last executing test programs:

4.157952976s ago: executing program 2 (id=4192):
r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
getsockopt$bt_rfcomm_RFCOMM_LM(r0, 0x12, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000001500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x4c, 0x4c, 0x5, [@datasec={0x2, 0x0, 0x0, 0xf, 0x3, [], "44942d"}, @datasec={0x5, 0x4, 0x0, 0xf, 0x1, [{0x5, 0x9}, {0x4, 0x4, 0x4}, {0x1, 0x4, 0xc}, {0x2, 0x83, 0x1}], "84"}]}, {0x0, [0x2e, 0x61, 0x61]}}, &(0x7f00000014c0)=""/2, 0x69, 0x2, 0x1}, 0x28)

4.065532243s ago: executing program 1 (id=4193):
r0 = socket$inet(0x2, 0x2, 0x1)
sendmsg$inet(r0, &(0x7f00000002c0)={&(0x7f0000000380)={0x8, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000680)=[{&(0x7f0000000000)="0800401d4b19d62a71", 0x9}, {0x0}], 0x2}, 0x340401d4)
socket(0x10, 0x3, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="e0000000000101040000000000000000020000001c001880080001400100000000000000000000020800034000000002240001801400018008000100e000000108000200e00000010c000280050001000000000004001640440010"], 0xe0}, 0x1, 0x0, 0x0, 0x800}, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00', <r2=>0x0})
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2})
ioctl$TUNATTACHFILTER(r3, 0x401054d5, 0x0)
r4 = socket(0x1, 0x3, 0x7f)
sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x78, 0x24, 0xd0f, 0x70bd2a, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xe}, {0xfff2, 0xa}, {0x7}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x7, 0x8, 0x400004, 0x0, 0x7}, 0xf0, 0x1, 0x31a, 0x3, 0x88a, 0x2, 0x8b, 0x1b, 0x5, 0x0, {0x0, 0x2, 0x800, 0x5, 0x0, 0x5}}}}]}, 0x78}}, 0x4000)
r5 = socket(0x840000000002, 0x3, 0x100)
unshare(0x20000400)
r6 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r1, 0x4008941a, &(0x7f00000000c0))
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL802154_CMD_NEW_INTERFACE(r7, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="14000000", @ANYRES16=r8, @ANYBLOB="00000000000000000000000000009e30e369b3d3b68c7dee89a2bf0ed45c2060a53d1015d2a01dffae822bc12a86330b664632a2bafb45f845871c1074f340000000c56596855d0b657573ad87b6c53b23657a6796ec67a3da1596b546467706c3f82461a23cc26130a2889e1e06eea5a92d605366250d423aa12063bcd323d5ce64797abe093a9e9a8f69ab79271636be7ce38a4661"], 0x14}, 0x1, 0x0, 0x0, 0x4000840}, 0x0)
connect$802154_dgram(r6, &(0x7f0000000000)={0x24, @short={0x2, 0x2, 0xaaa0}}, 0x5)
connect$inet(r5, &(0x7f00000005c0)={0x2, 0x0, @local}, 0x10)
sendmmsg$inet(r5, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x4000095, 0x0)

3.957080298s ago: executing program 2 (id=4196):
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x3, 0x8)
r2 = socket$unix(0x1, 0x1, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r4 = socket$kcm(0x11, 0x3, 0x0)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r5)
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r7, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0xfffffff9}, @TCA_FQ_CODEL_CE_THRESHOLD_MASK={0x5, 0xb, 0x11}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890)
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$kcm(r4, &(0x7f0000000140)={&(0x7f00000001c0)=@xdp={0x2c, 0x8, r8, 0xb}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000340)="66b7c2238067e187d1cd932298d6930b3ccc1a49", 0x14}], 0x1}, 0x857)
sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0)
getsockname$packet(r1, &(0x7f00000006c0)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000680)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010000507000000000000000016000000", @ANYRES32=r9, @ANYBLOB="0000000200000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xfff1, 0xffff}, {0x0, 0xd}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0)
r10 = socket$nl_route(0x10, 0x3, 0x0)
r11 = socket(0x10, 0x803, 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r11)
getsockname$packet(r11, &(0x7f0000000180)={0x11, 0x0, <r12=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
r13 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r13, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="1c00000046000701fefffffffcdbdf25047c0000080001800400ab80df1e5fc4568bd673519561910c98df09113ca1e0c9d0ac494212d8a9fd1773b8085c96402b0f89e3f31b36dc236f70ec36c32e7f243128adab65d8f0b37002f8ba603873a41748ed7787cecd2b51b3a4f50a68ab3ba370785a6dcc5212ef9b83ea691adbd32894cdf75875c909c2770e5041fa73adc678be6f59c245a7ed974278c71060371f29a1560d528d7ed03f3edccc3b79bfb44727dc60e40b1092e487c2a423b2dc275fa930fd80ef71e7ff2f928671d12cb6a5b959735f1e99a4f7f3f5a5490a501b1f358c961af7ccb8edf79f3c148efe5156e6f253d6c013424997ff3c14b2a52fd52f50a19796e6b219146840fd44"], 0x1c}}, 0xc000)
sendmsg$nl_route_sched(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000900)=@delchain={0x34, 0x2c, 0xf31, 0x0, 0x2000, {0x0, 0x0, 0x0, r12, {}, {0x7, 0xffff}, {0x2, 0x5}}, [@filter_kind_options=@f_cgroup={{0xb}, {0xfffffffffffffe99}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4008854}, 0x4010)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94)
syz_init_net_socket$llc(0x1a, 0x1, 0x0)

3.95665103s ago: executing program 4 (id=4197):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@delsa={0x28, 0x12, 0x1, 0x0, 0x0, {@in6=@loopback}}, 0x28}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="3c0000001000010403000000fadbdf25000000001012fdc5db6b8c3d0c35b58328b109edde752b9af6d0f9cfb3361266d1d6290496170974bdd38ace70a8d1475afcaefd5e564ae14282baefdefa19bd8414ac97af215e807601f29a165bd018cc64e693deeb89c8f7541191dce26cd92225376b45fce2fd3cf48306ec51710f0982518070ef3ca53167befbf479c266912b6534a8ccc2fabf1cfcffffff8cb7d6f36031072797a23aa76414cd9bd8349c7005a017012e8c08d3e3da39747db3c299ab5f43e72b00d5e01b99f351b2916ea0e89b811940fb0bd273f709602dc2d44e034d1753f1b455a8c3", @ANYRES32=0x0, @ANYBLOB="900100008ba5072f1c00128009000100626f6e64000000000c00028008001400ff000000"], 0x3c}, 0x1, 0x0, 0x0, 0x40010}, 0x240080c1)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00000018"], 0x50}}, 0x0)
r1 = socket(0x10, 0x3, 0x0)
sendmmsg(r1, &(0x7f0000000000), 0x400000000000235, 0x0)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x0, 0x200, 0x70bd25, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20000041)

3.739787154s ago: executing program 4 (id=4199):
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce620300fe"], 0xfe1b)
r0 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', <r3=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000680)=@newqdisc={0x48, 0x24, 0xd0f, 0x470bd2d, 0x25dfdbfd, {0x60, 0x0, 0x0, r3, {0x0, 0xfff2}, {0xfff1, 0xffff}, {0x0, 0xd}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x7}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x83}, @TCA_RATE={0x6, 0x5, {0x48, 0x6}}]}, 0x48}, 0x1, 0x0, 0x0, 0x24000040}, 0x0) (async)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r5=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f00000007c0)={0x1c, r4, 0x80a, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x44000}, 0x0)
r6 = socket$unix(0x1, 0x1, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xfffffffd, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000b40)=@newqdisc={0x88, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80001, {0x0, 0x0, 0x0, r8, {0x0, 0xc}, {0xfff3, 0xb}, {0x3, 0xb}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x0, [0x1, 0x2, 0x2, 0x8, 0x5, 0xa, 0xf, 0x9, 0x2, 0x2, 0x5, 0x1, 0x1, 0x9, 0x4, 0x9], 0x0, [0x3, 0xbbe, 0xff, 0x34, 0x3, 0x6, 0x6, 0x3, 0x9, 0xe4c, 0x9, 0x4, 0x1, 0x7, 0x7, 0x1], [0x2, 0xd, 0x5, 0x46b9, 0x1c0, 0xa, 0x1, 0x0, 0x0, 0x400, 0x5, 0x3, 0x7, 0x0, 0x4, 0x7]}}}}]}, 0x88}, 0x1, 0x0, 0x0, 0xc021}, 0x4008000) (async)
r9 = socket$unix(0x1, 0x1, 0x0) (async, rerun: 32)
r10 = socket(0x400000000010, 0x3, 0x0) (rerun: 32)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r11=>0x0})
sendmsg$nl_route_sched(r10, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd21, 0xfbffffff, {0x0, 0x0, 0x0, r11, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x400)
sendmsg$nl_route_sched(r10, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newtfilter={0x4c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r11, {0xffff, 0x5}, {}, {0x7, 0xffff}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_FLAGS={0x8, 0x8, 0x1}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x2}, @TCA_BPF_OPS={{0x6}, {0x4}}]}}]}, 0x4c}}, 0x4800)
sendmsg$nl_route(r0, &(0x7f00000004c0)={&(0x7f00000001c0), 0xc, &(0x7f0000000480)={&(0x7f0000000300)=@mpls_getroute={0x158, 0x1a, 0x10, 0x70bd2a, 0x25dfdbfe, {0x1c, 0x80, 0x14, 0x4, 0x0, 0x2, 0xfe, 0x3, 0x80}, [@RTA_OIF={0x8, 0x4, r3}, @RTA_NEWDST={0x84, 0x13, [{}, {0x5}, {0x10000}, {0x2, 0x0, 0x1}, {0x3ff}, {0x7, 0x0, 0x1}, {0x2, 0x0, 0x1}, {0xd7}, {0x7, 0x0, 0x1}, {0x101, 0x0, 0x1}, {0x0, 0x0, 0x1}, {0x81}, {0xff800}, {0x1000}, {0x400}, {0xffff9, 0x0, 0x1}, {0x8cd0, 0x0, 0x1}, {0x2, 0x0, 0x1}, {0x9}, {0x8}, {0x8}, {0x80e2}, {0x80, 0x0, 0x1}, {0x4}, {0xff, 0x0, 0x1}, {0x9}, {0x1, 0x0, 0x1}, {0x6, 0x0, 0x1}, {0x6e7e3}, {0x7}, {0x800, 0x0, 0x1}, {0xffffa}]}, @RTA_OIF={0x8, 0x4, r3}, @RTA_MULTIPATH={0xc, 0x9, {0x1, 0x67, 0x7, r8}}, @RTA_DST={0x8, 0x1, {0x5}}, @RTA_OIF={0x8, 0x4, r3}, @RTA_NEWDST={0x84, 0x13, [{0xa60f}, {0x9, 0x0, 0x1}, {0x4}, {0x3, 0x0, 0x1}, {0x5}, {0x80, 0x0, 0x1}, {0xc4c6}, {0x101, 0x0, 0x1}, {0xffff8}, {0x2}, {0x6, 0x0, 0x1}, {0x6}, {0xff001}, {0x0, 0x0, 0x1}, {0x484, 0x0, 0x1}, {0x93}, {0x800, 0x0, 0x1}, {}, {0x12}, {0x3, 0x0, 0x1}, {0x1}, {0x4}, {0xffc00, 0x0, 0x1}, {0x2, 0x0, 0x1}, {0x3}, {0x81}, {0x2, 0x0, 0x1}, {0x4, 0x0, 0x1}, {0x80, 0x0, 0x1}, {0xa5654}, {0x6, 0x0, 0x1}, {0x4, 0x0, 0x1}]}, @RTA_OIF={0x8, 0x4, r11}]}, 0x158}}, 0x20000000) (async)
r12 = socket$kcm(0x10, 0x2, 0x0)
write$cgroup_subtree(r12, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0eab070004000523"], 0xfe33)

3.26079414s ago: executing program 4 (id=4201):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) (async)
sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x65dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0x6, 0xb}, {0x0, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0xfffffff9}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) (async)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000040)="a72d11a15c048c0a7d63aebc5cea1f81510ff6091475aeec600831aa9d3944e60bc2ad06a619c560aa0118b28f68f1eb14549d633b4b23f179fb680716faa43414787559be90843c35ab30acad8a6740140e00721abc2eb362f7bde53b3c992d3e28ccc20ec84fdc569947047f6c09a647ee8c0a747b951e66c068ccf1af93ee9e6f9528ff79e2f989383b05a690a6bec4634b867c9446c1c644b3010e8a3514c6328323b4bbdd602b8f0dace6aea70902c4ddd2a2f2810f1348b0d0df3c1e6a5938fcfdc87e7580c6be0c6a06eca62d6f787dd16add086a21391c4c707d8b61929d1252681b84c245e0efafe2e6e73ad86a3cf59235ab0eacbb414af92ec3cdac420a064a98e8cc18bdf63f8997f96436e0fe6f06fdbf47fff353b01a861babd4a38d126bfe3e29049e6cc883e6efae6e70ef9ed124b1b09887a58c991e223b6420dca5ae238027e91b17b1707dc5c0d5f59f0ca95614f1ea1d263c1ee54dfe31ae35eb3c8e3b931dff7920c57fbba89adf2e392c1ad719b90c7ade0d38ff9792934ef1fb12f51d8e2fad12486d5883d5b1a46696fad128c6805cfb25bc6487e1e407d6b266971b09d0d864a7a550284e24b6cdc9f4ae1081a638175dffef002c76ac5558d23e41edbe68f4b4950a13aa000326dae5a857603dc5a40d6c6618a98c7b6e1eebd325ea2c14601a25658965f40864fd015d9b2fff83ee5ed3212ebd9fa429f0140f633556ac07c0c08e67a1848c9942ecc47dd4ffede9a429e9e0472be7cdbcd117e621ddf745c00a814ffff0224634472577dc0b35a9c153409f1a2bddc193b20b4d244d9cbbd59816c46000c596865f58b4e640ed4a9ab6086cede697fb113560925498da83273e679e0e28b84961eb7b9c9b4fa916590965c76b48e5d453f27a821bd2bf0946ff2413ec30f7893d1f046e18f7", 0x29a}], 0x1, 0x0, 0x6b}, 0x0)
r4 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4)
ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r0, 0x4058587a, &(0x7f0000000700)={{<r5=>r4, &(0x7f0000000340)='^+\x00', 0x420001, &(0x7f0000000380)={@align=0xa4, {0x6, 0x0, 0x1c}}, 0xfa, &(0x7f0000000440), &(0x7f0000000480)=0x9af}, {[0xff, 0x8, 0x5, 0x2]}, 0x6, 0x85, &(0x7f00000004c0)=""/133})
getsockopt$inet_sctp6_SCTP_NODELAY(r5, 0x84, 0x3, &(0x7f0000000780), &(0x7f00000007c0)=0x4) (async)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', <r6=>0x0})
sendto$packet(r4, &(0x7f00000002c0)="0503222ed1fd140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r6, 0x1, 0x0, 0x6, @multicast}, 0x14)

3.203111735s ago: executing program 2 (id=4202):
r0 = socket$netlink(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x4, 0xb, &(0x7f0000000400)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000008b703000002000000850000005600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x4, 0xb, &(0x7f0000000400)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000008b703000002000000850000005600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="0000000000004a641c0012000c000100626f6e64"], 0x3c}, 0x1, 0x0, 0x0, 0x8d0}, 0x0) (async)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="0000000000004a641c0012000c000100626f6e64"], 0x3c}, 0x1, 0x0, 0x0, 0x8d0}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0))
socket$nl_route(0x10, 0x3, 0x0) (async)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x1, 0x803, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) (async)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
r6 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet(r6, &(0x7f0000001d80)=[{{&(0x7f0000000280)={0x2, 0x4e22, @private=0xa010101}, 0x10, &(0x7f0000000980)=[{&(0x7f0000000200)="9c", 0x1}], 0x1}}, {{&(0x7f0000000080)={0x2, 0x4e22, @rand_addr=0x64010104}, 0x10, &(0x7f0000000180)=[{&(0x7f00000000c0)="99", 0x1}], 0x1}}], 0x2, 0x48000)
getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0xc, &(0x7f0000000040)=@assoc_value, &(0x7f0000000000)=0x8) (async)
getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={<r7=>0x0}, &(0x7f0000000000)=0x8)
setsockopt$inet_sctp_SCTP_CONTEXT(r6, 0x84, 0x11, &(0x7f0000000000)={r7, 0xb}, 0x8)
sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x0, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}}, 0x884)

2.949588324s ago: executing program 1 (id=4204):
socket$inet6_tcp(0xa, 0x1, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r4 = socket$kcm(0x11, 0x3, 0x0)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r5)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084)
r9 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r9, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000040)={'ip6tnl0\x00', <r10=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="700000001000ffff2bbd7000", @ANYRES32=0x0, @ANYBLOB="01000000230800004800128009000100766c616e000000003800028006000100030000001c0004"], 0x70}, 0x1, 0x0, 0x0, 0x20048045}, 0x40000)
sendto$packet(r9, &(0x7f00000002c0)="05031600d3fc140000004788031c09103c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r10, 0x1, 0x0, 0x6, @multicast}, 0x14)
sendmsg$nl_route_sched(r6, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=@newqdisc={0x2c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0xffff}, {0x0, 0xfff1}, {0x1, 0x3}}, [@TCA_RATE={0x6, 0x5, {0x0, 0xd1}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40098}, 0x0)
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r11=>0x0})
sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0xdd86, r11, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="80", 0x1}], 0x1}, 0x4)
sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000780)=@newqdisc={0x468, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r3, {0x10}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x43c, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xb6, 0x1, 0x80, 0x8, 0xb, 0xfffffffe}, {0xd, 0x1, 0x0, 0xc71b, 0x8000, 0x4}, 0x7, 0xfffffff0, 0x5a9}}, @TCA_TBF_RATE64={0xc, 0x4, 0x6af2f2d767acbd1}, @TCA_TBF_PTAB={0x404, 0x3, [0xffff, 0x80000001, 0x38000, 0x26ca, 0x0, 0xfce, 0xd3, 0xa6, 0x4, 0x9, 0x4, 0x4, 0x8, 0x8, 0x9, 0x28, 0x2, 0xf8, 0x3, 0x4, 0x8000, 0xc, 0xd2f5, 0x600, 0x5, 0x8, 0xfffffff7, 0xe, 0x7636c58a, 0x9af8, 0x8, 0xa, 0x1000, 0x5, 0x4, 0x4103, 0x5, 0x3, 0x5, 0xfff, 0x6, 0xef8, 0x7, 0x1, 0x1, 0x9, 0xcbcb, 0x5, 0x5, 0x7fffffff, 0x8, 0x4, 0x1, 0x6, 0x4, 0x3, 0x1, 0xfffffffb, 0x6, 0x5, 0x2, 0x1, 0x101, 0x8, 0xdc99, 0x0, 0x8, 0x0, 0x4, 0x6, 0x9, 0x9, 0x72, 0x0, 0x7, 0x4, 0x9, 0x7, 0x5, 0x7dd7, 0x7ff, 0x6, 0x9, 0x7, 0x9, 0xffffffff, 0xd, 0x0, 0x5, 0x400, 0x1, 0x1, 0x9d60, 0x1, 0x4, 0x3e, 0xc93, 0xfffffffa, 0xa, 0x7, 0x251, 0x80000000, 0x2, 0x3, 0x1e08000, 0x8, 0x4, 0x0, 0x0, 0x2, 0x6, 0x8, 0x80, 0xda, 0x400, 0x100, 0xf, 0x5, 0x200, 0x3, 0x2, 0x0, 0x2, 0x9, 0x0, 0xfff, 0x40, 0x5, 0x6, 0x9, 0x3, 0x8001, 0x8, 0x4, 0x77df, 0xff, 0xf, 0x2, 0x48, 0xcd, 0xf680000, 0x6, 0x6f93, 0xfe, 0xe, 0x5, 0x5, 0x2a94, 0x6, 0x2, 0x2, 0xfffffffd, 0x8, 0x0, 0x304, 0x3, 0x2, 0x4, 0x4, 0x3, 0x3, 0x10001, 0x9, 0xe0c, 0x1, 0x423, 0x0, 0xd0, 0xe, 0x5, 0x1, 0x7, 0x9, 0xa, 0x1, 0xe, 0x5, 0x200, 0x3, 0x3, 0x2, 0x8, 0xf, 0x0, 0x3, 0xffffff6b, 0x8, 0x8, 0x7, 0x1, 0x0, 0x6, 0x4f0, 0x3, 0x80000001, 0x3, 0x3ff, 0x0, 0x5, 0xf, 0x6, 0x0, 0xffffffff, 0x10001, 0x1e00, 0x8, 0x7, 0x1000, 0x7fffffff, 0x9, 0xc7, 0x9, 0x5, 0x3, 0x2, 0x3, 0x6, 0x80000001, 0xffff8000, 0x4, 0x0, 0x3, 0xffffffe1, 0x2, 0x0, 0x7, 0xb, 0x200, 0xfffffff4, 0x80, 0xd5, 0x100, 0x8, 0x10b9, 0x4, 0x120, 0xfffffff9, 0x9, 0x9, 0xa, 0x81, 0xff, 0x8, 0x4, 0xfffffffa, 0xb, 0x8, 0xee6a, 0x69f1, 0x3, 0x7, 0xf, 0x4, 0x747, 0xe3, 0x5]}]}}]}, 0x468}, 0x1, 0x0, 0x0, 0x40098}, 0x0)
setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0xe}, @in=@remote, 0x4e22, 0x9, 0x4e22, 0x1000, 0x2, 0x20, 0x0, 0x73}, {0x80, 0x0, 0x9811, 0x7, 0x4, 0x8001, 0x7, 0x5}, {0x1000, 0xff, 0x1000, 0x353bac47}, 0x200, 0x6e6bb4, 0x3, 0x0, 0x3, 0x3}, {{@in6=@local, 0x4d5, 0x3c}, 0xa, @in6=@mcast2, 0x3504, 0x0, 0x0, 0x5a, 0x9, 0xb4f5, 0xffffffff}}, 0xe8)
r12 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r12, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="4c01000011002300"/20, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB='\b\x00.'], 0x14c}, 0x1, 0x0, 0x0, 0x40080c5}, 0x4000000)
getsockopt$SO_J1939_PROMISC(0xffffffffffffffff, 0x6b, 0x2, &(0x7f0000000000), &(0x7f0000000200)=0x4)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)

2.761186062s ago: executing program 2 (id=4205):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r2=>0x0})
r3 = socket$nl_route(0x10, 0x3, 0x0)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000f00), 0x8)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000880)=ANY=[@ANYBLOB="180000006800097fb330e22dad0326bd7000000000000a00040000000000"], 0x18}, 0x1, 0x0, 0x0, 0x4040801}, 0x0)
r4 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_STAT_SET(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="1800000010142d002b017000fddbdf2508"], 0x18}, 0x1, 0x0, 0x0, 0x20008045}, 0x48090)
ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r0, 0x4058587a, &(0x7f0000000cc0)={{<r5=>r1, &(0x7f0000000b40)='!}\x00', 0x381601, &(0x7f0000000b80)={@align=0x99a8, {0x8b19, 0x9, 0x5, 0x9}}, 0x81, &(0x7f0000000bc0)={@_ha_fsid}, &(0x7f0000000c00)=0x7}, {[0x5, 0x4, 0x4]}, 0x7, 0x77, &(0x7f0000000c40)=""/119})
sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000040)=ANY=[@ANYBLOB="200000006a001b0c2bbd7000fbdb8ae0fabf000000000014080001"], 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x24000804)
sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xfff1}}, [@qdisc_kind_options=@q_red={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x1)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000740), 0xffffffffffffffff)
r8 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r8, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f08d3aaea2bc0000de", 0x10)
r9 = accept$alg(r8, 0x0, 0x0)
sendmmsg$alg(r9, &(0x7f0000000a40)=[{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000000)="77167ead34cd1eaf2108c04de96e99fa4435f9041368e8dfec6af2ae8080b56c53c12b8431d17955ae1ec78709eee9acf825fdb672651f7eafb44b576930aff4b6a86ced3e4392cfe57a2c11b97e93f38debd6dc69f3a50d5742daa7081df08bd8118dcd6d9d18830c7d79d8", 0x6c}, {&(0x7f0000000240)="23ade41881a1e7ca07379924e2cb53138ec1e2ac415947eb6c7f56119ff98596d7469564e6d7c4", 0x27}, {&(0x7f0000000140)="66348451d22f5e2e4385e0bf75c5c3d30327039c072cd147f3b25df80100010000000004706aa85896228ef23136cbc1", 0x30}, {&(0x7f0000000440)="fe6abb1be48e556b473cabd427d746ca7d9bbf4f24ec7659b1c254940281f0a248dfc8c103fad1369a53e3402210b77170735064ceae5fcf381d21cc8960440e0a459705262c4c53065f", 0x4a}], 0x4, 0x0, 0x0, 0x40880}], 0x1, 0x4814)
recvmmsg(r9, &(0x7f0000000e80)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000080)=""/122, 0x7a}], 0x1}, 0x8000}, {{0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f00000005c0)=""/140, 0x8c}, {&(0x7f0000000680)=""/71, 0x47}], 0x2}, 0x6}], 0x2, 0x2001, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000780)={'batadv0\x00', <r10=>0x0})
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a80)={r5, 0xe0, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000600)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, <r11=>0x0, 0x0, 0x0, 0x0, 0x9, 0x7, &(0x7f0000000640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000006c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x7a, &(0x7f0000000700)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f00000008c0), &(0x7f0000000900), 0x8, 0x40, 0x8, 0x8, &(0x7f0000000940)}}, 0x10)
sendmsg$ETHTOOL_MSG_FEATURES_SET(r6, &(0x7f0000000f40)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1010}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000d40)={0xa8, r7, 0x2, 0x70bd2d, 0x25dfdbff, {}, [@ETHTOOL_A_FEATURES_HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @ETHTOOL_A_FEATURES_HEADER={0x4}, @ETHTOOL_A_FEATURES_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}]}, @ETHTOOL_A_FEATURES_HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0x8000}, 0x20004090)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000540)={0xffffffffffffffff, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000080)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0], <r12=>0x0, 0xe0, &(0x7f0000000300)=[{}], 0x8, 0x10, &(0x7f0000000340), &(0x7f00000003c0), 0x8, 0xb4, 0x8, 0x8, &(0x7f0000000400)}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x15, 0xb, &(0x7f0000000380)=ANY=[@ANYRESOCT=r2], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r12, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94)
r13 = socket$nl_generic(0x10, 0x3, 0x10)
r14 = socket$nl_generic(0x10, 0x3, 0x10)
r15 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_DAT_CACHE(r14, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r15, @ANYBLOB="05a300"/14], 0x14}}, 0x4020010)
sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r13, &(0x7f0000000e40)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000f80)=ANY=[@ANYBLOB="1aafc9bbfe0de529b29fdd1824798028d779d8eea362ea29f6a1340bae63f26b0b91a425832304dc9e8f6e9864b3fd834fc7d11732e82923dd76fb5ceb93ba519a1f07285a999b5e2dfcb3f92fa358381fcb211a41d85a7635ce47917de0bb", @ANYRES16=r15, @ANYBLOB="00042cbd7000010000000400000005002e00000000000500380001000000060028000400000008000300", @ANYRES32=r11, @ANYBLOB="08003400f269c760"], 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x20040010)

2.517684376s ago: executing program 3 (id=4206):
mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000bc0)={'filter\x00', 0x7, 0x4, 0x3b8, 0x0, 0x1e8, 0x1e8, 0x2d0, 0x1e8, 0x1e8, 0x4, 0x0, {[{{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x44, 0x2, {0xffffffffffffe8d8}}}}, {{@arp={@remote, @multicast1, 0xff000000, 0xffffff00, 0x3, 0x3, {@mac=@broadcast, {[0x1fe, 0xff, 0xff, 0x0, 0xff, 0xff]}}, {@empty, {[0x0, 0xff, 0xff, 0xff, 0x0, 0xff]}}, 0x6, 0x2, 0xd9e7, 0x1, 0x2, 0x1000, 'vxcan1\x00', 'macvlan0\x00', {}, {0xff}, 0x0, 0x8}, 0xc0, 0xe8}, @unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x0, 0x1}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@AUDIT={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x408)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000ff00000001"], 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r1, @ANYBLOB="0000000002000000b705000008000000850000000600000095"], &(0x7f0000000080)='GPL\x00', 0x4, 0x1002, &(0x7f0000000fc0)=""/4098, 0x41100, 0x24}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48)

2.385332419s ago: executing program 0 (id=4207):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'veth0\x00', <r3=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001400b59500000000000000000a400000", @ANYRES32=r3, @ANYBLOB="14000200fe8000000000000000000000000000aa080009003f0c00"], 0x48}}, 0x0)
sendmsg$TIPC_NL_LINK_SET(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[], 0x50}}, 0x20000000)
sendmmsg(r1, &(0x7f0000000000), 0x400000000000047, 0x0)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newsa={0x208, 0x10, 0x713, 0x0, 0x25dfdbfc, {{@in=@multicast1, @in=@multicast1, 0x0, 0x0, 0x4e22, 0x2, 0xa, 0x0, 0x0, 0x6c, 0x0, 0xee00}, {@in6=@private1, 0xfe, 0x32}, @in6=@private2, {0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x5, 0x543}, {0x7, 0x4, 0x0, 0x2000000000000}, {}, 0x70bd2d, 0x3500, 0x2, 0x1, 0x0, 0x50}, [@algo_aead={0xfc, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x580, 0x60, "210466d38547aa140db90100000000c542cb7a7db03db53320d36967b88848c18519f6516997b7a358ea37f391a3ef0acba616c503e48d50875d8ad2d60e2afd5b52c64b586f6dd9f7787bb65879848c53dc6f70922e9aaa5b97e41ae8875eb53423b28738991e65b3af6a0fe946af1a3c1af71e1637f2e6c025f181b69b16a65c193b70a3b8104e155cf41db9a1067ec9007940bda5fb6d686a793f426f739bb26a99769b0c5192ba59d4d68f66af00"}}, @encap={0x1c, 0x4, {0x2, 0x4e24, 0x4e20, @in6=@rand_addr=' \x01\x00'}}]}, 0x208}, 0x1, 0x0, 0x0, 0x800}, 0x800)
sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000006300)={0x24, 0x25, 0x319, 0x70bd26, 0x8000, {0x5}, [@nested={0x10, 0x138, 0x0, 0x1, [@nested={0xc, 0x9d, 0x0, 0x1, [@typed={0x8, 0x167, 0x0, 0x0, @uid}]}]}]}, 0x24}}, 0x404c0c4)

2.301032605s ago: executing program 3 (id=4208):
r0 = socket$igmp6(0xa, 0x3, 0x2)
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x0, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000000000000000000000000000085000000170000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000"], 0x0, 0xffffffff}, 0x94)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, 0x0, &(0x7f0000000080)='GPL\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0x7, 0x0, &(0x7f0000000100)="e0b9547ed387db", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000280)={'wlan0\x00', <r3=>0x0})
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f00000001c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x4c)
setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d05c164a5343", 0xf)
r5 = accept4(r4, 0x0, 0x0, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r5)
r6 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, 0x0, 0x4008054)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000c81e0100000000000095"], &(0x7f0000000040)='GPL\x00', 0xf, 0x0, 0x0, 0x0, 0x64, '\x00', 0x0, 0x24}, 0x94)
setsockopt$ALG_SET_AEAD_AUTHSIZE(r6, 0x117, 0x5, 0x0, 0x2)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x101001, 0x0)
ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r8 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=@gettaction={0x6c, 0x32, 0x400, 0x6, 0x25dfdbff, {}, [@action_gd=@TCA_ACT_TAB={0x2c, 0x1, [{0xc, 0xf, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0xc, 0x10, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0x10, 0x10, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xb, 0x19, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0xc, 0x19, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4fbb}}]}, @action_gd=@TCA_ACT_TAB={0x10}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4}, 0x20008890)
r9 = socket$nl_route(0x10, 0x3, 0x0)
r10 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r11=>0x0})
sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r11, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}}, 0x20040084)
sendmsg$NL80211_CMD_PROBE_MESH_LINK(0xffffffffffffffff, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001100)={&(0x7f0000000b80)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002a259d00001008000300000000000000", @ANYRES32=r3, @ANYBLOB], 0x50}, 0x1, 0x0, 0x0, 0x4000880}, 0x4044080)

2.227220705s ago: executing program 4 (id=4209):
setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x27, 0x0, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}})
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x14, 0x4, 0x4, 0x4}, 0x48)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r3, &(0x7f0000000140), &(0x7f0000000040)=@tcp6, 0x1000000}, 0x20)
bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10)
sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0)
writev(r0, &(0x7f00000006c0)=[{&(0x7f0000000440)="2e9b3d0007e03dd65193dfb6c575963f8864", 0x12}, {&(0x7f0000000100)="31020002", 0x4}, {&(0x7f0000000a80)="683f0057954e8374745129caea99bc671e3d", 0x12}], 0x3)

2.089549755s ago: executing program 1 (id=4210):
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) (async)
r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r1, &(0x7f0000001a40)={0x1f, 0xffff, 0x3}, 0x6) (async)
bind$bt_hci(r1, &(0x7f0000001a40)={0x1f, 0xffff, 0x3}, 0x6)
write(r1, &(0x7f0000000000)="23000397010007", 0x7)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0x11, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r3 = openat$cgroup_ro(r2, &(0x7f00000002c0)='cgroup.stat\x00', 0x275a, 0xfffe)
preadv(r3, &(0x7f0000001440)=[{0x0}, {&(0x7f0000001480)=""/15, 0xf}], 0x2, 0x0, 0x0)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000180), 0x4) (async)
r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000180), 0x4)
r5 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0)
getsockname$packet(r5, &(0x7f0000000140)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000780)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r6, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r6], 0x40}}, 0x0) (async)
sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000780)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r6, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r6], 0x40}}, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000010003904faffffff0000000000000000", @ANYRES32=r6, @ANYBLOB="00000000000000001800128008000100677265000c0002800800041601000000"], 0x38}, 0x1, 0x0, 0x0, 0x40080d5}, 0x0) (async)
sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000010003904faffffff0000000000000000", @ANYRES32=r6, @ANYBLOB="00000000000000001800128008000100677265000c0002800800041601000000"], 0x38}, 0x1, 0x0, 0x0, 0x40080d5}, 0x0)
r8 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000080)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r6, 0x1b, r4}, 0x94)
bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000040)={0x0, <r9=>0x0}, 0x8)
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000002c0)=r9, 0x4) (async)
r10 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000002c0)=r9, 0x4)
bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000340)={r10, r8, 0x4, r0}, 0x10)

1.799863573s ago: executing program 2 (id=4211):
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0xb}, 0x15, 0x3, 'lc\x00', 0x1, 0x4, 0x8}, 0x2c)
socket$kcm(0xa, 0x2, 0x0)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{0x0}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x16}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f0000000300)="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", 0xcb3}], 0x5, &(0x7f0000001480)}, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000007, 0x31, 0xffffffffffffffff, 0x0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
r1 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000140)=@req3={0x10000, 0x1, 0x100, 0x100, 0x2, 0x0, 0x3}, 0x1c)
socket$nl_generic(0x10, 0x3, 0x10)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000010c0))
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x300000000000000}, 0x0, &(0x7f0000000040)={0x3ff, 0x1, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)

1.534831648s ago: executing program 1 (id=4212):
r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x50)
r1 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x200a4800) (async)
sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x200a4800)
r2 = socket(0x10, 0x803, 0x0)
sendto(r2, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r2, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x14c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x188}, {&(0x7f00000007c0)=""/154, 0x8}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400})
recvmsg$kcm(r1, &(0x7f0000000100)={0x0, 0xfffffffffffffcb4, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/4135, 0x1027}], 0x1}, 0x120) (async)
recvmsg$kcm(r1, &(0x7f0000000100)={0x0, 0xfffffffffffffcb4, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/4135, 0x1027}], 0x1}, 0x120)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000880)=ANY=[@ANYBLOB="14040000100001002cbd7000fedbdf25070000000200000008000000", @ANYRES32=r3, @ANYBLOB="f4031a80f0032d80"], 0x414}], 0x1}, 0x0) (async)
sendmsg$netlink(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000880)=ANY=[@ANYBLOB="14040000100001002cbd7000fedbdf25070000000200000008000000", @ANYRES32=r3, @ANYBLOB="f4031a80f0032d80"], 0x414}], 0x1}, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000080)={<r4=>r1, 0x1, 0x3, 0x1})
r5 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) (async)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f00000010c0), r5) (async)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000010c0), r5)
sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r5, &(0x7f0000001180)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001140)={&(0x7f0000001100)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="020029bd7000fedbdf2531000000080001006700000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900070000006600000008005200", @ANYRES32, @ANYBLOB="0800136f27f33184"], 0x40}, 0x1, 0x0, 0x0, 0x20008000}, 0x40004)
getsockopt$bt_hci(r5, 0x84, 0x80, &(0x7f0000000000)=""/4088, &(0x7f0000001080)=0xff8)
r7 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r8=>0x0}, &(0x7f0000001080)=0x4)
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f00000002c0)={r8, 0xffff}, &(0x7f0000000300)=0x8) (async)
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f00000002c0)={r8, 0xffff}, &(0x7f0000000300)=0x8)
getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r4, 0x84, 0x1a, &(0x7f0000001500)={r8, 0xcc, "7c8d097cdcd1d067029970e643804262502656fa172f0d8e35aa1bc3467dc620528d1d481b79e61d0cf2ae329ba607775ff770feccebf6e2d9444d650324b7d8eef42cf4550eabf4b4b0c589a007f0159484ec58c176aefd941071808e9a32111c41e5fff27e66b58cd394e6e7cd3a46861a42bee9a93ac287c95085a3fc4696bba6fd3874f07b85a4a70211e3440731f8395f7b44a7238a449e7a5da06ff4f5d8624b92a956a63c9f4a3ecbb836ee4b4e6a22c424096d0540c62c6f5eaf625a696e18b3418ad9e45a8e3a34"}, &(0x7f0000001800)=0xd4) (async)
getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r4, 0x84, 0x1a, &(0x7f0000001500)={r8, 0xcc, "7c8d097cdcd1d067029970e643804262502656fa172f0d8e35aa1bc3467dc620528d1d481b79e61d0cf2ae329ba607775ff770feccebf6e2d9444d650324b7d8eef42cf4550eabf4b4b0c589a007f0159484ec58c176aefd941071808e9a32111c41e5fff27e66b58cd394e6e7cd3a46861a42bee9a93ac287c95085a3fc4696bba6fd3874f07b85a4a70211e3440731f8395f7b44a7238a449e7a5da06ff4f5d8624b92a956a63c9f4a3ecbb836ee4b4e6a22c424096d0540c62c6f5eaf625a696e18b3418ad9e45a8e3a34"}, &(0x7f0000001800)=0xd4)
socket$nl_route(0x10, 0x3, 0x0) (async)
r9 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r9, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10)
sendmsg$nl_route(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000001fc0)=ANY=[@ANYBLOB="240000001a00010000000000fbdb5f250a808000000000000000000008001900", @ANYRES32=0x0, @ANYBLOB="45737308d4db3d716760342373eb3470c14be56ac3d7101e24ffb21f156515e2dfa1b237d8d7045670c652b132d1943d4cd3690866ec47014f2fbdbf8625887d54bd90dc8805367289508a62d567c47e47faafcb7fdd762f491c182bab5eadad926dc534f5992e851af6ed3d81db2131b56d74d7811b1837dba9d21ffb862d451f5368c2ef981700c68d065cc33bfe92"], 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x20000004) (async)
sendmsg$nl_route(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000001fc0)=ANY=[@ANYBLOB="240000001a00010000000000fbdb5f250a808000000000000000000008001900", @ANYRES32=0x0, @ANYBLOB="45737308d4db3d716760342373eb3470c14be56ac3d7101e24ffb21f156515e2dfa1b237d8d7045670c652b132d1943d4cd3690866ec47014f2fbdbf8625887d54bd90dc8805367289508a62d567c47e47faafcb7fdd762f491c182bab5eadad926dc534f5992e851af6ed3d81db2131b56d74d7811b1837dba9d21ffb862d451f5368c2ef981700c68d065cc33bfe92"], 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x20000004)
r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x275a, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x3e}, 0x94) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x3e}, 0x94)
r11 = bpf$MAP_CREATE(0x0, &(0x7f0000001840)=@base={0x2, 0x4, 0x2, 0xc, 0x1400}, 0x50)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={r11, 0x68, &(0x7f0000000200)}, 0x10)
r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r12, &(0x7f0000000200), 0x806000)
writev(r10, &(0x7f0000001600)=[{&(0x7f0000000000)="d84f", 0x2}], 0x1)
ioctl$FS_IOC_RESVSP(r12, 0x40305829, &(0x7f0000000380)={0x0, 0x0, 0x0, 0xfca2})

1.534205927s ago: executing program 0 (id=4213):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001000), 0xffffffffffffffff)
sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000040)={0x0, 0x37, &(0x7f0000000000)={&(0x7f00000000c0)={0x14, r1, 0x8, 0x70bd2b, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0xd4}, 0x4000)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x40, 0x40, 0x7, [@float={0x6, 0x0, 0x0, 0x10, 0x10}, @func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{0x4, 0x3}, {0xd, 0x3}]}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x3, 0x4}}]}, {0x0, [0x5f, 0x2e, 0x61, 0x61, 0x30]}}, &(0x7f0000000000)=""/27, 0x5f, 0x1b, 0x1, 0x4}, 0x28)
r2 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'lo\x00', <r3=>0x0})
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001400b59500000000000000000a400000", @ANYRES32=r3, @ANYBLOB="14000200fe8000000000000000000000000000aa080009003f0c0000140001"], 0x48}}, 0x0)
getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r2, 0x84, 0x74, &(0x7f00000001c0)=""/145, &(0x7f0000000280)=0x91)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=@getqdisc={0x38, 0x26, 0x2, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x5, 0x7}, {0xfff2, 0xffff}, {0x3, 0x5}}, [{0x4}, {0x4}, {0x4}, {0x4}, {0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x40000)

1.533518625s ago: executing program 3 (id=4214):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x0, 0x0, 0x10}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0)
sendmsg$NFQNL_MSG_VERDICT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x28, 0x3, 0x3, 0x301, 0x0, 0x0, {0x1}, [@NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x2}, @NFQA_VERDICT_HDR={0xc, 0x2, {0x0, 0x5}}]}, 0x28}, 0x1, 0x0, 0x0, 0x20008015}, 0x4040)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)={0x14, 0x2c, 0x107, 0x70bd2b, 0x25dfdbff, {0x6, 0x7c}}, 0x14}, 0x1, 0x0, 0x0, 0x10000004}, 0xc010)
connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe)
writev(r0, &(0x7f0000000200)=[{&(0x7f0000000140)="1e", 0xff80}], 0x2a0)
socket$igmp(0x2, 0x3, 0x2)

1.420623301s ago: executing program 3 (id=4215):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4)
ioctl$sock_bt_hidp_HIDPCONNDEL(0xffffffffffffffff, 0x400448c9, &(0x7f0000000100)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x9}) (async)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) (async)
r1 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r2=>0x0})
r3 = socket(0x400000000010, 0x3, 0x0)
syz_genetlink_get_family_id$team(&(0x7f0000000180), r3) (async)
r4 = socket$unix(0x1, 0x1, 0x0) (async)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
r6 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r6, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x45)
r7 = accept4(r6, 0x0, 0x0, 0x0)
r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000280), r5)
sendmsg$IPVS_CMD_GET_SERVICE(r7, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x24000}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x14, r8, 0x100, 0x70bd25, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000011}, 0x8044) (async)
sendmsg$IPVS_CMD_NEW_DAEMON(r3, &(0x7f0000000540)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000400)={0x70, r8, 0x2, 0x70bd2a, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x80}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_DAEMON={0x4}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x7}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xdba8da9c}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x80000001}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xdd69}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x4}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x8}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4040000}, 0x40011) (async)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd0a, 0x25dfdbff, {0x0, 0x0, 0x0, r9, {0x0, 0x4}, {0xffff, 0xffff}, {0xfff2, 0xfff1}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newtfilter={0x40, 0x2c, 0xd27, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0xb, 0xfff3}, {}, {0x7}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x4, 0xd}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x810}, 0x0) (async)
r10 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$sock_int(r10, 0x1, 0x6, 0x0, 0x0) (async)
ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f0000000240)={{0x2, 0x4e20, @private=0xa010100}, {0x1, @multicast}, 0x52, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x36}}, 'veth0_vlan\x00'}) (async)
r11 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCADDRT(r11, 0x890b, &(0x7f0000000140)={0x0, {0x2, 0x4e24, @private=0xa010100}, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x19}}, {0x2, 0x4e22, @local}, 0x83, 0x0, 0x0, 0x0, 0x7, 0x0, 0x9, 0x9, 0x4}) (async)
connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) (async)
setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) (async)
sendmmsg$inet(r0, &(0x7f0000002900)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000200)="5df268", 0x39}, {&(0x7f0000000300)="77b7fb", 0x3}], 0x2}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000003c0)="2bf098fd6857", 0x6}, {&(0x7f0000000140)="8843e8", 0x3}, {&(0x7f0000000480)="764594baec3837f1fedcf5af82ac8366ddcd8c7bf218f85f888e41", 0x1b}], 0x3}}, {{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f00000006c0)="8509", 0x2}, {&(0x7f0000000a00)="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", 0x16f}, {&(0x7f0000000840)="e3bd", 0x2}, {&(0x7f0000000900)='\v', 0x1}, {&(0x7f0000000940)=']', 0x1}], 0x5}}, {{0x0, 0x0, &(0x7f0000000cc0)=[{&(0x7f0000000c40)="aa2d6ea7", 0x4}], 0x1}}, {{0x0, 0x0, &(0x7f0000001240)=[{&(0x7f0000000d40)="ec71", 0x2}, {&(0x7f0000000e00)="43a8", 0x2}, {&(0x7f0000000e40)='-g=', 0x3}, {&(0x7f0000002a80)="0a22752b439aa3ef5891362908d8bcf15363a7f7de60a04a0a3574746997a7f50034450ae6b026ee5e6a7591f3", 0x2d}, {&(0x7f0000000fc0)="ee0c1d4dfaca59a01d9997055f8c334db67d48cabb8808a613758d54333412c384b842619547bd5482b34e97272b53b13c06620fb120ed8871df31e5ba0a6f61e9e6", 0x42}, {&(0x7f00000010c0)="48c6f3d9", 0x4}], 0x6}}], 0x5, 0x4000000) (async)
setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f00000002c0)=0x10008, 0x4)
setsockopt$sock_int(r0, 0x1, 0x20, &(0x7f0000000000)=0x7fffffff, 0x4)

1.313629076s ago: executing program 4 (id=4216):
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff})
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1, 0x100007, 0x4, 0x25, 0x1, 0xffffffffffffffff, 0x400000}, 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240), &(0x7f0000000240), 0x2000cc0, r1}, 0x38)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r2, 0x6, 0x1, &(0x7f0000000280)={0xf3, 0x1bc, 0x3, 0x3, 0xa, 0x5, 0x40}, 0xc)
recvmmsg(r2, &(0x7f00000009c0)=[{{0x0, 0x0, 0x0}, 0x7}], 0x1, 0x1, 0x0)
bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x1b, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x2, r1}, 0x38)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_bt_hci(r3, 0x800448d2, &(0x7f0000000040))
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000fcffffff00000000000000008500000036000000180100006420002500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000001800000850000000600000095"], &(0x7f00000001c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0x5, 0x14, 0x0, &(0x7f0000000140)="259a00f271a76d1708fff74588a80a3888a82f15", 0x0, 0xd11, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000240)={'dummy0\x00', &(0x7f0000000000)=@ethtool_perm_addr={0x4b, 0x29, "4b721b782b17a7b6a00d962a649fcdf8ebbc4dbb9c0a2c3f9360abd34e1204ab518bc5eb872935137e"}})

1.223313023s ago: executing program 0 (id=4217):
r0 = socket$inet6(0xa, 0x80002, 0x0)
connect$inet6(r0, &(0x7f0000002140)={0xa, 0x4e25, 0x1, @mcast2, 0x7}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x4000, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00)
r1 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0x40, 0x10, 0x401, 0x70bd26, 0x255fdbfd, {0x0, 0x0, 0x0, 0x0, 0x155a, 0x4c905}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bond_slave={{0xf}, {0xc, 0x5, 0x0, 0x1, @IFLA_BOND_SLAVE_QUEUE_ID={0x6, 0x5, 0x2}}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20008000}, 0x24048044)

1.061259407s ago: executing program 3 (id=4218):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180200000100000000000000000000008500000087000000850000005000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0xe, 0x0, &(0x7f00000003c0)="e02742e868fba54e3335729a5ce8", 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2202, 0x0)
close(r3)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000))
ioctl$SIOCSIFHWADDR(r3, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'})
r4 = socket$unix(0x1, 0x1, 0x0)
r5 = socket$kcm(0x11, 0x3, 0x0)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r6)
socket$unix(0x1, 0x1, 0x0)
ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0xdd86, r7, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="80", 0x1}], 0x1}, 0x4)
unshare(0x6020400)
r8 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000000c0)='ns/net\x00')
r9 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r9, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000100)="a6", 0xfffffcf4}, {0x0}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x106)
sendmsg$kcm(r9, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001a00)=ANY=[], 0x10b8}, 0x4000)
ioctl$NS_GET_NSTYPE(r8, 0xb703, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0xb, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffff41, 0x0, 0x0, 0x0, 0x6}, [@generic={0x91, 0x1, 0x1, 0xba}]}, &(0x7f00000001c0)='syzkaller\x00', 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9}, 0x94)
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x34, 0x40, 0x1, 0x7fffc, 0x4, {0x1}, [@nested={0x4, 0x48}, @nested={0x10, 0x1, 0x0, 0x1, [@nested={0x6, 0x10, 0x0, 0x1, [@nested={0x5, 0x8, 0x0, 0x1, [@generic=',']}]}]}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x34}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094)

907.860133ms ago: executing program 0 (id=4219):
r0 = socket$tipc(0x1e, 0x5, 0x0)
connect$tipc(r0, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x5}}, 0x10)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0xfffffff9, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x3}, 0x1c)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYRES8=r2], 0x14}, 0x1, 0x0, 0x0, 0x42804}, 0x90)

694.896009ms ago: executing program 0 (id=4220):
r0 = socket$igmp6(0xa, 0x3, 0x2)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x7, @loopback}, 0x1c) (async)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
setsockopt(r0, 0x7, 0x13, &(0x7f0000000040)="dc19171ac3cd2801c6c412678e8ec466e0845581cad70d32eef0287249ce625aa2a8e244e623097a53c644344e74bcce83787acd723c091a4c2694d4ba5fd300f4d7de2295cde26fdaece4a70d515817848c4d5124eec9311219c0746c03805cecfdf19f588408045e4aeed2340dd3a4f5ea976aa0e33c26d55c5f753bf704485132f8a56515cfcb63e733c8523dffa805cbd666c3503ade6a193ad110380ce07c5a4ec52e52e59e260c1b71046224f16b9ab20c0360e75a98a7f84b39c4e426aaa5681b31ff596331a6db5e04938d12f6cf63d8ef43cdeb", 0xd8)
ioctl$SIOCSIFMTU(r1, 0x8922, &(0x7f0000000140)={'geneve1\x00', 0x7}) (async, rerun: 64)
r2 = openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000180), 0x2, 0x0) (rerun: 64)
ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c) (async)
ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r2, 0x4048587b, &(0x7f0000002900)={{<r3=>r0, &(0x7f00000001c0)='geneve1\x00', 0x200800, &(0x7f0000000200)={@align=0x5, {0x8, 0xe, 0x3, 0x354}}, 0xc, &(0x7f0000000240)={@_ha_fsid}, &(0x7f0000000280)=0x6}, 0x7, &(0x7f0000002800)=[{0x2, 0x2, &(0x7f00000002c0)=':)]\x8a\x00', &(0x7f0000000300)="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", 0x1000}, {0x3, 0xfffffff0, &(0x7f0000001300)='\x93.-\x00', &(0x7f0000001340)="f798f21246", 0x5, 0x22}, {0x2, 0x9, &(0x7f0000001380)='\x00', &(0x7f00000013c0)="c6e144858e5ba369a13586ef3e39b4862801758b9c95d609308b52bdca132c2c7e0b2d0d632c51f65b0721d97559f7f114d29eb2134f4cf282ec5c4f21db1ebfd78fabc6d90853a7e9f621bb4d3ab515c7cb03a42217c8c5a50a2e609813b4c0f00bc4fdde5f09a05dd2300605394c493bba99ee8fb61621357470bd49f7d928fe7e99f16bd06b69a616ef22001b82ee2b284f90e7bf09b5c7c1a7d5b5624a0c4220700a8900b4abf3ac5dec8e64f6679fb27e5c82cb2c02338bb5bfcdbf399a8a32b3fc26ec8b464d3ccd0ccb1a1a6eb0b0b296b98850161ebac6021f5673207b3b80edf7286fe1141005daf116a599e62f763b26ef6854dddd522b38d144fc2e59028699a35e3100d2a9c6a6ca43e5806e49042d6d58e5dfce4e064ca9fbcfe8fd2e2f0214b173a37b964c66419dedbb8ac3aba76e7820dfe4415071764ab66eb43d19b002e558967b9387efb167e11b726adb3a42a8f750b21cb6b7a916bcf53fa387e786d07216e6e64eb374ebf6ca73e3b83da3a6df3bf5c4d3ac5c094116434b287b2897a5e91da581952db83b9f062c42a923e991399cd5fa6c8726a88cf4aabe4b13aab1648509ade142a2dadc2ef15ba1d6b70bf40e226f60736ecdb35cce97212a9a8189a64734f3a8f13258c28210afffb61f2fe9cb9095ca5a4079642b440e5e5e5c8b655f11611655331198c9fe7ee9eba317eed96d34d80aa413bde4713a34dd575504d5f7f735299d67a8e4a3f71837863a04c97d731d4fdf3c17f3b8f9f185d6f18a848483b93d93b53444327a415d45789a13895fac9b69e58fbb133834da27b7296dbd3ab245cae42b03dc55f830852f80ecceedc15a2ec25ff7f837deab492cd6a25af06c303fbe6acb3f1dbe9001fd69a3b162e0a16901f78147e58f9a02e65cce3a2ca44e1d13b5f65e77c71b1a91466cc65cb4ec8fca4bcc054bfccbd3885b572235219cee739098ccd614d94fbb92e5a1c0950392e5a12bcfbbab7715de241427a9adbca9874c4b5d4e384bd0f5fa64912cccd0f0b0f2b4ede01b695c351f0cccac17b88568c9f512041713261e333a1473ac22985482a352ff3395de4f74db67d12a40a957921a673c673711e20ac3a3b630d0b3cf1aa50a90835e84c2081195978d8bff90eeaeac404908a491b78da4daf6dab8ce36223b5aea2372557e75049f044682985ccbe203a089b7050954a58e7eae7324e7b29c80b3293058d846939931a7db9c0c6425668fc38b187bddee04eb3c183cec9acd53ce31337c94b50af2ffce5cf4c5a328b65daf7ae728ad40b1775bbdd251cea7615c1fb19525cd5b78c496080135270748f3f31c85a4110fcc4cde922d17178053a686f036a2e09816ac8ccd06c8596972618bb20aa3f7c184b2eed3edd275c686e5dd35ed9b7bfabee50870f6dc345d11c9ada3f80a197853d2c0457a13884026aec977ab28e01c571686ffc645de4429b63e89ec72e43bdb3ff7f30625293b92d7e8c0b72a3fb74ba8632976522b550a47a28d6e8e98a65ff2ce0564bb33bc0a9fa69409f0c9efba302aeb519835a124468d3a602eeba9dda9a959407dcd0517e1f8debbdb004bdab71b161c088baab5b73964352256bab0e910e3f38fc55d16eb65b5169d0061a8417ef14c811f150fb114aace8f1d15b78e69b4ecb0d8db5d908567a354e5e7f2f7413fe9d62e249f91e24f3281f4bb1dd3f25967f92e5ee5f43d20f328ff017cfc8b9cfdf957353ee3a78359da534279b7158ec487103ef80c63720ed8de2465d3d00189e331ec8ea1ff6f7c5a61d8aeab74d2bbc3e2805adc9d36fe502d4e9af0c033d513e05e5400fe840a90c9a1b25aa96ca0f11499f0a0cb1dad019a8de898e97f4051837873dea7deba1cbc6c831c98131b2a3f0b7074a4d8ad7a5a44be187837ce5acd38d41dc5c4c744053c9bdcc87f6ef4eb34d4b924ddaf3b96bcd41e5300eb5ae50a6d4ef2dbe97f7eb67cab6aeb31c1131b2d133bfc6d46b7ee483be9a0d2a13c05a71f90f76da341da5882fa4d286ebc79ff33236a284394bc19fd100110b793dc7ce6488a70f8f97365a16b66269b73aed7c9c23a2878158dedc4ae8e65cc1e94eda980559cd01703edb814c88998c7ab03701724170fe4454248140a5368b0c69ca8864a9abc188f9bc190a353578a9249ad5395944ab6da9c44b37607e2ca2b734df922db1060f99b7883ee4bed933305dbf03426eb29e04d3e27af34f95b87fa7b53d6c1a5c21e40d66cd752b518095d5113957936167a518c8c8ff0508851d51d179de2c6f3ae177e5df24a569af4e69d9570eca7605c5321db8ec44c3914eb1343114f937772fccc125925159577e2550faa062936ca5fe0d4e13d5c161e62cfa1aa8a05ed16e116414d5c065d46a54db399e73692fc0a836e4be55d10e1bf8c6d849813ed7266c256517fdebdaabd75c504657143d32b81b8876eb1452865112ef75d7f33c577fea8a11e2a293580535e96f29c31bf456baa6149a8add75d181ae5b435249bd3abfc00ba2c430d56210f2a9f80a30b86dd007a79817c2a242bfd85178805d4ad8f9d1a703640b020b06eec4bda12ddf6261581e7a322d217ad5e4a0e792ea39863cdec37453853945eed62ae9fc928f211d8f5ba84a2a6ab5dc08ff0db0ec526c65e4752d3d0e22d725316ed10158d9ed7b232052ab5eff4e522a001b64912b7fc8d7c80d9e529b5b630f012ea215f0ae64c52aba98d09558934cac6c295bae6f7f3ef0b7d68879206a74e24e54aab2f594d0fa7293e31646b127added732ed8d302dd40d092e49be46a1dc02fd0c290b9c342ab64e92af9b050af83e428c07f966de94982cd723ba10e9b3e146e7b01609f7a425a30d155104acc3a34768a423fb8d3d00622ac0a8182432949f23e98e4ad0db74e09c0f49fab802298f409adf1432716ec2f53f4e66625fe2c15f3985b1e03e78fca2e5aa0060bbc62deff950aef9e19af4e26422ed17659f3bf71ebac6e2154e80bd5fb1ba9881ec72e64e983b42b4d4516eb54fef254d9a7b5ab09d93d66291dfe443026952e264e0ab00522c6fe20995ebacae51a488b2a979751dfacc275db61e0a4088cf196d509623677bd9e08c4b3eb5b691fad00dd3de7467287e34094ce3ea5a9a48a151893612a8c4b9766421e25cffadbff223d4ac64fb461c72a79e57df7def5b9b137a1cd8fa213e95841dbcb80095b57d8baae87a05377ab4660a03042dd4b98a12b2b4f9242aefb809fa1d51e08aa3202cd30810db18b9e30e0e8e23878051b5617bb5801ef352cec74f8c735baa311f1666b1f8b6579b2d85c14946522ddc3a531f18df140fc3c2d10c44a81b936f9a7ee21236a406c3946c686ab3e5d1486ac7e8e921de7ac284e98f562f60b454808c2d3b541eafd2dadc9703a1652840adddf7b633aa7f4ad9c6ace1ef49f13e009382c00d71aa3ada1426b7567293029c2bacd2ffa1ecbe407ae2ff63f926a3b905ffefb730e6c7823aa6b5e481bf90f890ea263ada5bad9b61076fcb1f9c0919a2ba53239dcbf50c21b32130af19addb56b5001c2dd30e2a010a29a3428cf08a4d297acb3dbf5bf92e64b3155b4d321196e75947f94438328afe73237ea2c707debd75aa8df525525bed105403183871f75fb09540f8fcb6ec3c484c6a395c54a27da4c12c432e191d59ff277856927f51927ebb5f84fc234a6cf503573bd1bd713adf3ed90bb3f965ee21a5acc85712d1e78646323133c406972902cc1a13dcf9ebd2777caf564775758ea01a28b67e0fccb80a68411141add1d64217c788236f3d213bf58abdb3c679828befbaacf42e738c10bc7b9bc5cef68aea339a08a1c812bb9db684020cc12832b11e81a8903bfc4e77e273ab9bd3a96c05d3b70d3b73fbaac3dea0ce4f7b554a7234628e6e0a5dcab54ffdadfea20d5fdf8253926084c02a1e06fa0a6be02f047a2c11965dead35cd23717afe8345d1a69a7462d4ff5755bc0706778317f7ed8cdcdb744188114d01e7f377b89843e4a0ff1c30a5c5693c4abeb6d6b9455440bc63bc5c46fdecf569ef25ad8a226ca01ffcd3dc42e2a3a1c83e2da49622d5d6112e810c5e47026240359b8b3bde3834002204fe873e5da08616eec1441d284bab0832dcf7558bf7be17adf7e1d96f1f8da4a5b37dcd4c1c56e61f37ea702e718286fe3f1db42880c454bb95d9ec01b119e1f5f451be640ba30277000083e39ba70cb8bf4c08ab1448a188918fb9c27479375731234bd67406d27c55e8832e75ac12e1454db232a2f4543198a84ec5d349463627311f0ca5b3c6f8ac7b2155953c27294efce0d67bfdc0ac53a855eef82fda0dfcaac5dca9a8dc8fe99da9eea41ac19484ebe3a1bb0361c1df2e948df39e859c6d0f6c2e4486dda6443ad3cb56ee919afae611166bff28ee9977c9e8ee74e432c501199499a944e5e440706d9df5d4cff4f6b05738205c82b0cc4509080efb5af18a4a1e5d0a2087f1b0fab03d7532a58c1dfd3966f495a5ba3007e2ac114e9df7271f2fd80983498e88b6786297130ecda996f437d24f36e26b90407fa7f6441a1730621b6d540ffb2c37ce1b0ce66766217037c96ec615b44069f573c868adf58febc5d38c1396ec08e611ac761cc2bf121f16571b8ae3916fc5a09296298a647c408546614dff0dd510e6ed9244f0066a1957ceb17b7fb4096b8a043975c7b36b7d0b8f576601cd20bad8190a18f496006a89c428cf1649a7d73faf025532673b2b9d4df8ed6da6d7e3e93516e5ae834db448d99885b8862e5aa8c84f14cbc0023214b74c6ec895577aba309136fe98a3ae4e62bc1abfe368864213386a36a4f44d05134026d306c7c43396e4e9709c799b971f45fd97408af3de503d92624b5287398425ab6c5eff85489e0fceabe4f4141498c72e31d4b0f557985e6aef50af4d38bd76fff3cc04406752ae2802a2621a92a25109df4bd9646bcf3e10e4eea47f10bddf5d8859d169b4a17cfa45a54a1be284ea390a78c678069e511bd03f8d5f3c6d3e3bc1cd019d3623189468a718a4c04a9a1de3d8f9d7c100cf883841c4cf25fbd0297b7f37ec063110f13513bb16925430dff89086e22f5251624a17e1d7df8f96a424fecdd54cecc1e49b801a6dcd92a12a8616f49cb7337b4c0ddfa35a5afc9f913233a884f0e5ef7862c7a0d8ae1278f8c270ea4673e90a9e32a95e8058f63e4c045d8c572b5cd5ccef2287950808750206029b55b7d21c81567f09a7df1dfceb42d213554acde2d78c485c68f239ac1444e428e773bd824293acfd89adbdddad1371451e934d6d2e5ee60007855819f9afc0120d49754d08198dec80779cc2d9fb8f4689a2e001e49d01ecdee605538518b961b316c6ef19f16dc479f3eb0734c7932e3fdb9db25fe879d682970ebd741d2d5e411dde195caf80d77bc02e9eaa18100fc8f3cde636ef5ab2fc9994c1e6ddbce82d60ce9abde7c4fe81ea1e67c7cc0176978fa66e13215c37f82efa1a7a3593c46d67e2154c4817c0a0b32fdfa0375b26db8a49786b5378f9fb290b781f453c9e32882a5bb72bcd45ac68067879c6e22bc3607e02ff353313e84580c65596ab34cc062db208332a4d25e301f6e3a8dde5858aceb7ca05a434528178a2b572712cbc1e99e1ae988f7b70203ea775a99c5fe21704f381db375b4beb6ad89c907bf78732cbb7a4d25334061bc57eedff768446a42e5fbea59329839fbc9a5a19858325dadf72632fef8926620bb0c0e3183ea95226949bfde681d912bb1a38087888", 0x1000, 0x10}, {0x1, 0x3, &(0x7f00000023c0)='geneve1\x00', &(0x7f0000002400)="747a9731decb2594d9c2b978f14a3faf269dcfdcc8e06332dfe106d557723f927a7c36e0c23e53afbc74656d36dc483731fb9080777ef361bc81ea4e4dc3793132e8dc5ad2b0ad17471ef6f935f39e7d29a564991b90cae7e4d80199e571094cc45b15b1e04d16170af278dc24eb54638081b8c7124e884e981bb7842b7df99d799cb8051bc5aaa8ff8e4f2009d5e81af51da10e12447639672a82983769e694e2d2cc22a3262a39b8b3412ab6dcf91dd323e40798a7c65ae83d0f90c785ef9acc3b18c0afb53eae3b09a19ca8dc2c2cdbcef2bdb7feac8b587b5f0f1ff5a50cffb266d4682848fb702f97ef682daa4e961c", 0xf2}, {0x1, 0x2, &(0x7f0000002500)='\\\x00', &(0x7f0000002540)="21a9ec921206e0eb330d3c7c165b99157bcd1272c0c70dfd0a04a0633c64bff6ba4e28abd2cc0e091f066ed2561ae940aab82a31538322e1540aa7794fd9aadd27fecbdc7db088f965d388fa26b5c391c10b5f13e0b2b8df13b087ab8973ff570354c969cff66860b27380e4530184c402aa4e0f39ed93575a7f18d0e864cd145b6649ee4c4b972563d8207804e630706e3da3a3289ac7404f11874d7e47fcc53e12bce6d030fb11fd4b12574250cf21d9593d21fe33087f4d872ee9d950970fccd2147fcb3e06737062d41f560ad08ab55a7200", 0xd4, 0x8}, {0x1, 0x8, &(0x7f0000002640), &(0x7f0000002680)="84c99204ee17", 0x6, 0x8}, {0x1, 0x9a, &(0x7f00000026c0)='geneve1\x00', &(0x7f0000002700)="6f31cea03a04b8916157f6cdfd456b5638d4cb78cee122424ab562f95af4a1d001be8ee64612988ef4aa90218bf0437e39706091d32376796d0d1ae1c6dc399835fa8fe806ef5847039257948eb655e521cd59a4021fc2d6257a663cdfba3533aa6fa44edba045edfd1b34c3c318b166c275a623709f92b0136169dc4c08bc23cad89b985a9e950b08555eb8e11e8585c19a21cfbbdecd3a2cb117638d9025f794e769166c1b49106e6df3301c38f0633099da58f3d3b008b0a1a163e5981a6a3036506a836d0ddc71d85b2595345e59014fdd", 0xd3, 0xa}]})
sendto$x25(r3, &(0x7f0000002980)="7f807d19578886504c86167cc5bad08032b095a1f9c64bda6b34a10031b2949550de27efdc11ce777d673194605414aecca9d0c3d198e3eb6d73ed22f4b08acb21a2ef11ff99adf613f1602faac8eff98713a0e3cba0c9674e44", 0x5a, 0x44, 0x0, 0x0) (async)
r4 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0)
setsockopt$sock_int(r4, 0x1, 0x1, &(0x7f0000002a00)=0xbbb1, 0x4) (async, rerun: 32)
getsockopt$IP_VS_SO_GET_SERVICES(r4, 0x0, 0x482, &(0x7f0000002a40)=""/23, &(0x7f0000002a80)=0x17) (rerun: 32)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NBD_CMD_CONNECT(r5, &(0x7f0000002b80)={&(0x7f0000002ac0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000002b40)={&(0x7f0000002b00)={0x38, 0x0, 0x2, 0x70bd2d, 0x25dfdbfb, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x1}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x5}, @NBD_ATTR_CLIENT_FLAGS={0xc}]}, 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x40011) (async)
r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async)
ioctl$sock_SIOCADDDLCI(r4, 0x8980, &(0x7f0000002bc0)={'dvmrp0\x00', 0x80}) (async)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000002c00)={r3, <r7=>0xffffffffffffffff}, 0x4)
bpf$PROG_BIND_MAP(0x23, &(0x7f0000002c40)={r6, r7}, 0xc)
setsockopt$bt_l2cap_L2CAP_LM(r3, 0x6, 0x3, &(0x7f0000002c80)=0x6a, 0x4) (async)
ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f0000002cc0)={<r8=>r3})
sendmsg$TIPC_NL_KEY_SET(r8, &(0x7f0000002ec0)={&(0x7f0000002d00)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000002e80)={&(0x7f0000002d40)={0x140, 0x0, 0x400, 0x70bd2d, 0x25dfdbfc, {}, [@TIPC_NLA_SOCK={0x20, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7fff}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x100}]}, @TIPC_NLA_MEDIA={0x38, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xf}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_BEARER={0xd4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x63}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x100}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @rand_addr=0x64010100}}, {0x14, 0x2, @in={0x2, 0x4e23, @loopback}}}}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xb8}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @multicast1}}, {0x14, 0x2, @in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}]}]}, 0x140}}, 0x0) (async)
r9 = syz_genetlink_get_family_id$nfc(&(0x7f0000002f40), r5)
ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f0000002f80)=<r10=>0x0) (async)
ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f0000002fc0)=<r11=>0x0)
sendmsg$NFC_CMD_LLC_GET_PARAMS(r5, &(0x7f00000030c0)={&(0x7f0000002f00)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000003080)={&(0x7f0000003000)={0x50, r9, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@NFC_ATTR_FIRMWARE_NAME={0x7, 0x14, 'ib\x00'}, @NFC_ATTR_FIRMWARE_NAME={0x11, 0x14, '-){^-$\xf3./^\\]\x87'}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r10}, @NFC_ATTR_FIRMWARE_NAME={0x9, 0x14, ':)]\x8a\x00'}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r11}, @NFC_ATTR_FIRMWARE_NAME={0x4}]}, 0x50}, 0x1, 0x0, 0x0, 0x40}, 0x0) (async, rerun: 64)
ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f0000003140)=<r12=>0x0) (rerun: 64)
sendmsg$NFC_CMD_FW_DOWNLOAD(r5, &(0x7f0000003200)={&(0x7f0000003100)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000031c0)={&(0x7f0000003180)={0x2c, r9, 0x400, 0x70bd29, 0x25dfdbff, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r10}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r10}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r12}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x60) (async)
setsockopt$inet_sctp_SCTP_EVENTS(r8, 0x84, 0xb, &(0x7f0000003240)={0x9, 0x6, 0x8, 0x40, 0x6, 0x80, 0x8, 0x5, 0x0, 0x4, 0x6, 0x2, 0xfa}, 0xe)
r13 = socket(0x29, 0x80000, 0x3)
getsockopt$bt_l2cap_L2CAP_LM(r13, 0x6, 0x3, &(0x7f0000003280), &(0x7f00000032c0)=0x4)

685.778032ms ago: executing program 1 (id=4221):
r0 = socket$igmp6(0xa, 0x3, 0x2)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0xd, 0x10, 0xffffffffffffffff, 0x0) (async)
getsockopt$inet6_int(r0, 0x29, 0x7, 0x0, &(0x7f0000001cc0)) (async)
r1 = socket$inet6(0xa, 0x800000000000002, 0x0) (async)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x83, &(0x7f0000000040), &(0x7f0000000080)=0x18) (async)
setsockopt$inet6_udp_int(r1, 0x11, 0x67, &(0x7f0000000180)=0x27b, 0x4)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
setsockopt$inet6_udp_int(r1, 0x11, 0x65, &(0x7f0000000000)=0x5, 0x4)
connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) (async)
sendmmsg$inet6(r1, 0x0, 0x0, 0x4004) (async, rerun: 32)
write(r1, 0x0, 0x0) (async, rerun: 32)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async)
sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x38, 0x6, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x1001}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x1}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x60}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) (async)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) (async)
syz_emit_ethernet(0xfc0, &(0x7f00000005c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x37}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x27, 0xfb2, 0x6, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1}, {0x0, 0x4e20, 0xf9e, 0x0, @opaque="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"}}}}}, 0x0)
recvmmsg(r4, &(0x7f0000003000)=[{{0x0, 0x0, 0x0}, 0x80}], 0x1, 0x2, 0x0)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r0}, 0x8) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, &(0x7f0000000100)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x4, 0xde, &(0x7f0000003e40)=""/222, 0x41000}, 0x94)

430.243264ms ago: executing program 2 (id=4222):
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r0, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10)
setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, &(0x7f00000000c0)=0x33, 0x8)
listen(r0, 0x0)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10)
r2 = accept4(r0, 0x0, 0x0, 0x0)
sendto(r2, &(0x7f0000000000), 0xfeb5, 0x0, 0x0, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x80, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_HOOK={0x54, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_HOOK_DEVS={0x40, 0x3, 0x0, 0x1, [{0x14, 0x1, 'pim6reg1\x00'}, {0x14, 0x1, 'wlan0\x00'}, {0x14, 0x1, 'pim6reg1\x00'}]}]}]}], {0x14, 0x10}}, 0xc8}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
recvfrom(r1, &(0x7f00000001c0)=""/62, 0xfeb5, 0x10120, 0x0, 0x0)
listen(0xffffffffffffffff, 0x9)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r4 = socket$unix(0x1, 0x1, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, 0x0)
ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000000)={@private0, 0x7f})

249.07488ms ago: executing program 4 (id=4223):
r0 = epoll_create1(0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
syz_emit_ethernet(0x27, &(0x7f0000000000)=ANY=[@ANYBLOB="bbbbbbbbbbbbbbbbbbbbbbbb88a848008100100088cac82bfb8f5713876856022cd264abbe4b98"], 0x0)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
connect$802154_dgram(r3, &(0x7f0000000200)={0x2, @long}, 0x8)
epoll_pwait(r0, &(0x7f0000000140)=[{}], 0x1, 0x2d516fb6, 0x0, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014})
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x3, 0x5, &(0x7f00000006c0)=ANY=[@ANYBLOB="180200008000000034b0d716d5ca84d9850000009b00000085000000070000009500000000000000"], &(0x7f0000000680)='GPL\x00'}, 0x5d)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r4, 0x0, 0xe, 0x0, &(0x7f0000000180)="5becbc0e0d7cca6073a4f11d1b00", 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
epoll_wait(r0, &(0x7f0000000040)=[{}], 0x1, 0x400)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r5, 0x0)
r6 = socket(0x28, 0x5, 0x0)
bind$vsock_stream(r6, &(0x7f0000000040), 0x10)
listen(r6, 0x0)
r7 = socket(0x28, 0x5, 0x0)
connect$vsock_stream(r7, &(0x7f0000000080), 0x10)
setsockopt$sock_linger(r7, 0x1, 0x3c, &(0x7f0000000180)={0x1, 0x5}, 0x8)
sendmmsg(r7, &(0x7f00000014c0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000001500)="99df", 0x2}], 0x1}}], 0x1, 0x40)
r8 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
r9 = bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000ac0)=ANY=[@ANYRES32=r9, @ANYRES32=r8, @ANYBLOB='&'], 0x10)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r9, &(0x7f00000047c0), &(0x7f0000004880)=@udp=r5}, 0x20)
epoll_wait(r0, &(0x7f0000000240)=[{}, {}, {}, {}, {}, {}], 0x6, 0x404)
unshare(0x2c020400)
pselect6(0x40, &(0x7f0000000000)={0xa, 0x80000001, 0x2, 0x10000000000006, 0x12, 0x8, 0x80000000, 0x8}, 0x0, 0x0, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)

230.5879ms ago: executing program 0 (id=4224):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', <r4=>0x0})
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000300)={0xffffffffffffffff, 0x20, &(0x7f0000000280)={&(0x7f0000000140)=""/251, 0xfb, <r5=>0x0, &(0x7f0000000240)=""/17, 0x11}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40500000000000079102800000000001e050000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', r4, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000000100), 0x10, r5}, 0x94)
socket$packet(0x11, 0x3, 0x300)
r6 = socket(0x11, 0x800000003, 0x0)
bind$packet(r6, &(0x7f0000000d00)={0x11, 0x0, r4, 0x1, 0x7f, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xb5}}, 0x14)
writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000040)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fdd411efc40800040000000000000000", 0x39}], 0x1)
openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x280500, 0x0)
writev(r0, &(0x7f00000001c0), 0x0)
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f00000000c0)={0x0, 'bridge_slave_1\x00', {0x3}, 0x488f})

98.426066ms ago: executing program 1 (id=4225):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x200000000000011, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r2=>0x0})
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', <r4=>0x0})
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@RTM_NEWMDB={0x6c, 0x54, 0x1e5, 0x70bd27, 0xfffffffd, {0x7, r2}, [@MDBA_SET_ENTRY={0x20, 0x1, {r4, 0x1, 0x0, 0x30, {@ip4=@loopback}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40840}, 0x0)
r5 = epoll_create(0x7)
r6 = epoll_create(0x7)
r7 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r3, &(0x7f0000000180))
epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000140)={0x60000000})
r8 = socket$inet6(0xa, 0x3, 0x8000000003c)
setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x4a0, 0x148, 0xffffffff, 0xffffffff, 0x148, 0xffffffff, 0x3d0, 0xffffffff, 0xffffffff, 0x3d0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'ip6erspan0\x00', 'team_slave_0\x00'}, 0x0, 0x128, 0x148, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x4}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@remote, @private0={0xfc, 0x0, '\x00', 0x1}, [], [0xff, 0xffffffff], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x64, 0x0, 0x5, 0x0, 0x0, 0x7aa0, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x500)
epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r7, &(0x7f0000000080)={0x1008})

0s ago: executing program 3 (id=4226):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x98, r1, 0x200, 0x70bd28, 0x25dfdbfd, {}, [@TIPC_NLA_LINK={0x84, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}]}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x4}, 0x40000) (async)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) (async)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000140)={<r4=>0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e24, @private=0xa010101}]}, &(0x7f0000000180)=0x10)
setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f00000003c0)={r4, @in={{0x2, 0x4e24, @private=0xa010101}}}, 0x84) (async)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0x10, &(0x7f0000000880)=ANY=[@ANYBLOB="18000000000100000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b705000008000000850000006a00000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r5, 0x0, 0xe, 0x0, &(0x7f0000000740)="00800000000000000045a9000000", 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xf}, 0x50)

kernel console output (not intermixed with test programs):

 process `syz.2.2986'.
[  535.565033][   T13] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  535.579114][   T13] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  535.602944][ T8388] bridge0: port 3(team0) entered blocking state
[  535.610616][ T8388] bridge0: port 3(team0) entered forwarding state
[  535.653899][   T13] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  535.664650][   T13] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  535.857437][T17467] virt_wifi0 speed is unknown, defaulting to 1000
[  535.872794][T17054] Bluetooth: hci1: command tx timeout
[  536.114430][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  536.124224][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  536.133861][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  536.826288][T17557] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2994'.
[  537.031253][T17467] lo speed is unknown, defaulting to 1000
[  537.207676][T17561] netlink: 'syz.1.2995': attribute type 4 has an invalid length.
[  537.226281][T17563] 8021q: VLANs not supported on wg2
[  537.325823][T17576] netlink: 'syz.2.2998': attribute type 1 has an invalid length.
[  537.451736][T17576] 8021q: adding VLAN 0 to HW filter on device bond9
[  537.514311][T17578] bond9: (slave geneve6): making interface the new active one
[  537.533502][T17578] bond9: (slave geneve6): Enslaving as an active interface with an up link
[  537.557214][ T6878] lo speed is unknown, defaulting to 1000
[  537.586059][ T6878] syz2: Port: 1 Link DOWN
[  537.951560][T17054] Bluetooth: hci1: command tx timeout
[  538.591970][T17601] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3002'.
[  538.626532][T17615] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3006'.
[  538.652804][T17611] 8021q: adding VLAN 0 to HW filter on device bond10
[  538.747683][T17609] workqueue: Failed to create a rescuer kthread for wq "bond11": -EINTR
[  539.137831][T17630] netlink: 'syz.1.3010': attribute type 1 has an invalid length.
[  539.140742][T17467] bridge0: port 1(bridge_slave_0) entered blocking state
[  539.164240][T17467] bridge0: port 1(bridge_slave_0) entered disabled state
[  539.173258][T17467] bridge_slave_0: entered allmulticast mode
[  539.183007][T17467] bridge_slave_0: entered promiscuous mode
[  539.221486][T17467] bridge0: port 2(bridge_slave_1) entered blocking state
[  539.236629][T17467] bridge0: port 2(bridge_slave_1) entered disabled state
[  539.246596][T17467] bridge_slave_1: entered allmulticast mode
[  539.256181][T17467] bridge_slave_1: entered promiscuous mode
[  539.278118][T17640] sctp: [Deprecated]: syz.2.3009 (pid 17640) Use of struct sctp_assoc_value in delayed_ack socket option.
[  539.278118][T17640] Use struct sctp_sack_info instead
[  539.342667][T17630] workqueue: Failed to create a rescuer kthread for wq "bond10": -EINTR
[  539.345736][T17628] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  539.381795][T17641] syzkaller0: entered promiscuous mode
[  539.406823][   T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  539.416929][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  539.438857][T17641] syzkaller0: entered allmulticast mode
[  539.681755][T17632] tipc: Resetting bearer <eth:syzkaller0>
[  539.753238][T17632] tipc: Disabling bearer <eth:syzkaller0>
[  539.949425][T17467] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  539.968739][T17660] netlink: 14 bytes leftover after parsing attributes in process `syz.3.3016'.
[  539.989116][T17661] netlink: 14 bytes leftover after parsing attributes in process `syz.3.3016'.
[  540.017969][T17652] tipc: Resetting bearer <eth:syzkaller0>
[  540.033931][T17054] Bluetooth: hci1: command tx timeout
[  540.125452][T17467] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  540.161434][T17651] tipc: Resetting bearer <eth:syzkaller0>
[  540.282740][T17667] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  540.293720][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  540.323218][T17467] team0: Port device team_slave_0 added
[  540.339846][T17467] team0: Port device team_slave_1 added
[  540.494008][T17467] batman_adv: batadv0: Adding interface: batadv_slave_0
[  540.520130][T17467] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  540.565358][T17467] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  540.588163][T17467] batman_adv: batadv0: Adding interface: batadv_slave_1
[  540.625675][T17467] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  540.682417][T17467] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  540.756671][T17672] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3019'.
[  540.804621][T17672] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3019'.
[  540.841046][T17672] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3019'.
[  540.854754][T17467] hsr_slave_0: entered promiscuous mode
[  540.863431][T17467] hsr_slave_1: entered promiscuous mode
[  540.869475][T17672] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3019'.
[  540.879813][T17467] debugfs: 'hsr0' already exists in 'hsr'
[  540.901118][T17467] Cannot create hsr debugfs directory
[  541.173837][ T1062] tipc: Resetting bearer <eth:syzkaller0>
[  541.240398][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  541.249015][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  541.257509][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  541.265979][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  541.894559][T17467] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  542.113550][T17054] Bluetooth: hci1: command tx timeout
[  542.195662][T17467] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  542.312401][T17712] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3028'.
[  542.409323][T17467] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  542.495042][T17715] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3028'.
[  542.627352][T17467] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  543.554046][T17733] Set syz1 is full, maxelem 2 reached
[  543.584293][T17467] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  543.633311][T17467] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  543.664642][T17467] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  543.705303][T17467] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  543.732972][T17467] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  543.802437][T17467] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  543.848198][T17467] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  543.911632][T17467] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  543.937419][T17737] __nla_validate_parse: 1 callbacks suppressed
[  543.937440][T17737] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3035'.
[  543.982931][T17737] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3035'.
[  544.067987][T17735] netlink: 'syz.3.3036': attribute type 5 has an invalid length.
[  544.380635][T17467] 8021q: adding VLAN 0 to HW filter on device bond0
[  544.515956][T17467] 8021q: adding VLAN 0 to HW filter on device team0
[  544.596261][ T1062] bridge0: port 1(bridge_slave_0) entered blocking state
[  544.604609][ T1062] bridge0: port 1(bridge_slave_0) entered forwarding state
[  544.657385][T17762] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3039'.
[  544.713217][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[  544.721763][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[  544.741185][T17762] tipc: Started in network mode
[  544.763921][T17762] tipc: Node identity 5, cluster identity 4711
[  544.791164][T17762] tipc: Node number set to 5
[  544.808516][T17762] tipc: Cannot configure node identity twice
[  545.177600][T17771] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3042'.
[  545.253548][T17771] netlink: 180 bytes leftover after parsing attributes in process `syz.1.3042'.
[  545.641628][T17778] netlink: 'syz.1.3045': attribute type 21 has an invalid length.
[  545.665774][T17778] netlink: 'syz.1.3045': attribute type 22 has an invalid length.
[  545.687962][T17778] netlink: 'syz.1.3045': attribute type 23 has an invalid length.
[  545.718142][T17778] netlink: 136 bytes leftover after parsing attributes in process `syz.1.3045'.
[  545.831387][T17776] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  545.892566][T17791] d: renamed from syzkaller0
[  545.907339][T17790] IPVS: set_ctl: invalid protocol: 8 0.0.0.0:20002
[  545.968260][T17791] tipc: Disabling bearer <eth:syzkaller0>
[  546.350683][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  546.359264][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  546.367798][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  546.444152][   T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  546.468278][T17800] netlink: 'syz.1.3049': attribute type 1 has an invalid length.
[  546.578906][T17804] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3049'.
[  546.688058][T17807] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3050'.
[  546.784148][T17800] 8021q: adding VLAN 0 to HW filter on device bond10
[  547.005185][T17806] veth15: entered allmulticast mode
[  547.023954][T17803] netlink: 80 bytes leftover after parsing attributes in process `syz.0.3050'.
[  547.114198][T17806] bond10: (slave veth15): Enslaving as an active interface with an up link
[  547.332600][T17809] bond10 (unregistering): (slave veth15): Releasing backup interface
[  547.418977][T17809] bond10 (unregistering): Released all slaves
[  547.896740][T17467] 8021q: adding VLAN 0 to HW filter on device batadv0
[  548.379770][T17818] bridge0: port 2(vlan3) entered disabled state
[  548.803725][T17835] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3055'.
[  549.219897][T17823] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3052'.
[  549.238810][T17823] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3052'.
[  549.250015][T17823] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3052'.
[  549.276518][T17823] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3052'.
[  549.301269][T17824] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3052'.
[  549.312077][T17824] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3052'.
[  549.321641][T17824] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3052'.
[  549.332344][T17824] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3052'.
[  549.388587][T17835] veth9: entered promiscuous mode
[  549.412385][   T35] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  549.458748][   T35] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  549.576099][   T35] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  549.595035][ T1062] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  549.630842][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  549.639382][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  549.758942][T17846] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3059'.
[  549.788354][T17842] netlink: 76 bytes leftover after parsing attributes in process `syz.1.3057'.
[  551.364397][T17894] netlink: 'syz.3.3066': attribute type 178 has an invalid length.
[  551.376980][T17467] veth0_vlan: entered promiscuous mode
[  551.429830][T17467] veth1_vlan: entered promiscuous mode
[  551.485396][T17898] nbd1: detected capacity change from 0 to 3
[  551.507465][ T5650] block nbd1: Dead connection, failed to find a fallback
[  551.549935][ T5650] block nbd1: shutting down sockets
[  551.569406][ T5650] blk_print_req_error: 27 callbacks suppressed
[  551.569464][ T5650] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  551.617706][ T5650] buffer_io_error: 27 callbacks suppressed
[  551.617765][ T5650] Buffer I/O error on dev nbd1, logical block 0, async page read
[  551.653425][ T5650] Buffer I/O error on dev nbd1, logical block 1, async page read
[  551.684659][ T5650] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  551.709754][ T5650] Buffer I/O error on dev nbd1, logical block 0, async page read
[  551.743333][ T5650] Buffer I/O error on dev nbd1, logical block 1, async page read
[  551.778070][ T5650] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  551.834764][ T5650] Buffer I/O error on dev nbd1, logical block 0, async page read
[  551.836497][T17467] veth0_macvtap: entered promiscuous mode
[  551.866224][ T5650] Buffer I/O error on dev nbd1, logical block 1, async page read
[  551.901514][ T5650] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  551.937428][ T5650] Buffer I/O error on dev nbd1, logical block 0, async page read
[  551.963675][ T5650] Buffer I/O error on dev nbd1, logical block 1, async page read
[  551.996057][ T5650] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  552.023217][ T5650] Buffer I/O error on dev nbd1, logical block 0, async page read
[  552.029330][T17917] block nbd3: NBD_DISCONNECT
[  552.049337][ T5650] Buffer I/O error on dev nbd1, logical block 1, async page read
[  552.063207][T17467] veth1_macvtap: entered promiscuous mode
[  552.063791][T17917] block nbd3: Send disconnect failed -32
[  552.111822][T17917] block nbd3: Send disconnect failed -32
[  552.123095][ T5650] ldm_validate_partition_table(): Disk read failed.
[  552.129962][T17917] block nbd3: shutting down sockets
[  552.164467][T17467] batman_adv: batadv0: Interface activated: batadv_slave_0
[  552.174544][ T5650] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  552.192176][   T57] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  552.233369][ T5650] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  552.243585][T17467] batman_adv: batadv0: Interface activated: batadv_slave_1
[  552.285856][   T57] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  552.319153][ T5650] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  552.355869][   T57] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  552.361230][ T5650] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  552.430930][ T5650] Dev nbd1: unable to read RDB block 0
[  552.457077][ T5650] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  552.478313][T17930] x_tables: arp_tables: NFQUEUE target: not valid for this family
[  552.508162][ T5650]  nbd1: unable to read partition table
[  552.512708][T17928] x_tables: arp_tables: NFQUEUE target: not valid for this family
[  552.551486][ T5650] nbd1: partition table beyond EOD, truncated
[  552.559712][T17923] x_tables: duplicate underflow at hook 3
[  552.592038][   T57] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  552.607718][ T5650] ldm_validate_partition_table(): Disk read failed.
[  552.617107][ T5650] Dev nbd1: unable to read RDB block 0
[  552.627679][ T5650]  nbd1: unable to read partition table
[  552.639548][ T5650] nbd1: partition table beyond EOD, truncated
[  552.659865][   T57] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  552.840647][    C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  553.084369][ T5969] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  553.123107][ T5969] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  553.346134][T17923] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[  553.372459][T17923] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[  553.386904][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  553.395454][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  553.395783][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  553.396088][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  553.495437][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  554.455479][ T5636] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  554.475336][ T5636] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  554.485020][ T5636] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  554.497372][ T5636] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  554.506847][ T5636] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  555.182151][T17969] xt_policy: input policy not valid in POSTROUTING and OUTPUT
[  555.369584][T17973] bridge0: port 5(vlan0) entered blocking state
[  555.416166][T17973] bridge0: port 5(vlan0) entered disabled state
[  555.454043][T17973] vlan0: entered allmulticast mode
[  555.486340][T17973] vlan0: entered promiscuous mode
[  555.511097][T17978] __nla_validate_parse: 10 callbacks suppressed
[  555.511118][T17978] netlink: 128 bytes leftover after parsing attributes in process `syz.1.3089'.
[  555.551550][T17973] dummy0: entered promiscuous mode
[  556.130942][T17989] netlink: 'syz.1.3092': attribute type 39 has an invalid length.
[  556.265129][T17990] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3091'.
[  556.290886][T17990] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3091'.
[  556.432941][T17994] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3093'.
[  556.602620][T17054] Bluetooth: hci2: command tx timeout
[  556.925574][T18003] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3095'.
[  557.100917][T17959] virt_wifi0 speed is unknown, defaulting to 1000
[  557.240504][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  557.249127][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  557.257901][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  557.266497][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  557.772104][T18021] lo: entered allmulticast mode
[  557.803487][T18021] lo: left allmulticast mode
[  557.989807][T18024] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3102'.
[  558.009520][ T3367] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  558.671584][T17054] Bluetooth: hci2: command tx timeout
[  558.994940][T18024] bridge0: port 4(vlan2) entered disabled state
[  559.001716][T18024] bridge0: port 3(team0) entered disabled state
[  559.008772][T18024] bridge0: port 2(bridge_slave_1) entered disabled state
[  559.016313][T18024] bridge0: port 1(bridge_slave_0) entered disabled state
[  560.060513][T18024] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  560.109581][T18024] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  560.752514][T17054] Bluetooth: hci2: command tx timeout
[  560.948832][T18070] netlink: 9 bytes leftover after parsing attributes in process `syz.4.3110'.
[  560.995287][T18024] sit1: left promiscuous mode
[  561.026002][T18024] ip6tnl1: left allmulticast mode
[  561.036954][T18024] ip6erspan1: left allmulticast mode
[  561.076933][T18024] ip6tnl2: left allmulticast mode
[  561.098159][T18024] ip6tnl3: left allmulticast mode
[  561.192280][T18024] gretap0: left allmulticast mode
[  561.204460][T18024] macvlan3: left promiscuous mode
[  561.209548][T18024] macvlan3: left allmulticast mode
[  561.225338][T18024] bond8: left promiscuous mode
[  561.326525][T18024] veth15: left allmulticast mode
[  561.365687][ T1062] batadv2: left allmulticast mode
[  561.376300][ T1062] batadv2: left promiscuous mode
[  561.390303][ T1062] bridge0: port 3(batadv2) entered disabled state
[  561.441132][ T1062] vlan3: left allmulticast mode
[  561.446499][ T1062] ip6gretap0: left allmulticast mode
[  561.454625][ T1062] vlan3: left promiscuous mode
[  561.459796][ T1062] ip6gretap0: left promiscuous mode
[  561.467597][ T1062] bridge0: port 2(vlan3) entered disabled state
[  561.481039][ T1062] batadv1: left allmulticast mode
[  561.487469][ T1062] batadv1: left promiscuous mode
[  561.492952][ T1062] bridge0: port 1(batadv1) entered disabled state
[  561.519873][ T1062] pimreg: left allmulticast mode
[  561.975654][ T1062] team0: Port device geneve1 removed
[  562.095110][ T1062] bond1 (unregistering): Released all slaves
[  562.117159][ T1062] bond2 (unregistering): Released all slaves
[  562.151516][ T1062] bond3 (unregistering): Released all slaves
[  562.172369][ T1062] bond4 (unregistering): Released all slaves
[  562.194671][ T1062] bond5 (unregistering): Released all slaves
[  562.223689][ T1062] bond6 (unregistering): Released all slaves
[  562.246028][ T1062] bond7 (unregistering): Released all slaves
[  562.270561][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  562.279082][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  562.287573][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  562.311596][ T1062] bond8 (unregistering): Released all slaves
[  562.338096][ T1062] bond0 (unregistering): Released all slaves
[  562.364046][ T1062] bond9 (unregistering): Released all slaves
[  562.394911][T18056] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3107'.
[  562.404265][ T5296] 8021q: adding VLAN 0 to HW filter on device eth1
[  562.412071][T17959] lo speed is unknown, defaulting to 1000
[  562.507261][   T12] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  562.533087][   T12] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  562.572565][T18070] 0·: renamed from hsr0 (while UP)
[  562.594584][T18070] 0·: entered allmulticast mode
[  562.617068][T18070] hsr_slave_0: entered allmulticast mode
[  562.641334][T18070] hsr_slave_1: entered allmulticast mode
[  562.669463][T18070] A link change request failed with some changes committed already. Interface 
c0· may have been left with an inconsistent configuration, please check.
[  562.834464][T17054] Bluetooth: hci2: command tx timeout
[  562.848124][   T12] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  562.860771][   T12] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  562.878634][ T1062] m1Ie5nè‹Ò: left promiscuous mode
[  563.022725][T18082] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3113'.
[  563.089891][ T1319] ieee802154 phy0 wpan0: encryption failed: -22
[  563.156233][ T3367] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  563.261635][T18084] netlink: 'syz.4.3114': attribute type 16 has an invalid length.
[  563.275958][T18084] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3114'.
[  563.394610][   T12] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  563.428466][   T12] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  563.447279][   T12] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  563.485348][T18087] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3115'.
[  563.496957][   T12] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  563.534940][ T1062] tipc: Left network mode
[  563.624979][T18094] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3116'.
[  563.909147][ T1062] IPVS: stopping backup sync thread 8179 ...
[  564.589968][T18119] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3120'.
[  564.652891][T18124] netlink: 9 bytes leftover after parsing attributes in process `syz.2.3120'.
[  564.768329][T18124] gretap0: entered promiscuous mode
[  564.778224][T18127] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3122'.
[  564.861834][ T6894] IPVS: starting estimator thread 0...
[  564.919431][T18133] xt_hashlimit: size too large, truncated to 1048576
[  564.962119][T18131] IPVS: using max 30 ests per chain, 72000 per kthread
[  565.071398][T18134] netlink: 'syz.4.3124': attribute type 1 has an invalid length.
[  565.087684][T18134] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3124'.
[  565.227647][T18129] bridge0: port 1(bridge_slave_0) entered disabled state
[  565.334162][T18129] bridge_slave_0 (unregistering): left allmulticast mode
[  565.375351][T18129] bridge_slave_0 (unregistering): left promiscuous mode
[  565.402408][T18129] bridge0: port 1(bridge_slave_0) entered disabled state
[  565.551068][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  565.560168][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  565.712303][T18137] : entered promiscuous mode
[  565.737858][ T5296] 8021q: adding VLAN 0 to HW filter on device eth2
[  565.964307][T18153] �ÿ: renamed from bond_slave_0 (while UP)
[  566.014658][T18155] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3129'.
[  566.616699][T18172] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3134'.
[  566.657191][T18176] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3135'.
[  566.731314][T18176] macvlan2: entered promiscuous mode
[  566.752836][T18176] bond0: entered promiscuous mode
[  566.769051][T18176] �ÿ: entered promiscuous mode
[  566.786425][T18176] bond_slave_1: entered promiscuous mode
[  566.808945][T18176] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  567.507560][T18199] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3139'.
[  568.109161][T18216] netlink: 200 bytes leftover after parsing attributes in process `syz.2.3141'.
[  568.461812][T17959] bridge0: port 1(bridge_slave_0) entered blocking state
[  568.489832][T17959] bridge0: port 1(bridge_slave_0) entered disabled state
[  568.504675][T17959] bridge_slave_0: entered allmulticast mode
[  568.538818][T17959] bridge_slave_0: entered promiscuous mode
[  568.614674][ T5296] 8021q: adding VLAN 0 to HW filter on device eth3
[  568.681758][T17959] bridge0: port 2(bridge_slave_1) entered blocking state
[  568.704183][T17959] bridge0: port 2(bridge_slave_1) entered disabled state
[  568.728949][T17959] bridge_slave_1: entered allmulticast mode
[  568.807136][T17959] bridge_slave_1: entered promiscuous mode
[  568.841320][   T57] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  569.089351][T17959] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  569.132417][T17959] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  569.441980][T17959] team0: Port device team_slave_0 added
[  569.527129][T17959] team0: Port device team_slave_1 added
[  569.870437][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  569.879046][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  569.887599][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  570.174939][T17959] batman_adv: batadv0: Adding interface: batadv_slave_0
[  570.195920][T17959] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  570.255538][T17959] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  570.329819][T18264] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.3151'.
[  571.564730][T18301] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma?
[  571.729835][T18305] netlink: 'syz.4.3156': attribute type 1 has an invalid length.
[  572.069542][T18242] virt_wifi0 speed is unknown, defaulting to 1000
[  572.077773][T17959] batman_adv: batadv0: Adding interface: batadv_slave_1
[  572.086293][T17959] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  572.122961][T17959] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  572.205457][ T5296] 8021q: adding VLAN 0 to HW filter on device eth4
[  572.368072][   T24] virt_wifi0 speed is unknown, defaulting to 1000
[  572.535975][T17959] hsr_slave_0: entered promiscuous mode
[  572.574694][T17959] hsr_slave_1: entered promiscuous mode
[  572.602852][T17959] debugfs: 'hsr0' already exists in 'hsr'
[  572.625278][T17959] Cannot create hsr debugfs directory
[  573.230498][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  573.239083][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  573.247661][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  573.301958][T18322] lo: Caught tx_queue_len zero misconfig
[  573.309456][T18324] netlink: 288 bytes leftover after parsing attributes in process `syz.3.3160'.
[  573.434094][T18242] lo speed is unknown, defaulting to 1000
[  573.486811][ T5971] smc: removing ib device syz0
[  573.701901][T18334] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input10
[  573.710749][ T5971] smbdirect: ib_dev[syz0] removed
[  573.822380][T18303] lo speed is unknown, defaulting to 1000
[  574.602225][   T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  574.904709][T18348] pimreg: entered allmulticast mode
[  574.925909][T18348] pimreg: left allmulticast mode
[  575.308206][T18339] lo speed is unknown, defaulting to 1000
[  577.070733][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  577.079334][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  577.317740][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  577.375654][T17959] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  577.463829][T17959] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  577.486188][T17959] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  577.514638][T17959] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  577.558638][T17959] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  577.606107][T17959] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  577.629743][T17959] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  577.706821][T17959] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  577.999780][T17959] 8021q: adding VLAN 0 to HW filter on device bond0
[  578.075459][T17959] 8021q: adding VLAN 0 to HW filter on device team0
[  578.106891][   T57] bridge0: port 1(bridge_slave_0) entered blocking state
[  578.114218][   T57] bridge0: port 1(bridge_slave_0) entered forwarding state
[  578.161782][   T57] bridge0: port 2(bridge_slave_1) entered blocking state
[  578.169007][   T57] bridge0: port 2(bridge_slave_1) entered forwarding state
[  578.803396][ T1062] IPVS: stop unused estimator thread 0...
[  579.739643][   T29] audit: type=1800 audit(1780133242.350:17): pid=18420 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.3171" name=3A202E31323334352E2E2E2E2028313829207238203D2030783363333130303030300A202020202020323A202E31323334352E2E382E20283835292063616C6C2070632B360A202020202020333A202E2E2E2E2E2E2E2E382E2028313829207230203D203078313130303030303066666666666666660A202020202020353A202E2E2E2E2E2E2E2E382E202836362920696620773820733E2030783020676F746F2070632B300A202020202020363A202E2E2E2E2E2E2E2E2E2E20283138292072 dev="tmpfs" ino=360 res=0 errno=0
[  580.270520][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  580.279120][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  580.287726][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  580.366651][ T1062] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  580.599024][T18448] tun0: tun_chr_ioctl cmd 1074025673
[  580.714056][T17959] 8021q: adding VLAN 0 to HW filter on device batadv0
[  580.992627][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  581.018309][T17959] veth0_vlan: entered promiscuous mode
[  581.320032][T17959] veth1_vlan: entered promiscuous mode
[  581.361314][T18475] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3180'.
[  581.819957][T17959] veth0_macvtap: entered promiscuous mode
[  581.936782][T17959] veth1_macvtap: entered promiscuous mode
[  582.228949][T17959] batman_adv: batadv0: Interface activated: batadv_slave_0
[  582.317426][T17959] batman_adv: batadv0: Interface activated: batadv_slave_1
[  582.426781][   T57] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  582.473210][   T57] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  582.541930][   T57] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  582.572112][   T57] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  582.846774][T18500] 8021q: adding VLAN 0 to HW filter on device bond3
[  583.111319][   T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  583.160641][   T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  583.262774][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  583.282051][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  583.688636][T18517] netdevsim netdevsim0: Firmware load for './file0/file0/..' refused, path contains '..' component
[  584.327987][ T5977] nci: nci_extract_activation_params_iso_dep: unsupported activation_rf_tech_and_mode 0x80
[  584.430611][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  584.700767][T18553] netlink: 'syz.0.3191': attribute type 1 has an invalid length.
[  584.734967][ T5636] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  584.751102][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  584.759670][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  584.768216][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  584.785162][ T5636] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  584.794404][ T5636] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  584.827640][ T5636] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  584.844806][ T5636] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  585.196100][T18530] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  585.898414][T18581] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3199'.
[  585.924394][T18581] netlink: 'syz.0.3199': attribute type 5 has an invalid length.
[  585.948701][T18581] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3199'.
[  585.999060][T18581] geneve2: entered promiscuous mode
[  586.004502][T18581] geneve2: entered allmulticast mode
[  586.029402][   T57] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0
[  586.056830][   T57] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0
[  586.093785][ T6887] IPVS: starting estimator thread 0...
[  586.100884][T18581] IPVS: lc: FWM 3 0x00000003 - no destination available
[  586.109878][   T57] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0
[  586.113214][ T5965] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  586.132479][    C0] IPVS: lc: FWM 3 0x00000003 - no destination available
[  586.146935][   T57] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0
[  586.164791][T18579] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  586.210408][T18589] IPVS: using max 27 ests per chain, 64800 per kthread
[  586.899747][T18607] hmó3)ó: entered promiscuous mode
[  586.914162][T17054] Bluetooth: hci0: command tx timeout
[  586.925133][T18549] lo speed is unknown, defaulting to 1000
[  587.194613][T18617] sctp: [Deprecated]: syz.2.3205 (pid 18617) Use of int in maxseg socket option.
[  587.194613][T18617] Use struct sctp_assoc_value instead
[  587.386916][T18621] netlink: 516 bytes leftover after parsing attributes in process `syz.0.3207'.
[  587.582696][T18630] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3206'.
[  587.643046][T18632] netlink: 'syz.0.3210': attribute type 8 has an invalid length.
[  587.653253][T18634] nbd: must specify a size in bytes for the device
[  587.691338][T18635] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3209'.
[  587.714460][T18624] bridge0: port 2(bridge_slave_1) entered disabled state
[  587.722250][T18624] bridge0: port 1(bridge_slave_0) entered disabled state
[  587.864875][T18624] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  587.870783][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  587.882397][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  587.883029][T18624] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  587.950654][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  587.973570][   T29] audit: type=1804 audit(1780133250.580:18): pid=18641 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.3209" name="/newroot/628/memory.events" dev="tmpfs" ino=3250 res=1 errno=0
[  588.005695][   T29] audit: type=1800 audit(1780133250.580:19): pid=18641 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3209" name="memory.events" dev="tmpfs" ino=3250 res=0 errno=0
[  588.029872][   T29] audit: type=1804 audit(1780133250.580:20): pid=18641 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.3209" name="/newroot/628/memory.events" dev="tmpfs" ino=3250 res=1 errno=0
[  588.167380][T18624] bond0: left promiscuous mode
[  588.175003][T18624] �ÿ: left promiscuous mode
[  588.185427][T18624] bond_slave_1: left promiscuous mode
[  588.514490][ T8377] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  588.548332][ T8377] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  588.655990][ T8377] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  588.693816][ T8377] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  588.990650][T17054] Bluetooth: hci0: command tx timeout
[  589.235781][T18673] netlink: 'syz.3.3214': attribute type 10 has an invalid length.
[  589.325655][T18656] netlink: 'syz.3.3214': attribute type 10 has an invalid length.
[  591.070572][T17054] Bluetooth: hci0: command tx timeout
[  591.150957][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  591.160823][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  591.170554][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  591.231712][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  591.875351][   T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  593.103441][T18665] netlink: 748 bytes leftover after parsing attributes in process `syz.3.3214'.
[  593.150444][T17054] Bluetooth: hci0: command tx timeout
[  593.177046][T18673] team0: Port device dummy0 added
[  593.241669][T18656] team0: Port device dummy0 removed
[  593.258355][T18656] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  593.450344][T18690] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  594.497129][T18549] bridge0: port 1(bridge_slave_0) entered blocking state
[  594.524057][T18549] bridge0: port 1(bridge_slave_0) entered disabled state
[  594.544939][T18549] bridge_slave_0: entered allmulticast mode
[  594.553694][T18549] bridge_slave_0: entered promiscuous mode
[  594.583827][T18549] bridge0: port 2(bridge_slave_1) entered blocking state
[  594.602960][T18549] bridge0: port 2(bridge_slave_1) entered disabled state
[  594.619072][T18549] bridge_slave_1: entered allmulticast mode
[  594.651009][T18549] bridge_slave_1: entered promiscuous mode
[  594.958927][T18549] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  594.976642][T18727] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.3226'.
[  595.003161][T18549] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  595.201191][T18739] xt_hashlimit: size too large, truncated to 1048576
[  595.231906][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  595.614056][T18752] netlink: 'syz.2.3230': attribute type 1 has an invalid length.
[  595.630871][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  595.635443][T18549] team0: Port device team_slave_0 added
[  595.640471][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  595.655109][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  595.926092][T18762] RDS: rds_bind could not find a transport for fc01::, load rds_tcp or rds_rdma?
[  595.941263][T18752] 8021q: adding VLAN 0 to HW filter on device bond12
[  595.972922][T18549] team0: Port device team_slave_1 added
[  596.104426][T18753] macvlan2: entered promiscuous mode
[  596.125363][T18753] macvlan2: entered allmulticast mode
[  596.141799][T18753] bond12: entered allmulticast mode
[  596.158652][T18753] bond12: entered promiscuous mode
[  596.168186][T18753] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  596.177948][T18753] team0: Port device macvlan2 added
[  596.411180][T18549] batman_adv: batadv0: Adding interface: batadv_slave_0
[  596.440829][T18549] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  596.527208][T18549] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  596.592821][T18784] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3236'.
[  596.601684][T18549] batman_adv: batadv0: Adding interface: batadv_slave_1
[  596.621215][T18549] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  596.627570][T18785] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3236'.
[  596.720281][T18549] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  596.992099][ T3367] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  597.233593][T18801] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3239'.
[  597.275981][T18801] unsupported nlmsg_type 40
[  597.297918][T18801] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.3239'.
[  597.353807][T18549] hsr_slave_0: entered promiscuous mode
[  597.412948][T18549] hsr_slave_1: entered promiscuous mode
[  597.445109][T18549] debugfs: 'hsr0' already exists in 'hsr'
[  597.487204][T18549] Cannot create hsr debugfs directory
[  598.142321][T18818] veth0_to_bridge: entered promiscuous mode
[  598.154477][T18818] macvtap1: entered allmulticast mode
[  598.163513][T18818] veth0_to_bridge: entered allmulticast mode
[  598.184002][T18818] veth0_to_bridge: left allmulticast mode
[  598.191503][T18818] veth0_to_bridge: left promiscuous mode
[  598.216176][T18822] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  598.263252][T18825] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3247'.
[  598.319881][T18820] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3246'.
[  598.333166][T18825] netlink: 'syz.3.3247': attribute type 4 has an invalid length.
[  598.343511][T18825] netlink: 17 bytes leftover after parsing attributes in process `syz.3.3247'.
[  598.547546][T18825] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3247'.
[  598.911990][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  599.114207][T18848] netlink: 155064 bytes leftover after parsing attributes in process `syz.4.3253'.
[  599.426571][T18860] netlink: 212348 bytes leftover after parsing attributes in process `syz.4.3257'.
[  599.456560][T18857] x_tables: duplicate underflow at hook 1
[  599.470825][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  599.479412][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  599.487894][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  599.619586][T18862] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3258'.
[  599.833330][T18871] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3259'.
[  599.977926][T18877] tc_dump_action: action bad kind
[  600.041745][T18549] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  600.068200][T18549] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  600.102529][T18876] vlan6: entered promiscuous mode
[  600.115626][T18876] bridge0: entered promiscuous mode
[  600.134849][T18549] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  600.337686][T18549] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  600.364185][T18878] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3262'.
[  600.364915][T18549] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  600.452295][T18549] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  600.477244][T18549] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  600.519077][T18549] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  600.916311][T18549] 8021q: adding VLAN 0 to HW filter on device bond0
[  601.014148][T18549] 8021q: adding VLAN 0 to HW filter on device team0
[  601.047680][ T8377] bridge0: port 1(bridge_slave_0) entered blocking state
[  601.054957][ T8377] bridge0: port 1(bridge_slave_0) entered forwarding state
[  601.116727][ T8377] bridge0: port 2(bridge_slave_1) entered blocking state
[  601.124002][ T8377] bridge0: port 2(bridge_slave_1) entered forwarding state
[  601.581456][T18906] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3270'.
[  601.594151][T18902] atm:do_vcc_ioctl: ATM_SETSC is obsolete; used by syz.4.3269:18902
[  601.729029][T18904] lo speed is unknown, defaulting to 1000
[  601.735318][T18917] netlink: 'syz.3.3270': attribute type 1 has an invalid length.
[  602.510516][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  602.670547][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  602.679125][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  602.751727][ T5977] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  602.788390][T18944] veth0: entered promiscuous mode
[  603.505468][T18969] netlink: 'syz.0.3285': attribute type 1 has an invalid length.
[  603.595929][T18971] bond13 (unregistering): Released all slaves
[  603.816605][T18549] 8021q: adding VLAN 0 to HW filter on device batadv0
[  604.001362][T18983] __nla_validate_parse: 2 callbacks suppressed
[  604.001415][T18983] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3288'.
[  604.286510][T18549] veth0_vlan: entered promiscuous mode
[  604.379073][T18549] veth1_vlan: entered promiscuous mode
[  604.512795][T19000] netlink: 'syz.3.3291': attribute type 6 has an invalid length.
[  604.536529][T19000] netlink: 232 bytes leftover after parsing attributes in process `syz.3.3291'.
[  604.577234][T19001] netlink: 5252 bytes leftover after parsing attributes in process `syz.3.3291'.
[  604.599674][T18549] veth0_macvtap: entered promiscuous mode
[  604.645961][T18549] veth1_macvtap: entered promiscuous mode
[  604.739354][T18549] batman_adv: batadv0: Interface activated: batadv_slave_0
[  604.954401][T18549] batman_adv: batadv0: Interface activated: batadv_slave_1
[  605.026956][   T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  605.057244][   T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  605.247745][   T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  605.268398][T19011] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3295'.
[  605.306008][   T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  605.483632][T19008] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  605.710715][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  606.014212][ T3367] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  606.027569][T19009] syzkaller0: entered promiscuous mode
[  606.050780][ T3367] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  606.086313][T19009] syzkaller0: entered allmulticast mode
[  606.186326][T19007] tipc: Resetting bearer <eth:syzkaller0>
[  606.309701][T19007] tipc: Disabling bearer <eth:syzkaller0>
[  606.310935][T19042] netlink: 'syz.4.3302': attribute type 3 has an invalid length.
[  606.433006][T19046] netlink: 'syz.2.3303': attribute type 4 has an invalid length.
[  606.451236][T19046] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3303'.
[  606.510374][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  606.518954][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  606.527458][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  606.725627][ T5977] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  606.758376][ T5977] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  606.850834][T19057] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  607.109707][T19057] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  607.157922][T19065] syz_tun: entered allmulticast mode
[  607.174152][T19065] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3308'.
[  607.217015][T19057] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  607.501522][T19065] syz_tun (unregistering): left allmulticast mode
[  607.640904][T19057] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  608.072340][ T5977] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  608.228542][ T8377] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  608.392271][ T5965] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  608.504470][ T8377] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  608.520461][ T5977] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  608.532980][T19092] netlink: 196 bytes leftover after parsing attributes in process `syz.3.3317'.
[  608.666369][T19097] openvswitch: netlink: IP tunnel dst address not specified
[  609.712655][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  610.061747][ T5636] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  610.106495][ T5636] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  610.121701][ T5636] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  610.155600][ T5636] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  610.165930][ T5636] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  610.350894][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  610.360670][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  610.370499][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  610.578920][T19141] netlink: 'syz.3.3326': attribute type 1 has an invalid length.
[  610.639636][T19141] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3326'.
[  611.337714][T19164] netlink: 180 bytes leftover after parsing attributes in process `syz.0.3331'.
[  611.360143][T19164] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3331'.
[  611.551758][T19130] lo speed is unknown, defaulting to 1000
[  611.921142][T19175] netlink: 'syz.1.3334': attribute type 12 has an invalid length.
[  612.142651][T19186] tipc: Started in network mode
[  612.153199][T19186] tipc: Node identity aa673b540a9a, cluster identity 4711
[  612.164784][T19186] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  612.226852][T19185] tipc: Resetting bearer <eth:syzkaller0>
[  612.270303][T17054] Bluetooth: hci4: command tx timeout
[  612.306989][T19185] tipc: Disabling bearer <eth:syzkaller0>
[  612.786283][T19201] openvswitch: netlink: Tunnel attr 78 out of range max 16
[  612.898737][T19208] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3342'.
[  612.929200][T19130] bridge0: port 1(bridge_slave_0) entered blocking state
[  612.943723][T19130] bridge0: port 1(bridge_slave_0) entered disabled state
[  612.954069][T19130] bridge_slave_0: entered allmulticast mode
[  612.963732][T19130] bridge_slave_0: entered promiscuous mode
[  613.048738][T19130] bridge0: port 2(bridge_slave_1) entered blocking state
[  613.058279][T19130] bridge0: port 2(bridge_slave_1) entered disabled state
[  613.069024][T19130] bridge_slave_1: entered allmulticast mode
[  613.078787][T19130] bridge_slave_1: entered promiscuous mode
[  613.161982][T19130] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  613.178138][T19130] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  613.294414][T19130] team0: Port device team_slave_0 added
[  613.301329][T19216] netlink: 'syz.4.3343': attribute type 11 has an invalid length.
[  613.334998][T19130] team0: Port device team_slave_1 added
[  613.468822][T19130] batman_adv: batadv0: Adding interface: batadv_slave_0
[  613.480597][T19224] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3344'.
[  613.499682][T19130] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  613.550440][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  613.559059][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  613.567726][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  613.622420][T19130] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  613.716890][T19130] batman_adv: batadv0: Adding interface: batadv_slave_1
[  613.759681][T19130] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  613.865823][T19130] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  613.878404][T19235] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3346'.
[  613.905529][T19230] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3346'.
[  614.163204][T19130] hsr_slave_0: entered promiscuous mode
[  614.211065][T19130] hsr_slave_1: entered promiscuous mode
[  614.235710][T19130] debugfs: 'hsr0' already exists in 'hsr'
[  614.249401][T19130] Cannot create hsr debugfs directory
[  614.274603][ T1062] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  614.350411][T17054] Bluetooth: hci4: command tx timeout
[  614.397901][T19247] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3351'.
[  614.471143][T19249] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3348'.
[  614.626807][T19248] bridge0: port 3(syz_tun) entered blocking state
[  614.660912][T19256] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3352'.
[  614.662374][T19248] bridge0: port 3(syz_tun) entered disabled state
[  614.681667][T19248] syz_tun: entered allmulticast mode
[  614.691880][T19248] syz_tun: entered promiscuous mode
[  614.700320][T19256] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  615.063745][T19264] netlink: 'syz.1.3354': attribute type 9 has an invalid length.
[  615.976703][T19130] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  616.221698][T19130] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  616.356274][T19130] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  616.430224][T17054] Bluetooth: hci4: command tx timeout
[  616.620378][T19319] netlink: 'syz.0.3363': attribute type 4 has an invalid length.
[  616.628421][T19319] __nla_validate_parse: 1 callbacks suppressed
[  616.628437][T19319] netlink: 17 bytes leftover after parsing attributes in process `syz.0.3363'.
[  616.738202][T19312] openvswitch: netlink: IP tunnel attribute has 5 unknown bytes.
[  616.893973][T19130] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  616.990780][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  617.266993][T19327] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  617.379339][T19330] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3370'.
[  617.389474][T19330] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3370'.
[  617.422405][T19331] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3368'.
[  617.465494][T19331] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3368'.
[  617.553337][T19331] netlink: 58 bytes leftover after parsing attributes in process `syz.4.3368'.
[  617.679639][T19328] team0 (unregistering): Port device team_slave_0 removed
[  617.736279][T19328] team0 (unregistering): Port device team_slave_1 removed
[  617.844396][T19130] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  617.873656][T19130] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  617.908340][T19130] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  617.979798][T19130] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  618.016552][T19130] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  618.030896][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  618.040806][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  618.050668][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  618.097525][T19130] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  618.149425][T19341] sctp: [Deprecated]: syz.0.3374 (pid 19341) Use of int in max_burst socket option.
[  618.149425][T19341] Use struct sctp_assoc_value instead
[  618.158892][T19130] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  618.195599][T19130] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  618.213453][T19346] netlink: 'syz.4.3376': attribute type 1 has an invalid length.
[  618.223709][T19346] netlink: 'syz.4.3376': attribute type 2 has an invalid length.
[  618.277456][T19341] macvtap1: entered promiscuous mode
[  618.284925][T19341] bridge0: entered promiscuous mode
[  618.292844][T19341] bridge0: port 3(macvtap1) entered blocking state
[  618.301674][T19341] bridge0: port 3(macvtap1) entered disabled state
[  618.313373][T19341] macvtap1: entered allmulticast mode
[  618.319676][T19341] bridge0: entered allmulticast mode
[  618.336562][T19341] macvtap1: left allmulticast mode
[  618.341806][T19341] bridge0: left allmulticast mode
[  618.456303][ T5746] bridge0: left promiscuous mode
[  618.511996][T17054] Bluetooth: hci4: command tx timeout
[  618.862670][T19130] 8021q: adding VLAN 0 to HW filter on device bond0
[  618.873628][T19367] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3380'.
[  618.976943][T19130] 8021q: adding VLAN 0 to HW filter on device team0
[  619.060890][ T1062] bridge0: port 1(bridge_slave_0) entered blocking state
[  619.069207][ T1062] bridge0: port 1(bridge_slave_0) entered forwarding state
[  619.195086][ T1062] bridge0: port 2(bridge_slave_1) entered blocking state
[  619.203448][ T1062] bridge0: port 2(bridge_slave_1) entered forwarding state
[  619.259138][T19379] netlink: 'syz.0.3382': attribute type 3 has an invalid length.
[  619.273109][T19380] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3381'.
[  619.314824][T19377] netlink: 'syz.3.3383': attribute type 1 has an invalid length.
[  619.357588][T19375] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3381'.
[  619.618397][T19388] netlink: 'syz.1.3385': attribute type 13 has an invalid length.
[  619.666240][T19388] netlink: 'syz.1.3385': attribute type 17 has an invalid length.
[  619.698067][T19391] netlink: 'syz.3.3386': attribute type 2 has an invalid length.
[  619.706861][T19391] netlink: 'syz.3.3386': attribute type 8 has an invalid length.
[  619.715461][T19391] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3386'.
[  619.784953][T19395] netlink: 'syz.3.3386': attribute type 2 has an invalid length.
[  619.798949][T19385] bridge0: port 2(bridge_slave_1) entered disabled state
[  619.806862][T19385] bridge0: port 1(bridge_slave_0) entered disabled state
[  619.946933][T19385] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  619.966980][T19385] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  620.035261][ T1062] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  620.190600][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  620.550633][T19388] 8021q: adding VLAN 0 to HW filter on device bond0
[  620.561891][T19388] 8021q: adding VLAN 0 to HW filter on device team0
[  620.592576][T19388] 8021q: adding VLAN 0 to HW filter on device batadv0
[  620.644499][T19388] bridge0: port 1(bridge_slave_0) entered blocking state
[  620.651773][T19388] bridge0: port 1(bridge_slave_0) entered forwarding state
[  620.666369][T19388] bridge0: port 2(bridge_slave_1) entered blocking state
[  620.673651][T19388] bridge0: port 2(bridge_slave_1) entered forwarding state
[  620.711332][T19388] batman_adv: batadv0: Interface activated: batadv_slave_0
[  620.722780][T19388] batman_adv: batadv0: Interface activated: batadv_slave_1
[  620.763257][T19388] veth1_vlan: left promiscuous mode
[  620.770556][T19388] veth0_vlan: left promiscuous mode
[  620.778060][T19388] veth0_vlan: entered promiscuous mode
[  620.791458][T19388] veth1_vlan: entered promiscuous mode
[  620.808315][T19388] veth1_macvtap: left promiscuous mode
[  620.816536][T19388] veth0_macvtap: left promiscuous mode
[  620.827347][T19388] veth0_macvtap: entered promiscuous mode
[  620.843382][T19388] veth1_macvtap: entered promiscuous mode
[  620.859000][T19388] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  620.874536][T19388] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  620.887914][T19388] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  620.901124][T19388] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  621.354203][T19416] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  621.658253][T19424] __nla_validate_parse: 6 callbacks suppressed
[  621.658275][T19424] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3393'.
[  621.870939][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  621.880844][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  621.890630][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  621.900467][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  622.038909][T19439] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3395'.
[  622.764510][T19455] syzkaller1: entered promiscuous mode
[  622.787794][T19455] syzkaller1: entered allmulticast mode
[  623.538323][T19130] 8021q: adding VLAN 0 to HW filter on device batadv0
[  623.779672][T19486] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3406'.
[  623.814033][T19487] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3406'.
[  623.870988][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  623.965676][T19130] veth0_vlan: entered promiscuous mode
[  624.051731][T19130] veth1_vlan: entered promiscuous mode
[  624.292998][T19130] veth0_macvtap: entered promiscuous mode
[  624.339289][T19130] veth1_macvtap: entered promiscuous mode
[  624.418200][T19130] batman_adv: batadv0: Interface activated: batadv_slave_0
[  624.452890][T19130] batman_adv: batadv0: Interface activated: batadv_slave_1
[  624.518374][ T1319] ieee802154 phy0 wpan0: encryption failed: -22
[  624.519314][ T5965] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  624.596331][ T5965] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  624.646854][ T5965] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  624.715680][ T5965] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  624.783008][T19515] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  624.961822][T19515] v: renamed from ip6tnl0 (while UP)
[  625.088618][T19521] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3414'.
[  625.135161][ T8377] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  625.151897][ T5965] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  625.189396][ T8377] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  625.281482][ T5965] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  625.316766][ T5965] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  625.428626][T19528] xfrm1: entered allmulticast mode
[  625.628850][T19536] validate_nla: 4 callbacks suppressed
[  625.628869][T19536] netlink: 'syz.2.3319': attribute type 1 has an invalid length.
[  626.068495][T19547] syzkaller0: entered promiscuous mode
[  626.094410][T19547] syzkaller0: entered allmulticast mode
[  626.233329][T19559] openvswitch: netlink: Duplicate key (type 21).
[  626.707925][T19567] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3428'.
[  626.960999][T19576] syzkaller0: entered promiscuous mode
[  626.977231][T19576] syzkaller0: entered allmulticast mode
[  627.070480][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  627.166249][T19561] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3425'.
[  627.219385][T19581] IPv6: NLM_F_REPLACE set, but no existing node found!
[  627.228565][T19581] IPv6: NLM_F_REPLACE set, but no existing node found!
[  627.251794][T19581] IPv6: NLM_F_REPLACE set, but no existing node found!
[  627.263097][T19582] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3432'.
[  627.294980][T19581] IPv6: NLM_F_REPLACE set, but no existing node found!
[  627.346763][T19582] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3432'.
[  627.630549][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  627.639136][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  627.647678][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  627.656186][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  627.767974][T19589] netlink: 37 bytes leftover after parsing attributes in process `syz.3.3434'.
[  627.800813][T19589] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  627.872242][ T5977] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  627.914160][ T5965] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  627.954957][ T5977] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  627.998511][ T5977] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  628.218140][T19596] bridge0: port 2(bridge_slave_1) entered disabled state
[  628.225600][T19596] bridge0: port 1(bridge_slave_0) entered disabled state
[  628.386352][T19609] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3439'.
[  628.407718][T19596] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  628.421808][T19596] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  628.437547][T19610] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3439'.
[  628.641306][T19596] xfrm1: left allmulticast mode
[  628.818664][ T8377] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  628.849320][ T8377] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  628.879258][ T8377] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  628.917378][T19620] netlink: 180 bytes leftover after parsing attributes in process `syz.0.3444'.
[  628.932203][ T8377] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  628.993532][T19620] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3444'.
[  629.115973][T19627] pim6reg: entered allmulticast mode
[  629.176660][T19582] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3432'.
[  629.222404][T19626] lo speed is unknown, defaulting to 1000
[  629.523537][T19640] ip6tnl1: entered allmulticast mode
[  629.568258][ T5965] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  630.328038][T19663] x_tables: ip6_tables: SNAT target: used from hooks OUTPUT, but only usable from INPUT/POSTROUTING
[  630.830660][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  630.911829][ T5977] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  631.425688][T19704] netdevsim netdevsim1: Direct firmware load for . failed with error -2
[  631.476173][T19704] netdevsim netdevsim1: Falling back to sysfs fallback for: .
[  632.105406][T19723] __nla_validate_parse: 5 callbacks suppressed
[  632.105425][T19723] netlink: 68 bytes leftover after parsing attributes in process `syz.4.3468'.
[  632.142787][T19725] ieee802154 phy0 wpan0: encryption failed: -22
[  632.415903][T19731] netlink: 104 bytes leftover after parsing attributes in process `syz.3.3472'.
[  632.556544][T19730] bond6 (unregistering): Released all slaves
[  633.390387][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  633.398994][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  633.407531][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  633.416025][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  633.424697][    C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  633.526927][T19754] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  633.955565][T19767] macvtap1: entered promiscuous mode
[  634.016192][T19767] macvtap1: entered allmulticast mode
[  634.084683][T19767] veth1_vlan: entered allmulticast mode
[  634.186113][T19769] macvtap2: entered promiscuous mode
[  634.208113][T19769] macvtap2: entered allmulticast mode
[  634.434360][   T29] audit: type=1800 audit(1780133297.040:21): pid=19787 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.3482" name=3A202E31323334352E2E2E2E2028313829207238203D2030783363333130303030300A202020202020323A202E31323334352E2E382E20283835292063616C6C2070632B360A202020202020333A202E2E2E2E2E2E2E2E382E2028313829207230203D203078313130303030303066666666666666660A202020202020353A202E2E2E2E2E2E2E2E382E202836362920696620773820733E2030783020676F746F2070632B300A202020202020363A202E2E2E2E2E2E2E2E2E2E20283138292072 dev="tmpfs" ino=382 res=0 errno=0
[  634.590346][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  634.658502][T19797] netlink: 5 bytes leftover after parsing attributes in process `syz.4.3484'.
[  634.837755][T19754] syzkaller0: entered promiscuous mode
[  634.844741][T19754] syzkaller0: entered allmulticast mode
[  636.053443][ T5965] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  636.856326][T17054] Bluetooth: hci5: command 0x0406 tx timeout
[  638.599909][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  638.807144][T19797] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  638.934460][T19813] netlink: 'syz.2.3486': attribute type 1 has an invalid length.
[  639.125917][T19821] netlink: 'syz.1.3487': attribute type 3 has an invalid length.
[  639.131441][ T5768] bridge0: entered promiscuous mode
[  639.144373][T19822] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3488'.
[  639.150672][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  639.163683][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  639.172718][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  639.182960][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  639.499108][T19834] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3491'.
[  639.916007][T19853] IPVS: set_ctl: invalid protocol: 47 127.0.0.1:20001
[  640.409951][T19868] Bluetooth: MGMT ver 1.23
[  641.150243][    C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  641.793294][ T3367] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  641.817799][T19906] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  642.495992][T19929] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3515'.
[  642.590463][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  642.674557][T19937] ieee802154 phy0 wpan0: encryption failed: -22
[  643.415056][T19950] netlink: 'syz.0.3522': attribute type 1 has an invalid length.
[  643.662917][T19950] bond1: entered promiscuous mode
[  643.680564][T19950] bond1: entered allmulticast mode
[  643.681114][ T5768] IPVS: starting estimator thread 0...
[  643.688386][T19950] 8021q: adding VLAN 0 to HW filter on device bond1
[  643.845023][T19962] IPVS: using max 28 ests per chain, 67200 per kthread
[  644.190446][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  644.199014][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  644.207520][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  644.792748][T19983] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3532'.
[  644.985869][T19983] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3532'.
[  645.097915][T19996] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3534'.
[  645.790339][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  645.917978][T20020] pim6reg: entered allmulticast mode
[  646.819948][T20046] netlink: 'syz.1.3551': attribute type 1 has an invalid length.
[  647.024596][T20046] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3551'.
[  647.184737][T20052] netlink: 'syz.0.3552': attribute type 1 has an invalid length.
[  647.470630][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  647.479247][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  647.567482][   T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  647.580863][T20055] bridge0: port 2(bridge_slave_1) entered disabled state
[  647.588742][T20055] bridge0: port 1(bridge_slave_0) entered disabled state
[  647.986060][T20055] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  648.007484][T20055] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  648.135267][T20078] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  648.217087][T20055] geneve2: left promiscuous mode
[  648.222650][T20055] geneve2: left allmulticast mode
[  648.239104][T20055] bond1: left promiscuous mode
[  648.246456][T20055] bond1: left allmulticast mode
[  648.282687][T20046] bond1: (slave bridge1): making interface the new active one
[  648.294900][T20046] bond1: (slave bridge1): Enslaving as an active interface with an up link
[  648.307130][T20052] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR
[  648.325551][T20063] gretap1: entered allmulticast mode
[  648.383268][   T12] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  648.400456][   T12] netdevsim netdevsim0 netdevsim0: unset [1, 1] type 2 family 0 port 256 - 0
[  648.409923][   T12] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  648.453638][   T12] netdevsim netdevsim0 netdevsim1: unset [1, 1] type 2 family 0 port 256 - 0
[  648.486518][   T12] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  648.523422][   T12] netdevsim netdevsim0 netdevsim2: unset [1, 1] type 2 family 0 port 256 - 0
[  648.551102][ T5977] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  648.575343][ T5977] netdevsim netdevsim0 netdevsim3: unset [1, 1] type 2 family 0 port 256 - 0
[  648.746255][T20085] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3560'.
[  648.808971][T20085] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3560'.
[  648.856117][T20090] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3563'.
[  649.310399][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  649.443026][T20106] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3565'.
[  650.060853][T20125] netlink: 260 bytes leftover after parsing attributes in process `syz.0.3574'.
[  650.328116][T20129] syzkaller1: entered promiscuous mode
[  650.340650][T20129] syzkaller1: entered allmulticast mode
[  650.579767][T20137] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3577'.
[  651.099732][T20154] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3582'.
[  651.103884][T20147] syzkaller0: entered promiscuous mode
[  651.145376][T20147] syzkaller0: entered allmulticast mode
[  652.590327][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  652.599012][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  652.607507][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  652.750641][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  653.312946][ T1176] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  653.705544][T20221] netlink: 220 bytes leftover after parsing attributes in process `syz.3.3597'.
[  653.889445][T20226] netlink: 'syz.0.3599': attribute type 1 has an invalid length.
[  653.906869][T20227] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  654.098805][T20226] bond2: entered promiscuous mode
[  654.106056][T20226] 8021q: adding VLAN 0 to HW filter on device bond2
[  654.145355][ T6893] IPVS: starting estimator thread 0...
[  654.229070][T20246] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3604'.
[  654.258273][T20242] IPVS: using max 26 ests per chain, 62400 per kthread
[  654.304976][T20249] openvswitch: netlink: Invalid VLAN frame
[  654.378208][T20236] 8021q: adding VLAN 0 to HW filter on device bond3
[  654.421253][T20236] bond2: (slave bond3): making interface the new active one
[  654.449028][T20236] bond3: entered promiscuous mode
[  654.468608][T20236] bond2: (slave bond3): Enslaving as an active interface with an up link
[  655.216283][T20276] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3610'.
[  655.966397][T20305] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  656.110408][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  656.865626][T20325] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  656.889249][T20327] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3626'.
[  656.976288][T20327] bond2: entered allmulticast mode
[  657.032025][T20332] erspan1: entered allmulticast mode
[  657.085816][T20332] bond2: (slave erspan1): Enslaving as an active interface with an up link
[  657.150203][    C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  657.317383][ T5636] Bluetooth: hci1: command 0x0406 tx timeout
[  657.682771][T20358] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3631'.
[  657.945293][T20351] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3629'.
[  658.172219][T20373] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3634'.
[  658.286371][T20380] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3634'.
[  658.350311][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  658.358928][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  658.367501][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  658.376014][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  658.702241][T20391] netlink: 'syz.4.3641': attribute type 1 has an invalid length.
[  658.720463][T20391] netlink: 'syz.4.3641': attribute type 2 has an invalid length.
[  658.739887][T20392] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3641'.
[  659.263801][T20410] netlink: 292 bytes leftover after parsing attributes in process `syz.2.3646'.
[  659.448741][T20414] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3647'.
[  659.473694][T20414] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3647'.
[  659.552613][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  660.277609][T20454] __nla_validate_parse: 2 callbacks suppressed
[  660.277654][T20454] netlink: 228 bytes leftover after parsing attributes in process `syz.2.3655'.
[  660.504677][T20464] netlink: 53 bytes leftover after parsing attributes in process `syz.3.3659'.
[  660.523460][T20464] netlink: 'syz.3.3659': attribute type 3 has an invalid length.
[  660.573940][   T29] audit: type=1800 audit(1780133323.190:22): pid=20467 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3660" name="memory.events" dev="tmpfs" ino=271 res=0 errno=0
[  660.695053][T20469] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3661'.
[  660.724320][T20472] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3662'.
[  660.754187][T20472] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3662'.
[  660.904602][T20472] 8021q: adding VLAN 0 to HW filter on device bond6
[  660.931305][T20479] netlink: 'syz.1.3665': attribute type 2 has an invalid length.
[  660.940703][T20479] netlink: 'syz.1.3665': attribute type 9 has an invalid length.
[  660.949884][T20479] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.3665'.
[  660.985453][T20474] 8021q: adding VLAN 0 to HW filter on device macvlan3
[  661.543472][T20504] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3670'.
[  661.581601][T20504] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3670'.
[  662.165978][T20513] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3673'.
[  662.197827][T20523] netlink: 'syz.1.3676': attribute type 1 has an invalid length.
[  662.277422][T20530] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3676'.
[  662.427697][T20523] 8021q: adding VLAN 0 to HW filter on device bond3
[  662.818274][T20525] bridge0: port 2(bridge_slave_1) entered disabled state
[  663.132769][T20553] netlink: 'syz.1.3679': attribute type 10 has an invalid length.
[  663.390406][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  663.399023][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  663.408355][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  663.424819][T20525] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  663.442524][T20525] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  663.630719][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  663.753435][T20525] veth1_vlan: left allmulticast mode
[  663.879848][T20546] 5Ò: entered promiscuous mode
[  663.888838][T20548] bridge_slave_0: left allmulticast mode
[  663.895810][T20548] bridge_slave_0: left promiscuous mode
[  663.902176][T20548] bridge0: port 1(bridge_slave_0) entered disabled state
[  663.929136][T20548] bridge_slave_1: left allmulticast mode
[  663.937041][T20548] bridge_slave_1: left promiscuous mode
[  663.953810][T20548] bridge0: port 2(bridge_slave_1) entered disabled state
[  663.973703][T20548] bond0: (slave bond_slave_0): Releasing backup interface
[  663.984563][T20548] bond0: (slave bond_slave_1): Releasing backup interface
[  663.998712][T20548] team0: Port device team_slave_0 removed
[  664.009877][T20548] team0: Port device team_slave_1 removed
[  664.017917][T20548] batman_adv: batadv0: Removing interface: batadv_slave_0
[  664.027277][T20548] batman_adv: batadv0: Removing interface: batadv_slave_1
[  664.036919][T20548] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  664.151121][   T12] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  664.161502][   T12] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  664.286520][   T12] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  664.384826][   T12] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  664.407716][T20564] netlink: 'syz.1.3681': attribute type 1 has an invalid length.
[  664.433657][T20564] netlink: 'syz.1.3681': attribute type 1 has an invalid length.
[  664.682768][T20571] netlink: 'syz.1.3683': attribute type 12 has an invalid length.
[  664.715206][T20571] netlink: 'syz.1.3683': attribute type 11 has an invalid length.
[  665.373807][T20596] __nla_validate_parse: 7 callbacks suppressed
[  665.373853][T20596] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3690'.
[  665.471037][    C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  665.729622][T20614] netlink: 'syz.4.3696': attribute type 13 has an invalid length.
[  665.843513][T20615] netlink: 'syz.2.3694': attribute type 14 has an invalid length.
[  665.862603][T20615] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  665.869930][T20615] IPv6: NLM_F_CREATE should be set when creating new route
[  665.877410][T20615] IPv6: NLM_F_CREATE should be set when creating new route
[  665.884698][T20615] IPv6: NLM_F_CREATE should be set when creating new route
[  666.381501][T20638] netlink: 'syz.4.3703': attribute type 33 has an invalid length.
[  666.401712][T20638] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3703'.
[  666.467327][T20638] tipc: Started in network mode
[  666.494160][T20638] tipc: Node identity 4a33bafb774d, cluster identity 4711
[  666.512589][T20638] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  666.523406][  T995] IPVS: starting estimator thread 0...
[  666.559664][T20640] syzkaller0: entered promiscuous mode
[  666.574255][T20640] syzkaller0: entered allmulticast mode
[  666.634712][T20638] tipc: Resetting bearer <eth:syzkaller0>
[  666.644783][T20642] IPVS: using max 33 ests per chain, 79200 per kthread
[  666.670418][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  666.679019][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  666.687612][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  666.820530][T20651] tipc: Resetting bearer <eth:syzkaller0>
[  666.830651][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  666.884762][T20651] tipc: Disabling bearer <eth:syzkaller0>
[  667.187726][T20665] IPv6: sit1: Disabled Multicast RS
[  667.314873][T20670] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3710'.
[  667.344953][T20670] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3710'.
[  667.710917][T17054] Bluetooth: hci4: command 0x0405 tx timeout
[  668.419643][T20715] netlink: 'syz.1.3723': attribute type 11 has an invalid length.
[  668.450202][T20715] netlink: 190972 bytes leftover after parsing attributes in process `syz.1.3723'.
[  668.668716][T20722] netlink: 41 bytes leftover after parsing attributes in process `syz.4.3725'.
[  668.695297][T20722] netlink: 140 bytes leftover after parsing attributes in process `syz.4.3725'.
[  668.728784][T20722] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3725'.
[  668.758074][T20726] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3726'.
[  668.947165][T20731] netlink: 'syz.2.3728': attribute type 1 has an invalid length.
[  669.066371][T20733] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  669.358125][T20741] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3731'.
[  670.350443][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  671.070367][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  671.078945][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  671.426896][T20824] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3749'.
[  671.445764][T20824] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3749'.
[  671.462416][T20824] netlink: 'syz.4.3749': attribute type 7 has an invalid length.
[  671.483064][T20824] netlink: 'syz.4.3749': attribute type 8 has an invalid length.
[  671.492186][T20824] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3749'.
[  671.826642][T20838] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3753'.
[  672.020122][T20831] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3752'.
[  672.105075][T20841] tunl0: Caught tx_queue_len zero misconfig
[  672.177040][T20831] ipvlan2: entered promiscuous mode
[  672.511707][ T3367] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  672.523371][T20853] syzkaller1: entered promiscuous mode
[  672.557235][T20853] syzkaller1: entered allmulticast mode
[  673.512758][T20880] netlink: 207952 bytes leftover after parsing attributes in process `syz.4.3762'.
[  673.538732][T20883] netlink: 'syz.2.3763': attribute type 12 has an invalid length.
[  674.110673][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  674.239702][T20895] Bluetooth: MGMT ver 1.23
[  674.338046][T20899] Cannot find del_set index 0 as target
[  674.350366][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  674.358949][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  674.367491][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  674.461140][T20903] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma?
[  674.619804][T20900] lo speed is unknown, defaulting to 1000
[  675.008766][T20915] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3773'.
[  675.221987][T20928] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3773'.
[  675.326552][T20922] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3774'.
[  675.692092][T20937] netlink: 'syz.3.3777': attribute type 1 has an invalid length.
[  675.804393][T20937] bond7: entered promiscuous mode
[  675.811115][T20937] 8021q: adding VLAN 0 to HW filter on device bond7
[  675.860471][T20937] x_tables: duplicate underflow at hook 3
[  675.905575][T20945] 8021q: adding VLAN 0 to HW filter on device bond7
[  675.913575][T20945] bond7: (slave ipip0): The slave device specified does not support setting the MAC address
[  675.925086][T20945] bond7: (slave ipip0): Setting fail_over_mac to active for active-backup mode
[  675.942481][T20945] bond7: (slave ipip0): making interface the new active one
[  675.950494][T20952] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3781'.
[  675.970810][T20945] ipip0: entered promiscuous mode
[  675.981217][T20945] bond7: (slave ipip0): Enslaving as an active interface with an up link
[  676.453289][T20959] lo speed is unknown, defaulting to 1000
[  676.569292][T20965] lo speed is unknown, defaulting to 1000
[  677.256520][T20987] syzkaller0: entered promiscuous mode
[  677.262350][T20987] syzkaller0: entered allmulticast mode
[  677.480184][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  677.488746][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  677.646236][ T3367] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  677.717963][T20999] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  678.277668][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  680.757981][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  680.766530][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  680.775038][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  681.854854][T21029] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3798'.
[  681.869889][T21031] netlink: 'syz.4.3799': attribute type 25 has an invalid length.
[  681.891638][T21029] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3798'.
[  681.906802][T21031] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3799'.
[  681.921052][T21029] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3798'.
[  681.938845][T21029] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3798'.
[  681.950213][T21029] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3798'.
[  681.966269][T21029] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3798'.
[  681.978528][T21029] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3798'.
[  682.003036][T21029] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3798'.
[  682.021851][T21029] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3798'.
[  682.054176][T21030] bond0: Error: Cannot enslave bond to itself.
[  682.126350][ T1062] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  682.136691][T21031] netlink: 'syz.4.3799': attribute type 25 has an invalid length.
[  682.186086][ T1062] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  682.196543][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  682.248120][ T1062] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  682.295789][ T1062] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  682.676559][T21059] syzkaller1: entered promiscuous mode
[  682.702216][T21059] syzkaller1: entered allmulticast mode
[  682.756864][T21059] openvswitch: netlink: Unexpected mask (mask=200240, allowed=10048)
[  682.998097][T21065] netlink: 'syz.0.3809': attribute type 3 has an invalid length.
[  683.120634][T21067] x_tables: duplicate underflow at hook 2
[  683.402356][ T1131] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  683.609147][T21079] batadv0: entered promiscuous mode
[  683.620266][T21079] macsec1: entered promiscuous mode
[  683.629749][T21090] netlink: 'syz.4.3815': attribute type 21 has an invalid length.
[  683.631706][T21079] macsec1: entered allmulticast mode
[  683.647088][T21079] batadv0: entered allmulticast mode
[  683.664360][T21079] 8021q: adding VLAN 0 to HW filter on device macsec1
[  683.692396][T21090] IPv6: NLM_F_CREATE should be specified when creating new route
[  683.703620][T21079] batadv0: left allmulticast mode
[  683.721526][T21079] batadv0: left promiscuous mode
[  684.598853][T21100] lo speed is unknown, defaulting to 1000
[  685.230366][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  685.238985][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  685.247640][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  685.710456][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  685.949914][T21159] syzkaller0: entered promiscuous mode
[  685.977038][T21159] syzkaller0: entered allmulticast mode
[  686.066209][T21162] geneve2: entered promiscuous mode
[  686.398019][ T1131] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  686.433944][T18760] udevd[18760]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory
[  686.445889][ T1131] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  686.608583][ T1131] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  686.720676][ T1131] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  686.775147][T21179] lo speed is unknown, defaulting to 1000
[  687.457472][T21194] __nla_validate_parse: 167 callbacks suppressed
[  687.457532][T21194] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3837'.
[  687.578642][T21197] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3837'.
[  687.605465][T21187] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3836'.
[  687.636208][T21187] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3836'.
[  688.228077][T21219] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3843'.
[  688.253939][T21223] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3843'.
[  688.430835][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  688.440563][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  688.552291][T21244] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3849'.
[  688.645252][T21246] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3850'.
[  688.746247][T21246] gretap1: entered allmulticast mode
[  688.776776][T21257] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3851'.
[  689.109303][T21254] lo speed is unknown, defaulting to 1000
[  689.151663][ T1131] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  689.227669][T21273] netlink: 'syz.2.3855': attribute type 61 has an invalid length.
[  689.253972][T21273] netlink: 'syz.2.3855': attribute type 251 has an invalid length.
[  689.536427][T21284] netlink: 'syz.4.3860': attribute type 1 has an invalid length.
[  689.550317][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  689.575425][T21285] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3859'.
[  689.954353][T21297] netlink: 'syz.0.3863': attribute type 4 has an invalid length.
[  690.103719][T21306] netlink: 'syz.4.3864': attribute type 1 has an invalid length.
[  691.231824][T21342] netlink: 'syz.1.3871': attribute type 12 has an invalid length.
[  691.284590][T21345] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  691.572357][T21348] macsec2: entered promiscuous mode
[  691.609867][T21342] macsec0: entered promiscuous mode
[  691.738350][T21342] macsec0 (unregistering): left promiscuous mode
[  691.818896][T21359] netlink: 'syz.4.3876': attribute type 1 has an invalid length.
[  691.859025][T21359] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  692.270741][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  692.280935][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  692.290712][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  693.052995][T21397] __nla_validate_parse: 6 callbacks suppressed
[  693.053015][T21397] netlink: 292 bytes leftover after parsing attributes in process `syz.1.3885'.
[  693.430538][T21405] team_slave_1: Caught tx_queue_len zero misconfig
[  693.515551][T21408] netlink: 'syz.2.3888': attribute type 1 has an invalid length.
[  693.550422][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  693.843130][T21408] bond2: entered promiscuous mode
[  693.878821][T21408] 8021q: adding VLAN 0 to HW filter on device bond2
[  693.942759][T21431] netlink: 'syz.0.3894': attribute type 3 has an invalid length.
[  694.161122][T21412] vlan2: entered allmulticast mode
[  694.184127][T21412] bond2: entered allmulticast mode
[  694.273057][T21426] bond2: (slave bridge1): making interface the new active one
[  694.283120][T21426] bridge1: entered promiscuous mode
[  694.309494][T21426] bridge1: entered allmulticast mode
[  694.326017][T21426] bond2: (slave bridge1): Enslaving as an active interface with an up link
[  694.831080][T21460] netlink: 'syz.0.3901': attribute type 3 has an invalid length.
[  694.911671][ T8377] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  694.955225][T21469] Cannot find add_set index 4 as target
[  695.186157][T21463] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3900'.
[  695.595616][T21493] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3907'.
[  696.098677][T21506] RDS: rds_bind could not find a transport for ::ffff:172.30.0.1, load rds_tcp or rds_rdma?
[  696.127200][T21505] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.3911'.
[  696.157291][T21505] netlink: Unknown conntrack attr (0)
[  696.253852][T21513] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3914'.
[  696.750783][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  696.761238][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  696.771730][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  696.782217][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  697.431188][T21566] netlink: 112 bytes leftover after parsing attributes in process `syz.0.3927'.
[  697.630307][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  697.964908][T21577] 8021q: adding VLAN 0 to HW filter on device macvlan3
[  698.166103][T21590] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3931'.
[  698.197297][T21590] syz_tun: entered allmulticast mode
[  698.232029][T21590] dvmrp8: entered allmulticast mode
[  699.075455][T21617] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3938'.
[  699.132269][T21623] netlink: 'syz.3.3938': attribute type 4 has an invalid length.
[  699.141076][T21622] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3940'.
[  699.174574][T21623] netlink: 'syz.3.3938': attribute type 4 has an invalid length.
[  699.330772][T21625] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  699.397038][T21635] netlink: 'syz.0.3943': attribute type 1 has an invalid length.
[  699.581947][T21641] xt_recent: hitcount (262144) is larger than allowed maximum (65535)
[  699.617418][T21635] 8021q: adding VLAN 0 to HW filter on device bond4
[  699.646068][T21638] vlan2: entered promiscuous mode
[  699.674757][T21638] bond4: entered promiscuous mode
[  699.717227][T21638] vlan2: entered allmulticast mode
[  699.745220][T21635] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3943'.
[  699.759279][T21638] bond4: entered allmulticast mode
[  699.917448][T21635] 8021q: adding VLAN 0 to HW filter on device batadv1
[  699.959668][T21635] bond4: (slave batadv1): making interface the new active one
[  699.979639][T21635] batadv1: entered promiscuous mode
[  699.998285][T21635] batadv1: entered allmulticast mode
[  700.023901][T21635] bond4: (slave batadv1): Enslaving as an active interface with an up link
[  700.107366][T21659] bridge0: port 2(bridge_slave_1) entered disabled state
[  700.129034][T21657] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3948'.
[  700.671532][   T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  700.836619][T21686] netlink: 84 bytes leftover after parsing attributes in process `syz.1.3957'.
[  701.390327][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  701.537029][T21709] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3961'.
[  701.858816][T21714] netlink: 156 bytes leftover after parsing attributes in process `syz.4.3962'.
[  702.513201][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  702.521590][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  702.530051][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  702.538488][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  702.922539][T21734] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.3967'.
[  703.391536][ T5636] Bluetooth: hci2: command 0x0405 tx timeout
[  704.247248][T21776] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  704.258720][T21776] syzkaller0: entered promiscuous mode
[  704.265870][T21776] syzkaller0: entered allmulticast mode
[  704.342520][T21780] tipc: Resetting bearer <eth:syzkaller0>
[  704.394974][T21773] tipc: Resetting bearer <eth:syzkaller0>
[  704.481479][T21773] tipc: Disabling bearer <eth:syzkaller0>
[  704.716009][T21787] syzkaller0: entered promiscuous mode
[  704.729184][T21787] syzkaller0: entered allmulticast mode
[  704.740649][T21788] tc action pedit offset 4096 out of bounds
[  704.748732][T21788] tc action pedit offset 4096 out of bounds
[  704.754743][T21788] tc action pedit offset 4096 out of bounds
[  704.760692][T21788] tc action pedit offset 4096 out of bounds
[  704.766606][T21788] tc action pedit offset 4096 out of bounds
[  704.772583][T21788] tc action pedit offset 4096 out of bounds
[  704.778493][T21788] tc action pedit offset 4096 out of bounds
[  704.784476][T21788] tc action pedit offset 4096 out of bounds
[  704.790455][T21788] tc action pedit offset 4096 out of bounds
[  704.796398][T21788] tc action pedit offset 4096 out of bounds
[  704.802415][T21788] TC_ACT_REPEAT abuse ?
[  704.814572][T21795] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3984'.
[  704.910319][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  705.275747][T21804] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  705.503754][T21813] netlink: 152 bytes leftover after parsing attributes in process `syz.0.3987'.
[  705.507539][T21811] syzkaller0: entered promiscuous mode
[  705.519504][T21811] syzkaller0: entered allmulticast mode
[  705.678043][T21815] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  706.341764][T21809] tipc: Resetting bearer <eth:syzkaller0>
[  706.432114][ T3367] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  706.692814][T21809] tipc: Disabling bearer <eth:syzkaller0>
[  706.923393][T21854] openvswitch: netlink: Actions may not be safe on all matching packets
[  707.606241][T21877] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4009'.
[  707.668263][T21881] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4010'.
[  707.752119][T21882] netlink: 68 bytes leftover after parsing attributes in process `syz.2.4010'.
[  707.788855][T21884] netlink: 76 bytes leftover after parsing attributes in process `syz.4.4012'.
[  707.799742][T21882] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4010'.
[  707.833884][T21882] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4010'.
[  707.960831][T21881] veth1_to_team: entered promiscuous mode
[  707.996776][T21881] ipvlan1: entered promiscuous mode
[  708.033102][T21890] netlink: 'syz.0.4013': attribute type 11 has an invalid length.
[  708.043116][T21881] ipvlan1: left promiscuous mode
[  708.053109][T21890] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4013'.
[  708.062967][T21881] veth1_to_team: left promiscuous mode
[  708.095470][T21884] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4012'.
[  708.116868][T21891] IPv6: NLM_F_REPLACE set, but no existing node found!
[  708.271541][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  708.281846][T21893] netlink: 'syz.1.4015': attribute type 2 has an invalid length.
[  708.281932][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  708.301134][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  708.310916][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  708.329221][T21893] netlink: 'syz.1.4015': attribute type 8 has an invalid length.
[  708.513883][ T5636] Bluetooth: hci0: command 0x0406 tx timeout
[  708.574858][T21906] netlink: 'syz.3.4014': attribute type 20 has an invalid length.
[  708.590618][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  708.610855][T21906] netlink: 'syz.3.4014': attribute type 20 has an invalid length.
[  710.339707][T21956] bond1: entered promiscuous mode
[  710.972439][T21974] x_tables: duplicate underflow at hook 1
[  711.066087][T21965] IPVS: Scheduler module ip_vs_ not found
[  711.332484][T21983] __nla_validate_parse: 5 callbacks suppressed
[  711.333685][T21983] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4041'.
[  711.406362][T21989] netlink: 64 bytes leftover after parsing attributes in process `syz.4.4044'.
[  711.445784][T21991] netlink: zone id is out of range
[  711.653828][T22001] openvswitch: netlink: EtherType 50a is less than min 600
[  711.668571][T21999] netlink: 'syz.4.4046': attribute type 21 has an invalid length.
[  711.790747][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  712.194537][ T8378] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  712.390152][T22024] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4051'.
[  712.398649][T22023] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4049'.
[  712.785143][T22042] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4049'.
[  712.797730][T22042] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4049'.
[  713.322787][T22041] bond4: Unable to set peer notification delay as MII monitoring is disabled
[  713.334515][T22041] bond4 (unregistering): Released all slaves
[  713.379921][T22043] bridge0: port 3(vlan3) entered blocking state
[  713.388512][T22043] bridge0: port 3(vlan3) entered disabled state
[  713.396300][T22043] vlan3: entered allmulticast mode
[  713.404654][T22043] vlan3: entered promiscuous mode
[  713.742570][T22055] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4059'.
[  713.760951][T22060] IPVS: set_ctl: invalid protocol: 252 172.20.20.53:23
[  713.843512][T22062] syzkaller0: entered promiscuous mode
[  713.863376][T22062] syzkaller0: entered allmulticast mode
[  713.964792][T22070] Bluetooth: MGMT ver 1.23
[  714.030530][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  714.039115][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  714.047643][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  714.056136][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  714.101346][T22074] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  714.179155][T22075] tipc: Disabling bearer <eth:syzkaller0>
[  714.795064][T22093] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4069'.
[  715.073909][T22112] bond3: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  715.114053][T22112] bond3: (slave lo): Enslaving as an active interface with an up link
[  715.142206][T22112] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check.
[  715.291539][T22120] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4074'.
[  715.310557][T22120] netlink: 11 bytes leftover after parsing attributes in process `syz.3.4074'.
[  715.790357][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  717.950627][ T5977] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  718.336167][T22137] __nla_validate_parse: 5 callbacks suppressed
[  718.336187][T22137] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4079'.
[  718.354904][T22140] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4079'.
[  718.398964][T22141] syzkaller0: entered promiscuous mode
[  718.414803][T22141] syzkaller0: entered allmulticast mode
[  718.649446][T22164] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.4081'.
[  718.662627][T22164] siw: device registration error -23
[  718.755184][T22168] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4083'.
[  718.782397][T22168] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4083'.
[  718.823789][T22168] netlink: 'syz.4.4083': attribute type 12 has an invalid length.
[  718.951471][T22174] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.4085'.
[  718.976434][T22172] netlink: 68 bytes leftover after parsing attributes in process `syz.3.4086'.
[  719.022522][T22177] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  719.213076][T22186] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4090'.
[  719.218971][T22185] netlink: 'syz.4.4089': attribute type 10 has an invalid length.
[  719.233126][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  719.270226][T22185] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4089'.
[  719.310193][T22185] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check.
[  719.490170][T22190] IPv6: Can't replace route, no match found
[  719.516811][T22190] IPv6: Can't replace route, no match found
[  719.609354][   T29] audit: type=1804 audit(1780133382.220:23): pid=22201 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.4091" name="/newroot/257/cgroup.controllers" dev="tmpfs" ino=1329 res=1 errno=0
[  719.696272][   T29] audit: type=1800 audit(1780133382.250:24): pid=22201 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.4091" name="cgroup.controllers" dev="tmpfs" ino=1329 res=0 errno=0
[  719.718613][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  719.718945][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  719.719233][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  719.719515][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  719.974320][T22211] netlink: 16178 bytes leftover after parsing attributes in process `syz.4.4095'.
[  720.319587][T22209] netlink: 'syz.2.4094': attribute type 1 has an invalid length.
[  720.694159][T22235] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  721.332819][T22250] netlink: 'syz.4.4107': attribute type 9 has an invalid length.
[  721.363621][T22250] netlink: 'syz.4.4107': attribute type 6 has an invalid length.
[  721.408897][T22250] netlink: 'syz.4.4107': attribute type 7 has an invalid length.
[  721.418456][T22250] netlink: 'syz.4.4107': attribute type 8 has an invalid length.
[  721.512180][T22256] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  721.547089][T22256] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  721.565471][T22256] bond0 (unregistering): Released all slaves
[  721.595463][T22261] veth0: entered promiscuous mode
[  721.658269][T22263] macvtap0: entered allmulticast mode
[  721.667470][T22263] veth0_to_bridge: entered allmulticast mode
[  721.687782][T22263] veth0_to_bridge: left allmulticast mode
[  722.120850][T22260] veth0: left promiscuous mode
[  722.547712][T22289] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  722.750520][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  722.772796][T22289] syzkaller0: entered promiscuous mode
[  722.789784][T22289] syzkaller0: entered allmulticast mode
[  722.818459][T22289] tipc: Resetting bearer <eth:syzkaller0>
[  723.335189][ T8378] tipc: Resetting bearer <eth:syzkaller0>
[  723.345779][T22288] tipc: Resetting bearer <eth:syzkaller0>
[  723.738215][ T3367] net_ratelimit: 1 callbacks suppressed
[  723.738239][ T3367] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  724.474095][T22345] __nla_validate_parse: 9 callbacks suppressed
[  724.474118][T22345] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4124'.
[  724.656221][T22349] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.4124'.
[  724.762546][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  724.771083][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  724.779591][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  724.788088][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  726.674791][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  727.639287][T22288] tipc: Disabling bearer <eth:syzkaller0>
[  727.658656][T22318] pimreg: tun_chr_ioctl cmd 1074025677
[  727.665433][T22318] pimreg: linktype set to 774
[  727.709336][ T5804] tipc: Node number set to 2700950356
[  727.723919][T22323] syzkaller0: entered promiscuous mode
[  727.746191][T22323] syzkaller0: entered allmulticast mode
[  728.006781][T22356] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0)
[  728.301763][T22364] 
€Â0: renamed from batadv_slave_1
[  729.471506][ T8378] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  729.551568][T22396] netlink: 27 bytes leftover after parsing attributes in process `syz.3.4137'.
[  729.563024][T22397] netlink: 27 bytes leftover after parsing attributes in process `syz.3.4137'.
[  729.827500][T22403] netlink: 10 bytes leftover after parsing attributes in process `syz.0.4139'.
[  730.030776][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  730.041153][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  730.051420][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  730.061096][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  730.430301][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  730.516474][T22413] netlink: 14 bytes leftover after parsing attributes in process `syz.0.4144'.
[  730.536446][T22414] syzkaller0: entered promiscuous mode
[  730.543367][T22414] syzkaller0: entered allmulticast mode
[  730.649189][T22414] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  730.717286][ T3367] bridge0: port 2(bridge_slave_1) entered blocking state
[  730.726157][ T3367] bridge0: port 2(bridge_slave_1) entered forwarding state
[  730.902297][T22424] tipc: Resetting bearer <eth:syzkaller0>
[  731.096923][T22424] tipc: Disabling bearer <eth:syzkaller0>
[  731.854231][T22476] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.4159'.
[  731.924878][T22481] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4160'.
[  731.977955][T22481] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4160'.
[  733.870427][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  735.230893][ T5977] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  735.790843][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  735.800347][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  735.809516][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  735.818879][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  737.710583][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  740.272429][ T8381] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  740.841069][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  740.850585][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  740.860433][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  740.869895][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  741.150627][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  745.070784][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  745.472190][ T5977] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  746.030639][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  746.039158][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  746.047663][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  746.056140][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  748.590393][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  750.591469][ T8381] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  751.150586][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  751.159434][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  751.728892][T22518] xt_hashlimit: size too large, truncated to 1048576
[  751.951484][T22528] netlink: 276 bytes leftover after parsing attributes in process `syz.4.4173'.
[  752.272106][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  752.590844][T22551] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4180'.
[  752.635725][T22551] ip6gre1: entered promiscuous mode
[  752.643604][T22546] netlink: 'syz.1.4177': attribute type 1 has an invalid length.
[  752.662840][T22546] netlink: 'syz.1.4177': attribute type 2 has an invalid length.
[  752.683354][T22551] ip6gre1: entered allmulticast mode
[  752.712612][T22549] tipc: New replicast peer: 255.255.255.255
[  752.731551][T22549] tipc: Enabled bearer <udp:syz2>, priority 26
[  753.029751][T22563] bridge6: entered promiscuous mode
[  753.078901][T22563] bridge6: entered allmulticast mode
[  753.488322][T22582] netlink: 'syz.2.4185': attribute type 1 has an invalid length.
[  753.545617][T22582] netlink: 'syz.2.4185': attribute type 2 has an invalid length.
[  753.594188][T22582] netlink: 'syz.2.4185': attribute type 1 has an invalid length.
[  753.629353][T22582] netlink: 'syz.2.4185': attribute type 3 has an invalid length.
[  753.647674][T22582] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4185'.
[  753.655733][T22580] macvlan0: entered promiscuous mode
[  753.695759][T22580] macvlan0: entered allmulticast mode
[  753.719212][T22580] team0: Device macvlan0 is already an upper device of the team interface
[  753.914649][T22558] bridge6: entered promiscuous mode
[  753.932469][T22558] bridge6: entered allmulticast mode
[  754.350428][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  754.359186][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  754.367854][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  754.708210][T22605] netlink: 'syz.4.4191': attribute type 1 has an invalid length.
[  754.721718][T22608] netlink: 208240 bytes leftover after parsing attributes in process `syz.3.4190'.
[  754.740810][T22605] netlink: 'syz.4.4191': attribute type 1 has an invalid length.
[  754.933929][T22615] netlink: 52 bytes leftover after parsing attributes in process `syz.3.4194'.
[  754.957493][T22616] netlink: 68 bytes leftover after parsing attributes in process `syz.1.4193'.
[  754.990903][T22616] netlink: 64 bytes leftover after parsing attributes in process `syz.1.4193'.
[  755.064557][T22621] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4197'.
[  755.101950][T22619] syzkaller0: entered promiscuous mode
[  755.116254][T22619] syzkaller0: entered allmulticast mode
[  755.124889][T22624] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4195'.
[  755.139829][T22619] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4196'.
[  755.347795][T22630] lo: Caught tx_queue_len zero misconfig
[  755.645585][T17054] block nbd5: Receive control failed (result -107)
[  755.790481][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  756.132446][T22651] syzkaller0: entered promiscuous mode
[  756.149861][T22651] syzkaller0: entered allmulticast mode
[  756.352281][ T5971] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  756.444759][T22663] syzkaller0: entered promiscuous mode
[  756.471637][T22663] syzkaller0: entered allmulticast mode
[  756.961492][T22681] __nla_validate_parse: 7 callbacks suppressed
[  756.961521][T22681] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4207'.
[  757.039627][T22687] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4207'.
[  757.080222][T22684] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4210'.
[  757.102776][T22686] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4210'.
[  757.529560][T22696] sctp: [Deprecated]: syz.1.4212 (pid 22696) Use of int in max_burst socket option.
[  757.529560][T22696] Use struct sctp_assoc_value instead
[  758.356542][T22721] openvswitch: netlink: Message has 4 unknown bytes.
[  758.468490][T22716] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue
[  758.588701][T22716] syzkaller0: entered promiscuous mode
[  758.610414][T22716] syzkaller0: entered allmulticast mode
[  758.633004][T22720] geneve1: mtu less than device minimum
[  758.801114][T22737] netlink: 'syz.0.4224': attribute type 4 has an invalid length.
[  758.830439][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  758.839055][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  758.847870][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  759.002243][T22733] 
[  759.004653][T22733] ======================================================
[  759.011765][T22733] WARNING: possible circular locking dependency detected
[  759.018784][T22733] syzkaller #0 Not tainted
[  759.023213][T22733] ------------------------------------------------------
[  759.030320][T22733] syz.2.4222/22733 is trying to acquire lock:
[  759.036390][T22733] ffffffff8ea85640 (fs_reclaim){+.+.}-{0:0}, at: prepare_alloc_pages+0x152/0x650
[  759.045545][T22733] 
[  759.045545][T22733] but task is already holding lock:
[  759.052910][T22733] ffff88802c5fa7f8 (&mm->mmap_lock){++++}-{4:4}, at: lock_mm_and_find_vma+0x36/0x340
[  759.062600][T22733] 
[  759.062600][T22733] which lock already depends on the new lock.
[  759.062600][T22733] 
[  759.073002][T22733] 
[  759.073002][T22733] the existing dependency chain (in reverse order) is:
[  759.082012][T22733] 
[  759.082012][T22733] -> #7 (&mm->mmap_lock){++++}-{4:4}:
[  759.089576][T22733]        __might_fault+0xcb/0x130
[  759.094700][T22733]        _copy_from_user+0x28/0xb0
[  759.099822][T22733]        csum_and_copy_from_iter_full+0x1e7/0x1f00
[  759.106432][T22733]        ip_generic_getfrag+0x149/0x2d0
[  759.112006][T22733]        __ip6_append_data+0x39cd/0x3f60
[  759.117733][T22733]        ip6_append_data+0x10f/0x280
[  759.123029][T22733]        rawv6_sendmsg+0x12d3/0x18e0
[  759.128331][T22733]        ____sys_sendmsg+0x80a/0x9f0
[  759.133621][T22733]        ___sys_sendmsg+0x2a5/0x360
[  759.138819][T22733]        __x64_sys_sendmsg+0x1bd/0x2a0
[  759.144328][T22733]        do_syscall_64+0x174/0x580
[  759.149454][T22733]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  759.155872][T22733] 
[  759.155872][T22733] -> #6 (sk_lock-AF_INET6){+.+.}-{0:0}:
[  759.163624][T22733]        lock_sock_nested+0x41/0x100
[  759.168918][T22733]        inet_shutdown+0x6a/0x390
[  759.173956][T22733]        nbd_mark_nsock_dead+0x2e9/0x560
[  759.179695][T22733]        recv_work+0x1c2e/0x1d40
[  759.184635][T22733]        process_scheduled_works+0xb5d/0x1860
[  759.190706][T22733]        worker_thread+0xa53/0xfc0
[  759.195824][T22733]        kthread+0x389/0x470
[  759.200456][T22733]        ret_from_fork+0x514/0xb70
[  759.205656][T22733]        ret_from_fork_asm+0x1a/0x30
[  759.210945][T22733] 
[  759.210945][T22733] -> #5 (&nsock->tx_lock){+.+.}-{4:4}:
[  759.218606][T22733]        __mutex_lock+0x1a3/0x1550
[  759.223813][T22733]        nbd_queue_rq+0x37b/0x1100
[  759.228944][T22733]        blk_mq_dispatch_rq_list+0xa70/0x1910
[  759.235015][T22733]        __blk_mq_sched_dispatch_requests+0xdcc/0x1600
[  759.241875][T22733]        blk_mq_sched_dispatch_requests+0xd7/0x190
[  759.248383][T22733]        blk_mq_run_hw_queue+0x348/0x4f0
[  759.254020][T22733]        blk_mq_dispatch_list+0xd16/0xe10
[  759.259767][T22733]        blk_mq_flush_plug_list+0x48d/0x570
[  759.265671][T22733]        __blk_flush_plug+0x3ed/0x4d0
[  759.271262][T22733]        __submit_bio+0x28d/0x580
[  759.276406][T22733]        submit_bio_noacct_nocheck+0x2f4/0xa40
[  759.282590][T22733]        block_read_full_folio+0x7b7/0x830
[  759.288415][T22733]        filemap_read_folio+0x137/0x3b0
[  759.293993][T22733]        do_read_cache_folio+0x358/0x590
[  759.299649][T22733]        read_part_sector+0xb6/0x2b0
[  759.304965][T22733]        adfspart_check_ICS+0xb1/0x960
[  759.310436][T22733]        bdev_disk_changed+0x817/0x1770
[  759.315987][T22733]        blkdev_get_whole+0x380/0x510
[  759.321365][T22733]        bdev_open+0x31e/0xd30
[  759.326130][T22733]        blkdev_open+0x470/0x610
[  759.331072][T22733]        do_dentry_open+0x822/0x13a0
[  759.336362][T22733]        vfs_open+0x3b/0x340
[  759.340956][T22733]        path_openat+0x2e08/0x3860
[  759.346087][T22733]        do_file_open+0x23e/0x4a0
[  759.351123][T22733]        do_sys_openat2+0x113/0x200
[  759.356325][T22733]        __x64_sys_openat+0x138/0x170
[  759.361714][T22733]        do_syscall_64+0x174/0x580
[  759.366919][T22733]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  759.373337][T22733] 
[  759.373337][T22733] -> #4 (&cmd->lock){+.+.}-{4:4}:
[  759.380698][T22733]        __mutex_lock+0x1a3/0x1550
[  759.385814][T22733]        nbd_queue_rq+0xc6/0x1100
[  759.390871][T22733]        blk_mq_dispatch_rq_list+0xa70/0x1910
[  759.396945][T22733]        __blk_mq_sched_dispatch_requests+0xdcc/0x1600
[  759.403812][T22733]        blk_mq_sched_dispatch_requests+0xd7/0x190
[  759.410324][T22733]        blk_mq_run_hw_queue+0x348/0x4f0
[  759.415966][T22733]        blk_mq_dispatch_list+0xd16/0xe10
[  759.421693][T22733]        blk_mq_flush_plug_list+0x48d/0x570
[  759.427604][T22733]        __blk_flush_plug+0x3ed/0x4d0
[  759.432990][T22733]        __submit_bio+0x28d/0x580
[  759.438082][T22733]        submit_bio_noacct_nocheck+0x2f4/0xa40
[  759.444265][T22733]        block_read_full_folio+0x7b7/0x830
[  759.450090][T22733]        filemap_read_folio+0x137/0x3b0
[  759.455658][T22733]        do_read_cache_folio+0x358/0x590
[  759.461309][T22733]        read_part_sector+0xb6/0x2b0
[  759.466596][T22733]        adfspart_check_ICS+0xb1/0x960
[  759.472061][T22733]        bdev_disk_changed+0x817/0x1770
[  759.477628][T22733]        blkdev_get_whole+0x380/0x510
[  759.483006][T22733]        bdev_open+0x31e/0xd30
[  759.487771][T22733]        blkdev_open+0x470/0x610
[  759.492715][T22733]        do_dentry_open+0x822/0x13a0
[  759.498006][T22733]        vfs_open+0x3b/0x340
[  759.502601][T22733]        path_openat+0x2e08/0x3860
[  759.507719][T22733]        do_file_open+0x23e/0x4a0
[  759.512752][T22733]        do_sys_openat2+0x113/0x200
[  759.517956][T22733]        __x64_sys_openat+0x138/0x170
[  759.523329][T22733]        do_syscall_64+0x174/0x580
[  759.528446][T22733]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  759.534956][T22733] 
[  759.534956][T22733] -> #3 (set->srcu){.+.+}-{0:0}:
[  759.542120][T22733]        __synchronize_srcu+0xca/0x300
[  759.547593][T22733]        elevator_switch+0x1e8/0x7a0
[  759.550230][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  759.552884][T22733]        elevator_change+0x2cc/0x450
[  759.552910][T22733]        elevator_set_default+0x36c/0x430
[  759.571956][T22733]        blk_register_queue+0x3e9/0x4e0
[  759.577599][T22733]        __add_disk+0x677/0xd50
[  759.582460][T22733]        add_disk_fwnode+0xfb/0x480
[  759.587667][T22733]        nbd_dev_add+0x72c/0xb50
[  759.592611][T22733]        nbd_init+0x168/0x1f0
[  759.597298][T22733]        do_one_initcall+0x250/0x870
[  759.602589][T22733]        do_initcall_level+0x104/0x190
[  759.608051][T22733]        do_initcalls+0x59/0xa0
[  759.612907][T22733]        kernel_init_freeable+0x2a6/0x3e0
[  759.618644][T22733]        kernel_init+0x1d/0x1d0
[  759.623504][T22733]        ret_from_fork+0x514/0xb70
[  759.628619][T22733]        ret_from_fork_asm+0x1a/0x30
[  759.634007][T22733] 
[  759.634007][T22733] -> #2 (&q->elevator_lock){+.+.}-{4:4}:
[  759.641830][T22733]        __mutex_lock+0x1a3/0x1550
[  759.646955][T22733]        elevator_change+0x1b3/0x450
[  759.652247][T22733]        elevator_set_none+0xb5/0x140
[  759.657619][T22733]        blk_mq_update_nr_hw_queues+0x5e7/0x1a60
[  759.664051][T22733]        nbd_start_device+0x17f/0xb10
[  759.669434][T22733]        nbd_genl_connect+0x165b/0x1cf0
[  759.674984][T22733]        genl_family_rcv_msg_doit+0x22a/0x330
[  759.681062][T22733]        genl_rcv_msg+0x61c/0x7a0
[  759.686094][T22733]        netlink_rcv_skb+0x232/0x4b0
[  759.691379][T22733]        genl_rcv+0x28/0x40
[  759.695887][T22733]        netlink_unicast+0x75c/0x8e0
[  759.701440][T22733]        netlink_sendmsg+0x813/0xb40
[  759.706832][T22733]        ____sys_sendmsg+0x972/0x9f0
[  759.712120][T22733]        ___sys_sendmsg+0x2a5/0x360
[  759.717325][T22733]        __x64_sys_sendmsg+0x1bd/0x2a0
[  759.722788][T22733]        do_syscall_64+0x174/0x580
[  759.727903][T22733]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  759.734325][T22733] 
[  759.734325][T22733] -> #1 (&q->q_usage_counter(io)#49){++++}-{0:0}:
[  759.743024][T22733]        blk_alloc_queue+0x546/0x680
[  759.748401][T22733]        __blk_mq_alloc_disk+0x197/0x390
[  759.754037][T22733]        nbd_dev_add+0x499/0xb50
[  759.758978][T22733]        nbd_init+0x168/0x1f0
[  759.763653][T22733]        do_one_initcall+0x250/0x870
[  759.768938][T22733]        do_initcall_level+0x104/0x190
[  759.774410][T22733]        do_initcalls+0x59/0xa0
[  759.779438][T22733]        kernel_init_freeable+0x2a6/0x3e0
[  759.785174][T22733]        kernel_init+0x1d/0x1d0
[  759.790032][T22733]        ret_from_fork+0x514/0xb70
[  759.795148][T22733]        ret_from_fork_asm+0x1a/0x30
[  759.800433][T22733] 
[  759.800433][T22733] -> #0 (fs_reclaim){+.+.}-{0:0}:
[  759.807644][T22733]        __lock_acquire+0x15a5/0x2cf0
[  759.813018][T22733]        lock_acquire+0x106/0x350
[  759.818043][T22733]        fs_reclaim_acquire+0x71/0x100
[  759.823524][T22733]        prepare_alloc_pages+0x152/0x650
[  759.829161][T22733]        __alloc_frozen_pages_noprof+0x12f/0x380
[  759.835488][T22733]        alloc_pages_mpol+0x235/0x490
[  759.840877][T22733]        folio_alloc_mpol_noprof+0x39/0x160
[  759.846776][T22733]        vma_alloc_folio_noprof+0xe1/0x1e0
[  759.852584][T22733]        do_pte_missing+0x159d/0x33f0
[  759.858050][T22733]        handle_mm_fault+0x1bf2/0x3170
[  759.863518][T22733]        do_user_addr_fault+0x75b/0x1340
[  759.869326][T22733]        exc_page_fault+0x6a/0xc0
[  759.874350][T22733]        asm_exc_page_fault+0x26/0x30
[  759.879736][T22733]        rep_movs_alternative+0x33/0x90
[  759.885288][T22733]        _copy_to_iter+0x255/0x17d0
[  759.890496][T22733]        __skb_datagram_iter+0xf8/0x980
[  759.896159][T22733]        skb_copy_datagram_iter+0xb5/0x240
[  759.902088][T22733]        virtio_transport_stream_dequeue+0x3b7/0xac0
[  759.908790][T22733]        __vsock_connectible_recvmsg+0x85e/0xc50
[  759.915132][T22733]        sock_recvmsg+0x172/0x1b0
[  759.920169][T22733]        __sys_recvfrom+0x240/0x3c0
[  759.925369][T22733]        __x64_sys_recvfrom+0xde/0x100
[  759.930833][T22733]        do_syscall_64+0x174/0x580
[  759.935946][T22733]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  759.942361][T22733] 
[  759.942361][T22733] other info that might help us debug this:
[  759.942361][T22733] 
[  759.953026][T22733] Chain exists of:
[  759.953026][T22733]   fs_reclaim --> sk_lock-AF_INET6 --> &mm->mmap_lock
[  759.953026][T22733] 
[  759.965637][T22733]  Possible unsafe locking scenario:
[  759.965637][T22733] 
[  759.973083][T22733]        CPU0                    CPU1
[  759.978450][T22733]        ----                    ----
[  759.983812][T22733]   rlock(&mm->mmap_lock);
[  759.988234][T22733]                                lock(sk_lock-AF_INET6);
[  759.995355][T22733]                                lock(&mm->mmap_lock);
[  760.002327][T22733]   lock(fs_reclaim);
[  760.006315][T22733] 
[  760.006315][T22733]  *** DEADLOCK ***
[  760.006315][T22733] 
[  760.014453][T22733] 2 locks held by syz.2.4222/22733:
[  760.019649][T22733]  #0: ffff888036d21ca0 (sk_lock-AF_VSOCK){+.+.}-{0:0}, at: vsock_connectible_wait_data+0x2e6/0x520
[  760.030484][T22733]  #1: ffff88802c5fa7f8 (&mm->mmap_lock){++++}-{4:4}, at: lock_mm_and_find_vma+0x36/0x340
[  760.040417][T22733] 
[  760.040417][T22733] stack backtrace:
[  760.046310][T22733] CPU: 1 UID: 0 PID: 22733 Comm: syz.2.4222 Not tainted syzkaller #0 PREEMPT(full) 
[  760.046327][T22733] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  760.046336][T22733] Call Trace:
[  760.046343][T22733]  <TASK>
[  760.046349][T22733]  dump_stack_lvl+0xe8/0x150
[  760.046366][T22733]  print_circular_bug+0x2e1/0x300
[  760.046387][T22733]  check_noncircular+0x12e/0x150
[  760.046408][T22733]  __lock_acquire+0x15a5/0x2cf0
[  760.046425][T22733]  ? ktime_get+0x45/0x220
[  760.046447][T22733]  ? ktime_get+0x45/0x220
[  760.046466][T22733]  ? lock_acquire+0x106/0x350
[  760.046484][T22733]  ? prepare_alloc_pages+0x152/0x650
[  760.046505][T22733]  lock_acquire+0x106/0x350
[  760.046519][T22733]  ? prepare_alloc_pages+0x152/0x650
[  760.046543][T22733]  ? __lock_acquire+0x6b5/0x2cf0
[  760.046559][T22733]  fs_reclaim_acquire+0x71/0x100
[  760.046579][T22733]  ? prepare_alloc_pages+0x152/0x650
[  760.046599][T22733]  prepare_alloc_pages+0x152/0x650
[  760.046622][T22733]  __alloc_frozen_pages_noprof+0x12f/0x380
[  760.046638][T22733]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  760.046662][T22733]  ? __pfx_policy_nodemask+0x10/0x10
[  760.046677][T22733]  ? __lock_acquire+0x6b5/0x2cf0
[  760.046693][T22733]  alloc_pages_mpol+0x235/0x490
[  760.046709][T22733]  folio_alloc_mpol_noprof+0x39/0x160
[  760.046724][T22733]  vma_alloc_folio_noprof+0xe1/0x1e0
[  760.046740][T22733]  ? __pfx_vma_alloc_folio_noprof+0x10/0x10
[  760.046755][T22733]  ? irqentry_exit+0x218/0x8b0
[  760.046772][T22733]  do_pte_missing+0x159d/0x33f0
[  760.046797][T22733]  ? handle_mm_fault+0xf1/0x3170
[  760.046816][T22733]  handle_mm_fault+0x1bf2/0x3170
[  760.046839][T22733]  ? handle_mm_fault+0xf1/0x3170
[  760.046858][T22733]  ? __pfx_handle_mm_fault+0x10/0x10
[  760.046880][T22733]  ? __lock_acquire+0x6b5/0x2cf0
[  760.046896][T22733]  ? lock_mm_and_find_vma+0xa7/0x340
[  760.046917][T22733]  do_user_addr_fault+0x75b/0x1340
[  760.046938][T22733]  exc_page_fault+0x6a/0xc0
[  760.046952][T22733]  asm_exc_page_fault+0x26/0x30
[  760.046967][T22733] RIP: 0010:rep_movs_alternative+0x33/0x90
[  760.046987][T22733] Code: 73 25 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 c3 cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 <48> 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb
[  760.047000][T22733] RSP: 0018:ffffc90005cbf698 EFLAGS: 00050202
[  760.047013][T22733] RAX: 1000000014000000 RBX: ffff88803a8a742c RCX: 000000000000001b
[  760.047024][T22733] RDX: 0000000000000000 RSI: ffff88803a8a7444 RDI: 0000200000000ffd
[  760.047035][T22733] RBP: ffffc90005cbf810 R08: ffff88803a8a745e R09: 1ffff11007514e8b
[  760.047045][T22733] R10: dffffc0000000000 R11: ffffed1007514e8c R12: 1ffff92000b97fb7
[  760.047056][T22733] R13: 0000200000000fe5 R14: ffffc90005cbfdc8 R15: 0000000000000033
[  760.047074][T22733]  _copy_to_iter+0x255/0x17d0
[  760.047093][T22733]  ? __lock_acquire+0x6b5/0x2cf0
[  760.047110][T22733]  ? __pfx__copy_to_iter+0x10/0x10
[  760.047126][T22733]  ? virtio_transport_stream_dequeue+0xdb/0xac0
[  760.047143][T22733]  ? __pfx_virtio_transport_stream_dequeue+0x10/0x10
[  760.047163][T22733]  __skb_datagram_iter+0xf8/0x980
[  760.047182][T22733]  ? __pfx_simple_copy_to_iter+0x10/0x10
[  760.047200][T22733]  ? virtio_transport_stream_dequeue+0x387/0xac0
[  760.047219][T22733]  skb_copy_datagram_iter+0xb5/0x240
[  760.047238][T22733]  virtio_transport_stream_dequeue+0x3b7/0xac0
[  760.047266][T22733]  ? __pfx_virtio_transport_stream_dequeue+0x10/0x10
[  760.047283][T22733]  ? vsock_connectible_wait_data+0x4de/0x520
[  760.047309][T22733]  __vsock_connectible_recvmsg+0x85e/0xc50
[  760.047334][T22733]  ? __pfx___vsock_connectible_recvmsg+0x10/0x10
[  760.047352][T22733]  ? aa_sk_perm+0x6d5/0x900
[  760.047371][T22733]  ? trace_irq_disable+0x3b/0x140
[  760.047395][T22733]  ? __pfx_aa_sk_perm+0x10/0x10
[  760.047414][T22733]  ? __pfx_autoremove_wake_function+0x10/0x10
[  760.047435][T22733]  ? aa_sock_msg_perm+0xf1/0x1b0
[  760.047456][T22733]  ? vsock_connectible_recvmsg+0xb7/0xe0
[  760.047475][T22733]  ? __pfx_vsock_connectible_recvmsg+0x10/0x10
[  760.047494][T22733]  sock_recvmsg+0x172/0x1b0
[  760.047515][T22733]  __sys_recvfrom+0x240/0x3c0
[  760.047532][T22733]  ? __pfx___sys_recvfrom+0x10/0x10
[  760.047545][T22733]  ? do_futex+0x333/0x420
[  760.047572][T22733]  ? rcu_is_watching+0x15/0xb0
[  760.047592][T22733]  __x64_sys_recvfrom+0xde/0x100
[  760.047607][T22733]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  760.047621][T22733]  do_syscall_64+0x174/0x580
[  760.047636][T22733]  ? clear_bhb_loop+0x40/0x90
[  760.047653][T22733]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  760.047666][T22733] RIP: 0033:0x7f8515d9ce59
[  760.047679][T22733] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  760.047691][T22733] RSP: 002b:00007f8516cd2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002d
[  760.047705][T22733] RAX: ffffffffffffffda RBX: 00007f8516016090 RCX: 00007f8515d9ce59
[  760.047716][T22733] RDX: 000000000000feb5 RSI: 00002000000001c0 RDI: 0000000000000004
[  760.047725][T22733] RBP: 00007f8515e32d6f R08: 0000000000000000 R09: 0000000000000000
[  760.047734][T22733] R10: 0000000000010120 R11: 0000000000000246 R12: 0000000000000000
[  760.047743][T22733] R13: 00007f8516016128 R14: 00007f8516016090 R15: 00007ffca7b54178
[  760.047760][T22733]  </TASK>
[  760.700954][T22753] xt_hashlimit: overflow, rate too high: 0
[  762.111115][ T5971] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  763.790887][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  763.799891][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  763.808677][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  764.750204][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  767.150221][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  767.158692][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  767.230668][ T8378] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  768.190195][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog