executing program 0 (id=3421):
r0 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'lo\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newtfilter={0x2c, 0x2c, 0xd3f, 0x70bd2c, 0xfffffffd, {0x0, 0x0, 0x0, r1, {0xf000, 0xffff}, {}, {0x7}}, [@TCA_CHAIN={0x8, 0xb, 0xffffffff}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x20000800)
unshare(0x20000400)
r2 = socket(0x80000000000000a, 0x2, 0x0)
getsockopt$inet6_buf(r2, 0x11, 0x6, 0x0, &(0x7f0000000080))
r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000001c0)={'sit0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_QUANTUM={0x8, 0x2, 0xffff8001}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x48801}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="beaa00000000000079a008000000000018120000", @ANYRESHEX=r3, @ANYBLOB="0000000000000000bf0300000000000070fdf662113bdf2b87b6b785000000a4100000b70000000000000095d5ff57a51299706fa02fb079d9e9e31efbc151317ee9a01e86ecc19026c91bee7554247c6d6922d9b1227aa419c55e8e6dd99555cef6daa67d4a625eea7013503c744c75ae8ac6a527f260122bd5a82cece24d88e4599d0f0f9756535937049456e7a5a81b75448e9351829229f227a41cd348c22e8631b1068bf9835d6b83c0d2f01e859846211daa552e9d9510a2c43284b9fdf0"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94)

1.714263349s ago: executing program 2 (id=3422):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000007c0)={'xfrm0\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newqdisc={0x8c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0x50}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x5c, 0x2, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, [@TCA_NETEM_RATE={0x14, 0xd}, @TCA_NETEM_SLOT={0x2c, 0xc, {0x5, 0x7, 0x0, 0x7, 0x4, 0xffffffffffffd019}}]}}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4000811}, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x9}, 0x20)
bpf$BPF_PROG_DETACH(0x9, &(0x7f00000009c0)={@cgroup, 0xffffffffffffffff, 0x1d, 0x87b7baf82f9a7b4f}, 0x20)
write$cgroup_devices(0xffffffffffffffff, &(0x7f00000000c0)={'a', ' *:* ', 'rw\x00'}, 0x9)
setsockopt$inet6_int(r2, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4)
sendmsg$inet6(r2, &(0x7f0000000340)={&(0x7f0000000080)={0xa, 0x4e1e, 0x80000, @dev={0xfe, 0x80, '\x00', 0x40}, 0x5}, 0x1c, 0x0, 0x0, &(0x7f0000000500)=[@rthdr_2292={{0x18, 0x29, 0x39, {0x73, 0x0, 0x2, 0xc}}}], 0x18}, 0xc4)

1.566171593s ago: executing program 4 (id=3423):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f00000000c0)=<r2=>0x0)
ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000100)=<r3=>0x0)
ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r0, 0x4058587a, &(0x7f0000000340)={{<r4=>r1, &(0x7f0000000140)='ns/cgroup\x00', 0x2000, &(0x7f0000000180)={@_ha_fsid={[0x5, 0x3]}, {0x1, 0x4, 0x8, 0xffffffffffffffff}}, 0x6, &(0x7f00000001c0)={@_ha_fsid}, &(0x7f0000000200)=0x3}, {[0x7, 0x35e, 0x4, 0x9]}, 0x1, 0xdc, &(0x7f0000000240)=""/220})
r5 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff, 0x32, 0x0, @val=@iter={&(0x7f00000003c0)=@task={r2, r3, r4}, 0x10}}, 0x20)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000000), 0x8)
write$cgroup_int(r4, &(0x7f0000000440)=0x8000, 0x12)
ioctl$AUTOFS_IOC_CATATONIC(r5, 0x9362, 0x0)
syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00')
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)
r6 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r6, 0x107, 0x7, &(0x7f0000000100)=0x4000200, 0x4)
setsockopt$packet_tx_ring(r6, 0x107, 0x5, &(0x7f0000000080)=@req3={0x8000, 0x6, 0x300, 0xfc}, 0x1c)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94)
r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00'}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000)
socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r8=>0xffffffffffffffff})
r9 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r9, &(0x7f0000000740)=@pppol2tp={0x18, 0x1, {0x0, r8, {0x2, 0x4e23, @multicast2}, 0x2}}, 0x26)
openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84)
socket$nl_generic(0x10, 0x3, 0x10)
socket$unix(0x1, 0x2, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x2f00020b, 0xd, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b9", 0x0, 0x7515, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYRES64=0x0], 0x48)

1.488996951s ago: executing program 0 (id=3424):
r0 = socket$packet(0x11, 0x2, 0x300)
getsockopt$packet_int(r0, 0x107, 0xe, 0x0, &(0x7f0000000040))
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_LIST(r1, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000300)={&(0x7f0000000680)={0x50, 0x7, 0x6, 0x3, 0x0, 0x0, {0x1, 0x0, 0x9}, [@IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x2}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x8}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x10}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x4}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x2}]}, 0x50}, 0x1, 0x0, 0x0, 0x800}, 0x800)
r2 = socket(0xa, 0x3, 0x3a)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001180)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48)
setsockopt$MRT6_ADD_MFC(r2, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @private2, 0x809}, {0xa, 0x8, 0x0, @empty}, 0x2, {[0x0, 0x1, 0xfffffffe, 0x0, 0xffffffff, 0x8]}}, 0x5c)
setsockopt$MRT6_ADD_MFC(r2, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}, 0x0, {[0x1, 0x0, 0x0, 0x0, 0x9]}}, 0x5c)
getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r2, 0x84, 0x6c, &(0x7f0000000380)={<r3=>0x0, 0x80, "0e577e79e96f6369099828c441a6ca34f8ce777143396408bda9a0d2384ccc14c94ecdaafe9cd009470a391966aa14c8901f8a0a89937993f4ae58e57e3aaaab2cc9284f0e26a7b58a68664d2f2778bc74c47bb1b08a19e0f235725455486fe21e8484d46d6cf835d898a2c4a5c86bf8a4f4eb7063b1e9451d78893f960d69c2"}, &(0x7f0000000080)=0x88)
r4 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000300)="5c00000013006bec9e3be35c6e17aa31076b876c1d0000007ea60864160af3653c000cc004000202080003000300000007000200eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0000300000000000200ffffc6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r2, 0x84, 0x1b, &(0x7f0000000580)={r3, 0xec, "0f5efaacd0d12878f2659e749babba7d41e443975068a8178cd07aa09a9753f5e4a3c56672587b74e32d5b5fbf6ba2722bec7bcf22286464f872f2ee202284493c4021100739ac60f91da2345778cd1bdbe2d988b6e6ae1a67b0ff2197fda56d55b50a198331561220b7805108684e433e54bb839adce44669b37fc583eca8acf610c7cdd57666ac3c01f2a6a62dfb50e8a6785b6a57e3614fd9904e21c0c26a0027bebe458001fb746fa5b07eeff2cf7a914dab742e5b31f8e6a2c4ce7595fd420f2e53b802a1fd96ba89fc8d56e42d1266c3c0609f878c889dd7fcde33b07909908730606100f79630269a"}, &(0x7f0000000180)=0xf4)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB], 0xd4}}, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=@newtaction={0x11c, 0x1d, 0x1, 0x70bd28, 0x0, {}, [{0x108, 0x1, [@m_csum={0x30, 0x2, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}, @m_csum={0xd4, 0x7, 0x0, 0x0, {{0x9}, {0x74, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x5d, 0x4, 0x6, 0x3, 0x9}, 0x7f}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0xe00, 0x9, 0x20000000, 0x5, 0xffff}, 0x4b}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x7, 0x5, 0x0, 0x35}, 0x4d}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x4, 0x0, 0x0, 0x0, 0x3}, 0x34}}]}, {0x38, 0x6, "64d2e065d3b661410b159731559612a38d7996c0f121e2e94b2a7f8f31809b4bcab06bdff558d109b3b2a5c645ec6e4bf523ea9b"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0x11c}, 0x1, 0x0, 0x0, 0x4}, 0x0)
setsockopt$MRT6_ADD_MFC(r2, 0x29, 0xcc, &(0x7f00000001c0)={{0xa, 0x0, 0x0, @local}, {0xa, 0x4e22, 0x800, @empty}, 0x0, {[0x0, 0x8000, 0x0, 0xfffffffc]}}, 0x5c)
setsockopt$MRT6_ADD_MFC(r2, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}, {0xa, 0x0, 0x4, @empty}, 0x0, {[0x3, 0x0, 0x0, 0x1, 0x89f, 0x8, 0x1]}}, 0x5c)
setsockopt$MRT6_FLUSH(r2, 0x29, 0xd4, &(0x7f0000000340)=0x6, 0x4)
r7 = socket(0x2b, 0x1, 0x1)
setsockopt$inet6_tcp_TCP_REPAIR(r7, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4)
connect$inet6(r7, &(0x7f00000001c0)={0xa, 0x4e1f, 0x2, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c)
connect$inet6(r7, &(0x7f00000000c0)={0xa, 0x4e5b, 0x80000000, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0x5}, 0x1c)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2000001, 0x12, r8, 0x0)
setsockopt$inet_tcp_int(r7, 0x6, 0x9, &(0x7f0000000140)=0xfb78, 0x4)
socket$inet6_sctp(0xa, 0x1, 0x84)
syz_genetlink_get_family_id$netlbl_cipso(0xfffffffffffffffe, 0xffffffffffffffff)
r9 = socket$kcm(0x29, 0x0, 0x0)
ioctl$sock_kcm_SIOCKCMUNATTACH(r9, 0x89e1, &(0x7f0000000000)={r0})

1.478827468s ago: executing program 2 (id=3425):
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
setsockopt$nfc_llcp_NFC_LLCP_MIUX(r0, 0x118, 0x1, &(0x7f0000000140)=0x4bc, 0x4) (async)
bind$nfc_llcp(r0, &(0x7f00000001c0)={0x27, 0x0, 0x0, 0x2, 0x0, 0x49, "c46e9fd1a84b7fa0bf2cca6beb9363a680b652a86bcf56a1b9ca5386103a5ccbe47b7b9aa6d8d701a3ba00000000b97800001022f987617c318500", 0x3a}, 0x60) (async)
r1 = socket(0x10, 0x803, 0x0)
write(r1, &(0x7f0000000340)="2600000022004701050007108980e8ff06006d20002b1ffec0e90101c7bb0000b00000000000", 0x26) (async)
setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000d9bffc), 0x4) (async)
sendto(r1, &(0x7f0000000380)="120000001200e7ef007b00000000000000a1", 0x12, 0x20000090, 0x0, 0x0)
recvmmsg(r1, 0x0, 0x0, 0x0, 0x0)
recvmmsg(r1, &(0x7f0000000a80)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000d80)=""/250, 0xfa}, {&(0x7f0000000000)=""/150, 0x96}, {&(0x7f0000000f00)=""/161, 0xa1}, {&(0x7f0000000c80)=""/151, 0x97}, {&(0x7f0000000bc0)=""/157, 0x9d}, {&(0x7f0000001f00)=""/4093, 0xffd}, {&(0x7f00000003c0)=""/113, 0x71}], 0x7}, 0x10001}], 0x57, 0x10120, 0x0) (async, rerun: 64)
getsockopt$inet_buf(r0, 0x118, 0x1, 0x0, &(0x7f00000003c0)) (rerun: 64)
socket$inet_icmp_raw(0x2, 0x3, 0x1) (async)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
r2 = socket$kcm(0x21, 0x2, 0xa) (async, rerun: 64)
socket$nl_route(0x10, 0x3, 0x0) (rerun: 64)
sendmsg$kcm(r2, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev, 0x8000000}}, 0x80, 0x0, 0x0, &(0x7f00000014c0)=ANY=[@ANYBLOB="18000000000000cafcf68111dc41d68c84b5231742a5000000524f0000000000100000000000000000000000000000cc6f495263134a19ba2b8460f47bdd4faaa4a031007fa59e792542ab98175802f2fffe59c5d0346036f9e73c57777c08bba234f3ae342e8523f791378806501c4a7f45ecedf31d7997caff6c8d72a4b7c97e30b378fefe8fce3dee16d90797bd4ddb48ec0597334cf2845553d3c198a511aedfeec456bf9c7d2205d7dcf464f2a8d2c522dfe36edb4e24b2ccba4a082fc9d198efe66a383ca699bc2e0e7f81cb837f711a38766e96bd5aad2be44c9c48"], 0x28}, 0xfc40) (async)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') (async)
unshare(0x6a040000) (async)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x38, 0x10, 0x439, 0x70bd40, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x9801}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x24000007}, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r4, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x13, &(0x7f0000000280)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@map_val={0x18, 0xa, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0xe}, @initr0={0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x2}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='GPL\x00', 0x8, 0xfe7, &(0x7f00000004c0)=""/4071, 0x40f00, 0x4, '\x00', 0x0, 0x0, r4, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94)

1.025549504s ago: executing program 2 (id=3426):
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000340))
r0 = socket$igmp(0x2, 0x3, 0x2)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={0xffffffffffffffff, 0x58, &(0x7f00000002c0)}, 0x10)
setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000140)={0x1, 0x1, 0x9, 0x400000c5, @vifc_lcl_addr=@dev={0xac, 0x14, 0x14, 0x3b}, @remote}, 0x10)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a44, 0x1700)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe)
unshare(0x6020400)
bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000001640)=ANY=[@ANYRES32, @ANYBLOB="2f000000180000000400000004245fabc2bca51d186015c77b633aa22d6a1eabfff581594c5be63bc93502082204100ee3e8ee16c99806c213670e5b3dde3d0d8f093d5fd16c0d08e6130cde79385af2f556b926b442852bf69ee26a527a5e7792ee92ecc154507855462fb212b10a503b6b8d9077b2277455f09009c6c420a5047363263c21f7707db5a7ddff3f", @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x20)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000740), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_STRSET_GET(r2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000044}, 0x800)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
r4 = socket$inet6(0xa, 0x800000000000002, 0x0)
setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x41, &(0x7f0000000200)=0x237a, 0x4)
setsockopt$SO_TIMESTAMP(r4, 0x1, 0x3f, &(0x7f0000000700)=0xebb4, 0x4)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000300)={0x0, 0x0, 0x0}, &(0x7f0000000380)=0x10)
socket$nl_rdma(0x10, 0x3, 0x14)
r5 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000000), 0x4)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r5, 0x10e, 0x4, &(0x7f0000000100)=0x1800, 0x4)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000d}, 0x20000001)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0300002e00090027bd70000000000004000000480311"], 0x35c}, 0x1, 0x0, 0x0, 0x42804}, 0x4000010)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0300002e00090027bd70000000000005"], 0x35c}, 0x1, 0x0, 0x0, 0x42804}, 0x4000010)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
getpid()

892.666628ms ago: executing program 0 (id=3427):
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000196000/0x1000)=nil, 0x1000, 0x0, 0x840000000000a132, 0xffffffffffffffff, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='freezer.parent_freezing\x00', 0x275a, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0)
mmap(&(0x7f0000215000/0x1000)=nil, 0x1000, 0x0, 0x6011, r2, 0x0)
mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x200000c, 0x11, r2, 0xaa0f4000)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
mmap(&(0x7f0000867000/0x2000)=nil, 0x2000, 0x0, 0x11, r3, 0x1000)
mmap(&(0x7f00005d3000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0xfffff000)
mmap(&(0x7f00008b7000/0x4000)=nil, 0x4000, 0x0, 0x13, r1, 0x0)
mmap(&(0x7f00004a3000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0)
mmap(&(0x7f0000071000/0x4000)=nil, 0x4000, 0xb0de00, 0x13, r1, 0x0)

780.788046ms ago: executing program 0 (id=3428):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a74000000060a0b0400000000000000000a00000048000480440001800a00010072616e67650000003400028004000480080001401200000a08000240000000011c00038015000100780d1e7c1a4d2043ca0d8397308776579fb5f00000000900010073797a30000000000900020073797a3200000000140000001100010100000000000000000300000a"], 0x9c}}, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
setsockopt$SO_TIMESTAMP(r2, 0x1, 0x40, &(0x7f0000000100)=0x987, 0x4)
recvmsg$unix(r2, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0)
sendmsg$inet(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0xfffe}], 0x1}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000580)={0x14, 0x1, 0x1, 0x101, 0x0, 0x0, {0x2}}, 0x14}}, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0x1c, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000218110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500ffffffb0000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000004000000850000008200000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7020000000000208500000017000000bf91000000000000b7020000210000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x4, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r7, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)
sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newlink={0x48, 0x10, 0xffffffffffffffff, 0x70bd2b, 0x25dfdbbb, {0x0, 0x0, 0x0, 0x0, 0x50a10, 0x51a23}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_OFLAGS={0x6, 0x3, 0x30}, @IFLA_GRE_IKEY={0x8, 0x4, 0x66}]}}}]}, 0x48}, 0x1, 0x20000, 0x0, 0x240440d5}, 0x9080)
r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r1)
sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x2c, r8, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x90}, 0x40)

710.185061ms ago: executing program 1 (id=3429):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000000200)={@mcast2, @remote, @mcast2, 0x4, 0x4, 0x0, 0x600, 0xfc8, 0x20c300a2})
setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000180)={0xe0, 0x2, 0x4, 0x1, 0x10, 0x8, 0x0, 0x9, 0x0, 0x8}, 0xe)
shutdown(r0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={<r2=>0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10)
getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000100)={r2, 0x41}, &(0x7f0000000140)=0x8)

623.757893ms ago: executing program 1 (id=3430):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYRESHEX=r0, @ANYRESHEX=r1], 0x3c}, 0x1, 0x0, 0x0, 0x4000818}, 0x24001081)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x1, 0x803, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r4, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000004c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="3c001a00", @ANYRES16=0x0, @ANYBLOB="000225bd7000fcdbdf250400000005002d000100000008000600", @ANYRES32=r2, @ANYBLOB="080039001000000008000600", @ANYRES32=r2, @ANYBLOB="0800310001f0ffff"], 0x3c}}, 0x40040001)
ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000600)={'team0\x00', <r7=>0x0})
sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB='D\x00'/20, @ANYRES32=0x0, @ANYBLOB="0003000000000000140012800c0001006d6163766c616e000400028008000500", @ANYRES32=r5, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r7, @ANYBLOB], 0x44}}, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = socket(0x1, 0x803, 0x0)
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newlink={0x44, 0x10, 0x403, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x400}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x44}, 0x1, 0x0, 0x0, 0x24000804}, 0x8000)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl802154(&(0x7f0000001000), 0xffffffffffffffff)
sendmsg$NL802154_CMD_GET_WPAN_PHY(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)={0x1c, 0x0, 0x701, 0x70bd2b, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x4000)
r11 = socket(0x2, 0x80805, 0x0)
r12 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r12, 0x0)
close(0x3)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r12, 0x84, 0x6f, &(0x7f0000000200)={<r13=>0x0, 0x10, &(0x7f0000000580)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r12, 0x84, 0x7a, &(0x7f0000000340)={r13, @in6={{0xa, 0x3, 0x4, @rand_addr=' \x01\x00'}}}, &(0x7f0000000040)=0x84)
getsockopt$inet_sctp_SCTP_MAXSEG(r11, 0x84, 0xd, &(0x7f0000000080)=@assoc_id=r13, &(0x7f00000000c0)=0x4)
bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0), 0x8)
r14 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000000)={'bridge0\x00'})
setsockopt$sock_linger(r11, 0x1, 0xd, &(0x7f00000002c0)={0x1, 0x8}, 0x8)

300.006777ms ago: executing program 0 (id=3431):
socket(0x15, 0x3, 0x33de62fe)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'erspan0\x00', <r3=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_INDEX={0x8, 0x15, 0xf967f}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x40}}, 0x0)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x41, &(0x7f0000000200)=0x439a, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendto$inet6(r4, 0x0, 0x0, 0x0, &(0x7f0000000180)={0xa, 0x4e20, 0xffffffff, @loopback, 0xbf}, 0x1c)
setsockopt$inet6_int(r4, 0x29, 0x8, &(0x7f0000000f40)=0x6c, 0x4)
recvmmsg(r4, &(0x7f0000000140)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002000)=""/4126, 0x101e}, 0x6}], 0x1, 0x2000, 0x0)

299.21239ms ago: executing program 2 (id=3432):
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x12, 0x7, 0x4, 0x2}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1, <r2=>0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r0}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0xfb1585202ff31891}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r6}, &(0x7f0000000280), &(0x7f0000000240)=r3}, 0x20)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000600000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f00000000c0)=r7, 0x4)
sendmsg$inet(r5, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)

157.522188ms ago: executing program 1 (id=3433):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="4c000000100009060400"/20, @ANYRES32=0x0, @ANYBLOB="a7ffa888080001002c001280080001fa1174700020000280050005000100000014000800fe80000000000000000000000000001fc0b197067d1b725cacf79bf3a8c328163583b75d31e4fbe9bd17e89e172a85dd5cafe9fe01992320b1439fe523e98142a533b6b5c47c0c4ea8683190297a"], 0x4c}}, 0x20000040)
recvmsg(r0, &(0x7f00000005c0)={&(0x7f0000000000)=@qipcrtr, 0x80, &(0x7f0000000540)=[{&(0x7f0000000080)=""/127, 0x7f}], 0x1, &(0x7f0000000580)=""/61, 0x3d}, 0x10000)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x1d, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="61123400000000006113500000000000bf900000000000001500000008ffffffbd0301000000000095000000000000006916790000000000bf67000000000000a406000007ff07006706000002000000070600000ee60000bf050000000000002e720000000000006507000002000000070700004c0000001f75000000000000bf54000000000000070500000419311f2d4301000000000095000000000000000500000000000000950000000000000032ed3c5be95e76b67754bb12dc8c27df8ecf264e0f84f9f17d3c30e3c72fe9755ba08554bb4f2278af6d71d79a5e12810a089dc1d4681d295c45a674f888a08034b7dd399703d6c4f633a9a4f16d0a3e1282ee45a010fb94fa9de56c9d8a814261bdb94a6538b89dc6c60bf70d742a81b72bab8395fa64810b5b1bfd3782519518c51231422bb8fab4d4d897db2c544c0ec50b8eac8c63d2b1cd06a39702bd547f5ebaa6954f01cef3c9bacec15e2e3b2bd352e93a2aadfe8efe33ff2f8ee5476d4ef7a6f0c4704403b9bad2b648e90fff24f69a5ef05f5408ea197ed09a9510ee6063229de2984abdd46ea3ec78e3127002ed37c2564b8f8a621483fb2a5ff221e0d831d64759d17b8c59d0f2b0727f6b7958fb5b939af4be5e55a95f8c6d785a91c7c3f0c17ae7f9ac5ff05f5ecddf0cef90d50e763be96496661c749e21ab63a1f50b30a65a9027ba357bf8c614497ee59b68bf6a5d45c81c567e347d54574164bbea3e7b7f8a13cce7014137f250370b8a70ae3eaf736f17759c3886871e97d063b7f26eed3226bb0b9ee6320a2b02fea7a06a0e37182adf4b1be6f29358d4f5dfec405bde000000000000000000000000000000902e647cc5962eccaad64429335f3ce2a10ce72da82875427c1d16db24dca08487ba41a3fb337f8432d8176a515229e32ee11a1dd23dac038f989eafdd67f60b63f7be4d1bf325b57335b9973c73bfa89517a98b1fc15f8a2713718feb01059d8b570a0000e3b2a93bd745a74f9bf7f7abc5d15d56331055cc0820c5c9d676d92557c4e47cfbe27f91f0eb18e21dfdab3c84ec11377fbbfd1e000000000000b542a536559eed87b58edcfee83a50077ee0e8fb6e787cb3076dfeeb79f55927fef9651e176b40e64740a01944577caea4ceb9e907cec36a8429445c833b9d24d53dc91f15af1f4a1db9fa452fa3f0b812355aab5b58659ffd56034fdbb169f3e86660acdc65dc699d3e6364a80f45e54d6efcb99b41a080494f842706f3c1716d2e252bf89663393356296d89fbf95aa7966fa700b710008311d6f25e05f77d68799e671d90cb04131742790941d83ffdfa857e9e085a59a78e7a17f008ce55866fcc4de388f270a1ba675f43481bd2"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18}, 0x94)

153.64276ms ago: executing program 4 (id=3434):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e26, @local}, 0x10)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000700)=@mangle={'mangle\x00', 0x64, 0x6, 0x500, 0xd0, 0x270, 0xd0, 0x340, 0x340, 0x430, 0x430, 0x430, 0x430, 0x430, 0x6, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x44}, @private1, [], [], 'ipvlan1\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x3a010000}}, @HL={0x28}}, {{@ipv6={@local, @loopback, [0x0, 0x0, 0xff000000], [0x0, 0xffffffff], 'tunl0\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x340}}, {{@ipv6={@private0, @remote, [], [], 'veth0_to_team\x00', 'tunl0\x00', {}, {}, 0x11, 0x0, 0x3, 0x44}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @loopback}, @private1, [0xffffffff, 0xffffffff, 0xffffffff, 0xff000000], [0xff000000, 0xff000000, 0xff, 0xffffff00], 'wg1\x00', 'team_slave_1\x00', {0xff}, {}, 0x2f, 0x6b, 0x5}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@loopback, @private2, [], [], 'syzkaller1\x00', 'veth0_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, 'vlan0\x00', {0x4}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x560)
setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, 0x0, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r4)
ioctl$FIONCLEX(r2, 0x5450)
sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller0\x00', @broadcast})
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
close(r6)
r7 = socket$unix(0x1, 0x5, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x5, 0x5, 0x5, 0xffffffff, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x240080c1}, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@deltfilter={0x44, 0x2d, 0x2, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, r9, {0x7, 0x6}, {0xb, 0xffe0}, {0x10, 0x7}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x8}}, @TCA_RATE={0x6, 0x5, {0x9, 0x4}}, @TCA_CHAIN={0x8, 0xb, 0xfffffff9}, @TCA_CHAIN={0x8, 0xb, 0x3}]}, 0x44}, 0x1, 0x0, 0x0, 0x4811}, 0x200c840)
ioctl$SIOCSIFHWADDR(r6, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})

106.073127ms ago: executing program 2 (id=3435):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000300)={'filter\x00', 0x104, 0x4, 0x3c8, 0x1f8, 0x1f8, 0x0, 0x2e0, 0x2e0, 0x2e0, 0x4, 0x0, {[{{@arp={@rand_addr=0x640100fe, @broadcast, 0x0, 0x0, 0x5, 0x6, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x19}, {[0x0, 0x0, 0x0, 0xff]}}, {@empty, {[0x0, 0xff, 0x0, 0xff]}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'nicvf0\x00', 'macvlan0\x00', {}, {}, 0x0, 0x2}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x80}}}, {{@arp={@local, @multicast2, 0xffffff00, 0xff, 0x6, 0x8, {@empty, {[0xff, 0x0, 0xff, 0x0, 0xff, 0xff]}}, {@empty, {[0x0, 0xff, 0xff, 0x80]}}, 0x3, 0x0, 0x9, 0x0, 0x7fff, 0x9ca4, 'tunl0\x00', 'wlan0\x00', {0xff}}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @empty, @empty, @dev={0xac, 0x14, 0x14, 0x1a}, 0x1, 0xffffffff}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x1c, 0x0, 0x2}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418)
pipe(&(0x7f0000000300)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r3, &(0x7f0000000000)={0xa, 0x8000002, 0x2004}, 0x1c)
sendto$inet6(r3, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c)
sendto$inet6(r3, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a", 0x94, 0x1, 0x0, 0x0)
splice(r3, 0x0, r2, 0x0, 0x406f413, 0x0)
sendto$inet6(r0, &(0x7f0000000080)='\x00\x00\x00\x00', 0x4, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x4, @mcast2, 0x4}, 0x1c)

26.155065ms ago: executing program 0 (id=3436):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'bridge0\x00'}) (async)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'bridge0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@newlink={0x50, 0x10, 0xffffffffffffffff, 0x70bd26, 0x25dfdbee, {0x0, 0x0, 0x0, 0x0, 0x40c35}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ENCRYPT={0x5, 0x7, 0x1}, @IFLA_MACSEC_CIPHER_SUITE={0xc, 0x4, 0x6}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x50}, 0x1, 0x0, 0x0, 0x28001}, 0x4008800)

0s ago: executing program 1 (id=3437):
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x12, 0x7, 0x4, 0x2}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1, <r2=>0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r0}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0xfb1585202ff31891}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r6}, &(0x7f0000000280), &(0x7f0000000240)=r3}, 0x20)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000003f0000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f00000000c0)=r7, 0x4)
sendmsg$inet(r5, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)

kernel console output (not intermixed with test programs):

omiscuous mode
[  361.523183][T16164] batadv0: left promiscuous mode
[  361.840178][T16177] dvmrp1: entered allmulticast mode
[  361.856266][T16186] __nla_validate_parse: 9 callbacks suppressed
[  361.856282][T16186] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2685'.
[  361.872460][T16184] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2686'.
[  361.938484][T16184] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2686'.
[  361.963520][T16186] syzkaller0: entered promiscuous mode
[  361.982996][T16186] syzkaller0: entered allmulticast mode
[  362.029656][T16177] ªªªªªA speed is unknown, defaulting to 1000
[  362.198885][T16201] netlink: 88 bytes leftover after parsing attributes in process `syz.0.2690'.
[  362.202141][T16197] ªªªªªA speed is unknown, defaulting to 1000
[  362.254830][T16201] IPVS: set_ctl: invalid protocol: 135 172.30.1.1:20002
[  362.278483][T16203] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2692'.
[  362.315207][T16204] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2692'.
[  362.944737][T16236] syzkaller1: entered promiscuous mode
[  362.954775][T16236] syzkaller1: entered allmulticast mode
[  362.962349][T16239] xt_CT: You must specify a L4 protocol and not use inversions on it
[  362.995254][T16241] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2698'.
[  363.861856][T16262] syzkaller1: entered promiscuous mode
[  363.876557][T16262] syzkaller1: entered allmulticast mode
[  364.111876][T16273] netlink: 292 bytes leftover after parsing attributes in process `syz.2.2710'.
[  364.606869][T16286] netlink: 100 bytes leftover after parsing attributes in process `syz.2.2714'.
[  364.664557][T16286] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2714'.
[  364.827627][T16296] netlink: 'syz.2.2716': attribute type 3 has an invalid length.
[  364.873476][T16296] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  364.880810][T16296] IPv6: NLM_F_CREATE should be set when creating new route
[  364.888067][T16296] IPv6: NLM_F_CREATE should be set when creating new route
[  365.411322][T16300] 8021q: adding VLAN 0 to HW filter on device batadv0
[  365.564015][T16300] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  365.899763][ T9191] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  365.945221][T16320] 8021q: adding VLAN 0 to HW filter on device bond0
[  365.953798][T16320] 8021q: adding VLAN 0 to HW filter on device team0
[  365.966554][T16320] 8021q: adding VLAN 0 to HW filter on device batadv0
[  365.980906][T16321] IPVS: set_ctl: invalid protocol: 2 0.0.0.0:20002
[  365.997511][ T8850] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  366.006649][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  366.019119][ T8867] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  366.027962][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  366.041264][ T8846] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  366.050219][ T8850] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  366.059386][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  366.069801][ T5843] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  366.078710][ T8844] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  366.259963][T16320] 0·: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  366.278634][T16342] netlink: 'syz.0.2729': attribute type 1 has an invalid length.
[  366.286553][T16320] 0·: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  366.321206][T16320] veth1_macvtap: left promiscuous mode
[  366.340517][T16320] veth0_macvtap: left promiscuous mode
[  366.361579][T16320] veth0_macvtap: entered promiscuous mode
[  366.390454][T16320] veth1_macvtap: entered promiscuous mode
[  366.492635][T16320] gretap0: entered allmulticast mode
[  366.530224][T16320] 8021q: adding VLAN 0 to HW filter on device eth0
[  366.570622][T16320] 8021q: adding VLAN 0 to HW filter on device eth1
[  366.619739][T16320] 8021q: adding VLAN 0 to HW filter on device eth2
[  366.651226][T16320] 8021q: adding VLAN 0 to HW filter on device eth3
[  366.691431][T16320] 8021q: adding VLAN 0 to HW filter on device team1
[  366.709157][T16320] 8021q: adding VLAN 0 to HW filter on device bond1
[  366.724382][T16320] 8021q: adding VLAN 0 to HW filter on device bond2
[  366.746433][T16320] 8021q: adding VLAN 0 to HW filter on device bond3
[  366.760294][T16320] 8021q: adding VLAN 0 to HW filter on device bond4
[  366.845229][T16342] 8021q: adding VLAN 0 to HW filter on device bond12
[  366.878583][ T8844] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  366.887054][ T8844] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  366.912542][ T8844] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  366.965948][ T8844] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  367.041735][T16327] ªªªªªA speed is unknown, defaulting to 1000
[  367.177099][T16355] geneve3: entered promiscuous mode
[  367.206543][T16362] ip6tnl0: Caught tx_queue_len zero misconfig
[  367.272549][ T1018] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  367.340619][ T1018] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  367.364995][ T1018] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  367.379417][T16369] __nla_validate_parse: 7 callbacks suppressed
[  367.379446][T16369] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2737'.
[  367.424048][ T1018] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  367.518986][T16365] syzkaller0: entered promiscuous mode
[  367.529440][T16365] syzkaller0: entered allmulticast mode
[  367.632037][T16381] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2740'.
[  367.681176][T16365] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  368.236720][T16364] tipc: Resetting bearer <eth:syzkaller0>
[  368.256062][T16364] tipc: Disabling bearer <eth:syzkaller0>
[  368.466125][T16393] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.2746'.
[  368.680037][T16401] vlan0: entered promiscuous mode
[  368.689900][T16403] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2748'.
[  368.692864][T16405] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2750'.
[  368.727053][T16401] geneve1: entered promiscuous mode
[  368.743175][T16401] vlan0: entered allmulticast mode
[  368.764539][T16401] geneve1: entered allmulticast mode
[  369.325186][T16457] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2759'.
[  369.667957][T16467] netlink: 'syz.2.2761': attribute type 1 has an invalid length.
[  369.733982][T16467] bond14: entered promiscuous mode
[  369.739964][T16467] 8021q: adding VLAN 0 to HW filter on device bond14
[  369.982412][T16479] 8021q: adding VLAN 0 to HW filter on device bond14
[  370.000797][T16480] IPVS: set_ctl: invalid protocol: 41 100.1.1.2:20002
[  370.011892][T16479] bond14: (slave vti0): The slave device specified does not support setting the MAC address
[  370.049931][T16479] bond14: (slave vti0): Setting fail_over_mac to active for active-backup mode
[  370.064850][T16479] bond14: (slave vti0): making interface the new active one
[  370.072771][T16479] vti0: entered promiscuous mode
[  370.089537][T16479] bond14: (slave vti0): Enslaving as an active interface with an up link
[  370.108220][T16483] FAULT_INJECTION: forcing a failure.
[  370.108220][T16483] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  370.130021][T16483] CPU: 1 UID: 0 PID: 16483 Comm: syz.4.2766 Not tainted syzkaller #0 PREEMPT(full) 
[  370.130044][T16483] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  370.130062][T16483] Call Trace:
[  370.130073][T16483]  <TASK>
[  370.130079][T16483]  dump_stack_lvl+0xe8/0x150
[  370.130106][T16483]  should_fail_ex+0x412/0x560
[  370.130134][T16483]  _copy_from_user+0x2d/0xb0
[  370.130160][T16483]  ___sys_sendmsg+0x1c6/0x360
[  370.130188][T16483]  ? __lock_acquire+0x6b5/0x2cf0
[  370.130212][T16483]  ? __pfx____sys_sendmsg+0x10/0x10
[  370.130268][T16483]  ? __fget_files+0x2a/0x420
[  370.130289][T16483]  ? __fget_files+0x3a0/0x420
[  370.130319][T16483]  __x64_sys_sendmsg+0x1bd/0x2a0
[  370.130347][T16483]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  370.130382][T16483]  ? __pfx_ksys_write+0x10/0x10
[  370.130436][T16483]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  370.130456][T16483]  do_syscall_64+0x15f/0xf80
[  370.130473][T16483]  ? trace_irq_disable+0x3b/0x140
[  370.130500][T16483]  ? clear_bhb_loop+0x40/0x90
[  370.130522][T16483]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  370.130539][T16483] RIP: 0033:0x7f4456f9ce59
[  370.130564][T16483] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  370.130578][T16483] RSP: 002b:00007f4457f27028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  370.130597][T16483] RAX: ffffffffffffffda RBX: 00007f4457215fa0 RCX: 00007f4456f9ce59
[  370.130610][T16483] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003
[  370.130621][T16483] RBP: 00007f4457f27090 R08: 0000000000000000 R09: 0000000000000000
[  370.130632][T16483] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  370.130642][T16483] R13: 00007f4457216038 R14: 00007f4457215fa0 R15: 00007ffea4d28d38
[  370.130672][T16483]  </TASK>
[  370.319718][T16484] netlink: 'syz.0.2765': attribute type 1 has an invalid length.
[  370.354039][T16484] bond13: entered promiscuous mode
[  370.360065][T16484] 8021q: adding VLAN 0 to HW filter on device bond13
[  370.422668][T16484] 8021q: adding VLAN 0 to HW filter on device bond14
[  370.432141][T16484] bond13: (slave bond14): making interface the new active one
[  370.439785][T16484] bond14: entered promiscuous mode
[  370.445825][T16484] bond13: (slave bond14): Enslaving as an active interface with an up link
[  370.475174][T16488] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2768'.
[  370.641645][T16488] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2768'.
[  370.683584][T16507] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2773'.
[  370.848291][T16515] syzkaller0: entered promiscuous mode
[  370.872788][T16514] netlink: 1244 bytes leftover after parsing attributes in process `syz.0.2776'.
[  370.883289][T16515] syzkaller0: entered allmulticast mode
[  370.901846][T16514] netlink: 'syz.0.2776': attribute type 1 has an invalid length.
[  370.929788][T16514] net_ratelimit: 15 callbacks suppressed
[  370.929805][T16514] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  370.961221][T16523] netlink: 'syz.4.2777': attribute type 1 has an invalid length.
[  370.999115][T16523] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  371.008558][T16519] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter'
[  371.088620][T16522] ªªªªªA speed is unknown, defaulting to 1000
[  371.180213][ T1018] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  371.188564][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  371.345677][ T6456] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  371.425641][ T1018] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  371.436658][ T8844] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  371.445165][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  371.453862][ T8841] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  371.484106][ T5733] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  371.807972][T16559] netlink: 'syz.3.2790': attribute type 30 has an invalid length.
[  371.971478][T16565] netlink: 'syz.1.2792': attribute type 3 has an invalid length.
[  372.042295][T16565] nbd: nbd1 already in use
[  372.050567][T16565] block nbd1: NBD_DISCONNECT
[  372.055302][T16565] block nbd1: Send disconnect failed -32
[  372.064756][T16565] block nbd1: Send disconnect failed -32
[  372.071120][T16565] block nbd1: shutting down sockets
[  372.261390][T16575] syzkaller0: entered promiscuous mode
[  372.272827][T16575] syzkaller0: entered allmulticast mode
[  372.288944][T16575] tc action pedit offset must be on 32 bit boundaries
[  372.780533][T16590] __nla_validate_parse: 2 callbacks suppressed
[  372.780549][T16590] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2801'.
[  372.825523][T16590] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2801'.
[  372.924430][T16598] Bluetooth: hci4: Opcode 0x0401 failed: -22
[  373.118286][T16604] netlink: 'syz.3.2806': attribute type 1 has an invalid length.
[  373.214772][ T7234] udevd[7234]: inotify_add_watch(7, /dev/nbd1, 10) failed: No such file or directory
[  373.252627][T16604] 8021q: adding VLAN 0 to HW filter on device bond5
[  373.287845][T16604] netlink: 'syz.3.2806': attribute type 10 has an invalid length.
[  373.296936][T16604] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2806'.
[  373.328083][T16613] bond5: (slave veth5): Enslaving as an active interface with a down link
[  373.352712][T16619] bond5: (slave dummy0): making interface the new active one
[  373.362150][T16619] dummy0: entered promiscuous mode
[  373.371973][T16619] bond5: (slave dummy0): Enslaving as an active interface with an up link
[  373.379220][T16625] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2811'.
[  373.382436][T16620] syzkaller0: entered promiscuous mode
[  373.395784][T16620] syzkaller0: entered allmulticast mode
[  373.414885][T16604] bond5: (slave dummy0): Releasing active interface
[  373.437134][T16631] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2812'.
[  373.467642][T16631] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2812'.
[  373.587350][T16623] syzkaller1: tun_chr_ioctl cmd 35111
[  373.622063][T16639] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2813'.
[  373.652333][T16639] bond0: option primary: mode dependency failed, not supported in mode balance-rr(0)
[  373.770403][T16638] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2813'.
[  373.838652][T16645] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2815'.
[  373.854921][T16645] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2815'.
[  374.838087][T16700] vlan0: left promiscuous mode
[  374.849002][T16714] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  374.860109][T16700] geneve1: left promiscuous mode
[  374.897341][   T68] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  375.095192][T16719] syzkaller0: entered promiscuous mode
[  375.113200][T16719] syzkaller0: entered allmulticast mode
[  375.370621][T16726] pimreg: entered allmulticast mode
[  375.651860][T16732] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0
[  376.003678][T16760] netlink: 'syz.2.2849': attribute type 1 has an invalid length.
[  376.039536][T16760] netlink: 'syz.2.2849': attribute type 4 has an invalid length.
[  376.058649][T16761] netlink: 'syz.2.2849': attribute type 1 has an invalid length.
[  376.103041][T16761] netlink: 'syz.2.2849': attribute type 4 has an invalid length.
[  376.299824][ T8841] net_ratelimit: 8 callbacks suppressed
[  376.299841][ T8841] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  376.313817][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  376.441353][T16771] syzkaller0: entered promiscuous mode
[  376.446978][T16771] syzkaller0: entered allmulticast mode
[  376.457227][T16773] tipc: Started in network mode
[  376.462961][T16773] tipc: Node identity , cluster identity 4711
[  376.469221][T16773] tipc: Failed to obtain node identity
[  376.475515][T16773] tipc: Enabling of bearer <eth:vcan0> rejected, failed to enable media
[  376.710369][ T9191] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  377.181698][  T985] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  377.190191][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  377.198314][ T1018] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  377.745499][ T9191] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  378.463146][ T1315] ieee802154 phy0 wpan0: encryption failed: -22
[  378.779489][    C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  378.784569][ T9191] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  379.139686][T16812] __nla_validate_parse: 15 callbacks suppressed
[  379.139703][T16812] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2863'.
[  379.254105][  T985] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  379.291598][  T985] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  379.385258][T16819] ip6erspan0: entered promiscuous mode
[  379.412040][T16819] ip6erspan0: entered allmulticast mode
[  379.512379][T16824] netlink: 277 bytes leftover after parsing attributes in process `syz.4.2871'.
[  379.819957][ T6440] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  379.964065][T16848] netlink: 108 bytes leftover after parsing attributes in process `syz.3.2876'.
[  380.018419][T16848] netlink: 108 bytes leftover after parsing attributes in process `syz.3.2876'.
[  380.041947][T16856] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.2877'.
[  380.072105][T16855] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2876'.
[  380.095055][T16855] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2876'.
[  380.113231][T16859] bond0: Caught tx_queue_len zero misconfig
[  380.119432][T16855] netlink: 31 bytes leftover after parsing attributes in process `syz.3.2876'.
[  380.141961][T16855] netlink: 'syz.3.2876': attribute type 3 has an invalid length.
[  380.171008][T16855] netlink: 'syz.3.2876': attribute type 2 has an invalid length.
[  380.196621][T16855] netlink: 31 bytes leftover after parsing attributes in process `syz.3.2876'.
[  380.228639][T16855] netlink: 'syz.3.2876': attribute type 2 has an invalid length.
[  380.264481][T16862] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2880'.
[  380.477947][T16875] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  381.900910][ T9191] net_ratelimit: 1 callbacks suppressed
[  381.900929][ T9191] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  382.300969][   T68] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  382.309169][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  382.318327][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  382.327155][ T8845] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  382.543866][T16919] netlink: 'syz.2.2897': attribute type 2 has an invalid length.
[  382.552033][T16919] netlink: 'syz.2.2897': attribute type 11 has an invalid length.
[  382.941355][ T6440] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  382.949533][ T6440] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  382.957925][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  383.682183][T16954] netlink: 'syz.1.2908': attribute type 10 has an invalid length.
[  383.695700][T16954] bridge0: port 1(dummy0) entered disabled state
[  383.704525][T16954] dummy0: left allmulticast mode
[  383.709786][T16954] dummy0: left promiscuous mode
[  383.715947][T16954] bridge0: port 1(dummy0) entered disabled state
[  383.727749][T16954] team0: Port device dummy0 added
[  383.733222][T16955] netlink: 'syz.1.2908': attribute type 10 has an invalid length.
[  383.746644][T16955] team0: Port device dummy0 removed
[  383.800825][T16957] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check.
[  383.979483][ T6440] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  384.181519][T16887] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  384.481890][T16980] bridge9: entered promiscuous mode
[  384.542418][T16980] bridge9: entered allmulticast mode
[  384.636466][ T6451] bridge0: entered promiscuous mode
[  384.713708][T16986] ªªªªªA speed is unknown, defaulting to 1000
[  384.804761][T17005] __nla_validate_parse: 10 callbacks suppressed
[  384.804781][T17005] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2918'.
[  385.032562][T17014] netlink: 'syz.1.2921': attribute type 15 has an invalid length.
[  385.133091][T17025] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2922'.
[  385.160681][T17025] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2922'.
[  385.177923][T17025] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2922'.
[  385.182173][T17027] syzkaller0: entered promiscuous mode
[  385.193368][T17027] syzkaller0: entered allmulticast mode
[  385.201886][T17025] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2922'.
[  385.216968][T17025] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2922'.
[  385.233953][T17027] nbd: must specify at least one socket
[  385.241196][T17025] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2922'.
[  385.257935][T17025] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2922'.
[  385.276944][T17025] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2922'.
[  385.312603][T17025] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2922'.
[  385.579400][ T5639] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  385.589510][ T5639] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  385.598573][ T5639] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  385.608992][ T5639] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  385.620362][ T5639] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  386.305450][T17070] netlink: 'syz.2.2933': attribute type 1 has an invalid length.
[  386.427339][T17037] ªªªªªA speed is unknown, defaulting to 1000
[  386.724597][T17070] lo speed is unknown, defaulting to 1000
[  386.779506][    C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  386.828190][T17070] lo speed is unknown, defaulting to 1000
[  386.898281][T17070] lo speed is unknown, defaulting to 1000
[  386.912670][T17093] netlink: 'syz.3.2941': attribute type 1 has an invalid length.
[  386.919826][T17101] xt_policy: neither incoming nor outgoing policy selected
[  387.102747][ T6456] net_ratelimit: 3 callbacks suppressed
[  387.102766][ T6456] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  387.421419][ T8867] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  387.429878][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  387.447464][T17070] infiniband sqz0: set active
[  387.453958][T17070] infiniband sqz0: added lo
[  387.479425][ T5733] lo speed is unknown, defaulting to 1000
[  387.498256][T17070] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR
[  387.519107][T17070] infiniband sqz0: Couldn't open port 1
[  387.542677][T17070] smbdirect: ib_dev[sqz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000
[  387.554022][T17037] bridge0: port 1(bridge_slave_0) entered blocking state
[  387.565028][T17037] bridge0: port 1(bridge_slave_0) entered disabled state
[  387.572758][T17037] bridge_slave_0: entered allmulticast mode
[  387.584861][T17037] bridge_slave_0: entered promiscuous mode
[  387.586216][T17070] smbdirect: ib_dev[sqz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32
[  387.610101][T17070] smbdirect: ib_dev[sqz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005
[  387.636704][T17037] bridge0: port 2(bridge_slave_1) entered blocking state
[  387.647229][T17037] bridge0: port 2(bridge_slave_1) entered disabled state
[  387.657314][T17070] RDS/IB: sqz0: added
[  387.662399][T17070] smc: adding ib device sqz0 with port count 1
[  387.669770][T17037] bridge_slave_1: entered allmulticast mode
[  387.677053][T17070] smc:    ib device sqz0 port 1 has no pnetid
[  387.684256][T17037] bridge_slave_1: entered promiscuous mode
[  387.740715][ T5626] Bluetooth: hci5: command tx timeout
[  387.747185][T17125] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  387.750324][ T5733] lo speed is unknown, defaulting to 1000
[  387.809689][T17129] syzkaller0: entered promiscuous mode
[  387.815277][T17129] syzkaller0: entered allmulticast mode
[  387.821590][T17129] tipc: Resetting bearer <eth:syzkaller0>
[  387.837662][T17037] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  387.855844][T17070] lo speed is unknown, defaulting to 1000
[  387.865876][T17123] tipc: Resetting bearer <eth:syzkaller0>
[  388.065912][ T8841] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  388.139913][ T6440] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  388.701203][  T985] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  388.709583][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  389.182076][ T6440] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  389.472180][T17123] tipc: Disabling bearer <eth:syzkaller0>
[  389.484390][T17037] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  389.496910][T17070] lo speed is unknown, defaulting to 1000
[  389.504778][ T5733] tipc: Node number set to 2243761139
[  389.545686][T17037] team0: Port device team_slave_0 added
[  389.555518][T17037] team0: Port device team_slave_1 added
[  389.593412][T17037] batman_adv: batadv0: Adding interface: batadv_slave_0
[  389.606194][T17037] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  389.632670][T17037] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  389.646665][T17037] batman_adv: batadv0: Adding interface: batadv_slave_1
[  389.654702][T17037] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  389.699596][T17037] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  389.803704][T17037] hsr_slave_0: entered promiscuous mode
[  389.819765][ T5626] Bluetooth: hci5: command tx timeout
[  389.837922][T17037] hsr_slave_1: entered promiscuous mode
[  390.179194][T17070] lo speed is unknown, defaulting to 1000
[  390.223288][ T6440] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  390.303923][T17158] netlink: 'syz.1.2955': attribute type 29 has an invalid length.
[  390.322022][T17158] __nla_validate_parse: 65 callbacks suppressed
[  390.322040][T17158] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2955'.
[  390.452621][T17037] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  390.465722][T17037] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  390.475950][T17037] netdevsim netdevsim4 eth3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0
[  390.586814][T17037] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  390.599637][T17037] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  390.609910][T17037] netdevsim netdevsim4 eth2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0
[  390.629832][T17070] lo speed is unknown, defaulting to 1000
[  390.706020][T17037] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  390.716058][T17037] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  390.727619][T17037] netdevsim netdevsim4 eth1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0
[  390.802348][T17037] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  390.812282][T17037] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  390.822339][T17037] netdevsim netdevsim4 eth0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0
[  390.839555][T17070] lo speed is unknown, defaulting to 1000
[  391.100247][T17070] lo speed is unknown, defaulting to 1000
[  391.112864][ T8841] tipc: Subscription rejected, illegal request
[  391.260993][ T6440] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  391.323381][T17187] x_tables: duplicate underflow at hook 1
[  391.440665][T17189] bond6: option fail_over_mac: invalid value (127)
[  391.448953][T17189] bond6 (unregistering): Released all slaves
[  391.493770][T17195] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2965'.
[  391.579123][T17199] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  391.842431][T17208] xt_hashlimit: size too large, truncated to 1048576
[  391.849477][T17208] xt_hashlimit: max too large, truncated to 1048576
[  391.872478][T17208] ipt_REJECT: TCP_RESET invalid for non-tcp
[  391.899626][ T5626] Bluetooth: hci5: command tx timeout
[  392.299876][ T6440] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  393.180531][  T985] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  393.188676][  T985] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  393.197116][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  393.308689][T17163] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  393.326258][T17037] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  393.339869][ T6440] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  393.408511][T17037] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  393.447086][T17037] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  393.491602][T17037] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  393.503845][T17037] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  393.523374][T17037] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  393.546237][T17037] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  393.584048][T17037] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  393.670671][T17230] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2974'.
[  393.814466][T17037] 8021q: adding VLAN 0 to HW filter on device bond0
[  393.905077][T17037] 8021q: adding VLAN 0 to HW filter on device team0
[  393.938179][ T1018] bridge0: port 1(bridge_slave_0) entered blocking state
[  393.945389][ T1018] bridge0: port 1(bridge_slave_0) entered forwarding state
[  393.968772][T17242] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2978'.
[  393.981579][ T5626] Bluetooth: hci5: command tx timeout
[  394.007864][   T68] bridge0: port 2(bridge_slave_1) entered blocking state
[  394.015084][   T68] bridge0: port 2(bridge_slave_1) entered forwarding state
[  394.034241][T17239] ªªªªªA speed is unknown, defaulting to 1000
[  394.291117][T17239] lo speed is unknown, defaulting to 1000
[  394.381646][ T6440] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  394.462439][ T8845] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  394.470968][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  394.937788][T17269] IPVS: set_ctl: invalid protocol: 108 0.0.0.0:20002
[  395.291299][T17287] netlink: 'syz.1.2987': attribute type 13 has an invalid length.
[  395.307258][T17287] netlink: 'syz.1.2987': attribute type 17 has an invalid length.
[  395.308114][T17288] netlink: 'syz.0.2989': attribute type 21 has an invalid length.
[  395.316775][T17037] 8021q: adding VLAN 0 to HW filter on device batadv0
[  395.364153][T17283] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2987'.
[  395.419660][ T6456] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  396.182765][T17287] veth0_macvtap: left allmulticast mode
[  396.288587][T17287] 8021q: adding VLAN 0 to HW filter on device eth0
[  396.307671][T17287] 8021q: adding VLAN 0 to HW filter on device eth1
[  396.323450][T17287] 8021q: adding VLAN 0 to HW filter on device eth2
[  396.338174][T17287] 8021q: adding VLAN 0 to HW filter on device eth3
[  396.352340][T17287] macsec2: left promiscuous mode
[  396.358460][T17287] team1: left promiscuous mode
[  396.363684][T17287] team1: left allmulticast mode
[  396.371099][T17287] team2: left promiscuous mode
[  396.375908][T17287] team2: left allmulticast mode
[  396.394200][T17287] veth0_to_team: entered promiscuous mode
[  396.461981][ T6456] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  396.658219][T17312] syzkaller1: entered promiscuous mode
[  396.686080][T17312] syzkaller1: entered allmulticast mode
[  396.835792][T17318] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2997'.
[  396.893307][T17037] veth0_vlan: entered promiscuous mode
[  396.927945][T17037] veth1_vlan: entered promiscuous mode
[  397.005999][T17037] veth0_macvtap: entered promiscuous mode
[  397.018551][T17037] veth1_macvtap: entered promiscuous mode
[  397.060329][T17037] batman_adv: batadv0: Interface activated: batadv_slave_0
[  397.086004][T17037] batman_adv: batadv0: Interface activated: batadv_slave_1
[  397.111040][ T8845] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  397.142838][ T8845] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  397.153586][ T8845] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  397.176789][ T8845] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  397.460980][T17332] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  397.472301][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  397.503169][   T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  397.833394][T17337] sit1: entered promiscuous mode
[  398.006617][ T1018] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  398.052452][ T1018] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  398.174385][ T1018] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  398.192914][ T1018] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  398.222770][ T8867] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  398.299921][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  398.479819][T17366] netlink: 'syz.1.3008': attribute type 6 has an invalid length.
[  398.493071][T17366] netlink: 'syz.1.3008': attribute type 23 has an invalid length.
[  398.502872][T17368] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3008'.
[  398.513990][T17366] IPv6: NLM_F_CREATE should be specified when creating new route
[  398.542371][ T6456] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  398.644835][T17371] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3009'.
[  398.687218][T17371] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3009'.
[  398.722714][T17371] netlink: 'syz.2.3009': attribute type 11 has an invalid length.
[  398.764931][T17378] netlink: 25 bytes leftover after parsing attributes in process `syz.4.2925'.
[  398.941610][ T8867] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  398.950016][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  399.036434][ T5639] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  399.047345][ T5639] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  399.058845][ T5639] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  399.080982][ T5639] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  399.091871][ T5639] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  399.338288][T17395] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  399.408403][T17400] : entered promiscuous mode
[  399.580940][ T1018] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  399.977641][T17421] netlink: 188 bytes leftover after parsing attributes in process `syz.2.3023'.
[  400.103697][T17390] ªªªªªA speed is unknown, defaulting to 1000
[  400.140721][T17390] lo speed is unknown, defaulting to 1000
[  400.370138][T17439] netlink: 144 bytes leftover after parsing attributes in process `syz.1.3029'.
[  400.976573][T17465] netlink: 'syz.2.3035': attribute type 3 has an invalid length.
[  401.190564][ T5639] Bluetooth: hci4: command tx timeout
[  401.323590][T17390] bridge0: port 1(bridge_slave_0) entered blocking state
[  401.330838][T17390] bridge0: port 1(bridge_slave_0) entered disabled state
[  401.337970][T17390] bridge_slave_0: entered allmulticast mode
[  401.345777][T17390] bridge_slave_0: entered promiscuous mode
[  401.354519][T17390] bridge0: port 2(bridge_slave_1) entered blocking state
[  401.361785][T17390] bridge0: port 2(bridge_slave_1) entered disabled state
[  401.368918][T17390] bridge_slave_1: entered allmulticast mode
[  401.375940][T17390] bridge_slave_1: entered promiscuous mode
[  401.399891][T17390] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  401.412399][T17390] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  401.437805][T17390] team0: Port device team_slave_0 added
[  401.445257][T17390] team0: Port device team_slave_1 added
[  401.467126][T17390] batman_adv: batadv0: Adding interface: batadv_slave_0
[  401.474316][T17390] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  401.500431][    C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  401.510260][T17390] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  401.522371][T17390] batman_adv: batadv0: Adding interface: batadv_slave_1
[  401.529600][T17390] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  401.555958][T17390] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  401.599554][T17390] hsr_slave_0: entered promiscuous mode
[  401.605715][T17390] hsr_slave_1: entered promiscuous mode
[  401.612365][T17390] debugfs: 'hsr0' already exists in 'hsr'
[  401.618111][T17390] Cannot create hsr debugfs directory
[  401.735034][T17390] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  401.746197][T17390] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  401.834750][T17390] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  401.844613][T17390] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  401.907838][T17390] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  401.917682][T17390] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  401.969338][T17390] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  401.979093][T17390] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  402.102299][T17390] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  402.112409][T17390] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  402.120363][T17390] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  402.129633][T17390] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  402.138018][T17390] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  402.148336][T17390] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  402.158018][T17390] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  402.168185][T17390] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  402.231201][T17390] 8021q: adding VLAN 0 to HW filter on device bond0
[  402.249526][T17390] 8021q: adding VLAN 0 to HW filter on device team0
[  402.262350][ T8867] bridge0: port 1(bridge_slave_0) entered blocking state
[  402.269516][ T8867] bridge0: port 1(bridge_slave_0) entered forwarding state
[  402.286536][  T985] bridge0: port 2(bridge_slave_1) entered blocking state
[  402.293635][  T985] bridge0: port 2(bridge_slave_1) entered forwarding state
[  402.568236][T17390] 8021q: adding VLAN 0 to HW filter on device batadv0
[  402.613555][T17390] veth0_vlan: entered promiscuous mode
[  402.627616][T17390] veth1_vlan: entered promiscuous mode
[  402.653405][T17390] veth0_macvtap: entered promiscuous mode
[  402.663477][T17390] veth1_macvtap: entered promiscuous mode
[  402.682197][T17390] batman_adv: batadv0: Interface activated: batadv_slave_0
[  402.695810][T17390] batman_adv: batadv0: Interface activated: batadv_slave_1
[  402.704167][ T5843] net_ratelimit: 5 callbacks suppressed
[  402.704181][ T5843] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  402.716359][ T8867] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  402.729068][ T8867] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  402.738664][ T8867] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  402.751311][ T8867] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  402.842394][   T68] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  402.851367][   T68] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  402.882982][ T8867] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  402.890934][ T8867] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  403.259597][ T5639] Bluetooth: hci4: command tx timeout
[  403.740823][ T9191] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  404.060729][ T8867] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  404.699849][   T68] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  404.707986][ T8845] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  404.716098][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  404.724198][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  404.780471][ T9191] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  405.341343][ T5639] Bluetooth: hci4: command tx timeout
[  405.820118][ T6456] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  406.859651][ T6456] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  407.429376][ T5639] Bluetooth: hci4: command tx timeout
[  407.901569][ T9191] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  408.940630][ T9191] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  409.822376][ T8867] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  409.830543][ T8845] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  409.838631][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  409.979648][ T5843] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  410.470609][   T68] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  410.478948][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  411.019654][ T6456] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  412.059518][ T5843] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  413.099865][ T5843] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  414.139679][ T6456] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  414.940193][ T8845] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  414.948436][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  415.179712][ T5843] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  415.581860][ T8845] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  416.222252][ T8867] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  416.230610][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  416.238944][ T6456] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  417.261051][ T6456] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  418.299768][ T6456] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  419.339772][ T5843] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  420.379614][ T9191] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  420.700008][ T8845] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  420.708239][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  421.339896][ T8845] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  421.348031][  T985] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  421.356136][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  421.419763][ T6456] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  422.459597][ T9191] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  422.821349][T17503] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3042'.
[  423.021540][T17513] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3043'.
[  423.232429][ T5626] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  423.247330][ T5626] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  423.259095][ T5626] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  423.279552][ T5626] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  423.289052][ T5626] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  423.501164][ T6456] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  423.863099][T17552] bond1: option active_slave: mode dependency failed, not supported in mode balance-xor(2)
[  423.881668][T17552] bond1 (unregistering): Released all slaves
[  423.972319][T17556] netlink: 'syz.2.3057': attribute type 1 has an invalid length.
[  424.037219][T17561] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3057'.
[  424.109701][T17556] bond16: entered promiscuous mode
[  424.115318][T17556] 8021q: adding VLAN 0 to HW filter on device bond16
[  424.123164][T17561] bond16: entered allmulticast mode
[  424.161281][T17556] bond16: (slave bridge10): making interface the new active one
[  424.169057][T17556] bridge10: entered promiscuous mode
[  424.174704][T17556] bridge10: entered allmulticast mode
[  424.187417][T17556] bond16: (slave bridge10): Enslaving as an active interface with an up link
[  424.194327][T17568] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3060'.
[  424.206650][T17567] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 !
[  424.243185][T17568] bond1: entered promiscuous mode
[  424.248724][T17568] 8021q: adding VLAN 0 to HW filter on device bond1
[  424.296860][T17519] ªªªªªA speed is unknown, defaulting to 1000
[  424.312689][T17519] lo speed is unknown, defaulting to 1000
[  424.542351][ T5843] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  425.263606][T17590] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  425.313517][T17587] syzkaller0: entered promiscuous mode
[  425.326295][T17587] syzkaller0: entered allmulticast mode
[  425.339352][ T5639] Bluetooth: hci0: command tx timeout
[  425.348865][T17592] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3067'.
[  425.414338][T17587] tipc: Resetting bearer <eth:syzkaller0>
[  425.481765][T17596] ªªªªªA speed is unknown, defaulting to 1000
[  425.497278][T17589] sctp: [Deprecated]: syz.0.3066 (pid 17589) Use of struct sctp_assoc_value in delayed_ack socket option.
[  425.497278][T17589] Use struct sctp_sack_info instead
[  425.504705][T17596] lo speed is unknown, defaulting to 1000
[  425.582426][ T5843] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  425.638281][T17519] bridge0: port 1(bridge_slave_0) entered blocking state
[  425.654009][T17519] bridge0: port 1(bridge_slave_0) entered disabled state
[  425.670301][T17519] bridge_slave_0: entered allmulticast mode
[  425.688347][T17519] bridge_slave_0: entered promiscuous mode
[  425.697336][T17519] bridge0: port 2(bridge_slave_1) entered blocking state
[  425.713253][T17519] bridge0: port 2(bridge_slave_1) entered disabled state
[  425.729962][T17519] bridge_slave_1: entered allmulticast mode
[  425.748403][T17519] bridge_slave_1: entered promiscuous mode
[  425.866276][T17519] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  425.896856][T17519] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  425.983390][T17586] tipc: Resetting bearer <eth:syzkaller0>
[  426.042489][T17586] tipc: Disabling bearer <eth:syzkaller0>
[  426.174541][T17519] team0: Port device team_slave_0 added
[  426.235591][T17519] team0: Port device team_slave_1 added
[  426.306019][T17619] bridge_slave_0: left allmulticast mode
[  426.315102][T17619] bridge_slave_0: left promiscuous mode
[  426.324362][T17619] bridge0: port 1(bridge_slave_0) entered disabled state
[  426.338303][T17619] bridge_slave_1: left allmulticast mode
[  426.345030][T17619] bridge_slave_1: left promiscuous mode
[  426.351702][T17619] bridge0: port 2(bridge_slave_1) entered disabled state
[  426.370819][T17619] bond0: (slave bond_slave_0): Releasing backup interface
[  426.384147][T17619] bond0: (slave bond_slave_1): Releasing backup interface
[  426.400776][T17619] team0: Port device team_slave_0 removed
[  426.414217][T17619] team0: Port device team_slave_1 removed
[  426.422642][T17619] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  426.432071][T17619] batman_adv: batadv0: Removing interface: batadv_slave_0
[  426.446450][T17619] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  426.455713][T17619] batman_adv: batadv0: Removing interface: batadv_slave_1
[  426.468021][T17619] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  426.473463][ T8867] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  426.492395][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  426.574488][T17624] bond5: (slave bridge18): Releasing active interface
[  426.585121][T17624] team0: Port device macvlan0 removed
[  426.593789][T17624] bond7: (slave vti0): Releasing backup interface
[  426.600897][T17624] vti0: left promiscuous mode
[  426.613507][T17624] bond8: (slave gretap2): Releasing active interface
[  426.624767][ T5843] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  426.657705][T17624] bond9: (slave bond10): Releasing backup interface
[  426.710725][T17624] bond13: (slave bond14): Releasing backup interface
[  426.720941][T17624] bond14: left promiscuous mode
[  426.819758][T17519] batman_adv: batadv0: Adding interface: batadv_slave_0
[  426.828865][T17519] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  426.862580][T17519] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  426.882257][T17519] batman_adv: batadv0: Adding interface: batadv_slave_1
[  426.898178][T17519] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  426.924763][T17519] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  427.071047][T17633] ªªªªªA speed is unknown, defaulting to 1000
[  427.080040][T17642] batadv_slave_0: Caught tx_queue_len zero misconfig
[  427.107732][ T8845] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  427.116177][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  427.127079][ T8867] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  427.144089][T17642] netlink: 4136 bytes leftover after parsing attributes in process `syz.0.3079'.
[  427.166658][T17633] lo speed is unknown, defaulting to 1000
[  427.257781][T17519] hsr_slave_0: entered promiscuous mode
[  427.296760][T17519] hsr_slave_1: entered promiscuous mode
[  427.332654][T17519] debugfs: 'hsr0' already exists in 'hsr'
[  427.359172][T17519] Cannot create hsr debugfs directory
[  427.419451][ T5639] Bluetooth: hci0: command tx timeout
[  427.632459][T17654] syzkaller0: entered promiscuous mode
[  427.649395][T17654] syzkaller0: entered allmulticast mode
[  427.706222][T17659] netlink: 'syz.0.3082': attribute type 12 has an invalid length.
[  427.754148][T17645] ªªªªªA speed is unknown, defaulting to 1000
[  427.775443][T17645] lo speed is unknown, defaulting to 1000
[  427.953541][ T6452] lo speed is unknown, defaulting to 1000
[  428.704283][ T6456] net_ratelimit: 3 callbacks suppressed
[  428.704301][ T6456] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  429.501061][ T5639] Bluetooth: hci0: command tx timeout
[  429.671185][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  429.748609][ T9191] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  430.009144][T17680] bond17: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  430.047693][T17680] bond17: (slave lo): Enslaving as an active interface with an up link
[  430.072026][T17680] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check.
[  430.155133][T17519] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  430.168363][T17519] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  430.178523][T17519] netdevsim netdevsim1 eth3 (unregistering): unset [1, 1] type 2 family 0 port 34349 - 0
[  430.208240][ T6456] lo speed is unknown, defaulting to 1000
[  430.259078][ T9191] lo speed is unknown, defaulting to 1000
[  430.291301][ T5843] lo speed is unknown, defaulting to 1000
[  430.330368][T17519] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  430.340714][T17519] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  430.351466][T17519] netdevsim netdevsim1 eth2 (unregistering): unset [1, 1] type 2 family 0 port 34349 - 0
[  430.691413][T17519] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  430.726823][T17519] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  430.768964][T17519] netdevsim netdevsim1 eth1 (unregistering): unset [1, 1] type 2 family 0 port 34349 - 0
[  430.791642][ T5843] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  430.932175][T17519] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  430.946700][T17519] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  430.950335][    C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  430.957263][T17519] netdevsim netdevsim1 eth0 (unregistering): unset [1, 1] type 2 family 0 port 34349 - 0
[  431.328273][T17519] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  431.380183][T17519] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  431.389162][T17519] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  431.408361][T17519] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  431.432940][T17519] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  431.444396][T17519] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  431.455281][T17519] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  431.470564][T17519] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  431.563708][T17519] 8021q: adding VLAN 0 to HW filter on device bond0
[  431.580868][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  431.585875][T17519] 8021q: adding VLAN 0 to HW filter on device team0
[  431.589836][ T5639] Bluetooth: hci0: command tx timeout
[  431.602268][ T1018] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  431.610773][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  431.615392][ T8845] bridge0: port 1(bridge_slave_0) entered blocking state
[  431.626052][ T8845] bridge0: port 1(bridge_slave_0) entered forwarding state
[  431.679102][ T8845] bridge0: port 2(bridge_slave_1) entered blocking state
[  431.686302][ T8845] bridge0: port 2(bridge_slave_1) entered forwarding state
[  431.819727][ T9191] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  431.835379][T17739] syz_tun: entered allmulticast mode
[  431.874765][T17739] dvmrp8: entered allmulticast mode
[  431.903278][T17742] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3105'.
[  431.927935][T17742] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3105'.
[  431.964238][T17738] syz_tun: left allmulticast mode
[  432.291547][T17768] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3108'.
[  432.312226][T17768] netlink: 68 bytes leftover after parsing attributes in process `syz.4.3108'.
[  432.424142][T17775] tc_dump_action: action bad kind
[  432.548175][T17519] 8021q: adding VLAN 0 to HW filter on device batadv0
[  432.652897][T17519] veth0_vlan: entered promiscuous mode
[  432.669179][T17519] veth1_vlan: entered promiscuous mode
[  432.718879][T17519] veth0_macvtap: entered promiscuous mode
[  432.731228][T17519] veth1_macvtap: entered promiscuous mode
[  432.768830][T17519] batman_adv: batadv0: Interface activated: batadv_slave_0
[  432.794153][T17519] batman_adv: batadv0: Interface activated: batadv_slave_1
[  432.816799][ T8867] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  432.833268][ T8867] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  432.854730][ T8867] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  432.864821][ T1018] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  432.872967][ T8841] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  432.895873][ T8867] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  433.178941][T17787] ªªªªªA speed is unknown, defaulting to 1000
[  433.188487][T17787] lo speed is unknown, defaulting to 1000
[  433.231632][T17791] ªªªªªA speed is unknown, defaulting to 1000
[  433.407008][T17791] lo speed is unknown, defaulting to 1000
[  433.907565][ T9191] net_ratelimit: 2 callbacks suppressed
[  433.907581][ T9191] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  434.942604][ T6456] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  435.123069][T17751] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  435.200616][T17792] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3116'.
[  435.233362][ T8867] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  435.248098][ T8867] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  435.369514][T17811] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3119'.
[  435.484805][T17819] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3123'.
[  435.485671][ T8844] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  435.494516][ T8867] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  435.520084][ T8844] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  435.528324][ T8867] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  435.538592][ T8867] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  435.549406][T17820] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3122'.
[  435.575687][ T8867] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  435.623369][T17822] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3122'.
[  435.743742][T17820] syzkaller0: entered promiscuous mode
[  435.749462][T17820] syzkaller0: entered allmulticast mode
[  435.773864][T17825] bridge_slave_0: left allmulticast mode
[  435.780564][T17825] bridge_slave_0: left promiscuous mode
[  435.786552][T17825] bridge0: port 1(bridge_slave_0) entered disabled state
[  435.803089][T17825] bridge_slave_1: left allmulticast mode
[  435.808912][T17825] bridge_slave_1: left promiscuous mode
[  435.814918][T17825] bridge0: port 2(bridge_slave_1) entered disabled state
[  435.828985][T17825] bond0: (slave bond_slave_0): Releasing backup interface
[  435.844401][T17825] bond0: (slave bond_slave_1): Releasing backup interface
[  435.867653][T17825] team0: Port device team_slave_0 removed
[  435.879559][T17825] team0: Port device team_slave_1 removed
[  435.886318][T17825] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  435.894870][T17825] batman_adv: batadv0: Removing interface: batadv_slave_0
[  435.905316][T17825] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  435.914812][T17825] batman_adv: batadv0: Removing interface: batadv_slave_1
[  435.925233][T17825] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  435.984722][ T6456] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  436.763465][ T5626] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  436.782985][ T5626] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  436.803914][ T5626] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  436.825052][ T5626] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  436.844812][ T5626] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  437.030908][ T5843] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  437.343779][ T8841] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  437.352318][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  438.071569][ T5843] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  438.431464][T17838] syzkaller1: entered promiscuous mode
[  438.436974][T17838] syzkaller1: entered allmulticast mode
[  438.445580][T17843] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR
[  438.447755][T17844] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  438.621731][   T68] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  438.817354][T17861] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  438.940382][ T5626] Bluetooth: hci3: command tx timeout
[  439.105278][ T9191] net_ratelimit: 2 callbacks suppressed
[  439.105295][ T9191] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  439.186029][T17882] netlink: 'syz.4.3136': attribute type 4 has an invalid length.
[  439.225039][T17882] netlink: 240 bytes leftover after parsing attributes in process `syz.4.3136'.
[  439.544272][T17846] ªªªªªA speed is unknown, defaulting to 1000
[  439.636366][T17846] lo speed is unknown, defaulting to 1000
[  439.758555][T17897] netlink: 952 bytes leftover after parsing attributes in process `syz.3.3141'.
[  439.793428][T17897] bond0 (unregistering): Released all slaves
[  439.913315][ T1315] ieee802154 phy0 wpan0: encryption failed: -22
[  439.955093][T17904] netlink: 'syz.1.3144': attribute type 1 has an invalid length.
[  439.982860][T17905] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3143'.
[  440.153340][ T5843] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  440.386416][T17912] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3143'.
[  440.496322][  T985] pimreg: left allmulticast mode
[  441.019651][ T5626] Bluetooth: hci3: command tx timeout
[  441.183627][ T6456] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  441.906319][  T985] bond0 (unregistering): Released all slaves
[  441.916071][  T985] bond1 (unregistering): Released all slaves
[  441.932113][  T985] bond2 (unregistering): Released all slaves
[  441.947749][  T985] bond3 (unregistering): Released all slaves
[  441.961102][  T985] bond4 (unregistering): Released all slaves
[  441.976368][  T985] bond5 (unregistering): Released all slaves
[  441.995782][  T985] bond6 (unregistering): Released all slaves
[  442.011686][  T985] bond7 (unregistering): Released all slaves
[  442.026009][  T985] bond8 (unregistering): Released all slaves
[  442.044135][  T985] bond9 (unregistering): Released all slaves
[  442.058042][  T985] bond10 (unregistering): Released all slaves
[  442.075775][  T985] bond11 (unregistering): Released all slaves
[  442.089547][  T985] bond12 (unregistering): Released all slaves
[  442.105173][  T985] bond13 (unregistering): Released all slaves
[  442.122970][  T985] bond14 (unregistering): Released all slaves
[  442.233747][   T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  442.271849][T17931] syzkaller0: entered promiscuous mode
[  442.301184][T17931] syzkaller0: entered allmulticast mode
[  442.308732][T17950] netlink: 'syz.4.3147': attribute type 1 has an invalid length.
[  442.333241][ T5288] 8021q: adding VLAN 0 to HW filter on device eth1
[  442.448128][T17950] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR
[  442.451768][  T985] tipc: Left network mode
[  442.544452][T17963] xt_HMARK: proto mask must be zero with L3 mode
[  442.805343][T17969] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3151'.
[  443.099932][ T5626] Bluetooth: hci3: command tx timeout
[  443.106555][ T8841] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  443.114871][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  443.264599][ T9191] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  443.743715][ T8867] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  444.303436][ T9191] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  444.393901][ T8867] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  444.402285][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  444.674468][ T5288] 8021q: adding VLAN 0 to HW filter on device eth2
[  445.007660][T18010] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3158'.
[  445.117459][T18010] bridge11: entered promiscuous mode
[  445.182104][ T5626] Bluetooth: hci3: command tx timeout
[  445.334667][T18028] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3159'.
[  445.367814][ T6456] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  445.594583][T18025] ªªªªªA speed is unknown, defaulting to 1000
[  445.732198][T18025] lo speed is unknown, defaulting to 1000
[  445.769502][ T5288] 8021q: adding VLAN 0 to HW filter on device eth3
[  446.034525][T17846] bridge0: port 1(bridge_slave_0) entered blocking state
[  446.055219][T17846] bridge0: port 1(bridge_slave_0) entered disabled state
[  446.074373][T17846] bridge_slave_0: entered allmulticast mode
[  446.090577][T17846] bridge_slave_0: entered promiscuous mode
[  446.148211][T17846] bridge0: port 2(bridge_slave_1) entered blocking state
[  446.156385][T17846] bridge0: port 2(bridge_slave_1) entered disabled state
[  446.189465][T17846] bridge_slave_1: entered allmulticast mode
[  446.201148][T17846] bridge_slave_1: entered promiscuous mode
[  446.287031][T17846] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  446.363812][T17846] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  446.394331][ T6456] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  446.481104][T18078] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3170'.
[  446.490283][T18078] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3170'.
[  447.294463][T17846] team0: Port device team_slave_0 added
[  447.306605][ T5288] 8021q: adding VLAN 0 to HW filter on device eth4
[  447.371866][T17846] team0: Port device team_slave_1 added
[  447.426860][ T5843] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  447.538744][T18106] netlink: 'syz.3.3175': attribute type 1 has an invalid length.
[  447.627093][T18092] ªªªªªA speed is unknown, defaulting to 1000
[  447.636534][T17846] batman_adv: batadv0: Adding interface: batadv_slave_0
[  447.648553][T18111] netlink: 72 bytes leftover after parsing attributes in process `syz.3.3175'.
[  447.657828][T17846] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  447.688298][T17846] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  447.778643][T18092] lo speed is unknown, defaulting to 1000
[  447.802787][T17846] batman_adv: batadv0: Adding interface: batadv_slave_1
[  447.823867][T17846] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  447.870857][T18116] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3177'.
[  447.929610][T17846] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  447.956480][T18119] netlink: 164 bytes leftover after parsing attributes in process `syz.3.3178'.
[  447.976074][T18114] nbd: must specify a device to reconfigure
[  447.986965][T18118] netlink: 164 bytes leftover after parsing attributes in process `syz.3.3178'.
[  447.987079][T18119] netlink: 'syz.3.3178': attribute type 13 has an invalid length.
[  448.024737][T18119] netlink: 'syz.3.3178': attribute type 17 has an invalid length.
[  448.047636][T17846] hsr_slave_0: entered promiscuous mode
[  448.057924][T18118] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3178'.
[  448.075546][T17846] hsr_slave_1: entered promiscuous mode
[  448.084089][T17846] debugfs: 'hsr0' already exists in 'hsr'
[  448.098564][T17846] Cannot create hsr debugfs directory
[  448.307482][T18119] bond1: left promiscuous mode
[  448.337723][T18119] 8021q: adding VLAN 0 to HW filter on device bond0
[  448.465705][ T9191] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  448.678784][ T8867] smbdirect: ib_dev[syú2] removed
[  448.718748][ T6450] ªªªªªA speed is unknown, defaulting to 1000
[  448.725186][ T6450] syú2: Port: 1 Link DOWN
[  448.862500][ T8845] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  448.871665][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  448.999833][T18131] veth1_vlan: entered allmulticast mode
[  449.343450][  T985] IPVS: stop unused estimator thread 0...
[  449.504834][ T1018] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  449.538334][ T9191] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  450.145778][   T68] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  450.154378][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  450.223741][T18169] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3188'.
[  450.423428][T18168] lo speed is unknown, defaulting to 1000
[  450.559752][ T6456] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  450.590085][T18185] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3190'.
[  450.653476][T18188] netlink: 204 bytes leftover after parsing attributes in process `syz.3.3192'.
[  450.713117][T18188] netlink: 84 bytes leftover after parsing attributes in process `syz.3.3192'.
[  450.762138][T18191] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.3192'.
[  450.952818][T18193] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3193'.
[  451.154175][ T8867] ip6_tunnel: syztnl1 xmit: Local address not yet configured!
[  451.406804][T18206] netlink: 'syz.2.3194': attribute type 1 has an invalid length.
[  451.763418][ T9193] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  451.968313][T18206] 8021q: adding VLAN 0 to HW filter on device bond18
[  452.012839][T18210] vlan0: entered allmulticast mode
[  452.040194][T18210] bond18: entered allmulticast mode
[  452.070856][T18213] bond18: (slave geneve4): making interface the new active one
[  452.078529][T18213] geneve4: entered allmulticast mode
[  452.087694][T18213] bond18: (slave geneve4): Enslaving as an active interface with an up link
[  452.098855][  T985] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  452.133431][  T985] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  452.175959][  T985] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  452.271828][T18229] netlink: 'syz.3.3196': attribute type 1 has an invalid length.
[  452.284001][T18234] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3198'.
[  452.294367][T18229] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR
[  452.295470][  T985] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  452.606711][T17846] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  452.631331][T17846] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  452.655590][T17846] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  452.724974][T17846] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  452.755582][T17846] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  452.795429][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  452.816657][T17846] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  452.830263][T18262] rdma_rxe: rxe_newlink: failed to add lo
[  452.856630][T17846] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  452.905412][T17846] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  453.110010][ T5639] Bluetooth: hci3: command 0x0405 tx timeout
[  453.426651][T18291] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3205'.
[  453.442618][T17846] 8021q: adding VLAN 0 to HW filter on device bond0
[  453.572572][T18298] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3205'.
[  453.614667][T17846] 8021q: adding VLAN 0 to HW filter on device team0
[  453.654117][  T985] bridge0: port 1(bridge_slave_0) entered blocking state
[  453.661312][  T985] bridge0: port 1(bridge_slave_0) entered forwarding state
[  453.723640][ T1018] bridge0: port 2(bridge_slave_1) entered blocking state
[  453.730843][ T1018] bridge0: port 2(bridge_slave_1) entered forwarding state
[  453.838647][ T6456] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  454.238594][T18315] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3210'.
[  454.384130][T18315] bond1: option miimon: invalid value (18446744073709551607)
[  454.393045][T18315] bond1: option miimon: allowed values 0 - 2147483647
[  454.408227][T18315] bond1 (unregistering): Released all slaves
[  454.443361][T18323] syzkaller0: entered promiscuous mode
[  454.455688][T18323] syzkaller0: entered allmulticast mode
[  454.506764][ T5639] block nbd3: Receive control failed (result -32)
[  454.621878][ T8844] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  454.630308][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  454.639366][   T68] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  454.885389][ T6456] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  455.266755][    C0] ip6_tunnel: syztnl1 xmit: Local address not yet configured!
[  455.333793][T17846] 8021q: adding VLAN 0 to HW filter on device batadv0
[  455.492996][T18367] lo: left promiscuous mode
[  455.522585][T18367] tunl0: left promiscuous mode
[  455.550126][T18367] gre0: left promiscuous mode
[  455.604225][T18367] gretap0: left promiscuous mode
[  455.635508][T18367] erspan0: left promiscuous mode
[  455.693952][T18367] ip_vti0: left promiscuous mode
[  455.723042][T18367] ip6_vti0: left promiscuous mode
[  455.763702][T18367] sit0: left promiscuous mode
[  455.793819][T18367] ip6tnl0: left promiscuous mode
[  455.818521][T18367] ip6gre0: left promiscuous mode
[  455.840213][T18367] syz_tun: left promiscuous mode
[  455.893860][T18367] ip6gretap0: left promiscuous mode
[  455.904769][ T1018] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  455.913147][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  455.929154][ T6456] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  455.998796][T18367] vcan0: left promiscuous mode
[  456.011916][T18367] dummy0: left promiscuous mode
[  456.022782][T18367] nlmon0: left promiscuous mode
[  456.044667][T18367] veth0: left promiscuous mode
[  456.074589][T18367] veth1: left promiscuous mode
[  456.108227][T18367] wg0: left promiscuous mode
[  456.134858][T18367] wg1: left promiscuous mode
[  456.189154][T18367] wg2: left promiscuous mode
[  456.224891][T18367] veth0_to_bridge: left promiscuous mode
[  456.273020][T18367] bridge_slave_0: left promiscuous mode
[  456.316310][T18367] veth1_to_bridge: left promiscuous mode
[  456.341760][T18367] bridge_slave_1: left promiscuous mode
[  456.377868][T18367] : left promiscuous mode
[  456.404782][T18367] veth1_to_bond: left promiscuous mode
[  456.442228][T18367] bond_slave_1: left promiscuous mode
[  456.473059][T18367] veth0_to_team: left promiscuous mode
[  456.519936][T18367] team_slave_0: left promiscuous mode
[  456.555296][T18367] veth1_to_team: left promiscuous mode
[  456.600248][T18367] team_slave_1: left promiscuous mode
[  456.618989][T18367] veth1_to_batadv: left promiscuous mode
[  456.637357][T18367] batadv_slave_1: left promiscuous mode
[  456.650454][T18367] xfrm0: left promiscuous mode
[  456.669476][T18367] veth0_to_hsr: left promiscuous mode
[  456.688428][T18367] hsr0: left promiscuous mode
[  456.712375][T18367] veth1_macvtap: left promiscuous mode
[  456.740622][T18367] veth0_macvtap: left promiscuous mode
[  456.757213][T18367] veth0_macvtap: entered promiscuous mode
[  456.773467][T18367] macvtap0: left promiscuous mode
[  456.794087][T18367] veth1_macvtap: entered promiscuous mode
[  456.809504][T18367] macsec0: left promiscuous mode
[  456.815910][T18367] geneve0: left promiscuous mode
[  456.823376][T18367] geneve1: left promiscuous mode
[  456.832111][T18367] mac80211_hwsim hwsim6 wlan0: left promiscuous mode
[  456.842371][T18367] mac80211_hwsim hwsim8 wlan1: left promiscuous mode
[  456.852052][T18367] bond1: left promiscuous mode
[  456.857198][T18367] 8021q: adding VLAN 0 to HW filter on device bond1
[  456.865686][T18367] vxcan2: left promiscuous mode
[  456.872123][T18367] vxcan3: left promiscuous mode
[  456.877869][T18367] veth1_to_hsr.0: left promiscuous mode
[  456.883879][T18367] veth1_to_hsr: left promiscuous mode
[  456.890900][T18367] @: left promiscuous mode
[  456.897007][T18367] bond2: left promiscuous mode
[  456.902426][T18367] 8021q: adding VLAN 0 to HW filter on device bond2
[  456.910536][T18367] vlan0002: left promiscuous mode
[  456.915685][T18367] bond_slave_0: left promiscuous mode
[  456.924063][T18367] mac80211_hwsim hwsim16 wlan2: left promiscuous mode
[  456.932727][T18367] syztnl2: left promiscuous mode
[  456.939173][T18367] bond3: left promiscuous mode
[  456.939812][ T9191] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  456.944986][T18367] 8021q: adding VLAN 0 to HW filter on device bond3
[  456.964036][T18367] netdevsim netdevsim2 eth0: left promiscuous mode
[  456.973447][T18367] 8021q: adding VLAN 0 to HW filter on device eth0
[  456.982852][T18367] netdevsim netdevsim2 eth1: left promiscuous mode
[  456.990761][T18367] 8021q: adding VLAN 0 to HW filter on device eth1
[  457.000128][T18367] netdevsim netdevsim2 eth2: left promiscuous mode
[  457.007889][T18367] 8021q: adding VLAN 0 to HW filter on device eth2
[  457.016522][T18367] netdevsim netdevsim2 eth3: left promiscuous mode
[  457.027033][T18367] 8021q: adding VLAN 0 to HW filter on device eth3
[  457.036976][T18367] bond4: left promiscuous mode
[  457.043225][T18367] 8021q: adding VLAN 0 to HW filter on device bond4
[  457.052487][T18367] bridge1: left promiscuous mode
[  457.058462][T18367] veth0_to_bridge: entered promiscuous mode
[  457.066164][T18367] macvtap1: left promiscuous mode
[  457.077826][T18367] bond5: left promiscuous mode
[  457.085040][T18367] 8021q: adding VLAN 0 to HW filter on device bond5
[  457.092940][T18367] bond6: left promiscuous mode
[  457.098165][T18367] 8021q: adding VLAN 0 to HW filter on device bond6
[  457.107708][T18367] veth2: left promiscuous mode
[  457.114713][T18367] veth3: left promiscuous mode
[  457.121074][T18367] bridge2: left promiscuous mode
[  457.128196][T18367] bond7: left promiscuous mode
[  457.134840][T18367] 8021q: adding VLAN 0 to HW filter on device bond7
[  457.143989][T18367] bond8: left promiscuous mode
[  457.154074][T18367] 8021q: adding VLAN 0 to HW filter on device bond8
[  457.161327][T18367] gretap1: left promiscuous mode
[  457.167415][T18367] >: left promiscuous mode
[  457.171989][T18367] A link change request failed with some changes committed already. Interface > may have been left with an inconsistent configuration, please check.
[  457.219061][   T68] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  457.238163][   T68] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  457.263845][   T68] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  457.334423][T17846] veth0_vlan: entered promiscuous mode
[  457.377568][   T68] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  457.418902][T18415] xt_recent: hitcount (33554435) is larger than allowed maximum (65535)
[  457.435110][T17846] veth1_vlan: entered promiscuous mode
[  457.548978][T18419] lo: left allmulticast mode
[  457.575218][T18419] tunl0: left allmulticast mode
[  457.599119][T18419] gre0: left allmulticast mode
[  457.633936][T18419] gretap0: left allmulticast mode
[  457.664660][T18419] erspan0: left allmulticast mode
[  457.690346][T18419] ip_vti0: left allmulticast mode
[  457.712537][T18419] ip6_vti0: left allmulticast mode
[  457.741940][T18419] sit0: left allmulticast mode
[  457.770799][T18419] ip6tnl0: left allmulticast mode
[  457.794043][T18419] ip6gre0: left allmulticast mode
[  457.831067][T18419] ip6gretap0: left allmulticast mode
[  457.848909][T18419] bridge0: left allmulticast mode
[  457.867307][T18419] vcan0: left allmulticast mode
[  457.874572][T18419] dummy0: left allmulticast mode
[  457.893923][T18419] nlmon0: left allmulticast mode
[  457.912578][T18419] veth0: left allmulticast mode
[  457.933297][T18419] veth1: left allmulticast mode
[  457.953467][T18419] wg0: left allmulticast mode
[  457.971126][T18419] wg1: left allmulticast mode
[  458.001157][ T6456] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  458.033501][T18419] wg2: left allmulticast mode
[  458.054567][T18419] bridge_slave_0: left allmulticast mode
[  458.100334][T18419] veth1_to_bridge: left allmulticast mode
[  458.120753][T18436] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3228'.
[  458.133872][T18419] bridge_slave_1: left allmulticast mode
[  458.166500][T18419] : left allmulticast mode
[  458.200224][T18419] veth1_to_bond: left allmulticast mode
[  458.350055][T18419] bond_slave_1: left allmulticast mode
[  458.378462][T18419] veth0_to_team: left allmulticast mode
[  458.394892][T18419] team_slave_0: left allmulticast mode
[  458.404216][T18419] veth1_to_team: left allmulticast mode
[  458.414920][T18419] team_slave_1: left allmulticast mode
[  458.435815][T18419] veth1_to_batadv: left allmulticast mode
[  458.452889][T18419] batadv_slave_1: left allmulticast mode
[  458.486449][T18419] xfrm0: left allmulticast mode
[  458.503475][T18419] veth0_to_hsr: left allmulticast mode
[  458.549677][T18419] hsr0: left allmulticast mode
[  458.554489][T18419] hsr_slave_0: left allmulticast mode
[  458.560753][T18419] hsr_slave_1: left allmulticast mode
[  458.581172][T18419] veth0_macvtap: left allmulticast mode
[  458.598427][T18419] macvtap0: left allmulticast mode
[  458.612873][T18419] veth1_macvtap: left allmulticast mode
[  458.618450][T18419] macsec0: left allmulticast mode
[  458.656674][T18419] geneve0: left allmulticast mode
[  458.664847][T18419] geneve1: left allmulticast mode
[  458.688114][T18419] mac80211_hwsim hwsim6 wlan0: left allmulticast mode
[  458.695718][T18446] FAULT_INJECTION: forcing a failure.
[  458.695718][T18446] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  458.695761][T18446] CPU: 0 UID: 0 PID: 18446 Comm: syz.3.3230 Not tainted syzkaller #0 PREEMPT(full) 
[  458.695780][T18446] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  458.695790][T18446] Call Trace:
[  458.695797][T18446]  <TASK>
[  458.695804][T18446]  dump_stack_lvl+0xe8/0x150
[  458.695829][T18446]  should_fail_ex+0x412/0x560
[  458.695858][T18446]  _copy_to_user+0x31/0xb0
[  458.695886][T18446]  simple_read_from_buffer+0xe1/0x170
[  458.695913][T18446]  proc_fail_nth_read+0x1bb/0x230
[  458.695938][T18446]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  458.695961][T18446]  ? rw_verify_area+0x2a6/0x4d0
[  458.695983][T18446]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  458.696006][T18446]  vfs_read+0x20c/0xa70
[  458.696034][T18446]  ? __pfx___mutex_lock+0x10/0x10
[  458.696053][T18446]  ? __pfx_vfs_read+0x10/0x10
[  458.696076][T18446]  ? __fget_files+0x2a/0x420
[  458.696100][T18446]  ? __fget_files+0x3a0/0x420
[  458.696119][T18446]  ? __fget_files+0x2a/0x420
[  458.696146][T18446]  ksys_read+0x150/0x270
[  458.696170][T18446]  ? __pfx_ksys_read+0x10/0x10
[  458.696201][T18446]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  458.696220][T18446]  do_syscall_64+0x15f/0xf80
[  458.696235][T18446]  ? trace_irq_disable+0x3b/0x140
[  458.696259][T18446]  ? clear_bhb_loop+0x40/0x90
[  458.696281][T18446]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  458.696298][T18446] RIP: 0033:0x7f7fb495d68e
[  458.696314][T18446] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  458.696329][T18446] RSP: 002b:00007f7fb58cffe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  458.696346][T18446] RAX: ffffffffffffffda RBX: 00007f7fb58d06c0 RCX: 00007f7fb495d68e
[  458.696358][T18446] RDX: 000000000000000f RSI: 00007f7fb58d00a0 RDI: 0000000000000004
[  458.696369][T18446] RBP: 00007f7fb58d0090 R08: 0000000000000000 R09: 0000000000000000
[  458.696380][T18446] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  458.696390][T18446] R13: 00007f7fb4c16038 R14: 00007f7fb4c15fa0 R15: 00007ffcfbd12a48
[  458.696419][T18446]  </TASK>
[  458.934780][T18419] mac80211_hwsim hwsim8 wlan1: left allmulticast mode
[  458.977830][T18419] bond1: left allmulticast mode
[  458.984146][T18419] vxcan2: left allmulticast mode
[  458.990772][T18419] vxcan3: left allmulticast mode
[  458.996486][T18419] veth1_to_hsr.0: left allmulticast mode
[  459.014702][T18419] veth1_to_hsr: left allmulticast mode
[  459.033361][T18419] @: left allmulticast mode
[  459.059777][T18419] bond2: left allmulticast mode
[  459.077281][T18419] vlan0002: left allmulticast mode
[  459.093801][T18419] bond_slave_0: left allmulticast mode
[  459.130385][T18419] mac80211_hwsim hwsim16 wlan2: left allmulticast mode
[  459.145492][T18419] syztnl2: left allmulticast mode
[  459.166133][T18419] bond3: left allmulticast mode
[  459.183420][T18419] netdevsim netdevsim2 eth0: left allmulticast mode
[  459.203713][T18419] netdevsim netdevsim2 eth1: left allmulticast mode
[  459.222464][T18419] netdevsim netdevsim2 eth2: left allmulticast mode
[  459.239602][T18419] netdevsim netdevsim2 eth3: left allmulticast mode
[  459.255580][T18419] bond4: left allmulticast mode
[  459.274162][T18419] bridge1: left allmulticast mode
[  459.284172][T18419] veth0_to_bridge: left allmulticast mode
[  459.301808][T18419] macvtap1: left allmulticast mode
[  459.313099][T18419] bond5: left allmulticast mode
[  459.336251][T18419] bond6: left allmulticast mode
[  459.342668][T18419] veth2: left allmulticast mode
[  459.353370][T18419] veth3: left allmulticast mode
[  459.371394][T18419] bridge2: left allmulticast mode
[  459.387372][T18419] bond7: left allmulticast mode
[  459.396498][T18419] bond8: left allmulticast mode
[  459.412753][T18419] gretap1: left allmulticast mode
[  459.422018][T18419] >: left allmulticast mode
[  459.432134][T18419] bridge3: left promiscuous mode
[  459.443188][T18419] bridge3: left allmulticast mode
[  459.453494][T18419] ip6erspan0: left promiscuous mode
[  459.468791][T18419] ip6erspan0: left allmulticast mode
[  459.480051][T18419] gre1: left promiscuous mode
[  459.490437][T18419] gre1: left allmulticast mode
[  459.496613][T18419] ip6tnl1: left promiscuous mode
[  459.501905][T18419] ip6tnl1: left allmulticast mode
[  459.507271][T18419] mac80211_hwsim hwsim22 wlan3: left promiscuous mode
[  459.514215][T18419] mac80211_hwsim hwsim22 wlan3: left allmulticast mode
[  459.521451][T18419] geneve2: left promiscuous mode
[  459.526552][T18419] geneve2: left allmulticast mode
[  459.532170][T18419] veth4: left promiscuous mode
[  459.537077][T18419] veth4: left allmulticast mode
[  459.544329][T18419] veth5: left promiscuous mode
[  459.549286][T18419] veth5: left allmulticast mode
[  459.554508][T18419] hsr1: left promiscuous mode
[  459.559304][T18419] hsr1: left allmulticast mode
[  459.564144][T18419] bond0: left allmulticast mode
[  459.569130][T18419] batadv0: left allmulticast mode
[  459.574480][T18419] macvlan0: left promiscuous mode
[  459.579716][T18419] macvlan0: left allmulticast mode
[  459.585053][T18419] macvlan1: left promiscuous mode
[  459.590263][T18419] macvlan1: left allmulticast mode
[  459.595636][T18419] bond9: left promiscuous mode
[  459.600663][T18419] bond9: left allmulticast mode
[  459.605695][T18419] veth6: left promiscuous mode
[  459.610552][T18419] veth6: left allmulticast mode
[  459.615960][T18419] veth7: left promiscuous mode
[  459.621519][T18419] veth7: left allmulticast mode
[  459.626599][T18419] erspan1: left promiscuous mode
[  459.631685][T18419] erspan1: left allmulticast mode
[  459.636928][T18419] bond10: left promiscuous mode
[  459.641881][T18419] bond10: left allmulticast mode
[  459.647011][T18419] veth8: left promiscuous mode
[  459.651876][T18419] veth8: left allmulticast mode
[  459.656899][T18419] veth9: left promiscuous mode
[  459.662036][T18419] veth9: left allmulticast mode
[  459.667927][T18419] veth10: left promiscuous mode
[  459.672899][T18419] veth10: left allmulticast mode
[  459.678026][T18419] veth11: left promiscuous mode
[  459.683190][T18419] veth11: left allmulticast mode
[  459.688301][T18419] bridge4: left promiscuous mode
[  459.693380][T18419] bridge4: left allmulticast mode
[  459.699094][T18419] bridge5: left promiscuous mode
[  459.705291][T18419] bridge5: left allmulticast mode
[  459.710788][T18419] bond11: left promiscuous mode
[  459.716501][T18419] bond11: left allmulticast mode
[  459.721786][T18419] veth12: left promiscuous mode
[  459.726732][T18419] veth12: left allmulticast mode
[  459.732976][T18419] veth13: left promiscuous mode
[  459.737911][T18419] veth13: left allmulticast mode
[  459.747891][T18419] bond12: left promiscuous mode
[  459.754762][T18419] bond12: left allmulticast mode
[  459.760064][T18419] dvmrp0: left promiscuous mode
[  459.765296][T18419] ip6gre1: left promiscuous mode
[  459.771270][T18419] ip6gre1: left allmulticast mode
[  459.799129][T18419] geneve3: left promiscuous mode
[  459.806671][T18419] bond14: left promiscuous mode
[  459.818411][T18419] vti0: left promiscuous mode
[  459.861691][T18419] bond16: left promiscuous mode
[  459.870995][T18419] bridge10: left promiscuous mode
[  459.887832][T18419] bond16: left allmulticast mode
[  459.894021][T18419] bridge10: left allmulticast mode
[  459.918644][T18419] bridge11: left promiscuous mode
[  459.941681][T18419] vlan0: left allmulticast mode
[  459.956837][T18419] bond18: left allmulticast mode
[  459.963548][T18419] geneve4: left allmulticast mode
[  460.018647][T18424] syzkaller0: entered promiscuous mode
[  460.029364][T18424] syzkaller0: entered allmulticast mode
[  460.037428][T18429] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4
[  460.054304][ T8841] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  460.059463][T18429] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4
[  460.081930][ T8841] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  460.110791][T18429] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  460.122009][ T6440] net_ratelimit: 1 callbacks suppressed
[  460.122023][ T6440] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  460.189400][ T8841] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  460.208036][ T8841] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  460.242618][T17846] veth0_macvtap: entered promiscuous mode
[  460.256741][ T8841] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  460.287862][ T8841] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  460.327433][ T8841] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  460.358554][ T8841] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  460.381254][ T8867] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  460.389922][T18470] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3235'.
[  460.390830][ T8845] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  460.404820][T17846] veth1_macvtap: entered promiscuous mode
[  460.407306][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  460.469097][T17846] batman_adv: batadv0: Interface activated: batadv_slave_0
[  460.512661][T17846] batman_adv: batadv0: Interface activated: batadv_slave_1
[  460.552328][ T8867] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  460.578052][ T8867] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  460.599021][ T8867] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  460.626001][ T8867] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  460.733356][T18475] netlink: 'syz.1.3236': attribute type 4 has an invalid length.
[  460.775729][T18475] netlink: 17 bytes leftover after parsing attributes in process `syz.1.3236'.
[  460.833307][ T8841] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  460.845189][ T8841] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  460.908792][ T8841] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  460.922707][ T8841] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  461.074241][T18486] netlink: 'syz.1.3239': attribute type 1 has an invalid length.
[  461.180434][ T6442] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  461.188862][T18486] bond2: entered promiscuous mode
[  461.194811][T18486] 8021q: adding VLAN 0 to HW filter on device bond2
[  461.233518][T18494] 8021q: adding VLAN 0 to HW filter on device bond2
[  461.275552][T18494] bond2: (slave ip6gre1): The slave device specified does not support setting the MAC address
[  461.297230][T18494] bond2: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode
[  461.315442][T18494] bond2: (slave ip6gre1): making interface the new active one
[  461.324831][T18494] ip6gre1: entered promiscuous mode
[  461.332120][T18494] bond2: (slave ip6gre1): Enslaving as an active interface with an up link
[  461.354851][T18495] bridge0: port 1(vlan1) entered blocking state
[  461.369992][T18495] bridge0: port 1(vlan1) entered disabled state
[  461.378277][T18495] vlan1: entered allmulticast mode
[  461.391257][T18495] geneve0: entered allmulticast mode
[  461.409143][T18495] vlan1: entered promiscuous mode
[  461.421097][T18495] geneve0: entered promiscuous mode
[  461.661827][ T8841] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  461.670465][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  461.682265][T18504] syzkaller1: entered promiscuous mode
[  461.687783][T18504] syzkaller1: entered allmulticast mode
[  461.753237][T18504] netlink: 51 bytes leftover after parsing attributes in process `syz.4.3245'.
[  461.803766][T18504] ªªªªªªz0: renamed from wg2 (while UP)
[  461.860670][T18507] syzkaller0: entered promiscuous mode
[  461.878735][T18507] syzkaller0: entered allmulticast mode
[  461.881534][ T5626] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  461.897134][ T5626] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  461.905043][ T5626] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  461.914532][ T5626] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  461.922568][ T5626] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  461.942889][T18509] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3246'.
[  462.241394][ T6442] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  462.286229][ T5627] syz_tun (unregistering): left allmulticast mode
[  462.428206][T18518] 8021q: adding VLAN 0 to HW filter on device team0
[  462.473992][T18518] 8021q: adding VLAN 0 to HW filter on device batadv0
[  462.474165][T18528] netlink: 'syz.0.3249': attribute type 1 has an invalid length.
[  462.567065][T18518] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  462.663151][T18536] netlink: 256 bytes leftover after parsing attributes in process `syz.4.3251'.
[  462.688215][T18536] netlink: 72 bytes leftover after parsing attributes in process `syz.4.3251'.
[  462.800713][T18540] netlink: 7064 bytes leftover after parsing attributes in process `syz.3.3252'.
[  462.800877][T18536] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3251'.
[  462.819729][T18540] openvswitch: netlink: Missing key (keys=40, expected=2000)
[  462.854297][T18536] netlink: 'syz.4.3251': attribute type 3 has an invalid length.
[  462.888777][T18536] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3251'.
[  462.949096][T18510] lo speed is unknown, defaulting to 1000
[  463.274066][ T5732] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  463.392379][T18558] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3259'.
[  463.413946][T18558] netlink: 108 bytes leftover after parsing attributes in process `syz.4.3259'.
[  463.445043][T18558] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3259'.
[  463.579467][    C0] ip6_tunnel: syztnl1 xmit: Local address not yet configured!
[  463.712973][T18568] bond0: entered promiscuous mode
[  463.746264][T18568] batadv0: entered promiscuous mode
[  463.773333][T18568] debugfs: 'hsr1' already exists in 'hsr'
[  463.788817][T18568] Cannot create hsr debugfs directory
[  463.794654][T18568] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network
[  463.800427][T18573] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3262'.
[  463.805923][T18568] 8021q: adding VLAN 0 to HW filter on device hsr1
[  463.823650][T18568] bond0: left promiscuous mode
[  463.829957][T18568] batadv0: left promiscuous mode
[  463.906510][T18576] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3263'.
[  463.956167][T18573] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3262'.
[  464.059827][ T5639] Bluetooth: hci2: command tx timeout
[  464.241657][T18592] netlink: 'syz.0.3265': attribute type 6 has an invalid length.
[  464.338627][T18510] bridge0: port 1(bridge_slave_0) entered blocking state
[  464.360578][T18510] bridge0: port 1(bridge_slave_0) entered disabled state
[  464.378997][T18510] bridge_slave_0: entered allmulticast mode
[  464.439759][T18510] bridge_slave_0: entered promiscuous mode
[  464.462733][T18591] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3267'.
[  464.488755][T18510] bridge0: port 2(bridge_slave_1) entered blocking state
[  464.508531][T18510] bridge0: port 2(bridge_slave_1) entered disabled state
[  464.520270][T18510] bridge_slave_1: entered allmulticast mode
[  464.537147][T18510] bridge_slave_1: entered promiscuous mode
[  464.646706][T18510] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  464.675277][T18510] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  464.753839][T18510] team0: Port device team_slave_0 added
[  464.771144][T18510] team0: Port device team_slave_1 added
[  464.820175][T18611] sctp: [Deprecated]: syz.4.3271 (pid 18611) Use of int in maxseg socket option.
[  464.820175][T18611] Use struct sctp_assoc_value instead
[  464.898199][T18510] batman_adv: batadv0: Adding interface: batadv_slave_0
[  464.916954][T18510] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  464.962668][T18510] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  464.976170][T18510] batman_adv: batadv0: Adding interface: batadv_slave_1
[  464.983195][T18510] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  465.030570][T18510] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  465.248686][T18510] hsr_slave_0: entered promiscuous mode
[  465.272064][T18510] hsr_slave_1: entered promiscuous mode
[  465.288295][T18510] debugfs: 'hsr0' already exists in 'hsr'
[  465.304422][T18510] Cannot create hsr debugfs directory
[  465.307580][T18631] netlink: 76 bytes leftover after parsing attributes in process `syz.1.3275'.
[  465.343280][ T5732] net_ratelimit: 1 callbacks suppressed
[  465.343296][ T5732] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  465.377825][T18626] vcan1: entered promiscuous mode
[  465.718427][T18635] Bluetooth: MGMT ver 1.23
[  465.731089][T18649] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3282'.
[  465.779490][T18635] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  465.880599][T18645] lo speed is unknown, defaulting to 1000
[  466.089637][T18668] netlink: 'syz.1.3285': attribute type 1 has an invalid length.
[  466.108149][T18667] netlink: 'syz.1.3285': attribute type 1 has an invalid length.
[  466.142842][ T5626] Bluetooth: hci2: command tx timeout
[  466.145724][ T8844] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  466.156376][ T8841] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  466.164480][ T8841] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  466.294299][T18676] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3287'.
[  466.383186][ T5732] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  466.653293][T18679] gretap0: entered promiscuous mode
[  466.678046][T18679] batadv_slave_0: entered promiscuous mode
[  466.684731][T18679] batadv_slave_0: left promiscuous mode
[  466.698870][T18679] gretap0: left promiscuous mode
[  467.022600][T18697] syzkaller1: entered promiscuous mode
[  467.040275][T18697] syzkaller1: entered allmulticast mode
[  467.083494][T18699] xt_cgroup: invalid path, errno=-2
[  467.420748][  T985] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  467.429119][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  467.440415][ T6442] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  467.868681][T18710] geneve1: entered promiscuous mode
[  468.052133][T18510] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  468.069354][T18510] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  468.078122][T18510] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  468.091192][T18510] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  468.105365][T18510] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  468.134491][T18510] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  468.155300][T18510] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  468.218866][T18510] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  468.229923][ T5626] Bluetooth: hci2: command tx timeout
[  468.466640][  T808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  468.488430][T18728] __nla_validate_parse: 6 callbacks suppressed
[  468.488446][T18728] netlink: 152 bytes leftover after parsing attributes in process `syz.0.3302'.
[  468.510247][T18510] 8021q: adding VLAN 0 to HW filter on device bond0
[  468.527595][T18728] netlink: 136 bytes leftover after parsing attributes in process `syz.0.3302'.
[  468.547215][T18728] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check.
[  468.848403][T18510] 8021q: adding VLAN 0 to HW filter on device team0
[  468.873708][   T68] bridge0: port 1(bridge_slave_0) entered blocking state
[  468.880915][   T68] bridge0: port 1(bridge_slave_0) entered forwarding state
[  468.975875][ T8844] bridge0: port 2(bridge_slave_1) entered blocking state
[  468.983113][ T8844] bridge0: port 2(bridge_slave_1) entered forwarding state
[  469.052136][T18735] syzkaller1: entered allmulticast mode
[  469.109095][T18745] FAULT_INJECTION: forcing a failure.
[  469.109095][T18745] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  469.132093][T18745] CPU: 1 UID: 0 PID: 18745 Comm: syz.4.3308 Not tainted syzkaller #0 PREEMPT(full) 
[  469.132119][T18745] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  469.132130][T18745] Call Trace:
[  469.132137][T18745]  <TASK>
[  469.132144][T18745]  dump_stack_lvl+0xe8/0x150
[  469.132172][T18745]  should_fail_ex+0x412/0x560
[  469.132201][T18745]  _copy_from_user+0x2d/0xb0
[  469.132227][T18745]  kstrtouint_from_user+0xd6/0x180
[  469.132253][T18745]  ? __pfx_kstrtouint_from_user+0x10/0x10
[  469.132292][T18745]  proc_fail_nth_write+0x8e/0x210
[  469.132316][T18745]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  469.132344][T18745]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  469.132369][T18745]  vfs_write+0x29a/0xb90
[  469.132402][T18745]  ? __pfx_vfs_write+0x10/0x10
[  469.132428][T18745]  ? __fget_files+0x2a/0x420
[  469.132453][T18745]  ? __fget_files+0x3a0/0x420
[  469.132472][T18745]  ? __fget_files+0x2a/0x420
[  469.132501][T18745]  ksys_write+0x150/0x270
[  469.132527][T18745]  ? __pfx_ksys_write+0x10/0x10
[  469.132549][T18745]  ? fput+0xa0/0xd0
[  469.132576][T18745]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  469.132596][T18745]  do_syscall_64+0x15f/0xf80
[  469.132613][T18745]  ? trace_irq_disable+0x3b/0x140
[  469.132638][T18745]  ? clear_bhb_loop+0x40/0x90
[  469.132660][T18745]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  469.132677][T18745] RIP: 0033:0x7f848f95d68e
[  469.132694][T18745] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  469.132708][T18745] RSP: 002b:00007f8490810fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  469.132728][T18745] RAX: ffffffffffffffda RBX: 00007f84908116c0 RCX: 00007f848f95d68e
[  469.132745][T18745] RDX: 0000000000000001 RSI: 00007f84908110a0 RDI: 0000000000000004
[  469.132755][T18745] RBP: 00007f8490811090 R08: 0000000000000000 R09: 0000000000000000
[  469.132766][T18745] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  469.132782][T18745] R13: 00007f848fc16038 R14: 00007f848fc15fa0 R15: 00007ffd8dc23ba8
[  469.132812][T18745]  </TASK>
[  469.353246][T18510] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  469.365172][T18510] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  469.596013][T18751] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3309'.
[  469.701422][T18749] Cannot find del_set index 0 as target
[  470.071994][T18777] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3316'.
[  470.291730][T18781] bridge_slave_0: left allmulticast mode
[  470.300009][ T5626] Bluetooth: hci2: command tx timeout
[  470.307849][T18781] bridge_slave_0: left promiscuous mode
[  470.316329][T18781] bridge0: port 1(bridge_slave_0) entered disabled state
[  470.336541][T18781] bridge_slave_1: left allmulticast mode
[  470.356585][T18781] bridge_slave_1: left promiscuous mode
[  470.363953][T18781] bridge0: port 2(bridge_slave_1) entered disabled state
[  470.399131][T18781] bond0: (slave bond_slave_0): Releasing backup interface
[  470.426436][T18781] bond0: (slave bond_slave_1): Releasing backup interface
[  470.477165][T18781] team0: Port device team_slave_0 removed
[  470.519086][T18781] team0: Port device team_slave_1 removed
[  470.527387][T18781] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  470.541294][T18781] batman_adv: batadv0: Removing interface: batadv_slave_0
[  470.555600][T18781] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  470.555600][ T5732] net_ratelimit: 1 callbacks suppressed
[  470.555615][ T5732] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  470.568202][T18781] batman_adv: batadv0: Removing interface: batadv_slave_1
[  470.601905][T18781] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  470.731558][T18510] 8021q: adding VLAN 0 to HW filter on device batadv0
[  470.869179][T18510] veth0_vlan: entered promiscuous mode
[  470.911884][T18510] veth1_vlan: entered promiscuous mode
[  470.993188][T18510] veth0_macvtap: entered promiscuous mode
[  471.032123][T18510] veth1_macvtap: entered promiscuous mode
[  471.094593][T18510] batman_adv: batadv0: Interface activated: batadv_slave_0
[  471.133754][T18811] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3324'.
[  471.147844][T18510] batman_adv: batadv0: Interface activated: batadv_slave_1
[  471.180529][  T985] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  471.197486][   T68] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  471.224853][   T68] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  471.257616][   T68] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  471.291034][ T8867] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  471.462267][T18828] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3328'.
[  471.472454][T18827] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3328'.
[  471.494034][T18826] netlink: 277 bytes leftover after parsing attributes in process `syz.1.3327'.
[  471.554204][   T68] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  471.593944][   T68] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  471.603068][  T808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  471.679359][ T1018] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  471.698041][ T1018] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  471.900477][ T1018] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  471.908846][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  472.039627][T18849] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3335'.
[  472.065824][T18849] netlink: 'syz.2.3335': attribute type 1 has an invalid length.
[  472.090945][T18849] netlink: 'syz.2.3335': attribute type 6 has an invalid length.
[  472.136511][T18849] netlink: 'syz.2.3335': attribute type 3 has an invalid length.
[  472.159043][T18857] FAULT_INJECTION: forcing a failure.
[  472.159043][T18857] name failslab, interval 1, probability 0, space 0, times 0
[  472.173013][T18855] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3335'.
[  472.199514][T18857] CPU: 0 UID: 0 PID: 18857 Comm: syz.0.3337 Not tainted syzkaller #0 PREEMPT(full) 
[  472.199538][T18857] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  472.199548][T18857] Call Trace:
[  472.199556][T18857]  <TASK>
[  472.199564][T18857]  dump_stack_lvl+0xe8/0x150
[  472.199591][T18857]  should_fail_ex+0x412/0x560
[  472.199620][T18857]  should_failslab+0xa8/0x100
[  472.199645][T18857]  ? vm_area_alloc+0x24/0x140
[  472.199670][T18857]  kmem_cache_alloc_noprof+0x87/0x650
[  472.199692][T18857]  ? __pfx_vma_merge_new_range+0x10/0x10
[  472.199716][T18857]  vm_area_alloc+0x24/0x140
[  472.199750][T18857]  mmap_region+0x11c6/0x22a0
[  472.199779][T18857]  ? tomoyo_check_open_permission+0x38e/0x470
[  472.199808][T18857]  ? __pfx_mmap_region+0x10/0x10
[  472.199833][T18857]  ? __lock_acquire+0x6b5/0x2cf0
[  472.199938][T18857]  ? __pfx_arch_get_unmapped_area_topdown+0x10/0x10
[  472.199981][T18857]  ? cap_mmap_addr+0xaf/0x100
[  472.200001][T18857]  ? bpf_lsm_mmap_addr+0x9/0x50
[  472.200030][T18857]  ? shmem_mapping+0xd/0x50
[  472.200047][T18857]  ? memfd_check_seals_mmap+0x165/0x200
[  472.200073][T18857]  do_mmap+0xc39/0x10c0
[  472.200106][T18857]  ? __pfx_do_mmap+0x10/0x10
[  472.200124][T18857]  ? down_write_killable+0x180/0x240
[  472.200149][T18857]  ? __pfx_down_write_killable+0x10/0x10
[  472.200169][T18857]  ? apparmor_mmap_file+0x2da/0x3e0
[  472.200194][T18857]  vm_mmap_pgoff+0x2c9/0x4f0
[  472.200226][T18857]  ? __pfx_vm_mmap_pgoff+0x10/0x10
[  472.200249][T18857]  ? __fget_files+0x2a/0x420
[  472.200275][T18857]  ? __fget_files+0x3a0/0x420
[  472.200294][T18857]  ? __fget_files+0x2a/0x420
[  472.200317][T18857]  ksys_mmap_pgoff+0x51e/0x760
[  472.200340][T18857]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  472.200358][T18857]  do_syscall_64+0x15f/0xf80
[  472.200373][T18857]  ? trace_irq_disable+0x3b/0x140
[  472.200396][T18857]  ? clear_bhb_loop+0x40/0x90
[  472.200419][T18857]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  472.200436][T18857] RIP: 0033:0x7fcfc9f9ce59
[  472.200452][T18857] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  472.200466][T18857] RSP: 002b:00007fcfcade8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
[  472.200485][T18857] RAX: ffffffffffffffda RBX: 00007fcfca215fa0 RCX: 00007fcfc9f9ce59
[  472.200498][T18857] RDX: 0000000000000000 RSI: 0000000000004000 RDI: 0000200000071000
[  472.200509][T18857] RBP: 00007fcfcade8090 R08: 0000000000000004 R09: 0000000000000000
[  472.200520][T18857] R10: 0000000000000013 R11: 0000000000000246 R12: 0000000000000001
[  472.200530][T18857] R13: 00007fcfca216038 R14: 00007fcfca215fa0 R15: 00007ffeadc94288
[  472.200560][T18857]  </TASK>
[  472.628604][ T5732] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  473.087175][T18895] netlink: 'syz.1.3343': attribute type 3 has an invalid length.
[  473.106166][T18897] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2
[  473.120330][T18897] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2
[  473.127176][T18897] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2
[  473.237885][T18895] bond3: entered promiscuous mode
[  473.513607][T18918] FAULT_INJECTION: forcing a failure.
[  473.513607][T18918] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  473.538289][T18918] CPU: 0 UID: 0 PID: 18918 Comm: syz.4.3349 Not tainted syzkaller #0 PREEMPT(full) 
[  473.538315][T18918] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  473.538326][T18918] Call Trace:
[  473.538333][T18918]  <TASK>
[  473.538341][T18918]  dump_stack_lvl+0xe8/0x150
[  473.538368][T18918]  should_fail_ex+0x412/0x560
[  473.538406][T18918]  _copy_from_user+0x2d/0xb0
[  473.538432][T18918]  kstrtouint_from_user+0xd6/0x180
[  473.538459][T18918]  ? __pfx_kstrtouint_from_user+0x10/0x10
[  473.538499][T18918]  proc_fail_nth_write+0x8e/0x210
[  473.538523][T18918]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  473.538556][T18918]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  473.538581][T18918]  vfs_write+0x29a/0xb90
[  473.538616][T18918]  ? __pfx_vfs_write+0x10/0x10
[  473.538641][T18918]  ? __fget_files+0x2a/0x420
[  473.538666][T18918]  ? __fget_files+0x3a0/0x420
[  473.538685][T18918]  ? __fget_files+0x2a/0x420
[  473.538718][T18918]  ksys_write+0x150/0x270
[  473.538745][T18918]  ? __pfx_ksys_write+0x10/0x10
[  473.538778][T18918]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  473.538799][T18918]  do_syscall_64+0x15f/0xf80
[  473.538816][T18918]  ? trace_irq_disable+0x3b/0x140
[  473.538841][T18918]  ? clear_bhb_loop+0x40/0x90
[  473.538863][T18918]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  473.538881][T18918] RIP: 0033:0x7f848f95d68e
[  473.538899][T18918] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  473.538915][T18918] RSP: 002b:00007f8490810fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  473.538934][T18918] RAX: ffffffffffffffda RBX: 00007f84908116c0 RCX: 00007f848f95d68e
[  473.538947][T18918] RDX: 0000000000000001 RSI: 00007f84908110a0 RDI: 0000000000000007
[  473.538958][T18918] RBP: 00007f8490811090 R08: 0000000000000000 R09: 0000000000000000
[  473.538969][T18918] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  473.538979][T18918] R13: 00007f848fc16038 R14: 00007f848fc15fa0 R15: 00007ffd8dc23ba8
[  473.539011][T18918]  </TASK>
[  473.917131][T18924] __nla_validate_parse: 6 callbacks suppressed
[  473.917150][T18924] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3351'.
[  474.332937][T18928] syzkaller0: entered promiscuous mode
[  474.349571][T18928] syzkaller0: entered allmulticast mode
[  474.666574][T18944] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3358'.
[  474.679319][T18944] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3358'.
[  475.266823][T18970] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3364'.
[  475.290957][T18971] netlink: 'syz.0.3363': attribute type 1 has an invalid length.
[  475.556498][T18984] netlink: 34 bytes leftover after parsing attributes in process `syz.4.3367'.
[  475.613296][T18974] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address
[  475.626577][T18974] bond1: (slave vxcan3): Setting fail_over_mac to active for active-backup mode
[  475.639535][T18974] bond1: (slave vxcan3): making interface the new active one
[  475.647676][T18974] bond1: (slave vxcan3): Enslaving as an active interface with an up link
[  475.804663][T18996] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3370'.
[  475.901376][  T808] net_ratelimit: 2691 callbacks suppressed
[  475.901389][  T808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  476.939829][ T5732] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  477.660691][   T68] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  477.668988][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  477.979418][ T5732] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  478.077557][T18961] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  478.308249][T19008] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3374'.
[  478.336819][T19003] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3373'.
[  478.628099][T19031] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  478.835651][T19044] lo speed is unknown, defaulting to 1000
[  479.019456][ T5732] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  479.029719][T19059] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3384'.
[  479.450562][T19061] lo speed is unknown, defaulting to 1000
[  479.915827][T19081] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  479.960390][T19086] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3394'.
[  479.983078][T19086] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3394'.
[  480.004921][T19086] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  480.063908][ T5732] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  480.308033][  T808] IPVS: starting estimator thread 0...
[  480.383716][T19104] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3398'.
[  480.409576][T19106] IPVS: using max 25 ests per chain, 60000 per kthread
[  480.516083][ T3703] IPVS: starting estimator thread 0...
[  480.521780][T19120] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold
[  480.630498][T19121] IPVS: using max 26 ests per chain, 62400 per kthread
[  480.662592][T19127] netlink: 'syz.2.3399': attribute type 1 has an invalid length.
[  480.905100][T19133] syzkaller1: entered promiscuous mode
[  480.937440][T19133] syzkaller1: entered allmulticast mode
[  481.099533][  T808] net_ratelimit: 3 callbacks suppressed
[  481.099551][  T808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  481.354905][T19138] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3405'.
[  481.448497][ T5626] block nbd5: Receive control failed (result -1)
[  481.790962][T19149] bond4: entered promiscuous mode
[  481.796162][T19149] bond4: entered allmulticast mode
[  481.802869][T19149] 8021q: adding VLAN 0 to HW filter on device bond4
[  481.919003][T19164] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check.
[  481.959727][T19166] lo speed is unknown, defaulting to 1000
[  481.978659][T19166] lo speed is unknown, defaulting to 1000
[  482.001564][T19166] lo speed is unknown, defaulting to 1000
[  482.019148][T19164] »»»»»»: renamed from lo (while UP)
[  482.035378][T19166] smbdirect: ib_dev[syú2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000
[  482.073612][T19166] smbdirect: ib_dev[syú2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6
[  482.129289][T19166] smbdirect: ib_dev[syú2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008
[  482.144037][ T5732] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  482.181961][T19166] infiniband syú2: RDMA CMA: cma_listen_on_dev, error -98
[  482.258466][T19166] »»»»»» speed is unknown, defaulting to 1000
[  482.278715][T19166] »»»»»» speed is unknown, defaulting to 1000
[  482.301516][T19166] »»»»»» speed is unknown, defaulting to 1000
[  482.319534][T19166] »»»»»» speed is unknown, defaulting to 1000
[  482.329987][T19166] »»»»»» speed is unknown, defaulting to 1000
[  482.337894][T19166] »»»»»» speed is unknown, defaulting to 1000
[  482.346504][T19166] »»»»»» speed is unknown, defaulting to 1000
[  482.354592][T19166] »»»»»» speed is unknown, defaulting to 1000
[  482.362675][T19166] »»»»»» speed is unknown, defaulting to 1000
[  482.378191][T19158] ¾x9ÿ: renamed from bridge_slave_0 (while UP)
[  482.424251][T19174] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3413'.
[  482.512233][T19174] openvswitch: netlink: ERSPAN option length err (len 256, max 255).
[  482.538572][T19178] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3415'.
[  482.558506][T19178] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3415'.
[  482.596491][T19178] geneve2: entered promiscuous mode
[  482.615106][T19178] geneve2: entered allmulticast mode
[  482.733588][ T6442] IPVS: starting estimator thread 0...
[  482.796497][T19189] netlink: 'syz.4.3418': attribute type 29 has an invalid length.
[  482.821476][T19185] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3417'.
[  482.858457][T19189] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3418'.
[  482.870296][T19184] IPVS: using max 27 ests per chain, 64800 per kthread
[  483.058036][T19198] netem: change failed
[  483.181766][ T5732] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  483.420444][ T8838] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  483.428774][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  484.220031][ T5732] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  484.288600][T19226] sctp: [Deprecated]: syz.1.3430 (pid 19226) Use of int in maxseg socket option.
[  484.288600][T19226] Use struct sctp_assoc_value instead
[  484.621109][T19236] x_tables: arp_tables: NFQUEUE target: not valid for this family
[  484.660609][T19235] 
[  484.662957][T19235] ======================================================
[  484.669966][T19235] WARNING: possible circular locking dependency detected
[  484.676971][T19235] syzkaller #0 Not tainted
[  484.681370][T19235] ------------------------------------------------------
[  484.688476][T19235] syz.2.3435/19235 is trying to acquire lock:
[  484.694529][T19235] ffffffff8ea85520 (fs_reclaim){+.+.}-{0:0}, at: kmem_cache_alloc_node_noprof+0x4a/0x690
[  484.704352][T19235] 
[  484.704352][T19235] but task is already holding lock:
[  484.711698][T19235] ffff88808fe7e0e0 (sk_lock-AF_INET6){+.+.}-{0:0}, at: tcp_close+0x1d/0x110
[  484.720390][T19235] 
[  484.720390][T19235] which lock already depends on the new lock.
[  484.720390][T19235] 
[  484.730777][T19235] 
[  484.730777][T19235] the existing dependency chain (in reverse order) is:
[  484.739770][T19235] 
[  484.739770][T19235] -> #6 (sk_lock-AF_INET6){+.+.}-{0:0}:
[  484.747484][T19235]        lock_sock_nested+0x41/0x100
[  484.752756][T19235]        inet_shutdown+0x6a/0x390
[  484.757767][T19235]        nbd_mark_nsock_dead+0x2e9/0x560
[  484.763385][T19235]        recv_work+0x1c2e/0x1d40
[  484.768305][T19235]        process_scheduled_works+0xb5d/0x1860
[  484.774361][T19235]        worker_thread+0xa53/0xfc0
[  484.779460][T19235]        kthread+0x388/0x470
[  484.784036][T19235]        ret_from_fork+0x514/0xb70
[  484.789133][T19235]        ret_from_fork_asm+0x1a/0x30
[  484.794403][T19235] 
[  484.794403][T19235] -> #5 (&nsock->tx_lock){+.+.}-{4:4}:
[  484.802035][T19235]        __mutex_lock+0x1a3/0x1550
[  484.807130][T19235]        nbd_queue_rq+0x37b/0x1100
[  484.812229][T19235]        blk_mq_dispatch_rq_list+0xa70/0x1910
[  484.818290][T19235]        __blk_mq_sched_dispatch_requests+0xdcc/0x1600
[  484.825144][T19235]        blk_mq_sched_dispatch_requests+0xd7/0x190
[  484.831651][T19235]        blk_mq_run_hw_queue+0x348/0x4f0
[  484.837278][T19235]        blk_mq_dispatch_list+0xd16/0xe10
[  484.842990][T19235]        blk_mq_flush_plug_list+0x48d/0x570
[  484.848878][T19235]        __blk_flush_plug+0x3ed/0x4d0
[  484.854240][T19235]        __submit_bio+0x28d/0x580
[  484.859252][T19235]        submit_bio_noacct_nocheck+0x2f4/0xa40
[  484.865394][T19235]        block_read_full_folio+0x599/0x830
[  484.871193][T19235]        filemap_read_folio+0x137/0x3b0
[  484.876735][T19235]        do_read_cache_folio+0x358/0x590
[  484.882360][T19235]        read_part_sector+0xb6/0x2b0
[  484.887644][T19235]        adfspart_check_ICS+0xb1/0x960
[  484.893090][T19235]        bdev_disk_changed+0x817/0x1770
[  484.898624][T19235]        blkdev_get_whole+0x380/0x510
[  484.903993][T19235]        bdev_open+0x31e/0xd30
[  484.908750][T19235]        blkdev_open+0x470/0x610
[  484.913668][T19235]        do_dentry_open+0x785/0x14e0
[  484.918948][T19235]        vfs_open+0x3b/0x340
[  484.923522][T19235]        path_openat+0x2e08/0x3860
[  484.928622][T19235]        do_file_open+0x23e/0x4a0
[  484.933631][T19235]        do_sys_openat2+0x113/0x200
[  484.938819][T19235]        __x64_sys_openat+0x138/0x170
[  484.944171][T19235]        do_syscall_64+0x15f/0xf80
[  484.949266][T19235]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  484.955661][T19235] 
[  484.955661][T19235] -> #4 (&cmd->lock){+.+.}-{4:4}:
[  484.962856][T19235]        __mutex_lock+0x1a3/0x1550
[  484.967957][T19235]        nbd_queue_rq+0xc6/0x1100
[  484.972969][T19235]        blk_mq_dispatch_rq_list+0xa70/0x1910
[  484.979026][T19235]        __blk_mq_sched_dispatch_requests+0xdcc/0x1600
[  484.985861][T19235]        blk_mq_sched_dispatch_requests+0xd7/0x190
[  484.992350][T19235]        blk_mq_run_hw_queue+0x348/0x4f0
[  484.997972][T19235]        blk_mq_dispatch_list+0xd16/0xe10
[  485.003678][T19235]        blk_mq_flush_plug_list+0x48d/0x570
[  485.009561][T19235]        __blk_flush_plug+0x3ed/0x4d0
[  485.014923][T19235]        __submit_bio+0x28d/0x580
[  485.019931][T19235]        submit_bio_noacct_nocheck+0x2f4/0xa40
[  485.026070][T19235]        block_read_full_folio+0x599/0x830
[  485.031859][T19235]        filemap_read_folio+0x137/0x3b0
[  485.037391][T19235]        do_read_cache_folio+0x358/0x590
[  485.043009][T19235]        read_part_sector+0xb6/0x2b0
[  485.048283][T19235]        adfspart_check_ICS+0xb1/0x960
[  485.053728][T19235]        bdev_disk_changed+0x817/0x1770
[  485.059261][T19235]        blkdev_get_whole+0x380/0x510
[  485.064621][T19235]        bdev_open+0x31e/0xd30
[  485.069370][T19235]        blkdev_open+0x470/0x610
[  485.074290][T19235]        do_dentry_open+0x785/0x14e0
[  485.079559][T19235]        vfs_open+0x3b/0x340
[  485.084133][T19235]        path_openat+0x2e08/0x3860
[  485.089229][T19235]        do_file_open+0x23e/0x4a0
[  485.094239][T19235]        do_sys_openat2+0x113/0x200
[  485.099419][T19235]        __x64_sys_openat+0x138/0x170
[  485.104774][T19235]        do_syscall_64+0x15f/0xf80
[  485.109871][T19235]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  485.116267][T19235] 
[  485.116267][T19235] -> #3 (set->srcu){.+.+}-{0:0}:
[  485.123379][T19235]        __synchronize_srcu+0xca/0x300
[  485.128820][T19235]        elevator_switch+0x1e8/0x7a0
[  485.134090][T19235]        elevator_change+0x2cc/0x450
[  485.139363][T19235]        elevator_set_default+0x36c/0x430
[  485.145066][T19235]        blk_register_queue+0x3e9/0x4e0
[  485.150591][T19235]        __add_disk+0x677/0xd50
[  485.155422][T19235]        add_disk_fwnode+0xfb/0x480
[  485.160599][T19235]        nbd_dev_add+0x72c/0xb50
[  485.165518][T19235]        nbd_init+0x168/0x1f0
[  485.170178][T19235]        do_one_initcall+0x250/0x870
[  485.175447][T19235]        do_initcall_level+0x104/0x190
[  485.180894][T19235]        do_initcalls+0x59/0xa0
[  485.185733][T19235]        kernel_init_freeable+0x2a6/0x3e0
[  485.191436][T19235]        kernel_init+0x1d/0x1d0
[  485.196272][T19235]        ret_from_fork+0x514/0xb70
[  485.201361][T19235]        ret_from_fork_asm+0x1a/0x30
[  485.206632][T19235] 
[  485.206632][T19235] -> #2 (&q->elevator_lock){+.+.}-{4:4}:
[  485.214432][T19235]        __mutex_lock+0x1a3/0x1550
[  485.219526][T19235]        elevator_change+0x1b3/0x450
[  485.224799][T19235]        elevator_set_none+0xb5/0x140
[  485.230155][T19235]        blk_mq_update_nr_hw_queues+0x5e7/0x1a60
[  485.236464][T19235]        nbd_start_device+0x17f/0xb10
[  485.241818][T19235]        nbd_genl_connect+0x165b/0x1cf0
[  485.247349][T19235]        genl_family_rcv_msg_doit+0x22a/0x330
[  485.253398][T19235]        genl_rcv_msg+0x61c/0x7a0
[  485.258405][T19235]        netlink_rcv_skb+0x232/0x4b0
[  485.263677][T19235]        genl_rcv+0x28/0x40
[  485.268162][T19235]        netlink_unicast+0x75c/0x8e0
[  485.273434][T19235]        netlink_sendmsg+0x813/0xb40
[  485.278706][T19235]        ____sys_sendmsg+0x972/0x9f0
[  485.283977][T19235]        ___sys_sendmsg+0x2a5/0x360
[  485.289165][T19235]        __x64_sys_sendmsg+0x1bd/0x2a0
[  485.294611][T19235]        do_syscall_64+0x15f/0xf80
[  485.299702][T19235]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  485.306097][T19235] 
[  485.306097][T19235] -> #1 (&q->q_usage_counter(io)#51){++++}-{0:0}:
[  485.314687][T19235]        blk_alloc_queue+0x546/0x680
[  485.319963][T19235]        __blk_mq_alloc_disk+0x197/0x390
[  485.325578][T19235]        nbd_dev_add+0x499/0xb50
[  485.330500][T19235]        nbd_init+0x168/0x1f0
[  485.335159][T19235]        do_one_initcall+0x250/0x870
[  485.340429][T19235]        do_initcall_level+0x104/0x190
[  485.345874][T19235]        do_initcalls+0x59/0xa0
[  485.350712][T19235]        kernel_init_freeable+0x2a6/0x3e0
[  485.356415][T19235]        kernel_init+0x1d/0x1d0
[  485.361252][T19235]        ret_from_fork+0x514/0xb70
[  485.366345][T19235]        ret_from_fork_asm+0x1a/0x30
[  485.371616][T19235] 
[  485.371616][T19235] -> #0 (fs_reclaim){+.+.}-{0:0}:
[  485.378814][T19235]        __lock_acquire+0x15a5/0x2cf0
[  485.384171][T19235]        lock_acquire+0x106/0x350
[  485.389180][T19235]        fs_reclaim_acquire+0x71/0x100
[  485.394634][T19235]        kmem_cache_alloc_node_noprof+0x4a/0x690
[  485.400947][T19235]        __alloc_skb+0x1d0/0x7d0
[  485.405869][T19235]        tcp_send_active_reset+0x8a/0x550
[  485.411568][T19235]        __tcp_close+0x4c5/0xfe0
[  485.416493][T19235]        tcp_close+0x28/0x110
[  485.421155][T19235]        inet_release+0x143/0x190
[  485.426160][T19235]        sock_close+0xc3/0x240
[  485.430910][T19235]        __fput+0x44f/0xa60
[  485.435394][T19235]        task_work_run+0x1d9/0x270
[  485.440492][T19235]        exit_to_user_mode_loop+0xed/0x480
[  485.446278][T19235]        do_syscall_64+0x33e/0xf80
[  485.451369][T19235]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  485.457767][T19235] 
[  485.457767][T19235] other info that might help us debug this:
[  485.457767][T19235] 
[  485.467976][T19235] Chain exists of:
[  485.467976][T19235]   fs_reclaim --> &nsock->tx_lock --> sk_lock-AF_INET6
[  485.467976][T19235] 
[  485.480647][T19235]  Possible unsafe locking scenario:
[  485.480647][T19235] 
[  485.488077][T19235]        CPU0                    CPU1
[  485.493418][T19235]        ----                    ----
[  485.498760][T19235]   lock(sk_lock-AF_INET6);
[  485.503247][T19235]                                lock(&nsock->tx_lock);
[  485.510172][T19235]                                lock(sk_lock-AF_INET6);
[  485.517177][T19235]   lock(fs_reclaim);
[  485.521143][T19235] 
[  485.521143][T19235]  *** DEADLOCK ***
[  485.521143][T19235] 
[  485.529274][T19235] 2 locks held by syz.2.3435/19235:
[  485.534463][T19235]  #0: ffff888078de7a40 (&sb->s_type->i_mutex_key#13){+.+.}-{4:4}, at: sock_close+0x9b/0x240
[  485.544640][T19235]  #1: ffff88808fe7e0e0 (sk_lock-AF_INET6){+.+.}-{0:0}, at: tcp_close+0x1d/0x110
[  485.553764][T19235] 
[  485.553764][T19235] stack backtrace:
[  485.559643][T19235] CPU: 1 UID: 0 PID: 19235 Comm: syz.2.3435 Not tainted syzkaller #0 PREEMPT(full) 
[  485.559664][T19235] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  485.559673][T19235] Call Trace:
[  485.559680][T19235]  <TASK>
[  485.559687][T19235]  dump_stack_lvl+0xe8/0x150
[  485.559707][T19235]  print_circular_bug+0x2e1/0x300
[  485.559727][T19235]  check_noncircular+0x12e/0x150
[  485.559747][T19235]  __lock_acquire+0x15a5/0x2cf0
[  485.559763][T19235]  ? __lock_acquire+0x6b5/0x2cf0
[  485.559780][T19235]  ? do_raw_spin_lock+0x12b/0x2f0
[  485.559799][T19235]  ? inet_unhash+0x1fe/0xab0
[  485.559818][T19235]  ? kmem_cache_alloc_node_noprof+0x4a/0x690
[  485.559837][T19235]  lock_acquire+0x106/0x350
[  485.559850][T19235]  ? kmem_cache_alloc_node_noprof+0x4a/0x690
[  485.559869][T19235]  ? lock_acquire+0x106/0x350
[  485.559885][T19235]  fs_reclaim_acquire+0x71/0x100
[  485.559904][T19235]  ? kmem_cache_alloc_node_noprof+0x4a/0x690
[  485.559922][T19235]  kmem_cache_alloc_node_noprof+0x4a/0x690
[  485.559940][T19235]  ? __alloc_skb+0x1d0/0x7d0
[  485.559957][T19235]  ? __local_bh_enable_ip+0xd0/0x130
[  485.559973][T19235]  __alloc_skb+0x1d0/0x7d0
[  485.559991][T19235]  ? __pfx_skb_attempt_defer_free+0x10/0x10
[  485.560012][T19235]  tcp_send_active_reset+0x8a/0x550
[  485.560029][T19235]  __tcp_close+0x4c5/0xfe0
[  485.560049][T19235]  tcp_close+0x28/0x110
[  485.560066][T19235]  inet_release+0x143/0x190
[  485.560081][T19235]  sock_close+0xc3/0x240
[  485.560096][T19235]  ? __pfx_sock_close+0x10/0x10
[  485.560109][T19235]  __fput+0x44f/0xa60
[  485.560129][T19235]  task_work_run+0x1d9/0x270
[  485.560149][T19235]  ? __pfx_task_work_run+0x10/0x10
[  485.560180][T19235]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  485.560195][T19235]  exit_to_user_mode_loop+0xed/0x480
[  485.560208][T19235]  ? rcu_is_watching+0x15/0xb0
[  485.560224][T19235]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  485.560238][T19235]  do_syscall_64+0x33e/0xf80
[  485.560252][T19235]  ? clear_bhb_loop+0x40/0x90
[  485.560268][T19235]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  485.560282][T19235] RIP: 0033:0x7fe825b9ce59
[  485.560296][T19235] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  485.560309][T19235] RSP: 002b:00007ffcec2ab4f8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[  485.560325][T19235] RAX: 0000000000000000 RBX: 00007ffcec2ab5e0 RCX: 00007fe825b9ce59
[  485.560335][T19235] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003
[  485.560344][T19235] RBP: 00000000000764db R08: 0000000000000001 R09: 0000000000000000
[  485.560353][T19235] R10: 0000001b30620000 R11: 0000000000000246 R12: 00007ffcec2ab620
[  485.560363][T19235] R13: 00007fe825e15fac R14: 0000000000076539 R15: 00007fe825e15fa0
[  485.560379][T19235]  </TASK>
[  485.836375][  T985] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  485.847710][ T5732] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  485.910532][T19239] tipc: Started in network mode
[  485.928380][T19239] tipc: Node identity a60092d3a75d, cluster identity 4711
[  485.965933][T19239] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  485.989926][T19240] syzkaller0: entered promiscuous mode
[  485.995473][T19240] syzkaller0: entered allmulticast mode
[  486.011596][T19239] tipc: Resetting bearer <eth:syzkaller0>
[  486.133751][T19233] tipc: Resetting bearer <eth:syzkaller0>
[  486.146504][T19233] tipc: Disabling bearer <eth:syzkaller0>
[  486.859800][ T6442] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  487.902589][  T808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  488.540359][  T985] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  488.548575][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  488.939889][ T5842] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  489.981857][ T5842] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  491.021216][ T6440] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  491.099660][    C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  491.749843][ T8838] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  492.061984][ T5842] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  492.380900][   T68] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  492.389126][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  493.101342][ T6440] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  494.140768][ T5842] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  494.301700][ T8867] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  494.309972][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog