last executing test programs:

19.343729756s ago: executing program 3 (id=5569):
socket$kcm(0x10, 0x2, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc00000019000100000000000000020020010000000000730000000000000000ac1414aa00000000000000000000000000000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000a900000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000000000000080400000000000000000080000000000000000000000000000000044000500ac1414aa000000000000000000000000000000003c00000000000000ffffffff00000000000000000000000000000000000100"/180], 0xfc}}, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0xce0}], 0x1}, 0x9fc)
socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="30000000410007012bbd700000000000047c00000400c2800c0001800600060086dd00000c000780"], 0x30}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000)
sendmsg$nl_xfrm(r0, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000d40)=ANY=[@ANYBLOB="bc000000210001000000000000000000fc020000000000000000000000000000fc02000000000000000000000000000100000000000000000200002000000000", @ANYRESHEX=r1, @ANYRES32=0x0, @ANYBLOB="000000000000000050001100e0000001000000000000000000000000000000000000000000000000000000000a01010000000000000000000000000064010100000000000000eb09000000003c000000000000000a00"], 0xbc}}, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10)
r3 = accept4(r2, 0x0, 0x0, 0x0)
sendmsg$alg(r3, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@assoc={0x18, 0x117, 0x4, 0x71c6}], 0x18}, 0x2c000044)
sendmsg$nl_route_sched_retired(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0)
recvmmsg(r3, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}, 0x200bac}, {{0x0, 0x0, &(0x7f0000000200), 0x24}, 0x4}], 0x2, 0x60, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={0x0}}, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_netfilter(0x10, 0x3, 0xc)
r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000f40)={0x6, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000300000000000000008c4e9270e1faf646000000"], &(0x7f00000001c0)='syzkaller\x00', 0x9}, 0x94)
mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x3000002, 0x10, r5, 0x280d7000)
r6 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'syz_tun\x00', <r7=>0x0})
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000100)={r5, r7, 0x25, 0x4, @val=@netfilter={0x7, 0x0, 0x9}}, 0x20)
syz_emit_ethernet(0x15, &(0x7f0000000f00)=ANY=[@ANYBLOB="aaaaaaaaaabb000800d474a000000081004d0008050106f3"], 0x0)
r8 = socket$inet6(0xa, 0x80002, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000e40)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94)
bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000400)=ANY=[@ANYRES32=r9, @ANYRES32=r9, @ANYBLOB="220000001b00040000000000", @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x20)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'syz_tun\x00'})

19.0992195s ago: executing program 3 (id=5575):
r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) (async)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@bridge_delneigh={0x30, 0x1e, 0x1, 0x0, 0x0, {0x7}, [@NDA_LLADDR={0xa}, @NDA_MASTER={0x8, 0x9, 0x10000009}]}, 0x30}}, 0x0) (async)
sendmsg$802154_raw(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)="c1e220a182cfa0a8442859", 0xb}, 0x1, 0x0, 0x0, 0x40000}, 0x4006040) (async)
recvmmsg(r0, &(0x7f0000002c00)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0xe88e164623c85842, 0x0) (async)
poll(&(0x7f0000000180)=[{r0, 0x1}], 0x1, 0x9) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xe, &(0x7f0000000a00)=ANY=[@ANYBLOB], 0x0, 0xb, 0x0, 0x0, 0x0, 0xc}, 0x94)

18.834736248s ago: executing program 3 (id=5578):
r0 = socket(0x1e, 0x5, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
listen(r0, 0x0)
r1 = socket(0x1e, 0x805, 0x0)
sendmsg$tipc(r1, &(0x7f0000000080)={&(0x7f0000000000)=@name, 0x10, 0x0}, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f00000000c0)=@req3={0x80000000, 0x0, 0xfffffffb, 0xfffffffe}, 0x1c)
accept4$nfc_llcp(r0, 0x0, 0x0, 0x0)
sendmsg$tipc(r1, &(0x7f0000000640)={&(0x7f0000000380), 0x10, 0x0}, 0x0)

17.789070318s ago: executing program 3 (id=5587):
r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x400000, 0x79, 0x10, 0xa2}, [@ldst={0x7, 0x0, 0x0, 0x0, 0x9}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0xff}, 0x10}, 0x94)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = openat$cgroup_int(r1, &(0x7f0000000080)='hugetlb.1GB.rsvd.limit_in_bytes\x00', 0x2, 0x0)
writev(r2, &(0x7f0000000a40)=[{&(0x7f00000007c0)='t', 0x1}], 0x1)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xf, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r4, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'ip_vti0\x00', &(0x7f0000000180)={'ip_vti0\x00', <r5=>0x0, 0x8, 0x700, 0x10, 0x775, {{0x10, 0x4, 0x3, 0x0, 0x40, 0x67, 0x0, 0x80, 0x2f, 0x0, @private=0xa010100, @dev={0xac, 0x14, 0x14, 0x14}, {[@rr={0x7, 0x2b, 0xe, [@multicast1, @loopback, @local, @multicast2, @multicast2, @local, @loopback, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x32}]}]}}}}})
ioctl$XFS_IOC_PATH_TO_HANDLE(r0, 0xc0385869, &(0x7f0000000340)={<r6=>r0, &(0x7f0000000240)=':\x00', 0x80000, &(0x7f0000000280)={@align=0xfffffffffffffffd, {0x800, 0x3, 0x3, 0x65b0}}, 0x4, &(0x7f00000002c0), &(0x7f0000000300)=0x2})
r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x1}, 0x28)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r7, 0x20, &(0x7f0000000100)={0x0, 0x0, <r8=>0x0, 0x0}}, 0x10)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001840)=r8, 0x4)
r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20)
r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r9, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0x22, &(0x7f0000000800)=@framed={{0x18, 0x0, 0x0, 0x0, 0xc4f, 0x0, 0x0, 0x0, 0xfffffffa}, [@ringbuf_query, @cb_func={0x18, 0x9, 0x4, 0x0, 0xffffffffffffffff}, @printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xeea}}, @jmp={0x5, 0x0, 0x5, 0x8, 0x9, 0x8, 0x8}, @map_idx={0x18, 0x1, 0x5, 0x0, 0x7}, @map_idx_val={0x18, 0x7, 0x6, 0x0, 0xe, 0x0, 0x0, 0x0, 0x9}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0xb, 0x0, 0x0, 0x0, 0x5}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @alu={0x4, 0x1, 0xa, 0x1, 0x9, 0xc}]}, &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x41000, 0x20, '\x00', r5, 0x1a, r9, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r10, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94)
r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0)
write$cgroup_int(r11, &(0x7f00000010c0)=0x6, 0x12)
ioctl$FS_IOC_RESVSP(r11, 0x4030582b, &(0x7f0000000300)={0x1100, 0x0, 0x10, 0x8})
r12 = socket$phonet(0x23, 0x2, 0x1)
ioctl$SIOCPNDELRESOURCE(r12, 0x89ef, &(0x7f0000000000))
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000600)={0x1, &(0x7f00000005c0)="c967"}, 0x20)
r13 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000400)={0x0, 0x5, 0x8}, 0xc)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x19, 0x13, &(0x7f0000000080)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0x7}, @call={0x85, 0x0, 0x0, 0xb7}, @cb_func={0x18, 0x4, 0x4, 0x0, 0x4}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000140)='syzkaller\x00', 0x6, 0x0, 0x0, 0x40f00, 0x8, '\x00', r5, @cgroup_sockopt=0x16, r6, 0x8, &(0x7f0000000380)={0x5, 0x1}, 0x8, 0x10, &(0x7f00000003c0)={0x5, 0x7, 0x0, 0x3}, 0x10, r8, r10, 0x1, &(0x7f0000000440)=[r11, r13, 0xffffffffffffffff], &(0x7f0000000480)=[{0x3, 0x1, 0xf, 0x8}], 0x10, 0x4b}, 0x94)

17.585643501s ago: executing program 3 (id=5589):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f00000002c0)={0x1f, 0xffff, 0x3}, 0x6)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000080), r1)
sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="30010000", @ANYRES16=r2, @ANYBLOB="01000000000000000000010000000800010001000000040004800800020001000000080108802c0007800800ffeac3bc0000080006001c0000000800060000000000080005"], 0x130}}, 0x0)
write(r0, &(0x7f0000000040)="05000000010000", 0x7)

17.405185993s ago: executing program 3 (id=5590):
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet_mptcp(0x2, 0x1, 0x106)
syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff)

5.464357157s ago: executing program 4 (id=5675):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$kcm(0x2, 0xa, 0x2)
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_int(r2, 0x0, 0xb, &(0x7f0000000040)=0x3, 0x4)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r2, 0x0, 0x1a, &(0x7f0000000240)={0x1, 'veth0_to_team\x00'}, 0x18)
syz_emit_ethernet(0x46, &(0x7f0000000080)={@multicast, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x31, 0x38, 0x0, 0x0, 0xfd, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @parameter_prob={0xc, 0x0, 0x0, 0x1, 0x7, 0x0, {0x5, 0x4, 0x0, 0x3b, 0x1, 0x67, 0xfffd, 0x0, 0x1, 0xa, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}}, "63734245550f4136"}}}}}, 0x0)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000040)={@val={0x0, 0x6003}, @void, @eth={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2}, @val={@void, {0x8100, 0x0, 0x1}}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x4000, 0x0, 0x3, 0x2f, 0x0, @private=0x1fe1, @multicast1}, {0xa000, 0x6558, 0x8}}}}}}, 0x32)

5.355972162s ago: executing program 1 (id=5676):
r0 = socket(0x10, 0x803, 0x0)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
socket$inet_sctp(0x2, 0x1, 0x84)
r2 = socket(0x10, 0x3, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000240)={'veth0_virt_wifi\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newqdisc={0x8c, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x5c, 0x2, {{0x1, [0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x0, 0x0, 0x0, 0x3df], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}, [@TCA_MQPRIO_MAX_RATE64={0x4}]}}}]}, 0x8c}}, 0x24000000)
r5 = socket$l2tp(0x2, 0x2, 0x73)
setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2a8, 0x0, 0x43, 0xa0, 0x0, 0x98, 0x210, 0x178, 0x178, 0x210, 0x178, 0x49, 0x0, {[{{@uncond, 0x12a, 0xe0, 0x140, 0x0, {0x0, 0x7a010000}, [@common=@inet=@ecn={{0x28}, {0x8, 0x30, 0x6, 0x7}}, @common=@unspec=@helper={{0x48}, {0x0, 'Q.931\x00'}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x1, 0x7, 0x0, 0x2, 0x0, 0x8], 0x4, 0x5}, {0x1, [0xb, 0x4, 0x4, 0x4, 0x1, 0x2], 0x2, 0x3}}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@multicast1, [0xff, 0xff], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x308)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x85, &(0x7f0000000000)={0x0, @in={{0x2, 0x4e24, @empty}}, 0x27c0}, 0x90)
setsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0, 0x84}, 0x8)
getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="be8a611935c46c6a69ac18a900"/28, @ANYRES32=r6, @ANYBLOB="560608000000000024bcf620fd4200128009000100626f6eff000000001400"], 0x44}}, 0x40)

5.133942493s ago: executing program 1 (id=5679):
r0 = socket$unix(0x1, 0x1, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0)
socket$unix(0x1, 0x1, 0x0)
r4 = socket$unix(0x1, 0x1, 0x0)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r5)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000140)={'syzkaller0\x00', @multicast})
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xa, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000008000000000000000900000073119d000000000095"], &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x94)
r6 = socket(0x2a, 0x3, 0x2)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', <r7=>0x0})
syz_emit_ethernet(0x4a, &(0x7f00000004c0)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0xff, @empty, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10, 0x6}}}}}}}, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000c00)=@newtfilter={0x4c, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0xfff3, 0xffe0}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x9, 0x8}]}}, @TCA_BPF_FLAGS={0x8, 0x8, 0x1}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8848}, 0x24000804)
sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000500)=@xdp={0x2c, 0x7, r7, 0x3e}, 0x80, &(0x7f0000000640)=[{&(0x7f0000000180)='\'', 0x1}], 0x1}, 0x20004014)
syz_emit_ethernet(0x75, &(0x7f00000001c0)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x67, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}, {"c8fd75a55cea55431a0df064535453f7c0b9376f3fa20800d19af9e68bd0c75e46b1c0d4c5a14e8ce3e28fd739913a5d1064c377167a00e7dc89bd8f93290b"}}}}}}, 0x0)
socket$nl_rdma(0x10, 0x3, 0x14)

4.74828757s ago: executing program 4 (id=5681):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="2000000011008188040f80ec59acbc0413a181000d0000000f01000000000000", 0x20}], 0x1}, 0x0)

3.383440777s ago: executing program 0 (id=5685):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000010900010073797a310000000054000000030a01040000000000000000010000000900030073797a31000000000900010073797a3100220000ffffffff0800014000000005080002401b2fd2c5140003006970366772653000000000000000000028000000000a05000000000000000000010000080900010073797a3100000000080002400000000114000000110001"], 0xc4}, 0x1, 0x0, 0x0, 0x20004000}, 0x0)

3.227632374s ago: executing program 0 (id=5686):
r0 = socket$nl_route(0x10, 0x3, 0x0) (async)
r1 = socket$pptp(0x18, 0x1, 0x2)
bind$pptp(r1, &(0x7f0000003340)={0x18, 0x2, {0x2, @multicast2}}, 0x1e)
r2 = socket$pptp(0x18, 0x1, 0x2)
bind$pptp(r2, &(0x7f00000048c0)={0x18, 0x2, {0x2, @loopback}}, 0x1e) (async)
r3 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000100)='nv', 0x2) (async)
getsockopt$inet_tcp_buf(r3, 0x6, 0x1a, 0x0, &(0x7f00000000c0)) (async, rerun: 32)
sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@getnexthop={0x20, 0x6a, 0x501, 0x0, 0x0, {}, [@NHA_MASTER={0x8, 0xa, 0xfffffff0}]}, 0x20}}, 0x0) (rerun: 32)

1.484062092s ago: executing program 4 (id=5687):
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0300000004000000040000004a"], 0x48)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
r3 = socket(0x400000000010, 0x3, 0x0)
r4 = socket$unix(0x1, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x4e, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xa30e, 0x1, 0xfffffffa}}}}]}, 0x44}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=@newtfilter={0x44, 0x2c, 0xd3f, 0x70b524, 0x25dfdbf9, {0x0, 0x0, 0x0, r5, {0xfff3, 0xffe0}, {0x0, 0xfff1}, {0xfff3, 0x1}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_PERTURB={0x8, 0xc, 0x7c}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4008849}, 0xc884)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000200)={'syztnl1\x00', &(0x7f0000000140)={'syztnl0\x00', r5, 0x8000, 0x10, 0x140d, 0x3, {{0x1e, 0x4, 0x3, 0x3, 0x78, 0x65, 0x0, 0x9, 0x4, 0x0, @remote, @broadcast, {[@lsrr={0x83, 0x1b, 0xdd, [@local, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @multicast2, @private=0xa010101]}, @noop, @generic={0xcc, 0xa, "a5c3ad60ba7ce97d"}, @timestamp_addr={0x44, 0x24, 0x28, 0x1, 0x8, [{@private=0xa010100, 0x9}, {@broadcast, 0x4}, {@multicast1, 0x4}, {@local, 0x4}]}, @rr={0x7, 0x7, 0xac, [@empty]}, @ssrr={0x89, 0x7, 0x56, [@private=0xa010102]}, @ssrr={0x89, 0xb, 0x1e, [@dev={0xac, 0x14, 0x14, 0x1a}, @multicast2]}]}}}}})
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@deltaction={0x44, 0x18, 0x1, 0x70bdac, 0x25dfdbfc, {0xa}, [@TCA_ACT_TAB={0x30, 0x1, [{0xc, 0x8d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0x14, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x44010}, 0x20040844)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x10, 0xb, &(0x7f00000009c0)=@framed={{0x18, 0x2}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}}, @func={0x85, 0x0, 0x1, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x1}, @exit]}, &(0x7f0000000040)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0xa}, 0x94)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x38, 0x1403, 0x1, 0x4070bd2a, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'ipvlan0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x89}, 0x24048800)
socket$nl_rdma(0x10, 0x3, 0x14) (async)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0300000004000000040000004a"], 0x48) (async)
socket$inet_udp(0x2, 0x2, 0x0) (async)
socket(0x400000000010, 0x3, 0x0) (async)
socket$unix(0x1, 0x2, 0x0) (async)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async)
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x4e, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xa30e, 0x1, 0xfffffffa}}}}]}, 0x44}}, 0x0) (async)
sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=@newtfilter={0x44, 0x2c, 0xd3f, 0x70b524, 0x25dfdbf9, {0x0, 0x0, 0x0, r5, {0xfff3, 0xffe0}, {0x0, 0xfff1}, {0xfff3, 0x1}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_PERTURB={0x8, 0xc, 0x7c}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4008849}, 0xc884) (async)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000200)={'syztnl1\x00', &(0x7f0000000140)={'syztnl0\x00', r5, 0x8000, 0x10, 0x140d, 0x3, {{0x1e, 0x4, 0x3, 0x3, 0x78, 0x65, 0x0, 0x9, 0x4, 0x0, @remote, @broadcast, {[@lsrr={0x83, 0x1b, 0xdd, [@local, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @multicast2, @private=0xa010101]}, @noop, @generic={0xcc, 0xa, "a5c3ad60ba7ce97d"}, @timestamp_addr={0x44, 0x24, 0x28, 0x1, 0x8, [{@private=0xa010100, 0x9}, {@broadcast, 0x4}, {@multicast1, 0x4}, {@local, 0x4}]}, @rr={0x7, 0x7, 0xac, [@empty]}, @ssrr={0x89, 0x7, 0x56, [@private=0xa010102]}, @ssrr={0x89, 0xb, 0x1e, [@dev={0xac, 0x14, 0x14, 0x1a}, @multicast2]}]}}}}}) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
sendmsg$nl_route_sched(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@deltaction={0x44, 0x18, 0x1, 0x70bdac, 0x25dfdbfc, {0xa}, [@TCA_ACT_TAB={0x30, 0x1, [{0xc, 0x8d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0x14, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x44010}, 0x20040844) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x10, 0xb, &(0x7f00000009c0)=@framed={{0x18, 0x2}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}}, @func={0x85, 0x0, 0x1, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x1}, @exit]}, &(0x7f0000000040)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0xa}, 0x94) (async)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x38, 0x1403, 0x1, 0x4070bd2a, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'ipvlan0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x89}, 0x24048800) (async)

1.436080691s ago: executing program 1 (id=5688):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (async)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) (async)
pread64(r1, &(0x7f0000001b40)=""/4102, 0x1006, 0x3) (async)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
socket$kcm(0x2, 0xa, 0x2) (async)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000040000701fcffffff"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) (async)
r2 = socket$kcm(0x2, 0x3, 0x2)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) (async)
write$tun(r0, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x27, 0x0, 0x27}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffff20, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x700, 0x0, 0x18, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2, 0x0, 0xb00}, @generic={0x0, 0x2, "d58838000391"}]}}}}}}, 0xfd6c)

1.422802663s ago: executing program 0 (id=5689):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="18080000000000000000000000000000181a0000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000851000000300000018000000000000000000000000000000950000000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="00000000040000090000000000000000850000006a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b70800000c300000638af8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018240000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000400)={r3, 0x0, 0x0}, 0x10)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, 0x0, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) (async)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="18080000000000000000000000000000181a0000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000851000000300000018000000000000000000000000000000950000000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x94) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="00000000040000090000000000000000850000006a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) (async)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b70800000c300000638af8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018240000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000400)={r3, 0x0, 0x0}, 0x10) (async)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, 0x0, 0x0) (async)

1.371868603s ago: executing program 2 (id=5690):
r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x2, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000002000000000000000002000018120000", @ANYRES32=r0, @ANYBLOB="90ffffff00000000b70300000000000085000000ae000000b70000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)

1.234212542s ago: executing program 0 (id=5691):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021100011800c000100636f756e746572009c0000000c0a01010000000000000000070000000900020073797a31000000000900010073797a3000000000700003806c000080080003400000000260000b80440001800c000100636f756e746572"], 0x130}, 0x1, 0x0, 0x0, 0x8000}, 0x8880)
r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$BATADV_CMD_TP_METER(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x60, r3, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0xe}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x4}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x14e9}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xff}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x80000000}]}, 0x60}}, 0x800)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$NFC_CMD_SE_IO(r4, &(0x7f0000000500)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000004c0)={&(0x7f00000002c0)={0x1f0, r5, 0x20, 0x70bd27, 0x25dfdbfb, {}, [@NFC_ATTR_SE_APDU={0x53, 0x19, "0de2bc303653968969ff50ea79abc87f02c06c1ebcd179f4f8a54d832a5bc501289a6cbb04df9edd1e8eaf8d3cb68efa6ad7eb00a3edbfd50ad2d4a3f29b6e0d07715793fd0f1bdde58b0c2d4bfe96"}, @NFC_ATTR_SE_APDU={0x96, 0x19, "56fd10cae7ec209e0973f87648169f3280ef092681fffa45708baeda4d9fb60d885346f68c9df913986864e3d954d5b2e6c2cd6b6f3d0b5edbaf822c1eca6d2a9a8aa4c142ffc3a063edd912cb268147ef86853d978601489065897abd1ca3665b9ec164734e845fdd9a7713be9ea59e7210ebc38a5838a6030694914baf13606662ee87ac5984c58db6e43f54bbbbd957d6"}, @NFC_ATTR_SE_APDU={0xef, 0x19, "7ad802afd101c824708337f43cd03820b60e0cda2a9deec8d925cff9a148b3de338af29b00a89b5ceefc5ceff79780ab1ace580168dcdad2d017d748dbd05e824b79210fc0a73f91b46e182233cd656d6c13b0b976620f752100a716a1936e00cd8742e292d4893b7be55e42ea803d3f68c8eb2fbe5fa1f3cfdaeb880a6ddef9bf34ecb97b5383074d3e43343ad0cf386f6cecf1fe85ad62aee8d2ff5165c76bbd9652b77958444a93ea65af574d592e508189a2c96f8e0e54b5fa5afea0f79ab84551654990911ee43d99ec9b7e0d4cc11fc3333c81e218f747cfecf48c5263807b5657bab574ed45262f"}]}, 0x1f0}, 0x1, 0x0, 0x0, 0x100}, 0x4)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MULTI_BOOLOPT={0xc, 0x2e, {0x3, 0x3}}]}}}]}, 0x40}}, 0x0)

1.195947656s ago: executing program 2 (id=5692):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)={0x98, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @broadcast}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_SYNPROXY={0x4}]}, 0x98}}, 0x0)
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="cc0000001b0089fd0000000000000000fc000000000000000000000000000000ffffffff00000000000000000000000000000000000000000200206000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000c0008000826"], 0xcc}}, 0x0)

971.589664ms ago: executing program 4 (id=5693):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="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"], 0x114}}, 0x0)

970.993347ms ago: executing program 1 (id=5694):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000001100), r1)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f00000002c0)={'wg2\x00', <r3=>0x0})
sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002040)=ANY=[@ANYBLOB='@\r\x00\x00', @ANYRES16=r2, @ANYBLOB="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", @ANYRES32=r3, @ANYBLOB="24000300000000000000000000000000000000000000000000000000000000000000000024000300a05ca84f6c9c8e3853e2fd7a7cae0fb20fa152600cb00845174f08076f8d7843080007"], 0xd40}}, 0x8)

954.48941ms ago: executing program 2 (id=5695):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r0, 0x39b3)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="b4050000200080006110600000000000c60000000000000095000000000000009f33ef60916e6e893f1eeb0be20000d072f5b89c3043c47c896ce0bc8731fa595b6b4d45ef26dcca5582054d54d53cd2b685b431c70ea948259c4c869b4fc8db714e4b94bdae214fa68a051d4dca7d2647bec1fc89398d2b9000f224891060017c4700de60beac671e8e8f00cb03588aa6007e71f871ab5c2ff88afc6002084e5b52710aeee835cf0d78e45f70983826fb8579c1fb47d2c59005cff414ed55b0d18a9d446935fb332bb593ee341ab59016f81860324b800c00000000000092d9c5fe34ccb80a61ffcb3363073fd8962823ee45f5d7394e9510f4ac6c702cfabe8a9c55c8dafcdb110036e14c1035cafdfef6a358cbfadb3579a285580a3c080d4e0a48d7bdc38a0437c8c1b3aa408a0000000000002248950b000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
r1 = socket$inet6(0xa, 0x802, 0x0)
setsockopt$inet6_buf(r1, 0x29, 0x39, &(0x7f0000000040)="ff0204000000000100000000000000000000000000000205", 0x18)
close(0x3)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000ac0)=ANY=[@ANYRES32=r2, @ANYBLOB], 0x10)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r2, &(0x7f00000047c0), &(0x7f0000004880)=@udp=r0}, 0x20)
close(r2)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x40100, 0x0)
ioctl$PPPIOCSMRRU(r3, 0x4004743b, &(0x7f0000000080)=0x6fe)
recvmmsg(r0, 0x0, 0x0, 0x21, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000000280)=0x1, 0x4)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x7}, 0x48)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[], 0x84}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0xd, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001e00000085000000a000000095"], &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x2f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)

812.167902ms ago: executing program 4 (id=5696):
r0 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000004500)=@req={0xf3b, 0x8, 0x3, 0x7fffffff}, 0x10)
recvfrom(r0, &(0x7f0000000140)=""/104, 0x68, 0x12020, 0x0, 0x0)
bind$bt_hci(r0, &(0x7f00000002c0)={0x1f, 0xfffb, 0x3}, 0x6)
write(0xffffffffffffffff, &(0x7f0000000040)="05000000010000", 0x7)

659.143327ms ago: executing program 4 (id=5697):
r0 = socket$alg(0x26, 0x5, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000000)=@newtaction={0x68, 0x30, 0x101, 0x0, 0x25dfdbfb, {}, [{0x54}]}, 0x68}, 0x1, 0x0, 0x0, 0x408a0}, 0x0)
bind$alg(r0, &(0x7f0000000f40)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx\x00'}, 0x58)
r2 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x2, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xfff3}, {0xffff, 0xffff}, {0x0, 0x6}}, [@qdisc_kind_options=@q_codel={{0xa}, {0xc, 0x2, [@TCA_CODEL_ECN={0x8}]}}]}, 0x3c}}, 0x2000400c)
r4 = socket$inet6(0xa, 0x5, 0x0)
sendto$l2tp6(r4, &(0x7f00000010c0)="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", 0x100b, 0x810, &(0x7f0000007440)={0xa, 0x0, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x4, 0x4}, 0x20)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r4, 0x84, 0x65, &(0x7f0000000180)=[@in6={0xa, 0x0, 0x0, @local}], 0x1c)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0xe, 0x4, &(0x7f0000000440)=ANY=[@ANYRESHEX=r4], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
r5 = accept4(r0, 0x0, 0x0, 0x800)
sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
r6 = socket$kcm(0x2, 0xa, 0x2)
ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000000)={'veth1_macvtap\x00', &(0x7f0000000200)=@ethtool_rxfh={0x47, 0x8, 0x4, 0x80004, 0x2, 'o\b@', 0xffff, [0xb, 0x0, 0x1, 0x9, 0x7, 0x6]}})
recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000004c0)=""/97, 0xffffffffffffff66}, {&(0x7f0000000540)=""/83, 0x53}], 0x1}, 0x10020)
socket$nl_xfrm(0x10, 0x3, 0x6)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.cpu/syz1\x00', 0x1ff)
r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0)
r8 = openat$cgroup_type(r7, &(0x7f0000000080), 0x2, 0x0)
write$cgroup_type(r8, &(0x7f00000000c0), 0x9)
r9 = openat$cgroup_procs(r7, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0)
write$cgroup_pid(r9, &(0x7f0000000c40), 0x12)
r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r11 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
bind$nfc_llcp(r11, &(0x7f0000001040)={0x27, 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x0, "d92984bd1ca44c226af516ca301711a077609475b78011e88509def2ff00000000f2170e65e3f50327e42200000000000000000000029a3e0000001900", 0x3c}, 0x60)
listen(0xffffffffffffffff, 0xf5f)
accept(r11, 0x0, 0x0)
openat$cgroup_ro(r10, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0)

658.843182ms ago: executing program 2 (id=5698):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="2000000011008188040f80ec59acbc0413a181000d0000000f01000000000000", 0x20}], 0x1}, 0x0)

552.447719ms ago: executing program 2 (id=5699):
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
ioctl$F2FS_IOC_SEC_TRIM_FILE(r0, 0x4018f514, &(0x7f0000000000)={0x9, 0x8001, 0x3})
getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000040), &(0x7f0000000080)=0x14)
ioctl$FITRIM(r0, 0xc0185879, &(0x7f00000000c0)={0x8, 0x83, 0x7})
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
ioctl$SIOCSIFMTU(r1, 0x8922, &(0x7f0000000100)={'veth1_vlan\x00', 0xff3e})
r2 = accept4$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000180)=0x14, 0x80000)
sendto$packet(r2, &(0x7f00000001c0), 0x0, 0xbaaca2a0d1abbc34, 0x0, 0x0)
ioctl$XFS_IOC_PATH_TO_HANDLE(r0, 0xc0385869, &(0x7f0000000300)={<r3=>r0, &(0x7f0000000200)='*+-*,%\x00', 0x40002, &(0x7f0000000240)={@_ha_fsid={[0x705f, 0x10000]}, {0xb, 0x2, 0x6, 0x9}}, 0x6, &(0x7f0000000280)={@_ha_fsid}, &(0x7f00000002c0)=0x7})
sendmsg$nl_crypto(r3, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000480)={&(0x7f0000000380)=@alg={0xe8, 0x10, 0x800, 0x70bd29, 0x25dfdbfb, {{'drbg_nopr_ctr_aes192\x00'}, '\x00', '\x00', 0x400, 0x2400}, [{0x8, 0x1, 0x40}]}, 0xe8}, 0x1, 0x0, 0x0, 0x10}, 0x40000)
sendmsg$AUDIT_ADD_RULE(r3, &(0x7f00000009c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000980)={&(0x7f0000000540)={0x42c, 0x3f3, 0x200, 0x70bd26, 0x25dfdbfc, {0x2, 0x0, 0x3a, [0x3ff, 0x1, 0xfffffff7, 0x5, 0x326, 0x5, 0x8000, 0x7fffffff, 0x1, 0x2, 0x3, 0xffff, 0x4, 0x7, 0x4, 0xd, 0x100, 0x4, 0x101, 0x1000, 0x4, 0x8, 0x2, 0x0, 0xff, 0x4, 0x1ff, 0x1, 0x0, 0xfffffffb, 0x7ff, 0x3, 0x8, 0x6, 0x1000, 0xe, 0xf585, 0x2, 0x1, 0xa62, 0x0, 0x2, 0x101, 0x3, 0xfffffff9, 0x0, 0x3, 0xfffffc00, 0x0, 0x9, 0x7, 0x10000, 0x9, 0x7, 0x81, 0x7, 0x7cb, 0x8, 0x7fff, 0x8a5, 0x10, 0x100, 0x7, 0x6], [0x401, 0x9, 0x9, 0x10, 0x1, 0x4, 0x1, 0x6c99, 0xfffff7c2, 0x4, 0x1, 0x77e, 0x3, 0x0, 0x10001, 0x1, 0x899, 0x1, 0x3ff, 0xb, 0x167, 0xf5c2, 0xffff, 0x7, 0xfffffff8, 0x5, 0x7cf7, 0x3, 0x4, 0x511, 0x7, 0x87ac, 0x2, 0x1, 0x2, 0x1, 0x9, 0x7, 0x3, 0x5, 0xe, 0x5, 0xfffffffb, 0xfff, 0x5, 0x1, 0x4, 0x80000001, 0x1ff, 0x10, 0x1, 0x1, 0x3, 0x79, 0x0, 0x5, 0x80000001, 0x3, 0xfffffffc, 0x1, 0x5043, 0x7, 0xa, 0x6], [0x0, 0x1, 0x2, 0x6, 0xfffffffd, 0x3a6, 0x5, 0x7, 0x755, 0x5, 0x7, 0x5, 0xfffffff6, 0x5, 0x8, 0x3, 0x6, 0x200, 0x7, 0x5, 0xb8, 0x7, 0xffff, 0x1, 0x16bc, 0x5, 0x7, 0x5, 0xa, 0x7ff, 0x5, 0x6, 0x0, 0x100, 0x6, 0xf, 0x6, 0x2, 0x200, 0xfffffff9, 0x4, 0x1, 0xfffffff7, 0x0, 0x2, 0x8, 0x7, 0xb, 0x5, 0x0, 0x7fffffff, 0x675d, 0xce2a, 0x4, 0x4, 0x5, 0x3, 0x3ff, 0xffffffbf, 0x3ff, 0x6, 0x4, 0x5, 0x5], [0x80, 0x3, 0xf, 0x1, 0x8, 0x7ff, 0x6, 0x401, 0x515edd43, 0xfffff748, 0x9, 0x9, 0x1, 0x2, 0x0, 0xd, 0x0, 0x138, 0x4, 0xc1, 0x0, 0x3, 0x101, 0x5, 0x2, 0xa, 0xdc800000, 0x6, 0xfff, 0x200, 0x3, 0x80000000, 0x40000, 0x9, 0x4, 0x10001, 0x1ff, 0x3, 0x2, 0x8c, 0x3, 0x9, 0x16a4, 0x2, 0x80000000, 0x8, 0x10000, 0x81, 0x7, 0x626, 0x6, 0x8, 0x5, 0x3, 0xf, 0xfffffffb, 0xa, 0x1ff, 0xc, 0x7, 0x7, 0xe, 0x8, 0xd], 0xb, ['veth1_vlan\x00']}}, 0x42c}, 0x1, 0x0, 0x0, 0x4004880}, 0x81)
r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000a40), r3)
sendmsg$L2TP_CMD_SESSION_CREATE(r3, &(0x7f0000000b40)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a80)={0x4c, r4, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e21}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0xfffffffffffff639}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x8000}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp=r3}, @L2TP_ATTR_DEBUG={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20004040}, 0x1000)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000bc0), r3)
sendmsg$NL80211_CMD_PROBE_MESH_LINK(r3, &(0x7f0000001040)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001000)={&(0x7f0000000c00)={0x3e8, r5, 0x4, 0x70bd29, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_FRAME={0x18, 0x33, @ctrl_frame=@bar={{}, {0x4}, @broadcast, @broadcast, @compressed={{0x0, 0x0, 0x1, 0x0, 0xb}, {0x3, 0xb}}}}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_FRAME={0x389, 0x33, @data_frame={@a_msdu=@type00={{0x0, 0x2, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1}, {0x4000}, @device_b, @device_b, @from_mac=@broadcast, {0x9, 0x4}, "", @value={0x8, 0x1, 0x3, 0x1, 0x4}}, @random="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"}}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}]}, 0x3e8}, 0x1, 0x0, 0x0, 0x40800}, 0x40000)
syz_emit_ethernet(0x95, &(0x7f0000001080)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @empty, @void, {@x25={0x805, {0x2, 0x7, 0x1, "cb3cc184b54bd6717ec4baf8f9ddb89865966c4ba2ae8fc30c1c6a8e4011e72c88ef711cdbe94ca5a2adf340eb2288e640d9b1e6ef0183ba5961c513189d085ed5224f09c971fd74d25242250f7db37cf680570416c7458b60bbab58f63f634840d9b4fa228673f844f4ccc37cd70c794a1fcd87abdabe36a4c7db2ef0200ad401bb4072"}}}}, 0x0)
r6 = openat$cgroup_procs(r3, &(0x7f0000001140)='cgroup.procs\x00', 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000011c0)={'wlan0\x00', <r7=>0x0})
sendmsg$NL80211_CMD_GET_KEY(r3, &(0x7f0000001280)={&(0x7f0000001180)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001240)={&(0x7f0000001200)={0x30, r5, 0x20, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x1, 0x3a}}}}, [@NL80211_ATTR_KEY={0x8, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x14}, 0x4)
ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r2, 0xc0096616, &(0x7f00000012c0)={0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001340), r3)
sendmsg$TIPC_NL_KEY_FLUSH(r8, &(0x7f0000001580)={&(0x7f0000001300)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001540)={&(0x7f0000001380)={0x1c0, r9, 0x800, 0x70bd26, 0x25dfdbfc, {}, [@TIPC_NLA_MEDIA={0x128, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_MEDIA_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xb69}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffbff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x81}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xa}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8ae}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd484}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffd}]}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffff01}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfe}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffee}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x898}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffff9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x20db}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_BEARER={0x84, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @private=0xa010100}}, {0x14, 0x2, @in={0x2, 0x4e21, @loopback}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x720a}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}]}]}, 0x1c0}, 0x1, 0x0, 0x0, 0x4}, 0x100)
ioctl$XFS_IOC_FD_TO_HANDLE(r2, 0xc038586a, &(0x7f00000016c0)={<r10=>0xffffffffffffffff, &(0x7f00000015c0)='\x00', 0x0, &(0x7f0000001600)={@_ha_fsid={[0x3, 0x8]}, {0x9, 0xba0, 0x8000, 0x3}}, 0x28000, &(0x7f0000001640)={@_ha_fsid}, &(0x7f0000001680)=0xf3})
setsockopt$SO_BINDTODEVICE_wg(r10, 0x1, 0x19, &(0x7f0000001700)='wg1\x00', 0x4)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r8, &(0x7f0000001980)={&(0x7f0000001740)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001940)={&(0x7f0000001780)={0x1a4, 0x0, 0x300, 0x70bd26, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x9, 0x4d}}}}, [@NL80211_ATTR_IE={0x16, 0x2a, [@mic={0x8c, 0x10, {0xbf, "7d7baca5268e", @short="582d4bd4a876e96c"}}]}, @NL80211_ATTR_BSSID={0xa}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x7, 0x5}}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x1a44}, @NL80211_ATTR_IE={0x1b, 0x2a, [@ssid={0x0, 0x4, @random="02b58a70"}, @gcr_ga={0xbd, 0x6, @broadcast}, @ext_channel_switch={0x3c, 0x4, {0x7d, 0x9, 0x74, 0xe}}, @dsss={0x3, 0x1, 0x7c}]}, @NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x20}, @NL80211_ATTR_SCAN_SUPP_RATES={0xc8, 0x7d, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xc1, 0x1, "c0b76c933b23cb1f8b2de40ddb80a92bf1cfdd0ab483775c0172ba52c747a6290eb8c342efd611c93cece54a584310ddd70448cee919b3ab7fa563fc42535eb32708a023a085b002f693b457ffcd6ce45ed3cc6683bdedaba41f5a2d41ca3b98a7625c433eca99a3a48a98697b698294eef22b56bfb78b8db70a910b65afd534a26d8c0de9783b75202586bfa74fb5490b0254a18dcae54b55c5d9b5238dbbd4bf7f0d671e2d8365c149b03ba1b5bd60a4d6bc2e3a0b48457dfce81022"}]}, @NL80211_ATTR_IE={0x55, 0x2a, [@preq={0x82, 0x2b, {{0x1, 0x1, 0x1, 0x0, 0x1}, 0x4, 0x7, 0x5, @device_a, 0x3, @value=@broadcast, 0x7ff, 0x8, 0x1, [{{0x1, 0x0, 0x1}, @device_b}]}}, @channel_switch={0x25, 0x3, {0x0, 0x7}}, @ht={0x2d, 0x1a, {0x1000, 0x3, 0x0, 0x0, {0x0, 0x7, 0x0, 0xb, 0x0, 0x0, 0x0, 0x1}, 0x1, 0x8, 0xb}}, @dsss={0x3, 0x1, 0x38}]}, @NL80211_ATTR_MAC={0xa}]}, 0x1a4}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000080)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000001a00)={0x0, 0x3c, &(0x7f00000019c0)=[@in={0x2, 0x4e22, @empty}, @in6={0xa, 0x4e21, 0x1, @mcast1, 0x8}, @in={0x2, 0x4e23, @multicast2}]}, &(0x7f0000001a40)=0x10)
r11 = syz_genetlink_get_family_id$devlink(&(0x7f0000001ac0), r10)
sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r8, &(0x7f0000001bc0)={&(0x7f0000001a80)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001b80)={&(0x7f0000001b00)={0x7c, r11, 0x400, 0x70bd26, 0x25dfdbfc, {}, [{{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x9}, {0x6, 0x11, 0x81}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x6}, {0x6, 0x11, 0x2}}]}, 0x7c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000000)
ioctl$XFS_IOC_GETPARENTS(r6, 0xc028583e, &(0x7f0000001d40)={{[0x6, 0x2a28, 0x7, 0x40]}, 0x0, 0x2, 0x6, 0x0, &(0x7f0000001c00)=[{{@align=0xb6b6, {0xfffa, 0xf0d6, 0xbab6, 0xffffffff}}, 0x8, 0x0, '%i\x00'}, {{@align=0x1, {0x4fa, 0x0, 0x7, 0x3}}, 0x1, 0x0, '#\x00'}, {{@_ha_fsid={[0x3, 0x3fd]}, {0x200, 0x10, 0x4, 0xffffffff}}, 0xc2, 0x0, '(.*['}, {{@align=0x7, {0x5, 0x6, 0x7, 0xfffffffffffffffe}}, 0x1, 0x0, '\x00'}, {{@align=0x8, {0x7, 0x9e, 0x81, 0x2}}, 0xb21, 0x0, '\\\x00'}, {{@align=0xfffffffffffffff7, {0x6, 0x3, 0x101, 0x1}}, 0x400, 0x0, 'eth\x00'}, {{@_ha_fsid={[0x6, 0x7ff]}, {0xe, 0x7, 0x2, 0xffffffff}}, 0x6, 0x0, 'devlink\x00'}, {{@_ha_fsid={[0x0, 0x15]}, {0x9, 0x2, 0x0, 0x4}}, 0x9, 0x0, 'TIPCv2\x00'}]})

503.788466ms ago: executing program 1 (id=5700):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4a93673977027fd882866a0f2e0b9358ac4441da1cf9a819c37a4ee82057ab73010cbec924f399a421b80816688f89e12e193740ec94f3d3e51adba1b204873d51da9a1e3fd1b89d765abfdfc78fc9e022eaa4d2d26162fc5ff84e37d8b22e5e02d74f00955d289047c92baf588b957b72684ea26d3498e399adcc696ba6f605c0034e7be4e18034474516e3b22f2022401d43fb1c12407b02c8e8c0539c7a78000b16eef9ab6a45e8308b6df4"], 0x7c}}, 0x40811)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'})
r1 = socket(0x1, 0x803, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080))
r3 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="7fff0000000000002800128009000100766c616e000000001800028006000100340200000c0002001f0000001e00000008000500", @ANYRES32=r2], 0x50}}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket(0x1, 0x803, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="500000001000210400000000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="adffa888e16000002800128009000100766c616e00000000180002800c0002000e0000000a000000060001000001000008000500", @ANYRES32=r6], 0x50}}, 0x2)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0a000000040000000400000012000000d6180000", @ANYRES32, @ANYBLOB="77006c05657d4b0d000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fcffffff0200"/28], 0x48)
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r1, 0x84, 0x6c, &(0x7f0000000300)={<r7=>0x0, 0xdd, "0106124341ab511baf5f2e22aee9da8f434a9a7d01187ecc4565c4c193ae2272f4f79b2b6b41a14448643401310c6665a342cafc234f2792e6d51e7afbabc66987e22e583a266bad6fe20a0a44e7c655df21a79619bd802797e9e16b3d5a43ed59f10cbad923de1361c3370bf120b3d623bb4d160d09c2734bbfa3a869e09faa944c149dc9e55ea7c0b5fff667e75829e73503dc022c9054be65c96e5c230c4a6b08a7155ecae61d4cdbb87f5c822451f2f8a833694a9a6ea6829ad6569e781aceff81b820e881071db248040167428431dce179d27b77b8c7fa4870a0"}, &(0x7f0000000400)=0xe5)
setsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000440)=@assoc_value={r7, 0x4}, 0x8)
sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000940)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a88000000060a0b040000000000000000020000005c000480580001800a0001006d617463680000004800028008000240000000001c0003004cb43801b2486e8f58c2052fade1bc2c62cdeb7521cf85f60e0001007374617469737469630000000e000100636f6e6e62797465730000000900010073797a30000000000900020073797a32"], 0xb0}}, 0x0)

428.265661ms ago: executing program 0 (id=5701):
r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x2, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000002000000000000000002000018120000", @ANYRES32=r0, @ANYBLOB="95ffffff00000000b70300000000000085000000ae000000b70000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)

295.986535ms ago: executing program 0 (id=5702):
r0 = socket(0x80000000000000a, 0x2, 0x0)
setsockopt$MRT_DEL_MFC(r0, 0x0, 0xcd, 0x0, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0xb, 0x80806, 0x5)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0)
r3 = socket(0x2a, 0x2, 0x0)
getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000600)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=@newtfilter={0x3c, 0x2c, 0x52f, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {}, {}, {0x2, 0xe}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_CLASSID={0x8, 0x1, {0x4, 0x1}}]}}]}, 0x3c}}, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0)
getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={<r9=>0xffffffffffffffff})
sendmsg$NBD_CMD_RECONFIGURE(r7, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000000c0)=ANY=[@ANYBLOB="84000000", @ANYRES16=r8, @ANYBLOB="010027bd7000ffdbdf25030000000c0005002001000000000000340007800c00018008000100", @ANYRES32, @ANYBLOB="0c00018008000100", @ANYRES32, @ANYBLOB="0c00018008000100", @ANYRES32, @ANYBLOB="0c00018008000100", @ANYRES32=r9, @ANYBLOB="1c0007800c00018008000100", @ANYRES32=r9, @ANYBLOB="0c00018006000100", @ANYRES32=r9, @ANYBLOB="080001"], 0x84}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r6, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000)
sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="200000001400010028bd7000fcdbdf25022001c8", @ANYRES32=r6, @ANYBLOB="0800020072581d6c"], 0x20}}, 0x40000c0)
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x58, 0x10, 0x503, 0x70bd2a, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3806}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GRE_OKEY={0x8, 0x5, 0x8c}, @IFLA_GRE_LOCAL={0x14, 0x6, @private1}]}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x58}}, 0x0)

68.596852ms ago: executing program 2 (id=5703):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010008506000000000000000065000000", @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x40010)
sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newlink={0x4c, 0x10, 0xffffff1f, 0xfffffffc, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x10000}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x28}}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0x502e}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x0)

0s ago: executing program 1 (id=5704):
r0 = socket$key(0xf, 0x3, 0x2)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x187}, 0x94)
r2 = socket$nl_crypto(0x10, 0x3, 0x15)
getsockopt$IP_VS_SO_GET_INFO(r2, 0x0, 0x481, &(0x7f0000000040), &(0x7f0000000100)=0xc)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000002060101000000000000000000f90003050005000a0000000900020073797a3000000000050001009f"], 0x30}}, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYRES16=r0, @ANYRES16=r0, @ANYRES64=r1], 0x30}, 0x1, 0x0, 0x0, 0x2084}, 0x4000050)
r4 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendto$inet6(r4, &(0x7f00000002c0)="f9", 0x1, 0x0, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000000)={0x1, [<r5=>0x0]}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000cc0)=ANY=[@ANYRES32=r4, @ANYBLOB="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"], 0x8)
getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r4, 0x84, 0x1b, &(0x7f00000005c0)={r5, 0x13, "e48b537b7242932f1ec14d0fb516fac362cab0"}, &(0x7f00000006c0)=0x1b)
shutdown(r4, 0x1)
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x74, &(0x7f0000000200)={0x0, 0x0, 0x10}, &(0x7f0000000240)=0x18)
sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="7ec900000200000027bd700000000400"], 0x10}}, 0x4080)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
writev(r1, 0x0, 0x0)
r7 = socket$kcm(0x2, 0x200000000000001, 0x106)
setsockopt$sock_attach_bpf(r7, 0x6, 0x19, &(0x7f0000000ec0), 0x4)
sendmsg$inet(r7, &(0x7f00000029c0)={0x0, 0x0, 0x0}, 0x30000001)
r8 = socket$inet6_icmp(0xa, 0x2, 0x3a)
setsockopt$inet6_IPV6_PKTINFO(r8, 0x29, 0x32, &(0x7f0000000300)={@dev={0xfe, 0x80, '\x00', 0x3d}}, 0x14)
r9 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x25, 0x11, @void}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b80)={0x18, 0x11, &(0x7f0000000fc0)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018360000040000000f00000000000000bf91000000000000b7020000000000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000e00)='syzkaller\x00', 0x2, 0xa7, &(0x7f00000004c0)=""/167, 0xc3000, 0x1c, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000580)={0x1, 0x2}, 0x8, 0x10, &(0x7f00000001c0)={0x3, 0xd, 0xc7b, 0x9}, 0x10, 0x0, 0x0, 0x6, &(0x7f0000000600)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000640)=[{0x4, 0x5, 0x5, 0xc}, {0x9, 0x5, 0x2, 0x9}, {0x0, 0x5, 0xb, 0x6}, {0x5, 0x4, 0xd, 0x3}, {0x80, 0x3, 0xe, 0x2}, {0x2, 0x3, 0x3}], 0x10, 0x2}, 0x94)
r10 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000c40)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0)
bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000c80)={r9, r10, 0x4, r10}, 0x10)
syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000180), r6)
sendmsg$NLBL_CIPSOV4_C_ADD(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000010c0)=ANY=[], 0x68}}, 0x20004000)
r11 = socket$inet_sctp(0x2, 0x4, 0x84)
setsockopt$IPT_SO_SET_REPLACE(r11, 0x0, 0x40, &(0x7f0000000700)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3e8, 0xa0, 0xa0, 0x1d8, 0xa0, 0x138, 0xa0, 0x380, 0x380, 0x380, 0x380, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x3, 0x7, @multicast1, 0x4e22}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0xe, 0x4, 0x2}}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x36}, @loopback, 0x1fffffffe, 0xff, 'pimreg1\x00', 'dummy0\x00', {0xff}, {}, 0x2, 0x1, 0x40}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x4, @remote, 0x4e21}}}, {{@ip={@remote, @multicast1, 0xff, 0x0, 'virt_wifi0\x00', 'team_slave_0\x00', {0xff}, {0xff}, 0x6c, 0x2, 0x59}, 0x0, 0x70, 0x98}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x1, 0x3, 0x2}, {0x3, 0x0, 0x4}}}}, {{@ip={@local, @remote, 0xffffff00, 0xff, 'gretap0\x00', 'batadv0\x00', {}, {}, 0x84, 0x1, 0x5}, 0x0, 0x70, 0xe0}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x1, 0x0, 0x46c5, 0x0, 0x0, "2b4e84400af0c61fe4b77d62d90d10d33fce7dc71425d4209d84f086ee827a4b064c417320a5f57e2dcc64d51dd574bd8c47cabfe9f21364d0c1a47f3240e300"}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x448)

kernel console output (not intermixed with test programs):

nd 0x0406 tx timeout
[  478.886885][T19497] __nla_validate_parse: 9 callbacks suppressed
[  478.886909][T19497] netlink: 104 bytes leftover after parsing attributes in process `syz.0.3921'.
[  479.173671][T19509] netlink: 156 bytes leftover after parsing attributes in process `syz.0.3925'.
[  479.251966][T19513] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3927'.
[  479.366524][T19520] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3930'.
[  479.377887][T19520] nbd: must specify a size in bytes for the device
[  479.390924][T19520] netlink: 'syz.2.3930': attribute type 11 has an invalid length.
[  479.683913][T19535] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3933'.
[  479.873304][T19547] tipc: Invalid UDP bearer configuration
[  479.873364][T19547] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  480.247084][T19567] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3941'.
[  480.754604][T19509] batman_adv: batadv0: Interface deactivated: wlan0
[  480.775851][T19584] netlink: 'syz.3.3945': attribute type 1 has an invalid length.
[  480.843821][T19584] bond8: entered promiscuous mode
[  480.849726][T19584] bond8: entered allmulticast mode
[  480.855456][T19584] 8021q: adding VLAN 0 to HW filter on device bond8
[  481.066373][T19591] netlink: 'syz.1.3946': attribute type 12 has an invalid length.
[  481.378914][T19603] sctp: [Deprecated]: syz.0.3948 (pid 19603) Use of int in max_burst socket option.
[  481.378914][T19603] Use struct sctp_assoc_value instead
[  481.581947][T19614] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3952'.
[  481.697629][T19621] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3954'.
[  481.713145][T19614] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1
[  481.735130][T19620] netlink: 'syz.3.3955': attribute type 2 has an invalid length.
[  481.761647][T19614] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue
[  481.771967][T19614] gretap1: entered promiscuous mode
[  481.779793][T19614] gretap1: entered allmulticast mode
[  481.918751][T19621] team0: Port device team_slave_0 removed
[  481.955226][T19627] netlink: 596 bytes leftover after parsing attributes in process `syz.4.3957'.
[  481.988977][T19627] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3957'.
[  482.012340][T19637] netlink: 'syz.3.3959': attribute type 21 has an invalid length.
[  482.590085][T19660] syzkaller0: entered promiscuous mode
[  482.621258][T19660] syzkaller0: entered allmulticast mode
[  482.688366][T19662] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1514) !
[  483.117640][ T5633] Bluetooth: hci4: command 0x0406 tx timeout
[  483.825196][T19709] netlink: 'syz.4.3974': attribute type 2 has an invalid length.
[  484.028865][T19720] mac80211_hwsim hwsim29 ÿ
: renamed from wlan1
[  484.111009][T19727] __nla_validate_parse: 3 callbacks suppressed
[  484.111030][T19727] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3981'.
[  484.128168][T19719] sctp: [Deprecated]: syz.0.3979 (pid 19719) Use of int in max_burst socket option deprecated.
[  484.128168][T19719] Use struct sctp_assoc_value instead
[  484.194637][T19719] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3979'.
[  484.760032][T19749] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3985'.
[  484.821071][T19752] syzkaller1: entered promiscuous mode
[  484.839894][T19752] syzkaller1: entered allmulticast mode
[  485.267971][T19774] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3994'.
[  485.279872][T19776] netlink: 'syz.0.3996': attribute type 8 has an invalid length.
[  486.240838][T19828] netlink: 'syz.0.4004': attribute type 17 has an invalid length.
[  486.257274][T19828] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4004'.
[  486.277364][T19828] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4004'.
[  486.360308][T19828] gretap0: entered promiscuous mode
[  486.553158][T19828] gretap0: left promiscuous mode
[  487.024458][T19857] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4008'.
[  487.129999][T19860] xt_hashlimit: size too large, truncated to 1048576
[  487.143312][T19861] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4009'.
[  487.165298][T19864] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4010'.
[  487.215998][T19857] netlink: 45349 bytes leftover after parsing attributes in process `syz.2.4008'.
[  487.296056][T19862] vlan2: entered allmulticast mode
[  487.303160][T19862] bridge0: entered allmulticast mode
[  487.439811][T19857] 0ªX¹¦Dö»: renamed from gretap0 (while UP)
[  487.516052][T19857] 0ªX¹¦Dö»: entered allmulticast mode
[  487.875565][T19898] netlink: 'syz.0.4017': attribute type 10 has an invalid length.
[  487.960026][T19898] geneve3: entered promiscuous mode
[  488.037646][T19898] geneve3: entered allmulticast mode
[  488.391978][T19918] syzkaller0: entered promiscuous mode
[  488.418456][T19918] syzkaller0: entered allmulticast mode
[  488.442762][T19927] xt_cgroup: path and classid specified
[  488.630550][T19918] can: request_module (can-proto-5) failed.
[  488.693104][T19939] xt_TPROXY: Can be used only with -p tcp or -p udp
[  489.200955][T19963] bridge5: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  489.241877][T19964] syzkaller0: entered promiscuous mode
[  489.253296][T19964] syzkaller0: entered allmulticast mode
[  489.353312][T19966] netlink: 'syz.3.4038': attribute type 23 has an invalid length.
[  501.519727][ T1319] ieee802154 phy0 wpan0: encryption failed: -22
[  501.526717][ T1319] aoe: packet could not be sent on ipvlan1.  consider increasing tx_queue_len
[  508.719699][ T5644] Bluetooth: hci1: command 0x0406 tx timeout
[  529.198219][ T5644] Bluetooth: hci0: command 0x0406 tx timeout
[  532.259318][ T1157] pimreg3: left allmulticast mode
[  532.390768][ T1157] ip6gretap0 (unregistering): left promiscuous mode
[  532.516020][T14158] smbdirect: ib_dev[syz2] removed
[  532.556290][ T1157] bond1 (unregistering): (slave gretap1): Releasing active interface
[  532.650107][ T1157] bond24 (unregistering): (slave bridge2): Releasing active interface
[  532.658416][ T1157] bridge2 (unregistering): left promiscuous mode
[  532.664807][ T1157] bridge2 (unregistering): left allmulticast mode
[  532.683589][ T1157] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  532.695615][ T1157] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  532.707567][ T1157] bond0 (unregistering): (slave team0): Releasing backup interface
[  532.716633][ T1157] bond0 (unregistering): Released all slaves
[  532.729534][ T1157] bond1 (unregistering): Released all slaves
[  532.746351][ T1157] bond2 (unregistering): Released all slaves
[  532.763902][ T1157] bond3 (unregistering): Released all slaves
[  532.780688][ T1157] bond4 (unregistering): Released all slaves
[  532.806088][ T1157] bond5 (unregistering): Released all slaves
[  532.823223][ T1157] bond6 (unregistering): Released all slaves
[  532.845188][ T1157] bond7 (unregistering): Released all slaves
[  532.861988][ T1157] bond8 (unregistering): Released all slaves
[  532.884620][ T1157] bond9 (unregistering): Released all slaves
[  532.901585][ T1157] bond10 (unregistering): Released all slaves
[  532.923774][ T1157] bond11 (unregistering): Released all slaves
[  532.941670][ T1157] bond12 (unregistering): (slave veth0_to_bond): Releasing backup interface
[  532.953637][ T1157] bond12 (unregistering): Released all slaves
[  532.974388][ T1157] bond13 (unregistering): Released all slaves
[  532.992183][ T1157] bond14 (unregistering): Released all slaves
[  533.011288][ T1157] bond15 (unregistering): Released all slaves
[  533.032499][ T1157] bond16 (unregistering): Released all slaves
[  533.048842][ T1157] bond17 (unregistering): Released all slaves
[  533.070128][ T1157] bond18 (unregistering): Released all slaves
[  533.093338][ T1157] bond19 (unregistering): Released all slaves
[  533.111089][ T1157] bond20 (unregistering): Released all slaves
[  533.127983][ T1157] bond21 (unregistering): Released all slaves
[  533.145284][ T1157] bond22 (unregistering): Released all slaves
[  533.163499][ T1157] bond23 (unregistering): Released all slaves
[  533.202014][ T1157] bond24 (unregistering): Released all slaves
[  533.220659][ T1157] bond25 (unregistering): Released all slaves
[  533.237127][ T5766] xfrm0 speed is unknown, defaulting to 1000
[  533.243340][ T5766] infiniband syz2: ib_query_port failed (-19)
[  533.552391][ T1157] tipc: Disabling bearer <udp:syz2>
[  533.561018][ T1157] tipc: Left network mode
[  534.395201][ T1157] hsr_slave_0: left promiscuous mode
[  534.402216][ T1157] hsr_slave_1: left promiscuous mode
[  534.411479][ T1157] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  534.419398][ T1157] batman_adv: batadv0: Removing interface: batadv_slave_0
[  534.429242][ T1157] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  534.436688][ T1157] batman_adv: batadv0: Removing interface: batadv_slave_1
[  534.454862][ T1157] veth1_macvtap: left promiscuous mode
[  534.460617][ T1157] veth0_macvtap: left promiscuous mode
[  534.466372][ T1157] veth1_vlan: left promiscuous mode
[  534.472273][ T1157] veth0_vlan: left promiscuous mode
[  534.833964][ T1157] team0 (unregistering): Port device team_slave_1 removed
[  534.857908][ T1157] team0 (unregistering): Port device team_slave_0 removed
[  535.272280][ T1157] IPVS: stop unused estimator thread 0...
[  545.417549][T20019] digital: digital_start_poll: Unknown protocol
[  545.551204][T20026] xt_CT: You must specify a L4 protocol and not use inversions on it
[  545.557073][T20029] __nla_validate_parse: 7 callbacks suppressed
[  545.557125][T20029] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4044'.
[  545.736037][T20043] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4048'.
[  546.051102][T20056] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  546.469616][T20082] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4061'.
[  546.652409][T20096] netlink: 'syz.1.4065': attribute type 2 has an invalid length.
[  546.684873][T20096] netlink: 244 bytes leftover after parsing attributes in process `syz.1.4065'.
[  546.716597][T20096] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4065'.
[  546.810555][T20089] syzkaller1: entered promiscuous mode
[  546.833340][T20089] syzkaller1: entered allmulticast mode
[  546.939617][T20110] IPVS: set_ctl: invalid protocol: 50 172.30.1.2:20004
[  546.964467][T20107] syzkaller0: entered promiscuous mode
[  546.990596][T20107] syzkaller0: entered allmulticast mode
[  547.017785][T20112] TC_ACT_REPEAT abuse ?
[  547.214883][T20122] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4073'.
[  547.404288][T20135] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4076'.
[  547.503660][T20137] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4077'.
[  547.617256][T20143] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4079'.
[  547.906844][T20159] netlink: 596 bytes leftover after parsing attributes in process `syz.2.4085'.
[  547.979658][T20161] netlink: 'syz.4.4086': attribute type 22 has an invalid length.
[  548.003594][T20161] netlink: 'syz.4.4086': attribute type 22 has an invalid length.
[  548.189495][T20172] veth0: entered promiscuous mode
[  548.216806][T20166] veth0: left promiscuous mode
[  548.325991][T20178] bond7: option lacp_active: mode dependency failed, not supported in mode balance-rr(0)
[  548.373902][T20178] bond7 (unregistering): Released all slaves
[  548.404787][T20188] netlink: 'syz.3.4092': attribute type 1 has an invalid length.
[  549.026694][T20215] batman_adv: batadv0: Removing interface: wlan0
[  549.114243][T20214] nbd: must specify at least one socket
[  550.025935][ T5746] IPVS: starting estimator thread 0...
[  550.091961][T20274] IPVS: sh: FWM 3 0x00000003 - no destination available
[  550.129232][T20272] IPVS: using max 31 ests per chain, 74400 per kthread
[  550.417960][T20294] Bluetooth: hci1: expected 19 bytes, got 2 bytes
[  550.865526][T20315] netlink: 'syz.2.4134': attribute type 12 has an invalid length.
[  550.899483][T20319] syzkaller1: entered promiscuous mode
[  550.906851][T20319] syzkaller1: entered allmulticast mode
[  551.255796][T20341] __nla_validate_parse: 22 callbacks suppressed
[  551.255818][T20341] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4142'.
[  551.332315][T20345] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4139'.
[  551.369193][T20345] bond0: ARP target 8.4.0.0 is already present
[  551.376041][T20345] bond0: option arp_ip_target: invalid value (1032)
[  551.576110][T20349] netlink: 1116 bytes leftover after parsing attributes in process `syz.0.4144'.
[  551.601428][T20355] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4146'.
[  551.621201][T20349] netlink: 1116 bytes leftover after parsing attributes in process `syz.0.4144'.
[  551.636884][T20356] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4146'.
[  551.654845][T20349] netlink: 1116 bytes leftover after parsing attributes in process `syz.0.4144'.
[  551.673708][T20355] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4146'.
[  551.678837][T20362] netlink: 'syz.4.4147': attribute type 5 has an invalid length.
[  551.706476][T20355] xfrm0 speed is unknown, defaulting to 1000
[  551.715343][T20362] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4147'.
[  551.778870][T20355] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4146'.
[  552.362546][T20395] netlink: 'syz.3.4158': attribute type 15 has an invalid length.
[  553.182411][T20442] tipc: Enabling of bearer <eth:s> rejected, failed to enable media
[  553.492056][T20463] xt_hashlimit: overflow, rate too high: 0
[  553.891953][T20480] veth7: entered allmulticast mode
[  553.921925][  T810] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  554.175716][T20498] netlink: 'syz.1.4192': attribute type 4 has an invalid length.
[  554.238193][ T5639] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  554.249657][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  554.400319][ T5746] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  555.059219][   T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  555.283039][T20575] x_tables: unsorted entry at hook 1
[  555.293622][T20575] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  555.441224][ T5746] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  555.569642][T20586] IPv6: NLM_F_CREATE should be specified when creating new route
[  555.591360][T20586] xt_hashlimit: size too large, truncated to 1048576
[  555.635792][T20588] netlink: 'syz.1.4220': attribute type 11 has an invalid length.
[  555.837692][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  556.180641][   T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  556.224734][T20613] netlink: 'syz.3.4229': attribute type 1 has an invalid length.
[  556.345279][T20613] 8021q: adding VLAN 0 to HW filter on device bond9
[  556.406239][T20615] bond9: (slave veth17): Enslaving as an active interface with a down link
[  556.424287][T20629] __nla_validate_parse: 20 callbacks suppressed
[  556.424307][T20629] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4233'.
[  556.442159][T20629] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4233'.
[  556.464092][T20620] 8021q: adding VLAN 0 to HW filter on device batadv1
[  556.478346][ T5746] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  556.535156][T20620] bond9: (slave batadv1): making interface the new active one
[  556.564825][T20620] batadv1: entered promiscuous mode
[  556.581435][T20620] bond9: (slave batadv1): Enslaving as an active interface with an up link
[  556.875748][T20648] ip6erspan1: entered allmulticast mode
[  556.906685][T20652] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4240'.
[  557.277618][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  557.996249][   T12] pimreg: left allmulticast mode
[  558.565303][   T12] bond7 (unregistering): (slave ip6gretap1): Releasing active interface
[  558.644886][T14147] smc: removing ib device syz1
[  558.734729][T14147] smbdirect: ib_dev[syz1] removed
[  558.911433][   T12] bond0 (unregistering): (slave gretap1): Releasing active interface
[  559.147342][   T12] bond3 (unregistering): (slave bridge2): Releasing backup interface
[  559.155792][   T12] bridge2 (unregistering): left promiscuous mode
[  559.341643][   T12] bond20 (unregistering): (slave bridge6): Releasing backup interface
[  559.367046][   T12] bridge6 (unregistering): left promiscuous mode
[  559.378950][   T12] bridge6 (unregistering): left allmulticast mode
[  559.476335][   T12] .` (unregistering): (slave bond_slave_0): Releasing backup interface
[  559.508979][   T12] .` (unregistering): (slave bond_slave_1): Releasing backup interface
[  559.524978][ T5746] net_ratelimit: 7 callbacks suppressed
[  559.525001][ T5746] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  559.539494][   T12] .` (unregistering): Released all slaves
[  559.599405][   T12] bond1 (unregistering): Released all slaves
[  559.622274][   T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  559.691159][   T12] bond2 (unregistering): Released all slaves
[  559.804797][   T12] bond3 (unregistering): Released all slaves
[  559.905009][   T12] bond0 (unregistering): Released all slaves
[  559.966945][   T12] bond4 (unregistering): Released all slaves
[  560.048341][   T12] bond5 (unregistering): Released all slaves
[  560.115226][   T12] bond6 (unregistering): Released all slaves
[  560.279057][   T12] bond7 (unregistering): Released all slaves
[  560.317781][ T5766] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  560.326139][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  560.344802][   T12] bond8 (unregistering): Released all slaves
[  560.400289][ T5766] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  560.410744][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  560.425560][   T12] bond9 (unregistering): Released all slaves
[  560.503257][   T12] bond10 (unregistering): Released all slaves
[  560.541394][   T12] bond11 (unregistering): Released all slaves
[  560.563483][ T5759] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  560.614975][   T12] bond12 (unregistering): Released all slaves
[  560.649183][   T12] bond13 (unregistering): Released all slaves
[  560.694800][   T12] bond14 (unregistering): Released all slaves
[  560.746203][   T12] bond15 (unregistering): Released all slaves
[  560.778692][ T1157] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  560.815950][   T12] bond16 (unregistering): Released all slaves
[  560.857981][   T12] bond17 (unregistering): Released all slaves
[  560.963423][   T12] bond18 (unregistering): Released all slaves
[  561.050555][   T12] bond19 (unregistering): Released all slaves
[  561.131532][   T12] bond20 (unregistering): Released all slaves
[  561.322044][   T24] xfrm0 speed is unknown, defaulting to 1000
[  561.331583][   T24] syz1: Port: 1 Link DOWN
[  561.637811][ T5746] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  561.804397][T20765] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0)
[  561.940228][   T12] tipc: Disabling bearer <eth:vlan0>
[  562.014988][   T12] tipc: Left network mode
[  562.230284][T20785] sch_fq: defrate 0 ignored.
[  562.665977][T20791] 8021q: adding VLAN 0 to HW filter on device bond10
[  562.702837][T20791] bond10: entered promiscuous mode
[  562.712362][ T5639] IPVS: starting estimator thread 0...
[  562.720458][T20791] bond10: entered allmulticast mode
[  562.738457][T20791] bond0: (slave bond10): Enslaving as an active interface with an up link
[  562.808068][T20807] IPVS: using max 28 ests per chain, 67200 per kthread
[  562.962735][ T1319] ieee802154 phy0 wpan0: encryption failed: -22
[  563.162642][T20827] netlink: 'syz.0.4277': attribute type 2 has an invalid length.
[  563.306800][T20833] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4275'.
[  563.356828][T20827] : entered promiscuous mode
[  563.693113][T20850] netlink: 'syz.0.4281': attribute type 2 has an invalid length.
[  563.709937][T20853] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4282'.
[  563.733399][T20850] netlink: 'syz.0.4281': attribute type 2 has an invalid length.
[  563.945656][T20859] netlink: 'syz.1.4284': attribute type 21 has an invalid length.
[  563.983678][T20859] netlink: 128 bytes leftover after parsing attributes in process `syz.1.4284'.
[  564.040436][T20859] netlink: 3 bytes leftover after parsing attributes in process `syz.1.4284'.
[  564.229206][T20871] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4287'.
[  564.645562][T20875] bridge0: port 1(bond0) entered blocking state
[  564.652112][T20875] bridge0: port 1(bond0) entered forwarding state
[  564.694947][T20875] 8021q: adding VLAN 0 to HW filter on device bond0
[  564.734308][T20875] 8021q: adding VLAN 0 to HW filter on device team0
[  564.820005][ T5746] net_ratelimit: 12 callbacks suppressed
[  564.820026][ T5746] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  564.879636][ T1157] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  565.012711][T20875] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  565.050339][T20875] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  565.106921][T20875] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  565.256897][T20873] sch_tbf: burst 823 is lower than device syzkaller0 mtu (1500) !
[  565.267081][  T810] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  565.305995][T20880] syzkaller0: entered promiscuous mode
[  565.318448][T20880] syzkaller0: entered allmulticast mode
[  565.425825][   T12] hsr_slave_0: left promiscuous mode
[  565.459427][   T12] hsr_slave_1: left promiscuous mode
[  565.482862][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  565.530922][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  565.599834][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  565.645082][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  565.708823][   T12] veth1_macvtap: left promiscuous mode
[  565.724584][   T12] veth0_macvtap: left promiscuous mode
[  565.740191][   T12] veth1_vlan: left promiscuous mode
[  565.757102][   T12] veth0_vlan: left promiscuous mode
[  565.856168][  T187] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  565.913639][T20919] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4294'.
[  566.360102][T20826] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  566.372463][  T187] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  566.395930][T20826] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  566.411329][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  566.419513][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  566.623885][T20930] netlink: 68 bytes leftover after parsing attributes in process `syz.2.4295'.
[  566.647080][T20930] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4295'.
[  567.092461][  T810] smc: removing ib device s
z1
[  567.131527][  T810] smbdirect: ib_dev[s
z1] removed
[  567.701030][ T1096] batadv1: left promiscuous mode
[  567.767491][T20940] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[  567.789042][T20939] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4297'.
[  567.825077][T20935] netlink: 'syz.0.4296': attribute type 4 has an invalid length.
[  567.876662][T20953] netlink: 'syz.0.4296': attribute type 4 has an invalid length.
[  568.012250][T20952] netlink: 1044 bytes leftover after parsing attributes in process `syz.1.4300'.
[  568.086062][ T1227] ±ÿª¨ú
rBº“ speed is unknown, defaulting to 1000
[  568.131396][ T5766] ±ÿª¨ú
rBº“ speed is unknown, defaulting to 1000
[  568.595558][T20980] netlink: 'syz.3.4303': attribute type 1 has an invalid length.
[  568.662917][T20976] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  568.863065][T20989] netlink: 104 bytes leftover after parsing attributes in process `syz.4.4307'.
[  568.965954][T21000] netlink: 'syz.0.4306': attribute type 1 has an invalid length.
[  568.977928][T21000] netlink: 244 bytes leftover after parsing attributes in process `syz.0.4306'.
[  569.386480][T21008] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4310'.
[  569.540581][T21011] netlink: 'syz.3.4313': attribute type 1 has an invalid length.
[  569.853871][T14158] net_ratelimit: 9 callbacks suppressed
[  569.853891][T14158] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  569.912926][T21032] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4314'.
[  569.998534][ T1227] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  570.006965][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  570.015608][T14152] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  570.026653][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  570.063810][T21011] 8021q: adding VLAN 0 to HW filter on device bond12
[  570.082369][ T5759] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  570.361293][T21041] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4317'.
[  570.631486][T21049] netlink: 'syz.0.4320': attribute type 1 has an invalid length.
[  570.648181][T14152] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  570.937891][T21049] bond5: option mode: invalid value (7)
[  570.980852][T21049] bond5 (unregistering): Released all slaves
[  571.059313][T14147] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  571.139607][ T5745] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  571.283345][T21060] 
: renamed from dummy0
[  571.336689][T21081] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4326'.
[  571.796056][T21099] netlink: 'syz.1.4328': attribute type 1 has an invalid length.
[  571.810824][T21101] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4329'.
[  571.903154][T21103] netlink: 'syz.0.4329': attribute type 18 has an invalid length.
[  572.090434][T21118] netlink: 'syz.2.4331': attribute type 3 has an invalid length.
[  572.169911][  T187] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  572.202275][T21099] 8021q: adding VLAN 0 to HW filter on device bond9
[  572.224282][T21101] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR
[  572.387078][ T1096] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  572.541952][ T1096] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  572.556373][ T1096] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  572.586016][T21135] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR
[  572.623655][ T1096] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  572.632272][   T12] IPVS: stop unused estimator thread 0...
[  572.652276][T21128] netlink: 'syz.3.4336': attribute type 2 has an invalid length.
[  573.135346][T21161] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4344'.
[  573.154522][T21163] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4342'.
[  573.168141][T21161] netlink: 43 bytes leftover after parsing attributes in process `syz.0.4344'.
[  573.188318][T21161] netlink: 'syz.0.4344': attribute type 6 has an invalid length.
[  573.214956][T21161] netlink: 'syz.0.4344': attribute type 5 has an invalid length.
[  573.631933][T21187] Cannot find set identified by id 0 to match
[  574.139274][T21216] validate_nla: 2 callbacks suppressed
[  574.139296][T21216] netlink: 'syz.1.4361': attribute type 1 has an invalid length.
[  574.171632][T21216] __nla_validate_parse: 1 callbacks suppressed
[  574.171654][T21216] netlink: 756 bytes leftover after parsing attributes in process `syz.1.4361'.
[  574.858056][T21232] tc_dump_action: action bad kind
[  574.991374][T21248] netlink: 56 bytes leftover after parsing attributes in process `syz.4.4369'.
[  575.021382][T21248] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4369'.
[  575.053197][T21248] netlink: 31 bytes leftover after parsing attributes in process `syz.4.4369'.
[  575.077987][T21248] netlink: 'syz.4.4369': attribute type 3 has an invalid length.
[  575.096162][T21248] netlink: 'syz.4.4369': attribute type 2 has an invalid length.
[  575.120342][   T12] net_ratelimit: 15 callbacks suppressed
[  575.120364][   T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  575.135207][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  575.153702][T21248] netlink: 31 bytes leftover after parsing attributes in process `syz.4.4369'.
[  575.288112][  T187] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  575.349732][T21263] netlink: 'syz.0.4373': attribute type 1 has an invalid length.
[  575.448265][T21264] macvlan2: entered promiscuous mode
[  575.453732][T21264] macvlan2: entered allmulticast mode
[  575.461516][T21264] bond5: entered promiscuous mode
[  575.473648][T21264] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  575.489790][T21264] bond5: left promiscuous mode
[  575.519312][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  575.528173][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  575.539953][T21266] macvlan2: entered promiscuous mode
[  575.545483][T21266] macvlan2: entered allmulticast mode
[  575.560438][T14155] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  575.571691][T21266] bond5: entered promiscuous mode
[  575.579056][T21266] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  575.588877][T21266] bond5: left promiscuous mode
[  575.742516][T21272] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  575.757073][T21272] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  575.765237][T14155] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  575.897560][T21277] macvlan3: entered promiscuous mode
[  575.903796][T21277] macvlan3: entered allmulticast mode
[  576.014621][   T12] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  576.119008][   T12] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  576.175429][   T12] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  576.197889][T21298] netlink: 104 bytes leftover after parsing attributes in process `syz.1.4381'.
[  576.214747][   T12] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  576.232870][T21301] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4383'.
[  576.236942][T21299] netlink: 104 bytes leftover after parsing attributes in process `syz.1.4381'.
[  576.883177][T21317] IPVS: length: 8 != 1152
[  577.037611][ T5633] Bluetooth: hci0: command 0x0406 tx timeout
[  577.070258][T21348] xt_CT: You must specify a L4 protocol and not use inversions on it
[  577.073433][T21349] xt_CT: You must specify a L4 protocol and not use inversions on it
[  577.409910][T21366] netlink: 'syz.3.4394': attribute type 28 has an invalid length.
[  577.441078][T21366] netlink: 'syz.3.4394': attribute type 3 has an invalid length.
[  577.486429][T21366] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4394'.
[  577.642061][T21371] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4397'.
[  577.980302][T21396] netlink: 'syz.3.4405': attribute type 1 has an invalid length.
[  578.303793][T21407] netlink: 'syz.0.4406': attribute type 1 has an invalid length.
[  579.446362][T21450] netlink: 'syz.2.4411': attribute type 1 has an invalid length.
[  579.542703][T21450] 8021q: adding VLAN 0 to HW filter on device bond7
[  579.575001][T21453] bond7: (slave gretap0): making interface the new active one
[  579.588265][T21453] bond7: (slave gretap0): Enslaving as an active interface with an up link
[  579.858582][T21457] __nla_validate_parse: 2 callbacks suppressed
[  579.858601][T21457] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4413'.
[  579.911443][T21456] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4413'.
[  580.317795][T21476] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4417'.
[  580.454921][T21492] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4422'.
[  580.586067][T21500] netlink: 'syz.4.4424': attribute type 1 has an invalid length.
[  580.604921][T21496] netlink: 'syz.1.4422': attribute type 1 has an invalid length.
[  580.688555][T21500] 8021q: adding VLAN 0 to HW filter on device bond6
[  581.068729][T21520] netlink: 'syz.2.4428': attribute type 1 has an invalid length.
[  581.449157][T21540] netlink: 272 bytes leftover after parsing attributes in process `syz.4.4436'.
[  581.474101][T21540] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4436'.
[  581.509694][T21540] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4436'.
[  581.754253][T21558] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4439'.
[  582.392667][T21601] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4452'.
[  582.446614][ T5289] veth1_vlan: left promiscuous mode
[  582.737489][T21620] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  583.341632][T21652] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4464'.
[  583.812114][T21665] xfrm1: entered promiscuous mode
[  583.831203][T21665] xfrm1: entered allmulticast mode
[  583.942588][T21682] syzkaller0: entered promiscuous mode
[  583.956984][T21682] syzkaller0: entered allmulticast mode
[  585.223970][T21747] Unknown options in mask b7f2
[  585.243394][T21748] netlink: 'syz.0.4490': attribute type 1 has an invalid length.
[  585.265510][T21750] __nla_validate_parse: 6 callbacks suppressed
[  585.265531][T21750] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4491'.
[  585.326784][T21750] netlink: 256 bytes leftover after parsing attributes in process `syz.4.4491'.
[  585.415917][T21748] 8021q: adding VLAN 0 to HW filter on device bond6
[  585.699488][T21766] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4494'.
[  585.754592][T21773] tls_set_device_offload_rx: netdev not found
[  586.009556][T21786] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4501'.
[  586.565399][T21813] syzkaller0: entered promiscuous mode
[  586.581195][T21813] syzkaller0: entered allmulticast mode
[  586.708886][T21820] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4511'.
[  587.100934][T21837] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4517'.
[  587.125249][T21837] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4517'.
[  587.149244][T21840] Cannot find del_set index 4 as target
[  587.159148][T21837] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4517'.
[  587.682242][T21863] x_tables: duplicate underflow at hook 2
[  588.252845][T21883] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4533'.
[  588.416052][T21891] netlink: 6024 bytes leftover after parsing attributes in process `syz.4.4536'.
[  588.449481][T21891] nbd: socks must be embedded in a SOCK_ITEM attr
[  588.470292][T21891] netlink: 'syz.4.4536': attribute type 21 has an invalid length.
[  588.588857][T21891] bond7: option lacp_rate: mode dependency failed, not supported in mode broadcast(3)
[  588.620594][T21891] bond7 (unregistering): Released all slaves
[  588.731695][T14158] af_packet: tpacket_rcv: packet too big, clamped from 24 to 4294967272. macoff=96
[  589.033898][T21912] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check.
[  589.201647][T21919] netlink: 'syz.3.4543': attribute type 2 has an invalid length.
[  590.352313][T21975] __nla_validate_parse: 3 callbacks suppressed
[  590.352336][T21975] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4560'.
[  590.376861][    C1] vxcan1: j1939_tp_rxtimer: 0xffff888068e06400: rx timeout, send abort
[  590.385660][    C1] vxcan1: j1939_xtp_rx_abort_one: 0xffff888068e06400: 0x40000: (3) A timeout occurred and this is the connection abort to close the session.
[  590.702280][T21985] netlink: 'syz.0.4563': attribute type 39 has an invalid length.
[  591.071211][T22004] netlink: 'syz.4.4567': attribute type 3 has an invalid length.
[  591.321100][T22015] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4572'.
[  591.354979][T22011] bond13: option fail_over_mac: invalid value (3)
[  591.366742][T22011] bond13 (unregistering): Released all slaves
[  591.461960][T22020] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4568'.
[  591.630737][T22028] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4574'.
[  591.749862][T22034] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4575'.
[  591.837715][T22032] bridge0: port 1(syz_tun) entered disabled state
[  591.897244][T22032] bridge0: port 2(bond0) entered disabled state
[  592.051575][T22032] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  592.069520][T22032] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  592.144948][T22032] xfrm1: left allmulticast mode
[  592.151004][T22032] bond1: left promiscuous mode
[  592.156022][T22032] erspan1: left promiscuous mode
[  592.163735][T22032] bond1: left allmulticast mode
[  592.172913][T22032] erspan1: left allmulticast mode
[  592.184980][T22032] bond3: left promiscuous mode
[  592.190523][T22032] bond3: left allmulticast mode
[  592.196494][T22032] sit1: left promiscuous mode
[  592.201958][T22032] sit1: left allmulticast mode
[  592.213066][T22032] bond4: left promiscuous mode
[  592.218754][T22032] vti0: left promiscuous mode
[  592.228727][T22032] bond5: left promiscuous mode
[  592.233749][T22032] bond5: left allmulticast mode
[  592.249274][T22032] bond8: left promiscuous mode
[  592.254182][T22032] bond8: left allmulticast mode
[  592.343351][   T12] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  592.366236][   T12] netdevsim netdevsim3 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0
[  592.392048][   T12] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  592.427268][   T12] netdevsim netdevsim3 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0
[  592.443988][   T12] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  592.476075][   T12] netdevsim netdevsim3 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0
[  592.497793][   T12] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  592.515443][   T12] netdevsim netdevsim3 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0
[  592.563044][T22069] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4582'.
[  592.584280][T22069] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4582'.
[  592.586425][T22068] netlink: 'syz.4.4583': attribute type 20 has an invalid length.
[  592.604059][T22069] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4582'.
[  592.614427][T22069] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4582'.
[  592.651730][T22068] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4583'.
[  592.757753][T22068] netlink: 'syz.4.4583': attribute type 20 has an invalid length.
[  592.765736][   T12] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  592.793231][   T12] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  592.805554][T22077] openvswitch: netlink: IP tunnel dst address not specified
[  592.829028][   T12] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  592.861247][   T12] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  592.903776][T22082] netlink: 'syz.2.4588': attribute type 1 has an invalid length.
[  593.017482][  T187] IPVS: starting estimator thread 0...
[  593.059956][T22082] 8021q: adding VLAN 0 to HW filter on device bond8
[  593.158432][T22092] IPVS: using max 27 ests per chain, 64800 per kthread
[  593.197067][T22103] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  593.415910][T22112] openvswitch: netlink: IP tunnel dst address not specified
[  593.448646][T22112] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  593.894030][T22140] netlink: 'syz.2.4600': attribute type 1 has an invalid length.
[  593.989620][T22140] 8021q: adding VLAN 0 to HW filter on device bond9
[  594.014311][T22149] netlink: 'syz.1.4602': attribute type 1 has an invalid length.
[  594.115381][T22147] 8021q: adding VLAN 0 to HW filter on device bond9
[  594.130195][T22147] bond9: (slave gre1): The slave device specified does not support setting the MAC address
[  594.142981][T22147] bond9: (slave gre1): Error -95 calling set_mac_address
[  594.254522][T22151] gretap2: entered promiscuous mode
[  594.289293][T22151] bond9: (slave gretap2): making interface the new active one
[  594.308287][T22151] bond9: (slave gretap2): Enslaving as an active interface with an up link
[  594.412588][T22149] 8021q: adding VLAN 0 to HW filter on device bond10
[  594.452002][T22140] macvlan0: entered promiscuous mode
[  594.468126][T22140] macvlan0: entered allmulticast mode
[  594.491651][T22140] bond9: entered promiscuous mode
[  594.513540][T22140] 8021q: adding VLAN 0 to HW filter on device macvlan0
[  594.559010][T22140] bond9: (slave macvlan0): the slave hw address is in use by the bond; giving it the hw address of gretap2
[  594.581383][T22140] bond9: left promiscuous mode
[  595.019228][T22190] bond11: option lacp_active: mode dependency failed, not supported in mode active-backup(1)
[  595.031357][T22190] bond11 (unregistering): Released all slaves
[  595.212468][T22204] batman_adv: batadv0: Removing interface: batadv_slave_0
[  595.343735][T22214] x_tables: duplicate entry at hook 2
[  595.474245][T22217] __nla_validate_parse: 10 callbacks suppressed
[  595.474292][T22217] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4624'.
[  595.492992][T22217] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4624'.
[  595.564220][T22228] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4627'.
[  595.584311][T22231] netlink: 168 bytes leftover after parsing attributes in process `syz.2.4626'.
[  595.664141][T22235] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4630'.
[  595.697413][T22233] vlan0: entered allmulticast mode
[  595.715300][T22233] bridge1: entered allmulticast mode
[  595.852031][T22246] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4633'.
[  595.863507][T22248] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4635'.
[  595.890217][T22246] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4633'.
[  596.140573][T22270] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4641'.
[  596.235273][T22270] team0 (unregistering): Port device team_slave_0 removed
[  596.269107][T22270] team0 (unregistering): Port device team_slave_1 removed
[  596.312524][T22278] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4644'.
[  599.362668][T22326] veth0: entered promiscuous mode
[  599.378743][T22326] veth0: left promiscuous mode
[  599.588287][T22335] netlink: 'syz.3.4662': attribute type 5 has an invalid length.
[  600.243423][T22379] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  600.772923][T22408] __nla_validate_parse: 9 callbacks suppressed
[  600.772947][T22408] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4679'.
[  601.318726][T22429] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4684'.
[  601.620127][T22437] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4688'.
[  601.733517][T22443] netlink: 'syz.0.4690': attribute type 1 has an invalid length.
[  601.784620][T22446] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4690'.
[  601.833239][T22443] 8021q: adding VLAN 0 to HW filter on device bond7
[  602.081361][T22466] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4697'.
[  602.098950][T22466] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4697'.
[  602.137295][T22466] block nbd0: Unsupported socket: should be TCP or UNIX.
[  602.317397][T22484] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4698'.
[  602.410684][T22490] netlink: 'syz.4.4701': attribute type 1 has an invalid length.
[  602.460801][T22496] IPv6: NLM_F_CREATE should be specified when creating new route
[  602.478420][T22496] netlink: 'syz.0.4702': attribute type 1 has an invalid length.
[  602.565609][T22490] 8021q: adding VLAN 0 to HW filter on device bond7
[  602.789591][T22505] netlink: 'syz.1.4703': attribute type 2 has an invalid length.
[  605.406490][T22504] lo: entered allmulticast mode
[  605.510460][T22505] : entered promiscuous mode
[  605.766398][T22527] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4712'.
[  605.902757][T22532] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4715'.
[  605.923281][T22536] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4716'.
[  605.968780][T22533] netlink: 'syz.4.4714': attribute type 21 has an invalid length.
[  606.009640][T22533] netlink: 128 bytes leftover after parsing attributes in process `syz.4.4714'.
[  606.036446][T22533] netlink: 3 bytes leftover after parsing attributes in process `syz.4.4714'.
[  606.117803][T22549] netlink: 188 bytes leftover after parsing attributes in process `syz.0.4719'.
[  606.429461][T22572] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4726'.
[  606.500168][T22576] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4727'.
[  606.553959][T22570] 8021q: adding VLAN 0 to HW filter on device bond0
[  606.588182][T22570] 8021q: adding VLAN 0 to HW filter on device team0
[  606.644830][T22583] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4729'.
[  606.661620][T22570] 8021q: adding VLAN 0 to HW filter on device batadv0
[  606.787775][T22588] netlink: 'syz.1.4731': attribute type 1 has an invalid length.
[  606.802974][T22570] batman_adv: batadv0: Interface activated: batadv_slave_1
[  606.819479][T22570] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  606.830472][T22570] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  606.858976][T22570] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  607.213471][T22588] bond11: entered promiscuous mode
[  607.236164][T22588] bond11: entered allmulticast mode
[  607.260845][T22588] 8021q: adding VLAN 0 to HW filter on device bond11
[  607.915477][T22626] bond13: option fail_over_mac: invalid value (16)
[  607.935158][T22626] bond13 (unregistering): Released all slaves
[  608.328508][T22655] netlink: 'syz.2.4747': attribute type 1 has an invalid length.
[  608.419602][T22655] bond10: entered promiscuous mode
[  608.425028][T22655] bond10: entered allmulticast mode
[  608.432916][T22655] 8021q: adding VLAN 0 to HW filter on device bond10
[  608.899344][T22691] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4752'.
[  608.913455][T22690] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1303
[  609.259407][T22710] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4760'.
[  611.396243][T22660] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  611.629137][T22723] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check.
[  611.776466][T22734] netlink: 'syz.0.4769': attribute type 1 has an invalid length.
[  611.786180][T22734] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4769'.
[  611.806511][T22734] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4769'.
[  611.884444][T22737] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4768'.
[  611.911708][T22737] netlink: 35 bytes leftover after parsing attributes in process `syz.3.4768'.
[  611.933733][T22737] netlink: 'syz.3.4768': attribute type 5 has an invalid length.
[  611.944136][T22737] netlink: 'syz.3.4768': attribute type 6 has an invalid length.
[  611.958365][T22744] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4768'.
[  611.959712][T22745] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4772'.
[  611.967903][T22737] netlink: 35 bytes leftover after parsing attributes in process `syz.3.4768'.
[  611.992768][T22739] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4768'.
[  612.004077][T22739] netlink: 35 bytes leftover after parsing attributes in process `syz.3.4768'.
[  612.014329][T22739] netlink: 'syz.3.4768': attribute type 5 has an invalid length.
[  612.023949][T22739] netlink: 'syz.3.4768': attribute type 6 has an invalid length.
[  612.032082][T22740] bridge2: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms)
[  612.043863][T22739] netlink: 35 bytes leftover after parsing attributes in process `syz.3.4768'.
[  612.613023][T22770] macvlan0: entered promiscuous mode
[  612.644481][T22770] macvlan0: entered allmulticast mode
[  613.133459][T22805] netlink: 'syz.2.4787': attribute type 1 has an invalid length.
[  613.160635][T22806] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2
[  613.293807][T22805] bond11: entered promiscuous mode
[  613.304958][T22816] netlink: 'syz.4.4786': attribute type 2 has an invalid length.
[  613.328849][T22805] bond11: entered allmulticast mode
[  613.349965][T22805] 8021q: adding VLAN 0 to HW filter on device bond11
[  613.406289][T22823] netlink: 'syz.0.4790': attribute type 1 has an invalid length.
[  614.671075][T22900] netlink: 'syz.0.4813': attribute type 1 has an invalid length.
[  614.810326][T22900] 8021q: adding VLAN 0 to HW filter on device bond8
[  614.875387][T22906] bond8: (slave gretap1): making interface the new active one
[  614.891107][T22906] bond8: (slave gretap1): Enslaving as an active interface with an up link
[  615.045222][T22917] openvswitch: netlink: Flow actions attr not present in new flow.
[  615.514048][T22954] netlink: 'syz.0.4827': attribute type 1 has an invalid length.
[  615.793377][T22960] 8021q: adding VLAN 0 to HW filter on device bond12
[  616.092146][T22990] tipc: Started in network mode
[  616.122943][T22990] tipc: Node identity ac14142f, cluster identity 4711
[  616.143915][T22990] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  616.455573][T23001] 8021q: adding VLAN 0 to HW filter on device bond8
[  616.484164][T23001] bond0: (slave bond8): Enslaving as an active interface with an up link
[  616.690405][T23019] 8021q: adding VLAN 0 to HW filter on device bond13
[  616.831069][T23006] syzkaller0: entered promiscuous mode
[  616.845501][T23006] syzkaller0: entered allmulticast mode
[  617.032542][T23041] __nla_validate_parse: 24 callbacks suppressed
[  617.032567][T23041] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4849'.
[  619.546110][T23045] tipc: Cannot configure node identity twice
[  619.861046][T23065] syzkaller0: entered allmulticast mode
[  620.179754][T23073] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  620.326692][T23084] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4859'.
[  621.753478][T23116] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4868'.
[  621.785834][T23116] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4868'.
[  622.203195][T23136] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4875'.
[  622.232804][T23141] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4876'.
[  622.470843][T23150] syz.4.4879 (23150) used obsolete PPPIOCDETACH ioctl
[  622.614772][T23162] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4883'.
[  622.802869][T23174] validate_nla: 2 callbacks suppressed
[  622.802905][T23174] netlink: 'syz.3.4887': attribute type 2 has an invalid length.
[  622.844455][T23171] netlink: 'syz.0.4886': attribute type 1 has an invalid length.
[  622.853180][T23171] netlink: 224 bytes leftover after parsing attributes in process `syz.0.4886'.
[  622.865099][T23177] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4888'.
[  622.880418][T23176] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4888'.
[  622.910369][T23184] netlink: 'syz.4.4889': attribute type 1 has an invalid length.
[  622.987793][T23184] bond9: entered promiscuous mode
[  622.992992][T23184] bond9: entered allmulticast mode
[  622.999114][T23184] 8021q: adding VLAN 0 to HW filter on device bond9
[  623.082250][T23189] netlink: 52 bytes leftover after parsing attributes in process `syz.3.4890'.
[  623.135554][T23195] netlink: 'syz.1.4893': attribute type 1 has an invalid length.
[  623.143542][T23195] netlink: 'syz.1.4893': attribute type 1 has an invalid length.
[  623.155637][T23195] netlink: 'syz.1.4893': attribute type 2 has an invalid length.
[  623.164635][T23195] netlink: 'syz.1.4893': attribute type 2 has an invalid length.
[  623.172783][T23194] vxcan1 speed is unknown, defaulting to 1000
[  623.182759][T23195] netlink: 67 bytes leftover after parsing attributes in process `syz.1.4893'.
[  623.215657][T23194] vxcan1 speed is unknown, defaulting to 1000
[  623.218113][T23199] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  623.252386][T23194] vxcan1 speed is unknown, defaulting to 1000
[  623.505812][T23206] netdevsim netdevsim1: Direct firmware load for  failed with error -2
[  623.537396][T23206] netdevsim netdevsim1: Falling back to sysfs fallback for: 
[  623.543989][T23211] netlink: 13 bytes leftover after parsing attributes in process `syz.2.4897'.
[  623.750022][T23219] netlink: 'syz.3.4902': attribute type 1 has an invalid length.
[  623.867012][T23219] bond13: entered promiscuous mode
[  623.880285][T23219] bond13: entered allmulticast mode
[  623.891857][T23219] 8021q: adding VLAN 0 to HW filter on device bond13
[  623.959072][T23194] infiniband syz2: set active
[  623.963999][  T187] vxcan1 speed is unknown, defaulting to 1000
[  623.970451][T23194] infiniband syz2: added vxcan1
[  624.056643][T23194] smbdirect: ib_dev[syz2]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000
[  624.103289][T23194] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32
[  624.124912][T23194] smbdirect: ib_dev[syz2]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005
[  624.170492][T23194] RDS/IB: syz2: added
[  624.174934][T23194] smc: adding ib device syz2 with port count 1
[  624.181965][T23194] smc:    ib device syz2 port 1 has no pnetid
[  624.189502][   T29] vxcan1 speed is unknown, defaulting to 1000
[  624.200675][T23234] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4907'.
[  624.212018][T23194] vxcan1 speed is unknown, defaulting to 1000
[  624.235875][T23234] vlan0: entered promiscuous mode
[  624.404618][ T1319] ieee802154 phy0 wpan0: encryption failed: -22
[  624.413558][ T1319] aoe: packet could not be sent on ipvlan1.  consider increasing tx_queue_len
[  624.745215][T23249] syzkaller0: entered promiscuous mode
[  624.756788][T23249] syzkaller0: entered allmulticast mode
[  624.811468][T23252] netlink: 'syz.2.4915': attribute type 1 has an invalid length.
[  624.895078][T23257] netlink: 'syz.0.4917': attribute type 1 has an invalid length.
[  625.010153][T23252] bond14: entered promiscuous mode
[  625.034692][T23252] bond14: entered allmulticast mode
[  625.057885][T23252] 8021q: adding VLAN 0 to HW filter on device bond14
[  625.133892][T23257] 8021q: adding VLAN 0 to HW filter on device bond9
[  625.170630][T23194] vxcan1 speed is unknown, defaulting to 1000
[  625.177779][T23261] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  625.224959][T23265] bond0: (slave macsec0): Error -34 calling dev_set_mtu
[  625.313140][T23271] syzkaller0: entered promiscuous mode
[  625.324370][T23271] syzkaller0: entered allmulticast mode
[  625.881835][T23297] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[  625.933016][T23194] vxcan1 speed is unknown, defaulting to 1000
[  626.245448][T23306] 8021q: adding VLAN 0 to HW filter on device bond10
[  626.871253][T23194] vxcan1 speed is unknown, defaulting to 1000
[  627.113317][T23349] bridge9: entered allmulticast mode
[  627.272047][T23359] gretap0: entered promiscuous mode
[  627.278854][T23359] vlan0: entered promiscuous mode
[  627.435331][T23359] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  627.471156][T23366] __nla_validate_parse: 11 callbacks suppressed
[  627.471177][T23366] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4951'.
[  627.555126][T23368] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4953'.
[  627.582715][T23366] bond15: (slave veth21): Enslaving as an active interface with a down link
[  627.602177][T23362] 8021q: adding VLAN 0 to HW filter on device bond15
[  627.634153][T23194] vxcan1 speed is unknown, defaulting to 1000
[  627.842941][T23379] kthread_run failed with err -4
[  628.311759][T23403] validate_nla: 7 callbacks suppressed
[  628.311783][T23403] netlink: 'syz.1.4961': attribute type 1 has an invalid length.
[  628.386618][T23403] 8021q: adding VLAN 0 to HW filter on device bond12
[  628.423260][T23194] vxcan1 speed is unknown, defaulting to 1000
[  628.542897][T23410] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4964'.
[  628.652718][T23420] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4966'.
[  628.663391][T23418] netlink: 52 bytes leftover after parsing attributes in process `syz.2.4963'.
[  628.735678][T23422] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4967'.
[  628.755938][   T48] bond4: (slave bridge0): link status definitely down, disabling slave
[  628.784935][   T48] bond4: now running without any active interface!
[  628.797467][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  628.952811][T23428] raw_sendmsg: syz.0.4969 forgot to set AF_INET. Fix it!
[  629.001591][T23432] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4971'.
[  629.016736][T23434] syzkaller0: entered promiscuous mode
[  629.024051][T23432] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4971'.
[  629.029351][T23434] syzkaller0: entered allmulticast mode
[  629.217042][T23440] netlink: 'syz.3.4974': attribute type 12 has an invalid length.
[  629.233105][T23440] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4974'.
[  629.300931][T23443] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4975'.
[  629.445769][T23452] xt_hashlimit: invalid rate
[  629.520888][   T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  629.733892][T23468] IPVS: set_ctl: invalid protocol: 3 172.20.20.45:20000
[  629.837277][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  630.079025][   T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  630.090359][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  630.717871][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  630.877275][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  631.727720][T23569] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  631.959590][T23582] netlink: 'syz.1.5013': attribute type 22 has an invalid length.
[  631.979111][T23582] netlink: 'syz.1.5013': attribute type 22 has an invalid length.
[  632.406500][T23599] IPVS: set_ctl: invalid protocol: 12 172.30.0.2:20003
[  632.710867][T23613] __nla_validate_parse: 8 callbacks suppressed
[  632.710886][T23613] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5022'.
[  632.729462][T23613] netlink: 14 bytes leftover after parsing attributes in process `syz.3.5022'.
[  632.894358][T23619] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0
[  633.208805][T14152] bond3: (slave bridge0): link status definitely down, disabling slave
[  633.233208][T14152] bridge0: left allmulticast mode
[  633.259683][T14152] bond3: now running without any active interface!
[  633.535905][T23650] netlink: 'syz.4.5036': attribute type 16 has an invalid length.
[  633.609961][T23650] netlink: 48 bytes leftover after parsing attributes in process `syz.4.5036'.
[  633.678729][T23650] veth0_macvtap: entered allmulticast mode
[  633.903058][T23665] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5040'.
[  633.914828][T23650] syzkaller1: entered promiscuous mode
[  633.921997][T23650] syzkaller1: entered allmulticast mode
[  634.584134][T23681] netlink: 120 bytes leftover after parsing attributes in process `syz.3.5045'.
[  635.027652][T23698] netlink: 'syz.0.5051': attribute type 2 has an invalid length.
[  635.071295][T23694] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5050'.
[  635.305678][T23715] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5055'.
[  635.438899][ T5633] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[  635.441339][ T5644] Bluetooth: hci0: command 0x0406 tx timeout
[  635.915365][T16286] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0
[  636.009156][T23735] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5060'.
[  636.042390][T16286] CPU: 1 UID: 0 PID: 16286 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[  636.042417][T16286] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  636.042431][T16286] Call Trace:
[  636.042443][T16286]  <TASK>
[  636.042453][T16286]  dump_stack_lvl+0xe8/0x150
[  636.042488][T16286]  dump_header+0xd3/0x4b0
[  636.042556][T16286]  oom_kill_process+0x3ab/0x970
[  636.042596][T16286]  out_of_memory+0x1064/0x1480
[  636.042627][T16286]  ? try_charge_memcg+0xbca/0x1590
[  636.042665][T16286]  ? __pfx_out_of_memory+0x10/0x10
[  636.042687][T16286]  ? do_raw_spin_unlock+0xf5/0x210
[  636.042728][T16286]  try_charge_memcg+0xc74/0x1590
[  636.042772][T16286]  ? __pfx_try_charge_memcg+0x10/0x10
[  636.042792][T16286]  ? percpu_ref_tryget+0x15/0x180
[  636.042837][T16286]  ? charge_memcg+0x20/0x2b0
[  636.042860][T16286]  charge_memcg+0x19c/0x2b0
[  636.042886][T16286]  __mem_cgroup_charge+0x25/0x80
[  636.042907][T16286]  filemap_add_folio+0x151/0x530
[  636.042938][T16286]  __filemap_get_folio_mpol+0x4ff/0x1000
[  636.042987][T16286]  filemap_fault+0xa84/0x13b0
[  636.043026][T16286]  ? __pfx_filemap_fault+0x10/0x10
[  636.043058][T16286]  ? __pfx_filemap_map_pages+0x10/0x10
[  636.043101][T16286]  __do_fault+0x138/0x2a0
[  636.043128][T16286]  ? do_pte_missing+0x140c/0x34b0
[  636.043160][T16286]  do_pte_missing+0x2215/0x34b0
[  636.043205][T16286]  ? handle_mm_fault+0xec/0x3080
[  636.043238][T16286]  handle_mm_fault+0x1b36/0x3080
[  636.043281][T16286]  ? handle_mm_fault+0xec/0x3080
[  636.043319][T16286]  ? __pfx_handle_mm_fault+0x10/0x10
[  636.043344][T16286]  ? lock_vma_under_rcu+0x45a/0x500
[  636.043404][T16286]  do_user_addr_fault+0xa4d/0x1340
[  636.043450][T16286]  ? trace_page_fault_user+0x84/0x1e0
[  636.043478][T16286]  exc_page_fault+0x6a/0xc0
[  636.043514][T16286]  asm_exc_page_fault+0x26/0x30
[  636.043536][T16286] RIP: 0033:0x7f939b66ae74
[  636.043557][T16286] Code: 85 62 0a 00 00 48 b8 db 34 b6 d7 82 de 1b 43 48 f7 a4 24 98 00 00 00 48 8b 05 40 a9 ed 00 48 69 8c 24 90 00 00 00 e8 03 00 00 <8b> 78 08 48 8b 44 24 18 48 c1 ea 12 4c 8b 0d 39 a8 ed 00 48 01 d1
[  636.043575][T16286] RSP: 002b:00007fff4801a5e0 EFLAGS: 00010206
[  636.043594][T16286] RAX: 0000001b2d624000 RBX: 0000000000000486 RCX: 000000000009b078
[  636.043608][T16286] RDX: 000000000b73c9e1 RSI: 00007fff4801a670 RDI: 0000000000000001
[  636.043622][T16286] RBP: 00007fff4801a61c R08: 000000002bafe2cc R09: 3fffffffffffffff
[  636.043637][T16286] R10: 4000000000000000 R11: 0000000000000246 R12: 0000000000001388
[  636.043651][T16286] R13: 00000000000927c0 R14: 000000000009af20 R15: 00007fff4801a670
[  636.043686][T16286]  </TASK>
[  636.043707][T16286] memory: usage 307200kB, limit 307200kB, failcnt 570
[  636.465138][T16286] memory+swap: usage 307396kB, limit 9007199254740988kB, failcnt 0
[  636.518902][T16286] kmem: usage 307200kB, limit 9007199254740988kB, failcnt 0
[  636.560536][T16286] Memory cgroup stats for /syz2:
[  636.562039][T16286] cache 4096
[  636.623265][T16286] rss 4096
[  636.661194][T16286] rss_huge 0
[  636.670795][T16286] shmem 0
[  636.684302][T16286] mapped_file 4096
[  636.703792][T16286] dirty 0
[  636.708505][T16286] writeback 0
[  636.724457][T16286] workingset_refault_anon 0
[  636.750361][T16286] workingset_refault_file 0
[  636.783393][T16286] swap 196608
[  636.796267][T16286] swapcached 196608
[  636.896291][T16286] pgpgin 76768
[  636.943989][T16286] pgpgout 76766
[  636.973741][T16286] pgfault 174320
[  637.010634][T16286] pgmajfault 4
[  637.023907][T16286] inactive_anon 0
[  637.037782][T16286] active_anon 4096
[  637.053555][T16286] inactive_file 0
[  637.066237][T16286] active_file 4096
[  637.079272][T16286] unevictable 0
[  637.104261][T16286] hierarchical_memory_limit 314572800
[  637.146646][T16286] hierarchical_memsw_limit 9223372036854771712
[  637.174805][T16286] total_cache 4096
[  637.210113][T16286] total_rss 4096
[  637.227056][T16286] total_rss_huge 0
[  637.248995][T16286] total_shmem 0
[  637.260200][T16286] total_mapped_file 4096
[  637.273446][T16286] total_dirty 0
[  637.291638][T16286] total_writeback 0
[  637.312852][T16286] total_workingset_refault_anon 0
[  637.329524][T16286] total_workingset_refault_file 0
[  637.351078][T16286] total_swap 196608
[  637.370484][T16286] total_swapcached 196608
[  637.418829][T16286] total_pgpgin 76768
[  637.431261][T16286] total_pgpgout 76766
[  637.452357][T16286] total_pgfault 174320
[  637.468400][T16286] total_pgmajfault 4
[  637.476126][T16286] total_inactive_anon 0
[  637.487619][T16286] total_active_anon 4096
[  637.494682][T16286] total_inactive_file 0
[  637.503231][T16286] total_active_file 4096
[  637.512930][T16286] total_unevictable 0
[  637.533185][T16286] anon_cost 0
[  637.551101][T16286] file_cost 0
[  637.566828][T16286] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.5040,pid=23664,uid=0
[  637.620750][T16286] Memory cgroup out of memory: OOM victim 23664 (syz.2.5040) is already exiting. Skip killing the task
[  637.778588][T23775] syzkaller0: entered promiscuous mode
[  637.797828][T23775] syzkaller0: entered allmulticast mode
[  637.910553][T23777] bond0: (slave bond_slave_1): Error: Device is in use and cannot be enslaved
[  638.250417][T23797] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5077'.
[  638.497424][T23799] netlink: 108 bytes leftover after parsing attributes in process `syz.1.5080'.
[  638.528794][T23799] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5080'.
[  638.576897][T23807] netlink: 44 bytes leftover after parsing attributes in process `syz.4.5079'.
[  638.799372][T23818] netlink: 48 bytes leftover after parsing attributes in process `syz.3.5085'.
[  638.820579][T23818] unsupported nla_type 7424
[  638.843604][T23818] netlink: 'syz.3.5085': attribute type 8 has an invalid length.
[  638.942270][T23829] syzkaller0: entered promiscuous mode
[  638.970210][T23829] syzkaller0: entered allmulticast mode
[  639.100226][T23834] netlink: 244 bytes leftover after parsing attributes in process `syz.2.5087'.
[  639.300058][T23838] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5090'.
[  639.626166][T23850] vlan0: entered allmulticast mode
[  639.659775][T23850] bond0: entered allmulticast mode
[  639.665195][T23850] bond_slave_0: entered allmulticast mode
[  639.671499][T23850] bond_slave_1: entered allmulticast mode
[  639.730326][T23858] ip6tnl2: entered allmulticast mode
[  640.285474][T23879] syzkaller0: entered promiscuous mode
[  640.332136][T23879] syzkaller0: entered allmulticast mode
[  640.339651][T23884] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5103'.
[  640.503211][T23889] netlink: 68 bytes leftover after parsing attributes in process `syz.4.5104'.
[  640.672914][T23898] netlink: 'syz.3.5106': attribute type 1 has an invalid length.
[  640.812256][T23898] 8021q: adding VLAN 0 to HW filter on device bond14
[  641.169039][T23918] netlink: 44 bytes leftover after parsing attributes in process `syz.4.5112'.
[  641.193900][T23916] syzkaller0: entered promiscuous mode
[  641.207663][T23916] syzkaller0: entered allmulticast mode
[  641.666426][T23935] netlink: 'syz.1.5119': attribute type 1 has an invalid length.
[  641.678741][ T5633] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[  641.679130][ T5644] Bluetooth: hci0: command 0x0406 tx timeout
[  641.702436][T23933] syzkaller0: entered promiscuous mode
[  641.708284][T23933] syzkaller0: entered allmulticast mode
[  641.765938][T23935] 8021q: adding VLAN 0 to HW filter on device bond13
[  642.586836][T23984] netlink: 'syz.4.5132': attribute type 1 has an invalid length.
[  642.610418][T23984] workqueue: Failed to create a rescuer kthread for wq "bond10": -EINTR
[  642.651733][T23991] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING
[  642.704367][T23993] xt_TPROXY: Can be used only with -p tcp or -p udp
[  642.743707][T23993] xt_TPROXY: Can be used only with -p tcp or -p udp
[  642.755616][T23993] xt_TPROXY: Can be used only with -p tcp or -p udp
[  642.777520][T23993] xt_TPROXY: Can be used only with -p tcp or -p udp
[  642.795312][T23993] xt_TPROXY: Can be used only with -p tcp or -p udp
[  642.814955][T23993] xt_TPROXY: Can be used only with -p tcp or -p udp
[  642.842852][T23993] xt_TPROXY: Can be used only with -p tcp or -p udp
[  642.860250][T23993] xt_TPROXY: Can be used only with -p tcp or -p udp
[  642.878822][T23993] xt_TPROXY: Can be used only with -p tcp or -p udp
[  642.894898][T23993] xt_TPROXY: Can be used only with -p tcp or -p udp
[  642.911311][T24001] syzkaller0: entered promiscuous mode
[  642.917242][T24001] syzkaller0: entered allmulticast mode
[  643.075025][T24007] netlink: 'syz.1.5139': attribute type 10 has an invalid length.
[  643.091901][T24007] geneve2: entered promiscuous mode
[  643.107793][T24007] geneve2: entered allmulticast mode
[  643.115141][   T48] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  643.148256][   T48] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  643.173883][   T48] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  643.193311][   T48] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  643.223356][T24011] netlink: 'syz.4.5141': attribute type 1 has an invalid length.
[  643.231553][T24011] netlink: 'syz.4.5141': attribute type 4 has an invalid length.
[  643.617919][T24037] __nla_validate_parse: 11 callbacks suppressed
[  643.617950][T24037] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5151'.
[  643.891191][T24050] netlink: 'syz.2.5155': attribute type 1 has an invalid length.
[  643.900752][T24053] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5154'.
[  643.911919][T24052] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5154'.
[  643.945970][T24050] 8021q: adding VLAN 0 to HW filter on device bond16
[  644.023631][T24050] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5155'.
[  644.078047][T24057] 8021q: adding VLAN 0 to HW filter on device bond16
[  644.089228][T24057] bond16: (slave gre1): The slave device specified does not support setting the MAC address
[  644.116231][T24057] bond16: (slave gre1): Error -95 calling set_mac_address
[  644.372948][T24050] macvlan0: entered promiscuous mode
[  644.386975][T24050] macvlan0: entered allmulticast mode
[  644.410518][T24050] bond16: entered promiscuous mode
[  644.424486][T24050] 8021q: adding VLAN 0 to HW filter on device macvlan0
[  644.497567][T24050] bond16: left promiscuous mode
[  644.748966][T24078] syzkaller0: entered promiscuous mode
[  644.766486][T24078] syzkaller0: entered allmulticast mode
[  644.796120][T24089] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5161'.
[  644.816027][T24090] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5161'.
[  647.330603][T24106] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5165'.
[  647.391881][T24109] netlink: 180 bytes leftover after parsing attributes in process `syz.1.5166'.
[  647.539621][T24116] netlink: 88 bytes leftover after parsing attributes in process `syz.0.5171'.
[  647.552142][T24118] netlink: 'syz.3.5168': attribute type 11 has an invalid length.
[  647.654073][T24125] netlink: 'syz.3.5168': attribute type 4 has an invalid length.
[  647.854679][T24132] syzkaller1: entered promiscuous mode
[  647.862261][T24132] syzkaller1: entered allmulticast mode
[  647.904501][T24134] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5176'.
[  648.549260][T17376] ±ÿª¨ú
rBº“ speed is unknown, defaulting to 1000
[  648.736825][T24169] __nla_validate_parse: 4 callbacks suppressed
[  648.736848][T24169] netlink: 204 bytes leftover after parsing attributes in process `syz.1.5187'.
[  648.777650][T24174] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5189'.
[  648.876286][T24175] netlink: 76 bytes leftover after parsing attributes in process `syz.3.5188'.
[  648.927081][T24171] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5188'.
[  649.026924][T24182] syzkaller0: entered promiscuous mode
[  649.052358][T24182] syzkaller0: entered allmulticast mode
[  649.145317][T24191] netlink: 'syz.1.5190': attribute type 1 has an invalid length.
[  649.156633][T24189] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5192'.
[  649.463458][T24196] bond15: (slave gretap0): Device is not bonding slave
[  649.496247][T24196] bond15: option active_slave: invalid value (gretap0)
[  649.529879][T24196] bond15 (unregistering): Released all slaves
[  649.588573][T24205] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5197'.
[  649.674116][T24203] bond11: entered promiscuous mode
[  649.740555][T24206] macvlan2: entered promiscuous mode
[  649.750953][T24206] macvlan2: entered allmulticast mode
[  649.758785][ T5644] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[  649.761417][T20007] Bluetooth: hci0: command 0x0406 tx timeout
[  649.776494][T24206] bond11: (slave macvlan2): Opening slave failed
[  649.884891][T24219] netlink: 830 bytes leftover after parsing attributes in process `syz.1.5199'.
[  649.941823][T24223] IPv6: NLM_F_CREATE should be specified when creating new route
[  649.979073][T24223] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5200'.
[  650.080343][T20007] Bluetooth: hci2: command 0x0406 tx timeout
[  650.161522][T24234] veth1_to_bond: entered allmulticast mode
[  650.168098][T24234] veth1_to_bond: entered promiscuous mode
[  650.198592][T24234] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5204'.
[  650.254466][T24238] netlink: 'syz.2.5205': attribute type 6 has an invalid length.
[  650.271835][T24234] veth1_to_bond (unregistering): left allmulticast mode
[  650.279059][T24234] veth1_to_bond (unregistering): left promiscuous mode
[  650.295787][T24234] bond0: (slave bond_slave_1): Releasing backup interface
[  650.303904][T24234] bond_slave_1 (unregistering): left promiscuous mode
[  650.311194][T24234] bond_slave_1 (unregistering): left allmulticast mode
[  650.516178][T24249] netlink: 64 bytes leftover after parsing attributes in process `syz.2.5207'.
[  650.529539][T24250] xt_ecn: cannot match TCP bits for non-tcp packets
[  650.662355][T24253] ip6gre2: entered allmulticast mode
[  651.170949][T24272] netlink: 'syz.1.5216': attribute type 1 has an invalid length.
[  651.351087][T24272] bond14: entered promiscuous mode
[  651.387283][T24272] 8021q: adding VLAN 0 to HW filter on device bond14
[  651.395528][T24281] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  651.458949][T24278] bond14: (slave bridge3): making interface the new active one
[  651.466953][T24278] bridge3: entered promiscuous mode
[  651.475179][T24278] bond14: (slave bridge3): Enslaving as an active interface with an up link
[  652.342685][T24321] syzkaller0: entered promiscuous mode
[  652.362273][T24321] syzkaller0: entered allmulticast mode
[  652.388898][T24321] netlink: 'syz.4.5231': attribute type 2 has an invalid length.
[  652.717853][ T5633] Bluetooth: hci2: command 0x0406 tx timeout
[  653.130981][T24355] netlink: 'syz.0.5239': attribute type 75 has an invalid length.
[  653.291540][T24357] netlink: 'syz.3.5242': attribute type 1 has an invalid length.
[  653.360211][T24357] 8021q: adding VLAN 0 to HW filter on device bond15
[  653.750281][T24387] __nla_validate_parse: 11 callbacks suppressed
[  653.750304][T24387] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5252'.
[  653.824885][T24393] veth0: entered promiscuous mode
[  653.847889][T24393] netlink: 'syz.3.5253': attribute type 21 has an invalid length.
[  653.861752][T24393] netlink: 132 bytes leftover after parsing attributes in process `syz.3.5253'.
[  653.905482][T24392] veth0: left promiscuous mode
[  653.999093][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  654.112233][T24407] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5256'.
[  654.213785][T24410] netlink: 'syz.4.5257': attribute type 1 has an invalid length.
[  654.332658][T24410] bond10: entered promiscuous mode
[  654.348096][T24410] bond10: entered allmulticast mode
[  654.353815][T24410] 8021q: adding VLAN 0 to HW filter on device bond10
[  654.594640][T24426] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5261'.
[  654.612916][T24427] netlink: 'syz.3.5262': attribute type 10 has an invalid length.
[  654.640775][T24425] openvswitch: netlink: IP tunnel dst address not specified
[  654.655906][T24427] 8021q: adding VLAN 0 to HW filter on device batadv0
[  654.671562][T24425] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  654.683489][T24427] batadv0: entered promiscuous mode
[  654.690528][T24427] batadv0: entered allmulticast mode
[  654.723706][T24427] bond0: (slave batadv0): Enslaving as an active interface with an up link
[  654.766736][T24430] bond0 (unregistering): left allmulticast mode
[  654.777789][T24430] bond_slave_0: left allmulticast mode
[  654.792778][T24430] bond_slave_1: left allmulticast mode
[  654.808782][   T12] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled
[  654.818641][   T12] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled
[  654.834730][T24436] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5268'.
[  654.845042][T24430] team0: left allmulticast mode
[  654.855659][T24430] team_slave_0: left allmulticast mode
[  654.866308][T24430] team_slave_1: left allmulticast mode
[  654.873301][T24434] netlink: 'syz.1.5267': attribute type 1 has an invalid length.
[  654.884478][T24430] bond10: left allmulticast mode
[  654.890942][T24430] batadv0: left allmulticast mode
[  654.896149][T24430] bond0 (unregistering): left promiscuous mode
[  654.903560][T24430] bond_slave_0: left promiscuous mode
[  654.911167][T24430] bond_slave_1: left promiscuous mode
[  654.917010][T24430] team0: left promiscuous mode
[  654.923809][T24430] team_slave_0: left promiscuous mode
[  654.929921][T24430] team_slave_1: left promiscuous mode
[  654.936660][T24430] bond10: left promiscuous mode
[  654.938529][T24441] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5267'.
[  654.952363][T24430] batadv0: left promiscuous mode
[  654.958913][T24430] bridge0: port 2(bond0) entered disabled state
[  655.012697][T24430] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  655.036014][T24430] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  655.043224][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  655.062558][T24430] bond0 (unregistering): (slave team0): Releasing backup interface
[  655.076584][T24430] bond0 (unregistering): (slave bond10): Releasing backup interface
[  655.096617][T24430] bond0 (unregistering): (slave batadv0): Releasing backup interface
[  655.124894][T24430] bond0 (unregistering): Released all slaves
[  655.452108][T24462] syzkaller0: entered promiscuous mode
[  655.466081][T24462] syzkaller0: entered allmulticast mode
[  655.713442][T24476] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5278'.
[  655.757904][T14152] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  655.769242][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  656.053240][T24489] netlink: 364 bytes leftover after parsing attributes in process `syz.2.5283'.
[  656.077327][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  656.394269][T24507] netlink: 'syz.0.5289': attribute type 1 has an invalid length.
[  656.429600][T24509] netlink: 'syz.3.5290': attribute type 1 has an invalid length.
[  656.530869][T24507] 8021q: adding VLAN 0 to HW filter on device bond12
[  656.582091][T24512] bond12: (slave veth21): Enslaving as an active interface with a down link
[  656.673485][T24509] bond0: entered promiscuous mode
[  656.692796][T24509] 8021q: adding VLAN 0 to HW filter on device bond0
[  656.763832][T24518] 8021q: adding VLAN 0 to HW filter on device batadv2
[  656.805952][T24518] bond12: (slave batadv2): making interface the new active one
[  656.830334][T24518] batadv2: entered promiscuous mode
[  656.853046][T24518] bond12: (slave batadv2): Enslaving as an active interface with an up link
[  656.991970][T24507] bond12: (slave veth23): Enslaving as an active interface with a down link
[  657.031125][T24548] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5297'.
[  657.117345][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  657.140617][T24538] syzkaller0: entered promiscuous mode
[  657.158110][T24538] syzkaller0: entered allmulticast mode
[  658.157704][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  658.237379][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  658.968200][   T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  658.978743][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  659.197327][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  660.157557][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  660.192319][T24599] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5311'.
[  660.238809][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  660.391723][T24610] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5314'.
[  660.828126][T24637] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5322'.
[  660.854396][T24637] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5322'.
[  660.866269][T24634] syzkaller0: entered promiscuous mode
[  660.878422][T14152] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  660.886762][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  660.898916][T24634] syzkaller0: entered allmulticast mode
[  660.930658][T24647] netdevsim netdevsim0: Firmware load for '..' refused, path contains '..' component
[  660.992600][T24646] netdevsim netdevsim0: Firmware load for '..' refused, path contains '..' component
[  661.036832][T24653] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5326'.
[  661.055310][T24651] sctp: [Deprecated]: syz.2.5325 (pid 24651) Use of struct sctp_assoc_value in delayed_ack socket option.
[  661.055310][T24651] Use struct sctp_sack_info instead
[  661.076087][T24651] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5325'.
[  661.106880][T24656] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5327'.
[  661.118547][T24656] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5327'.
[  661.242132][T24658] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5325'.
[  661.315070][T24651] bond17: (slave bridge2): Enslaving as an active interface with an up link
[  661.394792][T24658] bond17: entered promiscuous mode
[  661.410278][T24658] bridge2: entered promiscuous mode
[  661.415962][T24658] bond17: entered allmulticast mode
[  661.421430][T24658] bridge2: entered allmulticast mode
[  661.448204][T24658] 8021q: adding VLAN 0 to HW filter on device bond17
[  661.499143][T24677] geneve3: entered promiscuous mode
[  661.508981][T24677] geneve3: entered allmulticast mode
[  661.556158][T24684] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  661.863878][T24697] netlink: 768 bytes leftover after parsing attributes in process `syz.3.5339'.
[  662.242607][T24716] netlink: 'syz.0.5343': attribute type 11 has an invalid length.
[  662.317349][    C1] net_ratelimit: 1 callbacks suppressed
[  662.317370][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  662.629804][T24735] openvswitch: netlink: Tunnel attr 68 out of range max 16
[  662.865696][T24747] netlink: 'syz.2.5354': attribute type 7 has an invalid length.
[  662.895961][T24747] netlink: 'syz.2.5354': attribute type 8 has an invalid length.
[  663.124031][T24757] syzkaller0: entered promiscuous mode
[  663.133640][T24757] syzkaller0: entered allmulticast mode
[  663.357370][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  663.997629][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  664.173617][T24805] FAULT_INJECTION: forcing a failure.
[  664.173617][T24805] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  664.212395][T24805] CPU: 1 UID: 0 PID: 24805 Comm: syz.1.5374 Not tainted syzkaller #0 PREEMPT(full) 
[  664.212426][T24805] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  664.212440][T24805] Call Trace:
[  664.212450][T24805]  <TASK>
[  664.212459][T24805]  dump_stack_lvl+0xe8/0x150
[  664.212506][T24805]  should_fail_ex+0x40c/0x560
[  664.212544][T24805]  _copy_from_iter+0x1d3/0x1660
[  664.212584][T24805]  ? kmem_cache_alloc_node_noprof+0x1b1/0x610
[  664.212621][T24805]  ? rcu_is_watching+0x15/0xb0
[  664.212651][T24805]  ? trace_kmem_cache_alloc+0x29/0xe0
[  664.212686][T24805]  ? kmem_cache_alloc_node_noprof+0x3b8/0x610
[  664.212720][T24805]  ? __pfx__copy_from_iter+0x10/0x10
[  664.212752][T24805]  ? __alloc_skb+0x276/0x7a0
[  664.212774][T24805]  ? __alloc_skb+0x276/0x7a0
[  664.212802][T24805]  ? netlink_sendmsg+0x650/0xb40
[  664.212828][T24805]  ? skb_put+0x112/0x210
[  664.212854][T24805]  netlink_sendmsg+0x6c0/0xb40
[  664.212890][T24805]  ? __pfx_netlink_sendmsg+0x10/0x10
[  664.212921][T24805]  ? aa_sock_msg_perm+0xf1/0x1b0
[  664.212956][T24805]  ? __pfx_netlink_sendmsg+0x10/0x10
[  664.212980][T24805]  sock_sendmsg_nosec+0x13a/0x180
[  664.213014][T24805]  ____sys_sendmsg+0x54e/0x850
[  664.213046][T24805]  ? __pfx_____sys_sendmsg+0x10/0x10
[  664.213082][T24805]  ? import_iovec+0x73/0xa0
[  664.213110][T24805]  ___sys_sendmsg+0x2a5/0x360
[  664.213164][T24805]  ? __lock_acquire+0x683/0x2cf0
[  664.213194][T24805]  ? __pfx____sys_sendmsg+0x10/0x10
[  664.213260][T24805]  ? __fget_files+0x2a/0x420
[  664.213282][T24805]  ? __fget_files+0x3a2/0x420
[  664.213321][T24805]  __x64_sys_sendmsg+0x1b1/0x290
[  664.213351][T24805]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  664.213396][T24805]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  664.213422][T24805]  do_syscall_64+0x174/0x580
[  664.213445][T24805]  ? trace_irq_disable+0x3b/0x140
[  664.213468][T24805]  ? clear_bhb_loop+0x40/0x90
[  664.213496][T24805]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  664.213519][T24805] RIP: 0033:0x7f0e1f79ce59
[  664.213541][T24805] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  664.213562][T24805] RSP: 002b:00007f0e2068a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  664.213585][T24805] RAX: ffffffffffffffda RBX: 00007f0e1fa15fa0 RCX: 00007f0e1f79ce59
[  664.213602][T24805] RDX: 000000000004c0d2 RSI: 0000200000000300 RDI: 0000000000000003
[  664.213616][T24805] RBP: 00007f0e2068a090 R08: 0000000000000000 R09: 0000000000000000
[  664.213630][T24805] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  664.213643][T24805] R13: 00007f0e1fa16038 R14: 00007f0e1fa15fa0 R15: 00007ffe1f738888
[  664.213680][T24805]  </TASK>
[  664.482355][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  664.720562][T14155] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  664.729045][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  664.816673][T24823] netlink: 'syz.1.5381': attribute type 3 has an invalid length.
[  664.857536][T24823] netlink: 'syz.1.5381': attribute type 1 has an invalid length.
[  664.873286][T24820] syzkaller0: entered promiscuous mode
[  664.880170][T24823] netlink: 'syz.1.5381': attribute type 23 has an invalid length.
[  664.888567][T24820] syzkaller0: entered allmulticast mode
[  665.254926][T24845] FAULT_INJECTION: forcing a failure.
[  665.254926][T24845] name failslab, interval 1, probability 0, space 0, times 0
[  665.289816][T24845] CPU: 1 UID: 0 PID: 24845 Comm: syz.1.5388 Not tainted syzkaller #0 PREEMPT(full) 
[  665.289845][T24845] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  665.289860][T24845] Call Trace:
[  665.289869][T24845]  <TASK>
[  665.289878][T24845]  dump_stack_lvl+0xe8/0x150
[  665.289912][T24845]  should_fail_ex+0x40c/0x560
[  665.289948][T24845]  should_failslab+0xa8/0x100
[  665.289976][T24845]  kmem_cache_alloc_noprof+0xa6/0x5f0
[  665.290009][T24845]  ? skb_clone+0x212/0x3a0
[  665.290034][T24845]  ? skb_clone+0x212/0x3a0
[  665.290067][T24845]  skb_clone+0x212/0x3a0
[  665.290096][T24845]  __netlink_deliver_tap+0x413/0x860
[  665.290136][T24845]  ? netlink_deliver_tap+0x2e/0x1b0
[  665.290161][T24845]  netlink_deliver_tap+0x19c/0x1b0
[  665.290186][T24845]  netlink_unicast+0x77f/0x940
[  665.290218][T24845]  netlink_sendmsg+0x813/0xb40
[  665.290253][T24845]  ? __pfx_netlink_sendmsg+0x10/0x10
[  665.290284][T24845]  ? aa_sock_msg_perm+0xf1/0x1b0
[  665.290318][T24845]  ? __pfx_netlink_sendmsg+0x10/0x10
[  665.290343][T24845]  sock_sendmsg_nosec+0x13a/0x180
[  665.290397][T24845]  ____sys_sendmsg+0x54e/0x850
[  665.290433][T24845]  ? __pfx_____sys_sendmsg+0x10/0x10
[  665.290473][T24845]  ? import_iovec+0x73/0xa0
[  665.290507][T24845]  ___sys_sendmsg+0x2a5/0x360
[  665.290530][T24845]  ? __lock_acquire+0x683/0x2cf0
[  665.290558][T24845]  ? __pfx____sys_sendmsg+0x10/0x10
[  665.290616][T24845]  ? __fget_files+0x2a/0x420
[  665.290633][T24845]  ? __fget_files+0x3a2/0x420
[  665.290665][T24845]  __x64_sys_sendmsg+0x1b1/0x290
[  665.290691][T24845]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  665.290727][T24845]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  665.290747][T24845]  do_syscall_64+0x174/0x580
[  665.290764][T24845]  ? trace_irq_disable+0x3b/0x140
[  665.290783][T24845]  ? clear_bhb_loop+0x40/0x90
[  665.290805][T24845]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  665.290823][T24845] RIP: 0033:0x7f0e1f79ce59
[  665.290841][T24845] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  665.290859][T24845] RSP: 002b:00007f0e2068a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  665.290878][T24845] RAX: ffffffffffffffda RBX: 00007f0e1fa15fa0 RCX: 00007f0e1f79ce59
[  665.290891][T24845] RDX: 000000000004c0d2 RSI: 0000200000000300 RDI: 0000000000000003
[  665.290904][T24845] RBP: 00007f0e2068a090 R08: 0000000000000000 R09: 0000000000000000
[  665.290915][T24845] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  665.290926][T24845] R13: 00007f0e1fa16038 R14: 00007f0e1fa15fa0 R15: 00007ffe1f738888
[  665.290953][T24845]  </TASK>
[  665.557127][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  665.596766][T24848] __nla_validate_parse: 12 callbacks suppressed
[  665.596788][T24848] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5390'.
[  665.889585][T24864] netlink: 'syz.1.5396': attribute type 2 has an invalid length.
[  666.016730][T24871] syzkaller0: entered promiscuous mode
[  666.031146][T24871] syzkaller0: entered allmulticast mode
[  666.169584][T24876] FAULT_INJECTION: forcing a failure.
[  666.169584][T24876] name failslab, interval 1, probability 0, space 0, times 0
[  666.197596][T24876] CPU: 1 UID: 0 PID: 24876 Comm: syz.1.5402 Not tainted syzkaller #0 PREEMPT(full) 
[  666.197636][T24876] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  666.197650][T24876] Call Trace:
[  666.197659][T24876]  <TASK>
[  666.197669][T24876]  dump_stack_lvl+0xe8/0x150
[  666.197703][T24876]  should_fail_ex+0x40c/0x560
[  666.197740][T24876]  should_failslab+0xa8/0x100
[  666.197769][T24876]  __kmalloc_cache_noprof+0xa8/0x660
[  666.197816][T24876]  ? genl_start+0x1c9/0x6d0
[  666.197846][T24876]  ? genl_start+0x1c9/0x6d0
[  666.197884][T24876]  genl_start+0x1c9/0x6d0
[  666.197925][T24876]  __netlink_dump_start+0x442/0x7b0
[  666.197958][T24876]  genl_family_rcv_msg_dumpit+0x213/0x310
[  666.197996][T24876]  ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10
[  666.198027][T24876]  ? genl_get_cmd+0x82f/0x960
[  666.198061][T24876]  ? __pfx___mutex_lock+0x10/0x10
[  666.198088][T24876]  ? __pfx_genl_start+0x10/0x10
[  666.198117][T24876]  ? __pfx_genl_dumpit+0x10/0x10
[  666.198147][T24876]  ? __pfx_genl_done+0x10/0x10
[  666.198180][T24876]  ? __dev_queue_xmit+0x29b/0x37f0
[  666.198306][T24876]  genl_rcv_msg+0x5e1/0x7a0
[  666.198346][T24876]  ? __pfx_genl_rcv_msg+0x10/0x10
[  666.198376][T24876]  ? __pfx_smc_pnet_dump_start+0x10/0x10
[  666.198431][T24876]  ? __pfx_smc_pnet_dump+0x10/0x10
[  666.198459][T24876]  ? __pfx_ref_tracker_free+0x10/0x10
[  666.198506][T24876]  netlink_rcv_skb+0x226/0x4a0
[  666.198533][T24876]  ? __pfx_genl_rcv_msg+0x10/0x10
[  666.198567][T24876]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  666.198611][T24876]  ? down_read+0x2be/0x330
[  666.198640][T24876]  genl_rcv+0x28/0x40
[  666.198669][T24876]  netlink_unicast+0x7bb/0x940
[  666.198706][T24876]  netlink_sendmsg+0x813/0xb40
[  666.198745][T24876]  ? __pfx_netlink_sendmsg+0x10/0x10
[  666.198777][T24876]  ? aa_sock_msg_perm+0xf1/0x1b0
[  666.198819][T24876]  ? __pfx_netlink_sendmsg+0x10/0x10
[  666.198844][T24876]  sock_sendmsg_nosec+0x13a/0x180
[  666.198879][T24876]  ____sys_sendmsg+0x54e/0x850
[  666.198911][T24876]  ? __pfx_____sys_sendmsg+0x10/0x10
[  666.198948][T24876]  ? import_iovec+0x73/0xa0
[  666.198977][T24876]  ___sys_sendmsg+0x2a5/0x360
[  666.199000][T24876]  ? __lock_acquire+0x683/0x2cf0
[  666.199030][T24876]  ? __pfx____sys_sendmsg+0x10/0x10
[  666.199098][T24876]  ? __fget_files+0x2a/0x420
[  666.199120][T24876]  ? __fget_files+0x3a2/0x420
[  666.199154][T24876]  __x64_sys_sendmsg+0x1b1/0x290
[  666.199184][T24876]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  666.199228][T24876]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  666.199252][T24876]  do_syscall_64+0x174/0x580
[  666.199272][T24876]  ? trace_irq_disable+0x3b/0x140
[  666.199293][T24876]  ? clear_bhb_loop+0x40/0x90
[  666.199321][T24876]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  666.199344][T24876] RIP: 0033:0x7f0e1f79ce59
[  666.199365][T24876] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  666.199385][T24876] RSP: 002b:00007f0e2068a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  666.199408][T24876] RAX: ffffffffffffffda RBX: 00007f0e1fa15fa0 RCX: 00007f0e1f79ce59
[  666.199424][T24876] RDX: 000000000004c0d2 RSI: 0000200000000300 RDI: 0000000000000003
[  666.199440][T24876] RBP: 00007f0e2068a090 R08: 0000000000000000 R09: 0000000000000000
[  666.199454][T24876] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  666.199467][T24876] R13: 00007f0e1fa16038 R14: 00007f0e1fa15fa0 R15: 00007ffe1f738888
[  666.199505][T24876]  </TASK>
[  666.557237][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  666.640214][   T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  667.109764][T24913] syzkaller1: entered promiscuous mode
[  667.125726][T24913] syzkaller1: entered allmulticast mode
[  667.265688][T24923] syzkaller0: entered promiscuous mode
[  667.271936][T24923] syzkaller0: entered allmulticast mode
[  667.399049][T24925] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5419'.
[  667.475441][T24925] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  667.563602][T24942] net_ratelimit: 1 callbacks suppressed
[  667.563620][T24942] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  667.597635][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  667.728209][T24950] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  667.809175][T24953] IPv6: NLM_F_CREATE should be specified when creating new route
[  667.829123][T24953] netlink: 'syz.1.5426': attribute type 1 has an invalid length.
[  667.860076][T24954] netlink: 'syz.1.5426': attribute type 12 has an invalid length.
[  667.943793][T24953] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  667.953312][T24953] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  667.971104][T24954] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  668.006819][T24962] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5430'.
[  668.018340][T24954] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  668.026793][T24953] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  668.041095][T24954] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  668.064384][T24953] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  668.120942][T24970] netlink: 'syz.4.5432': attribute type 11 has an invalid length.
[  668.269072][T24972] vlan2: entered promiscuous mode
[  668.282599][T24972] gretap0: entered promiscuous mode
[  668.731243][T24990] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  668.751646][T24990] netlink: 96 bytes leftover after parsing attributes in process `syz.4.5438'.
[  668.772471][T14147] batadv2: left promiscuous mode
[  668.830241][T24990] vlan3: entered allmulticast mode
[  668.843457][T24990] gretap0: entered allmulticast mode
[  668.844020][T24994] netlink: 'syz.2.5440': attribute type 1 has an invalid length.
[  668.858324][T24994] netlink: 232 bytes leftover after parsing attributes in process `syz.2.5440'.
[  668.868855][T24994] netlink: 'syz.2.5440': attribute type 1 has an invalid length.
[  669.078353][T25010] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5443'.
[  669.262645][T25013] syzkaller0: entered promiscuous mode
[  669.286655][T25013] syzkaller0: entered allmulticast mode
[  671.713189][T25028] netlink: 68 bytes leftover after parsing attributes in process `syz.2.5449'.
[  671.825251][T24995] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  671.836218][T25009] FAULT_INJECTION: forcing a failure.
[  671.836218][T25009] name failslab, interval 1, probability 0, space 0, times 0
[  671.853953][T25009] CPU: 0 UID: 0 PID: 25009 Comm: syz.4.5442 Not tainted syzkaller #0 PREEMPT(full) 
[  671.853983][T25009] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  671.853998][T25009] Call Trace:
[  671.854008][T25009]  <TASK>
[  671.854018][T25009]  dump_stack_lvl+0xe8/0x150
[  671.854051][T25009]  should_fail_ex+0x40c/0x560
[  671.854110][T25009]  should_failslab+0xa8/0x100
[  671.854139][T25009]  kmem_cache_alloc_node_noprof+0xb3/0x610
[  671.854176][T25009]  ? local_lock_release+0x9c/0x160
[  671.854214][T25009]  ? __alloc_skb+0x1d7/0x7a0
[  671.854233][T25009]  ? __alloc_skb+0x1d7/0x7a0
[  671.854261][T25009]  __alloc_skb+0x1d7/0x7a0
[  671.854287][T25009]  netlink_dump+0x1e7/0xee0
[  671.854316][T25009]  ? __mutex_unlock_slowpath+0x731/0x900
[  671.854356][T25009]  ? __pfx_netlink_dump+0x10/0x10
[  671.854393][T25009]  ? genl_start+0x57e/0x6d0
[  671.854432][T25009]  __netlink_dump_start+0x589/0x7b0
[  671.854465][T25009]  genl_family_rcv_msg_dumpit+0x213/0x310
[  671.854500][T25009]  ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10
[  671.854531][T25009]  ? genl_get_cmd+0x82f/0x960
[  671.854563][T25009]  ? __pfx___mutex_lock+0x10/0x10
[  671.854585][T25009]  ? __pfx_genl_start+0x10/0x10
[  671.854612][T25009]  ? __pfx_genl_dumpit+0x10/0x10
[  671.854640][T25009]  ? __pfx_genl_done+0x10/0x10
[  671.854673][T25009]  ? __dev_queue_xmit+0x29b/0x37f0
[  671.854712][T25009]  genl_rcv_msg+0x5e1/0x7a0
[  671.854751][T25009]  ? __pfx_genl_rcv_msg+0x10/0x10
[  671.854782][T25009]  ? __pfx_smc_pnet_dump_start+0x10/0x10
[  671.854809][T25009]  ? __pfx_smc_pnet_dump+0x10/0x10
[  671.854838][T25009]  ? __pfx_ref_tracker_free+0x10/0x10
[  671.854885][T25009]  netlink_rcv_skb+0x226/0x4a0
[  671.854910][T25009]  ? __pfx_genl_rcv_msg+0x10/0x10
[  671.854943][T25009]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  671.854983][T25009]  ? down_read+0x2be/0x330
[  671.855011][T25009]  genl_rcv+0x28/0x40
[  671.855038][T25009]  netlink_unicast+0x7bb/0x940
[  671.855074][T25009]  netlink_sendmsg+0x813/0xb40
[  671.855112][T25009]  ? __pfx_netlink_sendmsg+0x10/0x10
[  671.855144][T25009]  ? aa_sock_msg_perm+0xf1/0x1b0
[  671.855179][T25009]  ? __pfx_netlink_sendmsg+0x10/0x10
[  671.855205][T25009]  sock_sendmsg_nosec+0x13a/0x180
[  671.855239][T25009]  ____sys_sendmsg+0x54e/0x850
[  671.855271][T25009]  ? __pfx_____sys_sendmsg+0x10/0x10
[  671.855307][T25009]  ? import_iovec+0x73/0xa0
[  671.855345][T25009]  ___sys_sendmsg+0x2a5/0x360
[  671.855369][T25009]  ? __lock_acquire+0x683/0x2cf0
[  671.855399][T25009]  ? __pfx____sys_sendmsg+0x10/0x10
[  671.855467][T25009]  ? __fget_files+0x2a/0x420
[  671.855490][T25009]  ? __fget_files+0x3a2/0x420
[  671.855526][T25009]  __x64_sys_sendmsg+0x1b1/0x290
[  671.855555][T25009]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  671.855603][T25009]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  671.855629][T25009]  do_syscall_64+0x174/0x580
[  671.855650][T25009]  ? trace_irq_disable+0x3b/0x140
[  671.855672][T25009]  ? clear_bhb_loop+0x40/0x90
[  671.855701][T25009]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  671.855724][T25009] RIP: 0033:0x7f4101f9ce59
[  671.855745][T25009] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  671.855765][T25009] RSP: 002b:00007f4102e55028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  671.855790][T25009] RAX: ffffffffffffffda RBX: 00007f4102215fa0 RCX: 00007f4101f9ce59
[  671.855806][T25009] RDX: 000000000004c0d2 RSI: 0000200000000300 RDI: 0000000000000003
[  671.855821][T25009] RBP: 00007f4102e55090 R08: 0000000000000000 R09: 0000000000000000
[  671.855835][T25009] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  671.855848][T25009] R13: 00007f4102216038 R14: 00007f4102215fa0 R15: 00007ffe1bd2fa28
[  671.855886][T25009]  </TASK>
[  672.351422][T25037] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5454'.
[  672.444577][T25043] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5452'.
[  672.489292][T25046] netlink: 'syz.4.5457': attribute type 2 has an invalid length.
[  672.599344][T25048] syzkaller0: entered promiscuous mode
[  672.632713][T25048] syzkaller0: entered allmulticast mode
[  672.720447][T25057] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5458'.
[  672.756665][T25059] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5462'.
[  672.884778][T25066] netlink: 'syz.4.5463': attribute type 8 has an invalid length.
[  672.911717][T25066] sch_fq: defrate 0 ignored.
[  672.995661][T25059] bond13: Unable to set peer notification delay as MII monitoring is disabled
[  673.028902][T25059] bond13 (unregistering): Released all slaves
[  673.149963][T25080] netlink: 96 bytes leftover after parsing attributes in process `syz.1.5464'.
[  673.174607][T25081] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5467'.
[  673.202013][T25081] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5467'.
[  673.216627][T25076] syzkaller0: entered promiscuous mode
[  673.234174][T25076] syzkaller0: entered allmulticast mode
[  673.281118][T25092] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5468'.
[  673.322151][T25092] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5468'.
[  673.725116][T25112] netlink: 'syz.0.5475': attribute type 1 has an invalid length.
[  673.747321][T25112] netlink: 'syz.0.5475': attribute type 4 has an invalid length.
[  674.487918][ T5633] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[  674.494157][T20007] Bluetooth: hci0: command 0x0406 tx timeout
[  674.893373][    C0] net_ratelimit: 1022 callbacks suppressed
[  674.893397][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  676.200944][T25120] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  676.242989][   T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  676.251423][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  676.397512][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  676.734168][T25149] __nla_validate_parse: 3 callbacks suppressed
[  676.734190][T25149] netlink: 81 bytes leftover after parsing attributes in process `syz.2.5486'.
[  676.797613][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  676.818204][T25151] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5492'.
[  676.848149][T25151] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5492'.
[  676.859016][T25149] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5486'.
[  676.952286][ T5746] vxcan1 speed is unknown, defaulting to 1000
[  676.976959][T25165] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5496'.
[  677.446636][T25183] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5502'.
[  677.520814][ T1096] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  677.529299][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  677.606993][T25193] netlink: 'syz.2.5505': attribute type 11 has an invalid length.
[  677.810997][T25203] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5507'.
[  677.820152][T25201] syzkaller1: entered promiscuous mode
[  677.820178][T25201] syzkaller1: entered allmulticast mode
[  678.301081][T25230] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5515'.
[  678.313454][T25232] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5518'.
[  678.329838][T25230] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5515'.
[  678.397953][ T5633] Bluetooth: hci0: command 0x0406 tx timeout
[  678.404859][T20007] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[  678.409132][T25236] netlink: 'syz.3.5515': attribute type 10 has an invalid length.
[  678.682491][T25246] sit0: entered promiscuous mode
[  678.709741][T25246] netlink: 'syz.0.5524': attribute type 1 has an invalid length.
[  678.916704][T25262] veth0: entered promiscuous mode
[  679.086429][T25255] veth0: left promiscuous mode
[  679.172546][T25274] veth0_to_bridge: entered promiscuous mode
[  679.211437][T25273] veth0_to_bridge: left promiscuous mode
[  679.425087][T25276] syzkaller0: entered promiscuous mode
[  679.465841][T25276] syzkaller0: entered allmulticast mode
[  680.327512][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  680.336208][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  680.479843][ T5633] Bluetooth: hci0: command 0x0406 tx timeout
[  680.488034][T20007] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[  682.011446][ T1157] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  682.019918][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  682.329554][T25314] __nla_validate_parse: 11 callbacks suppressed
[  682.329574][T25314] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5544'.
[  682.652074][   T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  682.662984][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  682.698065][T25354] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5557'.
[  682.920057][T25368] sctp: [Deprecated]: syz.3.5563 (pid 25368) Use of int in maxseg socket option.
[  682.920057][T25368] Use struct sctp_assoc_value instead
[  683.076890][T25370] netlink: 300 bytes leftover after parsing attributes in process `syz.0.5562'.
[  683.378757][T25367] nbd0: detected capacity change from 0 to 63
[  683.406336][T20007] block nbd0: Receive control failed (result -32)
[  683.406336][ T5633] block nbd0: Receive control failed (result -104)
[  685.841698][ T1319] ieee802154 phy0 wpan0: encryption failed: -22
[  685.848862][ T1319] aoe: packet could not be sent on ipvlan1.  consider increasing tx_queue_len
[  686.041401][T25408] openvswitch: netlink: Message has 8 unknown bytes.
[  686.067747][T25408] netlink: 108 bytes leftover after parsing attributes in process `syz.3.5569'.
[  686.117753][T25413] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5574'.
[  686.136639][T25413] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5574'.
[  686.157552][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  686.166189][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  686.275171][T25424] netlink: 96 bytes leftover after parsing attributes in process `syz.0.5571'.
[  686.329710][T25410] syzkaller0: entered promiscuous mode
[  686.348730][T25410] syzkaller0: entered allmulticast mode
[  686.378461][T25431] netdevsim netdevsim1: Direct firmware load for . failed with error -2
[  686.393037][T25431] netdevsim netdevsim1: Falling back to sysfs fallback for: .
[  686.421223][T25424] vlan5: entered allmulticast mode
[  686.482029][   T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  686.612457][T25440] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5579'.
[  687.139326][ T1096] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  687.147862][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  687.772131][T25489] netlink: 216 bytes leftover after parsing attributes in process `syz.3.5589'.
[  687.783509][T25489] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5589'.
[  688.131850][ T5644] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  688.161591][ T5633] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[  688.169990][ T5633] Bluetooth: hci0: command 0x0406 tx timeout
[  688.180666][ T5644] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  688.192548][ T5644] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  688.201831][ T5644] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  688.209851][ T5644] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  688.397975][ T1096] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  688.406360][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  688.957451][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  690.134398][T25471] vlan0: entered promiscuous mode
[  690.139766][T25471] bond0: entered promiscuous mode
[  690.144829][T25471] bond_slave_0: entered promiscuous mode
[  690.151308][T25471] bond_slave_1: entered promiscuous mode
[  690.159036][T25471] vlan0: left allmulticast mode
[  690.163968][T25471] bond0: left allmulticast mode
[  690.168991][T25471] bond_slave_0: left allmulticast mode
[  690.174627][T25471] bond_slave_1: left allmulticast mode
[  690.291212][T15016] syz_tun (unregistering): left allmulticast mode
[  690.314630][T15016] syz_tun (unregistering): left promiscuous mode
[  690.329848][ T5644] Bluetooth: hci3: command tx timeout
[  690.352952][T15016] bridge0: port 1(syz_tun) entered disabled state
[  690.603415][T25518] Bluetooth: MGMT ver 1.23
[  690.623429][T25518] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5597'.
[  691.102773][T25539] gre0: left promiscuous mode
[  691.123929][T25539] gre0: left allmulticast mode
[  691.170488][T25551] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5603'.
[  691.204216][T25551] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5603'.
[  691.351542][T25539] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  691.405150][T25539] veth0_macvtap: left allmulticast mode
[  691.431419][T25539] bond1: left promiscuous mode
[  691.439377][T25539] erspan1: left promiscuous mode
[  691.445109][T25539] bond1: left allmulticast mode
[  691.451940][T25539] erspan1: left allmulticast mode
[  691.460272][T25539] vlan2: left allmulticast mode
[  691.465323][T25539] bridge0: left allmulticast mode
[  691.475680][T25539] xfrm1: left promiscuous mode
[  691.480867][T25539] xfrm1: left allmulticast mode
[  691.491799][T25539] vlan0: left allmulticast mode
[  691.496824][T25539] bridge1: left allmulticast mode
[  691.508251][T25539] bond9: left promiscuous mode
[  691.513083][T25539] bond9: left allmulticast mode
[  691.525310][T25539] bond10: left promiscuous mode
[  691.530380][T25539] bond10: left allmulticast mode
[  691.537064][T25539] vlan3: left allmulticast mode
[  691.542576][T25539] gretap0: left allmulticast mode
[  691.581036][   T29] vxcan1 speed is unknown, defaulting to 1000
[  691.592586][   T29] syz2: Port: 1 Link DOWN
[  691.603204][T14152] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  691.629716][T14152] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  691.669620][T17376] vxcan1 speed is unknown, defaulting to 1000
[  691.676136][T14152] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  691.705096][T14152] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  691.815914][T25566] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5607'.
[  692.238145][ T1157] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  692.364165][T25596] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5614'.
[  692.397352][T20007] Bluetooth: hci3: command tx timeout
[  692.881137][T20007] Bluetooth: hci0: command 0x0406 tx timeout
[  692.887467][ T5644] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[  692.903084][ T1157] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  692.911482][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  692.946985][ T1096] bond4 (unregistering): (slave vti0): Releasing backup interface
[  693.018913][ T1096] bond1 (unregistering): (slave erspan1): Releasing active interface
[  693.105485][ T1096] bond6 (unregistering): (slave gretap1): Releasing active interface
[  693.213285][ T1096] bond2 (unregistering): (slave geneve2): Releasing active interface
[  693.314550][ T1096] bond1 (unregistering): Released all slaves
[  693.342307][ T1096] bond2 (unregistering): Released all slaves
[  693.373058][ T1096] bond3 (unregistering): Released all slaves
[  693.399310][ T1096] bond4 (unregistering): Released all slaves
[  693.424649][ T1096] bond5 (unregistering): Released all slaves
[  693.458366][ T1096] bond6 (unregistering): Released all slaves
[  693.477378][ T1096] bond7 (unregistering): Released all slaves
[  693.503997][ T1096] bond8 (unregistering): Released all slaves
[  693.525213][ T1096] bond9 (unregistering): (slave veth17): Releasing active interface
[  693.533885][ T1096] batadv1: entered promiscuous mode
[  693.541252][ T1096] bond9 (unregistering): (slave batadv1): Releasing active interface
[  693.552438][ T1096] bond9 (unregistering): Released all slaves
[  693.570507][ T1096] bond10 (unregistering): Released all slaves
[  693.588542][ T1096] bond11 (unregistering): Released all slaves
[  693.605675][ T1096] bond12 (unregistering): Released all slaves
[  693.628070][ T1096] bond13 (unregistering): Released all slaves
[  693.644406][ T1096] bond14 (unregistering): Released all slaves
[  693.663935][ T1096] bond15 (unregistering): Released all slaves
[  693.681119][ T1096] bond0 (unregistering): Released all slaves
[  693.705942][T25493] ±ÿª¨ú
rBº“ speed is unknown, defaulting to 1000
[  693.820156][ T5289] 8021q: adding VLAN 0 to HW filter on device eth1
[  693.829323][T25493] vxcan1 speed is unknown, defaulting to 1000
[  694.040107][ T1096] tipc: Left network mode
[  694.077331][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  694.159833][ T1157] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  694.168382][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  694.480347][ T5644] Bluetooth: hci3: command tx timeout
[  694.903051][T25676] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold
[  694.937970][T25676] netlink: 164 bytes leftover after parsing attributes in process `syz.0.5632'.
[  695.050363][T25688] netlink: 1 bytes leftover after parsing attributes in process `syz.1.5634'.
[  695.233512][T25689] vlan1: entered allmulticast mode
[  695.261580][T25689] bridge_slave_0: entered allmulticast mode
[  695.453989][ T5289] 8021q: adding VLAN 0 to HW filter on device eth2
[  695.480242][T25707] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[  695.531810][T25709] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000
[  695.935653][T25717] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  695.986252][T25717] Bluetooth: hci4: Error when powering off device on rfkill (-4)
[  696.081368][T25732] pimreg3: entered allmulticast mode
[  696.252549][T25717] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  696.282429][T25717] Bluetooth: hci1: Error when powering off device on rfkill (-4)
[  696.327571][T25737] sock: sock_timestamping_bind_phc: sock not bind to device
[  696.380049][T25742] netlink: 176 bytes leftover after parsing attributes in process `syz.1.5646'.
[  696.404221][T25742] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5646'.
[  696.557593][ T5644] Bluetooth: hci3: command tx timeout
[  696.710990][T25717] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  696.740791][T25717] Bluetooth: hci0: Error when powering off device on rfkill (-4)
[  696.778767][T25748] netlink: 'syz.4.5648': attribute type 1 has an invalid length.
[  696.879517][T25717] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  696.922786][T25717] Bluetooth: hci2: Error when powering off device on rfkill (-4)
[  697.138164][T25717] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  697.147472][T25717] Bluetooth: hci3: Error when powering off device on rfkill (-4)
[  697.215525][T25493] bridge0: port 1(bridge_slave_0) entered blocking state
[  697.253023][T25493] bridge0: port 1(bridge_slave_0) entered disabled state
[  697.280861][T25493] bridge_slave_0: entered allmulticast mode
[  697.358855][   T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  697.390981][T25493] bridge_slave_0: entered promiscuous mode
[  697.455379][ T1096] hsr_slave_0: left promiscuous mode
[  697.468103][ T1096] hsr_slave_1: left promiscuous mode
[  697.482014][ T1096] batman_adv: batadv0: Removing interface: batadv_slave_0
[  697.522006][ T1096] batman_adv: batadv0: Removing interface: batadv_slave_1
[  697.618793][T25786] netlink: 'syz.2.5658': attribute type 1 has an invalid length.
[  697.834454][T25796] netlink: 48 bytes leftover after parsing attributes in process `syz.4.5657'.
[  698.075394][ T1096] team0 (unregistering): Port device team_slave_1 removed
[  698.103458][ T1096] team0 (unregistering): Port device team_slave_0 removed
[  698.255217][T25493] bridge0: port 2(bridge_slave_1) entered blocking state
[  698.265875][T25493] bridge0: port 2(bridge_slave_1) entered disabled state
[  698.276007][T25493] bridge_slave_1: entered allmulticast mode
[  698.288203][T25493] bridge_slave_1: entered promiscuous mode
[  698.304773][ T5289] 8021q: adding VLAN 0 to HW filter on device eth3
[  698.430106][T25786] bond18: entered promiscuous mode
[  698.439932][T25786] bond18: entered allmulticast mode
[  698.448927][T25786] 8021q: adding VLAN 0 to HW filter on device bond18
[  698.489147][T25804] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5659'.
[  698.640185][T14155] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  698.648794][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  698.662555][T25493] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  698.800335][T25493] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  698.873476][T25493] team0: Port device team_slave_0 added
[  698.898463][T25493] team0: Port device team_slave_1 added
[  698.948871][T25818] netlink: 'syz.1.5665': attribute type 1 has an invalid length.
[  699.048595][T25493] batman_adv: batadv0: Adding interface: batadv_slave_0
[  699.056478][T25818] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5665'.
[  699.072484][T25493] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  699.100394][T25826] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5666'.
[  699.100456][T25826] netlink: 'syz.2.5666': attribute type 8 has an invalid length.
[  699.158175][T25493] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  699.191702][T25493] batman_adv: batadv0: Adding interface: batadv_slave_1
[  699.202891][T25493] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  699.265841][T25493] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  699.278228][  T810] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  699.286689][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  699.379836][ T1096] IPVS: stop unused estimator thread 0...
[  699.515196][T25493] hsr_slave_0: entered promiscuous mode
[  699.534415][T25493] hsr_slave_1: entered promiscuous mode
[  699.549949][T25493] debugfs: 'hsr0' already exists in 'hsr'
[  699.569395][T25493] Cannot create hsr debugfs directory
[  699.659633][T25843] netlink: 'syz.0.5672': attribute type 1 has an invalid length.
[  699.837370][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  699.910127][T25843] bond14: entered promiscuous mode
[  699.926597][T25843] bond14: entered allmulticast mode
[  699.948554][T25843] 8021q: adding VLAN 0 to HW filter on device bond14
[  700.048631][T25854] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5674'.
[  700.542200][T25873] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  700.680105][T25885] syzkaller0: entered promiscuous mode
[  700.685750][T25885] syzkaller0: entered allmulticast mode
[  701.342536][T25894] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5683'.
[  701.603202][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  701.940069][T25905] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5685'.
[  703.125322][  T810] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  703.677285][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  703.737858][ T5289] 8021q: adding VLAN 0 to HW filter on device eth4
[  704.000257][T25921] syzkaller1: entered promiscuous mode
[  704.024891][T25921] syzkaller1: entered allmulticast mode
[  704.083424][T25928] IPv6: NLM_F_CREATE should be specified when creating new route
[  704.141688][T25928] rdma_rxe: rxe_newlink: failed to add ipvlan0
[  704.206872][T25935] netlink: 52 bytes leftover after parsing attributes in process `syz.0.5691'.
[  704.255086][T25935] netlink: 52 bytes leftover after parsing attributes in process `syz.0.5691'.
[  704.296642][T25935] netlink: 52 bytes leftover after parsing attributes in process `syz.0.5691'.
[  704.392601][T25944] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5693'.
[  704.403157][T14152] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  704.411834][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  704.688129][T25954] netlink: 80 bytes leftover after parsing attributes in process `syz.4.5697'.
[  704.942492][T25963] vlan1: entered promiscuous mode
[  704.954701][T25963] hsr0: entered promiscuous mode
[  704.971929][T25963] vlan1: entered allmulticast mode
[  704.990149][T25963] hsr0: entered allmulticast mode
[  705.005738][T25963] hsr_slave_0: entered allmulticast mode
[  705.026226][T25963] hsr_slave_1: entered allmulticast mode
[  705.040290][T14152] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  705.048793][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  705.240151][T25979] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5702'.
[  705.298873][T25976] netlink: 'syz.0.5702': attribute type 1 has an invalid length.
[  705.307915][T25493] 
[  705.310290][T25493] ======================================================
[  705.317433][T25493] WARNING: possible circular locking dependency detected
[  705.324551][T25493] syzkaller #0 Not tainted
[  705.329024][T25493] ------------------------------------------------------
[  705.336127][T25493] syz-executor/25493 is trying to acquire lock:
[  705.342427][T25493] ffff88801be9d2a0 (&root->kernfs_supers_rwsem){++++}-{4:4}, at: kernfs_remove+0x35/0x80
[  705.352404][T25493] 
[  705.352404][T25493] but task is already holding lock:
[  705.359815][T25493] ffffffff8f3a25c0 (gdp_mutex){+.+.}-{4:4}, at: cleanup_glue_dir+0xc3/0x220
[  705.368681][T25493] 
[  705.368681][T25493] which lock already depends on the new lock.
[  705.368681][T25493] 
[  705.379115][T25493] 
[  705.379115][T25493] the existing dependency chain (in reverse order) is:
[  705.388162][T25493] 
[  705.388162][T25493] -> #10 (gdp_mutex){+.+.}-{4:4}:
[  705.395494][T25493]        __mutex_lock+0x19d/0x1550
[  705.400629][T25493]        get_device_parent+0x16f/0x3a0
[  705.406114][T25493]        device_add+0x2d4/0xb80
[  705.410993][T25493]        device_create+0x269/0x300
[  705.416178][T25493]        msr_device_create+0x33/0x50
[  705.421529][T25493]        cpuhp_invoke_callback+0x434/0x810
[  705.427374][T25493]        cpuhp_thread_fun+0x362/0x780
[  705.432772][T25493]        smpboot_thread_fn+0x57c/0xa80
[  705.438260][T25493]        kthread+0x388/0x470
[  705.442869][T25493]        ret_from_fork+0x514/0xb70
[  705.448030][T25493]        ret_from_fork_asm+0x1a/0x30
[  705.453336][T25493] 
[  705.453336][T25493] -> #9 (cpuhp_state-up){+.+.}-{0:0}:
[  705.460932][T25493]        cpuhp_thread_fun+0x127/0x780
[  705.466346][T25493]        smpboot_thread_fn+0x57c/0xa80
[  705.471851][T25493]        kthread+0x388/0x470
[  705.476475][T25493]        ret_from_fork+0x514/0xb70
[  705.481618][T25493]        ret_from_fork_asm+0x1a/0x30
[  705.486954][T25493] 
[  705.486954][T25493] -> #8 (cpu_hotplug_lock){++++}-{0:0}:
[  705.494853][T25493]        cpus_read_lock+0x42/0x160
[  705.500005][T25493]        static_key_slow_inc+0x12/0x30
[  705.505488][T25493]        nbd_genl_reconfigure+0x1301/0x1e80
[  705.511540][T25493]        genl_family_rcv_msg_doit+0x233/0x340
[  705.517650][T25493]        genl_rcv_msg+0x614/0x7a0
[  705.522738][T25493]        netlink_rcv_skb+0x226/0x4a0
[  705.528145][T25493]        genl_rcv+0x28/0x40
[  705.532701][T25493]        netlink_unicast+0x7bb/0x940
[  705.538007][T25493]        netlink_sendmsg+0x813/0xb40
[  705.543320][T25493]        sock_sendmsg_nosec+0x13a/0x180
[  705.548896][T25493]        ____sys_sendmsg+0x54e/0x850
[  705.554219][T25493]        ___sys_sendmsg+0x2a5/0x360
[  705.559441][T25493]        __x64_sys_sendmsg+0x1b1/0x290
[  705.564926][T25493]        do_syscall_64+0x174/0x580
[  705.570060][T25493]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  705.576493][T25493] 
[  705.576493][T25493] -> #7 (&nsock->tx_lock){+.+.}-{4:4}:
[  705.584166][T25493]        __mutex_lock+0x19d/0x1550
[  705.589321][T25493]        nbd_queue_rq+0x373/0x1150
[  705.594687][T25493]        blk_mq_dispatch_rq_list+0x499/0x1990
[  705.597803][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  705.600880][T25493]        __blk_mq_sched_dispatch_requests+0xd36/0x1580
[  705.615846][T25493]        blk_mq_sched_dispatch_requests+0xd7/0x190
[  705.622477][T25493]        blk_mq_run_work_fn+0x16c/0x300
[  705.628087][T25493]        process_scheduled_works+0xa8e/0x14e0
[  705.634187][T25493]        worker_thread+0xa47/0xfb0
[  705.639326][T25493]        kthread+0x388/0x470
[  705.643937][T25493]        ret_from_fork+0x514/0xb70
[  705.649076][T25493]        ret_from_fork_asm+0x1a/0x30
[  705.654386][T25493] 
[  705.654386][T25493] -> #6 (&cmd->lock){+.+.}-{4:4}:
[  705.661626][T25493]        __mutex_lock+0x19d/0x1550
[  705.666753][T25493]        nbd_queue_rq+0xc1/0x1150
[  705.671804][T25493]        blk_mq_dispatch_rq_list+0x499/0x1990
[  705.677912][T25493]        __blk_mq_sched_dispatch_requests+0xd36/0x1580
[  705.684795][T25493]        blk_mq_sched_dispatch_requests+0xd7/0x190
[  705.691328][T25493]        blk_mq_run_work_fn+0x16c/0x300
[  705.696896][T25493]        process_scheduled_works+0xa8e/0x14e0
[  705.703000][T25493]        worker_thread+0xa47/0xfb0
[  705.708155][T25493]        kthread+0x388/0x470
[  705.712769][T25493]        ret_from_fork+0x514/0xb70
[  705.717909][T25493]        ret_from_fork_asm+0x1a/0x30
[  705.723222][T25493] 
[  705.723222][T25493] -> #5 (set->srcu){.+.+}-{0:0}:
[  705.730513][T25493]        __synchronize_srcu+0xc9/0x2f0
[  705.736100][T25493]        elevator_switch+0x1e8/0x7b0
[  705.741502][T25493]        elevator_change+0x2fa/0x480
[  705.746819][T25493]        elevator_set_default+0x375/0x440
[  705.752581][T25493]        blk_register_queue+0x3f3/0x4e0
[  705.758231][T25493]        __add_disk+0x6cb/0xe30
[  705.763136][T25493]        add_disk_fwnode+0xfb/0x4b0
[  705.768365][T25493]        nbd_dev_add+0x733/0xb60
[  705.773325][T25493]        nbd_init+0x15f/0x1e0
[  705.778109][T25493]        do_one_initcall+0x250/0x870
[  705.783413][T25493]        do_initcall_level+0x10a/0x1a0
[  705.788988][T25493]        do_initcalls+0x59/0xa0
[  705.793866][T25493]        kernel_init_freeable+0x29d/0x3e0
[  705.799620][T25493]        kernel_init+0x1d/0x1d0
[  705.804495][T25493]        ret_from_fork+0x514/0xb70
[  705.809659][T25493]        ret_from_fork_asm+0x1a/0x30
[  705.814968][T25493] 
[  705.814968][T25493] -> #4 (&q->elevator_lock){+.+.}-{4:4}:
[  705.823070][T25493]        __mutex_lock+0x19d/0x1550
[  705.828204][T25493]        elevator_change+0x1af/0x480
[  705.833520][T25493]        elevator_set_none+0xb5/0x140
[  705.838929][T25493]        blk_mq_update_nr_hw_queues+0x5ef/0x19f0
[  705.845284][T25493]        nbd_start_device+0x189/0xb30
[  705.850676][T25493]        nbd_genl_connect+0x1597/0x1c10
[  705.856245][T25493]        genl_family_rcv_msg_doit+0x233/0x340
[  705.862338][T25493]        genl_rcv_msg+0x614/0x7a0
[  705.867385][T25493]        netlink_rcv_skb+0x226/0x4a0
[  705.872685][T25493]        genl_rcv+0x28/0x40
[  705.877207][T25493]        netlink_unicast+0x7bb/0x940
[  705.882603][T25493]        netlink_sendmsg+0x813/0xb40
[  705.887908][T25493]        sock_sendmsg_nosec+0x13a/0x180
[  705.893481][T25493]        ____sys_sendmsg+0x54e/0x850
[  705.898793][T25493]        ___sys_sendmsg+0x2a5/0x360
[  705.904012][T25493]        __x64_sys_sendmsg+0x1b1/0x290
[  705.909584][T25493]        do_syscall_64+0x174/0x580
[  705.914728][T25493]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  705.921166][T25493] 
[  705.921166][T25493] -> #3 (&q->q_usage_counter(io)#49){++++}-{0:0}:
[  705.929936][T25493]        blk_alloc_queue+0x544/0x690
[  705.935336][T25493]        __blk_mq_alloc_disk+0x194/0x390
[  705.940989][T25493]        nbd_dev_add+0x494/0xb60
[  705.945959][T25493]        nbd_init+0x15f/0x1e0
[  705.950657][T25493]        do_one_initcall+0x250/0x870
[  705.956061][T25493]        do_initcall_level+0x10a/0x1a0
[  705.961558][T25493]        do_initcalls+0x59/0xa0
[  705.966448][T25493]        kernel_init_freeable+0x29d/0x3e0
[  705.972207][T25493]        kernel_init+0x1d/0x1d0
[  705.977094][T25493]        ret_from_fork+0x514/0xb70
[  705.982243][T25493]        ret_from_fork_asm+0x1a/0x30
[  705.987583][T25493] 
[  705.987583][T25493] -> #2 (fs_reclaim){+.+.}-{0:0}:
[  705.994827][T25493]        fs_reclaim_acquire+0x71/0x100
[  706.000336][T25493]        kmem_cache_alloc_lru_noprof+0x65/0x5f0
[  706.006611][T25493]        alloc_inode+0xb8/0x1b0
[  706.011503][T25493]        iget_locked+0x131/0x6a0
[  706.016470][T25493]        kernfs_get_inode+0x4f/0x770
[  706.021774][T25493]        kernfs_get_tree+0x5cd/0x980
[  706.027089][T25493]        vfs_get_tree+0x92/0x2a0
[  706.032076][T25493]        do_new_mount+0x319/0xdc0
[  706.037131][T25493]        __se_sys_mount+0x31d/0x420
[  706.042525][T25493]        do_syscall_64+0x174/0x580
[  706.047668][T25493]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  706.054110][T25493] 
[  706.054110][T25493] -> #1 (&root->kernfs_rwsem){++++}-{4:4}:
[  706.062135][T25493]        down_write+0x96/0x200
[  706.066939][T25493]        kernfs_remove_by_name_ns+0x4e/0x140
[  706.072943][T25493]        device_links_driver_bound+0x4ab/0x1440
[  706.079205][T25493]        driver_bound+0xd8/0x2e0
[  706.084190][T25493]        really_probe+0x774/0xae0
[  706.089681][T25493]        __driver_probe_device+0x1e8/0x360
[  706.095518][T25493]        driver_probe_device+0x4f/0x240
[  706.101090][T25493]        __device_attach_driver+0x270/0x410
[  706.107017][T25493]        bus_for_each_drv+0x258/0x2f0
[  706.112412][T25493]        __device_attach+0x2c4/0x450
[  706.117734][T25493]        device_initial_probe+0xa1/0xd0
[  706.123324][T25493]        bus_probe_device+0x12a/0x220
[  706.128802][T25493]        device_add+0x7d7/0xb80
[  706.133858][T25493]        faux_device_create_with_groups+0x1a5/0x2b0
[  706.140540][T25493]        regulator_dummy_init+0x19/0x40
[  706.146202][T25493]        regulator_init+0xca/0x110
[  706.151392][T25493]        do_one_initcall+0x250/0x870
[  706.156763][T25493]        do_initcall_level+0x10a/0x1a0
[  706.162267][T25493]        do_initcalls+0x59/0xa0
[  706.167157][T25493]        kernel_init_freeable+0x29d/0x3e0
[  706.172921][T25493]        kernel_init+0x1d/0x1d0
[  706.177797][T25493]        ret_from_fork+0x514/0xb70
[  706.182949][T25493]        ret_from_fork_asm+0x1a/0x30
[  706.188262][T25493] 
[  706.188262][T25493] -> #0 (&root->kernfs_supers_rwsem){++++}-{4:4}:
[  706.196899][T25493]        __lock_acquire+0x1520/0x2cf0
[  706.202308][T25493]        lock_acquire+0x106/0x350
[  706.207361][T25493]        down_read+0x4a/0x330
[  706.212072][T25493]        kernfs_remove+0x35/0x80
[  706.217034][T25493]        __kobject_del+0xe0/0x310
[  706.222166][T25493]        kobject_del+0x45/0x60
[  706.226963][T25493]        cleanup_glue_dir+0x1a3/0x220
[  706.232366][T25493]        device_del+0x77d/0x8f0
[  706.237358][T25493]        unregister_netdevice_many_notify+0x1be4/0x2150
[  706.244403][T25493]        unregister_netdevice_queue+0x2f5/0x340
[  706.250671][T25493]        nsim_destroy+0x275/0x800
[  706.255795][T25493]        __nsim_dev_port_del+0x14e/0x200
[  706.261483][T25493]        nsim_dev_reload_destroy+0x288/0x490
[  706.267480][T25493]        nsim_drv_remove+0x58/0x170
[  706.272700][T25493]        device_release_driver_internal+0x48b/0x880
[  706.279311][T25493]        bus_remove_device+0x444/0x560
[  706.284795][T25493]        device_del+0x524/0x8f0
[  706.289671][T25493]        device_unregister+0x21/0xf0
[  706.295015][T25493]        del_device_store+0x2b5/0x370
[  706.300427][T25493]        kernfs_fop_write_iter+0x3a4/0x540
[  706.306271][T25493]        vfs_write+0x612/0xba0
[  706.311072][T25493]        ksys_write+0x150/0x270
[  706.315951][T25493]        do_syscall_64+0x174/0x580
[  706.321081][T25493]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  706.327526][T25493] 
[  706.327526][T25493] other info that might help us debug this:
[  706.327526][T25493] 
[  706.337778][T25493] Chain exists of:
[  706.337778][T25493]   &root->kernfs_supers_rwsem --> cpuhp_state-up --> gdp_mutex
[  706.337778][T25493] 
[  706.351187][T25493]  Possible unsafe locking scenario:
[  706.351187][T25493] 
[  706.358725][T25493]        CPU0                    CPU1
[  706.364181][T25493]        ----                    ----
[  706.369611][T25493]   lock(gdp_mutex);
[  706.373551][T25493]                                lock(cpuhp_state-up);
[  706.380518][T25493]                                lock(gdp_mutex);
[  706.386961][T25493]   rlock(&root->kernfs_supers_rwsem);
[  706.392465][T25493] 
[  706.392465][T25493]  *** DEADLOCK ***
[  706.392465][T25493] 
[  706.400671][T25493] 8 locks held by syz-executor/25493:
[  706.406053][T25493]  #0: ffff88807fed6450 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0
[  706.415032][T25493]  #1: ffff88807ac78480 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d8/0x540
[  706.424838][T25493]  #2: ffff888028c5e0f8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x22b/0x540
[  706.434928][T25493]  #3: ffffffff8f667720 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd6/0x370
[  706.445233][T25493]  #4: ffff88807aa0f128 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb9/0x880
[  706.455834][T25493]  #5: ffff888035482258 (&devlink->lock_key#6){+.+.}-{4:4}, at: nsim_drv_remove+0x50/0x170
[  706.465974][T25493]  #6: ffffffff8fdeac00 (rtnl_mutex){+.+.}-{4:4}, at: nsim_destroy+0x173/0x800
[  706.474974][T25493]  #7: ffffffff8f3a25c0 (gdp_mutex){+.+.}-{4:4}, at: cleanup_glue_dir+0xc3/0x220
[  706.484231][T25493] 
[  706.484231][T25493] stack backtrace:
[  706.490150][T25493] CPU: 0 UID: 0 PID: 25493 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[  706.490174][T25493] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  706.490185][T25493] Call Trace:
[  706.490194][T25493]  <TASK>
[  706.490204][T25493]  dump_stack_lvl+0xe8/0x150
[  706.490236][T25493]  print_circular_bug+0x2e1/0x300
[  706.490262][T25493]  check_noncircular+0x12e/0x150
[  706.490288][T25493]  __lock_acquire+0x1520/0x2cf0
[  706.490328][T25493]  ? kernfs_remove+0x35/0x80
[  706.490347][T25493]  lock_acquire+0x106/0x350
[  706.490365][T25493]  ? kernfs_remove+0x35/0x80
[  706.490395][T25493]  down_read+0x4a/0x330
[  706.490413][T25493]  ? kernfs_remove+0x35/0x80
[  706.490438][T25493]  kernfs_remove+0x35/0x80
[  706.490458][T25493]  __kobject_del+0xe0/0x310
[  706.490479][T25493]  kobject_del+0x45/0x60
[  706.490508][T25493]  cleanup_glue_dir+0x1a3/0x220
[  706.490533][T25493]  device_del+0x77d/0x8f0
[  706.490563][T25493]  ? __pfx_device_del+0x10/0x10
[  706.490582][T25493]  ? pm_runtime_set_memalloc_noio+0x1e7/0x260
[  706.490684][T25493]  ? netdev_unregister_kobject+0x347/0x450
[  706.490781][T25493]  unregister_netdevice_many_notify+0x1be4/0x2150
[  706.490821][T25493]  ? __pfx_unregister_netdevice_many_notify+0x10/0x10
[  706.490858][T25493]  ? __mutex_lock+0x30d/0x1550
[  706.490874][T25493]  ? call_rcu+0x64b/0x8b0
[  706.490903][T25493]  unregister_netdevice_queue+0x2f5/0x340
[  706.490926][T25493]  ? __pfx_unregister_netdevice_queue+0x10/0x10
[  706.490953][T25493]  nsim_destroy+0x275/0x800
[  706.490982][T25493]  __nsim_dev_port_del+0x14e/0x200
[  706.491001][T25493]  nsim_dev_reload_destroy+0x288/0x490
[  706.491022][T25493]  nsim_drv_remove+0x58/0x170
[  706.491040][T25493]  ? __pfx_nsim_bus_remove+0x10/0x10
[  706.491064][T25493]  device_release_driver_internal+0x48b/0x880
[  706.491096][T25493]  bus_remove_device+0x444/0x560
[  706.491121][T25493]  ? __pfx_bus_remove_device+0x10/0x10
[  706.491141][T25493]  ? kernfs_remove_by_name_ns+0x101/0x140
[  706.491164][T25493]  device_del+0x524/0x8f0
[  706.491184][T25493]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  706.491237][T25493]  ? __pfx_device_del+0x10/0x10
[  706.491259][T25493]  ? sysfs_file_kobj+0x1a/0x230
[  706.491285][T25493]  device_unregister+0x21/0xf0
[  706.491313][T25493]  del_device_store+0x2b5/0x370
[  706.491339][T25493]  ? __pfx_del_device_store+0x10/0x10
[  706.491366][T25493]  ? sysfs_file_kobj+0x1e4/0x230
[  706.491391][T25493]  ? sysfs_kf_write+0x166/0x260
[  706.491418][T25493]  ? __pfx_sysfs_kf_write+0x10/0x10
[  706.491442][T25493]  kernfs_fop_write_iter+0x3a4/0x540
[  706.491467][T25493]  vfs_write+0x612/0xba0
[  706.491492][T25493]  ? __pfx_vfs_write+0x10/0x10
[  706.491525][T25493]  ? do_sys_openat2+0x14e/0x200
[  706.491541][T25493]  ? kmem_cache_free+0x182/0x650
[  706.491558][T25493]  ? fd_install+0x94/0x3d0
[  706.491591][T25493]  ksys_write+0x150/0x270
[  706.491612][T25493]  ? __pfx_ksys_write+0x10/0x10
[  706.491637][T25493]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  706.491655][T25493]  do_syscall_64+0x174/0x580
[  706.491671][T25493]  ? clear_bhb_loop+0x40/0x90
[  706.491691][T25493]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  706.491709][T25493] RIP: 0033:0x7f88c395d68e
[  706.491726][T25493] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  706.491742][T25493] RSP: 002b:00007fff79ff3e68 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  706.491761][T25493] RAX: ffffffffffffffda RBX: 00005555809af500 RCX: 00007f88c395d68e
[  706.491775][T25493] RDX: 0000000000000001 RSI: 00007fff79ff3ef0 RDI: 0000000000000005
[  706.491786][T25493] RBP: 00007f88c3a336f2 R08: 0000000000000000 R09: 0000000000000000
[  706.491798][T25493] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  706.491809][T25493] R13: 00007fff79ff3ef0 R14: 00007f88c4744620 R15: 0000000000000003
[  706.491830][T25493]  </TASK>
[  706.889687][T25979] block nbd0: reconnected socket
[  706.926767][T25979] netlink: 'syz.0.5702': attribute type 1 has an invalid length.
[  706.937637][T25979] nbd: error processing sock list
[  706.943586][T25981] netlink: 'syz.2.5703': attribute type 1 has an invalid length.
[  707.003115][T25981] 8021q: adding VLAN 0 to HW filter on device bond19
[  707.031796][T25984] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  707.040953][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  707.754889][ T5644] block nbd0: Receive control failed (result -32)
[  707.757603][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  708.165183][   T48] lo: left allmulticast mode
[  708.174032][   T48] pimreg: left allmulticast mode
[  708.285700][   T48] bond1 (unregistering): (slave erspan1): Releasing active interface
[  708.329819][   T48] bond2 (unregistering): (slave gretap1): Releasing active interface
[  708.383762][   T48] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  708.404677][   T48] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  708.414879][   T48] bond0 (unregistering): (slave bond8): Releasing backup interface
[  708.423840][   T48] bond0 (unregistering): Released all slaves
[  708.433808][   T48] bond1 (unregistering): Released all slaves
[  708.451891][   T48] bond2 (unregistering): Released all slaves
[  708.468686][   T48] bond3 (unregistering): (slave veth0_to_bond): Releasing active interface
[  708.480534][   T48] bond3 (unregistering): Released all slaves
[  708.493107][   T48] bond4 (unregistering): Released all slaves
[  708.508292][   T48] bond5 (unregistering): Released all slaves
[  708.523388][   T48] bond6 (unregistering): Released all slaves
[  708.535775][   T48] bond7 (unregistering): Released all slaves
[  708.553077][   T48] bond8 (unregistering): Released all slaves
[  708.572958][   T48] bond9 (unregistering): Released all slaves
[  708.583556][   T48] bond10 (unregistering): Released all slaves
[  708.667241][   T48] tipc: Left network mode
[  708.797464][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  708.889907][T14147] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  709.043742][   T48] hsr_slave_0: left promiscuous mode
[  709.068345][   T48] hsr_slave_1: left promiscuous mode
[  709.093714][   T48] batman_adv: batadv0: Removing interface: batadv_slave_1
[  709.338752][   T48] team0 (unregistering): Port device team_slave_1 removed
[  709.353274][   T48] team0 (unregistering): Port device team_slave_0 removed
[  709.429229][  T810] smc: removing ib device syz2
[  709.460447][  T810] smbdirect: ib_dev[syz2] removed
[  710.151793][   T48] IPVS: stop unused estimator thread 0...
[  710.167773][T14155] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  710.176123][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  710.207644][   T48] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  710.310093][   T48] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  710.365357][   T48] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  710.427322][   T48] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  710.532959][   T48] bond0: left allmulticast mode
[  710.539453][   T48] bond_slave_0: left allmulticast mode
[  710.545159][   T48] bond0: left promiscuous mode
[  710.550901][   T48] bond_slave_0: left promiscuous mode
[  710.556693][   T48] bridge0: port 1(bond0) entered disabled state
[  710.571943][   T48] bridge_slave_1: left allmulticast mode
[  710.577784][   T48] bridge_slave_1: left promiscuous mode
[  710.583526][   T48] bridge0: port 2(bridge_slave_1) entered disabled state
[  710.592459][   T48] bridge_slave_0: left allmulticast mode
[  710.599755][   T48] bridge_slave_0: left promiscuous mode
[  710.605726][   T48] bridge0: port 1(bridge_slave_0) entered disabled state
[  710.737604][   T48] bond1 (unregistering): (slave erspan1): Releasing active interface
[  710.773358][   T48] bond6 (unregistering): (slave gretap1): Releasing active interface
[  710.814409][   T48] bond14 (unregistering): (slave bridge3): Releasing backup interface
[  710.823061][   T48] bridge3 (unregistering): left promiscuous mode
[  710.834447][   T48] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  710.844943][   T48] bond0 (unregistering): Released all slaves
[  710.855522][   T48] bond1 (unregistering): Released all slaves
[  710.866032][   T48] bond2 (unregistering): Released all slaves
[  710.876979][   T48] bond3 (unregistering): (slave veth3): Releasing active interface
[  710.885930][   T48] bond3 (unregistering): Released all slaves
[  710.896235][   T48] bond4 (unregistering): Released all slaves
[  710.909639][   T48] bond5 (unregistering): Released all slaves
[  710.922813][   T48] bond6 (unregistering): Released all slaves
[  710.933127][   T48] bond7 (unregistering): Released all slaves
[  710.943988][   T48] bond8 (unregistering): Released all slaves
[  710.955026][   T48] bond9 (unregistering): Released all slaves
[  710.969513][   T48] bond10 (unregistering): Released all slaves
[  710.981232][   T48] bond11 (unregistering): Released all slaves
[  710.991957][   T48] bond12 (unregistering): Released all slaves
[  711.002556][   T48] bond13 (unregistering): Released all slaves
[  711.022596][   T48] bond14 (unregistering): Released all slaves
[  711.059489][   T48] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  711.071551][   T48] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  711.082509][   T48] bond0 (unregistering): Released all slaves
[  711.201237][   T48] : left promiscuous mode
[  711.292418][   T48] tipc: Left network mode
[  711.318507][   T48] IPVS: stopping backup sync thread 18081 ...
[  711.353529][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  711.532903][ T5289] 8021q: adding VLAN 0 to HW filter on device eth1
[  711.741565][   T48] hsr_slave_0: left promiscuous mode
[  711.747691][   T48] hsr_slave_1: left promiscuous mode
[  711.758518][   T48] hsr_slave_0: left promiscuous mode
[  711.764807][   T48] hsr_slave_1: left promiscuous mode
[  711.771340][   T48] batman_adv: batadv0: Removing interface: batadv_slave_0
[  711.779327][   T48] batman_adv: batadv0: Removing interface: batadv_slave_1
[  711.979403][   T48] team0 (unregistering): Port device team_slave_1 removed
[  712.101742][   T48] team0 (unregistering): Port device team_slave_1 removed
[  712.113049][   T48] team0 (unregistering): Port device team_slave_0 removed
[  712.176034][ T5289] 8021q: adding VLAN 0 to HW filter on device eth2
[  712.489427][   T48] IPVS: stop unused estimator thread 0...
[  712.514339][ T5289] 8021q: adding VLAN 0 to HW filter on device eth3
[  712.792001][ T5289] 8021q: adding VLAN 0 to HW filter on device eth4
[  713.524738][ T5289] 8021q: adding VLAN 0 to HW filter on device eth5
[  713.800076][ T5289] 8021q: adding VLAN 0 to HW filter on device eth6
[  713.999612][ T1638] block nbd0: Connection timed out, retrying (0/2 alive)
[  714.006779][ T1638] block nbd0: Connection timed out, retrying (0/2 alive)
[  714.013953][ T1638] block nbd0: Connection timed out, retrying (0/2 alive)
[  714.021175][ T1638] block nbd0: Connection timed out, retrying (0/2 alive)
[  714.028381][   T10] block nbd0: Dead connection, failed to find a fallback
[  714.035527][   T10] block nbd0: shutting down sockets
[  714.040885][   T10] blk_print_req_error: 126 callbacks suppressed
[  714.040926][   T10] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  714.056377][   T10] buffer_io_error: 138 callbacks suppressed
[  714.056396][   T10] Buffer I/O error on dev nbd0, logical block 2, async page read
[  714.070607][   T10] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  714.079808][   T10] Buffer I/O error on dev nbd0, logical block 1, async page read
[  714.087636][   T10] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  714.096759][   T10] Buffer I/O error on dev nbd0, logical block 0, async page read
[  714.104661][   T10] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  714.113822][   T10] Buffer I/O error on dev nbd0, logical block 3, async page read
[  714.121992][   T10] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2
[  714.133693][   T10] Buffer I/O error on dev nbd0, logical block 0, async page read
[  714.141618][   T10] Buffer I/O error on dev nbd0, logical block 1, async page read
[  714.149666][   T10] Buffer I/O error on dev nbd0, logical block 2, async page read
[  714.159499][   T10] Buffer I/O error on dev nbd0, logical block 3, async page read
[  714.167570][   T10] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2
[  714.176698][   T10] Buffer I/O error on dev nbd0, logical block 0, async page read
[  714.184718][   T10] Buffer I/O error on dev nbd0, logical block 1, async page read
[  714.192835][   T10] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2
[  714.202440][   T10] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2
[  714.211953][   T10] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2
[  714.221518][   T10] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2
[  714.232360][T20028] ldm_validate_partition_table(): Disk read failed.
[  714.245513][T20028] Dev nbd0: unable to read RDB block 0
[  714.252887][T20028]  nbd0: unable to read partition table
[  714.271207][T20028] ldm_validate_partition_table(): Disk read failed.
[  714.282227][T20028] Dev nbd0: unable to read RDB block 0
[  714.290669][ T5289] 8021q: adding VLAN 0 to HW filter on device eth7
[  714.292570][T20028]  nbd0: unable to read partition table
[  714.574354][ T5289] 8021q: adding VLAN 0 to HW filter on device eth8