last executing test programs:

4.775361899s ago: executing program 3 (id=4430):
sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x38}, 0x1, 0x0, 0x0, 0x20000040}, 0x4008010) (async, rerun: 32)
r0 = socket$inet_udp(0x2, 0x2, 0x0) (rerun: 32)
connect$inet(r0, 0x0, 0x0)
sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) (async, rerun: 32)
r1 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c0000001500010320000000000000000c0000000800040001"], 0x1c}}, 0x4000000)
ioctl$sock_proto_private(r0, 0x89ed, &(0x7f0000000000)="087836ede997d53b0f33a35aaa6f47680e7061f246b41c34f11e732feccfe480cfbc95a27d3eabebfa1514f48aed043a8561355cfb066304a2cc0e0b7553eefc9a3f0907242da7163a49539cbb56b56d131e2f") (async)
sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbf9, {0x0, 0x0, 0x0, 0x0, 0x48815, 0x40103}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000)

4.43236211s ago: executing program 3 (id=4433):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0x3}, {}, {0x8, 0x10}}}, 0x24}}, 0x10)
sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)=ANY=[@ANYBLOB="60b80000", @ANYRES16, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32, @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x4040084)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x10c, 0xc0000001, 0x0, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0x8}, {0x2, 0x3}, {0x2, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_TARGET={0x8}, @TCA_FQ_PIE_TUPDATE={0x8, 0x4, 0x400}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000001}, 0x20004015)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0)

4.229005786s ago: executing program 3 (id=4436):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x10, 0x4, 0x4, 0x6}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb}, [@call={0x85, 0x0, 0x0, 0x50}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2000006}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r1, 0x2000012, 0xe, 0x0, &(0x7f0000000280)="63ec33c9e9b98600000000000000", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x40000, 0xb}, 0x50)

4.126907016s ago: executing program 3 (id=4437):
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)}, 0xc0011023)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000014c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r0, 0xfeffff, 0xe80, 0x3f000002, &(0x7f0000000700)="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", 0x0, 0xf0, 0x0, 0xf0, 0xffffff0c}, 0x40)
sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000880)={0x6, 0x4, &(0x7f0000000600)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x9e}]}, 0x0}, 0x90)
pipe(&(0x7f00000002c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
vmsplice(r1, &(0x7f0000000180), 0x2ae, 0x0)

3.987916422s ago: executing program 0 (id=4439):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x2, @dev={0xfe, 0x80, '\x00', 0x13}, 0x7}, 0x1c)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02eaff000400000008000f000100000080"], 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000140)={r1}, 0x4)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=ANY=[@ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0x0, 0x22, 0x0, &(0x7f0000000600)="3d25ff005b19c4cbe601709b080041fe7a8a047963817ba0af112187b35b1bf32219", 0x0, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r3 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000740)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00014002080c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
socket(0x2, 0x80805, 0x0)
r6 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r6, 0x0)
close(0x3)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000200)={<r7=>0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @remote}]}, &(0x7f0000000140)=0x10)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r6, 0x84, 0x7a, &(0x7f0000000340)={r7, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x7a, 0x0, 0x0)
listen(r5, 0x0)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x58, 0x2, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
r10 = socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=@setlink={0x3c, 0x13, 0x1, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_ALT_IFNAME={0x14, 0x35, 'dummy0\x00'}]}, 0x3c}}, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
sendmsg$IPSET_CMD_TEST(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="640000000906010800000000000000000600000505000100070000003c0007801800148014000240fc0000000000000000000000000000011800018014000240ff01000000000000000000000000000105000300070000000900020073797a31"], 0x64}}, 0x4800)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000800)={'hsr0\x00'})

3.869011385s ago: executing program 3 (id=4441):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x1, 0x5, 0x2, 0x4, 0x0, 0xffffffffffffffff, 0xffffffff}, 0x50)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7020000010000e1850000008600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f00000000c0)=r5, 0x4) (async)
sendmsg$unix(r4, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) (async, rerun: 64)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (rerun: 64)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x9, 0x5, 0x8, 0x40, 0x42}, 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000580), 0x1000, r6}, 0x38) (async)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001600)={r6, &(0x7f0000000240)="28f4732dc5", &(0x7f0000000180)=""/93}, 0x20) (async)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x2005}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @hash={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_HASH_TYPE={0x8, 0x7, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x74}, 0x1, 0x0, 0x0, 0x8890}, 0x24000000)

3.592138659s ago: executing program 3 (id=4444):
sendmsg$NL80211_CMD_PROBE_CLIENT(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x409, 0x70bd25, 0x25dfdbff, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x24000404}, 0x24000000)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000140)={'ip6gre0\x00', <r1=>0x0, 0x29, 0x10, 0xad, 0xb, 0x54, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x10, 0x8000, 0x5}})
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={0xffffffffffffffff, 0x58, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r2=>0x0}}, 0x10)
sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f00000003c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x94, 0x0, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x1}, @MPTCP_PM_ATTR_LOC_ID={0x5}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x3}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x12}}, @MPTCP_PM_ADDR_ATTR_ID={0x5}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r1}]}, @MPTCP_PM_ATTR_ADDR={0x44, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @broadcast}}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x6}]}, 0x94}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000400)={0x0, r0, 0x7, 0x6, 0x5, 0x8000})
r3 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000480)=@generic={&(0x7f0000000440)='./file0\x00', 0x0, 0x8}, 0x18)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000500), r0)
sendmsg$ETHTOOL_MSG_RINGS_SET(r4, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x34, r5, 0x2, 0x70bd2d, 0x25dfdbfb, {}, [@ETHTOOL_A_RINGS_RX={0x8, 0x6, 0x7fff}, @ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0x8, 0x9}, @ETHTOOL_A_RINGS_TX={0x8, 0x9, 0x2}, @ETHTOOL_A_RINGS_RX={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x10)
ioctl$PPPIOCDISCONN(0xffffffffffffffff, 0x7439)
ioctl$BTRFS_IOC_SCRUB_PROGRESS(r4, 0xc400941d, &(0x7f0000000600)={<r6=>0x0, 0x4, 0x2})
ioctl$BTRFS_IOC_SCRUB_PROGRESS(r3, 0xc400941d, &(0x7f0000000a00)={r6, 0x4, 0x7})
unshare(0x48000000)
r7 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000f80)={0x0, r0}, 0x8)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000f40)={&(0x7f0000000e00)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x40, 0x40, 0x8, [@func={0xf, 0x0, 0x0, 0xc, 0x4}, @decl_tag={0x2, 0x0, 0x0, 0x11, 0x1, 0x3}, @typedef={0x9}, @type_tag={0x10, 0x0, 0x0, 0x12, 0x5}, @volatile={0x10, 0x0, 0x0, 0x9, 0x2}]}, {0x0, [0x2e, 0x30, 0x30, 0x3e, 0x61, 0x0]}}, &(0x7f0000000e80)=""/154, 0x60, 0x9a, 0x0, 0xa, 0x10000, @value=r7}, 0x28)
ioctl$XFS_IOC_PATH_TO_HANDLE(r3, 0xc0385869, &(0x7f00000010c0)={<r8=>0xffffffffffffffff, &(0x7f0000000fc0)='\x00', 0x4443, &(0x7f0000001000)={@align=0x401, {0x10, 0x4, 0x28afc2c3, 0x693c}}, 0x3, &(0x7f0000001040), &(0x7f0000001080)=0x3})
setsockopt$TIPC_GROUP_JOIN(r8, 0x10f, 0x87, &(0x7f0000001100)={0x41, 0x1, 0x3}, 0x10)
ioctl$sock_inet_SIOCSIFADDR(r4, 0x8916, &(0x7f0000001140)={'hsr0\x00', {0x2, 0x4e23, @rand_addr=0x64010102}})
socket$inet6_sctp(0xa, 0x5, 0x84)
ioctl$BTRFS_IOC_SCRUB(r0, 0xc400941b, &(0x7f0000001180)={r6, 0x5, 0x7, 0x1})
ioctl$PPPIOCGIDLE64(0xffffffffffffffff, 0x8010743f, &(0x7f0000001580))
connect$tipc(r8, &(0x7f00000015c0)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}, 0x1}}, 0x10)
sendmsg$IPCTNL_MSG_EXP_DELETE(r8, &(0x7f0000001740)={&(0x7f0000001600), 0xc, &(0x7f0000001700)={&(0x7f0000001640)={0xb4, 0x2, 0x2, 0x201, 0x0, 0x0, {0x7, 0x0, 0x7}, [@CTA_EXPECT_MASK={0x74, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @private=0xa010100}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x29}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}]}, @CTA_EXPECT_TUPLE={0x2c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x4800}, 0x10)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000017c0), r8)
sendmsg$NL80211_CMD_DEL_PMK(r4, &(0x7f00000018c0)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001880)={&(0x7f0000001800)={0x74, r9, 0x200, 0x70bd28, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x1, 0x42}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x74}, 0x1, 0x0, 0x0, 0x24004085}, 0x10)
sendmsg$AUDIT_SET_FEATURE(0xffffffffffffffff, &(0x7f00000019c0)={&(0x7f0000001900)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001980)={&(0x7f0000001940)={0x20, 0x3fa, 0x400, 0x70bd28, 0x25dfdbfc, {}, ["", "", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4008000}, 0x800)
setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000001a00)="103d29588283301b2ebcbcfba41fa94300776a402191fce72b35b3beafe10bd4bd8338e4db8d15cd0e5e853b455c9017998375c1ba49b77c0c0a0a2b32843d5cb5a621c4", 0x44)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001c80)={r8, &(0x7f0000001a80)="c384da04c115a022b82b5cc9da88249ec8cb6143711d11a9c304c068382a5be57a0554d9aa9a0cb62690e72be22bdd875110fa31a5c84dec198767d28ce545c3498e8ccc3e984cafaa9ce573740a158f010550ded8e3a2bde5d38aab3e323090cdf6686c6ee4941e401a014f520bb6f0341f3f8efedb419be5f9d7c897b3a88e7806ad1cf1f9ab389d6f3ae38abac99f13326551bcf6170c2403e2f865628c9e01d1c89e736cddc5ea19ce4bccbe284341c244fb543c52d3bfda9d6624401c2b3ae36ce7149f5d3b4c8f8330698a8a4d51f7519c", &(0x7f0000001b80)=""/236}, 0x20)
sendmsg$NL80211_CMD_SET_PMKSA(r0, &(0x7f0000001e40)={&(0x7f0000001cc0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001e00)={&(0x7f0000001d80)={0x7c, 0x0, 0x400, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x82}, @NL80211_ATTR_PMK={0x14, 0xfe, "e77bde89a4551998941556971f825cad"}, @NL80211_ATTR_PMKID={0x14, 0x55, "a3ee37fe825e54769386f4295b058f2f"}, @NL80211_ATTR_MAC={0xa, 0x6, @random="2176305c8680"}, @NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0x2}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x2d}, @NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0x9}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000800}, 0x24000050)

3.483878633s ago: executing program 0 (id=4446):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
ioctl$TUNSETLINK(r0, 0x400454cd, 0x1)
r1 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0)
close(r2)
socket$unix(0x1, 0x2, 0x0)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r3 = socket$kcm(0x11, 0x6, 0x0)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000140)={'wg2\x00', <r4=>0x0})
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x18000}, 0x94)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r6=>0x0})
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r7], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1b, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r8, r6, 0x25, 0x0, @void}, 0x10)
syz_emit_ethernet(0xfdef, &(0x7f0000000080)=ANY=[], 0x0)
sendmsg$kcm(r3, &(0x7f00000000c0)={&(0x7f0000000500)=@xdp={0x2c, 0x0, r4, 0x25}, 0x80, &(0x7f0000000080)=[{&(0x7f00000003c0)="6e1eea6f7ac23ec55d5d4df67efc87589f66054106d3a89345c46578022bfda58f5878049171cb364bfa3b31ee7f8f30b2b4ea8517d2de66747b007b3c202dd2b5254c8f49a00fe2ddaa59329a2a5aa268442dce9890217efa22c117d2861355acfd1829d0d6100d8292468827", 0x6d}, {&(0x7f0000000000)="b0ba9bfbc2ed548d835145e4f11d", 0xe}], 0x2}, 0x9001)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async)
ioctl$TUNSETLINK(r0, 0x400454cd, 0x1) (async)
socket$unix(0x1, 0x1, 0x0) (async)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async)
openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) (async)
close(r2) (async)
socket$unix(0x1, 0x2, 0x0) (async)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async)
socket$kcm(0x11, 0x6, 0x0) (async)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000140)={'wg2\x00'}) (async)
socket$inet_tcp(0x2, 0x1, 0x0) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x18000}, 0x94) (async)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) (async)
bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r7], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1b, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r8, r6, 0x25, 0x0, @void}, 0x10) (async)
syz_emit_ethernet(0xfdef, &(0x7f0000000080)=ANY=[], 0x0) (async)
sendmsg$kcm(r3, &(0x7f00000000c0)={&(0x7f0000000500)=@xdp={0x2c, 0x0, r4, 0x25}, 0x80, &(0x7f0000000080)=[{&(0x7f00000003c0)="6e1eea6f7ac23ec55d5d4df67efc87589f66054106d3a89345c46578022bfda58f5878049171cb364bfa3b31ee7f8f30b2b4ea8517d2de66747b007b3c202dd2b5254c8f49a00fe2ddaa59329a2a5aa268442dce9890217efa22c117d2861355acfd1829d0d6100d8292468827", 0x6d}, {&(0x7f0000000000)="b0ba9bfbc2ed548d835145e4f11d", 0xe}], 0x2}, 0x9001) (async)

3.429042565s ago: executing program 2 (id=4447):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x10, 0x4, 0x4, 0x6}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb}, [@call={0x85, 0x0, 0x0, 0x50}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2000006}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r1, 0x2000012, 0xe, 0x0, &(0x7f0000000280)="63ec33c9e9b98600000000000000", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1000000, 0xb}, 0x50)

3.317982099s ago: executing program 2 (id=4448):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000500000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x7, 0x0, 0x0, 0x8000}, 0x48)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000440)={r0}, 0xc)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)=ANY=[@ANYRES16=r1], 0x7c}}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELRULE={0x14, 0x8, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}}], {0x14}}, 0x78}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x28, 0x803, 0x3)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r4)
setsockopt$SO_RDS_TRANSPORT(r4, 0x114, 0x8, &(0x7f0000000100), 0x4)
getsockname$packet(r4, &(0x7f0000000180)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="580000001000370400"/20, @ANYRES32=r5, @ANYBLOB="8304050000000000380012800b000100697036746e6c00002800028014000300ff0100000000000000000000000000010500090004"], 0x58}, 0x1, 0x0, 0x0, 0x9005}, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x1, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, 0x0, 0x3}, [@IFLA_MTU={0x8, 0x4, 0xfff1}]}, 0x28}, 0x1, 0x0, 0x0, 0x801}, 0x4000000)
socket$inet_sctp(0x2, 0x1, 0x84)

3.169607395s ago: executing program 2 (id=4449):
syz_emit_ethernet(0x88, &(0x7f00000000c0)={@local, @empty, @void, {@ipv6={0x86dd, @gre_packet={0x1, 0x6, '1\x00', 0x52, 0x2f, 0x0, @remote, @local, {[], {{0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x88be, 0x6, 0x1, [], "bf3f030b7d27"}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8100, [0x6, 0xb, 0x3e]}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd, [0x9]}, {0x8, 0x88be, 0x3, {{0xc, 0x1, 0x48, 0x1, 0x1, 0x0, 0x4, 0x9}, 0x1, {0x89a0}}}, {0x8, 0x22eb, 0x2, {{0x3, 0x2, 0x2, 0x3, 0x0, 0x0, 0x1, 0x9}, 0x2, {0x5, 0xeb, 0x0, 0xd, 0x1, 0x1, 0x1, 0x1, 0x1}}}, {0x8, 0x6558, 0x1}}}}}}}, 0x0)
sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c0000000002010400000000000000000a00000004000180040003803000f21102801a000180140003"], 0x4c}, 0x1, 0x0, 0x0, 0x1855}, 0x20004004)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$IPSET_CMD_PROTOCOL(r1, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, 0x1, 0x6, 0x401, 0x0, 0x0, {0x2, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4810}, 0x8080)
pipe(&(0x7f0000000240)={<r2=>0xffffffffffffffff})
splice(r2, 0x0, r1, 0x0, 0x1c, 0xe)
write$tun(r2, &(0x7f0000000040)={@void, @val={0x0, 0x0, 0x9ffa, 0x200, 0x9, 0xe16}, @arp=@ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0x9, @local, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @broadcast, @local}}, 0x3e)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8890}, 0x20004450)
sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="38000000070a010100000006000000000a0040010900010073797a3100000000090002"], 0x38}, 0x1, 0x0, 0x0, 0x20040850}, 0x44054)

2.964130352s ago: executing program 2 (id=4450):
r0 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=@ipv6_newnexthop={0x28, 0x68, 0x1, 0x0, 0x25dfdbfd, {0x2}, [@NHA_FDB={0x4}, @NHA_BLACKHOLE={0x4}, @NHA_ID={0x8, 0x1, 0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x4402}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x80, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2f}, @NFTA_SET_EXPRESSIONS={0x3c, 0x12, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x4}}}, {0x14, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x4}}}, {0x10, 0x1, 0x0, 0x1, @dup_ipv4={{0x8}, @val={0x4}}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x106}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xc8}}, 0x20050800)
r2 = socket(0x10, 0x80000, 0x5)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@ipv4_newrule={0x38, 0x20, 0x1, 0xffffffff, 0x0, {0x2, 0x0, 0x20}, [@FRA_GENERIC_POLICY=@FRA_FWMASK={0x8, 0x10, 0x5}, @FRA_SRC={0x8, 0x2, @private=0xa010101}, @FRA_TUN_ID={0xc, 0xc, 0x1, 0x0, 0x7}]}, 0x38}, 0x1, 0x0, 0x0, 0x40008c4}, 0x8000)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000240)={'lo\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x6c, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x3c, 0x2, [@TCA_CAKE_SPLIT_GSO={0x8}, @TCA_CAKE_FWMARK={0x8, 0x12, 0x24}, @TCA_CAKE_AUTORATE={0x8, 0x9, 0xff}, @TCA_CAKE_AUTORATE={0x38, 0x9, 0x9}, @TCA_CAKE_WASH={0x8}, @TCA_CAKE_AUTORATE={0x8, 0x9, 0x40}, @TCA_CAKE_INGRESS={0x8}]}}]}, 0x6c}}, 0x0)

2.849986117s ago: executing program 2 (id=4451):
r0 = socket(0x2a, 0x2, 0x0)
getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}}, 0x24}}, 0x44884)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000800)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd2d, 0x25dfdffd, {0x0, 0x0, 0x0, r1, {0x6}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0x2, 0xc}}]}}]}, 0x3c}}, 0x2000c800)
r2 = socket$netlink(0x10, 0x3, 0x0)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x200000c, 0x3032, 0xffffffffffffffff, 0x0)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r0)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r3, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@ETHTOOL_A_COALESCE_TX_MAX_FRAMES={0x8, 0x7, 0x8}, @ETHTOOL_A_COALESCE_RX_USECS_LOW={0x8, 0xe, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x1)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@struct={0x0, 0x0, 0x0, 0x4, 0x1, 0x106}, @func_proto]}}, &(0x7f0000000f40)=""/4079, 0x32, 0xfef, 0x6, 0x4}, 0x28)
sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0)

2.810871621s ago: executing program 4 (id=4452):
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@remote, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in6=@mcast2, 0x0, 0x2b}, 0x0, @in=@empty}}, 0xe8) (async)
unshare(0x26020400)
r1 = socket(0x15, 0x5, 0x0)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e21, 0x1, @ipv4={'\x00', '\xff\xff', @empty}, 0x8}, 0x1c)
r2 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x2, 0xd, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @private1}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast1}}, @sadb_x_policy={0x2, 0x12, 0x2, 0x2, 0x0, 0x0, 0x0, {0x6, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@private1, @in6=@private1}}, @sadb_lifetime={0x4, 0x4}]}, 0xc0}}, 0x0)

2.629131931s ago: executing program 4 (id=4453):
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x2c}, 0x1, 0x0, 0x0, 0x4048011}, 0x4044000)
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000), 0x11)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x11, &(0x7f0000000380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9}, {}, {}, [@cb_func={0x18, 0x4, 0x4, 0x0, 0x3}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0xf, 0x1001, &(0x7f0000001cc0)=""/4097, 0x41100, 0x4d}, 0x94)

2.5803875s ago: executing program 4 (id=4454):
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="b4020000000000007911000000000000850000002e0000009500000000000000359bb9f43d86b136000000008762000000f3"], &(0x7f0000000100)='syzkaller\x00', 0x4, 0xc5, &(0x7f0000000300)=""/197, 0x28000000, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000002c0), 0xffffffffffffff35}, 0x54)

2.490431402s ago: executing program 4 (id=4455):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_DEL_STATION(r0, &(0x7f0000001180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="00900000", @ANYRES16=r1, @ANYBLOB="01002dbd7000fedbdf251400000008000300", @ANYRES32=r2, @ANYBLOB="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"], 0x688}, 0x1, 0x0, 0x0, 0x44050}, 0x890)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'tunl0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0xf, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x30, 0x2, {{0x5, 0x7, 0x6, 0x1, 0x5, 0x9}, [@TCA_NETEM_JITTER64={0xc, 0xb, 0xf}, @TCA_NETEM_ECN={0x8}]}}}]}, 0x60}}, 0x4000010)
setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000011c0), 0x4)
r5 = socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, 0x0, 0x0)
getsockopt(r5, 0x7f, 0x4, 0x0, 0x0)
r6 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0)
ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r0, 0x4048587b, &(0x7f0000001ac0)={{<r7=>r0, 0x0, 0x181000, &(0x7f0000001940)={@_ha_fsid={[0x2, 0x6a]}, {0x1, 0xfff, 0x1, 0x8}}, 0x4, 0x0, 0x0}, 0x0, &(0x7f0000001a80)})
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001e00)={0xffffffffffffffff, 0x20, &(0x7f0000001dc0)={0x0, 0x0, 0x0, &(0x7f0000001cc0)=""/201, 0xc9}}, 0x10)
bpf$OBJ_GET_PROG(0x7, 0x0, 0x0)
ioctl$sock_SIOCOUTQ(r5, 0x5411, 0x0)
connect$inet6(r7, 0x0, 0x0)
setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r7, 0x84, 0x21, 0x0, 0x0)
write$ppp(r7, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000611814000000000095"], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x28, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$OCFS2_IOC_GROUP_ADD(r6, 0x40186f02, &(0x7f0000000780)={0xffff, 0x1, 0xf8c, 0x8})
getpeername$inet(r7, &(0x7f00000008c0)={0x2, 0x0, @local}, &(0x7f0000000900)=0x10)
socket$inet6_tcp(0xa, 0x1, 0x0)
sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="50000000020603000000000000000000050000070c0007800800080000000044050005000a00000005000400000000000900020073797a320000000005000100060000000c000300686173683a69700069047dc930cb91aae1fb056e23b2ca1913b0825bf4e591dc02fe01bce3782b0304bc75fab406bb7b32737b82487da763560ca197f85b367ca7077fa00816b36ebe46fc25948b5bf937b7d9311e3e9fd32c4f88b6c2b11b25395491f7374d87cb6b3a1f8febe9785466c00b5ef0f27045ef5c724cacd1fb888a104793510f12f5911a0db246db0e97de1a22d8a862f28b4ec31a2ef09e541a89fecc88049214440beb"], 0x50}}, 0x24040054)

2.261201776s ago: executing program 1 (id=4456):
r0 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r0, &(0x7f0000000340)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) (async)
listen(r0, 0x8) (async)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg$unix(r1, &(0x7f0000001840)=[{{0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x20048054}}], 0x1, 0x8800) (async)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f00000001c0)={0x0, 0x3}, 0x8) (async)
setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000100)={0x3}, 0x10)
sendto$inet(r1, &(0x7f0000000300)="b3", 0x1, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0x1}, 0x8)
ioctl$AUTOFS_IOC_PROTOSUBVER(r1, 0x80049367, &(0x7f0000000000))

2.24917955s ago: executing program 1 (id=4457):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x20, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x48000)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="05002ebd7000000000000800000008000300", @ANYRES32=r2], 0x2c}, 0x1, 0x0, 0x0, 0x10804}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f00000006c0)={0x0, 0x0, 0x1000, 0x2, 0x3}, 0x20)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="440000001000210400000000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="8700000050000000240012800b00010067656e6576650000140002800500080001000000050009"], 0x44}}, 0x800)

780.468433ms ago: executing program 4 (id=4458):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0xd, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000073"], 0x0, 0x0, 0x0, 0x0, 0x40e00, 0x10, '\x00', 0x0, @sock_ops=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x39, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r1=>0x0})
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r2, r1, 0x25, 0x0, @void}, 0x10)
r3 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', <r4=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x60, 0x24, 0xd0f, 0x3, 0x0, {0x60, 0x0, 0x0, r4, {0x0, 0x3}, {0xffff, 0xffff}, {0x5, 0x6}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x2c, 0x2, [@TCA_FQ_CODEL_INTERVAL={0x8, 0x3, 0x1}, @TCA_FQ_CODEL_DROP_BATCH_SIZE={0x8, 0x8, 0x100}, @TCA_FQ_CODEL_FLOWS={0x8, 0x5, 0x1}, @TCA_FQ_CODEL_ECN={0x8}, @TCA_FQ_CODEL_CE_THRESHOLD_SELECTOR={0x5, 0xa, 0x7}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x200001d4}, 0x8840)
syz_emit_ethernet(0x1289, &(0x7f00000048c0)=ANY=[], 0x0)

778.29698ms ago: executing program 0 (id=4459):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x94)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4)
bind$inet6(r2, &(0x7f0000000280)={0xa, 0x4e22, 0x7, @private1, 0x200}, 0x1c)
setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000000240)={0xfc, 0x3, 0x10, 0x7, 0x4, 0x6, 0x1, 0x3, 0x3, 0x2, 0x2, 0xa, 0x9, 0x8}, 0xe)
listen(r2, 0x0)
syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/net\x00')
r3 = socket$netlink(0x10, 0x3, 0x4)
writev(r3, &(0x7f00000000c0)=[{&(0x7f0000012380)="580000001500add427323b470c47b45602067fffffff81004e220700000000000000a8002000eaa57b00090080020efffeffe809020000ff0004f03a007357ac8ddc1fdd00000000000004ffffffe7ee0000000044c60000", 0x58}], 0x1)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000002b40), r4)
sendmsg$NLBL_MGMT_C_ADD(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000002c00)={&(0x7f0000000100)={0x24, r5, 0x1, 0x70bd65, 0x25dfdbfe, {}, [@NLBL_MGMT_A_DOMAIN={0xe, 0x1, 'net/l2cap\x00'}]}, 0x24}, 0x1, 0x2000000, 0x0, 0x20000000}, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000640), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_SET(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000c40)={0x34, r7, 0x1, 0x0, 0x0, {0x2c}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x8040)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r8=>0x0})
r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
setsockopt$MRT_DEL_MFC(r3, 0x0, 0xcd, &(0x7f0000000200)={@multicast1, @local, 0xffffffffffffffff, "745bbe18fced4aa80e751cc1330b5273e645634f5949e258a07059aa6002e175", 0x2, 0x8, 0xffff, 0x7}, 0x3c)
unshare(0x2000000)
mmap(&(0x7f00005d3000/0x4000)=nil, 0x4000, 0x0, 0x12, r9, 0xfffff000)
r10 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'lo\x00', <r11=>0x0})
sendmsg$nl_route_sched(r10, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {0xa}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x8, 0x11, 0x4000}, @TCA_FQ_QUANTUM={0x8, 0x3, 0x3fff}]}}]}, 0x40}}, 0x0)
mmap(&(0x7f00004a3000/0x1000)=nil, 0x1000, 0x0, 0x13, r9, 0x0)
mmap(&(0x7f000086a000/0x2000)=nil, 0x2000, 0x4, 0x11, r9, 0x2000)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000140)={0x5, <r12=>0x0}, 0x8)
bpf$PROG_LOAD(0x5, &(0x7f0000001700)={0x17, 0x7, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000500000018110000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b702000000000000850000008600000095000000000000e6"], &(0x7f0000000100)='syzkaller\x00', 0x5, 0x1000, &(0x7f0000000680)=""/4096, 0x1e00, 0x8, '\x00', r8, @fallback=0x12, r9, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r12}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r12, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

750.317017ms ago: executing program 2 (id=4460):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r1=>0x0})
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000080)={0x34, r2, 0x1, 0x70bd2b, 0x0, {{0x2}, {@val={0x8, 0x3, r1}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x96c}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x976}]]}, 0x34}}, 0x0)
r3 = socket$packet(0x11, 0x2, 0x300)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={<r4=>0xffffffffffffffff})
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff)
sendmsg$WG_CMD_GET_DEVICE(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x28, r7, 0x301, 0x70bd2c, 0x25dfdbfe, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x40080c0}, 0x20040000)
r8 = socket$netlink(0x10, 0x3, 0x0)
r9 = socket(0x10, 0x3, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r9)
getsockname$packet(r9, &(0x7f00000002c0)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r10, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800)
sendmsg$nl_route_sched(r5, &(0x7f0000000300)={0x0, 0xffffffffffffff8e, &(0x7f0000000240)={&(0x7f0000000080)=@delchain={0x54, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0xfff3}, {0xfff3, 0xffff}, {0xa, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x10}, @TCA_FLOWER_KEY_ENC_OPTS_MASK={0x8, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x4}]}, @TCA_FLOWER_KEY_VLAN_ETH_TYPE={0x6, 0x19, 0x88a8}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x40044}, 0x4804)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
sendmmsg$inet(r4, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0)
sendmmsg$sock(0xffffffffffffffff, &(0x7f0000005840)=[{{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f00000006c0)="bb", 0x1}], 0x1}}], 0x1, 0x4)
r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r11, &(0x7f0000000600)=ANY=[], 0x10448)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r11, 0x0)
connect$tipc(r4, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x4}}, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newtaction={0x6c, 0x30, 0x1, 0x70bd28, 0x0, {}, [{0x58, 0x1, [@m_skbmod={0x54, 0x9, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0xffffffff, 0x10001, 0xffffffffffffffff, 0x3b, 0x3}, 0x400000000a}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4}, 0x0)
syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f9078640101000000000024806558000000000000000010000800000086dd"], 0x0)
r12 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20010840)
sendmsg$kcm(r12, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0)
setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000040)={0x4, 0x2000}, 0x4)

603.704038ms ago: executing program 1 (id=4461):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-384\x00'}, 0x58)
r3 = accept4(r2, 0x0, 0x0, 0x800)
sendmsg$NL80211_CMD_SET_CQM(r3, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000a80)={0x20, 0x0, 0x100, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}}, 0x45}, 0x1, 0x0, 0x0, 0x4040}, 0xe97b44310876ac03)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="170e0000000000000000010000600500070000000000080009000012000014001f000000000000000000000000000000000008000a0000000000060002009b000000140020"], 0x5c}}, 0x0)

550.27056ms ago: executing program 4 (id=4462):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0) (async)
r1 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2, 0x11, r1, 0x93234000)
mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) (async)
socketpair(0x1d, 0x2, 0x6, &(0x7f0000000180))
getsockopt$sock_buf(r0, 0x1, 0x1f, 0x0, &(0x7f00000000c0))

516.36226ms ago: executing program 1 (id=4463):
socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
connect(0xffffffffffffffff, &(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e21, @private=0xa010102}, 0x2, 0x1, 0x2, 0x1}}, 0x80)
r0 = socket$nl_route(0x10, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="7800000010000304000000000000000000007400", @ANYRES32=0x0, @ANYBLOB="00000000600000005800128008000100677470004c000280080001", @ANYBLOB], 0x78}}, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000180), 0x4)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0x3, &(0x7f0000000bc0)=@framed, &(0x7f0000000000)='syzkaller\x00', 0xfdd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000001c0)={r3, 0x0, 0xffc9, 0x0, &(0x7f0000002d40)="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", &(0x7f0000000040), 0x11, 0x0, 0x33, 0x6f, &(0x7f0000000100)="46cc00117877b1d08f679b92d46ce23b736d0feb470f4e1d46f158db88cf3de81ac77bccb45147c5d8b3964b10d7310feec810", &(0x7f0000000240)="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", 0x2, 0x0, 0x7ffc}, 0x21)
bind$alg(r1, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0)
syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00')
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0xf2812000)
ioctl$BTRFS_IOC_SUBVOL_CREATE(0xffffffffffffffff, 0x5000940e, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="3f0000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="804001000000010008001b0000000000"], 0x28}, 0x1, 0x0, 0x0, 0x20004040}, 0x0)

455.90233ms ago: executing program 0 (id=4464):
r0 = socket$inet6(0xa, 0x2, 0x0)
r1 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r1)
getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="400000001000370400"/20, @ANYRES32=r0, @ANYBLOB="83150500000000002000128008000100736974001400028006000f000300000008000100", @ANYRES8=r1], 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x4000010)
sendmmsg$inet(r0, &(0x7f0000000880)=[{{&(0x7f0000000040)={0x2, 0x461c, @initdev={0xac, 0x1e, 0x20, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @empty, @remote}}}], 0x20}}], 0x1, 0x4880)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000140), r3)

302.161447ms ago: executing program 0 (id=4465):
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="b4020000000000007911000000000000850000002e0000009500000000000000359bb9f43d86b136000000008762000000f3"], &(0x7f0000000100)='syzkaller\x00', 0x4, 0xc5, &(0x7f0000000300)=""/197, 0x30000000, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000002c0), 0xffffffffffffff35}, 0x54)

163.434494ms ago: executing program 1 (id=4466):
syz_emit_ethernet(0x4e, &(0x7f0000000800)={@link_local, @broadcast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "ecff80", 0x18, 0x11, 0x0, @private0, @mcast2, {[], {0x0, 0x4e22, 0x18, 0x0, @wg=@data={0x3, 0x800}}}}}}}, 0x0)
syz_init_net_socket$802154_raw(0x24, 0x4, 0x0)

31.941193ms ago: executing program 0 (id=4467):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000006c0)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="4dc07f947163300c", 0x8)
r1 = socket(0x2b, 0x1, 0x1)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), r1)
sendmsg$ETHTOOL_MSG_TSINFO_GET(r1, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r2, 0x300, 0x70bd2b, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x48000}, 0x20004090)
ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f00000002c0)=<r3=>0x0)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000002200)={0x0, 0x0, {0x0, @struct, <r4=>0x0}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}})
ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000e00)={{}, r3, 0x2, @inherit={0x60, &(0x7f0000000300)={0x0, 0x3, 0x1, 0x7485, {0x20, 0x0, 0x9, 0x1, 0xddbc}, [0x7, 0x8c76, 0xb]}}, @devid=r4})
ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f00000006c0)={{}, r3, 0x8, @unused=[0x0, 0x8, 0x0, 0x49c], @name="f4e0f4793a820ba24d06e63b38643e6c49e95feb3ea225b79d85808ef7c74924490079af62e9533dc444feed06849df6bc740d27c7d8ae665789dceef4b5d9694101e9f0072fa75d56cea6ccd741f38e3b76b435bc1f5d4c530b1e06f5ced78609b7a67948e620ac6b2d713a2c0e74559dfe8391231c8fcbc0d7fd55f2af1a7ee95db627e0e0a904c32915f1e17fe0b3a4632f447026954c15f3f51ac7de4d7c499a2077f6dfd4fb91afdf2bad53bb0cbfe0faafbb8823e9953ac6ec66f3ef10e297e0b6dca1020703392552dc6bf4986caa49996a502963ba73c183e4eff7ec9bec7e8f81122d787836906f39d8185e08b35d977bcf2f944bc769bbfcfb52b888739990ff328dbca00a67591f23feb36d70b087ac1e9f1ddf79f033ea30a070a521ea7e68ce1884ff9cf321bbbcb9238439eca475814b23de9c856cb79b45d3bfb706ceb1e3d460faa5b0de6f2f263c2c10b4dc67c1aa389929d7e5cf1298c620066ed76548c3c155733095df43d5adf1354c01b65b44da6be9a5386f58e31e253853388df10006d24766c7e9cbbe9339345088b736591ad96c3b06aa15c93f96aa4029e42e80e996ca8ccf9def065391f526e590c68ca85e380759069ad68ba43b9f76512aae16b85706c7f1d1da9579553789bc93e79eb3ed8513b3a731cc0a976d319597bcc4956e71590a64389e12cb309c86ab07d1f792aa57e3221bb3f74a7cf0b288201b9656078a3fd68038c35a797b6e3a1ce623814a95af463f75d8a239900ac4e10e891c9e098cefdca47eb8fb4875a3cc3717017316ed5c541bdace5d2aad3db260b920fb4506b28e7ca631f2c8eb443a010bab5f187b1ebb1b1d2089ef5f7363f73e7f64104a0d7ee1af7ff2ac798bff6047d602275c29671eae6ae5aeeb0999081e69d6acbc0c4e9f93335f1a113c58588fae355b7cc334ff94222458b75e94b0e9803912489ea405b54ae0fd49417bd4f5b4d1829e7476100a386e6ecbb072f7d5d07233677bf0748a28ccc293e1f56fedb6adf8770c4fc4f32f7d17696697abc7c9df6693945bd63039dbde582ae3d1b88a89393858e181383243277c5aa79880d6be57aa9e2fdb93f1f93879d671b6565d426d7e2ee763cfa311551c70421f1f48d42700a3deac20223ba3e033279b824ba083f983db7791fc477d5ba31c456da871adef05ba5ccf3866d9fadcd1fe2722dcf740596a17f03fc1f2fa7800db0b72047f3c79d2298bcea8350efe9042712fb34f40ea7e23039afd5a7b920ffefd3bf7bde3164ceb589a0f5b30362d77a4a4d58d4702e00d57990111fee69c52fd3f8ca58ba300600f49ff8b1962962dd9c1650825e064c50c242146450c03d0472549b1c573226746563a24ca0f8bdde17b08e18c4a9916acdd615ab393e7c8b7547d96c4359f88f843b7344ec281711703d08a7c5cd4f1817163c00dd814799c455926293fab73775e17d3ed090205d08830c4f2812ad41632674b6228ec2a0e5c24343f59c460b8072ccee9040ef60da45b88cf3270e8438e54d03a9df8bd0af3a5abe83221ee43c299ce28627413d818ff54d00bb8b1a64b2819621bf867542fad1bcec1912e7269bb302d175f235d5607b3c67cefabcbc55eb2f9f00d1a5f10393f3e1d8ffcdcfee373fe48c927007052e51a373127bab6c5bc98e297e698a0e9db40d67f863e4962ed5538e7a7fe5d5807c447be1d8198395efe7d59d5ac3ed1af16a3c21444fed09ad1456c4ba6494ca6da2d92d0d22b05252e6318aa47b727c5eedaea2c490cf872960bec7676edb0fa5af83434ab1d9c6f92e2736af15016182821618a3c616eac0188ac092e6ec8f79a9f4fb5ace5cde3846000d8d543bc973fe3f5b4fce3f4fa2c5897dae0bb559b408f1db790351f953480b0d6c0ed0bee1c2a08a0221e6cacfa1e6eb147932dde03c9b35a2186e91528cffbf5e99670aaf3ffe64ca3a084a2efd4d24ec4979d2b4ab52561d283bfd7a16f367e6c317e0857a4280fcd06683ee6218c8f66009333c2199520f8247b3e161a8d37cf711e41ead494005f2190c0996ae1be0975982a34aaed6fc6003b5d655614f31902dd948196704aeb29ce485d8fc0cb04608d129a94c7c5ae42594c2de04369869e0730bc2718eb6be187365c5cdbbd4e1c456fc7cfe841c54b1ef658325ee9b603933b9e5a59447eaba9b5d2290f4c2c57593bf98de66eae5da7b4b80559f42e78208d6bbd06950ce60a97f20f3ee153de2548e2d8f9a2925d3ea88e14204f2f5e511ad1df1816fb48696d58b5f2c7da9077874bf11c891185de7a840f980bf6a1b9561dae3d2bb9395ad61e2bd5cc7d1a5a632b1ed3fd7e0bebe6cadcfee0abe9cbdc840f16dd68ff52a8dcb0664423c7b94e3ac78d6b9d21d7a3dbdede96830bab7b65e408d9e291f2a3a18b2d6550cec6ee4ca3863b4c883af3db92d136eeb69066ecc6d85fd981306874c579714a21b5a31071413c0f4adbc8386aaa1fdb3e9fcb2f2a91a4c491b55894f60743dad8832168ed4ed3a1319d1f19f342735d38f885454655268b2838742f40da5c460f0b57825d78daddb709a8322bffbc8afe0770dfbba12b6c7ff878fa2550003d7b1efbbbfd8dd9c1120c38fa0bb985997ba31422cc0543af8ad0d4b37a8b963cdf59ac130614c33397b8fc50cc20e318f1a99fa8ad7b58ea8031e0033118c77abe9954f56d64ea10861cde361f03aa0f39b19a4621d2cfe07306183f61b6df9b01850b6ca1c6a613879586298c8626312eb6d6794267af8a0acdd2c24a8f2629b0e9ae45193f2960cba71a739d8017fcc078b9ed33ef29dbd02a29c7ade096cd8be1db1b1127aae39859d1d8aa43e6a3c9290c4839800f437888c2e9c4fa10206e7162e5c44a89c83fd0cc72212ed6b5f91a6ef5fceeaef432f1378afab24ce8f5622d3032b61c27c6859eca4334f35e24a38ceef3a86404ab006737f2f6041c1710a104a781506dc5cb25583e8fd69e45acda22d4e8f8ba48486994d6c808a1dfea6be30a0ecb8fce8128071264419acf1bf7066c4a926edc4d8a2560184d3a722da22c8e1b2ab69134eae65c25473f9a4c0511fc0271d11a1e0eee740157883582947340c4652d1e1b942c5fb0e53ded1b56eb84b8c2ef7df5ee3c1b5461b7a8b602c795cc7834698552e15a5686c7e306075d8244f862baa2c6464869fe315723a4d8c0306e35c7b7f405c68e8c7f986866ea32ef90a9354135813eef67ad5c1864d4d5a41e301a1b64a1c75a7d1bcbe9d646ed9e2d1bbae37257a0877ea47be767127c373b372f25cdc95b31a002795b4ff308928f9e572ff96344b57f1514c7b4fe3030b7aee07338d1e212d242bce23fcc954b46e2231e5f1c60826aaf226614c871a78a2a5868615cd74925409a642fb2393199f3c842b069e16eab50a5279d557f47284a788480b6241da24b41e20d5eceba88a9ae092e0f365c62c35d9507029fd5c484dd531919a8fa9ad32c49a460788374f0fdf3cf0fb7f6edc597992f5cff47eb5aa77945ba5dff6c5260485eaf43edb6f866498883fa22d0446138fc74c26d547f7f99d8e549f37938e3f16ac6aa9011e23bdff756bca6298e04a4d407b1d803183ebc6bc208652095643291a73b842e29feeddeaf30ed842e057a2eef8517fef8c2d5570fd7b8843e1d35d49a02a6130c6258ed7aa9f1fe2ce45577611bb37528f72908a4a72a58493e210fed7e3f733037a25dfdccf23240b31ec704161f1386b2ef90814a363763ca905c11b7209cbc1b8ff25c0f23321aa3c794626855586078660df49ed5cdcff4321591fde44bd34ae0bc73ad2939b95be3e7b4e01e274d74d4626c9f0dfba86f38b7dbeb98900ccc46e7efe1b09c79bd972caf6f4313427126fae273f990bce08ea09ba792b6c8a8329fa6d2aa39df800375edca6da3482d502fe4a841616a91664af977333e6f9d8d874de7a17caeba7764aa8a10be30fdd00c5607a2e417a95a8f58c074c8800d2cf887166a1cc94c66fa2673b4b897ae50ce3905b7b568350dd8b1337d79b89a881b9f79d6eadb62c10d95cb70dbdac4575eb408367197954a3fa950ab5cab692dab47930ed8b561a3f5e4929d6f8e4c9b4324584a0efe2a8964b5a2433ace6a25463108c9dbb34a31a2d849f357cbe2e8584e8eb026ac76f2bb9df4f7f3b08f71ca51aa1deae296a93045c1b5932b4783b29e857f6bf69b9baf7d0026014b6cd4f0c2ee09bd1d0e8400298375c2e8742ea3bf3807f136deed4a65e00836db842290db501f4a35e47ee420e2cfdc2f4d28e8c4c374f57bc18d6244a8521752525c6066410b05bf009869e9cf3bb81bc2b6a72f478175a8f85fd8dc2efe00bc23cde0c44df5687bb0d8b78fa0abce70fa53e6558682bd7d12aa163e142aad1ee136d3c85bd6fc17a031819a1e88fdf851736e6593f20ecdcccc87b826dd5217b9bbae1b5a32c4753b6952f18254c49b67d5efb3acb3a43ce8f24a3069c1c66d7b2a4b7412dc7814795879eacca13cfda3c1351eea8c08f8e81fcca47f5cffb924d063023f8cdc0a01ee53d650691febd99815727c02672903a696af8534e5cacda5807e91b8bf1e1463a0c69c14adb33afc553bf9266d87ad6a95b7491f32dd78678bb2e26b2294fe734fb2bb3968af4291172eb11eee3e67f910e1042da32710099b95edfd2d515ea8424363cfa08c26b5c9ff743cb374f7b77455815f488462aaa689dfe3fb3340240e4720414071e31eaf54bdddb2480a51745e21577477a29af9b8ffc0623d818798e0abb873da6f111a7c0abc418d7eea2bf9ce5cf89a86d9c155060fa1c845317712c8e50d50e7c612b5bd3f496ed0cbc212654bd4d2c85f5c051ec97df0a3e219bee4225874bd4963512bc744ad21510aac684659d785be61aef4d4686abaf6b597155a36c41182856c39b12471554197a482ad14891985dfa88154b7c8ccf88b294cf4c3326611c9d8c89fb7e9a87818430ad7e217d9812e5e05d4d9b8b95043deaaa1ea15c6d1b5196209179887b91144aaafe9f8200de3c14c9b0085e7983fd1969759eaaac2a8211458f3c9ed0e26426a641a0c601777b8093259c2f8f7e1f7ca4448bdb3066adf91d01ada208a8aef50561dc59473fa0073081396c7ee72562dfe87c19f8b5ebd2df53b23cae3cb4033c30ac536cf785b870f7b4125e7d3fa358678ba512e0809d77cb799271e0ea510c8a1311ec88a5fab26bafa47885b62be34bbcf25afb5e388db478f9bb9202de892403aab9112bf2727dfe5dfa3ec2935653fab4bf423f4a103a2343742aedc746872f080bf9ee09ffd275fdba7321af846497c5f09398c5c26919fbb1729f4ea13623e5cb185dcb540b430422163e4e446d486d80ea018eb0dcdc1d785f5c23aaa5b0ee62ad4f5a63f131886da9061aeca9ac390367f5fc4b4c5032b7e47c5067c6226902a4039dad477072c8dd4c35717175509b55371de76b9062c8eaf2b16fd21c0243fb84d4ab365184e703d4629b8055f57aba2ab1f61467b90d8cf7684d02597cb3a204cba5b469acc0d262e10d44f307a00ceec983b8472f9993c55597d0bdb65f7b8e8edd3aff8be36652ee7513a844fce1c473d5d6fc44bbbe67dba33ab5e691f68b4a3eb19c817349acce55c6cb04cc60d1d7b68b45dcf0b9dbb862dffc5840c492a0343cbe766af5477c182b95ab692745c1fe86b"})
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r1, 0xc0c89425, &(0x7f0000000380)={"a586ee7eb299c1b8ffee970cf7cf245e", 0x0, r3, {0x4, 0x3}, {0xe, 0x1ff}, 0x1, [0xff, 0x8, 0x7000, 0x8, 0x2041341, 0x9, 0x1, 0xfe, 0x5, 0x2, 0x5, 0x0, 0x100000000, 0xfffffffffffffff8, 0x4, 0x6]})
setsockopt$inet6_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0x4)
read$alg(r1, &(0x7f0000000700)=""/244, 0xf4)
setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4)
r5 = socket$inet_mptcp(0x2, 0x1, 0x106)
ioctl$int_in(r5, 0x5452, &(0x7f0000000280)=0x3a0af83a)
r6 = socket$l2tp6(0xa, 0x2, 0x73)
recvfrom$l2tp6(r6, 0x0, 0x0, 0x61, 0x0, 0x0)
shutdown(r5, 0x1)
listen(r5, 0x28)
poll(&(0x7f0000000040)=[{r5, 0x20}], 0x1, 0x404)
shutdown(r5, 0x0)
connect$inet6(r1, &(0x7f00000001c0)={0xa, 0x4e1f, 0x2, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c)
setsockopt$inet6_IPV6_DSTOPTS(r1, 0x29, 0x3b, 0x0, 0x0)
r7 = accept4(r0, 0x0, 0x0, 0x0)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x30, 0x3, 0x8, 0x201, 0x0, 0x0, {}, [@CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_HEARTBEAT_ACKED={0x8, 0x9, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_SCTP_HEARTBEAT_SENT={0x8}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}]}, 0x30}}, 0x0)
sendto$unix(r7, &(0x7f00000004c0)="a3669abdf2b1ea3f241432ef197282deb2746de0c37bdb10be5106157cca20eae865c9efe7a87656f308129f06b9681737bee9b25e1cab92da9d492c444bb783cb912f54da49fea052c04ac91a172951b2102c85505f30b7f9721637f25605cc907d4b64fada7111df3a00000200"/126, 0xfffffd56, 0x180d4, 0x0, 0x0)
ioctl$AUTOFS_IOC_PROTOVER(0xffffffffffffffff, 0x80049363, &(0x7f00000000c0))
setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x48, &(0x7f0000000180)={0x0, 0x0}, 0x10)

0s ago: executing program 1 (id=4468):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x5, 0x0, 0x8000}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0x2a, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000b50102008200000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8a00fe00000000bfa200000000000007020000f8ffffffb703000008000000b7040000010000008500000082000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

kernel console output (not intermixed with test programs):

ered allmulticast mode
[  475.445023][T18890] veth2: entered allmulticast mode
[  475.450587][T18890] veth3: entered allmulticast mode
[  475.455899][T18890] veth4: entered allmulticast mode
[  475.461305][T18890] veth5: entered allmulticast mode
[  475.467155][T18890] ip6gre1: left promiscuous mode
[  475.472289][T18890] ip6gre1: entered allmulticast mode
[  475.479294][ T9131] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  475.509709][T18895] __nla_validate_parse: 6 callbacks suppressed
[  475.509730][T18895] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3240'.
[  475.533638][ T5824] bridge0: port 4(syz_tun) entered disabled state
[  475.554481][ T5824] syz_tun (unregistering): left allmulticast mode
[  475.563469][ T5824] syz_tun (unregistering): left promiscuous mode
[  475.572465][ T5824] bridge0: port 4(syz_tun) entered disabled state
[  475.639892][ T9131] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  475.656233][ T9131] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  475.731365][   T35] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  475.963410][T18936] netlink: 203340 bytes leftover after parsing attributes in process `syz.2.3246'.
[  476.038824][T18940] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3249'.
[  476.060175][T18940] netlink: 228 bytes leftover after parsing attributes in process `syz.3.3249'.
[  476.074146][T18940] netlink: 228 bytes leftover after parsing attributes in process `syz.3.3249'.
[  476.089864][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  476.321610][   T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  476.327351][T18958] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3254'.
[  476.409162][T18962] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3254'.
[  476.424320][T18960] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3255'.
[  476.433941][T18960] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3255'.
[  476.452988][   T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  476.472645][T18963] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3256'.
[  476.510116][T18963] 8021q: VLANs not supported on vxcan0
[  476.642176][ T5831] Bluetooth: hci4: command tx timeout
[  476.995620][ T9135] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 20000 - 0
[  477.047149][T18989] vlan0: entered promiscuous mode
[  477.119795][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  477.155674][ T9135] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 20000 - 0
[  477.180436][T18897] chnl_net:caif_netlink_parms(): no params data found
[  477.364105][ T9135] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 20000 - 0
[  477.390129][ T9135] netdevsim netdevsim4 eth4: set [1, 0] type 2 family 0 port 20000 - 0
[  477.480432][ T1039] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  477.507031][ T9131] vlan3: left promiscuous mode
[  477.551014][ T9131] bridge0: port 3(vlan3) entered disabled state
[  477.564938][ T9131] bridge_slave_1: left allmulticast mode
[  477.586348][ T9131] bridge_slave_1: left promiscuous mode
[  477.605318][ T9131] bridge0: port 2(bridge_slave_1) entered disabled state
[  477.622387][ T1039] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  477.636811][ T9131] bridge_slave_0: left promiscuous mode
[  477.643184][ T9131] bridge0: port 1(bridge_slave_0) entered disabled state
[  477.690777][T19015] nbd3: detected capacity change from 0 to 63
[  478.053801][ T9131] bond2 (unregistering): (slave geneve2): Releasing active interface
[  478.185025][ T9131] bond5 (unregistering): (slave bridge3): Releasing active interface
[  478.345100][ T9131] bond1 (unregistering): (slave veth3): Releasing active interface
[  478.354031][ T9131] bond1 (unregistering): Released all slaves
[  478.367961][ T9131] bond2 (unregistering): Released all slaves
[  478.384976][ T9131] bond4 (unregistering): Released all slaves
[  478.405212][ T9131] bond3 (unregistering): Released all slaves
[  478.413097][   T72] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  478.425718][ T9131] bond5 (unregistering): (slave veth5): Releasing active interface
[  478.438549][ T9131] bond5 (unregistering): (slave veth7): Releasing active interface
[  478.450338][ T9131] bond5 (unregistering): Released all slaves
[  478.464605][ T9131] bond6 (unregistering): Released all slaves
[  478.478811][ T9131] bond7 (unregistering): Released all slaves
[  478.503068][ T9131] bond8 (unregistering): (slave batadv0): Releasing active interface
[  478.512869][ T9131] bond8 (unregistering): Released all slaves
[  478.526663][ T9131] bond0 (unregistering): Released all slaves
[  478.569690][ T5831] block nbd3: Receive control failed (result -104)
[  478.605696][T19026] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR
[  478.719768][ T5831] Bluetooth: hci4: command tx timeout
[  478.862555][T18897] bridge0: port 1(bridge_slave_0) entered blocking state
[  478.885950][T18897] bridge0: port 1(bridge_slave_0) entered disabled state
[  478.899138][T18897] bridge_slave_0: entered allmulticast mode
[  478.914950][T18897] bridge_slave_0: entered promiscuous mode
[  478.984387][T18897] bridge0: port 2(bridge_slave_1) entered blocking state
[  479.009329][T18897] bridge0: port 2(bridge_slave_1) entered disabled state
[  479.038470][T18897] bridge_slave_1: entered allmulticast mode
[  479.107683][T18897] bridge_slave_1: entered promiscuous mode
[  479.574234][T19077] netlink: 'syz.3.3283': attribute type 4 has an invalid length.
[  479.688866][T18897] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  479.721948][T18897] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  479.904800][T18897] team0: Port device team_slave_0 added
[  479.989155][T18897] team0: Port device team_slave_1 added
[  480.039734][T19103] tipc: Started in network mode
[  480.044860][T19103] tipc: Node identity 26dfe5c98cf6, cluster identity 4711
[  480.064098][T19103] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  480.072054][T18897] batman_adv: batadv0: Adding interface: batadv_slave_0
[  480.082484][T18897] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  480.108785][    C1] net_ratelimit: 5 callbacks suppressed
[  480.108806][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  480.183986][T18897] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  480.316206][T19105] syzkaller0: entered promiscuous mode
[  480.325198][T19105] syzkaller0: entered allmulticast mode
[  480.333393][T19105] tipc: Resetting bearer <eth:syzkaller0>
[  480.349028][T18897] batman_adv: batadv0: Adding interface: batadv_slave_1
[  480.357073][T18897] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  480.383968][T18897] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  480.460701][T19102] tipc: Resetting bearer <eth:syzkaller0>
[  480.737934][T19138] Bluetooth: MGMT ver 1.23
[  480.804427][ T5831] Bluetooth: hci4: command tx timeout
[  480.882082][   T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  480.991922][ T9138] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  481.131377][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  482.004036][   T72] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  482.125276][ T1039] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  482.161149][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  482.309605][T19102] tipc: Disabling bearer <eth:syzkaller0>
[  482.356967][T10139] tipc: Node number set to 2854872521
[  482.406740][T19141] netlink: 'syz.0.3296': attribute type 4 has an invalid length.
[  482.443315][T19141] __nla_validate_parse: 4 callbacks suppressed
[  482.443335][T19141] netlink: 17 bytes leftover after parsing attributes in process `syz.0.3296'.
[  482.503114][T19143] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  482.564915][T18897] hsr_slave_0: entered promiscuous mode
[  482.586796][T18897] hsr_slave_1: entered promiscuous mode
[  482.610742][T18897] debugfs: 'hsr0' already exists in 'hsr'
[  482.629983][T18897] Cannot create hsr debugfs directory
[  482.634702][T19148] FAULT_INJECTION: forcing a failure.
[  482.634702][T19148] name fail_usercopy, interval 1, probability 0, space 0, times 1
[  482.658855][T19148] CPU: 1 UID: 0 PID: 19148 Comm: syz.3.3297 Not tainted syzkaller #0 PREEMPT(full) 
[  482.658883][T19148] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  482.658896][T19148] Call Trace:
[  482.658904][T19148]  <TASK>
[  482.658913][T19148]  dump_stack_lvl+0xe8/0x150
[  482.658948][T19148]  should_fail_ex+0x412/0x560
[  482.658984][T19148]  _copy_to_user+0x31/0xb0
[  482.659010][T19148]  simple_read_from_buffer+0xe1/0x170
[  482.659047][T19148]  proc_fail_nth_read+0x1bb/0x230
[  482.659081][T19148]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  482.659114][T19148]  ? rw_verify_area+0x2a6/0x4d0
[  482.659137][T19148]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  482.659167][T19148]  vfs_read+0x20c/0xa70
[  482.659187][T19148]  ? fdget_pos+0x246/0x320
[  482.659212][T19148]  ? __pfx___mutex_lock+0x10/0x10
[  482.659243][T19148]  ? __pfx_vfs_read+0x10/0x10
[  482.659268][T19148]  ? __fget_files+0x2a/0x420
[  482.659302][T19148]  ? __fget_files+0x3a0/0x420
[  482.659330][T19148]  ? __fget_files+0x2a/0x420
[  482.659369][T19148]  ksys_read+0x150/0x270
[  482.659395][T19148]  ? __pfx_ksys_read+0x10/0x10
[  482.659430][T19148]  do_syscall_64+0x14d/0xf80
[  482.659458][T19148]  ? trace_irq_disable+0x3b/0x150
[  482.659475][T19148]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  482.659496][T19148]  ? clear_bhb_loop+0x40/0x90
[  482.659525][T19148]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  482.659544][T19148] RIP: 0033:0x7fc82db5d04e
[  482.659564][T19148] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  482.659581][T19148] RSP: 002b:00007fc82ea48fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  482.659612][T19148] RAX: ffffffffffffffda RBX: 00007fc82ea496c0 RCX: 00007fc82db5d04e
[  482.659626][T19148] RDX: 000000000000000f RSI: 00007fc82ea490a0 RDI: 0000000000000004
[  482.659638][T19148] RBP: 00007fc82ea49090 R08: 0000000000000000 R09: 0000000000000000
[  482.659650][T19148] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  482.659661][T19148] R13: 00007fc82de16128 R14: 00007fc82de16090 R15: 00007ffe9b5a8278
[  482.659694][T19148]  </TASK>
[  482.890752][T19151] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3295'.
[  482.926417][ T5831] Bluetooth: hci4: command tx timeout
[  483.056475][T19150] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3298'.
[  483.077764][T19153] syzkaller1: entered promiscuous mode
[  483.126445][T19153] syzkaller1: entered allmulticast mode
[  483.340433][ T9135] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  483.461562][ T1039] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  483.496301][ T9131] macsec0: left allmulticast mode
[  483.804177][T19194] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3306'.
[  484.676147][T19194] vti0: entered promiscuous mode
[  484.969456][T19213] netlink: 'syz.0.3311': attribute type 1 has an invalid length.
[  485.139727][    C1] net_ratelimit: 3 callbacks suppressed
[  485.139748][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  485.259270][T18897] netdevsim netdevsim4 eth4 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  485.437873][ T9131] IPVS: stop unused estimator thread 0...
[  485.474367][T18897] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  485.584922][T19231] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3316'.
[  485.605818][ T9135] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  485.732026][ T9135] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  485.773345][T18897] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  485.774774][T19201] infiniband !yz!: set active
[  485.794827][T19201] infiniband !yz!: added team_slave_0
[  485.857703][T19201] RDS/IB: !yz!: added
[  485.870583][T19201] smc: adding ib device !yz! with port count 1
[  485.877244][T19201] smc:    ib device !yz! port 1 has no pnetid
[  486.113754][T18897] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  486.169745][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  486.630615][T18897] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  486.687394][T18897] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  486.695126][T19258] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3320'.
[  486.729182][T18897] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  486.765832][T18897] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  486.775321][   T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  486.891220][   T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  487.150849][T18897] 8021q: adding VLAN 0 to HW filter on device bond0
[  487.199760][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  487.206875][T18897] 8021q: adding VLAN 0 to HW filter on device team0
[  487.238746][ T9135] bridge0: port 1(bridge_slave_0) entered blocking state
[  487.246086][ T9135] bridge0: port 1(bridge_slave_0) entered forwarding state
[  487.298564][ T9135] bridge0: port 2(bridge_slave_1) entered blocking state
[  487.305849][ T9135] bridge0: port 2(bridge_slave_1) entered forwarding state
[  487.541790][T19292] netdevsim netdevsim3 netdevsim0: entered allmulticast mode
[  487.815877][T19304] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3327'.
[  487.876779][T19300] bond1: entered allmulticast mode
[  487.896952][ T1039] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  488.000114][ T9138] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  488.008635][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  488.157337][T18897] 8021q: adding VLAN 0 to HW filter on device batadv0
[  489.156239][T18897] veth0_vlan: entered promiscuous mode
[  489.199101][T18897] veth1_vlan: entered promiscuous mode
[  489.348372][T18897] veth0_macvtap: entered promiscuous mode
[  489.394313][T18897] veth1_macvtap: entered promiscuous mode
[  489.450682][T18897] batman_adv: batadv0: Interface activated: batadv_slave_0
[  489.491050][T18897] batman_adv: batadv0: Interface activated: batadv_slave_1
[  489.554269][ T1039] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  489.580115][ T1039] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  489.765157][ T1039] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  489.778321][ T1039] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  489.951239][T19360] team0: entered promiscuous mode
[  489.956432][T19360] team_slave_0: entered promiscuous mode
[  489.999847][T19360] team_slave_1: entered promiscuous mode
[  490.179763][    C1] net_ratelimit: 5 callbacks suppressed
[  490.179783][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  490.276010][ T9138] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  490.285254][   T72] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  490.310885][ T9138] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  490.408265][ T9138] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  490.429954][ T9138] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  491.199731][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  491.239769][ T1039] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  491.420022][ T9138] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  491.940812][T19418] tc_dump_action: action bad kind
[  492.113994][T19423] xt_TPROXY: Can be used only with -p tcp or -p udp
[  492.131738][T19423] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3346'.
[  492.151161][T19423] nbd: illegal input index 38656
[  492.240014][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  492.361596][T19431] x_tables: duplicate underflow at hook 1
[  492.390922][ T9135] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  492.584706][   T72] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  492.853338][T19452] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3353'.
[  493.524963][ T1039] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  493.751338][ T9135] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  493.948714][T19494] syzkaller1: entered promiscuous mode
[  493.974148][T19494] syzkaller1: entered allmulticast mode
[  493.993348][T19494] PF_CAN: dropped non conform CAN skbuff: dev type 280, len 324
[  494.516068][T19510] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3369'.
[  494.611253][T19518] netlink: 'syz.4.3371': attribute type 1 has an invalid length.
[  494.654225][T19514] bond3: option lacp_rate: mode dependency failed, not supported in mode active-backup(1)
[  494.696156][T19514] bond3 (unregistering): Released all slaves
[  495.060239][T19531] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3376'.
[  495.220089][    C1] net_ratelimit: 4 callbacks suppressed
[  495.220109][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  495.699868][T19564] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3383'.
[  495.784253][T19556] syzkaller0: entered promiscuous mode
[  495.789999][T19556] syzkaller0: entered allmulticast mode
[  495.798305][ T9135] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  496.039919][ T1039] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  496.240872][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  496.334992][T19590] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3388'.
[  496.940059][ T9131] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  497.180709][   T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  497.280894][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  498.050048][   T72] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  498.290081][   T72] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  498.767342][T19601] netlink: 'syz.2.3392': attribute type 29 has an invalid length.
[  498.890379][ T9135] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  500.262177][    C1] net_ratelimit: 3 callbacks suppressed
[  500.262195][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  500.275974][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  500.488946][T19607] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR
[  500.492787][   T72] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  500.693129][T19614] xt_CHECKSUM: unsupported CHECKSUM operation 68
[  500.721111][T19617] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3394'.
[  500.982719][T19637] bond0: (slave bond_slave_1): Releasing backup interface
[  501.279743][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  501.413986][ T1039] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  501.589177][T19654] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3407'.
[  501.679900][   T72] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  501.692592][T19654] nbd: must specify a device to reconfigure
[  502.083473][ T1298] aoe: packet could not be sent on bond0.  consider increasing tx_queue_len
[  502.329807][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  502.384781][T19685] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  502.579938][ T1039] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  502.671623][T19685] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  502.823114][   T72] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  502.876452][T19685] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  503.114677][T19685] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  503.345949][T19726] No such timeout policy "syz1"
[  503.426754][T19723] 8021q: adding VLAN 0 to HW filter on device bond0
[  503.493416][T19731] bridge_slave_0: default FDB implementation only supports local addresses
[  503.642063][ T9138] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  503.650895][ T9138] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  503.703020][T19739] vcan0: tx address claim with different name
[  503.711048][T19739] netlink: 'syz.1.3433': attribute type 39 has an invalid length.
[  503.765923][ T9138] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  503.817333][ T1039] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  503.943991][T19744] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3434'.
[  504.156518][T19749] netlink: 'syz.1.3436': attribute type 1 has an invalid length.
[  504.180955][T19749] netlink: 'syz.1.3436': attribute type 4 has an invalid length.
[  504.204222][T19749] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.3436'.
[  504.232393][T19755] netlink: 'syz.1.3436': attribute type 1 has an invalid length.
[  504.244137][T19757] netlink: 'syz.0.3438': attribute type 30 has an invalid length.
[  504.252277][T19755] netlink: 'syz.1.3436': attribute type 4 has an invalid length.
[  504.272377][T19755] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.3436'.
[  504.323230][T19761] xt_policy: too many policy elements
[  504.864673][T19772] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3441'.
[  504.923972][T19775] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3442'.
[  505.299715][    C1] net_ratelimit: 7 callbacks suppressed
[  505.299738][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  505.737305][T19807] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3452'.
[  505.767902][T19798] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3450'.
[  505.960800][ T9131] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  506.045740][T19816] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3455'.
[  506.187362][ T9131] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  506.301149][T19829] netlink: 'syz.0.3460': attribute type 2 has an invalid length.
[  506.311597][T19827] netlink: 'syz.1.3459': attribute type 10 has an invalid length.
[  506.319809][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  506.338979][T19827] team0: Device veth1 is up. Set it down before adding it as a team port
[  506.381147][T19829] hsr0: entered promiscuous mode
[  506.408167][T19832] netlink: 'syz.3.3462': attribute type 1 has an invalid length.
[  506.447186][T19835] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3460'.
[  506.513364][T19832] 8021q: adding VLAN 0 to HW filter on device bond3
[  506.597444][T19838] bond3: (slave veth5): Enslaving as an active interface with a down link
[  506.627242][T19835] hsr_slave_0: left promiscuous mode
[  506.641061][T19835] hsr_slave_1: left promiscuous mode
[  506.674011][T19844] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3464'.
[  506.691460][T19835] hsr0 (unregistering): left promiscuous mode
[  506.731623][T19839] bond3: (slave dummy0): making interface the new active one
[  506.741141][T19839] dummy0: entered promiscuous mode
[  506.756539][T19839] bond3: (slave dummy0): Enslaving as an active interface with an up link
[  506.814087][T19841] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3464'.
[  506.905652][T19841] netdevsim netdevsim1 netdevsim0: entered promiscuous mode
[  506.914586][T19841] macvtap1: entered promiscuous mode
[  506.927724][T19841] macvtap1: entered allmulticast mode
[  506.933426][T19841] netdevsim netdevsim1 netdevsim0: entered allmulticast mode
[  506.967992][T19849] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3467'.
[  507.091393][   T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  507.144828][T19856] 8021q: VLANs not supported on vcan0
[  507.340074][ T1039] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  507.369844][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  507.495295][T19865] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3471'.
[  507.849598][   T25] block nbd3: Possible stuck request ffff888027108000: control (read@0,1024B). Runtime 30 seconds
[  507.862907][   T25] block nbd3: Possible stuck request ffff888027108200: control (read@1024,1024B). Runtime 30 seconds
[  507.873935][   T25] block nbd3: Possible stuck request ffff888027108400: control (read@2048,1024B). Runtime 30 seconds
[  507.885220][   T25] block nbd3: Possible stuck request ffff888027108600: control (read@3072,1024B). Runtime 30 seconds
[  508.062501][T19890] IPv6: addrconf: prefix option has invalid lifetime
[  508.215120][T19895] syzkaller0: create flow: hash 4110956816 index 1
[  508.215180][   T72] syzkaller0: tun_net_xmit 76
[  508.222978][ T9131] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  508.248122][   T24] syzkaller0: tun_net_xmit 76
[  508.254033][   T72] syzkaller0: tun_net_xmit 48
[  508.328494][T19892] syzkaller0: delete flow: hash 4110956816 index 1
[  508.481183][ T1039] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  508.486769][T19921] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3485'.
[  508.504135][T19918] netlink: 108 bytes leftover after parsing attributes in process `syz.4.3489'.
[  508.516702][T19918] netlink: 'syz.4.3489': attribute type 3 has an invalid length.
[  510.344924][    C1] net_ratelimit: 4 callbacks suppressed
[  510.344941][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  510.490064][ T1039] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  510.711257][   T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  510.831227][T19956] __nla_validate_parse: 1 callbacks suppressed
[  510.831248][T19956] netlink: 72 bytes leftover after parsing attributes in process `syz.1.3494'.
[  510.855943][T19953] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  511.040792][T19953] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  511.275608][T19953] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  511.312843][T19980] netlink: 164 bytes leftover after parsing attributes in process `syz.3.3500'.
[  511.369709][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  511.619962][   T72] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  511.766251][T19953] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  511.893878][T19987] netlink: 'syz.2.3503': attribute type 1 has an invalid length.
[  511.902549][ T9138] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  512.081958][ T1039] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  512.121975][ T9138] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  512.173601][ T1039] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  512.202934][ T1039] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  512.288266][T20007] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  512.409709][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  512.580053][T20024] dvmrp1: entered allmulticast mode
[  512.587604][T20024] dvmrp1: left allmulticast mode
[  512.790329][ T1039] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  512.811728][T20032] netlink: 'syz.2.3519': attribute type 1 has an invalid length.
[  512.884639][T20039] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3519'.
[  512.921089][T20039] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3519'.
[  512.952209][T20032] bond2: entered promiscuous mode
[  512.958157][T20032] 8021q: adding VLAN 0 to HW filter on device bond2
[  513.024082][   T72] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  513.055915][T20042] bond2: (slave bridge1): making interface the new active one
[  513.094086][T20042] bridge1: entered promiscuous mode
[  513.115153][T20042] bond2: (slave bridge1): Enslaving as an active interface with an up link
[  513.184252][T20050] netlink: 'syz.1.3522': attribute type 4 has an invalid length.
[  513.233995][T20050] netlink: 'syz.1.3522': attribute type 4 has an invalid length.
[  513.304992][T20058] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3525'.
[  513.515525][T20067] netlink: 1 bytes leftover after parsing attributes in process `syz.2.3527'.
[  513.542362][T20067] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  513.747159][T20076] xt_CT: No such helper "syz0"
[  514.003985][T20094] syzkaller0: entered promiscuous mode
[  514.031218][T20094] syzkaller0: entered allmulticast mode
[  514.107719][T20104] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3539'.
[  514.308572][T20111] netlink: 1053 bytes leftover after parsing attributes in process `syz.4.3541'.
[  514.331951][T20111] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3541'.
[  514.923847][T20128] syzkaller0: entered promiscuous mode
[  514.929405][T20128] syzkaller0: entered allmulticast mode
[  515.003156][T20133] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3546'.
[  515.087563][T20132] netlink: 'syz.3.3549': attribute type 4 has an invalid length.
[  515.372505][T20145] sctp: [Deprecated]: syz.2.3546 (pid 20145) Use of int in max_burst socket option deprecated.
[  515.372505][T20145] Use struct sctp_assoc_value instead
[  515.389743][    C1] net_ratelimit: 6 callbacks suppressed
[  515.389763][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  516.111267][T20179] syzkaller1: entered promiscuous mode
[  516.127272][T20179] syzkaller1: entered allmulticast mode
[  516.165174][   T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  516.176791][T20187] syzkaller0: entered promiscuous mode
[  516.189849][T20187] syzkaller0: entered allmulticast mode
[  516.399798][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  516.434642][   T72] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  516.441273][T20205] __nla_validate_parse: 2 callbacks suppressed
[  516.441293][T20205] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3568'.
[  516.503967][T20209] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3568'.
[  516.534408][T20207] pim6reg: entered allmulticast mode
[  516.550457][T20207] pim6reg: left allmulticast mode
[  517.207884][T20248] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3578'.
[  517.271083][ T9131] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  517.440198][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  517.474972][T20259] 8021q: VLANs not supported on vxcan0
[  517.575667][ T1039] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  517.655423][T20263] netlink: 300 bytes leftover after parsing attributes in process `syz.0.3583'.
[  517.726789][T20263] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3583'.
[  517.942045][T20278] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3587'.
[  517.973945][T20274] vti0: entered promiscuous mode
[  517.991752][ T9138] dummy0: left promiscuous mode
[  518.181616][T20290] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3589'.
[  518.262816][T20293] ip6tnl2: entered allmulticast mode
[  518.351862][T20297] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3593'.
[  518.404943][T20297] team_slave_0: entered promiscuous mode
[  518.410860][ T9138] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  518.437763][T20297] team_slave_0: entered allmulticast mode
[  518.627118][T20304] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3596'.
[  518.702666][T20314] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3596'.
[  518.712118][   T72] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  518.798707][T20320] netlink: 'syz.2.3599': attribute type 4 has an invalid length.
[  519.035900][T20333] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check.
[  519.223043][T20345] netlink: 'syz.1.3607': attribute type 1 has an invalid length.
[  519.391037][T20345] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address
[  519.428986][T11595] IPVS: starting estimator thread 0...
[  519.437134][T20345] bond2: (slave vxcan3): Error -95 calling set_mac_address
[  519.520049][T20357] IPVS: using max 24 ests per chain, 57600 per kthread
[  519.560045][T20356] bond2: (slave bridge1): Enslaving as an active interface with a down link
[  520.264487][T20381] team0: entered promiscuous mode
[  520.293079][T20381] team_slave_1: entered promiscuous mode
[  520.311500][T20381] 8021q: adding VLAN 0 to HW filter on device team0
[  520.419708][    C1] net_ratelimit: 4 callbacks suppressed
[  520.419729][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  520.508383][T20389] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Register Pid response ret = -22)
[  520.633736][ T9131] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  520.737839][T20404] netlink: 'syz.2.3624': attribute type 1 has an invalid length.
[  520.777046][T20404] 8021q: adding VLAN 0 to HW filter on device bond3
[  520.814642][T20404] bond3: (slave veth7): Enslaving as an active interface with a down link
[  520.844022][T20409] dummy0: left allmulticast mode
[  520.861406][T20409] bond3: (slave dummy0): making interface the new active one
[  520.871182][T20409] dummy0: entered promiscuous mode
[  520.877257][T20409] bond3: (slave dummy0): Enslaving as an active interface with an up link
[  520.958701][T20406] bridge0: entered promiscuous mode
[  520.965552][   T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  520.988401][T20406] macsec1: entered promiscuous mode
[  521.161670][   T35] bond3: (slave dummy0): link status definitely down, disabling slave
[  521.182444][   T35] dummy0: left promiscuous mode
[  521.223232][   T35] bond3: now running without any active interface!
[  521.439723][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  521.450901][T20431] __nla_validate_parse: 7 callbacks suppressed
[  521.450921][T20431] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3630'.
[  521.762711][ T1039] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  522.011132][T20461] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3639'.
[  522.090663][ T1039] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  522.489697][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  522.738303][T20479] bridge0: port 2(bridge_slave_1) entered disabled state
[  522.793587][T20485] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3645'.
[  522.899787][   T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  523.211631][   T72] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  523.228304][T20500] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3651'.
[  523.249339][T20496] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3649'.
[  523.553802][T20510] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3653'.
[  523.698291][T20516] IPVS: set_ctl: invalid protocol: 43 172.20.20.187:20004
[  523.762817][T20515] IPVS: length: 184 != 24
[  524.023625][T20530] batman_adv: batadv0: Adding interface: dummy0
[  524.030732][ T9131] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  524.039167][T20530] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  524.091633][T20530] batman_adv: batadv0: Interface activated: dummy0
[  524.180293][T20535] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3660'.
[  524.189410][T20535] netlink: 'syz.1.3660': attribute type 1 has an invalid length.
[  524.231715][T20534] macvtap1: left promiscuous mode
[  524.434626][T20549] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3663'.
[  524.444046][T20549] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3663'.
[  524.595828][T20555] netlink: 'syz.2.3667': attribute type 1 has an invalid length.
[  524.746862][T20562] bond4: (slave geneve2): making interface the new active one
[  524.817896][T20562] bond4: (slave geneve2): Enslaving as an active interface with an up link
[  524.903608][   T72] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 20004 - 0
[  524.940340][   T72] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 20004 - 0
[  524.949203][   T72] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 20004 - 0
[  524.979225][   T72] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 20004 - 0
[  525.008164][T20580] netlink: 'syz.4.3676': attribute type 21 has an invalid length.
[  525.016789][T20580] IPv6: NLM_F_CREATE should be specified when creating new route
[  525.214406][T20589] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3679'.
[  525.459719][    C1] net_ratelimit: 23 callbacks suppressed
[  525.459743][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  525.480281][   T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  525.694498][T20599] bridge0: port 2(bridge_slave_1) entered disabled state
[  525.702612][T20599] bridge0: port 1(bridge_slave_0) entered disabled state
[  525.762396][   T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  525.771490][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  526.280048][   T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  526.449867][T20650] x_tables: unsorted entry at hook 1
[  526.467726][T20649] x_tables: unsorted entry at hook 1
[  526.480017][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  526.500709][T20650] __nla_validate_parse: 16 callbacks suppressed
[  526.500729][T20650] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3694'.
[  526.547104][T20654] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3694'.
[  526.620944][ T9138] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  527.230855][T20683] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  527.238360][T20683] IPv6: NLM_F_CREATE should be set when creating new route
[  527.245795][T20683] IPv6: NLM_F_CREATE should be set when creating new route
[  527.253088][T20683] IPv6: NLM_F_CREATE should be set when creating new route
[  527.304121][T20692] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3706'.
[  527.327046][T20694] netlink: 'syz.2.3703': attribute type 21 has an invalid length.
[  527.336794][T20692] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3706'.
[  527.348267][T20694] netlink: 'syz.2.3703': attribute type 20 has an invalid length.
[  527.409858][   T72] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  527.461996][T20690] pim6reg1: entered promiscuous mode
[  527.467528][T20690] pim6reg1: entered allmulticast mode
[  527.529714][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  527.631474][T20698] tipc: Started in network mode
[  527.652062][T20698] tipc: Node identity f2f8dd32b4c, cluster identity 4711
[  527.659818][T20698] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  527.701418][T20698] syzkaller0: entered promiscuous mode
[  527.707057][T20698] syzkaller0: entered allmulticast mode
[  527.745253][ T1039] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  527.754310][T20698] tipc: Resetting bearer <eth:syzkaller0>
[  527.764419][T20698] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3707'.
[  527.798397][T20697] tipc: Resetting bearer <eth:syzkaller0>
[  527.834824][T20697] tipc: Disabling bearer <eth:syzkaller0>
[  528.331870][T20726] pim6reg0: tun_chr_ioctl cmd 1074025672
[  528.350328][T20726] pim6reg0: ignored: set checksum enabled
[  528.707599][T20742] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3718'.
[  528.815585][T20746] FAULT_INJECTION: forcing a failure.
[  528.815585][T20746] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  528.869731][T20746] CPU: 1 UID: 0 PID: 20746 Comm: syz.4.3720 Not tainted syzkaller #0 PREEMPT(full) 
[  528.869762][T20746] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  528.869774][T20746] Call Trace:
[  528.869782][T20746]  <TASK>
[  528.869791][T20746]  dump_stack_lvl+0xe8/0x150
[  528.869821][T20746]  should_fail_ex+0x412/0x560
[  528.869849][T20746]  _copy_from_user+0x2d/0xb0
[  528.869868][T20746]  bpf_test_init+0xd8/0x150
[  528.869889][T20746]  bpf_prog_test_run_xdp+0x529/0x1160
[  528.869919][T20746]  ? __pfx_bpf_prog_test_run_xdp+0x10/0x10
[  528.869948][T20746]  ? __fget_files+0x2a/0x420
[  528.869976][T20746]  ? __pfx_bpf_prog_test_run_xdp+0x10/0x10
[  528.869994][T20746]  bpf_prog_test_run+0x2c7/0x340
[  528.870014][T20746]  __sys_bpf+0x643/0x950
[  528.870031][T20746]  ? __pfx___sys_bpf+0x10/0x10
[  528.870058][T20746]  ? ksys_write+0x242/0x270
[  528.870078][T20746]  ? __pfx_ksys_write+0x10/0x10
[  528.870102][T20746]  __x64_sys_bpf+0x7c/0x90
[  528.870124][T20746]  do_syscall_64+0x14d/0xf80
[  528.870147][T20746]  ? trace_irq_disable+0x3b/0x150
[  528.870160][T20746]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  528.870176][T20746]  ? clear_bhb_loop+0x40/0x90
[  528.870195][T20746]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  528.870210][T20746] RIP: 0033:0x7f591679c819
[  528.870225][T20746] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  528.870239][T20746] RSP: 002b:00007f5917711028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  528.870258][T20746] RAX: ffffffffffffffda RBX: 00007f5916a15fa0 RCX: 00007f591679c819
[  528.870270][T20746] RDX: 0000000000000050 RSI: 0000200000000b80 RDI: 000000000000000a
[  528.870280][T20746] RBP: 00007f5917711090 R08: 0000000000000000 R09: 0000000000000000
[  528.870290][T20746] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  528.870299][T20746] R13: 00007f5916a16038 R14: 00007f5916a15fa0 R15: 00007ffd22af9458
[  528.870334][T20746]  </TASK>
[  529.202722][T20751] netlink: 292 bytes leftover after parsing attributes in process `syz.1.3721'.
[  529.543024][T20761] netlink: 'syz.1.3724': attribute type 6 has an invalid length.
[  529.570865][T20756] sch_tbf: peakrate 11 is lower than or equals to rate 996173156578218475 !
[  529.760099][ T5831] Bluetooth: hci5: command 0x0406 tx timeout
[  530.273643][T20777] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3727'.
[  530.318052][T20779] netlink: 156 bytes leftover after parsing attributes in process `syz.2.3728'.
[  530.392143][T20784] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3729'.
[  530.499849][    C1] net_ratelimit: 4 callbacks suppressed
[  530.499871][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  530.652404][T20801] xt_hashlimit: size too large, truncated to 1048576
[  530.784823][T20807] netlink: 'syz.2.3734': attribute type 2 has an invalid length.
[  530.785739][ T9138] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  530.811047][T20798] syzkaller1: entered promiscuous mode
[  530.813363][T20807] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  530.817618][T20798] syzkaller1: entered allmulticast mode
[  530.834015][ T9138] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  530.851380][ T9135] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  530.882222][   T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  530.891155][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  530.903474][T20804] syzkaller1: left promiscuous mode
[  530.908999][T20804] syzkaller1: left allmulticast mode
[  531.179068][T20822] tipc: Started in network mode
[  531.190063][ T1039] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  531.218827][T20822] tipc: Node identity ac14142f, cluster identity 4711
[  531.239853][T20822] tipc: New replicast peer: 0.0.0.0
[  531.255970][T20822] tipc: Enabled bearer <udp:syz2>, priority 10
[  531.520751][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  531.614527][T20849] __nla_validate_parse: 2 callbacks suppressed
[  531.614549][T20849] netlink: 212340 bytes leftover after parsing attributes in process `syz.3.3745'.
[  531.651292][T20849] openvswitch: netlink: Key 0 has unexpected len 4 expected 0
[  531.961255][   T72] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  532.007184][T20870] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3749'.
[  532.111447][T20876] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3749'.
[  532.300715][ T9138] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  532.370302][T11595] tipc: Node number set to 2886997039
[  532.537519][T20894] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3753'.
[  532.559766][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  532.867558][T20885] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3752'.
[  532.887918][T20885] netlink: 'syz.2.3752': attribute type 23 has an invalid length.
[  533.171381][T20907] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3755'.
[  533.504599][T20925] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3758'.
[  534.898675][T20981] bridge0: port 2(bridge_slave_1) entered blocking state
[  534.906054][T20981] bridge0: port 2(bridge_slave_1) entered listening state
[  534.913658][T20981] bridge0: port 1(bridge_slave_0) entered blocking state
[  534.921101][T20981] bridge0: port 1(bridge_slave_0) entered listening state
[  534.935720][T20989] ipt_ECN: cannot use operation on non-tcp rule
[  535.539719][    C1] net_ratelimit: 5 callbacks suppressed
[  535.539742][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  535.788325][ T6141] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  535.837199][T21031] geneve3: entered promiscuous mode
[  535.846124][T21031] geneve3: entered allmulticast mode
[  535.871604][ T6141] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 6081 - 0
[  535.882725][T21038] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3783'.
[  535.888697][T21040] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3782'.
[  535.893639][ T6141] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 6081 - 0
[  535.918233][ T6141] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 6081 - 0
[  535.931894][ T6141] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 6081 - 0
[  536.031274][T21038] netlink: 'syz.2.3783': attribute type 1 has an invalid length.
[  536.059913][T21038] nbd: couldn't find device at index -427251215
[  536.098510][T21038] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3783'.
[  536.128549][T21045] netlink: 'syz.1.3784': attribute type 7 has an invalid length.
[  536.136516][T21045] netlink: 'syz.1.3784': attribute type 8 has an invalid length.
[  536.199447][T21045] bridge0: entered promiscuous mode
[  536.221517][T21045] ip6gretap0: entered promiscuous mode
[  536.240397][T21045] bridge0: left promiscuous mode
[  536.254916][T21045] ip6gretap0: left promiscuous mode
[  536.498244][T21053] geneve1: left allmulticast mode
[  536.559707][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  536.599284][   T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  536.641954][ T9140] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  536.650510][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  536.680729][T21028] wg1 speed is unknown, defaulting to 1000
[  536.686806][T21028] wg1 speed is unknown, defaulting to 1000
[  536.738184][T21028] wg1 speed is unknown, defaulting to 1000
[  536.778883][T21028] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[  536.905606][T21028] wg1 speed is unknown, defaulting to 1000
[  536.907075][T21059] __nla_validate_parse: 2 callbacks suppressed
[  536.907093][T21059] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3788'.
[  536.937167][   T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  536.977320][T21028] wg1 speed is unknown, defaulting to 1000
[  536.984566][T21063] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3788'.
[  537.006249][T21063] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3788'.
[  537.020960][T21063] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3788'.
[  537.028549][T21068] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3791'.
[  537.040057][T21063] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3788'.
[  537.050181][T21068] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3791'.
[  537.129669][ T5831] Bluetooth: hci4: command 0x0405 tx timeout
[  537.317632][T21028] wg1 speed is unknown, defaulting to 1000
[  537.370289][T21028] wg1 speed is unknown, defaulting to 1000
[  537.384538][T21028] wg1 speed is unknown, defaulting to 1000
[  537.406665][T21028] wg1 speed is unknown, defaulting to 1000
[  537.473213][T21028] wg1 speed is unknown, defaulting to 1000
[  537.599768][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  537.711798][T21093] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3797'.
[  537.751047][   T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  537.759562][T21093] netem: incorrect ge model size
[  537.797101][T21095] netlink: 'syz.2.3797': attribute type 58 has an invalid length.
[  537.832017][T21093] netem: change failed
[  537.895360][T21095] caif0: left allmulticast mode
[  537.915377][T21093] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3797'.
[  537.939448][   T25] block nbd3: Possible stuck request ffff888027108000: control (read@0,1024B). Runtime 60 seconds
[  537.950592][   T25] block nbd3: Possible stuck request ffff888027108200: control (read@1024,1024B). Runtime 60 seconds
[  537.962116][   T25] block nbd3: Possible stuck request ffff888027108400: control (read@2048,1024B). Runtime 60 seconds
[  537.975802][   T25] block nbd3: Possible stuck request ffff888027108600: control (read@3072,1024B). Runtime 60 seconds
[  538.077575][   T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  538.155505][  T143] bond3: (slave dummy0): link status definitely down, disabling slave
[  538.193001][  T143] bond3: now running without any active interface!
[  538.955130][T21160] xt_hashlimit: size too large, truncated to 1048576
[  539.348067][T21183] netlink: 'syz.1.3817': attribute type 11 has an invalid length.
[  539.459616][T21160] xt_hashlimit: size too large, truncated to 1048576
[  539.761983][T21160] xt_hashlimit: size too large, truncated to 1048576
[  540.256010][T21222] netlink: 256 bytes leftover after parsing attributes in process `syz.3.3825'.
[  540.580013][    C1] net_ratelimit: 4 callbacks suppressed
[  540.580037][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  540.647142][T21243] x_tables: duplicate underflow at hook 2
[  540.782461][T21252] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) !
[  540.823076][T21247] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  541.160916][   T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  541.413787][ T9133] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  541.597702][T21276] ªªªªª&: renamed from dummy0
[  541.609687][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  542.271700][ T9125] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  542.381879][T21316] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  542.389172][T11566] IPVS: starting estimator thread 0...
[  542.400937][   T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  542.409663][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  542.541789][   T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  542.551850][T21322] IPVS: using max 25 ests per chain, 60000 per kthread
[  542.649782][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  542.959244][T21350] tipc: New replicast peer: 100.1.1.1
[  542.975451][T21350] tipc: Enabled bearer <udp:syz2>, priority 10
[  542.991903][T21355] netlink: 'syz.4.3862': attribute type 21 has an invalid length.
[  543.019256][T21355] __nla_validate_parse: 2 callbacks suppressed
[  543.019279][T21355] netlink: 156 bytes leftover after parsing attributes in process `syz.4.3862'.
[  543.051773][T21355] netlink: 'syz.4.3862': attribute type 21 has an invalid length.
[  543.074131][T21355] netlink: 156 bytes leftover after parsing attributes in process `syz.4.3862'.
[  543.460909][T21362] wg1 speed is unknown, defaulting to 1000
[  544.054005][T21403] netlink: 'syz.0.3874': attribute type 10 has an invalid length.
[  544.085994][T21375] wg1 speed is unknown, defaulting to 1000
[  544.108019][   T42] tipc: Node number set to 1178131762
[  544.332455][T21411] netlink: 208240 bytes leftover after parsing attributes in process `syz.2.3877'.
[  544.442276][T21411] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3877'.
[  544.840665][T21396] wg1 speed is unknown, defaulting to 1000
[  545.052508][T21426] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3881'.
[  545.496843][T21408] wg1 speed is unknown, defaulting to 1000
[  545.619719][    C1] net_ratelimit: 6 callbacks suppressed
[  545.619742][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  545.682766][T21437] netlink: 5404 bytes leftover after parsing attributes in process `syz.0.3884'.
[  545.791671][   T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  545.998799][   T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  546.281787][T21376] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  546.560354][T21466] FAULT_INJECTION: forcing a failure.
[  546.560354][T21466] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  546.576394][T21466] CPU: 0 UID: 0 PID: 21466 Comm: syz.3.3892 Not tainted syzkaller #0 PREEMPT(full) 
[  546.576423][T21466] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  546.576435][T21466] Call Trace:
[  546.576443][T21466]  <TASK>
[  546.576452][T21466]  dump_stack_lvl+0xe8/0x150
[  546.576485][T21466]  should_fail_ex+0x412/0x560
[  546.576520][T21466]  _copy_to_user+0x31/0xb0
[  546.576542][T21466]  bpf_test_finish+0x53c/0x6b0
[  546.576570][T21466]  ? __pfx_xdp_test_run_init_page+0x10/0x10
[  546.576596][T21466]  ? __pfx_bpf_test_finish+0x10/0x10
[  546.576621][T21466]  ? _copy_from_user+0x94/0xb0
[  546.576643][T21466]  ? bpf_test_init+0x113/0x150
[  546.576665][T21466]  bpf_prog_test_run_xdp+0x8fa/0x1160
[  546.576705][T21466]  ? __pfx_bpf_prog_test_run_xdp+0x10/0x10
[  546.576732][T21466]  ? __fget_files+0x2a/0x420
[  546.576765][T21466]  ? __pfx_bpf_prog_test_run_xdp+0x10/0x10
[  546.576788][T21466]  bpf_prog_test_run+0x2c7/0x340
[  546.576814][T21466]  __sys_bpf+0x643/0x950
[  546.576834][T21466]  ? __pfx___sys_bpf+0x10/0x10
[  546.576870][T21466]  ? ksys_write+0x242/0x270
[  546.576893][T21466]  ? __pfx_ksys_write+0x10/0x10
[  546.576922][T21466]  __x64_sys_bpf+0x7c/0x90
[  546.576961][T21466]  do_syscall_64+0x14d/0xf80
[  546.576987][T21466]  ? trace_irq_disable+0x3b/0x150
[  546.577005][T21466]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  546.577025][T21466]  ? clear_bhb_loop+0x40/0x90
[  546.577049][T21466]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  546.577068][T21466] RIP: 0033:0x7fc82db9c819
[  546.577087][T21466] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  546.577104][T21466] RSP: 002b:00007fc82ea6a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  546.577127][T21466] RAX: ffffffffffffffda RBX: 00007fc82de15fa0 RCX: 00007fc82db9c819
[  546.577142][T21466] RDX: 0000000000000050 RSI: 0000200000000b80 RDI: 000000000000000a
[  546.577155][T21466] RBP: 00007fc82ea6a090 R08: 0000000000000000 R09: 0000000000000000
[  546.577168][T21466] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  546.577180][T21466] R13: 00007fc82de16038 R14: 00007fc82de15fa0 R15: 00007ffe9b5a8278
[  546.577214][T21466]  </TASK>
[  546.639814][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  546.970147][ T6141] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  547.100031][ T6141] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  547.471446][T21491] geneve1: entered promiscuous mode
[  547.679712][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  547.813692][T21497] netlink: 284 bytes leftover after parsing attributes in process `syz.4.3900'.
[  547.860058][T21501] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3902'.
[  547.864388][T21498] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3901'.
[  548.004257][T21497] netlink: 'syz.4.3900': attribute type 12 has an invalid length.
[  548.022222][T21509] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3903'.
[  548.163888][ T6141] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  548.172665][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  548.194136][ T6141] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  548.460031][T21516] FAULT_INJECTION: forcing a failure.
[  548.460031][T21516] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  548.499740][T21516] CPU: 1 UID: 0 PID: 21516 Comm: syz.2.3906 Not tainted syzkaller #0 PREEMPT(full) 
[  548.499770][T21516] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  548.499783][T21516] Call Trace:
[  548.499791][T21516]  <TASK>
[  548.499799][T21516]  dump_stack_lvl+0xe8/0x150
[  548.499834][T21516]  should_fail_ex+0x412/0x560
[  548.499869][T21516]  _copy_to_user+0x31/0xb0
[  548.499894][T21516]  simple_read_from_buffer+0xe1/0x170
[  548.499928][T21516]  proc_fail_nth_read+0x1bb/0x230
[  548.499962][T21516]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  548.499993][T21516]  ? rw_verify_area+0x2a6/0x4d0
[  548.500014][T21516]  ? __fget_files+0x2a/0x420
[  548.500040][T21516]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  548.500070][T21516]  vfs_read+0x20c/0xa70
[  548.500091][T21516]  ? fdget_pos+0x246/0x320
[  548.500113][T21516]  ? __pfx___mutex_lock+0x10/0x10
[  548.500142][T21516]  ? __pfx_vfs_read+0x10/0x10
[  548.500164][T21516]  ? __fget_files+0x2a/0x420
[  548.500191][T21516]  ? __fget_files+0x3a0/0x420
[  548.500212][T21516]  ? __fget_files+0x2a/0x420
[  548.500243][T21516]  ksys_read+0x150/0x270
[  548.500263][T21516]  ? __pfx_ksys_read+0x10/0x10
[  548.500299][T21516]  do_syscall_64+0x14d/0xf80
[  548.500321][T21516]  ? trace_irq_disable+0x3b/0x150
[  548.500335][T21516]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  548.500351][T21516]  ? clear_bhb_loop+0x40/0x90
[  548.500370][T21516]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  548.500386][T21516] RIP: 0033:0x7f864f75d04e
[  548.500402][T21516] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  548.500416][T21516] RSP: 002b:00007f86506f8fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  548.500434][T21516] RAX: ffffffffffffffda RBX: 00007f86506f96c0 RCX: 00007f864f75d04e
[  548.500446][T21516] RDX: 000000000000000f RSI: 00007f86506f90a0 RDI: 0000000000000005
[  548.500456][T21516] RBP: 00007f86506f9090 R08: 0000000000000000 R09: 0000000000000000
[  548.500471][T21516] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  548.500480][T21516] R13: 00007f864fa16038 R14: 00007f864fa15fa0 R15: 00007ffd2cfcdce8
[  548.500506][T21516]  </TASK>
[  548.963297][T21536] netlink: 168 bytes leftover after parsing attributes in process `syz.1.3909'.
[  549.007149][T21529] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3909'.
[  549.059034][T21536] netlink: 168 bytes leftover after parsing attributes in process `syz.1.3909'.
[  549.070302][T21529] ip6gretap0: entered promiscuous mode
[  549.098818][T21542] netlink: 'syz.4.3912': attribute type 6 has an invalid length.
[  549.117791][T21529] ip6gretap0: left promiscuous mode
[  549.130552][T21547] xt_policy: neither incoming nor outgoing policy selected
[  549.150493][T21536] netlink: 168 bytes leftover after parsing attributes in process `syz.1.3909'.
[  549.170453][T21536] netlink: 168 bytes leftover after parsing attributes in process `syz.1.3909'.
[  549.205420][T21536] netlink: 168 bytes leftover after parsing attributes in process `syz.1.3909'.
[  549.236134][T21536] netlink: 168 bytes leftover after parsing attributes in process `syz.1.3909'.
[  549.268459][T21536] netlink: 168 bytes leftover after parsing attributes in process `syz.1.3909'.
[  549.278754][T21554] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3915'.
[  549.346004][T21529] ip6gretap0: entered promiscuous mode
[  549.366712][T21529] ip6gretap0: left promiscuous mode
[  549.486139][T21529] ip6gretap0: entered promiscuous mode
[  549.500926][T21529] ip6gretap0: left promiscuous mode
[  549.591878][T21529] ip6gretap0: entered promiscuous mode
[  549.624490][T21529] ip6gretap0: left promiscuous mode
[  549.651652][T21560] netlink: 'syz.2.3917': attribute type 27 has an invalid length.
[  549.660711][T21560] lo: left allmulticast mode
[  549.667665][T21560] tunl0: left allmulticast mode
[  549.678212][T21560] gre0: left allmulticast mode
[  549.687310][T21560] gretap0: left allmulticast mode
[  549.706819][T21560] erspan0: left allmulticast mode
[  549.714632][T21560] ip_vti0: left allmulticast mode
[  549.722243][T21560] ip6_vti0: left allmulticast mode
[  549.732671][T21560] sit0: left allmulticast mode
[  549.746735][T21560] ip6tnl0: left allmulticast mode
[  549.797632][T21560] ip6gre0: left allmulticast mode
[  549.835180][T21560] syz_tun: left allmulticast mode
[  549.879876][T21560] ip6gretap0: left allmulticast mode
[  549.922982][T21560] bridge0: left allmulticast mode
[  549.944435][T21560] vcan0: left allmulticast mode
[  549.989384][T21560] bond0: left allmulticast mode
[  550.056394][T21560] nlmon0: left allmulticast mode
[  550.081100][    C0] bridge0: port 1(bridge_slave_0) entered learning state
[  550.088535][    C0] bridge0: port 2(bridge_slave_1) entered learning state
[  550.104193][T21560] batadv0: left allmulticast mode
[  550.109786][T21560] veth0: left allmulticast mode
[  550.115778][T21560] veth1: left allmulticast mode
[  550.132971][T21560] wg0: left allmulticast mode
[  550.138077][T21560] wg1: left allmulticast mode
[  550.154470][T21560] wg2: left allmulticast mode
[  550.187553][T21560] veth0_to_bridge: left allmulticast mode
[  550.211877][T21560] veth1_to_bridge: left allmulticast mode
[  550.230610][T21560] veth0_to_bond: left allmulticast mode
[  550.236414][T21560] bond_slave_0: left allmulticast mode
[  550.259458][T21560] veth0_to_team: left allmulticast mode
[  550.269092][T21560] team_slave_0: left allmulticast mode
[  550.276579][T21560] veth1_to_team: left allmulticast mode
[  550.283228][T21560] team_slave_1: left allmulticast mode
[  550.289054][T21560] veth0_to_batadv: left allmulticast mode
[  550.296022][T21560] batadv_slave_0: left allmulticast mode
[  550.303008][T21560] veth1_to_batadv: left allmulticast mode
[  550.308949][T21560] batadv_slave_1: left allmulticast mode
[  550.315432][T21560] xfrm0: left allmulticast mode
[  550.321763][T21560] veth0_to_hsr: left allmulticast mode
[  550.327588][T21560] veth1_to_hsr: left allmulticast mode
[  550.328652][T21582] Bluetooth: hci0: Opcode 0x080f failed: -4
[  550.334180][T21560] hsr0: left allmulticast mode
[  550.347426][T21560] hsr_slave_0: left allmulticast mode
[  550.353370][T21560] hsr_slave_1: left allmulticast mode
[  550.359299][T21560] veth1_virt_wifi: left allmulticast mode
[  550.365745][T21560] veth0_virt_wifi: left allmulticast mode
[  550.372292][T21560] net veth1_virt_wifi virt_wifi0: left allmulticast mode
[  550.379861][T21560] veth1_vlan: left allmulticast mode
[  550.385667][T21560] vlan0: left allmulticast mode
[  550.391426][T21560] vlan1: left allmulticast mode
[  550.396824][T21560] macvlan0: left allmulticast mode
[  550.402251][T21560] macvlan1: left allmulticast mode
[  550.407602][T21560] ipvlan0: left allmulticast mode
[  550.413164][T21560] ipvlan1: left allmulticast mode
[  550.418458][T21560] veth0_vlan: left allmulticast mode
[  550.424937][T21560] veth1_macvtap: left allmulticast mode
[  550.431832][T21560] veth0_macvtap: left allmulticast mode
[  550.437862][T21560] macvtap0: left allmulticast mode
[  550.443360][T21560] macsec0: left allmulticast mode
[  550.448897][T21560] geneve0: left allmulticast mode
[  550.454654][T21560] netdevsim netdevsim2 netdevsim0: left allmulticast mode
[  550.461966][T21560] netdevsim netdevsim2 netdevsim1: left allmulticast mode
[  550.469194][T21560] netdevsim netdevsim2 netdevsim2: left allmulticast mode
[  550.479018][T21560] netdevsim netdevsim2 netdevsim3: left allmulticast mode
[  550.493627][T21560] mac80211_hwsim hwsim40 wlan0: left allmulticast mode
[  550.502352][T21560] mac80211_hwsim hwsim41 wlan1: left allmulticast mode
[  550.509353][T21560] gretap1: left allmulticast mode
[  550.514838][T21560] syztnl2: left allmulticast mode
[  550.520255][T21560] veth2: left allmulticast mode
[  550.525933][T21560] veth3: left allmulticast mode
[  550.531314][T21560] veth4: left allmulticast mode
[  550.536386][T21560] veth5: left allmulticast mode
[  550.541798][T21560] ip6gre1: left allmulticast mode
[  550.547168][T21560] vti0: left promiscuous mode
[  550.553633][T21560] bond2: left promiscuous mode
[  550.558505][T21560] bridge1: left promiscuous mode
[  550.602301][T21566] 8021q: adding VLAN 0 to HW filter on device bond0
[  550.614105][T21520] wg1 speed is unknown, defaulting to 1000
[  550.679709][    C1] net_ratelimit: 4 callbacks suppressed
[  550.679732][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  550.702116][ T6141] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 20004 - 0
[  550.724736][ T6141] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 20004 - 0
[  550.745645][ T9133] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  550.851674][   T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  550.868424][ T6141] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 20004 - 0
[  550.920637][T21598] bridge0: port 1(bridge_slave_0) entered disabled state
[  550.972189][T21599] bridge0: port 1(bridge_slave_0) entered blocking state
[  550.979436][T21599] bridge0: port 1(bridge_slave_0) entered forwarding state
[  551.023378][ T6141] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 20004 - 0
[  551.023737][T21610] netlink: 'syz.4.3924': attribute type 39 has an invalid length.
[  551.076447][T21599] bridge0: port 1(bridge_slave_0) entered disabled state
[  551.115448][T21611] netlink: 'syz.0.3925': attribute type 1 has an invalid length.
[  551.293673][T21611] 8021q: adding VLAN 0 to HW filter on device bond4
[  551.422555][T21614] bond4: (slave veth3): Enslaving as an active interface with a down link
[  551.447118][T21623] tipc: Enabled bearer <eth:ip6gre0>, priority 14
[  551.482261][T21611] netlink: 'syz.0.3925': attribute type 1 has an invalid length.
[  551.545531][T21614] 8021q: adding VLAN 0 to HW filter on device batadv1
[  551.566148][T21614] bond4: (slave batadv1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open
[  551.759696][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  551.895268][  T143] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  551.941113][T21642] bond5: Unable to set up delay as MII monitoring is disabled
[  551.953815][T21642] bond5 (unregistering): Released all slaves
[  552.009831][   T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  552.240764][ T5831] Bluetooth: hci0: command 0x080f tx timeout
[  552.559660][T10134] tipc: Node number set to 4278255617
[  552.713902][T21681] netlink: 'syz.0.3943': attribute type 1 has an invalid length.
[  552.799790][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  553.011051][ T9125] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  553.130018][ T9125] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  553.246654][T21708] bridge0: port 1(bridge_slave_0) entered blocking state
[  553.254238][T21708] bridge0: port 1(bridge_slave_0) entered forwarding state
[  553.282865][ T6141] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  553.373650][T21710] syzkaller0: entered promiscuous mode
[  553.397322][T21710] syzkaller0: entered allmulticast mode
[  553.542117][T21720] __nla_validate_parse: 37 callbacks suppressed
[  553.542141][T21720] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3953'.
[  553.611730][T21722] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3954'.
[  553.624756][T21720] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3953'.
[  553.653301][T21724] netlink: 732 bytes leftover after parsing attributes in process `syz.2.3956'.
[  553.705279][T21728] netlink: 104 bytes leftover after parsing attributes in process `syz.2.3956'.
[  553.742698][T21724] netlink: 732 bytes leftover after parsing attributes in process `syz.2.3956'.
[  554.494031][T21757] syzkaller0: entered promiscuous mode
[  554.507360][T21757] syzkaller0: entered allmulticast mode
[  554.692365][T21784] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3967'.
[  554.732271][T21782] 8021q: VLANs not supported on caif0
[  555.709681][    C1] net_ratelimit: 5 callbacks suppressed
[  555.709703][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  556.399958][  T143] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  556.511161][ T9133] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  556.729715][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  557.009958][T21822] mac80211_hwsim hwsim41 syzkaller0: entered promiscuous mode
[  557.018405][T21822] mac80211_hwsim hwsim41 syzkaller0: entered allmulticast mode
[  557.051399][T21835] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3974'.
[  557.201427][T21840] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3975'.
[  557.341299][T21849] batadv1: entered promiscuous mode
[  557.346667][T21849] batadv1: entered allmulticast mode
[  557.510860][ T6139] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  557.515114][T21859] netlink: 'syz.4.3979': attribute type 1 has an invalid length.
[  557.624996][  T143] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  557.643863][T21873] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3979'.
[  557.759871][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  557.838194][T21859] 8021q: adding VLAN 0 to HW filter on device bond1
[  557.985598][T21886] netlink: 'syz.1.3981': attribute type 30 has an invalid length.
[  558.214274][T21897] netlink: 'syz.0.3984': attribute type 1 has an invalid length.
[  558.521221][T21906] netlink: 'syz.0.3986': attribute type 8 has an invalid length.
[  558.593929][T21906] __nla_validate_parse: 3 callbacks suppressed
[  558.593951][T21906] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3986'.
[  558.621781][T21906] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3986'.
[  558.631188][ T6139] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  558.640215][T21906] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3986'.
[  558.663001][T21906] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3986'.
[  558.769885][ T9125] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  559.041308][ T9125] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  559.276970][T21937] vcan0: tx drop: invalid da for name 0x0000000000000003
[  559.520379][    C1] vcan0: j1939_tp_rxtimer: 0xffff888059d5ac00: rx timeout, send abort
[  560.021678][    C1] vcan0: j1939_tp_rxtimer: 0xffff888059d5b000: rx timeout, send abort
[  560.030692][    C1] vcan0: j1939_tp_rxtimer: 0xffff888059d5ac00: abort rx timeout. Force session deactivation
[  560.043637][T21952] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3995'.
[  560.135805][T21930] wg1 speed is unknown, defaulting to 1000
[  560.156283][T21956] tipc: Started in network mode
[  560.161922][T21956] tipc: Node identity d2f997154cf4, cluster identity 4711
[  560.169250][T21956] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  560.314534][T21956] syzkaller0: entered promiscuous mode
[  560.320431][T21956] syzkaller0: entered allmulticast mode
[  560.327137][T21956] tipc: Resetting bearer <eth:syzkaller0>
[  560.530622][    C1] vcan0: j1939_tp_rxtimer: 0xffff888059d5b000: abort rx timeout. Force session deactivation
[  560.658727][T21971] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3998'.
[  560.678243][T21971] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3998'.
[  560.739677][    C1] net_ratelimit: 3 callbacks suppressed
[  560.739697][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  560.835937][T21975] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4000'.
[  560.845783][ T9133] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  560.878029][T21975] openvswitch: netlink: Flow actions attr not present in new flow.
[  560.999758][ T9133] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  561.043565][T21953] tipc: Resetting bearer <eth:syzkaller0>
[  561.066711][T21979] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4001'.
[  561.765938][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  561.972469][ T9140] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  562.153018][ T9140] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  562.455147][T21995] FAULT_INJECTION: forcing a failure.
[  562.455147][T21995] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  562.468679][T21995] CPU: 1 UID: 0 PID: 21995 Comm: syz.3.4006 Not tainted syzkaller #0 PREEMPT(full) 
[  562.468716][T21995] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  562.468729][T21995] Call Trace:
[  562.468737][T21995]  <TASK>
[  562.468745][T21995]  dump_stack_lvl+0xe8/0x150
[  562.468777][T21995]  should_fail_ex+0x412/0x560
[  562.468809][T21995]  _copy_from_user+0x2d/0xb0
[  562.468830][T21995]  bpf_test_init+0xd8/0x150
[  562.468854][T21995]  bpf_prog_test_run_skb+0x36f/0x1c90
[  562.468886][T21995]  ? __fget_files+0x2a/0x420
[  562.468913][T21995]  ? __fget_files+0x3a0/0x420
[  562.468940][T21995]  ? __fget_files+0x2a/0x420
[  562.468972][T21995]  ? __pfx_bpf_prog_test_run_skb+0x10/0x10
[  562.468993][T21995]  bpf_prog_test_run+0x2c7/0x340
[  562.469017][T21995]  __sys_bpf+0x643/0x950
[  562.469038][T21995]  ? __pfx___sys_bpf+0x10/0x10
[  562.469071][T21995]  ? ksys_write+0x242/0x270
[  562.469095][T21995]  ? __pfx_ksys_write+0x10/0x10
[  562.469123][T21995]  __x64_sys_bpf+0x7c/0x90
[  562.469151][T21995]  do_syscall_64+0x14d/0xf80
[  562.469177][T21995]  ? trace_irq_disable+0x3b/0x150
[  562.469193][T21995]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  562.469212][T21995]  ? clear_bhb_loop+0x40/0x90
[  562.469236][T21995]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  562.469254][T21995] RIP: 0033:0x7fc82db9c819
[  562.469273][T21995] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  562.469290][T21995] RSP: 002b:00007fc82ea6a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  562.469322][T21995] RAX: ffffffffffffffda RBX: 00007fc82de15fa0 RCX: 00007fc82db9c819
[  562.469335][T21995] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000000a
[  562.469347][T21995] RBP: 00007fc82ea6a090 R08: 0000000000000000 R09: 0000000000000000
[  562.469358][T21995] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  562.469369][T21995] R13: 00007fc82de16038 R14: 00007fc82de15fa0 R15: 00007ffe9b5a8278
[  562.469401][T21995]  </TASK>
[  562.811645][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  562.952489][T22001] netlink: 'syz.3.4008': attribute type 13 has an invalid length.
[  563.086447][ T6141] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  563.270104][ T9140] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  563.376156][T21953] tipc: Disabling bearer <eth:syzkaller0>
[  563.394855][T21979] : entered promiscuous mode
[  563.418496][   T24] tipc: Node number set to 2651690773
[  563.587361][T22008] netlink: 'syz.4.4010': attribute type 1 has an invalid length.
[  563.590020][T22011] macvtap0: entered promiscuous mode
[  563.684311][T22008] bond2: entered promiscuous mode
[  563.701201][T22008] 8021q: adding VLAN 0 to HW filter on device bond2
[  563.726852][T22010] macvtap0: left promiscuous mode
[  563.836099][T22013] bond2: (slave bridge2): making interface the new active one
[  563.850273][T22013] bridge2: entered promiscuous mode
[  563.857056][T22026] netlink: 'syz.2.4014': attribute type 1 has an invalid length.
[  563.868327][T22013] bond2: (slave bridge2): Enslaving as an active interface with an up link
[  563.965894][T22026] 8021q: adding VLAN 0 to HW filter on device bond5
[  563.986891][T22030] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4015'.
[  564.011272][T22030] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4015'.
[  564.024152][T22030] netlink: 'syz.1.4015': attribute type 18 has an invalid length.
[  564.033160][T22026] netlink: 14 bytes leftover after parsing attributes in process `syz.2.4014'.
[  564.049230][T22024] bond5: (slave veth9): Enslaving as an active interface with a down link
[  564.101126][T22031] bond3: (slave dummy0): Releasing active interface
[  564.216857][T22043] FAULT_INJECTION: forcing a failure.
[  564.216857][T22043] name failslab, interval 1, probability 0, space 0, times 0
[  564.228703][T22044] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4014'.
[  564.240938][T22031] bond5: (slave dummy0): making interface the new active one
[  564.241630][T22045] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4016'.
[  564.258957][T22043] CPU: 1 UID: 0 PID: 22043 Comm: syz.0.4017 Not tainted syzkaller #0 PREEMPT(full) 
[  564.258985][T22043] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  564.258997][T22043] Call Trace:
[  564.259005][T22043]  <TASK>
[  564.259013][T22043]  dump_stack_lvl+0xe8/0x150
[  564.259046][T22043]  should_fail_ex+0x412/0x560
[  564.259080][T22043]  should_failslab+0xa8/0x100
[  564.259106][T22043]  __kmalloc_noprof+0xe8/0x760
[  564.259129][T22043]  ? sk_prot_alloc+0xe7/0x210
[  564.259158][T22043]  sk_prot_alloc+0xe7/0x210
[  564.259179][T22043]  ? sk_alloc+0x27/0x390
[  564.259204][T22043]  sk_alloc+0x3a/0x390
[  564.259230][T22043]  bpf_prog_test_run_skb+0x3ed/0x1c90
[  564.259265][T22043]  ? __fget_files+0x2a/0x420
[  564.259291][T22043]  ? __fget_files+0x3a0/0x420
[  564.259315][T22043]  ? __fget_files+0x2a/0x420
[  564.259347][T22043]  ? __pfx_bpf_prog_test_run_skb+0x10/0x10
[  564.259368][T22043]  bpf_prog_test_run+0x2c7/0x340
[  564.259393][T22043]  __sys_bpf+0x643/0x950
[  564.259413][T22043]  ? __pfx___sys_bpf+0x10/0x10
[  564.259460][T22043]  ? ksys_write+0x242/0x270
[  564.259489][T22043]  ? __pfx_ksys_write+0x10/0x10
[  564.259519][T22043]  __x64_sys_bpf+0x7c/0x90
[  564.259548][T22043]  do_syscall_64+0x14d/0xf80
[  564.259576][T22043]  ? trace_irq_disable+0x3b/0x150
[  564.259593][T22043]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  564.259612][T22043]  ? clear_bhb_loop+0x40/0x90
[  564.259635][T22043]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  564.259655][T22043] RIP: 0033:0x7f964f99c819
[  564.259674][T22043] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  564.259690][T22043] RSP: 002b:00007f965086e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  564.259712][T22043] RAX: ffffffffffffffda RBX: 00007f964fc15fa0 RCX: 00007f964f99c819
[  564.259726][T22043] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000000a
[  564.259738][T22043] RBP: 00007f965086e090 R08: 0000000000000000 R09: 0000000000000000
[  564.259750][T22043] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  564.259761][T22043] R13: 00007f964fc16038 R14: 00007f964fc15fa0 R15: 00007ffe6bbfd188
[  564.259792][T22043]  </TASK>
[  564.515427][T22031] dummy0: entered promiscuous mode
[  564.529113][T22031] bond5: (slave dummy0): Enslaving as an active interface with an up link
[  564.587813][T22026] bond5: (slave dummy0): Releasing active interface
[  564.594582][T22026] dummy0 (unregistering): left promiscuous mode
[  565.156405][T22064] vlan0: entered promiscuous mode
[  565.170606][T22064] bridge0: entered promiscuous mode
[  565.412841][T22077] netlink: 124 bytes leftover after parsing attributes in process `syz.0.4028'.
[  565.439686][    C0] bridge0: port 2(bridge_slave_1) entered forwarding state
[  565.447373][    C0] bridge0: topology change detected, propagating
[  565.454455][    C0] bridge0: port 1(bridge_slave_0) entered forwarding state
[  565.456776][T22077] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  565.461919][    C0] bridge0: topology change detected, propagating
[  565.488710][T22087] FAULT_INJECTION: forcing a failure.
[  565.488710][T22087] name failslab, interval 1, probability 0, space 0, times 0
[  565.501950][T22083] vlan1: entered promiscuous mode
[  565.514684][T22087] CPU: 1 UID: 0 PID: 22087 Comm: syz.3.4029 Not tainted syzkaller #0 PREEMPT(full) 
[  565.514714][T22087] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  565.514726][T22087] Call Trace:
[  565.514734][T22087]  <TASK>
[  565.514743][T22087]  dump_stack_lvl+0xe8/0x150
[  565.514775][T22087]  should_fail_ex+0x412/0x560
[  565.514820][T22087]  should_failslab+0xa8/0x100
[  565.514846][T22087]  __kmalloc_noprof+0xe8/0x760
[  565.514869][T22087]  ? security_sk_alloc+0x52/0x360
[  565.514896][T22087]  security_sk_alloc+0x52/0x360
[  565.514921][T22087]  sk_prot_alloc+0x101/0x210
[  565.514944][T22087]  ? sk_alloc+0x27/0x390
[  565.514970][T22087]  sk_alloc+0x3a/0x390
[  565.514999][T22087]  bpf_prog_test_run_skb+0x3ed/0x1c90
[  565.515036][T22087]  ? __fget_files+0x2a/0x420
[  565.515065][T22087]  ? __fget_files+0x3a0/0x420
[  565.515093][T22087]  ? __fget_files+0x2a/0x420
[  565.515127][T22087]  ? __pfx_bpf_prog_test_run_skb+0x10/0x10
[  565.515150][T22087]  bpf_prog_test_run+0x2c7/0x340
[  565.515176][T22087]  __sys_bpf+0x643/0x950
[  565.515197][T22087]  ? __pfx___sys_bpf+0x10/0x10
[  565.515232][T22087]  ? ksys_write+0x242/0x270
[  565.515257][T22087]  ? __pfx_ksys_write+0x10/0x10
[  565.515288][T22087]  __x64_sys_bpf+0x7c/0x90
[  565.515318][T22087]  do_syscall_64+0x14d/0xf80
[  565.515346][T22087]  ? trace_irq_disable+0x3b/0x150
[  565.515363][T22087]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  565.515384][T22087]  ? clear_bhb_loop+0x40/0x90
[  565.515409][T22087]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  565.515428][T22087] RIP: 0033:0x7fc82db9c819
[  565.515457][T22087] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  565.515475][T22087] RSP: 002b:00007fc82ea6a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  565.515498][T22087] RAX: ffffffffffffffda RBX: 00007fc82de15fa0 RCX: 00007fc82db9c819
[  565.515513][T22087] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000000a
[  565.515526][T22087] RBP: 00007fc82ea6a090 R08: 0000000000000000 R09: 0000000000000000
[  565.515539][T22087] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  565.515550][T22087] R13: 00007fc82de16038 R14: 00007fc82de15fa0 R15: 00007ffe9b5a8278
[  565.515583][T22087]  </TASK>
[  565.799714][    C1] net_ratelimit: 8 callbacks suppressed
[  565.799738][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  565.887310][  T143] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  565.949522][T22105] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  565.960297][T22105] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  566.042888][T22110] netlink: 'syz.1.4039': attribute type 39 has an invalid length.
[  566.058318][T22101] netlink: 56 bytes leftover after parsing attributes in process `syz.2.4033'.
[  566.072714][T22101] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4033'.
[  566.374099][T22134] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4044'.
[  566.399768][T22134] openvswitch: netlink: Flow actions attr not present in new flow.
[  566.469076][T22132] x_tables: duplicate underflow at hook 1
[  566.573413][T22141] delete_channel: no stack
[  566.602075][T22143] netlink: 'syz.4.4048': attribute type 1 has an invalid length.
[  566.766729][T22150] netlink: 'syz.0.4050': attribute type 1 has an invalid length.
[  566.780167][   T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  566.788631][T22147] bond3: (slave bridge3): making interface the new active one
[  566.800786][T22147] bond3: (slave bridge3): Enslaving as an active interface with an up link
[  566.839378][T22153] bond5: entered allmulticast mode
[  566.845467][T22153] 8021q: adding VLAN 0 to HW filter on device bond5
[  566.879953][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  566.899238][T22157] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4050'.
[  566.918351][T22150] 8021q: adding VLAN 0 to HW filter on device bond5
[  566.937718][T22157] bond5 (unregistering): Released all slaves
[  567.000114][ T6139] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  567.390762][T22180] FAULT_INJECTION: forcing a failure.
[  567.390762][T22180] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  567.404177][T22180] CPU: 1 UID: 0 PID: 22180 Comm: syz.4.4058 Not tainted syzkaller #0 PREEMPT(full) 
[  567.404207][T22180] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  567.404218][T22180] Call Trace:
[  567.404227][T22180]  <TASK>
[  567.404235][T22180]  dump_stack_lvl+0xe8/0x150
[  567.404272][T22180]  should_fail_ex+0x412/0x560
[  567.404307][T22180]  _copy_to_user+0x31/0xb0
[  567.404334][T22180]  bpf_test_finish+0x1db/0x6b0
[  567.404360][T22180]  ? trace_kmem_cache_alloc+0x29/0xf0
[  567.404381][T22180]  ? slab_build_skb+0x52/0x410
[  567.404407][T22180]  ? __pfx_bpf_test_finish+0x10/0x10
[  567.404428][T22180]  ? eth_type_trans+0x35e/0x6d0
[  567.404467][T22180]  bpf_prog_test_run_skb+0x10c6/0x1c90
[  567.404514][T22180]  ? __fget_files+0x2a/0x420
[  567.404544][T22180]  ? __fget_files+0x3a0/0x420
[  567.404573][T22180]  ? __fget_files+0x2a/0x420
[  567.404607][T22180]  ? __pfx_bpf_prog_test_run_skb+0x10/0x10
[  567.404631][T22180]  bpf_prog_test_run+0x2c7/0x340
[  567.404658][T22180]  __sys_bpf+0x643/0x950
[  567.404680][T22180]  ? __pfx___sys_bpf+0x10/0x10
[  567.404716][T22180]  ? ksys_write+0x242/0x270
[  567.404742][T22180]  ? __pfx_ksys_write+0x10/0x10
[  567.404773][T22180]  __x64_sys_bpf+0x7c/0x90
[  567.404803][T22180]  do_syscall_64+0x14d/0xf80
[  567.404832][T22180]  ? trace_irq_disable+0x3b/0x150
[  567.404850][T22180]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  567.404871][T22180]  ? clear_bhb_loop+0x40/0x90
[  567.404897][T22180]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  567.404917][T22180] RIP: 0033:0x7f591679c819
[  567.404937][T22180] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  567.404954][T22180] RSP: 002b:00007f5917711028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  567.404977][T22180] RAX: ffffffffffffffda RBX: 00007f5916a15fa0 RCX: 00007f591679c819
[  567.404993][T22180] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000000a
[  567.405006][T22180] RBP: 00007f5917711090 R08: 0000000000000000 R09: 0000000000000000
[  567.405019][T22180] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  567.405031][T22180] R13: 00007f5916a16038 R14: 00007f5916a15fa0 R15: 00007ffd22af9458
[  567.405065][T22180]  </TASK>
[  567.880183][T22199] sch_fq: defrate 4294967293 ignored.
[  567.919693][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  568.012092][   T25] block nbd3: Possible stuck request ffff888027108000: control (read@0,1024B). Runtime 90 seconds
[  568.022887][   T25] block nbd3: Possible stuck request ffff888027108200: control (read@1024,1024B). Runtime 90 seconds
[  568.034178][   T25] block nbd3: Possible stuck request ffff888027108400: control (read@2048,1024B). Runtime 90 seconds
[  568.045342][   T25] block nbd3: Possible stuck request ffff888027108600: control (read@3072,1024B). Runtime 90 seconds
[  568.253776][ T6139] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  568.415829][T22194] wg1 speed is unknown, defaulting to 1000
[  568.473076][ T9140] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  568.632820][T22217] xt_cgroup: path and classid specified
[  568.938324][T22229] FAULT_INJECTION: forcing a failure.
[  568.938324][T22229] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  568.995194][T22229] CPU: 0 UID: 0 PID: 22229 Comm: syz.4.4073 Not tainted syzkaller #0 PREEMPT(full) 
[  568.995225][T22229] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  568.995237][T22229] Call Trace:
[  568.995245][T22229]  <TASK>
[  568.995254][T22229]  dump_stack_lvl+0xe8/0x150
[  568.995288][T22229]  should_fail_ex+0x412/0x560
[  568.995324][T22229]  _copy_to_user+0x31/0xb0
[  568.995348][T22229]  bpf_test_finish+0x22c/0x6b0
[  568.995375][T22229]  ? trace_kmem_cache_alloc+0x29/0xf0
[  568.995396][T22229]  ? slab_build_skb+0x52/0x410
[  568.995421][T22229]  ? __pfx_bpf_test_finish+0x10/0x10
[  568.995449][T22229]  ? eth_type_trans+0x35e/0x6d0
[  568.995488][T22229]  bpf_prog_test_run_skb+0x10c6/0x1c90
[  568.995526][T22229]  ? __fget_files+0x2a/0x420
[  568.995554][T22229]  ? __fget_files+0x3a0/0x420
[  568.995582][T22229]  ? __fget_files+0x2a/0x420
[  568.995617][T22229]  ? __pfx_bpf_prog_test_run_skb+0x10/0x10
[  568.995640][T22229]  bpf_prog_test_run+0x2c7/0x340
[  568.995666][T22229]  __sys_bpf+0x643/0x950
[  568.995689][T22229]  ? __pfx___sys_bpf+0x10/0x10
[  568.995725][T22229]  ? ksys_write+0x242/0x270
[  568.995751][T22229]  ? __pfx_ksys_write+0x10/0x10
[  568.995781][T22229]  __x64_sys_bpf+0x7c/0x90
[  568.995811][T22229]  do_syscall_64+0x14d/0xf80
[  568.995839][T22229]  ? trace_irq_disable+0x3b/0x150
[  568.995856][T22229]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  568.995877][T22229]  ? clear_bhb_loop+0x40/0x90
[  568.995903][T22229]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  568.995922][T22229] RIP: 0033:0x7f591679c819
[  568.995941][T22229] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  568.995957][T22229] RSP: 002b:00007f5917711028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  568.995980][T22229] RAX: ffffffffffffffda RBX: 00007f5916a15fa0 RCX: 00007f591679c819
[  568.995994][T22229] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000000a
[  568.996007][T22229] RBP: 00007f5917711090 R08: 0000000000000000 R09: 0000000000000000
[  568.996020][T22229] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  568.996032][T22229] R13: 00007f5916a16038 R14: 00007f5916a15fa0 R15: 00007ffd22af9458
[  568.996065][T22229]  </TASK>
[  569.280524][   T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  569.901336][T22254] bridge_slave_1: left allmulticast mode
[  569.907354][T22254] bridge_slave_1: left promiscuous mode
[  569.913828][T22254] bridge0: port 2(bridge_slave_1) entered disabled state
[  570.011364][T22255] __nla_validate_parse: 2 callbacks suppressed
[  570.011385][T22255] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4079'.
[  570.095045][T22254] bridge_slave_0: left allmulticast mode
[  570.139684][T22254] bridge_slave_0: left promiscuous mode
[  570.151094][T22257] netlink: 56 bytes leftover after parsing attributes in process `syz.4.4081'.
[  570.159961][T22254] bridge0: port 1(bridge_slave_0) entered disabled state
[  570.406586][T22219] wg1 speed is unknown, defaulting to 1000
[  570.527551][T22266] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.4083'.
[  570.722955][T22221] Bluetooth: hci3: command 0x0406 tx timeout
[  570.729175][T22220] Bluetooth: hci1: command 0x0406 tx timeout
[  570.819691][    C1] net_ratelimit: 4 callbacks suppressed
[  570.819713][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  570.939843][ T9140] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  571.348462][T22297] netlink: 'syz.0.4087': attribute type 11 has an invalid length.
[  571.399638][T22297] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4087'.
[  571.664623][T22309] gretap0: left allmulticast mode
[  571.700030][T22309] gretap0: left promiscuous mode
[  571.720305][T22309] bridge0: port 3(gretap0) entered disabled state
[  571.773097][T22309] batman_adv: batadv0: Interface deactivated: dummy0
[  571.780272][T22309] batman_adv: batadv0: Removing interface: dummy0
[  571.808777][T22309] bridge_slave_0: left allmulticast mode
[  571.815073][ T9140] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  571.824050][T22309] bridge_slave_0: left promiscuous mode
[  571.839687][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  571.870876][T22309] bridge0: port 1(bridge_slave_0) entered disabled state
[  571.884182][T22317] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4089'.
[  571.922383][T22309] bridge_slave_1: left allmulticast mode
[  571.928830][T22309] bridge_slave_1: left promiscuous mode
[  571.946820][T22309] bridge0: port 2(bridge_slave_1) entered disabled state
[  572.026191][T22309] bond0: (slave bond_slave_0): Releasing backup interface
[  572.050400][T22309] bond0: (slave bond_slave_1): Releasing backup interface
[  572.067526][T22309] team_slave_0: left promiscuous mode
[  572.073922][ T9125] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  572.116382][T22309] team0: Port device team_slave_0 removed
[  572.123576][T22309] team_slave_1: left promiscuous mode
[  572.161903][T22309] team0: Port device team_slave_1 removed
[  572.181188][T22309] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  572.205751][T22309] batman_adv: batadv0: Removing interface: batadv_slave_0
[  572.237677][T22309] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  572.245602][T22309] batman_adv: batadv0: Removing interface: batadv_slave_1
[  572.299746][T22309] bond4: (slave veth3): Releasing active interface
[  572.442380][T22252] wg1 speed is unknown, defaulting to 1000
[  572.776040][T22336] netlink: 'syz.0.4096': attribute type 10 has an invalid length.
[  572.879732][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  572.960701][   T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  573.180064][ T6139] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  573.201058][T22330] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4093'.
[  573.205977][T22327] wg1 speed is unknown, defaulting to 1000
[  573.251796][T22345] netlink: 51 bytes leftover after parsing attributes in process `syz.2.4100'.
[  573.308287][T22330] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  573.671150][T22351] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4102'.
[  573.728741][T22356] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4104'.
[  574.091904][ T9140] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  574.141480][T22365] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.4107'.
[  574.201628][T22368] netlink: 'syz.1.4108': attribute type 1 has an invalid length.
[  574.209439][T22368] netlink: 'syz.1.4108': attribute type 1 has an invalid length.
[  574.248685][T22365] IPVS: ip_vs_edit_dest(): server weight less than zero
[  574.273585][T22368] syzkaller1: entered promiscuous mode
[  574.294265][ T5908] IPVS: starting estimator thread 0...
[  574.309794][T22368] syzkaller1: entered allmulticast mode
[  574.414849][T22373] IPVS: using max 25 ests per chain, 60000 per kthread
[  574.417592][T22379] netlink: 'syz.2.4109': attribute type 21 has an invalid length.
[  574.537249][T22383] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR
[  574.689984][T22392] netlink: 'syz.1.4114': attribute type 9 has an invalid length.
[  574.711264][T22392] netlink: 'syz.1.4114': attribute type 6 has an invalid length.
[  574.961228][T22395] syz_tun: entered promiscuous mode
[  574.980282][T22395] syz_tun: entered allmulticast mode
[  575.292077][T22428] __nla_validate_parse: 5 callbacks suppressed
[  575.292096][T22428] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4125'.
[  575.332593][T22428] bond0: entered promiscuous mode
[  575.351396][T22428] bond0: left promiscuous mode
[  575.442082][T22429] bond5: option arp_all_targets: invalid value (129)
[  575.453178][T22429] bond5 (unregistering): Released all slaves
[  575.548748][T22437] bridge_slave_0: left allmulticast mode
[  575.580086][T22437] bridge_slave_0: left promiscuous mode
[  575.591782][T22437] bridge0: port 1(bridge_slave_0) entered disabled state
[  575.623383][T22437] bridge_slave_1: left allmulticast mode
[  575.629176][T22437] bridge_slave_1: left promiscuous mode
[  575.635765][T22437] bridge0: port 2(bridge_slave_1) entered disabled state
[  575.660694][T22437] bond0: (slave bond_slave_0): Releasing backup interface
[  575.684175][T22437] bond0: (slave bond_slave_1): Releasing backup interface
[  575.730660][T22437] team0: Port device team_slave_0 removed
[  575.751799][T22437] team0: Port device team_slave_1 removed
[  575.758779][T22437] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  575.767280][T22437] batman_adv: batadv0: Removing interface: batadv_slave_0
[  575.783081][T22437] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  575.801156][T22437] batman_adv: batadv0: Removing interface: batadv_slave_1
[  575.823682][T11567] wg1 speed is unknown, defaulting to 1000
[  575.832259][T22453] tipc: MTU too low for tipc bearer
[  575.859687][    C1] net_ratelimit: 7 callbacks suppressed
[  575.859711][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  575.997201][T22459] bond5: option updelay: invalid value (18446744072924056005)
[  576.005991][T22459] bond5: option updelay: allowed values 0 - 2147483647
[  576.015650][T22459] bond5 (unregistering): Released all slaves
[  576.106466][T22469] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  576.115919][T22469] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4135'.
[  576.370177][   T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  576.395531][T22480] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4138'.
[  576.561501][  T143] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  576.858949][T22505] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4145'.
[  576.879726][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  577.186469][T22478] wg1 speed is unknown, defaulting to 1000
[  577.293038][T22529] dvmrp1: entered allmulticast mode
[  577.341414][T22529] dvmrp1: left allmulticast mode
[  577.470488][ T6141] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  577.690158][   T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  577.919683][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  578.222215][T22481] wg1 speed is unknown, defaulting to 1000
[  578.490986][T22569] syz_tun: entered promiscuous mode
[  578.498541][T22569] macvtap1: entered promiscuous mode
[  578.523025][T22569] syz_tun: left promiscuous mode
[  578.621166][ T9140] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  578.644882][T22568] syz_tun: entered promiscuous mode
[  578.651869][T22568] macvtap1: entered promiscuous mode
[  578.661258][T22568] syz_tun: left promiscuous mode
[  578.850564][ T6141] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  578.880864][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  579.351718][T22602] netlink: 5 bytes leftover after parsing attributes in process `syz.4.4172'.
[  579.450639][T22602] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4172'.
[  579.688169][T22614] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4176'.
[  579.697290][T22577] wg1 speed is unknown, defaulting to 1000
[  579.711178][T22616] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4175'.
[  579.843176][T22618] batman_adv: batadv0: Removing interface: batadv_slave_0
[  579.864027][T22625] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4179'.
[  579.912807][T22625] 8021q: VLANs not supported on ip_vti0
[  580.260789][T22636] tap0: tun_chr_ioctl cmd 2151700607
[  580.276848][T22636] tap0: tun_chr_ioctl cmd 1074025677
[  580.282598][T22636] tap0: linktype set to 778
[  580.357524][T22644] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  580.422371][T22646] syzkaller0: entered promiscuous mode
[  580.429405][T22646] syzkaller0: entered allmulticast mode
[  580.444356][T22644] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4185'.
[  580.499330][T22644] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4185'.
[  580.508991][T22644] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4185'.
[  580.751714][T22664] netlink: 76 bytes leftover after parsing attributes in process `syz.4.4190'.
[  580.884749][T22676] netlink: 'syz.4.4196': attribute type 1 has an invalid length.
[  580.895408][  T143] net_ratelimit: 5 callbacks suppressed
[  580.895428][  T143] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  580.909716][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  580.921962][T22674] RDS: rds_bind could not find a transport for fe80::3d, load rds_tcp or rds_rdma?
[  581.130718][  T143] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  581.171494][T22696] Cannot find add_set index 3 as target
[  581.210840][T22697] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4200'.
[  581.259063][T22697] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4200'.
[  581.396237][T22705] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4205'.
[  581.683159][T22724] netlink: 'syz.0.4211': attribute type 2 has an invalid length.
[  581.863101][T22736] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4215'.
[  581.904833][  T143] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  581.913944][T22736] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4215'.
[  581.924350][  T143] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  581.929690][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  581.945183][  T143] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  581.967177][T22740] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4217'.
[  581.977853][  T143] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  582.001460][T22740] bond0: Unable to set up delay as MII monitoring is disabled
[  582.053987][T22742] netlink: 'syz.2.4218': attribute type 3 has an invalid length.
[  582.082843][ T6139] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  582.225247][T22759] netlink: 'syz.3.4222': attribute type 10 has an invalid length.
[  582.277939][T22759] bond3: (slave ªªªªª&): Releasing active interface
[  582.290561][ T9140] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  582.389913][T22759] ªªªªª&: entered promiscuous mode
[  582.396561][T22759] team0: Port device ªªªªª& added
[  582.423776][T22761] IPVS: persistence engine module ip_vs_pe_… not found
[  582.492784][T22765] ip6gre1: entered promiscuous mode
[  582.498067][T22765] ip6gre1: entered allmulticast mode
[  582.738251][T22778] SET target dimension over the limit!
[  582.897255][T22782] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2
[  582.959683][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  583.318374][T22785] netlink: 'syz.2.4229': attribute type 1 has an invalid length.
[  583.326810][T22785] netlink: 'syz.2.4229': attribute type 2 has an invalid length.
[  583.369597][T22785] netlink: 'syz.2.4229': attribute type 1 has an invalid length.
[  583.410532][T22785] netlink: 'syz.2.4229': attribute type 3 has an invalid length.
[  583.489923][ T6141] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  583.693514][T22786] bridge0: port 1(bridge_slave_0) entered disabled state
[  583.701103][ T9125] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  583.948769][T22786] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  583.988984][T22786] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  584.341938][T22786] netdevsim netdevsim1 netdevsim0: left allmulticast mode
[  584.507913][ T6139] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  584.532781][ T6139] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  584.564528][ T6139] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  584.605219][ T6139] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  584.615333][ T9140] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  584.864507][T22813] netlink: 'syz.2.4235': attribute type 1 has an invalid length.
[  584.893425][T22815] netlink: 'syz.4.4237': attribute type 12 has an invalid length.
[  584.962663][T22815] syzkaller0: entered promiscuous mode
[  584.979619][T22815] syzkaller0: entered allmulticast mode
[  585.112071][T22820] syzkaller1: entered promiscuous mode
[  585.128173][T22820] syzkaller1: entered allmulticast mode
[  585.307711][T22822] batadv1: entered promiscuous mode
[  585.371381][T22827] x_tables: duplicate underflow at hook 3
[  585.725466][T22808] wg1 speed is unknown, defaulting to 1000
[  585.766511][T22839] __nla_validate_parse: 11 callbacks suppressed
[  585.766533][T22839] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4243'.
[  585.939707][    C1] net_ratelimit: 4 callbacks suppressed
[  585.939730][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  585.955091][ T9125] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  586.136425][T22852] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4246'.
[  586.431797][T22861] netlink: 312 bytes leftover after parsing attributes in process `syz.1.4250'.
[  586.452590][T22859] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  586.477678][T22852] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4246'.
[  586.493727][T22859] netlink: 428 bytes leftover after parsing attributes in process `syz.0.4249'.
[  586.506531][T22861] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  586.559342][T22852] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4246'.
[  586.573139][T22859] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4249'.
[  586.644404][T22852] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4246'.
[  586.674303][T22852] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4246'.
[  586.696834][T22852] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4246'.
[  586.851046][   T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  586.894937][T22866] nbd: socks must be embedded in a SOCK_ITEM attr
[  586.919791][T22868] nbd: nbd64 already in use
[  586.934961][T17420] block nbd64: NBD_DISCONNECT
[  586.969702][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  586.981676][T22872] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  587.057604][   T29] audit: type=1800 audit(1775091944.811:5): pid=22875 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.4254" name="e" dev="tmpfs" ino=1298 res=0 errno=0
[  587.090193][  T143] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  587.347440][T17407] udevd[17407]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory
[  587.470578][T22888] sctp: [Deprecated]: syz.0.4257 (pid 22888) Use of int in max_burst socket option.
[  587.470578][T22888] Use struct sctp_assoc_value instead
[  587.747941][T22903] bridge0: port 3(vlan3) entered blocking state
[  587.799846][T22903] bridge0: port 3(vlan3) entered disabled state
[  587.806575][T22903] vlan3: entered allmulticast mode
[  587.862041][T22903] geneve0: entered allmulticast mode
[  587.908575][T22903] vlan3: entered promiscuous mode
[  587.947628][T22903] geneve0: entered promiscuous mode
[  587.980523][ T9125] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  587.996822][T17407] udevd[17407]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory
[  588.006931][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  588.102191][T17407] udevd[17407]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory
[  588.561122][ T5835] Bluetooth: hci4: command 0x0405 tx timeout
[  588.860438][T22941] vlan2: entered promiscuous mode
[  588.867855][T22941] geneve1: entered promiscuous mode
[  588.902019][T22941] vlan2: entered allmulticast mode
[  588.909326][T22941] geneve1: entered allmulticast mode
[  588.991080][T22943] veth0_vlan: entered allmulticast mode
[  589.163630][T22953] dummy0: entered allmulticast mode
[  589.211137][T22959] syzkaller0: entered promiscuous mode
[  589.216801][T22959] syzkaller0: entered allmulticast mode
[  590.326007][T23003] netlink: 'syz.1.4294': attribute type 11 has an invalid length.
[  590.777976][T23032] __nla_validate_parse: 66 callbacks suppressed
[  590.777998][T23032] netlink: 64 bytes leftover after parsing attributes in process `syz.3.4299'.
[  590.867935][T23017] 8021q: adding VLAN 0 to HW filter on device bond7
[  590.904227][T23017] team0: Port device bond7 added
[  590.959234][T23038] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22
[  590.978924][T23038] netdevsim netdevsim2: Direct firmware load for . failed with error -22
[  590.987735][    C1] net_ratelimit: 7 callbacks suppressed
[  590.987755][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  591.046804][ T6139] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  591.055457][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  591.107722][T23038] netdevsim netdevsim2: Falling back to sysfs fallback for: .
[  591.178024][T23040] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  591.206839][ T5831] Bluetooth: hci0: command 0x080f tx timeout
[  591.219051][T23044] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  591.500208][   T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  591.550778][  T143] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  591.582540][T23061] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4308'.
[  591.593306][T23062] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4308'.
[  591.770606][T23066] x_tables: duplicate underflow at hook 1
[  591.937543][T23077] vlan3: entered promiscuous mode
[  591.949317][T23077] bridge0: entered promiscuous mode
[  591.999670][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  592.086752][ T6139] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  592.095841][ T6139] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  592.110102][T11567] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  592.137029][T23086] validate_nla: 1 callbacks suppressed
[  592.137051][T23086] netlink: 'syz.4.4317': attribute type 5 has an invalid length.
[  592.203195][T11567] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  592.242388][T23091] netlink: 165 bytes leftover after parsing attributes in process `syz.3.4320'.
[  592.390620][   T10] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  592.620672][   T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  592.677938][   T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  592.796035][T23122] netlink: 'syz.2.4330': attribute type 4 has an invalid length.
[  592.860522][T23130] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4328'.
[  592.993928][T23131] netlink: 'syz.1.4332': attribute type 4 has an invalid length.
[  593.727475][T23142] syzkaller0: entered promiscuous mode
[  593.737911][T23142] syzkaller0: entered allmulticast mode
[  593.889867][T23160] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4335'.
[  594.572048][T23188] netlink: 'syz.0.4342': attribute type 8 has an invalid length.
[  595.843889][    C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  596.039705][    C1] net_ratelimit: 5 callbacks suppressed
[  596.039730][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  596.054236][ T9125] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  596.062618][   T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  596.471622][T23199] netlink: 'syz.0.4345': attribute type 1 has an invalid length.
[  596.527280][T23199] IPVS: set_ctl: invalid protocol: 131 255.255.255.255:20002
[  596.552241][T23202] xt_policy: too many policy elements
[  596.600220][T23210] netlink: 404 bytes leftover after parsing attributes in process `syz.4.4349'.
[  596.629991][T23210] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4349'.
[  596.702882][T23210] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4349'.
[  596.722630][T23210] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4349'.
[  597.039686][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  597.042181][T23237] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4353'.
[  597.057900][T23239] netlink: 'syz.0.4355': attribute type 1 has an invalid length.
[  597.136129][T23239] 8021q: adding VLAN 0 to HW filter on device bond5
[  597.191593][ T9125] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  597.201054][  T143] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  597.242201][T23239] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4355'.
[  597.266422][T23244] vlan3: entered promiscuous mode
[  597.280202][T23244] bond5: entered promiscuous mode
[  597.290603][T23244] vlan3: entered allmulticast mode
[  597.313831][T23244] bond5: entered allmulticast mode
[  597.396242][T23239] 8021q: adding VLAN 0 to HW filter on device batadv1
[  597.425259][T23239] bond5: (slave batadv1): making interface the new active one
[  597.479711][T23239] batadv1: entered promiscuous mode
[  597.485372][T23239] batadv1: entered allmulticast mode
[  597.531499][T23239] bond5: (slave batadv1): Enslaving as an active interface with an up link
[  597.553327][T23259] netlink: 56 bytes leftover after parsing attributes in process `syz.3.4359'.
[  597.786098][T23250] xt_CT: No such helper "syz1"
[  597.854037][T23274] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4365'.
[  597.902822][T23273] netlink: 'syz.0.4364': attribute type 1 has an invalid length.
[  598.054371][T23276] bond6: (slave gretap3): making interface the new active one
[  598.063581][T23276] bond6: (slave gretap3): Enslaving as an active interface with an up link
[  598.079871][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  598.091386][   T25] block nbd3: Possible stuck request ffff888027108000: control (read@0,1024B). Runtime 120 seconds
[  598.103406][   T25] block nbd3: Possible stuck request ffff888027108200: control (read@1024,1024B). Runtime 120 seconds
[  598.115035][   T25] block nbd3: Possible stuck request ffff888027108400: control (read@2048,1024B). Runtime 120 seconds
[  598.126378][   T25] block nbd3: Possible stuck request ffff888027108600: control (read@3072,1024B). Runtime 120 seconds
[  598.310215][ T6139] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  598.320068][ T9133] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  598.353984][T23286] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4367'.
[  598.374567][T23286] netlink: 96 bytes leftover after parsing attributes in process `syz.0.4367'.
[  598.488348][T23263] wg1 speed is unknown, defaulting to 1000
[  598.774390][T23297] bond6: option lacp_rate: mode dependency failed, not supported in mode active-backup(1)
[  598.881626][T23297] bond6 (unregistering): Released all slaves
[  599.420309][   T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  599.472364][T23319] syzkaller0: entered promiscuous mode
[  599.489359][T23319] syzkaller0: entered allmulticast mode
[  600.830252][T23377] netlink: 'syz.1.4390': attribute type 1 has an invalid length.
[  600.948926][T23381] batadv_slave_1: entered promiscuous mode
[  601.010600][T23381] batadv_slave_1 (unregistering): left promiscuous mode
[  601.069684][    C1] net_ratelimit: 5 callbacks suppressed
[  601.069705][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  601.333753][ T5835] block nbd4: Receive control failed (result -1)
[  601.640073][ T6139] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  601.648673][ T6139] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  602.079681][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  602.101452][T23434] __nla_validate_parse: 8 callbacks suppressed
[  602.101472][T23434] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4404'.
[  602.140198][T23434] netem: incorrect ge model size
[  602.145293][T23434] netem: change failed
[  602.205750][T23432] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4404'.
[  602.301106][T23437] syzkaller0: entered promiscuous mode
[  602.306645][T23437] syzkaller0: entered allmulticast mode
[  602.312546][T23440] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4399'.
[  602.664668][T23450] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  602.753437][T23456] bridge5: entered promiscuous mode
[  602.758903][T23456] bridge5: entered allmulticast mode
[  602.766658][   T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  602.809723][ T6139] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  603.111566][T23472] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4415'.
[  603.120872][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  603.154925][T23473] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4415'.
[  603.194710][T23472] xt_hashlimit: size too large, truncated to 1048576
[  603.199729][    C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  603.345642][T23479] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4417'.
[  603.880700][   T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  603.949923][   T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  604.008882][T23498] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4412'.
[  604.018512][T23498] netlink: 47 bytes leftover after parsing attributes in process `syz.0.4412'.
[  604.034598][T23498] netlink: 'syz.0.4412': attribute type 6 has an invalid length.
[  604.070559][T23498] netlink: 47 bytes leftover after parsing attributes in process `syz.0.4412'.
[  604.170589][T23508] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4425'.
[  604.293602][T23514] bond4: entered allmulticast mode
[  604.394713][T23520] syzkaller1: entered promiscuous mode
[  604.425481][T23520] syzkaller1: entered allmulticast mode
[  604.488041][T23524] syz_tun: left promiscuous mode
[  604.504958][T23524] 8021q: adding VLAN 0 to HW filter on device bond0
[  604.513603][T23524] team0: left promiscuous mode
[  604.519769][T23527] netlink: 'syz.4.4431': attribute type 1 has an invalid length.
[  604.528778][T23524] team_slave_1: left promiscuous mode
[  604.534843][T23524] ªªªªª&: left promiscuous mode
[  604.563910][T23524] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  604.763584][ T6141] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  604.788908][ T6141] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  604.844959][ T6141] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  604.884533][ T6141] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  604.902182][T23536] netlink: 'syz.2.4434': attribute type 3 has an invalid length.
[  604.949709][T23536] block nbd0: NBD_DISCONNECT
[  604.965217][T23536] block nbd0: Send disconnect failed -32
[  604.981418][T23536] block nbd0: Send disconnect failed -32
[  605.703385][T23574] syzkaller0: entered promiscuous mode
[  605.709017][T23574] syzkaller0: entered allmulticast mode
[  605.880587][T23582] syzkaller0: entered promiscuous mode
[  605.886720][T23582] syzkaller0: entered allmulticast mode
[  606.099660][    C1] net_ratelimit: 4 callbacks suppressed
[  606.099682][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  606.130106][  T143] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  606.201704][ T9125] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  606.229656][T23576] wg1 speed is unknown, defaulting to 1000
[  606.413659][ T9133] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  606.423015][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  607.129700][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  607.250216][  T143] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  607.355201][ T6141] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  608.169683][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  608.391558][ T9125] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  608.525153][T23617] __nla_validate_parse: 9 callbacks suppressed
[  608.525176][T23617] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4460'.
[  608.785619][T23634] netlink: 64 bytes leftover after parsing attributes in process `syz.1.4463'.
[  609.142001][T23640] 
[  609.144409][T23640] ======================================================
[  609.151537][T23640] WARNING: possible circular locking dependency detected
[  609.158591][T23640] syzkaller #0 Not tainted
[  609.163108][T23640] ------------------------------------------------------
[  609.170151][T23640] syz.0.4467/23640 is trying to acquire lock:
[  609.176241][T23640] ffffffff8e883780 (fs_reclaim){+.+.}-{0:0}, at: __kmalloc_cache_noprof+0x40/0x660
[  609.186074][T23640] 
[  609.186074][T23640] but task is already holding lock:
[  609.193640][T23640] ffff88803663b860 (k-sk_lock-AF_INET6){+.+.}-{0:0}, at: inet_stream_connect+0x51/0xa0
[  609.203432][T23640] 
[  609.203432][T23640] which lock already depends on the new lock.
[  609.203432][T23640] 
[  609.214533][T23640] 
[  609.214533][T23640] the existing dependency chain (in reverse order) is:
[  609.223758][T23640] 
[  609.223758][T23640] -> #7 (k-sk_lock-AF_INET6){+.+.}-{0:0}:
[  609.231769][T23640]        lock_sock_nested+0x41/0x100
[  609.237107][T23640]        __inet6_bind+0x30c/0xf60
[  609.242160][T23640]        mptcp_bind+0x110/0x1d0
[  609.247030][T23640]        __sys_bind+0x2e3/0x410
[  609.251977][T23640]        __x64_sys_bind+0x7a/0x90
[  609.257002][T23640]        do_syscall_64+0x14d/0xf80
[  609.262207][T23640]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  609.268638][T23640] 
[  609.268638][T23640] -> #6 (sk_lock-AF_INET6){+.+.}-{0:0}:
[  609.276488][T23640]        lock_sock_nested+0x41/0x100
[  609.282015][T23640]        inet_shutdown+0x6a/0x390
[  609.287046][T23640]        nbd_mark_nsock_dead+0x2e9/0x560
[  609.292687][T23640]        recv_work+0x1c7f/0x1d90
[  609.297637][T23640]        process_scheduled_works+0xb6e/0x18c0
[  609.303802][T23640]        worker_thread+0xa53/0xfc0
[  609.309120][T23640]        kthread+0x388/0x470
[  609.313721][T23640]        ret_from_fork+0x51e/0xb90
[  609.318862][T23640]        ret_from_fork_asm+0x1a/0x30
[  609.324246][T23640] 
[  609.324246][T23640] -> #5 (&nsock->tx_lock){+.+.}-{4:4}:
[  609.332000][T23640]        __mutex_lock+0x19f/0x1300
[  609.337224][T23640]        nbd_queue_rq+0x37b/0x1100
[  609.342424][T23640]        blk_mq_dispatch_rq_list+0xa70/0x1910
[  609.348491][T23640]        __blk_mq_sched_dispatch_requests+0xdcc/0x1600
[  609.355345][T23640]        blk_mq_sched_dispatch_requests+0xd7/0x190
[  609.362042][T23640]        blk_mq_run_hw_queue+0x348/0x4f0
[  609.367777][T23640]        blk_mq_dispatch_list+0xd16/0xe10
[  609.374122][T23640]        blk_mq_flush_plug_list+0x48d/0x570
[  609.380389][T23640]        __blk_flush_plug+0x3ed/0x4d0
[  609.385853][T23640]        __submit_bio+0x28d/0x580
[  609.390972][T23640]        submit_bio_noacct_nocheck+0x2f4/0xa70
[  609.397144][T23640]        block_read_full_folio+0x599/0x830
[  609.403051][T23640]        filemap_read_folio+0x137/0x3b0
[  609.408692][T23640]        do_read_cache_folio+0x358/0x590
[  609.414422][T23640]        read_part_sector+0xb6/0x2b0
[  609.419737][T23640]        adfspart_check_ICS+0xa5/0xa40
[  609.425372][T23640]        bdev_disk_changed+0x7ba/0x1550
[  609.431018][T23640]        blkdev_get_whole+0x380/0x510
[  609.436391][T23640]        bdev_open+0x31e/0xd30
[  609.441154][T23640]        blkdev_open+0x470/0x610
[  609.446182][T23640]        do_dentry_open+0x785/0x14e0
[  609.451563][T23640]        vfs_open+0x3b/0x340
[  609.456422][T23640]        path_openat+0x2e08/0x3860
[  609.461537][T23640]        do_file_open+0x23e/0x4a0
[  609.466838][T23640]        do_sys_openat2+0x113/0x200
[  609.472060][T23640]        __x64_sys_openat+0x138/0x170
[  609.477438][T23640]        do_syscall_64+0x14d/0xf80
[  609.482555][T23640]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  609.488980][T23640] 
[  609.488980][T23640] -> #4 (&cmd->lock){+.+.}-{4:4}:
[  609.496564][T23640]        __mutex_lock+0x19f/0x1300
[  609.501710][T23640]        nbd_queue_rq+0xc6/0x1100
[  609.506829][T23640]        blk_mq_dispatch_rq_list+0xa70/0x1910
[  609.513256][T23640]        __blk_mq_sched_dispatch_requests+0xdcc/0x1600
[  609.520233][T23640]        blk_mq_sched_dispatch_requests+0xd7/0x190
[  609.526914][T23640]        blk_mq_run_hw_queue+0x348/0x4f0
[  609.532579][T23640]        blk_mq_dispatch_list+0xd16/0xe10
[  609.538315][T23640]        blk_mq_flush_plug_list+0x48d/0x570
[  609.544520][T23640]        __blk_flush_plug+0x3ed/0x4d0
[  609.549927][T23640]        __submit_bio+0x28d/0x580
[  609.554958][T23640]        submit_bio_noacct_nocheck+0x2f4/0xa70
[  609.561490][T23640]        block_read_full_folio+0x599/0x830
[  609.567414][T23640]        filemap_read_folio+0x137/0x3b0
[  609.573007][T23640]        do_read_cache_folio+0x358/0x590
[  609.578654][T23640]        read_part_sector+0xb6/0x2b0
[  609.584102][T23640]        adfspart_check_ICS+0xa5/0xa40
[  609.589653][T23640]        bdev_disk_changed+0x7ba/0x1550
[  609.595389][T23640]        blkdev_get_whole+0x380/0x510
[  609.600889][T23640]        bdev_open+0x31e/0xd30
[  609.605698][T23640]        blkdev_open+0x470/0x610
[  609.610730][T23640]        do_dentry_open+0x785/0x14e0
[  609.616112][T23640]        vfs_open+0x3b/0x340
[  609.620706][T23640]        path_openat+0x2e08/0x3860
[  609.625818][T23640]        do_file_open+0x23e/0x4a0
[  609.630945][T23640]        do_sys_openat2+0x113/0x200
[  609.636512][T23640]        __x64_sys_openat+0x138/0x170
[  609.641912][T23640]        do_syscall_64+0x14d/0xf80
[  609.647052][T23640]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  609.653487][T23640] 
[  609.653487][T23640] -> #3 (set->srcu){.+.+}-{0:0}:
[  609.660789][T23640]        __synchronize_srcu+0xca/0x300
[  609.666266][T23640]        elevator_switch+0x1e8/0x7a0
[  609.671645][T23640]        elevator_change+0x2cc/0x450
[  609.677016][T23640]        elevator_set_default+0x36c/0x430
[  609.682749][T23640]        blk_register_queue+0x366/0x430
[  609.688298][T23640]        __add_disk+0x677/0xd50
[  609.693158][T23640]        add_disk_fwnode+0xfb/0x480
[  609.698361][T23640]        nbd_dev_add+0x72c/0xb50
[  609.703476][T23640]        nbd_init+0x168/0x1f0
[  609.708328][T23640]        do_one_initcall+0x250/0x8d0
[  609.713804][T23640]        do_initcall_level+0x104/0x190
[  609.719261][T23640]        do_initcalls+0x59/0xa0
[  609.724201][T23640]        kernel_init_freeable+0x2a6/0x3e0
[  609.729921][T23640]        kernel_init+0x1d/0x1d0
[  609.734962][T23640]        ret_from_fork+0x51e/0xb90
[  609.740191][T23640]        ret_from_fork_asm+0x1a/0x30
[  609.745589][T23640] 
[  609.745589][T23640] -> #2 (&q->elevator_lock){+.+.}-{4:4}:
[  609.753596][T23640]        __mutex_lock+0x19f/0x1300
[  609.758731][T23640]        elevator_change+0x1b3/0x450
[  609.764110][T23640]        elevator_set_none+0xb5/0x140
[  609.769570][T23640]        blk_mq_update_nr_hw_queues+0x5e7/0x1a60
[  609.775909][T23640]        nbd_start_device+0x17f/0xb10
[  609.781366][T23640]        nbd_genl_connect+0x165b/0x1cf0
[  609.786924][T23640]        genl_family_rcv_msg_doit+0x22a/0x330
[  609.793357][T23640]        genl_rcv_msg+0x61c/0x7a0
[  609.798409][T23640]        netlink_rcv_skb+0x232/0x4b0
[  609.803705][T23640]        genl_rcv+0x28/0x40
[  609.808221][T23640]        netlink_unicast+0x80f/0x9b0
[  609.813520][T23640]        netlink_sendmsg+0x813/0xb40
[  609.818906][T23640]        ____sys_sendmsg+0x972/0x9f0
[  609.824394][T23640]        ___sys_sendmsg+0x2a5/0x360
[  609.829601][T23640]        __x64_sys_sendmsg+0x1bd/0x2a0
[  609.835224][T23640]        do_syscall_64+0x14d/0xf80
[  609.840367][T23640]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  609.846967][T23640] 
[  609.846967][T23640] -> #1 (&q->q_usage_counter(io)#49){++++}-{0:0}:
[  609.855674][T23640]        blk_alloc_queue+0x546/0x680
[  609.861184][T23640]        __blk_mq_alloc_disk+0x197/0x390
[  609.867027][T23640]        nbd_dev_add+0x499/0xb50
[  609.872254][T23640]        nbd_init+0x168/0x1f0
[  609.876964][T23640]        do_one_initcall+0x250/0x8d0
[  609.882451][T23640]        do_initcall_level+0x104/0x190
[  609.888012][T23640]        do_initcalls+0x59/0xa0
[  609.893127][T23640]        kernel_init_freeable+0x2a6/0x3e0
[  609.898904][T23640]        kernel_init+0x1d/0x1d0
[  609.904042][T23640]        ret_from_fork+0x51e/0xb90
[  609.909180][T23640]        ret_from_fork_asm+0x1a/0x30
[  609.914579][T23640] 
[  609.914579][T23640] -> #0 (fs_reclaim){+.+.}-{0:0}:
[  609.921859][T23640]        __lock_acquire+0x15a5/0x2cf0
[  609.927371][T23640]        lock_acquire+0xf0/0x2e0
[  609.932576][T23640]        fs_reclaim_acquire+0x71/0x100
[  609.938307][T23640]        __kmalloc_cache_noprof+0x40/0x660
[  609.944207][T23640]        tcp_fastopen_defer_connect+0x250/0x390
[  609.950461][T23640]        tcp_v4_connect+0x10ac/0x19b0
[  609.955933][T23640]        tcp_v6_connect+0xbbb/0x1b10
[  609.961224][T23640]        __inet_stream_connect+0x25a/0xdd0
[  609.967044][T23640]        inet_stream_connect+0x66/0xa0
[  609.972942][T23640]        __sys_connect+0x312/0x450
[  609.978316][T23640]        __x64_sys_connect+0x7a/0x90
[  609.983621][T23640]        do_syscall_64+0x14d/0xf80
[  609.988741][T23640]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  609.995336][T23640] 
[  609.995336][T23640] other info that might help us debug this:
[  609.995336][T23640] 
[  610.005833][T23640] Chain exists of:
[  610.005833][T23640]   fs_reclaim --> sk_lock-AF_INET6 --> k-sk_lock-AF_INET6
[  610.005833][T23640] 
[  610.018994][T23640]  Possible unsafe locking scenario:
[  610.018994][T23640] 
[  610.027173][T23640]        CPU0                    CPU1
[  610.032655][T23640]        ----                    ----
[  610.038378][T23640]   lock(k-sk_lock-AF_INET6);
[  610.043150][T23640]                                lock(sk_lock-AF_INET6);
[  610.050184][T23640]                                lock(k-sk_lock-AF_INET6);
[  610.057469][T23640]   lock(fs_reclaim);
[  610.061518][T23640] 
[  610.061518][T23640]  *** DEADLOCK ***
[  610.061518][T23640] 
[  610.069777][T23640] 1 lock held by syz.0.4467/23640:
[  610.074973][T23640]  #0: ffff88803663b860 (k-sk_lock-AF_INET6){+.+.}-{0:0}, at: inet_stream_connect+0x51/0xa0
[  610.085191][T23640] 
[  610.085191][T23640] stack backtrace:
[  610.091183][T23640] CPU: 1 UID: 0 PID: 23640 Comm: syz.0.4467 Not tainted syzkaller #0 PREEMPT(full) 
[  610.091206][T23640] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  610.091217][T23640] Call Trace:
[  610.091227][T23640]  <TASK>
[  610.091234][T23640]  dump_stack_lvl+0xe8/0x150
[  610.091262][T23640]  print_circular_bug+0x2e1/0x300
[  610.091290][T23640]  check_noncircular+0x12e/0x150
[  610.091316][T23640]  __lock_acquire+0x15a5/0x2cf0
[  610.091339][T23640]  ? __tcp_get_metrics+0x7ec/0x870
[  610.091366][T23640]  lock_acquire+0xf0/0x2e0
[  610.091385][T23640]  ? __kmalloc_cache_noprof+0x40/0x660
[  610.091407][T23640]  fs_reclaim_acquire+0x71/0x100
[  610.091425][T23640]  ? __kmalloc_cache_noprof+0x40/0x660
[  610.091442][T23640]  __kmalloc_cache_noprof+0x40/0x660
[  610.091460][T23640]  ? tcp_fastopen_defer_connect+0x250/0x390
[  610.091486][T23640]  tcp_fastopen_defer_connect+0x250/0x390
[  610.091512][T23640]  ? __pfx_tcp_fastopen_defer_connect+0x10/0x10
[  610.091538][T23640]  ? sk_setup_caps+0x9ef/0xc40
[  610.091559][T23640]  ? sk_setup_caps+0x29/0xc40
[  610.091579][T23640]  tcp_v4_connect+0x10ac/0x19b0
[  610.091615][T23640]  ? __pfx_tcp_v4_connect+0x10/0x10
[  610.091637][T23640]  ? aa_label_sk_perm+0x52b/0x6e0
[  610.091659][T23640]  ? tcp_v6_connect+0x62d/0x1b10
[  610.091681][T23640]  tcp_v6_connect+0xbbb/0x1b10
[  610.091703][T23640]  ? __pfx_aa_label_sk_perm+0x10/0x10
[  610.091728][T23640]  ? __pfx_tcp_v6_connect+0x10/0x10
[  610.091753][T23640]  __inet_stream_connect+0x25a/0xdd0
[  610.091774][T23640]  ? do_raw_spin_lock+0x12b/0x2f0
[  610.091791][T23640]  ? __pfx___inet_stream_connect+0x10/0x10
[  610.091811][T23640]  ? inet_stream_connect+0x51/0xa0
[  610.091830][T23640]  ? __local_bh_enable_ip+0xd0/0x130
[  610.091852][T23640]  inet_stream_connect+0x66/0xa0
[  610.091872][T23640]  __sys_connect+0x312/0x450
[  610.091890][T23640]  ? __pfx___sys_connect+0x10/0x10
[  610.091910][T23640]  ? rcu_is_watching+0x15/0xb0
[  610.091935][T23640]  __x64_sys_connect+0x7a/0x90
[  610.091952][T23640]  do_syscall_64+0x14d/0xf80
[  610.091975][T23640]  ? trace_irq_disable+0x3b/0x150
[  610.091989][T23640]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  610.092005][T23640]  ? clear_bhb_loop+0x40/0x90
[  610.092031][T23640]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  610.092047][T23640] RIP: 0033:0x7f964f99c819
[  610.092064][T23640] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  610.092079][T23640] RSP: 002b:00007f965086e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a
[  610.092098][T23640] RAX: ffffffffffffffda RBX: 00007f964fc15fa0 RCX: 00007f964f99c819
[  610.092110][T23640] RDX: 000000000000001c RSI: 00002000000001c0 RDI: 0000000000000004
[  610.092120][T23640] RBP: 00007f964fa32c91 R08: 0000000000000000 R09: 0000000000000000
[  610.092130][T23640] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  610.092140][T23640] R13: 00007f964fc16038 R14: 00007f964fc15fa0 R15: 00007ffe6bbfd188
[  610.092157][T23640]  </TASK>
[  611.139674][    C1] net_ratelimit: 3 callbacks suppressed
[  611.139690][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  611.520317][ T6139] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  611.528958][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  611.830044][  T143] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  611.949703][ T6141] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  612.160110][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  612.960533][  T143] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  613.070037][  T143] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  613.199734][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  613.569974][ T5191] udevd[5191]: worker [18796] /devices/virtual/block/nbd3 is taking a long time
[  614.070062][ T9140] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  616.189685][    C1] net_ratelimit: 3 callbacks suppressed
[  616.189713][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  616.310032][  T143] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  616.409912][ T6139] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  617.199744][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  617.279997][  T143] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  617.280048][    C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  617.288315][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  617.420105][ T9140] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  617.520007][ T9140] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  618.249693][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  618.530021][  T143] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog