last executing test programs:

3.630010295s ago: executing program 1 (id=4957):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000a80)=0x1, 0x4)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r1, &(0x7f0000000440), 0x10)
listen(r1, 0x5)
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r2, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10)
sendto$packet(r2, &(0x7f0000000600)="5f0efc3e1792a50972d2eb21bdff9ca4ac804c2847689e7fd3f3fe7bf05ddc63ff512d4074687760a5fbd1fc97777a6e55123f04cc8437b15f4b2c6f5027dcea15b6658d", 0xffffff3d, 0x0, 0x0, 0xffffffffffffff10)
close(0x3)
r3 = socket$inet6(0xa, 0x3, 0x87)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
ioctl$int_out(r4, 0x5460, &(0x7f0000000080))
setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000980)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x1c}, @in=@local, 0xee24, 0x0, 0x0, 0x3, 0x2}, {0x80003, 0x200000004, 0x40001000004, 0x20000a0e1, 0x100000000, 0x0, 0x200000003, 0x9}, {0x8}, 0x5, 0x0, 0x1, 0x0, 0x4, 0x3}, {{@in6=@ipv4={'\x00', '\xff\xff', @broadcast}, 0x0, 0x6c}, 0x2, @in6=@loopback, 0x3502, 0x3, 0x8, 0x2, 0x9075, 0xef, 0xc5e}}, 0xe8)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x8}}, 0x7}, 0x1c)

2.980301638s ago: executing program 4 (id=4962):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'ip6tnl0\x00', <r2=>0x0})
bind$packet(r1, &(0x7f0000000000)={0x11, 0x19, r2, 0x1, 0x5, 0x6, @remote}, 0x14)
write(r1, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', <r3=>0x0})
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x6, 0x3, &(0x7f0000000a00)=ANY=[@ANYBLOB="18000000070b000000000000000000009500000000000000"], &(0x7f00000004c0)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x20, '\x00', r3, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000300)={0x90, r6, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0xf1ab}, {0x6, 0x11, 0xa}, {0x8, 0x15, 0x7}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x80a}, {0x6, 0x11, 0x7}, {0x8, 0x15, 0x7}}]}, 0x90}, 0x1, 0x0, 0x0, 0x4000001}, 0x24000010)
r7 = socket$kcm(0x29, 0x5, 0x0)
setsockopt$kcm_KCM_RECV_DISABLE(r7, 0x119, 0x1, &(0x7f0000000040)=0x8, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000080000000850000002b000000b70000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b703000000"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r8, 0x0, 0xe, 0x0, &(0x7f0000000100)="c1dfb061cdee7a1f3fc89771a773", 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
setsockopt$kcm_KCM_RECV_DISABLE(r7, 0x119, 0x1, &(0x7f0000000000), 0x4)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x14, 0x26, 0x9, 0x70bd26, 0x25dfdbfd, {0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x4004046}, 0x4000000)
recvmmsg(r9, &(0x7f0000006a40)=[{{&(0x7f0000000080)=@ax25={{0x3, @netrom}, [@rose, @rose, @null, @bcast, @default, @netrom, @null, @rose]}, 0x80, &(0x7f0000000740)=[{&(0x7f0000000500)=""/108, 0x6c}, {&(0x7f0000000600)=""/193, 0xc1}, {&(0x7f0000000700)}], 0x3, &(0x7f0000000780)=""/184, 0xb8}, 0x400}, {{&(0x7f0000000840)=@sco={0x1f, @none}, 0x80, &(0x7f0000001d40)=[{&(0x7f00000008c0)=""/196, 0xc4}, {&(0x7f0000000a40)=""/135, 0x87}, {&(0x7f0000000b00)=""/96, 0x60}, {&(0x7f0000000b80)=""/146, 0x92}, {&(0x7f0000000c40)=""/4096, 0x1000}, {&(0x7f0000001c40)=""/14, 0xe}, {&(0x7f0000001c80)=""/21, 0x15}, {&(0x7f0000001cc0)=""/40, 0x28}, {&(0x7f0000001d00)=""/4, 0x4}], 0x9, &(0x7f0000001e00)=""/134, 0x86}, 0x9}, {{0x0, 0x0, &(0x7f0000001f80)=[{&(0x7f0000001ec0)=""/175, 0xaf}], 0x1, &(0x7f0000001fc0)=""/79, 0x4f}, 0x1000}, {{&(0x7f0000002040)=@nfc, 0x80, &(0x7f0000004780)=[{&(0x7f00000020c0)=""/38, 0x26}, {&(0x7f0000002100)=""/185, 0xb9}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000003580)=""/248, 0xf8}, {&(0x7f0000003680)=""/180, 0xb4}, {&(0x7f0000003740)=""/4096, 0x1000}, {&(0x7f0000004740)=""/44, 0x2c}], 0x7, &(0x7f0000004800)=""/4096, 0x1000}, 0x1}, {{&(0x7f0000005800)=@phonet, 0x80, &(0x7f0000006a00)=[{&(0x7f0000005880)=""/4096, 0x1000}, {&(0x7f0000006880)=""/136, 0x88}, {&(0x7f0000006940)=""/113, 0x71}, {&(0x7f00000069c0)=""/56, 0x38}], 0x4}, 0x85}], 0x5, 0x120, &(0x7f0000002540)={0x77359400})
r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_STRSET_GET(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)={0x2c, r10, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@ETHTOOL_A_STRSET_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000004}, 0x20001000)

2.655154087s ago: executing program 1 (id=4967):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x20000000, '\x00', 0x0, 0x0}, 0x50)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r2 = socket$packet(0x11, 0x2, 0x300)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="680000000206010800000000000000000100000a11000300686173683a69702c706f7274000000000900020073797a30000000000500010007000000050004000016000005000500020000001c000780050015000000000008001240000000000500140006"], 0x68}, 0x1, 0x0, 0x0, 0x2002c0c4}, 0x8000)
setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f0000000d00)=0x205a, 0x4)
recvfrom$packet(r2, 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x1c}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x8}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x7}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r0}, {}, {0x46, 0x0, 0x0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x5, 0x0, 0xb, 0x8}, {0x85, 0x0, 0x0, 0x42}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

2.365556248s ago: executing program 2 (id=4971):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000080)={'vcan0\x00', <r2=>0x0})
bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x2, 0xff, 0x6}, 0xfe}, 0x18)
setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4)
sendmmsg(r1, &(0x7f0000005a00)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000540)='\x00\x00\x00\x00\x00\x00\x00\x00', 0x8}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x41)
setsockopt$SO_J1939_FILTER(r1, 0x6b, 0x1, &(0x7f0000000240)=[{0x0, 0x1, {0x2, 0xff, 0x1}, {0x1}, 0xfe, 0xfd}], 0x20)
sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@newtfilter={0x24, 0x11, 0x1, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x74, r2, {0xb, 0xfff2}, {0xfff1, 0xffff}, {0x2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x20000050)

2.134433652s ago: executing program 2 (id=4974):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001800)=ANY=[@ANYBLOB="180000002500010324bd7002ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0)
socket$inet6(0xa, 0x80002, 0x0)
recvmmsg(r0, &(0x7f0000000d80)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000003c0)=""/86, 0x56}, {&(0x7f0000001880)=""/4104, 0x1008}, {&(0x7f0000000600)=""/91, 0x5b}, {&(0x7f0000001740)=""/72, 0x48}, {&(0x7f0000000440)=""/62, 0x3e}, {&(0x7f0000000900)=""/108, 0x6c}, {&(0x7f0000003d00)=""/4109, 0x100d}, {&(0x7f00000001c0)=""/229, 0xe5}], 0x8}, 0xffffffff}, {{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, 0x0}, 0x7}, {{0x0, 0x0, 0x0}, 0x5}], 0x4, 0x2030, 0x0) (fail_nth: 12)

2.036736563s ago: executing program 4 (id=4975):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x3, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff}, [@call={0x85, 0x0, 0x0, 0xf}, @printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x17}}]}, &(0x7f0000000000)='syzkaller\x00', 0x2}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={0xffffffffffffffff, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000002c0)="b9ff03076003008cb89e08f086dd", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000600000085000001000000000000000200000080"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000140)={'dummy0\x00', &(0x7f0000000280)=@ethtool_channels={0x2c, 0x0, 0x0, 0x0, 0x3, 0x7fffffff, 0x1, 0x2, 0xfffffffe}})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x320e, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x3, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff}, [@call={0x85, 0x0, 0x0, 0xf}, @printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x17}}]}, &(0x7f0000000000)='syzkaller\x00', 0x2}, 0x94) (async)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={0xffffffffffffffff, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000002c0)="b9ff03076003008cb89e08f086dd", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000600000085000001000000000000000200000080"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
socket(0x10, 0x803, 0x0) (async)
ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000140)={'dummy0\x00', &(0x7f0000000280)=@ethtool_channels={0x2c, 0x0, 0x0, 0x0, 0x3, 0x7fffffff, 0x1, 0x2, 0xfffffffe}}) (async)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x320e, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) (async)

1.930951303s ago: executing program 4 (id=4977):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x8080, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0x44b, 0x0, 0x0, {0x7a}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x4}}}, @IFLA_ADDRESS={0xa}]}, 0x40}}, 0x0) (async)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0x44b, 0x0, 0x0, {0x7a}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x4}}}, @IFLA_ADDRESS={0xa}]}, 0x40}}, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r2)
socket$nl_route(0x10, 0x3, 0x0) (async)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0x9, 0x4, 0xb47e, 0xb, 0x3, 0xd, 0xf, 0x1ff}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
socket$nl_generic(0x10, 0x3, 0x10) (async)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r5)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x3, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000000000008500000018000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x3, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000000000008500000018000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={r7, 0x18000000000002a0, 0x36, 0x0, &(0x7f0000000180)="b9ff0304000000ffff9e08f086dd5199c6b45aa04b39ec6dbe1f203029afb0072cb932822b9582a4e39a8a463d01bc8e590b0bfe24ae", 0x0, 0x6, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x39) (async)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={r7, 0x18000000000002a0, 0x36, 0x0, &(0x7f0000000180)="b9ff0304000000ffff9e08f086dd5199c6b45aa04b39ec6dbe1f203029afb0072cb932822b9582a4e39a8a463d01bc8e590b0bfe24ae", 0x0, 0x6, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x39)
sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)

1.64078438s ago: executing program 0 (id=4978):
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x8, 0x32, 0xffffffffffffffff, 0x0)
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0x1f, &(0x7f0000000380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x43}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfeff}, {0x85, 0x0, 0x0, 0x86}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x0, 0x40000000}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x80000000}}, [@printk={@u, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x35e}}, @printk={@li, {}, {0x7, 0x1, 0xb, 0x1, 0xa, 0x20}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xf}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x84}, {0x7, 0x0, 0xb, 0x0, 0x0, 0x0, 0x500}}}, &(0x7f0000000080)='GPL\x00', 0x3, 0xff8, &(0x7f0000000780)=""/4088, 0x41000, 0x41, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000d}, 0x94)

1.638962331s ago: executing program 1 (id=4979):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$kcm(0x2a, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000040)=@qipcrtr, 0x80, 0x0}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x78, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2, 0x0, 0x10}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}, @CTA_LABELS={0xb, 0x16, 0x1, 0x0, [0x2, 0x3, 0x6, 0x1]}]}, 0x78}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x58, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xc0}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x24, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x5, @loopback}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x2}]}}}]}, 0x58}}, 0x0)

1.638482169s ago: executing program 2 (id=4980):
socket$l2tp(0x2, 0x2, 0x73) (async)
bind$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'pim6reg1\x00', 0x2})
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=@dellinkprop={0x4c, 0x6d, 0x2ec9b2c728e3c67, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x41001, 0x2e804}, [@IFLA_PROP_LIST={0x18, 0x34, 0x0, 0x1, [{0x14, 0x35, 'pim6reg1\x00'}]}, @IFLA_IFNAME={0x14, 0x3, 'veth1_to_bond\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8004}, 0x0) (async)
r2 = openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000200)='cpu.pressure\x00', 0x2, 0x0)
close(r2) (async)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f00000003c0)=@filter={'filter\x00', 0x42, 0x4, 0x310, 0xffffffff, 0x0, 0xf8, 0xf8, 0xffffffff, 0xffffffff, 0x278, 0x278, 0x278, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xd0, 0xf8, 0x0, {0x100000000000000}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x2, 0x0, 0xe}}, @common=@unspec=@connmark={{0x30}, {0x3, 0x2, 0xfe}}]}, @REJECT={0x28}}, {{@ip={@rand_addr=0x64010101, @multicast1, 0xffffffff, 0x0, 'dvmrp0\x00', 'veth1_vlan\x00', {0xff}, {}, 0x4, 0x1}, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x8}}}, {{@uncond, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@addrtype={{0x30}, {0x60b, 0xe03, 0x1, 0x20000000}}, @common=@socket0={{0x20}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x3}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x370) (async)
r4 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000240)={0x4001, 0x7ff, 0x1000, 0x5}, 0x10)
sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="2c0000001600156f27bd7000fddfdf270a000000", @ANYRES32=0x0, @ANYBLOB="14000100200195120000000000256a95a97c9537"], 0x2c}, 0x1, 0x0, 0x0, 0x620080d4}, 0x24080) (async)
ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r4, 0x8040942d, &(0x7f00000001c0))
pipe(&(0x7f0000000000)={<r5=>0xffffffffffffffff})
close(r5) (async)
r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x61}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) (async)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)={0x30, 0x3, 0x8, 0x101, 0x0, 0x0, {0xa}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}, @CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_SHUTDOWN_RECD={0x8, 0x6, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_SCTP_SHUTDOWN_SENT={0x8, 0x5, 0x1, 0x0, 0x4}]}]}, 0x30}}, 0x4000050)

1.439496934s ago: executing program 0 (id=4982):
r0 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0)
r1 = socket$inet6(0xa, 0x80001, 0x0)
setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88)
setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f00000004c0)=ANY=[@ANYBLOB="01000000000000000a00000000000000ff01000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100"/144], 0x90)
getsockname$packet(r0, &(0x7f0000000280)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x38, 0x10, 0x439, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, r2, 0x9801, 0x802}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x29}}]}}}]}, 0x38}}, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x48, 0x10, 0x439, 0x70bd29, 0x0, {0x0, 0x0, 0x0, r2, 0x1040, 0x4311a}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gre={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_DPORT={0x6, 0x11, 0x4e23}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x1}]}}}, @IFLA_LINK={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x24040044}, 0x4040010)
ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r1, 0x8982, &(0x7f0000000240)={0x3, 'wlan0\x00', {0x3}, 0x42})
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000000)={<r4=>0x0, 0x10000}, &(0x7f00000000c0)=0x8)
getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000100)={0xf515, 0x8, 0x8000, 0xffff, 0x80000001, 0x3, 0x4, 0x1, r4}, &(0x7f00000001c0)=0x20)
socket(0x10, 0x803, 0x0) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0) (async)
socket$inet6(0xa, 0x80001, 0x0) (async)
setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) (async)
setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f00000004c0)=ANY=[@ANYBLOB="01000000000000000a00000000000000ff01000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100"/144], 0x90) (async)
getsockname$packet(r0, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x38, 0x10, 0x439, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, r2, 0x9801, 0x802}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x29}}]}}}]}, 0x38}}, 0x0) (async)
sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x48, 0x10, 0x439, 0x70bd29, 0x0, {0x0, 0x0, 0x0, r2, 0x1040, 0x4311a}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gre={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_DPORT={0x6, 0x11, 0x4e23}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x1}]}}}, @IFLA_LINK={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x24040044}, 0x4040010) (async)
ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r1, 0x8982, &(0x7f0000000240)={0x3, 'wlan0\x00', {0x3}, 0x42}) (async)
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000000)={0x0, 0x10000}, &(0x7f00000000c0)=0x8) (async)
getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000100)={0xf515, 0x8, 0x8000, 0xffff, 0x80000001, 0x3, 0x4, 0x1, r4}, &(0x7f00000001c0)=0x20) (async)

1.381912196s ago: executing program 3 (id=4983):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2006}, 0x94)
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x9}, 0x94)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/uts\x00')
socket$inet_tcp(0x2, 0x1, 0x0)
socket$packet(0x11, 0x3, 0x300)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0xe, 0x0, &(0x7f0000000000)="259a53f271a76d2688f54c6588a8", 0x0, 0x200, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x50)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) (fail_nth: 36)

1.320531211s ago: executing program 1 (id=4984):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000080)={'vcan0\x00', <r2=>0x0})
bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x2, 0xff, 0x6}, 0xfe}, 0x18)
setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4)
sendmmsg(r1, &(0x7f0000005a00)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000540)='\x00\x00\x00\x00\x00\x00\x00\x00', 0x8}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x41)
setsockopt$SO_J1939_FILTER(r1, 0x6b, 0x1, &(0x7f0000000240)=[{0x0, 0x1, {0x2, 0xff, 0x1}, {0x1}, 0xfe, 0xfd}], 0x20)
sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@newtfilter={0x24, 0x11, 0x1, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x74, r2, {0xb, 0xfff2}, {0xfff1, 0xffff}, {0x2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x20000050)

1.319714973s ago: executing program 4 (id=4985):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="b402000000000000791100000000000085000000010000009500000000000000359bb9f43d86b136000000008762000000f3"], &(0x7f0000000100)='syzkaller\x00', 0x4, 0xc5, &(0x7f0000000300)=""/197, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x1}, 0x8, 0x10, &(0x7f00000002c0), 0x10}, 0x94)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="400000000206010100000000000000000417ffff14000780080012400000000505001500090000000500010006000004000000000013001300686173683a6e65742c696661636500000900020073797a3000000000"], 0x60}, 0x1, 0x0, 0x0, 0x4044081}, 0x0) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x7, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="85000000070000006a0a00ff01010000260000000019e1b6950000000000000018100000", @ANYRES32, @ANYBLOB="100000000000002505000000000000009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x1, 0xec, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffff75, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4720}, 0x37) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_CMD_SHOW_LINK_STATS(r1, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x28, 0x0, 0x100, 0x70bd2d, 0x25dfdbff, {{}, {}, {0xc, 0x14, 'syz1\x00'}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x4850) (async)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x4, [@typedef={0x2, 0x0, 0x0, 0x8, 0x4}, @const={0x0, 0x0, 0x0, 0x2}, @restrict={0x0, 0x0, 0x0, 0xb, 0x2}, @var={0x2, 0x0, 0x0, 0xe, 0x3}]}, {0x0, [0x5f, 0x61]}}, 0x0, 0x50}, 0x28) (async)
ioctl$sock_ifreq(r0, 0x89b1, &(0x7f0000000240)={'syzkaller0\x00', @ifru_names='veth1_virt_wifi\x00'}) (async)
sendmsg$NLBL_UNLABEL_C_STATICADD(r2, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000540)=ANY=[@ANYBLOB], 0x98}, 0x1, 0x0, 0x0, 0x4040080}, 0x1) (async)
r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000008c0), r2)
sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000140)={0x14, r3, 0xe2c40cf0776ef37, 0xfffffffd, 0x0, {0x5}}, 0x14}}, 0x0) (async)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newlink={0x60, 0x10, 0x401, 0xfffffffe, 0x4, {0x0, 0x0, 0x0, 0x0, 0xe59bca127d81b872, 0xc574450d1af3b5bc}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0x14, 0x5, 0x0, 0x1, [@IFLA_BRPORT_PROXYARP={0x5}, @IFLA_BRPORT_FAST_LEAVE={0x5, 0x7, 0x1}]}}}, @IFLA_IFNAME={0x14, 0x3, 'bridge_slave_0\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x20044010}, 0x4840) (async)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r5) (async, rerun: 32)
r6 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) (async)
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async)
r8 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r8, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) (async)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', <r9=>0x0})
r10 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r11=>0x0})
sendmsg$nl_route_sched(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0x7fffe, {0x0, 0x0, 0x0, r11, {0x0, 0xffe0}, {0xb, 0xb}, {0x4, 0x1}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4048800}, 0x400c000)
sendto$packet(r8, &(0x7f00000002c0)="05031c00d3fc140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x0, r9, 0x1, 0x0, 0x6, @multicast}, 0x14)
socket$packet(0x11, 0x3, 0x300)

1.319289013s ago: executing program 2 (id=4986):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x4, 0xe4}]}, 0x10)
socket$packet(0x11, 0x3, 0x300)
bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
r1 = socket(0x2b, 0x1, 0x1)
setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x22)
connect$inet6(r1, &(0x7f00000001c0)={0xa, 0x4e1f, 0x2, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c)
setsockopt$IP6T_SO_SET_ADD_COUNTERS(r1, 0x29, 0x41, &(0x7f0000000280)={'raw\x00', 0x2, [{}, {}]}, 0x48)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
ioctl$NS_GET_NSTYPE(0xffffffffffffffff, 0xb703, 0x0)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0)
sendmmsg$inet(r0, &(0x7f0000001dc0)=[{{&(0x7f0000000040)={0x2, 0x4e21, @empty}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000140)="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", 0xfa}], 0x1, &(0x7f0000000640)=[@ip_retopts={{0xa4, 0x0, 0x7, {[@cipso={0x86, 0x15, 0x0, [{0x0, 0x5, "348d03"}, {0x0, 0x4, "c80d"}, {0x0, 0x6, "69abcfed"}]}, @timestamp_prespec={0x44, 0x24, 0x9b, 0x3, 0xa, [{@multicast2, 0x800}, {@remote, 0xff}, {@private=0xa010101, 0x3ff}, {@multicast1, 0x4}]}, @noop, @rr={0x7, 0x1f, 0xbf, [@local, @multicast1, @private=0xa010101, @broadcast, @dev={0xac, 0x14, 0x14, 0x3f}, @local, @loopback]}, @ra={0x94, 0x4}, @ssrr={0x89, 0x3, 0x73}, @timestamp_prespec={0x44, 0xc, 0x57, 0x3, 0x4, [{@local, 0x4}]}, @timestamp_addr={0x44, 0x24, 0xb0, 0x1, 0x2, [{@multicast2, 0x7}, {@private=0xa010101, 0x7f}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x2}, {@rand_addr=0x64010100, 0x3}]}, @end, @noop]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x2}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @broadcast, @broadcast}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x5}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @remote, @dev={0xac, 0x14, 0x14, 0xc}}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x8}}, @ip_retopts={{0x48, 0x0, 0x7, {[@noop, @timestamp_prespec={0x44, 0x34, 0x31, 0x3, 0x1, [{@loopback, 0x8}, {@rand_addr=0x64010100, 0x8}, {@broadcast, 0xfffffff9}, {@empty, 0xfffffffc}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xffff}, {@remote, 0x1}]}, @noop]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x20}}], 0x190}}, {{0x0, 0x0, &(0x7f0000001cc0)=[{&(0x7f0000000840)="ebfca0cf95422ed852537ab68bf3fda2ae557481ae8b14fde0bd1ff939491856933ce20f16ab145cace30736c1d7756d1cf7b77a048ce916bdb0e2c9bd4ac529dce84fa249a689f7ff947533901433d39ca7e9f364a6a6db1d483a24", 0x5c}, {&(0x7f00000008c0)="5d916ccd2ef5cb8cb3be1db5954eeb29eb466c02274b23b4663bc706acb591cd51b0ef2064e6cf5972611952c85c680cb63142b246617bbad5de55c500aff0ca005705f2e2384f038d8edb5a41c2fa7a9f3457488ffb99e983e09066b65d8154e856be885f04e88ba7f35e2d234d5c9b7d074f50088f3688b26e740ada8b1bd26dd3c750755a3e5f913a3d7b3dacc0075e9e498032601d5fc70c24d4bb4e64d2f57af473d0087c6d644c428619f97b8819fab5f7341fe135f9c5cf882bae8ee39f4de2", 0xc3}, {&(0x7f00000009c0)="11660c93728ee598e7ed91f0c581c5f9df8e20bc9c7f65205e8b7d716294ec0490c330fb66c334e28e5508c1f87dd60b5c11ca192dab9ea868ecd937f184fd35c6d2d3aa8c1e7f88bb4b47ca18c2b6e2d1741f76d16c5a4b1c4c1e20d1d27ddbce3f92ab0cdfcd7f64868025255e5827331e2f9506818cfbdd006d77f09d1afb4726035403b04f0afb493ec1e8ded78e5c2f0540d2f337b37b10a9e1a886880eae1193096fb47512539dcbb5bcc0cc2416e17bd9c9da5b0547c8b28b7a752a074e135a1e73ff8276310467ec6f09ede2cbf1d1f497c58788f3ca4e73259a5dde453f1ef8b1e2545f1886037ab508de5074a7be8e23feca98326d6ebf3357c256cb2cdd72fe542a90f95d52baaa67c81603ed44b3f4f59c7b94237aa9f3649b3ab5ef49e1d8a8c7835d0b65c2619a446cf40e9f1200729e9e09eb400462c713183a34631e94e33791a50b9b2eac73338849c4b390c98557c9a011df83ac27d861f62e21037d072d31c18a6916d74bd609c5e4fd438dd59d17458e636975c8a7ffb02b1ec30b3a11a12fb19c1461e302c1a223434b8f27e143cd58dbaa8e16d4a31b0fed22f6684122dd675615e4d0d1abc2154c5b0f1c6a07e0a54dbad620a79c7d8942942b9236c412fefaf53ec1d7a5c223f2afe374af7241325b6cdf51423ce6597fad4fd988820292ffa6bcb496f7c7c81faf5e6840d5b300dcc102140dc7db1c9b1cbc464b2634af75be0f3be7f9de7e9b517dd8df456267301a0a20c107769428822f32a25d82f2c1c42a25c4b8997cfb6eb694f72b555385593531a3c0da595be1991a6c1a2723e5f6fc97e7f44d34fa33a6bf92c67445597ebf3a1145ef5658251eaf1e3fb73202a5057220b8f017eabe82e3288cbc3efbcbabc45067cdf6e06307c2b72c6c4d505be74bd304107b444b6fa9e27a8e08e88d995e19c89475cecf690faf9d8f1523f36d45f9a5173b85bf8f50b35e6efc8727e861ac9feb55c1583adc9bcf8d61ca72192e48dabaad1e4915b88e14c47f75ea9359bc1eccc578f560337eaabc7ff3434bb7e09e6ceb9a52a0868c0492ac74a82c44c344085ad18e63d47b93727eb69881ce3824a857f565f6184c93eee73bf0343a42350c399c0f51ff4f1149c953a024f8038df84888c048b6bb9527d166e75e87030af8b875ad500af310b159cd3b621481176898e77fe063b39e8795e2184dbfedb3212ba6f887d14f8b23c7ff04e588511432340a4d1abb2bb26232dbf509a0acd5a739f9c3664966859721005c66ef3145766c08e0d6a560c117ad52b223fa640e397499d82fa73a888629369500cde7628c47069855c1d850af6f99cf1a46a7f0d4393e03c6bc8174e8d7135f73be6a7184e8984e2ed8f3e15df1ca3f3ac02df805d87129842759bdc66094d7ce951a5f420f10071d41764c03972a825a1f5afbae5a0e90bae2a86a6be8c15878fef0855a54b5e0aacddb5b38bf398cb9296bb6adebeb21f82ddc5e91e9dd79b10be00559ffe97f8300719044a53633f16635e9e678f5d799d038bd282777239cf47fcbd31767d31690dfa6118e1acf4f70db5d3404b4a4c62c8ae74dfd54f25335b8cc31bc7c24d16716b2f254e10a24a68fc7a95bb6397fbd18ada524f6051bce594652a2a8af575d75bcd91d7b368d09b00b9ed24da1fa42c087e5fca44e490befb14234a74097c26daecde0a7f6cf1212d7b9e46c244874009083b1159e413bfe9707bef7c1e7ef493eb3e4a3be24c4263767644b9f11e604602eae4db18b0ec53d734a24e1d266a2e7c6afee2e36e75dafd410df7a16ccdf0661268a98c853c5723634199de06e401767f310a9ba249edcdb1badf0bd469d69bd033252bb01032563cc3401d98642a0dd07d370d26e2aaccad2f449b201aa2d1037e881ead105a1d580ca965e26d4cb699ccfa4675f398726a4a6cba791245225c7269c9e889483b4296aabbc12bf79cf88ed882d966ac505cdcbce232079607b46f4050227338810321bfef03a52407f0c0b548d1fd851fec750f8b94a6e2715a658de4a0f2119a485512d05ade0481dc815f10d37be10dde92c2e11e74e9176cde48c7e2026450bc33187e0732663c25ea71e3fee11a5d101825d0b4e75e060b4400aae55099da37044224571a71b0e806170acef1cfeb10d2254880def2811fd44effb1d4aeaf6daa9353cef1d8e76faf6a5de6f4399ab7438e05a62e228ef7a538368249522c4736adbc8b128fa5a87436d13e8fa09fed5f6b9293344080172dea205edcd6cbcdbd9118b294eaec53aba42a044cdb4fce3108578069040b32bf547a258e493dcdc85509983ec5d125f54e0c5093f416fa04b62d998705062ac029f930d9cc4c4ee4d4fce95b0bd05b179e66c37111a00050ab4ce29f87a68f62fa8490deaab69669b668999f17fb53076a84e266c551e592a175a8f952e4571bb6926c503efcd5a0dfd96289941e557d709330ee8d0a1c1fdb144f920cc87b964c2ec9834634879b0d9bb810b4efddceace135f61a76ff1123f6406f98d18b2ceaa7b9ba15f32594eba16f5bcbc08b8f313010ef404cf63fff1a93d80a0408b9937e0dc064b58a2361fcfa3a1960c933877488f5cfd8710137bc1cc1156a9a839ce7bd8266e5422b6c91fcb1b0ab7efa0148a639da27d9c56f0de6a30b0d450d2829666b703e81581f1f4b81ef834c4d5af6c4134bfae89cc429736ecaa6044b110e2c92fa20ea4a124e81b394e57361cd50dbeba6697b938005179c2c0f5ee3363b872d9e69acb9b68daa3f46217379b9707829410500f3143f7aeec1647dccd1431e2aa207f8905e62a190864b733fae8ff918b09bc9828311e0f891588da5cd9316697f802bcbfeeec973a9fd9930ef2e1c5ea332b9872692429a820f556ba35dd3579062dc01f17ec454e17562da4dbe23aac7e485f8760a26586328aed457234285400c801ebe064cfa042ffe7a9d826f282d74cda00416d4484014a4d9de7cd512c006dcb3259ed69e820d70a18e6be98d7d87c76763ed60ff42c08fbdf9c32d44d937d26d192e0fcf9a7abcaf6b1f2daff627821f6db54d7e10d7287483dd40263f933196595f4bf314732a4b1c5f9ddd32d77045dcb572d233ac036d822c3db2a764271cac4299f2788fbaf31d4a88526d5caab51136e6be4a88d0c7f3df0ec1571ecd660cac6e40bfe759cbd921e702419c0caebde7e9a696b11b9d28df59b564ff80ae7f6c6cecc8fc701c1c911428197fd0c718e17e512a296093b57ffcb705399c7fffc0315a85e516bfe095b4a8a985f57d879a7827493891196cba1e52979d8565c1d883ca66c8961f678811cf8f5c1c5b230d9849c28fc64a996715b55ca51fdb4bbc2789382dd341bb1462ff89bf27f0b975fe7f600d2a6b594815ff70931ca318d3392cbfce4fb0fe0aa27d81df77d177acf609c39324402d68df8265805ae40c67ff56deda0abff90cd31ffea09479426620516daef6b732d9e1f4b27502ecd7d967238db2a604a6385607da8129961a92e5a4ffcd8ce32c73a60880feb4b9c45cc8c63186d62bceb7e25acc4fbb919f700b38e6c4327aca05c4d1333bd62efd4f9b7e8c1a12d8edf4baf02ed09300a386f898fc17dfa65793bea291b6399754c310c4729d931a143d994dcc162cb0af7aaef2bf03b1e8030ec056a0921643d0292b0e62bc783f9965c2ceee61200877b2d12512e47e63b28df1815fbb281b49fc7132476bb0a578a5b5c8e8163c367d8e46b9988d8986af9e6c035255c1297f8ddadfe4c2e778297ce2dde4068b92ad3f2bac456ea296e4309fe27a11ee25d7c4a70a39c20dc1d28c910d0733205f0ae0a04f6b73b3d92cde1f9316cb63ca082904a25eee4085131c675f8c79ec66ca48c8b9f40d609fc7d38d3f3facfe32c41a52801fbc6ce7f24a13ac30030e226f01dad9ad69fb5a090ede21edfdd604e0db731fac010f5eca57d2f7a8b371a2d46011df2a8f77a4f51ba7626455ed3f433d897118a71afcf0efe61c0f3c7b4ade4b816b5d536586f912fef06c997c295d1dbb5eea18cf8b19ea0101e2bd40c43bb9cfc1bf7e49911ef32b37ce6f0faf74d49f9a1193008af4c6b60b01307230fcb84dab6bb7ff7625656ccaf284863bf6aed8dc9ebf4d7a1c5437058957d348b3e7a5141875ec542247cf8a7b796c5d7b30f99274eb7e1a2f06001f4e866d1123700e6989f00c9728e841eda2170e7c1b3279e86d4ec57efd9fcda9424ecc2d30069874bf894999cd391be7e2991d054a0365887833ce6eaa7a410f0eb78e75dfca142613440c9a50c1dc892c8af70a8a6e68a9b3b819e456dc1eccd27277286b112ce0bea2c83228ac5c857cab90597c4b939f81c0842ded5b1381f39dec07d238e2893ea58a377096e8770ac3e64fa79701c2e2238f244eeb7dbb30182b0ba95846a2231c838980decb344db8ec3e03c7385bebd2572785c9f35a18517fa3366d7d9ba1f149582ea37947c13ac7d7041d8cc0390ed213a3ceb328d12f3525a6a5a197d040974078dcbae7a79faba371eef617c080a585b9f506bdeb9b81d4004c561c86e34f209810975fca66a1a71da4a255d53aa5754ceea12a03ee4d7bfa61fc1265f6d5650d59932fff13683bab1ad67d37a6f16316b016ffee7e2bca3475afbae72adab2af3a6ccb10fcdd563a86c45de82105df26e1ced3bc5cea01fb3aadd42d679146b2766f3598464c7f417fc38bcf0f27eb5e9ffbd8ff69125aa234f5879cf2605bf16a8a533ee1c0b02234c8f2359b8d7c819433188a18e655517270bf2cdd7d88231d1d5bb9161d1bd72c77f2b3226b5de153d663e7bf6bc0ae259652db53875c433d3c67aff590b2e0bfee8632bcfe3a4814cf78843c7596128578da13ae85db3692bf1fb24d58824351f48ba09fdbb13a89ee9da4e853d76d41b0b5961a21b478e52cd52ceb3af6b8afd677af877e43e74e1b98804ca79e6f5b401e1dc4a0daeab9a9a3be8a1a442ad33e8ac1a370f1c9445f2c87c26c1c23502efef323fb23bad63a82794acb96fb3e0824965534f9b8bf59ab518e1e00c648e04e4df4c83ec768df70eabac8f54465130b12e2d68ed6801fb17454638c75d9e4731518a8f5246a77ee721c6e6c5e07cd7dcb6b510ad64269990abd67a07a365adc364235ee4e6e1d6f93712370b3ba1c246746c1d46441e9efde203e882d041d36958b64940a4de9431f7818d80c41c528236f7164a756bf3ff59c0d72fbc3491d2bccf46ec1208bda4c6a8c1d3d24485afd92c2d4c6a44def37ed5901ea9a0417a834295c8ff5be2c56811667aea59d9c97ed41b78e7c3f35369c9e6164263b8878e8efacf75095ecc35813bbabec1b891cffd85499ade28ad2f3bfb0e9dc7b1edb68f3f9de743c06bc2375de0b1967ff8fa8a9a518b194261dfb2edbe3514a8f07e585cd0a400f2411f3352ba578aeb588f37a151d6892d36f3836c36730877901f857e3d879a01ec4dc801e975c572c1a168bbfb53b6a665cade6a2d20dc2a498961df045330d8a95e80392273e94430d4c115cc01d31c9bc8d831eab618e499bf88d845ad37772261aaf7ff7e09fdc35cd66b3240626d8bc31d2bb1d01d9621a83cb72cf31b9fe21c65c2fa7b4c58eb8b94985f3043905e332cfdd9fbdd375387b2af5e1d3f0070544f9202e628cb74a03821ab05669a5ebb241b49d44f878e01f4984e4cad3ef3ac75f7f2142ac7e45671327b1b6d91a1948fe363124c63f27a2cb0ee748cda4d83b85f312ee581bbeb71a3e73cd11d0ef0", 0x1000}, {&(0x7f00000019c0)="fbbcefe09a16d229a3596b10158e1d77bb9d8fa1686296d1b25d89f70c981a476f586cc8a39ce54cec71c416d797c51a69", 0x31}, {&(0x7f0000001a00)="c72ea1138379627e120f8b36eb65b4a40053a3695ffcdd3b12844e1d0da226909dd9fc6bf9eee5f18a3e8d9eb178cd237c57ad8b5af8e2c848582c783be7ca12c727764147a94fbd699972559dc63a4e4eec29b1dabe498f51a9e20c2da7f94cd6b9e91b538dac4ab8966c665f290fbc0ee9787e40063dc8716a37397bbe23abc0a4f8f37dbb3de2733dd26343b992232be9", 0x92}, {&(0x7f0000001ac0)="9a9891e049a5df6526d1be86183e0eba3fad98b383a4b326a5fd83b39c5e4483d912574a5662b5a898fb3c1fa7791b33537f582213d608d1705f04fd813aa3421f968620577b988bd5866eb4b58fb9ec97acd4dafca460db73241d2f62310cda102abe784753d90928e93bc628e5802a141ff352d3a662e11b496b2106cc895643e525b670ef3ccc6b", 0x89}, {&(0x7f0000001b80)="9ba42f82a15ebced00428332b693a4e8f9a9a16beb2f0425dcf9e4289dd05d5a1ea98414882fd54bb58e9f80b277", 0x2e}, {&(0x7f0000001bc0)="65fedc48959c866a82e81a0f88dbb70ae77c688024146ebbd6032c360acaf1b9525ca206a1a254ee515f57e33399eaa52bf5de00"/69, 0x45}, {0x0}], 0x9, &(0x7f0000001d80)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x9}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x8}}], 0x30}}], 0x2, 0x42054)
sendto$inet(r0, &(0x7f0000000580)="17", 0x42e, 0x40000, 0x0, 0x0)

1.182465823s ago: executing program 0 (id=4987):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xd, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="6b0ac4ff000000005110ce01000000000000000000c118edca9732d38d9e9f71bf3dbe3a2f739918cc006f824608827a938c2ba424a15cc7c356c5dd4b0c95dcde7877135b72bd4a5f02deecf8de68798cfd1a954e90dcfa4b8d0f0493750c5ae13911e462bc304c32c5f013fa012859062bd038a5dfdd7624bdc9d551f3d1dd9f6e3b65675c4f28678284ec9eecffbc868b5fa2708307b87a49ee48848e10fbbd8f2a5c41fdb1caa6fba2a14594c1c0a3d3e0000000"], &(0x7f0000000480)='GPL\x00', 0x9}, 0x94)

1.132316557s ago: executing program 3 (id=4988):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00', <r2=>0x0})
syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) (async)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_CQM(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)={0x1c, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5c0050a40206030000000000000000000700001a0c000780080012400000ffff05000100060000530600050005000200000005000400000000000900020073797a310000000016000300686173683a6e65742c706f72742c6e657400"], 0x5c}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) (async)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5c0050a40206030000000000000000000700001a0c000780080012400000ffff05000100060000530600050005000200000005000400000000000900020073797a310000000016000300686173683a6e65742c706f72742c6e657400"], 0x5c}, 0x1, 0x0, 0x0, 0x810}, 0x20004000)

1.073695583s ago: executing program 4 (id=4989):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000001140)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3c8, 0x1b8, 0x1b8, 0x278, 0x1b8, 0x360, 0x3f8, 0x3f8, 0x3f8, 0x3f8, 0x3f8, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x4, 0x2, 0x0, 0x4, 0x4, 0x2], 0x1, 0x3}, {0x3, [0x2, 0x2, 0x0, 0x0, 0x8ac6c1154ed07496, 0x5], 0x4, 0x1}}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffd}}, {{@ip={@multicast2, @rand_addr=0x64010102, 0x0, 0xffffffff, 'wlan0\x00', 'veth1_macvtap\x00', {}, {}, 0x11, 0x0, 0x64}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x11, 0x8, 0x2}}}, {{@ip={@multicast2, @rand_addr=0x64010100, 0x0, 0xffffff00, 'lo\x00', 'vlan0\x00', {0xff}, {0xff}, 0x62, 0x2, 0x4}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x10, 0x6, 0x1}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x428)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
sendto$inet6(r1, &(0x7f00000001c0)="2ae0e710", 0x4, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x1c)
setsockopt$inet6_int(r1, 0x29, 0x33, &(0x7f00000000c0)=0x1000006, 0x4)
recvmmsg(r1, &(0x7f0000000d80), 0x4000000000001e9, 0x10162, 0x0)
listen(r0, 0x0)
setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x8, 0x4)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000180)=0x3, 0x4)
bind$inet6(r2, &(0x7f0000000240)={0xa, 0xfffe, 0xfffffffd, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x5}, 0x1c)
bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c)
listen(r2, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x4)
writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323b470c45b45602067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03a04000800ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1)
socket$nl_generic(0x10, 0x3, 0x10)

1.071831664s ago: executing program 1 (id=4990):
r0 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x200000c0, 0xffffffff, 0xfffffff8}, 0x10)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="2c0000001a00110029bd70000000000002"], 0x2c}, 0x1, 0x0, 0x0, 0x20008000}, 0x10)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={0x1, <r1=>0xffffffffffffffff}, 0x4)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000340)={'ip6_vti0\x00', &(0x7f00000001c0)={'ip6gre0\x00', <r2=>0x0, 0x2f, 0x0, 0x81, 0x7, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}, @remote, 0x8, 0x80, 0x81, 0x7f}})
r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380), 0x4)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r4, &(0x7f0000000100)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r4, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1e000000ff0f0000050000000100000002000100", @ANYRES32=r1, @ANYBLOB="0500"/20, @ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="0300000000000000030000000800"/24, @ANYRES32=r4, @ANYBLOB="1a611b4c2a6ee6d168c989016b3db5605da8e94d9d3397530e7ddb08657ffe97d5815a12b7336659865839a5583150e94f76c6ca1b6706493a67004211a1cca321b40d172e29209c616a90c06c66a5ffc53f1b75e2870c7d93756cc303b77d29e332c5cd4bd877d459fd00f6d43fa063f783a547a35da0bf64489f9aac4290c6cc6f6e8930d1000000"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020205d0af8ff00000000bea100000000000007010000f8ffffffb702000008000000b7030000ffee0000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x54, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$XFS_IOC_PATH_TO_FSHANDLE(r3, 0xc0385868, &(0x7f0000000500)={<r6=>r1, &(0x7f0000000280)='\'\',{u].]\x00', 0x448881, &(0x7f00000002c0)={@_ha_fsid={[0x1244, 0x3]}, {0x4, 0x6, 0xfffffff9, 0x11}}, 0x0, &(0x7f00000003c0)={@_ha_fsid}, &(0x7f00000004c0)=0x1})
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x30, 0x40, 0x107, 0xfffffefe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x14, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}, @typed={0x8, 0x1, 0x0, 0x0, @uid}]}, @nested={0x4, 0x2}]}, 0x30}}, 0x8010)
connect$inet(r6, &(0x7f0000000540)={0x2, 0x4e20, @loopback}, 0x10)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
syz_emit_ethernet(0x62, &(0x7f0000000580)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd604dd308002c0600fc020000000000000000000000000001fe8000000000000000000000000000aa00004001", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="b002100090780000080a00000042f83eb55e83d8749b00000001000009dd0000"], 0x0)
r9 = syz_init_net_socket$llc(0x1a, 0x2, 0x0)
getsockopt$llc_int(r9, 0x10c, 0x7, &(0x7f0000001b00), &(0x7f0000000000)=0x4)
sendmsg$nl_generic(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x28, 0x2c, 0x107, 0x70bd2b, 0x25dfdbff, {0x4, 0x7c}, [@nested={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0xdd}]}, @nested={0xb, 0x3, 0x0, 0x1, [@nested={0x4, 0x6e}, @generic="c3beb8"]}]}, 0x28}, 0x1, 0x0, 0x0, 0x10000004}, 0xc010)

972.874813ms ago: executing program 3 (id=4991):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)={0x14, 0x38, 0x301, 0x270bd26, 0x25dfdc03, {0xd}}, 0x14}, 0x1, 0x0, 0x0, 0x20000004}, 0x20040814)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000180)={'wlan1\x00', 0x2})
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="44000000fc000000c726e618ccc87a12eaf7e19b208e643c868aa73d4b0973d5f431c8bd22f0f388f5338d329c58e159ae92ef5511263fa3d806cd3128c43090fe3b6a4d9cf05401235b8083c68c47e370f83ff110a520e87269fbbf00af592849535f332bf522f3f547def0cd8239c4ac59908087c6297a1dd5e0094cfe704f87afa258ec66bff1417ef92b846336c2be3fafcc4861831f00"/178, @ANYRES32=0x0, @ANYBLOB="1fa5960d000304002400128009000100626f6e64000000001400028005001d00100000000800140007000000"], 0x44}}, 0x0)

972.194849ms ago: executing program 0 (id=4992):
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x8, 0x32, 0xffffffffffffffff, 0x0)
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0x1f, &(0x7f0000000380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x43}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfeff}, {0x85, 0x0, 0x0, 0x86}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x0, 0x58020000}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x80000000}}, [@printk={@u, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x35e}}, @printk={@li, {}, {0x7, 0x1, 0xb, 0x1, 0xa, 0x20}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xf}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x84}, {0x7, 0x0, 0xb, 0x0, 0x0, 0x0, 0x500}}}, &(0x7f0000000080)='GPL\x00', 0x3, 0xff8, &(0x7f0000000780)=""/4088, 0x41000, 0x41, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000d}, 0x94)

932.667066ms ago: executing program 4 (id=4993):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000100)={0x0, 0x3, 0x10}, 0xc)
r2 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000900)=ANY=[@ANYBLOB="0a00000016000000b30000007f00000000000400", @ANYRES32=r1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000001fa5d21200cbefdf138663879b5ee2f6c2f51cfd5c5c2748658b0ee3e7f89c8f645f12d0e8c29904e73ccad3f2566323e8ba44c2300febc0279413ca7197aa33edfbc35b0ac8d6f289e1500b1202d03fbbfd23acf2692cbbf8ba5b09470510eee9cb8323e1f989166fbaa584dd68c8d37600"/149], 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000003ac0)=ANY=[@ANYBLOB="1803000000000000000000000000000018e441d5e7000000000000000000000018100000a7915c42a88a1a191c38c1e552cf21ac", @ANYRES32=r2, @ANYBLOB="0000000000000000c3000000000000001800000002000000000000000000000095000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000001}, 0x94)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@allocspi={0x1dc, 0x16, 0x1, 0x70bd2b, 0x25dfdbfe, {{{@in=@multicast2, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4e23, 0x0, 0x4e24, 0x0, 0x8, 0x80, 0x20, 0x73}, {@in6=@local, 0x4d5, 0x33}, @in=@dev={0xac, 0x14, 0x14, 0x10}, {0x8, 0x7b5, 0x0, 0x6, 0x9, 0xfffffffffffffffa, 0x200000ffffffff, 0x3}, {0x2, 0x2, 0x1, 0xfffffffffffffffa}, {0x0, 0x6, 0xfffffff9}, 0x70bd2a, 0x0, 0x2, 0x2, 0x6, 0x1}, 0x8, 0x74f}, [@sa={0xe4, 0x6, {{@in6=@mcast2, @in6=@private2, 0x4e24, 0x5, 0x4e22, 0x8175, 0x2, 0x80, 0x40, 0x16}, {@in=@multicast1, 0x4d2, 0xf7b07c621d3cd55b}, @in=@multicast1, {0x45, 0x1, 0x9, 0x9, 0x8, 0x5, 0xfffffffffffff800, 0x6}, {0x9, 0xc, 0x6}, {0x8, 0x3, 0x3}, 0x70bd2a, 0x3503, 0x2, 0x4, 0x6, 0x39}}]}, 0x1dc}, 0x1, 0x0, 0x0, 0x10}, 0x400c8c0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2800000010000108fdffffff00000008fa000000", @ANYRES32=0x0, @ANYBLOB="000000002104020008001b0000000000"], 0x28}, 0x1, 0x0, 0x0, 0x4040000}, 0x8024)
r6 = socket(0x80000000000000a, 0x2, 0x0)
r7 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xc3}, {}, {0xe, 0xd}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=ANY=[@ANYBLOB="1400c917a839ed00004500090004000000fddbdf2502000000eb39fcbf3bd161d452dce0cbd8a17c7e901b61717445c7fe221358a2d5d73392ccbd43dcb8f6e08852340ff50f76c5f28d31199bc0af9d93724b948ef8b28780affde49c926d1d7e83774f9c5dce97e28b5a874ecba3452de4e0ef2c987afad4a23bee304994e2c9f8dd1525e06032cfe6ca6f8ab368f7b675b9b8de5bbb9ad8eb67d414244fd821e8a6d47ef8d9ec6a901c7a3c8fd39c69c16a10f261ff8cb88334f936a1acfe11c7c613d8f412827be274bc97eb541d89753a7716f5d097ee6560756f8cef2673"], 0x14}}, 0x0)
bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10)
connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @loopback}, 0x10)
r9 = socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r10=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', <r11=>0x0})
sendmsg$nl_route(r9, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=@newlink={0x4c, 0x10, 0x1, 0x470bd27, 0x25dfd402, {0x0, 0x0, 0x0, r11, 0x64e90, 0x16ac1}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0x14, 0x5, 0x0, 0x1, [@IFLA_BRPORT_MCAST_FLOOD={0x5}, @IFLA_BRPORT_MCAST_TO_UCAST={0x5}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x400c080}, 0x200088c2)
setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000380)='htcp', 0x4)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000feff04000000"], 0x50)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r6, 0x6, 0x16, &(0x7f0000000000), 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000001c0), 0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x7, 0x4, &(0x7f0000000480)=ANY=[], &(0x7f00000005c0)='syzkaller\x00', 0x6}, 0x94)
sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x12)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="c50a000000000000791048000000000061043c000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xcb, &(0x7f0000000800)=""/203, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94)
sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@ipv4_newrule={0x24, 0x1e, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x1}, [@FRA_DST={0x8, 0x1, @empty}]}, 0x24}}, 0x0)
sendmsg$nl_netfilter(r6, &(0x7f0000000c80)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000a00)={0x210, 0x12, 0x5, 0x101, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x9}, [@generic="7d4c6005b8513044c89a52446a2f5d2139c46877e117fe6ea66d3cbfa0147de38c8e884442395ed1bfe8dc0e150810a07d8e30ed301b977070c90b11b577ff2e83db6fcc7d090c3ec79f0656904b9d1bbafb5894736491936c2096699b3154c436783c0c170775036994a2bff061c2db26e9a7c3a44ac12c85a08bdd73d7221c9bc8fc4e6fe7bcd75a2cd04e0f033302416e58fb158b55d4b2975d7abef01a0786b6fea2e14096", @nested={0x89, 0x96, 0x0, 0x1, [@nested={0x4, 0x47}, @nested={0x4, 0x96}, @typed={0x8, 0x41, 0x0, 0x0, @ipv4=@rand_addr=0x64010100}, @generic="64e4cb050b8a461173b10c36714d791ea510ffbb3df69d4cffc0ad99dae838109cb875b4124e1d2cf72b594193a371b11ee280bb706608b770ae5f9171d5653dfe3bfe437bf6233411b97afa5df9732b3e5891dd298ab85aa28459db319ebe472e74cb34890cd25ce301cd5ed9c51566fcecc0d192"]}, @generic="58899e1ccf5da01434f9c80cb99df02e1c091381489be2d79ecebc003a29240baa66c47d3458a5e613a2fd07ca467d72b3835e47900c3ce9c06999173898255976b74c48e63d14c9eb9e68921412561a941a72929f8589b4dee1d9554b48e60d8ea2682b1e09aec095073a0efadc9d527483a51ff6be37485c020c93e4a34d24826385ed747f19a151e037d2cb12429818f4d5d0fcf9414c94d8814a363c8eff161096eee159ddc9a1a72afa2f38095b3b41a870eb2f418a88fcba0d7bb308d600ff8226424fca03"]}, 0x210}, 0x1, 0x0, 0x0, 0x20000040}, 0x4080)

914.05096ms ago: executing program 3 (id=4994):
socket$inet_icmp_raw(0x2, 0x3, 0x1) (async)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4) (async)
close(0x4)
socket$nl_route(0x10, 0x3, 0x0) (async)
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'bond0\x00'}) (async)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'bond0\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r1, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x3, 0x3, 0xda8}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) (async)
sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r1, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x3, 0x3, 0xda8}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
writev(r2, &(0x7f0000019880)=[{&(0x7f0000000400)="fb", 0xffffff5c}, {&(0x7f00000197c0)="1902eb02d5e5f29e59e1a7caec33eb76d2430da474d87e367f6598d026438b65eda8341073b6752abdcee080c8e1e876b25227c37d7dd79886ce33f13e857c8eda1cecf6ac36c03dbf54e3cb5136da5a33fee76fb3113f8b6700e9e5fc006b8eed665fed48738d59395ad07438c3610ae3976aac75caf2facafa21c25be3c2", 0x7f}], 0x2) (async)
writev(r2, &(0x7f0000019880)=[{&(0x7f0000000400)="fb", 0xffffff5c}, {&(0x7f00000197c0)="1902eb02d5e5f29e59e1a7caec33eb76d2430da474d87e367f6598d026438b65eda8341073b6752abdcee080c8e1e876b25227c37d7dd79886ce33f13e857c8eda1cecf6ac36c03dbf54e3cb5136da5a33fee76fb3113f8b6700e9e5fc006b8eed665fed48738d59395ad07438c3610ae3976aac75caf2facafa21c25be3c2", 0x7f}], 0x2)
ppoll(&(0x7f0000000380)=[{r2}], 0x1, &(0x7f0000000400), 0x0, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=@newqdisc={0x38, 0x28, 0x4ee4e6a52ff56541, 0x5000, 0xfffffdfc, {0x0, 0x0, 0x0, r1, {0x0, 0xfff1}, {}, {0x2, 0xfff1}}, [@qdisc_kind_options=@q_red={{0x8}, {0x4}}, @TCA_RATE={0x6, 0x5, {0x7f, 0x5}}]}, 0x38}}, 0x400c804)
syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00')
unshare(0x6a040000)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
setsockopt$bt_hci_HCI_FILTER(r3, 0x0, 0x2, &(0x7f0000000080)={0x0, [0x80000000, 0x1], 0x9}, 0x10)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000002700090025bd7000ffd3008001000000080001"], 0x1c}, 0x1, 0x0, 0x0, 0x4000811}, 0x4000)
unshare(0x8040480)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r6 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) (async)
ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}})
write$tun(r5, &(0x7f0000003240)={@val={0x8, 0x800}, @val={0x0, 0x0, 0x2, 0xe7b6, 0x14, 0x2}, @ipv4=@tcp={{0x5, 0x4, 0x0, 0x2c, 0xfc0, 0x68, 0x0, 0x3, 0x6, 0x0, @private=0xa010102, @multicast1}, {{0x4e21, 0x4e28, 0x41424344, 0x41424344, 0x1, 0x0, 0xa, 0x10, 0x806, 0x0, 0x8, {[@md5sig={0x13, 0x12, "570ae7f0b905a456f064db0300ffe61e"}]}}, {"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"}}}}, 0xfce)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003d00000095"], &(0x7f00000000c0)='GPL\x00', 0x1}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=@base={0x12, 0x4, 0x8, 0xb}, 0x50) (async)
r8 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=@base={0x12, 0x4, 0x8, 0xb}, 0x50)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r7, r8, 0x7, 0x0, @val=@tcx={@void, @value=r7}}, 0x1c)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000580)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x3c, 0x3c, 0x6, [@var={0x4, 0x0, 0x0, 0xe, 0x4}, @func_proto={0x0, 0x1, 0x0, 0xd, 0x4, [{0x0, 0x1}]}, @typedef={0x0, 0x0, 0x0, 0x13, 0x4}, @volatile={0x0, 0x0, 0x0, 0xa, 0x3}]}, {0x0, [0x0, 0x0, 0x0, 0x5f]}}, 0x0, 0x5a}, 0x20) (async)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000580)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x3c, 0x3c, 0x6, [@var={0x4, 0x0, 0x0, 0xe, 0x4}, @func_proto={0x0, 0x1, 0x0, 0xd, 0x4, [{0x0, 0x1}]}, @typedef={0x0, 0x0, 0x0, 0x13, 0x4}, @volatile={0x0, 0x0, 0x0, 0xa, 0x3}]}, {0x0, [0x0, 0x0, 0x0, 0x5f]}}, 0x0, 0x5a}, 0x20)
sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={0x0, 0xfffffdef}, 0x1, 0x0, 0x0, 0x800}, 0x10)

828.282299ms ago: executing program 0 (id=4995):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6)
write(r1, &(0x7f0000000000)="0c000000010001", 0x7)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400000004"], 0x48)
sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c00000007060108000000000000000000000000050001000600"], 0x1c}}, 0x0)
r2 = socket(0x40000000015, 0x5, 0x0)
setsockopt$SO_RDS_TRANSPORT(r2, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) (async)
setsockopt$SO_RDS_TRANSPORT(r2, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r3, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x1)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async)
r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r4, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6)
recvmmsg(r0, &(0x7f0000003840)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000002c0)=""/127, 0x7f}, {&(0x7f0000000340)=""/240, 0xf0}, {&(0x7f00000000c0)=""/96, 0x60}, {&(0x7f00000004c0)=""/77, 0x4d}, {&(0x7f00000016c0)=""/4096, 0x1000}, {&(0x7f0000000540)=""/195, 0xc3}], 0x6}, 0x1}], 0x1, 0x20, 0x0)

817.912451ms ago: executing program 1 (id=4996):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = socket$kcm(0x11, 0x3, 0x0)
socket$xdp(0x2c, 0x3, 0x0)
setsockopt$sock_attach_bpf(r1, 0x107, 0xf, &(0x7f0000000000), 0x4)
sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000340)=@qipcrtr={0x2a, 0x4, 0x1}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000600)="27031600160014000000002f1eafacf706e105000000894f00050003ee0b80558ddbba9b37242d37a518fc9c5be50eaf07c3650596", 0x35}], 0x1}, 0x4)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2})
ioctl$TUNSETLINK(r0, 0x400454cd, 0x20)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0200000004000000080001000100000080"], 0x50)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r2, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
pipe(&(0x7f00000001c0))
pipe(&(0x7f0000000340)={<r4=>0xffffffffffffffff})
r5 = socket(0x10, 0x803, 0x0)
socket(0x23, 0x80805, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$AUDIT_DEL_RULE(r4, &(0x7f0000000c00)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000780)={0x434, 0x3f4, 0x2, 0x70bd2d, 0x25dfdbfc, {0x2, 0x2, 0x3, [0x0, 0x68, 0xd, 0x3, 0x8, 0x3, 0x0, 0x4, 0xfffffff8, 0x40, 0x101, 0x40, 0xac87, 0x8, 0x7, 0x0, 0x9, 0xb0d, 0x0, 0x1000, 0x12aa20a7, 0x5, 0x3, 0x6, 0x7, 0xaf6, 0x8, 0x100, 0xfffffeff, 0x401, 0x0, 0x1, 0x8, 0x2, 0x4, 0x3, 0x1, 0x9ecd, 0x1, 0x0, 0xd3, 0x4, 0x4, 0x0, 0x0, 0x4, 0x1, 0x5, 0xbd6, 0x9, 0x0, 0x5, 0x1, 0x9, 0xfffffffb, 0x8, 0x4, 0x4, 0xb92, 0xc, 0x6, 0x8, 0x9, 0x100], [0x99, 0x6, 0x8, 0x3, 0x1, 0x4, 0x7, 0x5, 0x0, 0x1b, 0x8001, 0x7f, 0x400, 0x10, 0x8, 0x400, 0x0, 0x0, 0x8, 0xfc6e, 0x2, 0x1, 0x7fffffff, 0x5, 0x2, 0x1, 0x9, 0x7, 0x10000, 0x8, 0x80000001, 0x6, 0x7, 0x986, 0x5, 0xa, 0x8, 0x4, 0x4, 0x6aa, 0x8, 0x8, 0x7, 0x1ff, 0x80, 0xbf9, 0x3a58, 0x3, 0x5, 0x10, 0x1, 0x8, 0x5, 0xce, 0x1, 0x304a, 0x8, 0x1000, 0x8860, 0x3609, 0x77, 0x9, 0x10, 0x6], [0x0, 0x5, 0x8, 0x81, 0x5, 0x1, 0x2, 0x0, 0xd1, 0x9, 0x4, 0x4, 0x1, 0x7, 0x7fffffff, 0xfd, 0x3, 0x0, 0x8, 0x4, 0x0, 0x3, 0x5, 0x8000, 0x9, 0xffffffff, 0x2, 0x0, 0x0, 0x8, 0x3, 0x9, 0x6, 0x814, 0x9, 0x3, 0x4, 0x10, 0xffff, 0x40, 0x3, 0x9, 0x5a, 0x2, 0xff, 0x9, 0x3, 0x5, 0xe234, 0x0, 0x1000, 0xb, 0x4, 0xfffffff9, 0x0, 0x7, 0x536183c8, 0x400, 0xff, 0x400, 0x404, 0x4, 0xe1, 0x3], [0x3, 0x7, 0x3, 0x4, 0xfff, 0x6, 0x3, 0x9, 0x5, 0x995, 0x8e, 0x2, 0xff, 0x9, 0x5, 0x1200, 0x7, 0x8, 0x8000000, 0x7, 0x8, 0x80000000, 0x8, 0x7, 0x9205, 0xfff, 0x5, 0x8001, 0x200, 0xb, 0x9, 0x5, 0x8, 0x8, 0x65, 0x0, 0x3, 0x3, 0x3, 0x0, 0x2, 0x8, 0x7, 0x7, 0x80, 0x9, 0x80000000, 0x7, 0xe4, 0x5, 0x80000000, 0x75, 0x9, 0x8, 0x9d3a, 0x2, 0x0, 0xfad, 0xffff0000, 0x1000, 0x11, 0x101, 0x0, 0x9], 0x12, ['[+{\x00', '\xbb\xbb\xbb\xbb\xbb\xbb', 'GPL\x00', '*\x00', '#\x00']}, [""]}, 0x434}, 0x1, 0x0, 0x0, 0x2000c000}, 0x44010)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)
pipe(0x0)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYRES8=r5], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r6], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r7, 0x0, 0x0, 0x0, 0x0}, 0x94)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$XFS_IOC_SET_RESBLKS(r4, 0xc0105872, &(0x7f0000000080)={0x7, 0x3})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r8, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @multicast})
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c000000070000000500000002000006040000000400000000000000ffffffff04000000006100612e7100"], 0x0, 0x3b}, 0x28)
close(0x3)

622.225895ms ago: executing program 0 (id=4997):
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001000)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000001700)={0xa, 0xe, &(0x7f0000002380)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x3}, 0x8, 0x10, &(0x7f0000000000)={0x0, 0xd}, 0x10}, 0x94)
r0 = socket(0x80000000000000a, 0x2, 0x0)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2a, &(0x7f0000000080)={0x20, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0xffff, 0x0, @mcast1={0xff, 0x7}, 0x10000}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108)
getsockopt$inet6_mreq(r0, 0x29, 0x15, &(0x7f00000003c0), &(0x7f0000000400)=0x14)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}}}, 0x108)
r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
ioctl$sock_x25_SIOCADDRT(r1, 0x890b, 0x0)
socket$kcm(0x2c, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x7, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000001d7118aa000000000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x530, 0x1d8, 0xffffffff, 0xffffffff, 0x1d8, 0xffffffff, 0x460, 0xffffffff, 0xffffffff, 0x460, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x1b0, 0x1d8, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'amanda\x00'}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@private1, [0xff000000, 0xffffffff, 0xff, 0xffffffff], @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0xffffff00, 0xff, 0xffffffff, 0xffffffff], @ipv6=@empty, [0xff000000, 0xff, 0xff, 0xff], @ipv6=@local, [0xffffffff, 0xff000000, 0xff000000, 0xffffff00], 0x80, 0x54, 0x3b, 0x4e20, 0x4e23, 0x4e21, 0x4e23, 0x446, 0x39a}, 0x100, 0x20}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0xe, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x590)
r3 = socket$inet6(0xa, 0x3, 0x3c)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x7, @local, 0x9}, 0x1c)
sendmmsg$inet(r3, &(0x7f00000006c0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000001140)="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"/787, 0x313}, {&(0x7f0000000f40)="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", 0x1e9}, {&(0x7f0000000240)="05437c98b91b1455046f57b5fc913814bde2bbeac2104eaea9c9d01a7838d859207067c10aa7352abbdf98e9bf033a3184a11e84639d3b9164d9c5d729f3dd409d39ff041e657c8df4050d43d58c863d5f323f6d5cf367cd939f790732e8d2310e876fcb299cd44b72bda697035b7b475bc35afbb483db39ac864dbee0c9760c22a1d32d83588afd7c994652413b22db76874ca052ef2013317eb7fcc5677e9d", 0xa0}, {&(0x7f0000000200)="f610e61fc81cc3edc86f0500194d27a5a42cf1880b", 0x15}], 0x4, 0x0, 0x0, 0x900}}], 0x1, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000305000080000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000e92000001c00128009000100000c00028005001b0008000000000000000000"], 0x3c}}, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000440), 0x6880, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000480)={{{@in=@broadcast, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r6=>0x0}}, {{@in6=@private0}, 0x0, @in6=@mcast2}}, &(0x7f0000000580)=0xe8)
ioctl$TUNSETOWNER(r5, 0x400454cc, r6)
r7 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet_sctp(r7, &(0x7f0000000280)=[{&(0x7f0000000080)=@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000340)='\x00', 0x1}], 0x1, &(0x7f0000000600)=ANY=[@ANYBLOB="18000038b1e7e56cfc04372600000000008400000005000000000000060000000000000000000000f38300000002000000070000", @ANYRES32=0x0], 0x38, 0x800}], 0x1, 0x4008080)
r8 = socket$xdp(0x2c, 0x3, 0x0)
r9 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r9, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x93e000, 0x1000}, 0x20)
close(r8)
close(r0)
syz_emit_ethernet(0x2a, &(0x7f00000001c0)=ANY=[@ANYBLOB="bbbb80c200000e08060001080006040001aaaaaaaaaaaaac1414bb000100000000ffffffff0000000000"], 0x0)

382.591391ms ago: executing program 2 (id=4998):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2006}, 0x94)
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x9}, 0x94)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/uts\x00')
socket$inet_tcp(0x2, 0x1, 0x0)
socket$packet(0x11, 0x3, 0x300)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0xe, 0x0, &(0x7f0000000000)="259a53f271a76d2688f54c6588a8", 0x0, 0x200, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x50)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) (fail_nth: 37)

104.565601ms ago: executing program 3 (id=4999):
r0 = socket$inet6(0xa, 0x80002, 0x0)
connect$inet6(r0, &(0x7f0000002140)={0xa, 0x4e20, 0x80000000, @mcast2, 0x5}, 0x1c)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, 0x0, 0x0) (async)
sendmmsg$inet6(r0, &(0x7f0000003700)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4001c00) (async)
getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000000)={<r2=>0x0, 0x5}, &(0x7f0000000040)=0x8)
getsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000080)={r2, 0x3}, &(0x7f00000000c0)=0x8)

101.069594ms ago: executing program 2 (id=5000):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000080)={'vcan0\x00', <r2=>0x0})
bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x2, 0xff, 0x6}, 0xfe}, 0x18)
setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4)
sendmmsg(r1, &(0x7f0000005a00)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000540)='\x00\x00\x00\x00\x00\x00\x00\x00', 0x8}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x41)
setsockopt$SO_J1939_FILTER(r1, 0x6b, 0x1, &(0x7f0000000240)=[{0x0, 0x1, {0x2, 0xff, 0x1}, {0x1}, 0xfe, 0xfd}], 0x20)
sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@newtfilter={0x24, 0x11, 0x1, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x74, r2, {0xb, 0xfff2}, {0xfff1, 0xffff}, {0x2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x20000050)

0s ago: executing program 3 (id=5001):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$IPVS_CMD_FLUSH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x14, r3, 0x1, 0x70bd2b, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0xc006}, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv4_newrule={0x24, 0x20, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x10}, [@FRA_GENERIC_POLICY=@FRA_IP_PROTO={0x5, 0x19, 0x33}]}, 0x24}}, 0x48850)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$net_dm(&(0x7f0000001140), r4)
sendmsg$NET_DM_CMD_STOP(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r5, 0x1, 0x70bd28, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20040000}, 0x8800)
socket$nl_generic(0x10, 0x3, 0x10)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000780))
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000400)={@private, @local, <r6=>0x0}, &(0x7f0000000480)=0xc)
sendmsg$nl_route_sched(r1, &(0x7f0000002b00)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000002ac0)={&(0x7f0000001880)=@deltfilter={0x120c, 0x2d, 0x1, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, {0x8, 0x3}, {0xfff1, 0x2}, {0x0, 0x8}}, [@TCA_RATE={0x6, 0x5, {0x8, 0x3e}}, @TCA_RATE={0x6, 0x5, {0x81, 0x6}}, @filter_kind_options=@f_fw={{0x7}, {0x874, 0x2, [@TCA_FW_POLICE={0x840, 0x2, [@TCA_POLICE_RATE64={0xc, 0x8, 0x9}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x7f}, @TCA_POLICE_RATE={0x404, 0x2, [0xe, 0xffff, 0x2, 0x4, 0xffff, 0x866, 0x2, 0x3, 0x4, 0xac7d, 0x1, 0x6, 0x3, 0xee, 0x7f, 0x7, 0x1, 0x2, 0x1ff, 0x7, 0x6, 0x0, 0x6, 0xb, 0x1, 0x3ff, 0xc4, 0xfffffffb, 0x8, 0x5, 0x9, 0x6bc40000, 0x8, 0x4, 0x3, 0x8, 0x6, 0x100, 0x6, 0xc, 0x6, 0x9, 0x9, 0x2, 0x7, 0x8000, 0xffff, 0x7, 0x7fff, 0x3, 0x64b, 0x6, 0x1, 0x101, 0xbf, 0x2, 0x7, 0x2, 0xff, 0x2, 0x3, 0x4, 0x0, 0x6, 0x6, 0x7, 0x4, 0x400, 0xff, 0x5, 0x67fd, 0x8, 0x5, 0x8, 0x3, 0x0, 0x2, 0x256ecc82, 0x73c, 0x3, 0x8, 0x0, 0x8, 0xff, 0x9, 0x9, 0x7fff, 0x2, 0x8, 0x0, 0x10, 0xfffffff7, 0xfffffff8, 0x8fd, 0x2, 0x3060, 0x0, 0x5, 0x10, 0x9, 0x81, 0x200, 0x9, 0x6, 0x2, 0x9, 0x8a, 0x0, 0x7, 0x7, 0x82a, 0x88e, 0x9, 0x400, 0x9, 0x9, 0xbd3, 0x3, 0x8, 0xf, 0x4, 0x4, 0xb3d, 0x9, 0x6, 0x0, 0x80000001, 0x7, 0x7ff, 0x10001, 0x8, 0x7fffffff, 0x80000001, 0x2d2, 0x8, 0x9, 0x3, 0x3, 0x0, 0x7, 0x3, 0x103, 0x40, 0x7f, 0x0, 0x0, 0x9, 0x0, 0x2, 0x1, 0xffffffff, 0x1, 0x4, 0x9, 0x2, 0x6, 0xfffffffb, 0x5, 0x0, 0x9f, 0x200, 0xf, 0xb, 0x94, 0x4, 0x509, 0x10000, 0x80, 0xe, 0x9, 0x2, 0xffffffff, 0x63a7, 0x0, 0x1, 0x3, 0xc367, 0x11, 0xfffffffe, 0x9, 0x1, 0x7fff, 0x4ec5, 0x9, 0xd, 0x5, 0x8, 0x6, 0x2, 0x9, 0x7, 0x81, 0x9, 0x0, 0x6, 0x7, 0x8, 0x0, 0xd1, 0x3f7f, 0xc60, 0xfa, 0x9, 0x6000, 0xff, 0x6bf, 0x5, 0xdd, 0x3c7, 0x2, 0x7, 0x3, 0x2b84, 0xdcb6, 0x5, 0x100, 0x7, 0x81, 0x7, 0xff, 0x5, 0x6, 0xe, 0x6, 0x2, 0xc0, 0x6, 0xfffffffc, 0x9, 0x3e57, 0x466, 0x4, 0xf9, 0x8, 0x4, 0x9, 0x3, 0x5, 0x1000, 0x5, 0x9, 0x7, 0x4, 0x9, 0x558, 0x6, 0xfffffff8, 0x5, 0x8, 0x5, 0x5, 0x7f, 0x7, 0x2, 0xfff, 0x5]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x8}, @TCA_POLICE_RATE={0x404, 0x2, [0x3, 0x0, 0x7, 0x6, 0x4, 0xffffff00, 0x80000000, 0x400, 0x1, 0x6, 0x5, 0x4, 0x0, 0xffffffff, 0x7, 0x100, 0xfff, 0xda, 0x7fff, 0x9, 0x6, 0xf, 0x7f, 0x4, 0xfffffff8, 0x7, 0xdff, 0x0, 0x1, 0xd, 0x6, 0xfff, 0x800, 0x80000000, 0x5, 0x9a5, 0x80, 0x0, 0x4, 0x5f5, 0x10001, 0x3, 0x5, 0x100, 0x0, 0x7, 0x4f, 0x1, 0x3, 0x7, 0x14, 0x143, 0x7, 0x4, 0x8, 0x7b55, 0x9, 0x2, 0x8, 0x7ff, 0x2, 0x8, 0x7, 0x1, 0xfff, 0x7, 0x1000, 0x3, 0x7f, 0x3498, 0x2, 0x8, 0x6, 0xd43, 0x4, 0x8, 0x3, 0x3, 0x7, 0x8fdb, 0x61, 0x1000, 0x80000000, 0x100, 0x0, 0x40, 0x8, 0x5, 0x4, 0x10001, 0x9, 0x400, 0x800, 0xffff86f4, 0x465a60c8, 0x3, 0xa9c, 0xd39e, 0x7, 0x8, 0x9, 0x9, 0x4, 0x5, 0x81, 0xe214, 0x3, 0x6619, 0x0, 0x8, 0x4, 0x401, 0x9, 0x6, 0x3, 0x9, 0x958, 0x8, 0xd1, 0x5, 0xfffffff7, 0x4, 0x3, 0x7, 0x6, 0x3ff, 0x4a, 0x10000000, 0x5, 0xe, 0x3, 0xda1, 0xffff, 0xc00, 0x9, 0x4, 0x6, 0xe3, 0x0, 0x1, 0xfffffff9, 0x948b, 0x1, 0x3, 0xfff, 0x3, 0x8, 0x0, 0x4, 0xdcd0, 0x1, 0xe, 0x8, 0x478459f, 0xff, 0x0, 0xb4d, 0xffffff7f, 0x2, 0x3, 0x3, 0x5, 0x7, 0x2, 0x5, 0x1, 0x7, 0x4, 0x80000000, 0x166, 0x0, 0x3339, 0x0, 0xa, 0x8, 0x0, 0x401, 0xffffff86, 0x7fff, 0x8, 0x0, 0x3, 0x5, 0x0, 0x9, 0xfffffff3, 0x634, 0x0, 0x4, 0x4, 0x6, 0x8, 0x6, 0xff, 0x4, 0xf8, 0x6, 0x1dd, 0x5, 0x2, 0xffff, 0x6, 0xffffac71, 0x6, 0x5, 0xb7, 0x800, 0xe, 0x9, 0xb1e, 0x3, 0x6, 0x0, 0x9, 0x100, 0x5, 0x6d71, 0x20000, 0x2, 0x200, 0x5, 0x9, 0xca6, 0x0, 0xd, 0x71, 0xd, 0x8, 0x6, 0x6, 0x0, 0xb644, 0xfff, 0xa00, 0x9, 0x3, 0x5, 0xad31, 0x100, 0x1ff, 0x94, 0x0, 0x5, 0x7, 0x1000, 0x552, 0x9, 0x8, 0x9, 0x7fff, 0x5, 0x3ff, 0x1, 0x7, 0xb, 0x6]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x80}, @TCA_POLICE_RATE64={0xc, 0x8, 0xff}]}, @TCA_FW_CLASSID={0x8, 0x1, {0x8, 0x5}}, @TCA_FW_POLICE={0x14, 0x2, [@TCA_POLICE_AVRATE={0x8, 0x4, 0x1}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x1}]}, @TCA_FW_INDEV={0x14, 0x3, 'syzkaller1\x00'}]}}, @filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_IP_PROTO={0x5, 0x9, 0x16}]}}, @filter_kind_options=@f_route={{0xa}, {0x8d0, 0x2, [@TCA_ROUTE4_FROM={0x8, 0x3, 0x45}, @TCA_ROUTE4_FROM={0x8, 0x3, 0xf1}, @TCA_ROUTE4_CLASSID={0x8, 0x1, {0xc, 0x2}}, @TCA_ROUTE4_POLICE={0x8ac, 0x5, [@TCA_POLICE_PEAKRATE64={0xc}, @TCA_POLICE_TBF={0x3c, 0x1, {0x3ff, 0x20000000, 0x70, 0x2, 0x4, {0x7, 0x1, 0x400, 0x7ff, 0x1ff, 0x8}, {0x9, 0x3, 0x2, 0x200, 0x8ee, 0x600000}, 0x8, 0x7, 0x10}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x100}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x4e2}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x200000}, @TCA_POLICE_RATE={0x404, 0x2, [0xe6, 0x1, 0x4, 0xff, 0x6, 0x101, 0x6, 0x8, 0x1, 0x91, 0x3, 0x5, 0x3, 0x1, 0x2, 0x3, 0x1a8a, 0x5, 0xfffffffc, 0x6, 0xe825, 0x7, 0x1, 0x8, 0x8, 0x3, 0x7, 0x2, 0x401, 0x7, 0x2, 0x3, 0x0, 0x2, 0xfffffff8, 0x80, 0x3, 0x0, 0xfffffffd, 0xe4, 0x4, 0x8b59, 0xee, 0x9, 0x7fffffff, 0x8, 0xffffffff, 0x6, 0x80000000, 0x80000000, 0xe0fb, 0x1, 0x80, 0x0, 0x5, 0xb0b, 0xfffffffa, 0x3, 0x7d, 0xfffffffc, 0x80000001, 0x1, 0xde, 0xce6, 0xff, 0x3ff, 0x2, 0x8, 0xfffffff8, 0x9, 0x5, 0xb40, 0xffffff80, 0x80000001, 0x100, 0x7f0, 0x9, 0x1, 0x6, 0x2, 0x6, 0x100, 0x3, 0x1ff, 0x4fb0, 0x0, 0x9, 0x2, 0xfffffff5, 0x5, 0x8001, 0x3ff, 0x100, 0x9, 0x6, 0x3, 0x6, 0x0, 0x67, 0x1ff, 0x51, 0x182, 0x7, 0x3, 0x7500000, 0x0, 0x7fffffff, 0x5, 0x1, 0x7fff, 0x2, 0x10001, 0xf9, 0xfb1, 0x200, 0xfae3, 0x8, 0x3, 0x101, 0x400, 0x9, 0x7ff, 0x1, 0x6, 0x3c31a4bf, 0x8, 0x974, 0x1, 0xc7, 0x8001, 0x3, 0xf, 0x92, 0x9, 0x5d6e2bc0, 0x0, 0x2, 0x6, 0x2, 0x80000000, 0x3, 0x1, 0x2, 0x91, 0x8, 0x6, 0x8, 0x1, 0x4, 0x200, 0x6, 0x2, 0x0, 0x1, 0x9, 0x1000, 0x7, 0x736b, 0x4a94, 0x2, 0x3, 0x63, 0x7, 0x2b, 0x7f, 0x4e44, 0xd03, 0x200, 0x2, 0x6, 0x5, 0x9, 0xa, 0xc4, 0x365, 0xcd, 0x7, 0xffffff0b, 0x9, 0x10000, 0x0, 0x7fffffff, 0x3, 0x1, 0x9, 0xfffffff9, 0x2, 0x80000001, 0xfb, 0x5c01, 0x101, 0x4, 0x80000001, 0x5, 0x40, 0x9, 0xffff4df0, 0x3, 0x400, 0xcc, 0x5, 0xd58, 0x44, 0x3, 0x9, 0x3, 0x5, 0x9, 0x3, 0xa4, 0x2, 0x4, 0x9, 0xa, 0xf00000, 0x1, 0x10001, 0x7f, 0x7fff, 0xfffffffe, 0x9, 0x3ff, 0xfffffbff, 0xffffffab, 0x1000, 0x10001, 0x10000, 0x9, 0x3, 0x1, 0x8, 0xf9db, 0xfa0, 0xfffffff9, 0x9, 0x2, 0x8, 0x5, 0x80000, 0xfffffffb, 0x4, 0x3, 0x8, 0x7, 0x100, 0x49, 0x3, 0x6, 0x3, 0x2, 0x3, 0x7, 0xd, 0x1, 0x1, 0x6]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x40, 0x9, 0x2, 0xa063, 0x7, 0x3, 0x8, 0x6, 0x40, 0x4, 0xf, 0x1, 0x1, 0x7, 0x0, 0x8, 0x1, 0xffffffff, 0x61, 0x9d7, 0x8, 0x0, 0x7, 0x350, 0x2, 0x7, 0xe, 0x2, 0x790ba9d7, 0x5, 0x50, 0x7, 0x0, 0x4, 0x7, 0x5, 0x100, 0xa6e, 0x69, 0x6, 0x1, 0x7fff, 0x0, 0x5, 0x60000000, 0x4, 0x51, 0x3, 0x4, 0x7, 0xfff, 0xc82c, 0x3, 0x101, 0x6ef7, 0x6, 0x8, 0x2, 0xff, 0x4, 0x7, 0xe, 0x5, 0x6, 0x8, 0x4, 0x0, 0x7, 0xffffff81, 0x0, 0x0, 0x4, 0x7, 0x2, 0xfffffffc, 0xffffffff, 0x2, 0x3, 0xfffffff8, 0xe05a, 0x6, 0xf20, 0xffffffef, 0x1ff, 0x2, 0xffff, 0xc9, 0x80000001, 0x3, 0x200, 0x3, 0x0, 0x1, 0xdaeb, 0x7, 0xe89, 0x10, 0x4, 0x5, 0x49, 0x80, 0x4, 0x80000001, 0xb01, 0x1, 0x9, 0xb, 0x7, 0xfc, 0x5a, 0x6, 0x8, 0x3, 0x0, 0x6, 0x0, 0x1, 0xedd4, 0x800, 0x739, 0x6, 0xfffffffe, 0x3, 0x4, 0x8, 0x1, 0xd, 0xee9, 0x9, 0xccd, 0xf, 0x9, 0x80, 0x4ec, 0x9, 0x7, 0x8000, 0x9, 0x7, 0x4, 0x9, 0x8000, 0xfffffff5, 0xffff, 0x8, 0x81, 0x7f, 0x2, 0x1dd5, 0x9, 0x1, 0x101, 0xffffff00, 0x401, 0x101, 0x80000001, 0x0, 0x9853, 0x9, 0x1, 0x3, 0x7, 0x3, 0xd, 0x4642992d, 0x8, 0x2, 0xc, 0x3, 0xa2a1, 0x2, 0x2, 0x940, 0x13, 0xf12, 0x0, 0x0, 0x3, 0x4, 0x3906, 0x400, 0x2, 0x3, 0xffffffff, 0x80000, 0x9, 0x81, 0x9, 0x8, 0x0, 0xfffffc00, 0x1, 0x7, 0x1, 0x0, 0x1, 0x64, 0x3, 0x0, 0x400, 0x9ac, 0xffff, 0xad9, 0x2, 0x0, 0x0, 0x2b, 0x800, 0x9, 0x8, 0x0, 0xb, 0xfffff000, 0x4, 0x7, 0x4, 0x15d2, 0x8, 0x0, 0x2, 0x6, 0x435, 0x38d, 0x0, 0x2, 0x2, 0x800, 0x0, 0x0, 0x98d0, 0x0, 0xa, 0x9, 0xfffffffe, 0x77, 0xe, 0x1, 0x8, 0xfff, 0xffffffff, 0x0, 0x7, 0x7, 0x7, 0x6, 0x398d, 0xa, 0x8001, 0x2, 0x2, 0x1, 0x7a4d, 0x161, 0x7f, 0x80000000, 0x2]}, @TCA_POLICE_TBF={0x3c, 0x1, {0xc55, 0xffffffffffffffff, 0x8, 0xf, 0x2, {0x9, 0x0, 0x6, 0xa, 0xb, 0xfffffff8}, {0x9, 0x1, 0x1, 0x2, 0x8a5, 0x4}, 0xcb, 0x3, 0x8000}}]}, @TCA_ROUTE4_FROM={0x8, 0x3, 0xb9}]}}, @TCA_RATE={0x6, 0x5, {0x3, 0x3}}, @TCA_CHAIN={0x8, 0xb, 0x9}, @TCA_RATE={0x6, 0x5, {0x8, 0x1}}, @filter_kind_options=@f_flower={{0xb}, {0x44, 0x2, [@TCA_FLOWER_KEY_ICMPV6_CODE={0x5}, @TCA_FLOWER_KEY_ENC_IPV6_SRC_MASK={0x14, 0x20, [0xffffff00, 0x0, 0xff000000, 0xffffffff]}, @TCA_FLOWER_KEY_VLAN_ETH_TYPE={0x6, 0x19, 0x88a8}, @TCA_FLOWER_KEY_ENC_IP_TOS={0x5, 0x50, 0x2}, @TCA_FLOWER_KEY_ARP_SHA_MASK={0xa, 0x40, [0x0, 0x0, 0xff, 0xff, 0x0, 0xff]}, @TCA_FLOWER_KEY_MPLS_BOS={0x5, 0x44, 0xca}]}}]}, 0x120c}, 0x1, 0x0, 0x0, 0x20000001}, 0x10040000)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r7, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_FLUSH(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x4, 0x6, 0x5, 0x0, 0x0, {0xc}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x800)
setsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f0000000180)={{{@in=@rand_addr=0x64010100, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4e21, 0x28, 0xfffc, 0x0, 0x2, 0x0, 0x0, 0x67}, {0xfffffffffffffff8, 0x400000000001, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffff190, 0x80000}, {0x3, 0x0, 0x80, 0x2}, 0x7, 0x0, 0x0, 0x0, 0x0, 0x3}, {{@in=@multicast1, 0x0, 0x32}, 0x0, @in=@local, 0x0, 0x4, 0x0, 0x0, 0xe000000}}, 0xe8)
listen(r7, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000380)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3d}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @empty}, {{0x4e23, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10, 0x100}}}}}}, 0x0)
r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x11, &(0x7f0000000540)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x300}, {{0x18, 0x1, 0x1, 0x0, r9}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3f}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x17}}, [@btf_id={0x18, 0x8, 0x3, 0x0, 0x3}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0xb, 0x1011, &(0x7f0000000840)=""/4113, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94)
r10 = gettid()
syz_open_procfs$namespace(r10, &(0x7f0000000000)='ns/ipc\x00')
r11 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_tx_ring(r11, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x56401, 0xfffffbfc, 0x8, 0x3, 0x3}, 0x1c)
r12 = socket$kcm(0x2, 0x3, 0x84)
sendmsg$inet(r12, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000000000000000000007000000890704ac14140f0011000000000000000000000001000000fc000000000000001400000000000000010000000c"], 0x68}, 0x0)
r13 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='blkio.bfq.io_queued\x00', 0x0, 0x0)
sendmsg$IPSET_CMD_GET_BYINDEX(r13, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, 0xf, 0x6, 0x301, 0x0, 0x0, {0x0, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4048840}, 0x44800)

kernel console output (not intermixed with test programs):

3809][T20299] mac80211_hwsim hwsim56 syzkaller0: entered promiscuous mode
[  503.836208][T20299] mac80211_hwsim hwsim56 syzkaller0: entered allmulticast mode
[  504.136285][T20318] netlink: 'syz.1.3542': attribute type 10 has an invalid length.
[  504.160510][T20318] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3542'.
[  504.198961][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  504.234219][T20318] team0: Port device geneve1 added
[  504.402299][T20327] netlink: 'syz.1.3545': attribute type 2 has an invalid length.
[  504.494839][T20327] netlink: 'syz.1.3545': attribute type 2 has an invalid length.
[  504.683130][T20343] erspan0: entered promiscuous mode
[  504.723810][T20343] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3550'.
[  504.764748][T20343] erspan0: left promiscuous mode
[  505.249034][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  505.775907][T20395] IPv6: Can't replace route, no match found
[  505.789629][T20395] IPv6: Can't replace route, no match found
[  506.198179][T20424] FAULT_INJECTION: forcing a failure.
[  506.198179][T20424] name failslab, interval 1, probability 0, space 0, times 0
[  506.224075][T20424] CPU: 1 UID: 0 PID: 20424 Comm: syz.3.3569 Not tainted syzkaller #0 PREEMPT(full) 
[  506.224125][T20424] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  506.224147][T20424] Call Trace:
[  506.224156][T20424]  <TASK>
[  506.224164][T20424]  dump_stack_lvl+0xe8/0x150
[  506.224195][T20424]  should_fail_ex+0x40c/0x560
[  506.224333][T20424]  should_failslab+0xa8/0x100
[  506.224379][T20424]  __kmalloc_noprof+0xe8/0x750
[  506.224405][T20424]  ? bpf_test_init+0x9f/0x150
[  506.224479][T20424]  bpf_test_init+0x9f/0x150
[  506.224501][T20424]  bpf_prog_test_run_xdp+0x4cc/0x11d0
[  506.224537][T20424]  ? __pfx_bpf_prog_test_run_xdp+0x10/0x10
[  506.224561][T20424]  ? __fget_files+0x2a/0x420
[  506.224600][T20424]  ? __pfx_bpf_prog_test_run_xdp+0x10/0x10
[  506.224621][T20424]  bpf_prog_test_run+0x2c5/0x340
[  506.224658][T20424]  __sys_bpf+0x643/0x950
[  506.224684][T20424]  ? __pfx___sys_bpf+0x10/0x10
[  506.224725][T20424]  ? ksys_write+0x242/0x270
[  506.224757][T20424]  ? __pfx_ksys_write+0x10/0x10
[  506.224786][T20424]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  506.224807][T20424]  __x64_sys_bpf+0x7c/0x90
[  506.224830][T20424]  do_syscall_64+0x174/0x580
[  506.224849][T20424]  ? trace_irq_disable+0x3b/0x140
[  506.224877][T20424]  ? clear_bhb_loop+0x40/0x90
[  506.224904][T20424]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  506.224921][T20424] RIP: 0033:0x7faca799ce59
[  506.224939][T20424] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  506.224955][T20424] RSP: 002b:00007faca8847028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  506.224979][T20424] RAX: ffffffffffffffda RBX: 00007faca7c15fa0 RCX: 00007faca799ce59
[  506.224997][T20424] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a
[  506.225008][T20424] RBP: 00007faca8847090 R08: 0000000000000000 R09: 0000000000000000
[  506.225018][T20424] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  506.225027][T20424] R13: 00007faca7c16038 R14: 00007faca7c15fa0 R15: 00007ffcbf47fbe8
[  506.225056][T20424]  </TASK>
[  506.433418][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  506.886224][T20446] syzkaller0: entered promiscuous mode
[  506.918063][T20446] syzkaller0: entered allmulticast mode
[  507.410629][T20473] netlink: 'syz.0.3582': attribute type 6 has an invalid length.
[  507.425587][T20473] netlink: 'syz.0.3582': attribute type 7 has an invalid length.
[  507.448006][T20473] netlink: 'syz.0.3582': attribute type 8 has an invalid length.
[  507.479016][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  507.643131][T20484] ip6gre1: entered promiscuous mode
[  507.681463][T20484] ip6gre1: entered allmulticast mode
[  507.930762][T20504] __nla_validate_parse: 10 callbacks suppressed
[  507.930784][T20504] netlink: 72 bytes leftover after parsing attributes in process `syz.2.3590'.
[  508.024309][T20504] xt_CT: You must specify a L4 protocol and not use inversions on it
[  508.519259][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  508.539676][T20530] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  508.563005][T20531] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  508.804266][T20542] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3600'.
[  508.860082][T20544] x_tables: duplicate underflow at hook 2
[  508.897116][T20542] nbd: socks must be embedded in a SOCK_ITEM attr
[  509.559103][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  509.993235][T20588] batman_adv: batadv0: Removing interface: batadv_slave_1
[  510.190013][T20603] netlink: 'syz.3.3614': attribute type 89 has an invalid length.
[  510.205428][T20603] netlink: 'syz.3.3614': attribute type 266 has an invalid length.
[  510.598970][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  510.646547][T20628] netlink: 72 bytes leftover after parsing attributes in process `syz.4.3622'.
[  510.701372][T20633] netlink: 'syz.4.3622': attribute type 1 has an invalid length.
[  510.710213][T20630] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3623'.
[  510.719950][T20630] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3623'.
[  511.262375][T20639] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3625'.
[  511.277703][T20639] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3625'.
[  511.331203][T20640] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3625'.
[  511.447788][T20642] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3625'.
[  511.542944][T20636] bond2: (slave geneve2): making interface the new active one
[  511.559890][T20636] bond2: (slave geneve2): Enslaving as an active interface with an up link
[  511.639046][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  511.704051][T20648] xt_CT: No such helper "snmp_trap"
[  511.712663][T20642] veth3: entered allmulticast mode
[  511.739274][T12170] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 20004 - 0
[  511.747785][T12170] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 20004 - 0
[  511.756503][T12170] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 20004 - 0
[  511.765514][T20655] sctp: [Deprecated]: syz.0.3627 (pid 20655) Use of int in max_burst socket option.
[  511.765514][T20655] Use struct sctp_assoc_value instead
[  511.768236][T12170] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 20004 - 0
[  511.870347][T20661] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3630'.
[  512.047472][T20675] syz_tun: left promiscuous mode
[  512.126972][T20679] bridge0: port 2(bridge_slave_1) entered disabled state
[  512.265840][T20676] gretap1: entered allmulticast mode
[  512.317582][T20683] gretap1: entered allmulticast mode
[  512.377965][T20693] netlink: 'syz.3.3637': attribute type 6 has an invalid length.
[  512.540661][ T4946] block nbd2: Receive control failed (result -32)
[  512.564879][T20702] openvswitch: netlink: VXLAN extension 307 out of range max 1
[  512.688960][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  512.908038][T20720] netlink: 'syz.4.3646': attribute type 9 has an invalid length.
[  513.303613][T20714] lo speed is unknown, defaulting to 1000
[  513.384119][   T29] audit: type=1800 audit(1781719037.876:77): pid=20730 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.3649" name=3A202E31323334352E2E2E2E2028313829207238203D2030783363333130303030300A202020202020323A202E31323334352E2E382E20283835292063616C6C2070632B360A202020202020333A202E2E2E2E2E2E2E2E382E2028313829207230203D203078313130303030303066666666666666660A202020202020353A202E2E2E2E2E2E2E2E382E202836362920696620773820733E2030783020676F746F2070632B300A202020202020363A202E2E2E2E2E2E2E2E2E2E20283138292072 dev="tmpfs" ino=374 res=0 errno=0
[  513.719029][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  513.837607][T20748] atomic_op ffff88808524d998 conn xmit_atomic 0000000000000000
[  513.907550][T20758] __nla_validate_parse: 2 callbacks suppressed
[  513.907568][T20758] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3657'.
[  513.993970][T20758] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR
[  514.029920][T20765] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  514.060671][T20765] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  514.083573][T20765] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  514.126739][T20764] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  514.148509][T20770] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3660'.
[  514.740687][T20803] netlink: 'syz.0.3669': attribute type 1 has an invalid length.
[  514.759032][    C1] net_ratelimit: 1 callbacks suppressed
[  514.759051][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  514.833974][T20806] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3670'.
[  515.119106][T20823] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3676'.
[  515.135536][T20827] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3677'.
[  515.179348][T20827] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3677'.
[  515.212071][T20831] netlink: 'syz.3.3679': attribute type 1 has an invalid length.
[  515.256047][T20827] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3677'.
[  515.288596][T20827] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3677'.
[  515.368110][T20831] bond1: (slave veth3): Enslaving as an active interface with a down link
[  515.377966][T20827] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3677'.
[  515.390301][T20827] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3677'.
[  515.456194][T20831] bond1: (slave veth5): Enslaving as an active interface with a down link
[  515.675280][T20846] IPv6: NLM_F_CREATE should be specified when creating new route
[  515.710619][T20845] vlan2: entered promiscuous mode
[  515.716033][T20845] bridge0: entered promiscuous mode
[  515.735154][T20848] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR
[  515.809078][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  516.159978][T20867] 8021q: adding VLAN 0 to HW filter on device bond5
[  516.336151][T20877] netlink: 'syz.2.3692': attribute type 1 has an invalid length.
[  516.393740][T20880] netlink: 'syz.1.3693': attribute type 1 has an invalid length.
[  516.487151][T20877] 8021q: adding VLAN 0 to HW filter on device bond2
[  516.567522][T20880] 8021q: adding VLAN 0 to HW filter on device bond6
[  516.587600][T20889] IPVS: sync thread started: state = MASTER, mcast_ifn = macsec0, syncid = 3, id = 0
[  516.838976][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  516.920013][   T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  517.276406][T20916] netlink: 'syz.3.3700': attribute type 2 has an invalid length.
[  517.310892][T20916] netlink: 'syz.3.3700': attribute type 2 has an invalid length.
[  517.879073][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  518.136173][T20932] openvswitch: netlink: Tunnel attr 10 has unexpected len 0 expected 2
[  518.919035][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  519.084731][T20959] __nla_validate_parse: 36 callbacks suppressed
[  519.084751][T20959] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3711'.
[  519.257351][T20963] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3713'.
[  519.809234][T20987] nbd: nbd2 already in use
[  519.830623][T20987] block nbd2: NBD_DISCONNECT
[  519.847066][T20987] block nbd2: Send disconnect failed -32
[  519.866073][T20987] block nbd2: shutting down sockets
[  519.969018][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  520.007647][T20994] lo speed is unknown, defaulting to 1000
[  520.026834][T20997] IPVS: ip_vs_edit_dest(): server weight less than zero
[  520.558499][T21030] netlink: 'syz.2.3731': attribute type 1 has an invalid length.
[  520.765624][T21041] netlink: 'syz.4.3732': attribute type 10 has an invalid length.
[  520.779857][T21030] 8021q: adding VLAN 0 to HW filter on device bond3
[  520.826876][T21034] bond3: up delay (136) is not a multiple of miimon (100), value rounded to 100 ms
[  520.879962][T21034] bond3: entered allmulticast mode
[  520.946470][T21038] bond3: (slave ip6gretap1): Enslaving as an active interface with an up link
[  520.998976][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  521.330887][T21063] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.3737'.
[  521.415291][T21071] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3740'.
[  521.584299][T21080] netlink: zone id is out of range
[  521.604262][T21080] netlink: zone id is out of range
[  521.624502][T21080] netlink: zone id is out of range
[  521.639741][T21080] netlink: zone id is out of range
[  521.653406][T21080] netlink: zone id is out of range
[  521.667245][T21080] netlink: zone id is out of range
[  521.684571][T21080] netlink: zone id is out of range
[  521.692539][T21080] netlink: zone id is out of range
[  522.000923][T21111] netlink: 168 bytes leftover after parsing attributes in process `syz.0.3752'.
[  522.156870][T21120] gretap0: entered promiscuous mode
[  522.181939][T21120] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3754'.
[  522.198725][T21120] gretap0: left promiscuous mode
[  522.830903][T21160] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3761'.
[  522.867364][T21136] syzkaller0: entered promiscuous mode
[  522.906824][T21136] syzkaller0: entered allmulticast mode
[  522.913012][T21164] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3762'.
[  523.005223][T21163] pim6reg99999999: entered allmulticast mode
[  523.024039][T21159] tipc: Started in network mode
[  523.050943][T21159] tipc: Node identity c6d7d1aca9b6, cluster identity 4711
[  523.080586][T21159] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  523.202301][T21179] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3766'.
[  523.214726][T21136] bridge0: port 1(bridge_slave_0) entered disabled state
[  523.287381][T21136] tipc: Resetting bearer <eth:syzkaller0>
[  523.300894][T21136] tipc: Resetting bearer <eth:syzkaller0>
[  523.318154][T21186] netlink: 'syz.0.3764': attribute type 2 has an invalid length.
[  523.352954][T21186] netlink: 'syz.0.3764': attribute type 8 has an invalid length.
[  523.367829][T21186] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3764'.
[  523.464549][T21135] tipc: Resetting bearer <eth:syzkaller0>
[  523.533144][T21135] tipc: Disabling bearer <eth:syzkaller0>
[  524.298805][T21237] netlink: 'syz.2.3776': attribute type 8 has an invalid length.
[  524.320958][T21237] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3776'.
[  524.486905][T21243] netlink: 'syz.4.3778': attribute type 1 has an invalid length.
[  524.542212][T21245] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3778'.
[  524.580831][T21252] nbd: must specify at least one socket
[  524.581323][T21243] bond3: entered promiscuous mode
[  524.594031][T21243] 8021q: adding VLAN 0 to HW filter on device bond3
[  524.606809][T21245] bond3: entered allmulticast mode
[  524.856208][T21263] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3783'.
[  525.125294][T21282] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3791'.
[  525.158963][    C1] net_ratelimit: 180 callbacks suppressed
[  525.158979][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  525.218675][T21285] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3791'.
[  525.344438][T21292] netlink: 'syz.0.3794': attribute type 2 has an invalid length.
[  525.372513][T21292] netlink: 228 bytes leftover after parsing attributes in process `syz.0.3794'.
[  525.373871][T21282] 8021q: adding VLAN 0 to HW filter on device bond2
[  525.404930][T21292] ipt_rpfilter: unknown options
[  525.432964][T21280] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  525.443385][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  525.479741][T21280] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  525.494980][ T5949] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  525.509493][T21285] vlan2: entered promiscuous mode
[  525.527199][T21285] bond0: entered promiscuous mode
[  525.539055][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  525.541544][T21285] bond_slave_0: entered promiscuous mode
[  525.590021][T21285] bond_slave_1: entered promiscuous mode
[  525.600663][T21301] netlink: 160 bytes leftover after parsing attributes in process `syz.2.3796'.
[  525.654208][T21287] 8021q: adding VLAN 0 to HW filter on device bond2
[  525.664222][T21287] bond2: (slave ipip1): The slave device specified does not support setting the MAC address
[  525.678220][T21287] bond2: (slave ipip1): Error -95 calling set_mac_address
[  525.838802][T21306] netlink: 'syz.0.3798': attribute type 11 has an invalid length.
[  525.920004][T21308] netlink: 'syz.1.3799': attribute type 1 has an invalid length.
[  525.997197][T21313] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  526.035502][T21286] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  526.046234][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  526.073535][T21313] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  526.084482][T21312] bond7: (slave geneve2): making interface the new active one
[  526.112652][T21312] bond7: (slave geneve2): Enslaving as an active interface with an up link
[  526.138167][T21308] bond7 (unregistering): (slave geneve2): Releasing active interface
[  526.174226][T21308] bond7 (unregistering): Released all slaves
[  526.199087][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  526.213168][T21320] IPVS: set_ctl: invalid protocol: 19 10.1.1.2:20003
[  526.520134][   T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  526.670710][T21315] ipvlan2: entered promiscuous mode
[  526.857447][T21344] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3809'.
[  526.911745][  T808] IPVS: starting estimator thread 0...
[  527.000031][T21352] IPVS: using max 33 ests per chain, 79200 per kthread
[  527.045751][T21344] ip6gre1: entered promiscuous mode
[  527.055496][T21344] ip6gre1: entered allmulticast mode
[  527.094344][T21358] vlan2: entered allmulticast mode
[  527.112899][T21358] bond0: entered allmulticast mode
[  527.125564][T21358] bond_slave_0: entered allmulticast mode
[  527.139064][T21358] bond_slave_1: entered allmulticast mode
[  527.666218][T21391] netlink: 'syz.4.3818': attribute type 2 has an invalid length.
[  527.694037][T21391] netlink: 'syz.4.3818': attribute type 2 has an invalid length.
[  527.911759][T21404] netdevsim netdevsim2 netdevsim0: entered promiscuous mode
[  527.939361][T21404] netdevsim netdevsim2 netdevsim0: entered allmulticast mode
[  528.168423][T21428] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  528.498481][T21446] netlink: 'syz.4.3831': attribute type 10 has an invalid length.
[  528.527509][ T5949] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  528.550383][ T5949] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  528.585787][T21446] team0: Device vxcan1 is of different type
[  528.664225][ T5949] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  528.715524][ T5949] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  528.825414][T21457] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3833'.
[  528.903047][T21457] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3833'.
[  529.077868][T21460] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[  529.210107][T21465] netlink: 'syz.0.3836': attribute type 4 has an invalid length.
[  529.262251][T21468] netlink: 'syz.0.3836': attribute type 4 has an invalid length.
[  529.415742][T21477] tipc: Started in network mode
[  529.442455][T21477] tipc: Node identity 5e4f9a77373e, cluster identity 4711
[  529.487135][T21477] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  529.535942][T21487] __nla_validate_parse: 4 callbacks suppressed
[  529.535962][T21487] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3839'.
[  529.615099][T21487] netlink: 312 bytes leftover after parsing attributes in process `syz.2.3839'.
[  529.637462][T21487] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3839'.
[  529.648519][T21477] tipc: Disabling bearer <eth:syzkaller0>
[  530.102622][T21517] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  530.203510][T21516] IPVS: set_ctl: invalid protocol: 255 255.255.255.255:20014
[  530.282437][T21519] lo speed is unknown, defaulting to 1000
[  530.362200][    C1] net_ratelimit: 3 callbacks suppressed
[  530.362220][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  530.593762][T21547] netlink: 'syz.2.3857': attribute type 1 has an invalid length.
[  530.638404][T21547] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3857'.
[  530.883008][T21558] netlink: 'syz.2.3859': attribute type 21 has an invalid length.
[  530.912001][T21558] netlink: 156 bytes leftover after parsing attributes in process `syz.2.3859'.
[  530.931842][T21560] pim6reg: entered allmulticast mode
[  531.164586][T21571] netlink: 'syz.2.3863': attribute type 1 has an invalid length.
[  531.373900][T21571] bond4: entered promiscuous mode
[  531.392041][T21571] bond4: entered allmulticast mode
[  531.399061][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  531.412729][T21571] 8021q: adding VLAN 0 to HW filter on device bond4
[  531.445256][T21575] erspan2: entered allmulticast mode
[  531.472295][T21575] bond4: (slave erspan2): making interface the new active one
[  531.490232][T21575] erspan2: entered promiscuous mode
[  531.503102][T21575] bond4: (slave erspan2): Enslaving as an active interface with an up link
[  531.535185][T21588] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  531.607783][T21559] pim6reg: left allmulticast mode
[  531.620187][T21580] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3865'.
[  531.626975][T21577] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  531.720154][T21577] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  531.734800][T21577] netlink: 308 bytes leftover after parsing attributes in process `syz.0.3864'.
[  531.762229][T21586] syzkaller0: entered promiscuous mode
[  531.780701][T21586] syzkaller0: entered allmulticast mode
[  532.449133][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  533.488965][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  534.529039][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  534.554632][T21608] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3871'.
[  534.576698][T21608] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3871'.
[  534.604405][T21608] : entered promiscuous mode
[  534.837681][T21623] x_tables: duplicate underflow at hook 2
[  534.850583][T21625] netlink: 148 bytes leftover after parsing attributes in process `syz.0.3877'.
[  534.891960][T21630] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  534.908303][T21625] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.3877'.
[  534.943724][T21630] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  534.945069][T21625] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3877'.
[  534.996752][T21625] netlink: 'syz.0.3877': attribute type 5 has an invalid length.
[  535.010267][T21630] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  535.024957][T21631] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  535.026550][T21625] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3877'.
[  535.055698][T21631] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  535.092113][T21635] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3881'.
[  535.184826][T21625] geneve3: entered promiscuous mode
[  535.202398][T21625] geneve3: entered allmulticast mode
[  535.379160][T21630] net_ratelimit: 145 callbacks suppressed
[  535.379180][T21630] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  535.445853][T21630] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  535.496445][T21630] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  535.523405][T21630] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  535.542591][T21657] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3885'.
[  535.557346][T21630] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  535.569007][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  535.575213][T21630] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  535.587184][T21631] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  535.632869][T21631] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  535.660837][T21631] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  535.833042][ T8912] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 42706 - 0
[  535.854795][ T8912] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 42706 - 0
[  535.887303][ T8912] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 42706 - 0
[  535.924162][ T8912] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 42706 - 0
[  536.296802][T21675] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3894'.
[  536.571672][T21685] netlink: 'syz.3.3897': attribute type 11 has an invalid length.
[  536.928122][T21705] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3903'.
[  537.171932][T21715] xt_hashlimit: invalid rate
[  537.366821][T21722] netlink: 'syz.3.3909': attribute type 1 has an invalid length.
[  537.588427][T21728] 8021q: adding VLAN 0 to HW filter on device bond0
[  537.615423][T21728] 8021q: adding VLAN 0 to HW filter on device team0
[  537.855586][T21728] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  537.884180][T21728] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  537.948394][T21728] veth1_vlan: left promiscuous mode
[  537.970909][T21728] veth0_vlan: left promiscuous mode
[  537.990480][T21728] veth0_vlan: entered promiscuous mode
[  538.019463][T21728] veth1_vlan: entered promiscuous mode
[  538.049312][T21728] veth1_macvtap: left promiscuous mode
[  538.068984][T21728] veth0_macvtap: left promiscuous mode
[  538.085656][T21728] veth0_macvtap: entered promiscuous mode
[  538.104352][T21728] veth1_macvtap: entered promiscuous mode
[  538.142101][T21728] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  538.158740][T21728] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  538.175137][T21728] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  538.186069][T21728] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  538.219222][T21728] ip6gre1: left promiscuous mode
[  538.230289][T21728] geneve3: left promiscuous mode
[  538.275674][ T8912] bridge0: port 1(bridge_slave_0) entered blocking state
[  538.282901][ T8912] bridge0: port 1(bridge_slave_0) entered forwarding state
[  538.320241][ T8912] bridge0: port 2(bridge_slave_1) entered blocking state
[  538.327434][ T8912] bridge0: port 2(bridge_slave_1) entered forwarding state
[  538.386384][T21751] hsr0: entered promiscuous mode
[  538.402028][T21754] hsr_slave_0: left promiscuous mode
[  538.423516][T21754] hsr_slave_1: left promiscuous mode
[  538.458556][T21754] hsr0 (unregistering): left promiscuous mode
[  538.680521][T21765] netlink: 'syz.2.3918': attribute type 1 has an invalid length.
[  540.774920][    C1] net_ratelimit: 28 callbacks suppressed
[  540.774936][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  541.818350][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  542.135021][T21789] bridge0: port 2(bridge_slave_1) entered disabled state
[  542.142948][T21789] bridge0: port 1(bridge_slave_0) entered disabled state
[  542.419328][T21789] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  542.453292][T21789] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  542.580761][T21812] __nla_validate_parse: 6 callbacks suppressed
[  542.580781][T21812] netlink: 750 bytes leftover after parsing attributes in process `syz.0.3930'.
[  542.697893][   T57] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  542.709609][   T57] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  542.743349][T21822] vlan2: entered promiscuous mode
[  542.759968][T21822] bridge0: entered promiscuous mode
[  542.777172][T21833] netlink: 284 bytes leftover after parsing attributes in process `syz.0.3935'.
[  542.792436][T21823] netlink: 'syz.3.3932': attribute type 4 has an invalid length.
[  542.846838][   T57] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  542.855990][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  542.931496][   T57] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  543.051349][T21845] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3940'.
[  543.072635][T21845] netlink: 'syz.3.3940': attribute type 8 has an invalid length.
[  543.073604][T21843] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3938'.
[  543.104776][T21845] syz_tun: entered promiscuous mode
[  543.194823][T21845] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3940'.
[  543.214434][T21845] syz_tun: left promiscuous mode
[  543.587175][T21867] macsec1: entered promiscuous mode
[  543.608780][T21867] dummy0: entered promiscuous mode
[  543.627492][T21867] macsec1: entered allmulticast mode
[  543.633989][T21867] dummy0: entered allmulticast mode
[  543.657772][T21867] dummy0: left allmulticast mode
[  543.686123][    T9] dummy0: left promiscuous mode
[  543.878947][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  544.325072][T21932] syzkaller0: entered promiscuous mode
[  544.343222][T21932] syzkaller0: entered allmulticast mode
[  544.371414][T21927] netlink: 76 bytes leftover after parsing attributes in process `syz.3.3954'.
[  544.475263][T21942] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3957'.
[  544.543865][T21945] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3959'.
[  544.653646][T21935] syzkaller0: entered promiscuous mode
[  544.667417][T21935] syzkaller0: entered allmulticast mode
[  544.736144][T21952] bridge0: port 1(vlan2) entered blocking state
[  544.750162][T21952] bridge0: port 1(vlan2) entered disabled state
[  544.766954][T21952] vlan2: entered allmulticast mode
[  544.783360][T21952] bridge0: entered allmulticast mode
[  544.798052][T21952] vlan2: left allmulticast mode
[  544.813778][T21952] bridge0: left allmulticast mode
[  544.919125][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  545.015471][T21964] netlink: 'syz.0.3962': attribute type 1 has an invalid length.
[  545.721565][  T808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  545.729947][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  545.968959][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  547.015506][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  547.607018][T21963] 8021q: VLANs not supported on ip_vti0
[  547.708002][T21972] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3964'.
[  548.038949][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  548.127311][T21993] netlink: 'syz.3.3972': attribute type 1 has an invalid length.
[  548.148086][T21996] syzkaller0: entered promiscuous mode
[  548.161525][T21996] syzkaller0: entered allmulticast mode
[  548.228696][T21993] bond3: entered promiscuous mode
[  548.238034][T21993] bond3: entered allmulticast mode
[  548.244768][T21993] 8021q: adding VLAN 0 to HW filter on device bond3
[  548.268270][T21993] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3972'.
[  548.299024][T21993] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3972'.
[  548.322737][T22002] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3974'.
[  548.561106][T22015] syzkaller0: entered promiscuous mode
[  548.567695][T22015] syzkaller0: entered allmulticast mode
[  548.767869][T22027] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[  549.083248][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  550.124595][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  551.159050][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  551.638542][T22070] netlink: 'syz.4.3985': attribute type 2 has an invalid length.
[  551.653108][T22069] xt_hashlimit: size too large, truncated to 1048576
[  551.745666][T22072] bridge_slave_0 (unregistering): left allmulticast mode
[  551.786768][T22077] netlink: 'syz.1.3990': attribute type 1 has an invalid length.
[  551.787523][T22072] bridge_slave_0 (unregistering): left promiscuous mode
[  551.802546][T22077] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3990'.
[  551.809076][T22072] bridge0: port 1(bridge_slave_0) entered disabled state
[  551.864246][T22084] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3990'.
[  552.175930][T22102] netlink: 'syz.3.3991': attribute type 1 has an invalid length.
[  552.198947][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  552.217036][T22102] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3991'.
[  553.076950][T22134] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3999'.
[  553.094302][T22130] syzkaller0: entered promiscuous mode
[  553.105686][T22130] syzkaller0: entered allmulticast mode
[  553.110981][T22138] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4000'.
[  553.141633][T22141] netlink: 'syz.3.4002': attribute type 16 has an invalid length.
[  553.150695][T22143] tap0: tun_chr_ioctl cmd 1074025677
[  553.157732][T22141] netlink: 'syz.3.4002': attribute type 17 has an invalid length.
[  553.162290][T22143] tap0: linktype set to 768
[  553.248990][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  553.682062][T22163] netlink: 108 bytes leftover after parsing attributes in process `syz.2.4005'.
[  554.299052][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  555.338186][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  555.347135][ T5724] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  555.358031][   T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  555.366433][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  556.064719][T22145] vlan2: entered promiscuous mode
[  556.072357][T22145] dummy0: entered promiscuous mode
[  556.079268][T22145] bond0: (slave vlan2): Enslaving as an active interface with an up link
[  556.138419][T22160] netlink: 76 bytes leftover after parsing attributes in process `syz.2.4005'.
[  556.238770][T22173] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4008'.
[  556.255397][T22174] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4008'.
[  556.271142][T22173] netlink: 'syz.0.4008': attribute type 3 has an invalid length.
[  556.369019][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  556.528576][T22179] bridge_slave_1: left allmulticast mode
[  556.537168][T22179] bridge_slave_1: left promiscuous mode
[  556.546862][T22179] bridge0: port 2(bridge_slave_1) entered disabled state
[  556.646840][T22179] bond0: (slave bond_slave_0): Releasing backup interface
[  556.666940][T22179] bond_slave_0: left promiscuous mode
[  556.710292][T22179] bond0: (slave bond_slave_1): Releasing backup interface
[  556.724529][T22179] bond_slave_1: left promiscuous mode
[  556.737447][T22206] netlink: 'syz.2.4017': attribute type 1 has an invalid length.
[  556.746899][T22179] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  556.757046][T22179] batman_adv: batadv0: Removing interface: batadv_slave_0
[  556.770599][T22206] netlink: 92 bytes leftover after parsing attributes in process `syz.2.4017'.
[  556.783253][T22179] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  556.790924][T22206] netlink: 658 bytes leftover after parsing attributes in process `syz.2.4017'.
[  556.791760][T22179] batman_adv: batadv0: Removing interface: batadv_slave_1
[  556.830302][T22179] bond1: (slave veth3): Releasing active interface
[  556.837380][T22179] bond1: (slave veth3): the permanent HWaddr of slave - 32:2c:77:cb:43:04 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  556.903727][T22179] bond1: (slave veth5): Releasing active interface
[  556.946663][T22179] bond0: (slave vlan2): Releasing backup interface
[  556.961726][T22179] vlan2: left promiscuous mode
[  557.022871][T22222] netlink: 48 bytes leftover after parsing attributes in process `syz.4.4019'.
[  557.042465][ T5824] dummy0: left promiscuous mode
[  557.051730][T22221] netlink: 48 bytes leftover after parsing attributes in process `syz.4.4019'.
[  557.082476][T22224] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  557.112037][T22227] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  557.209519][T22205] syzkaller0: entered promiscuous mode
[  557.219077][T22205] syzkaller0: entered allmulticast mode
[  557.297469][T22240] x_tables: duplicate underflow at hook 3
[  557.308404][T22240] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  557.324184][T22240] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  557.335915][T22240] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  557.346577][T22240] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  557.355079][T22240] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  557.371768][T22240] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  557.409032][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  560.624459][T22299] bridge_slave_1: left allmulticast mode
[  560.642713][T22299] bridge_slave_1: left promiscuous mode
[  560.651165][T22299] bridge0: port 2(bridge_slave_1) entered disabled state
[  560.687201][T22302] netlink: 'syz.1.4032': attribute type 1 has an invalid length.
[  560.707840][T22302] __nla_validate_parse: 1 callbacks suppressed
[  560.707861][T22302] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4032'.
[  560.755744][T22299] bond0: (slave bond_slave_0): Releasing backup interface
[  560.759033][T22306] netlink: 'syz.1.4032': attribute type 3 has an invalid length.
[  560.800366][T22306] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4032'.
[  560.842619][T22299] bond0: (slave bond_slave_1): Releasing backup interface
[  560.870463][T22299] team0: Port device team_slave_0 removed
[  560.935683][T22299] team0: Port device team_slave_1 removed
[  560.977671][T22299] batman_adv: batadv0: Removing interface: batadv_slave_0
[  561.046643][T22299] batman_adv: batadv0: Removing interface: batadv_slave_1
[  561.276653][T22329] x_tables: duplicate underflow at hook 2
[  561.559219][    C1] net_ratelimit: 5 callbacks suppressed
[  561.559238][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  561.734376][T22343] syzkaller0: entered promiscuous mode
[  561.756420][T22343] syzkaller0: entered allmulticast mode
[  562.221534][T22374] RDS: rds_bind could not find a transport for ::ffff:10.1.1.3, load rds_tcp or rds_rdma?
[  562.602638][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  563.651228][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  564.532857][T22358] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4041'.
[  564.542138][T22358] netlink: 108 bytes leftover after parsing attributes in process `syz.2.4041'.
[  564.551670][T22358] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4041'.
[  564.561044][T22358] netlink: 108 bytes leftover after parsing attributes in process `syz.2.4041'.
[  564.570236][T22358] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4041'.
[  564.678984][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  564.781692][T22386] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4049'.
[  564.869448][T22393] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  564.901409][T22396] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4049'.
[  564.902301][T22397] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4052'.
[  564.912093][T22393] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  564.933947][   T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  564.982068][T22393] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  565.034286][T22393] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  565.084531][T22393] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  565.247058][T22416] netlink: 'syz.2.4055': attribute type 7 has an invalid length.
[  565.263228][T22415] netlink: 'syz.2.4055': attribute type 7 has an invalid length.
[  565.443753][T22424] syzkaller0: entered promiscuous mode
[  565.449511][T22424] syzkaller0: entered allmulticast mode
[  565.456739][T22428] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  565.710829][T22431] tipc: Resetting bearer <eth:syzkaller0>
[  566.386956][T22463] __nla_validate_parse: 6 callbacks suppressed
[  566.386976][T22463] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4064'.
[  566.426565][T22463] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4064'.
[  566.563490][T22472] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4067'.
[  566.634897][T22472] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4067'.
[  566.644332][T22482] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4069'.
[  566.716479][T22486] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4069'.
[  566.759003][    C1] net_ratelimit: 2 callbacks suppressed
[  566.759020][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  567.639591][T22490] netlink: 'syz.2.4069': attribute type 4 has an invalid length.
[  567.799060][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  567.889306][T22531] openvswitch: netlink: Tunnel attr 10 has unexpected len 0 expected 2
[  567.936117][T22531] netlink: 'syz.0.4075': attribute type 10 has an invalid length.
[  568.026889][T22519] veth1_vlan: left promiscuous mode
[  568.048117][T22519] veth0_vlan: left promiscuous mode
[  568.080816][T22519] veth0_vlan: entered promiscuous mode
[  568.133080][T22519] veth1_vlan: entered promiscuous mode
[  568.149987][T22542] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4075'.
[  568.185344][T22519] veth1_macvtap: left promiscuous mode
[  568.200494][T22519] veth0_macvtap: left promiscuous mode
[  568.223367][T22519] veth0_macvtap: entered promiscuous mode
[  568.245798][T22519] veth1_macvtap: entered promiscuous mode
[  568.331183][T22519] 8021q: adding VLAN 0 to HW filter on device eth0
[  568.395678][T22519] 8021q: adding VLAN 0 to HW filter on device eth1
[  568.432907][T22519] 8021q: adding VLAN 0 to HW filter on device eth2
[  568.477152][T22519] 8021q: adding VLAN 0 to HW filter on device eth3
[  568.512595][T22519] 8021q: adding VLAN 0 to HW filter on device bond1
[  568.551668][T22519] 8021q: adding VLAN 0 to HW filter on device bond2
[  568.560816][T22568] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4080'.
[  568.592028][T22568] nbd: couldn't find a device at index 65546
[  568.838998][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  568.895032][T21924] bridge0: port 2(bridge_slave_1) entered blocking state
[  568.902275][T21924] bridge0: port 2(bridge_slave_1) entered forwarding state
[  568.985947][T21921] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  568.998016][T21921] netdevsim netdevsim4 eth0: set [1, 1] type 2 family 0 port 6081 - 0
[  569.025696][T22564] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4080'.
[  569.048152][T21921] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  569.072282][T21921] netdevsim netdevsim4 eth1: set [1, 1] type 2 family 0 port 6081 - 0
[  569.108454][T21921] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  569.146932][T21921] netdevsim netdevsim4 eth2: set [1, 1] type 2 family 0 port 6081 - 0
[  569.181346][T21921] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  569.203462][T21921] netdevsim netdevsim4 eth3: set [1, 1] type 2 family 0 port 6081 - 0
[  569.541858][ T8913] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  569.550825][T22595] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  569.881171][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  570.449441][T22616] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4090'.
[  570.833781][T21919] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  570.919235][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  571.146426][T22628] Cannot find del_set index 3 as target
[  571.193604][T22640] syzkaller1: entered promiscuous mode
[  571.209066][T22640] syzkaller1: entered allmulticast mode
[  571.741189][T22656] __nla_validate_parse: 1 callbacks suppressed
[  571.741211][T22656] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4101'.
[  571.882372][T22657] netlink: 192 bytes leftover after parsing attributes in process `syz.0.4100'.
[  571.937917][T22661] lo speed is unknown, defaulting to 1000
[  571.959349][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  571.966773][  T112] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  572.000454][T22664] netlink: 'syz.1.4103': attribute type 1 has an invalid length.
[  572.202458][T22664] bond8: entered promiscuous mode
[  572.229335][T22664] 8021q: adding VLAN 0 to HW filter on device bond8
[  572.642623][T22675] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4106'.
[  572.796880][T22681] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4105'.
[  572.807154][T22681] unsupported nla_type 48896
[  572.998986][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  573.099490][ T8913] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  574.039027][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  574.223819][  T112] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  574.328748][T22744] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  574.340826][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  574.354533][T22745] netlink: 92 bytes leftover after parsing attributes in process `syz.3.4130'.
[  574.383146][T22745] netlink: 92 bytes leftover after parsing attributes in process `syz.3.4130'.
[  574.522325][   T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  574.759903][T22765] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4136'.
[  574.940394][T22772] netlink: 7 bytes leftover after parsing attributes in process `syz.2.4139'.
[  575.078994][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  575.560716][T22797] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4149'.
[  575.717728][T22805] sch_tbf: burst 4398 is lower than device lo mtu (11337746) !
[  575.809140][T22803] syzkaller0: entered promiscuous mode
[  575.835892][T22803] syzkaller0: entered allmulticast mode
[  576.236399][T22827] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4156'.
[  576.715215][T22848] ip6tnl1: entered allmulticast mode
[  576.754577][T22848] netlink: 'syz.0.4161': attribute type 11 has an invalid length.
[  576.968896][T22861] net_ratelimit: 27 callbacks suppressed
[  576.968917][T22861] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  576.985239][T22861] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  577.018794][T22861] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  577.026133][T22860] __nla_validate_parse: 5 callbacks suppressed
[  577.026151][T22860] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4164'.
[  577.028986][T22861] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  577.052160][T22861] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  577.064103][T22860] block nbd0: reconnected socket
[  577.114806][T22861] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  577.123154][T22861] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  577.131465][T22861] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  577.158931][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  577.197098][T22861] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  577.243805][ T4946] block nbd0: Receive control failed (result -32)
[  577.516742][T22888] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4173'.
[  577.974836][T22919] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4176'.
[  578.632464][T22958] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4186'.
[  578.756125][T22921] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  578.917346][T22960] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4187'.
[  579.007565][T22960] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4187'.
[  579.008049][T22963] xt_cgroup: invalid path, errno=-2
[  579.048411][T22960] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4187'.
[  579.116420][T22960] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4187'.
[  579.143032][T22960] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4187'.
[  579.153763][T22960] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4187'.
[  579.333677][T22974] tipc: Cannot configure node identity twice
[  579.642101][T22983] netlink: 'syz.2.4196': attribute type 26 has an invalid length.
[  579.665775][T22983] netlink: 'syz.2.4196': attribute type 26 has an invalid length.
[  580.417586][T23025] netlink: 'syz.0.4205': attribute type 1 has an invalid length.
[  580.716297][T23004] bridge0: port 2(bridge_slave_1) entered disabled state
[  580.724197][T23004] bridge0: port 1(bridge_slave_0) entered disabled state
[  580.778521][T23004] bond_slave_0: left promiscuous mode
[  580.798339][T23004] bond_slave_1: left promiscuous mode
[  581.195947][T23004] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  581.220769][T23004] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  581.708954][T23004] bond0: left allmulticast mode
[  581.715639][T23004] bond_slave_0: left allmulticast mode
[  581.721380][T23004] bond_slave_1: left allmulticast mode
[  581.833495][T23025] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR
[  581.842335][ T3323] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  581.917998][ T8913] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  581.974805][ T8913] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  582.024436][T21920] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  582.129331][ T8913] net_ratelimit: 32 callbacks suppressed
[  582.129349][ T8913] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  582.151463][T21919] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  582.181811][T23063] syz_tun: entered allmulticast mode
[  582.195590][T21919] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  582.219305][T23060] syz_tun: left allmulticast mode
[  582.226869][T21919] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  582.262033][T21919] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  582.359029][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  582.416624][ T5724] IPVS: starting estimator thread 0...
[  582.436366][T23067] bridge4: entered promiscuous mode
[  582.461243][T23079] __nla_validate_parse: 224 callbacks suppressed
[  582.461329][T23079] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4214'.
[  582.490644][T23067] bridge4: entered allmulticast mode
[  582.539897][T23078] IPVS: using max 33 ests per chain, 79200 per kthread
[  582.565329][T23067] team0: Port device bridge4 added
[  582.666724][T23079] ip6gre2: entered promiscuous mode
[  582.695611][T23079] ip6gre2: entered allmulticast mode
[  582.999743][T23097] netlink: 7 bytes leftover after parsing attributes in process `syz.2.4218'.
[  583.274553][T21920] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  583.398937][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  583.549929][T23115] netlink: 'syz.3.4220': attribute type 1 has an invalid length.
[  584.120851][ T5724] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  584.435314][ T5943] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  584.448997][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  584.474145][T23144] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  584.508448][T23149] netlink: 7 bytes leftover after parsing attributes in process `syz.4.4229'.
[  584.542617][T23147] syzkaller0: entered promiscuous mode
[  584.566852][T23147] syzkaller0: entered allmulticast mode
[  584.610419][T23137] tipc: Resetting bearer <eth:syzkaller0>
[  584.660975][T23158] netlink: 'syz.3.4231': attribute type 1 has an invalid length.
[  584.711500][T23137] tipc: Disabling bearer <eth:syzkaller0>
[  584.733663][T23163] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4230'.
[  584.807398][T23171] netlink: 88 bytes leftover after parsing attributes in process `syz.3.4231'.
[  584.914049][T23158] 8021q: adding VLAN 0 to HW filter on device bond4
[  584.989108][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  585.030048][T23164] bond4: (slave geneve3): making interface the new active one
[  585.045154][T23164] bond4: (slave geneve3): Enslaving as an active interface with an up link
[  585.089056][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  585.239519][T23186] lo speed is unknown, defaulting to 1000
[  585.349409][T23196] nbd: must specify at least one socket
[  585.478978][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  585.516338][T23214] Cannot find del_set index 1 as target
[  585.542316][T23211] Cannot find del_set index 1 as target
[  585.777939][T23196] bond3: left promiscuous mode
[  585.992085][T23231] netlink: 'syz.3.4247': attribute type 1 has an invalid length.
[  586.156472][T23244] netlink: 'syz.4.4250': attribute type 2 has an invalid length.
[  586.265509][T23231] 8021q: adding VLAN 0 to HW filter on device bond5
[  586.340790][T23242] 8021q: adding VLAN 0 to HW filter on device bond5
[  586.362657][T23242] bond5: (slave gre2): The slave device specified does not support setting the MAC address
[  586.391742][T23242] bond5: (slave gre2): Error -95 calling set_mac_address
[  586.623419][T23261] xt_hashlimit: overflow, rate too high: 0
[  587.041720][T23287] sock: sock_timestamping_bind_phc: sock not bind to device
[  587.273167][T23297] sctp: [Deprecated]: syz.0.4263 (pid 23297) Use of int in max_burst socket option deprecated.
[  587.273167][T23297] Use struct sctp_assoc_value instead
[  587.558997][    C1] net_ratelimit: 4 callbacks suppressed
[  587.559019][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  587.819175][ T3323] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  588.599192][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  588.920861][T12170] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  589.639205][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  589.688397][T23267] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  589.922168][T23311] geneve1: entered promiscuous mode
[  590.004737][ T3323] tipc: Subscription rejected, illegal request
[  590.031512][T21919] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  590.116875][T23329] netlink: 'syz.0.4270': attribute type 4 has an invalid length.
[  590.315399][T23337] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  590.324371][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  590.352435][T23340] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4273'.
[  590.387060][T23340] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4273'.
[  590.412267][T23335] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4273'.
[  590.679043][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  590.845467][T23356] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  590.974182][T23371] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4284'.
[  591.002662][T23370] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4284'.
[  591.134645][T23370] workqueue: Failed to create a rescuer kthread for wq "bond10": -EINTR
[  591.172156][ T5943] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  591.635211][T23406] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4296'.
[  591.649931][T23407] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4294'.
[  592.092563][T23427] lo speed is unknown, defaulting to 1000
[  592.685813][T23453] syzkaller1: entered promiscuous mode
[  592.706025][T23453] syzkaller1: entered allmulticast mode
[  592.757852][T23427] netlink: 'syz.0.4300': attribute type 2 has an invalid length.
[  592.765893][    C1] net_ratelimit: 3 callbacks suppressed
[  592.765912][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  592.868332][T23435] veth9: entered promiscuous mode
[  593.405864][T23467] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  593.421603][T23477] openvswitch: netlink: EtherType 50a is less than min 600
[  593.459893][  T112] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  593.468748][T23481] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4312'.
[  593.490262][T23480] netlink: 256 bytes leftover after parsing attributes in process `syz.4.4313'.
[  593.667914][T23492] A link change request failed with some changes committed already. Interface macvlan0 may have been left with an inconsistent configuration, please check.
[  593.686834][T23496] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4318'.
[  593.720079][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  593.798927][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  593.925751][T23506] tap0: tun_chr_ioctl cmd 1074025672
[  593.937121][T23506] tap0: ignored: set checksum disabled
[  594.589456][T21919] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  594.628048][T23542] netlink: Unknown conntrack attr (0)
[  594.643947][T23534] A link change request failed with some changes committed already. Interface bond1 may have been left with an inconsistent configuration, please check.
[  594.839027][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  594.999724][T23568] netlink: 'syz.0.4339': attribute type 1 has an invalid length.
[  595.123656][T23580] netlink: 'syz.2.4342': attribute type 5 has an invalid length.
[  596.392009][T23629] __nla_validate_parse: 5 callbacks suppressed
[  596.392029][T23629] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4356'.
[  596.480588][T23633] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4356'.
[  596.576589][T23637] nbd: must specify at least one socket
[  596.714417][T23644] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4358'.
[  596.818058][T23652] netlink: 'syz.4.4359': attribute type 1 has an invalid length.
[  596.863695][T23652] netlink: 'syz.4.4359': attribute type 12 has an invalid length.
[  597.519962][T23693] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains
[  597.635181][T23699] netlink: 72 bytes leftover after parsing attributes in process `syz.3.4373'.
[  597.837517][T12170] nci: nci_add_new_protocol: the target found does not have the desired protocol
[  597.958092][T23723] net_ratelimit: 6 callbacks suppressed
[  597.958110][T23723] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  597.968925][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  597.982742][ T5948] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  598.045296][T23723] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  598.095795][T23728] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4379'.
[  598.108338][T23723] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  598.134455][T23728] team0: Cannot enslave team device to itself
[  598.155465][T23730] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  598.172320][T23725] RDS: rds_bind could not find a transport for ::fcff:ffff:8000:0:20:0, load rds_tcp or rds_rdma?
[  598.197935][T23730] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  598.206398][T23723] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  598.232946][T23723] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  598.364264][T23741] netlink: 'syz.2.4383': attribute type 61 has an invalid length.
[  598.382141][T23741] netlink: 'syz.2.4383': attribute type 105 has an invalid length.
[  598.397841][T23739] lo speed is unknown, defaulting to 1000
[  598.538610][T23752] netlink: 6024 bytes leftover after parsing attributes in process `syz.2.4384'.
[  598.691435][T23760] netlink: 'syz.2.4385': attribute type 1 has an invalid length.
[  598.999060][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  599.258183][T23786] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4391'.
[  600.595308][T23699] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  600.604394][T23718] netlink: 'syz.4.4378': attribute type 23 has an invalid length.
[  600.851606][T23793] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4393'.
[  600.927028][T23805] hsr0: entered promiscuous mode
[  600.962088][T23799] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4395'.
[  601.016737][T23797] hsr0: left promiscuous mode
[  601.469286][T23836] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4403'.
[  601.503472][T23836] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4403'.
[  601.517232][T23839] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4406'.
[  601.566636][T23836] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4403'.
[  601.920271][T23859] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4411'.
[  601.993240][T23867] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4413'.
[  602.036992][T23867] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4413'.
[  602.072276][T23867] netlink: 188 bytes leftover after parsing attributes in process `syz.3.4413'.
[  602.105575][T23867] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4413'.
[  602.115144][T23867] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4413'.
[  602.283610][T23880] syzkaller0: entered promiscuous mode
[  602.294577][T23880] syzkaller0: entered allmulticast mode
[  602.725714][T23908] x_tables: ip_tables: icmp match: only valid for protocol 1
[  603.168981][    C1] net_ratelimit: 7 callbacks suppressed
[  603.169002][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  603.319641][   T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  603.661468][T21919] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  604.208918][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  604.779285][T21919] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  605.245675][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  605.522867][T23920] pim6reg: entered allmulticast mode
[  605.890474][T21919] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  605.935652][    C1] vcan0: j1939_tp_rxtimer: 0xffff888050af2800: rx timeout, send abort
[  606.278914][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  606.435814][    C1] vcan0: j1939_tp_rxtimer: 0xffff888050af3000: rx timeout, send abort
[  606.447191][    C1] vcan0: j1939_tp_rxtimer: 0xffff888050af2800: abort rx timeout. Force session deactivation
[  606.571978][T23975] __nla_validate_parse: 98 callbacks suppressed
[  606.571997][T23975] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4445'.
[  606.604771][T23975] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4445'.
[  606.818708][T23986] tc action pedit offset must be on 32 bit boundaries
[  606.944139][    C1] vcan0: j1939_tp_rxtimer: 0xffff888050af3000: abort rx timeout. Force session deactivation
[  607.011845][  T112] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  607.318985][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  607.686801][T24030] xt_CONNSECMARK: invalid mode: 254
[  607.690109][T24027] netlink: 95 bytes leftover after parsing attributes in process `syz.4.4454'.
[  607.789416][T24028] lo speed is unknown, defaulting to 1000
[  608.072793][    C1] vcan0: j1939_tp_rxtimer: 0xffff888055725c00: rx timeout, send abort
[  608.358913][    C1] net_ratelimit: 1 callbacks suppressed
[  608.358933][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  608.575498][    C1] vcan0: j1939_tp_rxtimer: 0xffff888055724800: rx timeout, send abort
[  608.584627][    C1] vcan0: j1939_tp_rxtimer: 0xffff888055725c00: abort rx timeout. Force session deactivation
[  608.848160][T24067] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4462'.
[  608.907710][T24067] ipvlan2: entered allmulticast mode
[  608.920537][T24067] batadv0: entered allmulticast mode
[  608.936997][T24067] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[  609.078457][T24079] netlink: 91 bytes leftover after parsing attributes in process `syz.4.4467'.
[  609.088566][    C1] vcan0: j1939_tp_rxtimer: 0xffff888055724800: abort rx timeout. Force session deactivation
[  609.280502][T21920] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  609.378785][T24097] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw
[  609.399030][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  609.464072][T24101] xt_cluster: you have exceeded the maximum number of cluster nodes (524288 > 32)
[  609.644820][T24112] lo speed is unknown, defaulting to 1000
[  609.905081][T24126] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  609.915019][T24126] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  609.923696][T24126] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  609.932734][T24126] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  609.941352][T24126] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  609.950326][T24126] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  609.958790][T24126] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  609.971485][T24128] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4481'.
[  610.056979][T24129] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4481'.
[  610.562692][T24134] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4482'.
[  610.848496][T24144] netdevsim netdevsim0: Firmware load for '..' refused, path contains '..' component
[  611.127992][T24160] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4489'.
[  611.912586][T24197] netlink: 128 bytes leftover after parsing attributes in process `syz.1.4497'.
[  612.192224][T24206] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4500'.
[  612.293425][T24218] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4503'.
[  612.420553][T24226] Bluetooth: MGMT ver 1.23
[  612.583519][T24224] syzkaller0: entered promiscuous mode
[  612.597087][T24224] syzkaller0: entered allmulticast mode
[  613.241865][   T29] audit: type=1800 audit(1781719137.736:78): pid=24230 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.4507" name="memory.events" dev="tmpfs" ino=1400 res=0 errno=0
[  613.559327][    C1] net_ratelimit: 1381 callbacks suppressed
[  613.559346][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  613.656542][T24273] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4517'.
[  613.714174][T24277] netlink: 9 bytes leftover after parsing attributes in process `syz.3.4517'.
[  613.762117][T21920] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  613.771069][T24277] netlink: 9 bytes leftover after parsing attributes in process `syz.3.4517'.
[  614.608967][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  614.869337][T21920] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  615.648966][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  616.053357][T24267] lo speed is unknown, defaulting to 1000
[  616.053407][T24265] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4516'.
[  616.088093][T24273] vlan3: entered promiscuous mode
[  616.095553][T24273] gretap0: entered promiscuous mode
[  616.132963][T24278] mac80211_hwsim hwsim54 wlan0: entered promiscuous mode
[  616.149619][T24278] mac80211_hwsim hwsim54 wlan0: entered allmulticast mode
[  616.236765][T24284] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4520'.
[  616.351827][T24288] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4521'.
[  616.567596][T24297] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4526'.
[  616.602582][T24298] netlink: 'syz.3.4527': attribute type 1 has an invalid length.
[  616.678956][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  616.964992][T24287] __nla_validate_parse: 3 callbacks suppressed
[  616.965016][T24287] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4522'.
[  617.042534][T24310] lo speed is unknown, defaulting to 1000
[  617.388230][T24328] batadv_slave_1: entered promiscuous mode
[  617.404810][T24331] netlink: 136 bytes leftover after parsing attributes in process `syz.0.4537'.
[  617.719003][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  617.819060][T24345] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4540'.
[  617.948395][T24345] netlink: 48 bytes leftover after parsing attributes in process `syz.2.4540'.
[  618.020185][T24358] netlink: 10 bytes leftover after parsing attributes in process `syz.4.4544'.
[  618.256940][T24371] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4548'.
[  618.310524][T24374] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4549'.
[  618.338658][T24374] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4549'.
[  618.694047][T24380] netdevsim netdevsim2 netdevsim0: left promiscuous mode
[  618.736117][T24380] netdevsim netdevsim2 netdevsim0: left allmulticast mode
[  618.758954][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  618.761530][T24380] mac80211_hwsim hwsim56 wlan0: left promiscuous mode
[  618.814017][T24380] mac80211_hwsim hwsim56 wlan0: left allmulticast mode
[  618.862848][T24380] macvlan2: left allmulticast mode
[  618.873584][T24400] ip6t_REJECT: TCP_RESET illegal for non-tcp
[  618.891938][T24380] bond1: left promiscuous mode
[  618.914584][T24380] mac80211_hwsim hwsim56 syzkaller0: left promiscuous mode
[  618.942634][T24380] mac80211_hwsim hwsim56 syzkaller0: left allmulticast mode
[  618.957193][T24380] vlan2: left promiscuous mode
[  618.964427][T24380] bridge0: left promiscuous mode
[  618.998981][T24400] netlink: 160 bytes leftover after parsing attributes in process `syz.1.4556'.
[  619.018534][T24380] bond3: left allmulticast mode
[  619.045643][T24400] netlink: 'syz.1.4556': attribute type 11 has an invalid length.
[  619.100016][T24380] bond4: left promiscuous mode
[  619.122774][T24380] erspan2: left promiscuous mode
[  619.138693][T24380] bond4: left allmulticast mode
[  619.160044][T24380] erspan2: left allmulticast mode
[  619.217933][T24380] ip6gre2: left promiscuous mode
[  619.241325][T24380] ip6gre2: left allmulticast mode
[  619.366513][T24422] netlink: 256 bytes leftover after parsing attributes in process `syz.0.4562'.
[  619.398478][T24385] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR
[  619.572450][T24432] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  619.685185][T24427] bond3: option primary: mode dependency failed, not supported in mode balance-rr(0)
[  619.707855][T24438] netlink: 'syz.3.4566': attribute type 8 has an invalid length.
[  619.798995][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  619.901689][T24427] bond3 (unregistering): Released all slaves
[  619.926221][T24432] mac80211_hwsim hwsim56 syzkaller0: entered promiscuous mode
[  619.964247][T24432] mac80211_hwsim hwsim56 syzkaller0: entered allmulticast mode
[  619.995445][T24428] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR
[  619.996685][T24431] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR
[  620.360969][T24471] FAULT_INJECTION: forcing a failure.
[  620.360969][T24471] name failslab, interval 1, probability 0, space 0, times 0
[  620.396400][T24471] CPU: 1 UID: 0 PID: 24471 Comm: syz.2.4571 Not tainted syzkaller #0 PREEMPT(full) 
[  620.396428][T24471] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  620.396438][T24471] Call Trace:
[  620.396445][T24471]  <TASK>
[  620.396454][T24471]  dump_stack_lvl+0xe8/0x150
[  620.396486][T24471]  should_fail_ex+0x40c/0x560
[  620.396520][T24471]  should_failslab+0xa8/0x100
[  620.396548][T24471]  __kvmalloc_node_noprof+0x16e/0x890
[  620.396575][T24471]  ? bpf_test_run_xdp_live+0x220/0x1c20
[  620.396601][T24471]  ? __kvmalloc_node_noprof+0x38b/0x890
[  620.396629][T24471]  bpf_test_run_xdp_live+0x220/0x1c20
[  620.396652][T24471]  ? bpf_dispatcher_change_prog+0xc4a/0xf20
[  620.396678][T24471]  ? __mutex_unlock_slowpath+0x1be/0x6f0
[  620.396791][T24471]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  620.396813][T24471]  ? __pfx_bpf_test_run_xdp_live+0x10/0x10
[  620.396854][T24471]  ? 0xffffffffa02019d4
[  620.396870][T24471]  ? 0xffffffffa0201a50
[  620.396884][T24471]  ? 0xffffffffa02030c8
[  620.396897][T24471]  ? 0xffffffffa02031f8
[  620.396912][T24471]  ? 0xffffffffa0203628
[  620.396926][T24471]  ? 0xffffffffa0207bec
[  620.396963][T24471]  ? __pfx_xdp_test_run_init_page+0x10/0x10
[  620.396994][T24471]  ? _copy_from_user+0x94/0xb0
[  620.397060][T24471]  ? bpf_test_init+0x113/0x150
[  620.397076][T24471]  ? xdp_convert_md_to_buff+0x5b/0x330
[  620.397098][T24471]  bpf_prog_test_run_xdp+0x7d8/0x11d0
[  620.397132][T24471]  ? __pfx_bpf_prog_test_run_xdp+0x10/0x10
[  620.397154][T24471]  ? __fget_files+0x2a/0x420
[  620.397178][T24471]  ? __pfx_bpf_prog_test_run_xdp+0x10/0x10
[  620.397197][T24471]  bpf_prog_test_run+0x2c5/0x340
[  620.397225][T24471]  __sys_bpf+0x643/0x950
[  620.397251][T24471]  ? __pfx___sys_bpf+0x10/0x10
[  620.397296][T24471]  ? ksys_write+0x242/0x270
[  620.397322][T24471]  ? __pfx_ksys_write+0x10/0x10
[  620.397350][T24471]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  620.397370][T24471]  __x64_sys_bpf+0x7c/0x90
[  620.397392][T24471]  do_syscall_64+0x174/0x580
[  620.397412][T24471]  ? clear_bhb_loop+0x40/0x90
[  620.397434][T24471]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  620.397451][T24471] RIP: 0033:0x7f95d679ce59
[  620.397468][T24471] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  620.397482][T24471] RSP: 002b:00007f95d49d5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  620.397502][T24471] RAX: ffffffffffffffda RBX: 00007f95d6a16090 RCX: 00007f95d679ce59
[  620.397515][T24471] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a
[  620.397526][T24471] RBP: 00007f95d49d5090 R08: 0000000000000000 R09: 0000000000000000
[  620.397536][T24471] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  620.397546][T24471] R13: 00007f95d6a16128 R14: 00007f95d6a16090 R15: 00007fff7d5eb4f8
[  620.397574][T24471]  </TASK>
[  620.404758][T24475] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  620.685039][T24475] IPv6: NLM_F_CREATE should be set when creating new route
[  620.692312][T24475] IPv6: NLM_F_CREATE should be set when creating new route
[  620.838919][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  621.157240][T24512] netlink: 'syz.4.4585': attribute type 10 has an invalid length.
[  621.196356][T24515] xt_hashlimit: size too large, truncated to 1048576
[  621.204202][T24510] xfrm0: entered allmulticast mode
[  621.229101][T24510] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check.
[  621.795500][T24535] tipc: Started in network mode
[  621.821207][T24535] tipc: Node identity 1aa64da356c6, cluster identity 4711
[  621.851436][T24535] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  621.866975][T24544] FAULT_INJECTION: forcing a failure.
[  621.866975][T24544] name failslab, interval 1, probability 0, space 0, times 0
[  621.872091][T24538] syzkaller0: entered promiscuous mode
[  621.879956][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  621.888986][T24544] CPU: 0 UID: 0 PID: 24544 Comm: syz.3.4592 Not tainted syzkaller #0 PREEMPT(full) 
[  621.889011][T24544] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  621.889021][T24544] Call Trace:
[  621.889028][T24544]  <TASK>
[  621.889035][T24544]  dump_stack_lvl+0xe8/0x150
[  621.889065][T24544]  should_fail_ex+0x40c/0x560
[  621.889098][T24544]  should_failslab+0xa8/0x100
[  621.889128][T24544]  __kmalloc_cache_node_noprof+0x8c/0x690
[  621.889154][T24544]  ? page_pool_create_percpu+0x73/0xc70
[  621.889347][T24544]  ? __kvmalloc_node_noprof+0x53d/0x890
[  621.889376][T24544]  page_pool_create_percpu+0x73/0xc70
[  621.889397][T24544]  ? page_pool_create+0xd/0x20
[  621.889420][T24544]  bpf_test_run_xdp_live+0x23a/0x1c20
[  621.889443][T24544]  ? bpf_dispatcher_change_prog+0xc4a/0xf20
[  621.889468][T24544]  ? __mutex_unlock_slowpath+0x1be/0x6f0
[  621.889493][T24544]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  621.889515][T24544]  ? __pfx_bpf_test_run_xdp_live+0x10/0x10
[  621.889553][T24544]  ? 0xffffffffa02019d4
[  621.889567][T24544]  ? 0xffffffffa0201a50
[  621.889581][T24544]  ? 0xffffffffa02030dc
[  621.889594][T24544]  ? 0xffffffffa02031f8
[  621.889609][T24544]  ? 0xffffffffa0203628
[  621.889622][T24544]  ? 0xffffffffa0207bec
[  621.889658][T24544]  ? __pfx_xdp_test_run_init_page+0x10/0x10
[  621.889687][T24544]  ? _copy_from_user+0x94/0xb0
[  621.889707][T24544]  ? bpf_test_init+0x113/0x150
[  621.889723][T24544]  ? xdp_convert_md_to_buff+0x5b/0x330
[  621.889744][T24544]  bpf_prog_test_run_xdp+0x7d8/0x11d0
[  621.889778][T24544]  ? __pfx_bpf_prog_test_run_xdp+0x10/0x10
[  621.889801][T24544]  ? __fget_files+0x2a/0x420
[  621.889827][T24544]  ? __pfx_bpf_prog_test_run_xdp+0x10/0x10
[  621.889846][T24544]  bpf_prog_test_run+0x2c5/0x340
[  621.889875][T24544]  __sys_bpf+0x643/0x950
[  621.889901][T24544]  ? __pfx___sys_bpf+0x10/0x10
[  621.889939][T24544]  ? ksys_write+0x242/0x270
[  621.889967][T24544]  ? __pfx_ksys_write+0x10/0x10
[  621.889995][T24544]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  621.890014][T24544]  __x64_sys_bpf+0x7c/0x90
[  621.890036][T24544]  do_syscall_64+0x174/0x580
[  621.890053][T24544]  ? trace_irq_disable+0x3b/0x140
[  621.890076][T24544]  ? clear_bhb_loop+0x40/0x90
[  621.890097][T24544]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  621.890114][T24544] RIP: 0033:0x7faca799ce59
[  621.890130][T24544] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  621.890144][T24544] RSP: 002b:00007faca8826028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  621.890163][T24544] RAX: ffffffffffffffda RBX: 00007faca7c16090 RCX: 00007faca799ce59
[  621.890175][T24544] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a
[  621.890204][T24544] RBP: 00007faca8826090 R08: 0000000000000000 R09: 0000000000000000
[  621.890214][T24544] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  621.890224][T24544] R13: 00007faca7c16128 R14: 00007faca7c16090 R15: 00007ffcbf47fbe8
[  621.890252][T24544]  </TASK>
[  622.208903][T24538] syzkaller0: entered allmulticast mode
[  622.239168][T24546] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) !
[  622.344464][T24549] tipc: Resetting bearer <eth:syzkaller0>
[  622.366687][T24551] syzkaller0: renamed from batadv_slave_1 (while UP)
[  622.394955][T24534] tipc: Resetting bearer <eth:syzkaller0>
[  622.447778][T24534] tipc: Disabling bearer <eth:syzkaller0>
[  622.531507][T24551] __nla_validate_parse: 9 callbacks suppressed
[  622.531528][T24551] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4594'.
[  622.596224][T24556] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4594'.
[  622.716908][T24562] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4599'.
[  622.719061][T24570] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4600'.
[  622.848055][T24570] 8021q: adding VLAN 0 to HW filter on device bond10
[  622.918964][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  622.990039][T24571] bond10: (slave veth11): Enslaving as an active interface with an up link
[  623.224562][T24587] FAULT_INJECTION: forcing a failure.
[  623.224562][T24587] name failslab, interval 1, probability 0, space 0, times 0
[  623.283532][T24587] CPU: 1 UID: 0 PID: 24587 Comm: syz.1.4604 Not tainted syzkaller #0 PREEMPT(full) 
[  623.283558][T24587] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  623.283568][T24587] Call Trace:
[  623.283575][T24587]  <TASK>
[  623.283583][T24587]  dump_stack_lvl+0xe8/0x150
[  623.283610][T24587]  should_fail_ex+0x40c/0x560
[  623.283643][T24587]  should_failslab+0xa8/0x100
[  623.283671][T24587]  __kvmalloc_node_noprof+0x16e/0x890
[  623.283697][T24587]  ? __kmalloc_cache_node_noprof+0x3dd/0x690
[  623.283719][T24587]  ? page_pool_create_percpu+0x2ef/0xc70
[  623.283744][T24587]  ? page_pool_create_percpu+0xa7/0xc70
[  623.283770][T24587]  page_pool_create_percpu+0x2ef/0xc70
[  623.283797][T24587]  bpf_test_run_xdp_live+0x23a/0x1c20
[  623.283822][T24587]  ? bpf_dispatcher_change_prog+0xc4a/0xf20
[  623.283848][T24587]  ? __mutex_unlock_slowpath+0x1be/0x6f0
[  623.283873][T24587]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  623.283901][T24587]  ? __pfx_bpf_test_run_xdp_live+0x10/0x10
[  623.283943][T24587]  ? 0xffffffffa02019d4
[  623.283959][T24587]  ? 0xffffffffa0201a50
[  623.283973][T24587]  ? 0xffffffffa02030d4
[  623.283986][T24587]  ? 0xffffffffa02031f8
[  623.284001][T24587]  ? 0xffffffffa0203628
[  623.284015][T24587]  ? 0xffffffffa0207bec
[  623.284055][T24587]  ? __pfx_xdp_test_run_init_page+0x10/0x10
[  623.284086][T24587]  ? _copy_from_user+0x94/0xb0
[  623.284107][T24587]  ? bpf_test_init+0x113/0x150
[  623.284123][T24587]  ? xdp_convert_md_to_buff+0x5b/0x330
[  623.284146][T24587]  bpf_prog_test_run_xdp+0x7d8/0x11d0
[  623.284182][T24587]  ? __pfx_bpf_prog_test_run_xdp+0x10/0x10
[  623.284207][T24587]  ? __fget_files+0x2a/0x420
[  623.284234][T24587]  ? __pfx_bpf_prog_test_run_xdp+0x10/0x10
[  623.284254][T24587]  bpf_prog_test_run+0x2c5/0x340
[  623.284285][T24587]  __sys_bpf+0x643/0x950
[  623.284311][T24587]  ? __pfx___sys_bpf+0x10/0x10
[  623.284351][T24587]  ? ksys_write+0x242/0x270
[  623.284378][T24587]  ? __pfx_ksys_write+0x10/0x10
[  623.284406][T24587]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  623.284425][T24587]  __x64_sys_bpf+0x7c/0x90
[  623.284449][T24587]  do_syscall_64+0x174/0x580
[  623.284465][T24587]  ? trace_irq_disable+0x3b/0x140
[  623.284488][T24587]  ? clear_bhb_loop+0x40/0x90
[  623.284510][T24587]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  623.284527][T24587] RIP: 0033:0x7f2e9779ce59
[  623.284543][T24587] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  623.284558][T24587] RSP: 002b:00007f2e986a5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  623.284577][T24587] RAX: ffffffffffffffda RBX: 00007f2e97a16090 RCX: 00007f2e9779ce59
[  623.284591][T24587] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a
[  623.284602][T24587] RBP: 00007f2e986a5090 R08: 0000000000000000 R09: 0000000000000000
[  623.284613][T24587] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  623.284624][T24587] R13: 00007f2e97a16128 R14: 00007f2e97a16090 R15: 00007fffe01e00a8
[  623.284655][T24587]  </TASK>
[  623.288316][T24587] page_pool_create_percpu() gave up with errno -12
[  623.424966][T24591] 8021q: adding VLAN 0 to HW filter on device macvlan3
[  623.675511][T24594] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4607'.
[  623.714977][T24594] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4607'.
[  623.726948][T24594] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4607'.
[  623.751897][T24594] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4607'.
[  623.959247][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  624.191712][T24612] netlink: 'syz.0.4614': attribute type 1 has an invalid length.
[  624.209700][T24612] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  624.998903][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  625.149527][T24669] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4631'.
[  625.165557][T24669] netlink: 'syz.0.4631': attribute type 7 has an invalid length.
[  625.181537][T24669] netlink: 'syz.0.4631': attribute type 8 has an invalid length.
[  625.203018][T24669] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4631'.
[  625.296577][T24674] openvswitch: netlink: IPv6 tunnel dst address is zero
[  625.776835][T24698] ip6tnl1: entered allmulticast mode
[  626.038998][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  626.392451][T24729] netlink: 'syz.1.4645': attribute type 1 has an invalid length.
[  626.417202][T24731] netlink: 'syz.2.4646': attribute type 1 has an invalid length.
[  626.516083][T24736] bond11: (slave dummy0): Enslaving as an active interface with a down link
[  626.573931][T24729] netlink: 'syz.1.4645': attribute type 10 has an invalid length.
[  626.643988][T24729] dummy0: entered promiscuous mode
[  626.651915][T24729] bond11: (slave dummy0): Releasing active interface
[  627.088909][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  627.550512][T24768] __nla_validate_parse: 5 callbacks suppressed
[  627.550530][T24768] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4657'.
[  627.592009][T24768] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4657'.
[  627.847235][T24788] netlink: 104 bytes leftover after parsing attributes in process `syz.1.4664'.
[  628.109250][T24804] netlink: 'syz.4.4669': attribute type 1 has an invalid length.
[  628.128956][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  628.142786][T24804] nbd: illegal input index -1426887320
[  628.206251][T24810] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4670'.
[  628.585311][T24800] syzkaller0: entered promiscuous mode
[  628.611323][T24800] syzkaller0: entered allmulticast mode
[  628.654470][T24822] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4673'.
[  628.706759][T24824] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4674'.
[  629.158929][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  629.437919][T24848] x_tables: duplicate underflow at hook 1
[  630.209376][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  631.239735][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  631.780963][T24832] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR
[  631.845499][T24852] SET target dimension over the limit!
[  631.879409][T24846] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  632.273611][T24883] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4683'.
[  632.282784][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  632.564414][T24890] syzkaller0: entered promiscuous mode
[  632.570145][T24890] syzkaller0: entered allmulticast mode
[  633.318996][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  634.359010][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  634.997673][T24860] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  635.398945][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  635.540442][T24907] 8021q: adding VLAN 0 to HW filter on device bond0
[  635.550917][T24907] 8021q: adding VLAN 0 to HW filter on device team0
[  635.576721][T24918] netlink: 'syz.1.4700': attribute type 1 has an invalid length.
[  635.590387][T24907] 8021q: adding VLAN 0 to HW filter on device batadv0
[  635.602791][T24921] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4696'.
[  636.223274][T24907] team_slave_0: entered promiscuous mode
[  636.240358][T24907] team_slave_1: entered promiscuous mode
[  636.267157][T24907] batman_adv: batadv0: Interface activated: batadv_slave_0
[  636.296413][T24907] batman_adv: batadv0: Interface activated: batadv_slave_1
[  636.326704][T24907] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  636.350421][T24907] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  636.374414][T24907] veth1_vlan: left promiscuous mode
[  636.385438][T24907] veth0_vlan: left promiscuous mode
[  636.392173][T24907] veth0_vlan: entered promiscuous mode
[  636.402311][T24907] veth1_vlan: entered promiscuous mode
[  636.422027][T24907] veth1_macvtap: left promiscuous mode
[  636.429223][T24907] veth0_macvtap: left promiscuous mode
[  636.435976][T24907] veth0_macvtap: entered promiscuous mode
[  636.448952][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  636.451918][T24907] veth1_macvtap: entered promiscuous mode
[  636.475104][T24907] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  636.484159][T24907] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  636.492976][T24907] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  636.506454][T24907] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  636.520920][T24907] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  636.539893][T24907] 8021q: adding VLAN 0 to HW filter on device bond1
[  636.547132][T24907] A link change request failed with some changes committed already. Interface syzkaller0 may have been left with an inconsistent configuration, please check.
[  636.581974][ T5752] bond_slave_0: entered promiscuous mode
[  636.589832][ T5752] bond_slave_1: entered promiscuous mode
[  636.637947][ T1353] bridge0: port 1(bridge_slave_0) entered blocking state
[  636.645195][ T1353] bridge0: port 1(bridge_slave_0) entered forwarding state
[  636.691740][ T1353] bridge0: port 2(bridge_slave_1) entered blocking state
[  636.698955][ T1353] bridge0: port 2(bridge_slave_1) entered forwarding state
[  636.828599][T21921] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  636.843628][T21921] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  636.884809][T24948] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) !
[  636.902265][T24954] FAULT_INJECTION: forcing a failure.
[  636.902265][T24954] name failslab, interval 1, probability 0, space 0, times 0
[  636.938590][T24954] CPU: 1 UID: 0 PID: 24954 Comm: syz.2.4708 Not tainted syzkaller #0 PREEMPT(full) 
[  636.938615][T24954] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  636.938626][T24954] Call Trace:
[  636.938633][T24954]  <TASK>
[  636.938642][T24954]  dump_stack_lvl+0xe8/0x150
[  636.938669][T24954]  should_fail_ex+0x40c/0x560
[  636.938702][T24954]  should_failslab+0xa8/0x100
[  636.938728][T24954]  ? skb_clone+0x212/0x3a0
[  636.938841][T24954]  kmem_cache_alloc_noprof+0x87/0x650
[  636.938870][T24954]  skb_clone+0x212/0x3a0
[  636.938896][T24954]  __netlink_deliver_tap+0x413/0x860
[  636.938961][T24954]  ? netlink_deliver_tap+0x2e/0x1b0
[  636.938982][T24954]  netlink_deliver_tap+0x19c/0x1b0
[  636.939003][T24954]  netlink_sendskb+0x68/0x140
[  636.939040][T24954]  nfnetlink_rcv+0x260c/0x28c0
[  636.939158][T24954]  ? __pfx_nfnetlink_rcv+0x10/0x10
[  636.939201][T24954]  ? ref_tracker_free+0x689/0x830
[  636.939295][T24954]  ? skb_clone+0x246/0x3a0
[  636.939316][T24954]  ? __netlink_deliver_tap+0x811/0x860
[  636.939343][T24954]  ? netlink_deliver_tap+0x2e/0x1b0
[  636.939361][T24954]  ? netlink_deliver_tap+0x2e/0x1b0
[  636.939386][T24954]  netlink_unicast+0x7bb/0x940
[  636.939424][T24954]  netlink_sendmsg+0x813/0xb40
[  636.939453][T24954]  ? __pfx_netlink_sendmsg+0x10/0x10
[  636.939476][T24954]  ? aa_sock_msg_perm+0xf1/0x1b0
[  636.939504][T24954]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  636.939525][T24954]  ? __pfx_netlink_sendmsg+0x10/0x10
[  636.939546][T24954]  ____sys_sendmsg+0x9b9/0xa20
[  636.939565][T24954]  ? __might_fault+0xaf/0x130
[  636.939604][T24954]  ? __pfx_____sys_sendmsg+0x10/0x10
[  636.939633][T24954]  ? import_iovec+0x73/0xa0
[  636.939685][T24954]  ___sys_sendmsg+0x2a5/0x360
[  636.939702][T24954]  ? __lock_acquire+0x683/0x2cd0
[  636.939739][T24954]  ? __pfx____sys_sendmsg+0x10/0x10
[  636.939796][T24954]  ? __fget_files+0x2a/0x420
[  636.939817][T24954]  ? __fget_files+0x3a2/0x420
[  636.939849][T24954]  __x64_sys_sendmsg+0x1bd/0x2a0
[  636.939871][T24954]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  636.939901][T24954]  ? __pfx_ksys_write+0x10/0x10
[  636.939937][T24954]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  636.939956][T24954]  do_syscall_64+0x174/0x580
[  636.939974][T24954]  ? trace_irq_disable+0x3b/0x140
[  636.939999][T24954]  ? clear_bhb_loop+0x40/0x90
[  636.940027][T24954]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  636.940045][T24954] RIP: 0033:0x7f95d679ce59
[  636.940063][T24954] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  636.940077][T24954] RSP: 002b:00007f95d49f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  636.940098][T24954] RAX: ffffffffffffffda RBX: 00007f95d6a15fa0 RCX: 00007f95d679ce59
[  636.940111][T24954] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003
[  636.940122][T24954] RBP: 00007f95d49f6090 R08: 0000000000000000 R09: 0000000000000000
[  636.940134][T24954] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  636.940144][T24954] R13: 00007f95d6a16038 R14: 00007f95d6a15fa0 R15: 00007fff7d5eb4f8
[  636.940176][T24954]  </TASK>
[  637.250562][T24957] netlink: 'syz.0.4709': attribute type 1 has an invalid length.
[  637.325433][T21921] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  637.345249][T21921] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  637.414182][T24957] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR
[  637.479855][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  637.716986][T24983] netlink: 104 bytes leftover after parsing attributes in process `syz.4.4713'.
[  637.863581][T24974] lo speed is unknown, defaulting to 1000
[  637.896795][T24989] netlink: 'syz.0.4717': attribute type 8 has an invalid length.
[  637.917840][T24989] netlink: 4096 bytes leftover after parsing attributes in process `syz.0.4717'.
[  637.925317][T24974] lo speed is unknown, defaulting to 1000
[  637.938088][T24974] lo speed is unknown, defaulting to 1000
[  638.476469][T24997] netlink: 'syz.4.4720': attribute type 9 has an invalid length.
[  638.488389][T24997] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING
[  638.495157][ T5823] lo speed is unknown, defaulting to 1000
[  638.506994][T24974] infiniband syz1: set active
[  638.517083][T24974] infiniband syz1: added lo
[  638.529393][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  638.575355][T24974] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR
[  638.614311][T24974] infiniband syz1: Couldn't open port 1
[  638.647700][T24974] smbdirect: ib_dev[syz1]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000
[  638.709832][T25008] netlink: 'syz.4.4721': attribute type 3 has an invalid length.
[  638.718743][T24974] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32
[  638.753650][T24974] smbdirect: ib_dev[syz1]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005
[  638.880866][T24974] RDS/IB: syz1: added
[  638.902954][T24974] smc: adding ib device syz1 with port count 1
[  638.922377][T24974] smc:    ib device syz1 port 1 has no pnetid
[  638.935047][ T5824] lo speed is unknown, defaulting to 1000
[  638.952866][T25014] netlink: 'syz.1.4725': attribute type 1 has an invalid length.
[  638.966370][T24974] lo speed is unknown, defaulting to 1000
[  639.134376][ T8913] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  639.153872][T25023] mac80211_hwsim hwsim56 syzkaller0: Caught tx_queue_len zero misconfig
[  639.186772][T21921] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  639.202301][T21921] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  639.246912][T21921] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  639.405931][T25029] x_tables: unsorted entry at hook 2
[  639.437497][T25032] syzkaller1: entered promiscuous mode
[  639.453378][T25032] syzkaller1: entered allmulticast mode
[  639.507555][T24974] lo speed is unknown, defaulting to 1000
[  639.558921][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  639.795608][T25046] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4734'.
[  640.318695][T25061] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.4739'.
[  640.335268][T24974] lo speed is unknown, defaulting to 1000
[  640.390753][T25061] ksmbd: Unknown IPC event: 1, ignore.
[  640.539477][T25069] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4742'.
[  640.598996][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  640.769433][T25080] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4744'.
[  641.085698][T24974] lo speed is unknown, defaulting to 1000
[  641.638903][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  641.653195][T24974] lo speed is unknown, defaulting to 1000
[  641.679760][T25112] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4754'.
[  641.681312][   T29] audit: type=1800 audit(1781719166.176:79): pid=25093 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.4747" name="memory.events" dev="tmpfs" ino=1600 res=0 errno=0
[  642.271111][T24974] lo speed is unknown, defaulting to 1000
[  642.483725][T25130] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4759'.
[  642.531017][T25130] netlink: 'syz.1.4759': attribute type 7 has an invalid length.
[  642.552628][T25130] netlink: 'syz.1.4759': attribute type 8 has an invalid length.
[  642.568969][T25130] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4759'.
[  642.609823][T25130] erspan0: entered promiscuous mode
[  642.630319][T25130] gretap0: entered promiscuous mode
[  642.638707][T25130] erspan0: left promiscuous mode
[  642.671999][T25130] gretap0: left promiscuous mode
[  642.678964][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  643.102583][T24974] lo speed is unknown, defaulting to 1000
[  643.342927][T25154] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  643.718894][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  643.791539][T24974] lo speed is unknown, defaulting to 1000
[  643.795771][T25168] netlink: 10 bytes leftover after parsing attributes in process `syz.4.4772'.
[  643.944650][T25173] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4774'.
[  644.347340][T25192] netlink: 'syz.1.4777': attribute type 11 has an invalid length.
[  644.364741][T24974] lo speed is unknown, defaulting to 1000
[  644.758993][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  644.789315][T25196] xt_ecn: cannot match TCP bits for non-tcp packets
[  645.094296][T25212] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  645.262155][T25207] tipc: Disabling bearer <eth:syzkaller0>
[  645.442102][T25226] lo speed is unknown, defaulting to 1000
[  645.455443][T25226] lo speed is unknown, defaulting to 1000
[  645.482861][T25228] RDS: rds_bind could not find a transport for fc02::, load rds_tcp or rds_rdma?
[  645.776330][T25234] netlink: 'syz.2.4790': attribute type 2 has an invalid length.
[  645.798918][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  645.822427][T25234] netlink: 14 bytes leftover after parsing attributes in process `syz.2.4790'.
[  645.859657][T25238] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4791'.
[  646.217007][T25251] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4797'.
[  646.268225][T25251] netlink: 'syz.0.4797': attribute type 7 has an invalid length.
[  646.331754][T25256] netlink: 'syz.0.4797': attribute type 13 has an invalid length.
[  646.341330][T25251] netlink: 'syz.0.4797': attribute type 8 has an invalid length.
[  646.413365][T25251] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4797'.
[  646.751317][T25263] 8021q: adding VLAN 0 to HW filter on device bond6
[  646.762032][T25270] netlink: 100 bytes leftover after parsing attributes in process `syz.0.4797'.
[  646.812086][T25273] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue
[  646.834619][T25273] syzkaller0: entered promiscuous mode
[  646.841210][T25273] syzkaller0: entered allmulticast mode
[  646.848980][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  646.849768][T25276] netlink: 7 bytes leftover after parsing attributes in process `syz.1.4802'.
[  647.009453][T25284] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4803'.
[  647.034625][T25287] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4805'.
[  647.055736][T25287] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4805'.
[  647.188399][T25286] IPVS: Unknown mcast interface: vcan0
[  647.356311][T25299] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  647.441005][T25304] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4810'.
[  647.501028][T25304] xt_hashlimit: size too large, truncated to 1048576
[  647.558660][T25308] team0: Port device team_slave_0 removed
[  647.878945][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  648.413692][T25358] IPv6: NLM_F_CREATE should be specified when creating new route
[  648.600104][T25369] netlink: 'syz.3.4833': attribute type 2 has an invalid length.
[  648.919025][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  649.350484][T25400] syzkaller0: entered promiscuous mode
[  649.372500][T25400] syzkaller0: entered allmulticast mode
[  649.913943][T25435] FAULT_INJECTION: forcing a failure.
[  649.913943][T25435] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  649.943266][T25435] CPU: 1 UID: 0 PID: 25435 Comm: syz.0.4851 Not tainted syzkaller #0 PREEMPT(full) 
[  649.943294][T25435] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  649.943304][T25435] Call Trace:
[  649.943311][T25435]  <TASK>
[  649.943319][T25435]  dump_stack_lvl+0xe8/0x150
[  649.943347][T25435]  should_fail_ex+0x40c/0x560
[  649.943378][T25435]  _copy_to_iter+0x404/0x1810
[  649.943410][T25435]  ? __pfx__copy_to_iter+0x10/0x10
[  649.943430][T25435]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  649.943541][T25435]  ? lockdep_hardirqs_on+0x7a/0x110
[  649.943590][T25435]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  649.943614][T25435]  ? __skb_try_recv_datagram+0x3de/0x4e0
[  649.943675][T25435]  __skb_datagram_iter+0xf8/0x980
[  649.943694][T25435]  ? __pfx_sk_busy_loop_end+0x10/0x10
[  649.943718][T25435]  ? __pfx_simple_copy_to_iter+0x10/0x10
[  649.943754][T25435]  skb_copy_datagram_iter+0xb5/0x240
[  649.943779][T25435]  netlink_recvmsg+0x2b9/0xa50
[  649.943808][T25435]  ? __pfx_netlink_recvmsg+0x10/0x10
[  649.943833][T25435]  ? __lock_acquire+0x683/0x2cd0
[  649.943851][T25435]  ? aa_sock_msg_perm+0xf1/0x1b0
[  649.943877][T25435]  ? bpf_lsm_socket_recvmsg+0x9/0x20
[  649.943899][T25435]  ? security_socket_recvmsg+0x7e/0x2c0
[  649.943953][T25435]  ? __pfx_netlink_recvmsg+0x10/0x10
[  649.943972][T25435]  sock_recvmsg+0x172/0x1b0
[  649.943999][T25435]  ____sys_recvmsg+0x1e6/0x4a0
[  649.944028][T25435]  ? __pfx_____sys_recvmsg+0x10/0x10
[  649.944062][T25435]  ? import_iovec+0x73/0xa0
[  649.944086][T25435]  ___sys_recvmsg+0x213/0x590
[  649.944111][T25435]  ? __pfx____sys_recvmsg+0x10/0x10
[  649.944135][T25435]  ? __fget_files+0x2a/0x420
[  649.944174][T25435]  ? __fget_files+0x3a2/0x420
[  649.944205][T25435]  do_recvmmsg+0x329/0x810
[  649.944233][T25435]  ? __pfx_do_recvmmsg+0x10/0x10
[  649.944264][T25435]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  649.944303][T25435]  __x64_sys_recvmmsg+0x198/0x250
[  649.944326][T25435]  ? __pfx___x64_sys_recvmmsg+0x10/0x10
[  649.944355][T25435]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  649.944374][T25435]  do_syscall_64+0x174/0x580
[  649.944390][T25435]  ? trace_irq_disable+0x3b/0x140
[  649.944414][T25435]  ? clear_bhb_loop+0x40/0x90
[  649.944437][T25435]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  649.944454][T25435] RIP: 0033:0x7f5778b9ce59
[  649.944472][T25435] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  649.944486][T25435] RSP: 002b:00007f5779a6e028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[  649.944506][T25435] RAX: ffffffffffffffda RBX: 00007f5778e15fa0 RCX: 00007f5778b9ce59
[  649.944519][T25435] RDX: 0000000000000004 RSI: 0000200000000d80 RDI: 0000000000000003
[  649.944530][T25435] RBP: 00007f5779a6e090 R08: 0000000000000000 R09: 0000000000000000
[  649.944541][T25435] R10: 0000000000002030 R11: 0000000000000246 R12: 0000000000000001
[  649.944551][T25435] R13: 00007f5778e16038 R14: 00007f5778e15fa0 R15: 00007fff74021228
[  649.944582][T25435]  </TASK>
[  650.238182][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  650.435714][T25444] veth1_to_bond: entered promiscuous mode
[  650.449694][T25444] veth1_to_bond: entered allmulticast mode
[  650.591978][T25449] veth1_to_bond (unregistering): left promiscuous mode
[  650.602739][T25449] veth1_to_bond (unregistering): left allmulticast mode
[  650.681682][T25457] netlink: 'syz.4.4854': attribute type 10 has an invalid length.
[  650.719589][T25449] bond0: (slave bond_slave_1): Releasing backup interface
[  651.238930][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  652.278947][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  653.138287][T25457] team0: Port device geneve1 added
[  653.318910][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  653.434628][T25466] vlan3: entered promiscuous mode
[  653.807619][T25499] __nla_validate_parse: 10 callbacks suppressed
[  653.807641][T25499] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4869'.
[  653.871370][T25502] netlink: 4768 bytes leftover after parsing attributes in process `syz.4.4871'.
[  653.887798][T25502] openvswitch: netlink: Geneve opt len 1 is not a multiple of 4.
[  653.917505][T25481] smbdirect: ib_dev[syz2] removed
[  654.006626][T25510] netlink: 'syz.4.4873': attribute type 1 has an invalid length.
[  654.011450][T25503] syzkaller0: entered promiscuous mode
[  654.023304][T25510] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4873'.
[  654.055892][T25503] syzkaller0: entered allmulticast mode
[  654.145499][T25510] vlan3: entered allmulticast mode
[  654.163002][T25510] dummy0: entered allmulticast mode
[  654.168707][T25510] dummy0: entered promiscuous mode
[  654.176334][T25510] bond0: (slave vlan3): Enslaving as an active interface with an up link
[  654.222857][T25514] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4874'.
[  654.358915][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  654.377596][T25523] netlink: 'syz.2.4877': attribute type 10 has an invalid length.
[  654.380542][T25524] netlink: 'syz.2.4877': attribute type 10 has an invalid length.
[  654.617311][T25524] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  654.660005][T25524] team0: Port device netdevsim1 added
[  654.677171][T25524] netdevsim netdevsim2 netdevsim1: entered promiscuous mode
[  654.802661][T25537] netlink: 'syz.1.4880': attribute type 9 has an invalid length.
[  654.866964][T25537] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4880'.
[  654.885598][T25540] x_tables: duplicate underflow at hook 1
[  654.904992][T25537] macvlan2: entered promiscuous mode
[  654.911158][T25537] gretap0: entered promiscuous mode
[  654.916670][T25537] macvlan2: entered allmulticast mode
[  654.923253][T25537] gretap0: entered allmulticast mode
[  655.408910][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  655.674106][T25557] syzkaller0: entered promiscuous mode
[  655.683648][T25557] syzkaller0: entered allmulticast mode
[  655.725341][T25580] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4894'.
[  655.754852][T25585] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4894'.
[  655.898412][T25595] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4899'.
[  656.438935][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  656.660769][T25603] netlink: 'syz.4.4900': attribute type 13 has an invalid length.
[  657.488920][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  658.519056][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  658.838481][T25584] vlan1: entered promiscuous mode
[  658.844627][T25584] vlan1: entered allmulticast mode
[  658.851122][T25584] veth0_vlan: entered allmulticast mode
[  659.039775][T25620] xt_policy: neither incoming nor outgoing policy selected
[  659.137452][T25624] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4904'.
[  659.176279][T25630] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4905'.
[  659.185590][T25630] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4905'.
[  659.195259][T25630] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4905'.
[  659.284095][T25624] ipvlan2: entered allmulticast mode
[  659.302857][T25624] gretap0: entered allmulticast mode
[  659.358564][T25636] FAULT_INJECTION: forcing a failure.
[  659.358564][T25636] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  659.390839][T25636] CPU: 0 UID: 0 PID: 25636 Comm: syz.1.4906 Not tainted syzkaller #0 PREEMPT(full) 
[  659.390876][T25636] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  659.390885][T25636] Call Trace:
[  659.390893][T25636]  <TASK>
[  659.390901][T25636]  dump_stack_lvl+0xe8/0x150
[  659.390928][T25636]  should_fail_ex+0x40c/0x560
[  659.390960][T25636]  _copy_from_user+0x2d/0xb0
[  659.390981][T25636]  ___sys_recvmsg+0x173/0x590
[  659.391008][T25636]  ? __pfx____sys_recvmsg+0x10/0x10
[  659.391033][T25636]  ? __fget_files+0x2a/0x420
[  659.391083][T25636]  do_recvmmsg+0x329/0x810
[  659.391114][T25636]  ? __pfx_do_recvmmsg+0x10/0x10
[  659.391146][T25636]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  659.391183][T25636]  __x64_sys_recvmmsg+0x198/0x250
[  659.391206][T25636]  ? __pfx___x64_sys_recvmmsg+0x10/0x10
[  659.391235][T25636]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  659.391254][T25636]  do_syscall_64+0x174/0x580
[  659.391270][T25636]  ? trace_irq_disable+0x3b/0x140
[  659.391295][T25636]  ? clear_bhb_loop+0x40/0x90
[  659.391318][T25636]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  659.391336][T25636] RIP: 0033:0x7f2e9779ce59
[  659.391353][T25636] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  659.391369][T25636] RSP: 002b:00007f2e986c6028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[  659.391388][T25636] RAX: ffffffffffffffda RBX: 00007f2e97a15fa0 RCX: 00007f2e9779ce59
[  659.391401][T25636] RDX: 0000000000000004 RSI: 0000200000000d80 RDI: 0000000000000003
[  659.391413][T25636] RBP: 00007f2e986c6090 R08: 0000000000000000 R09: 0000000000000000
[  659.391424][T25636] R10: 0000000000002030 R11: 0000000000000246 R12: 0000000000000001
[  659.391434][T25636] R13: 00007f2e97a16038 R14: 00007f2e97a15fa0 R15: 00007fffe01e00a8
[  659.391465][T25636]  </TASK>
[  659.559409][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  659.701215][T25648] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4909'.
[  659.897324][T25667] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4911'.
[  660.155045][T25675] netlink: 'syz.2.4914': attribute type 21 has an invalid length.
[  660.176783][T25672] syzkaller0: entered promiscuous mode
[  660.187800][T25672] syzkaller0: entered allmulticast mode
[  660.201800][T25675] netlink: 164 bytes leftover after parsing attributes in process `syz.2.4914'.
[  660.599187][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  660.718024][T25705] sit1: entered allmulticast mode
[  661.292652][T25730] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4928'.
[  661.342437][T25733] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported
[  661.372060][T25733] syzkaller0: entered promiscuous mode
[  661.378162][T25733] syzkaller0: entered allmulticast mode
[  661.504470][T25742] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4931'.
[  661.576618][T25745] mac80211_hwsim hwsim55 syzkaller0: entered promiscuous mode
[  661.612758][T25745] mac80211_hwsim hwsim55 syzkaller0: entered allmulticast mode
[  661.639129][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  661.663916][T25745] mac80211_hwsim hwsim55 syzkaller0: Caught tx_queue_len zero misconfig
[  661.730670][T25745] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  661.943632][T25758] xt_hashlimit: size too large, truncated to 1048576
[  662.034606][T25764] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR
[  662.646975][T25795] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4942'.
[  662.687312][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  662.727049][T25797] netlink: 'syz.3.4943': attribute type 1 has an invalid length.
[  662.858347][ T5823] tipc: Node number set to 1868681644
[  662.960111][T25803] x_tables: duplicate underflow at hook 1
[  663.131561][T25813] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  663.284362][T25806] netlink: 'syz.0.4947': attribute type 1 has an invalid length.
[  663.337697][T25820] netlink: 'syz.4.4952': attribute type 1 has an invalid length.
[  663.510821][T25820] bridge1: entered allmulticast mode
[  663.562692][T25820] 8021q: adding VLAN 0 to HW filter on device bond4
[  663.703895][T25819] bridge1: left allmulticast mode
[  663.718907][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  663.918537][T25847] FAULT_INJECTION: forcing a failure.
[  663.918537][T25847] name failslab, interval 1, probability 0, space 0, times 0
[  663.956386][T25847] CPU: 1 UID: 0 PID: 25847 Comm: syz.2.4960 Not tainted syzkaller #0 PREEMPT(full) 
[  663.956413][T25847] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  663.956423][T25847] Call Trace:
[  663.956430][T25847]  <TASK>
[  663.956438][T25847]  dump_stack_lvl+0xe8/0x150
[  663.956463][T25847]  should_fail_ex+0x40c/0x560
[  663.956495][T25847]  should_failslab+0xa8/0x100
[  663.956519][T25847]  ? skb_clone+0x212/0x3a0
[  663.956538][T25847]  kmem_cache_alloc_noprof+0x87/0x650
[  663.956566][T25847]  skb_clone+0x212/0x3a0
[  663.956589][T25847]  __netlink_deliver_tap+0x413/0x860
[  663.956619][T25847]  ? netlink_deliver_tap+0x2e/0x1b0
[  663.956640][T25847]  netlink_deliver_tap+0x19c/0x1b0
[  663.956660][T25847]  netlink_dump+0x95b/0xee0
[  663.956691][T25847]  ? __pfx_netlink_dump+0x10/0x10
[  663.956721][T25847]  ? netlink_recvmsg+0x5bf/0xa50
[  663.956738][T25847]  ? kmem_cache_free+0x182/0x650
[  663.956776][T25847]  netlink_recvmsg+0x683/0xa50
[  663.956805][T25847]  ? __pfx_netlink_recvmsg+0x10/0x10
[  663.956829][T25847]  ? __lock_acquire+0x683/0x2cd0
[  663.956851][T25847]  ? bpf_lsm_socket_recvmsg+0x9/0x20
[  663.956874][T25847]  ? security_socket_recvmsg+0x7e/0x2c0
[  663.956894][T25847]  ? __pfx_netlink_recvmsg+0x10/0x10
[  663.956915][T25847]  sock_recvmsg_nosec+0x10c/0x140
[  663.956943][T25847]  ____sys_recvmsg+0x3e3/0x4a0
[  663.956973][T25847]  ? __pfx_____sys_recvmsg+0x10/0x10
[  663.957009][T25847]  ? import_iovec+0x73/0xa0
[  663.957034][T25847]  ___sys_recvmsg+0x213/0x590
[  663.957060][T25847]  ? __pfx____sys_recvmsg+0x10/0x10
[  663.957084][T25847]  ? __fget_files+0x2a/0x420
[  663.957137][T25847]  do_recvmmsg+0x329/0x810
[  663.957167][T25847]  ? __pfx_do_recvmmsg+0x10/0x10
[  663.957199][T25847]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  663.957237][T25847]  __x64_sys_recvmmsg+0x198/0x250
[  663.957258][T25847]  ? __pfx___x64_sys_recvmmsg+0x10/0x10
[  663.957285][T25847]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  663.957305][T25847]  do_syscall_64+0x174/0x580
[  663.957321][T25847]  ? trace_irq_disable+0x3b/0x140
[  663.957343][T25847]  ? clear_bhb_loop+0x40/0x90
[  663.957365][T25847]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  663.957382][T25847] RIP: 0033:0x7f95d679ce59
[  663.957400][T25847] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  663.957414][T25847] RSP: 002b:00007f95d49f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[  663.957434][T25847] RAX: ffffffffffffffda RBX: 00007f95d6a15fa0 RCX: 00007f95d679ce59
[  663.957446][T25847] RDX: 0000000000000004 RSI: 0000200000000d80 RDI: 0000000000000003
[  663.957457][T25847] RBP: 00007f95d49f6090 R08: 0000000000000000 R09: 0000000000000000
[  663.957468][T25847] R10: 0000000000002030 R11: 0000000000000246 R12: 0000000000000002
[  663.957479][T25847] R13: 00007f95d6a16038 R14: 00007f95d6a15fa0 R15: 00007fff7d5eb4f8
[  663.957509][T25847]  </TASK>
[  664.398120][T25856] netlink: 'syz.0.4963': attribute type 6 has an invalid length.
[  664.491166][T25856] netlink: 'syz.0.4963': attribute type 23 has an invalid length.
[  664.518757][T25860] lo: entered allmulticast mode
[  664.532792][T25856] IPv6: NLM_F_CREATE should be specified when creating new route
[  664.566142][T25860] netlink: 'syz.2.4964': attribute type 1 has an invalid length.
[  664.668077][T25869] __nla_validate_parse: 6 callbacks suppressed
[  664.668096][T25869] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4966'.
[  664.691826][T25860] 8021q: adding VLAN 0 to HW filter on device bond7
[  664.726317][T25870] netlink: 'syz.3.4965': attribute type 2 has an invalid length.
[  664.734645][T25870] tipc: Cannot configure node identity twice
[  664.741298][T25859] lo: left allmulticast mode
[  664.759340][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  664.795063][T25875] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4968'.
[  665.038376][T25890] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4971'.
[  665.279512][T25895] veth0: entered promiscuous mode
[  665.301198][T25895] vlan2: entered promiscuous mode
[  665.364699][T25902] FAULT_INJECTION: forcing a failure.
[  665.364699][T25902] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  665.418546][T25902] CPU: 0 UID: 0 PID: 25902 Comm: syz.2.4974 Not tainted syzkaller #0 PREEMPT(full) 
[  665.418573][T25902] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  665.418584][T25902] Call Trace:
[  665.418592][T25902]  <TASK>
[  665.418601][T25902]  dump_stack_lvl+0xe8/0x150
[  665.418629][T25902]  should_fail_ex+0x40c/0x560
[  665.418661][T25902]  _copy_from_user+0x2d/0xb0
[  665.418682][T25902]  ___sys_recvmsg+0x173/0x590
[  665.418707][T25902]  ? __pfx____sys_recvmsg+0x10/0x10
[  665.418731][T25902]  ? __fget_files+0x2a/0x420
[  665.418791][T25902]  do_recvmmsg+0x329/0x810
[  665.418817][T25902]  ? __pfx_do_recvmmsg+0x10/0x10
[  665.418847][T25902]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  665.418885][T25902]  __x64_sys_recvmmsg+0x198/0x250
[  665.418909][T25902]  ? __pfx___x64_sys_recvmmsg+0x10/0x10
[  665.418938][T25902]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  665.418958][T25902]  do_syscall_64+0x174/0x580
[  665.418977][T25902]  ? clear_bhb_loop+0x40/0x90
[  665.419000][T25902]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  665.419018][T25902] RIP: 0033:0x7f95d679ce59
[  665.419045][T25902] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  665.419062][T25902] RSP: 002b:00007f95d49d5028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[  665.419082][T25902] RAX: ffffffffffffffda RBX: 00007f95d6a16090 RCX: 00007f95d679ce59
[  665.419096][T25902] RDX: 0000000000000004 RSI: 0000200000000d80 RDI: 0000000000000003
[  665.419106][T25902] RBP: 00007f95d49d5090 R08: 0000000000000000 R09: 0000000000000000
[  665.419116][T25902] R10: 0000000000002030 R11: 0000000000000246 R12: 0000000000000002
[  665.419127][T25902] R13: 00007f95d6a16128 R14: 00007f95d6a16090 R15: 00007fff7d5eb4f8
[  665.419156][T25902]  </TASK>
[  665.768430][T25910] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  665.797055][T25921] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4979'.
[  665.806239][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  665.847737][T25921] netlink: 'syz.1.4979': attribute type 5 has an invalid length.
[  666.095331][T25938] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4985'.
[  666.119416][T25941] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4984'.
[  666.367504][T25953] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4990'.
[  666.553473][T25966] netlink: 'syz.4.4993': attribute type 13 has an invalid length.
[  666.583003][T25966] netlink: 'syz.4.4993': attribute type 17 has an invalid length.
[  666.652684][T25959] bridge0: port 2(bridge_slave_1) entered disabled state
[  666.765836][T25959] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  666.781723][T25959] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  666.791509][T25980] xt_hashlimit: size too large, truncated to 1048576
[  666.837694][T25982] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4997'.
[  666.848891][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  667.265380][T25966] 8021q: adding VLAN 0 to HW filter on device bond0
[  667.299478][T25966] 8021q: adding VLAN 0 to HW filter on device team0
[  667.327473][T25999] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5000'.
[  667.362321][T25966] 
[  667.364708][T25966] ============================================
[  667.370960][T25966] WARNING: possible recursive locking detected
[  667.377298][T25966] syzkaller #0 Not tainted
[  667.381761][T25966] --------------------------------------------
[  667.387999][T25966] syz.4.4993/25966 is trying to acquire lock:
[  667.394074][T25966] ffff888082d66e60 (&dev_instance_lock_key#3){+.+.}-{4:4}, at: __ethtool_get_link_ksettings+0x109/0x250
[  667.405402][T25966] 
[  667.405402][T25966] but task is already holding lock:
[  667.412758][T25966] ffff888082d66e60 (&dev_instance_lock_key#3){+.+.}-{4:4}, at: do_setlink+0x3d4/0x4670
[  667.422520][T25966] and the lock comparison function returns 0:
[  667.428578][T25966] 
[  667.428578][T25966] other info that might help us debug this:
[  667.436630][T25966]  Possible unsafe locking scenario:
[  667.436630][T25966] 
[  667.444104][T25966]        CPU0
[  667.447444][T25966]        ----
[  667.450721][T25966]   lock(&dev_instance_lock_key#3);
[  667.455969][T25966]   lock(&dev_instance_lock_key#3);
[  667.461157][T25966] 
[  667.461157][T25966]  *** DEADLOCK ***
[  667.461157][T25966] 
[  667.469290][T25966]  May be due to missing lock nesting notation
[  667.469290][T25966] 
[  667.477692][T25966] 2 locks held by syz.4.4993/25966:
[  667.482915][T25966]  #0: ffffffff8fdbd640 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8a3/0x1bd0
[  667.492066][T25966]  #1: ffff888082d66e60 (&dev_instance_lock_key#3){+.+.}-{4:4}, at: do_setlink+0x3d4/0x4670
[  667.502168][T25966] 
[  667.502168][T25966] stack backtrace:
[  667.508053][T25966] CPU: 0 UID: 0 PID: 25966 Comm: syz.4.4993 Not tainted syzkaller #0 PREEMPT(full) 
[  667.508073][T25966] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  667.508083][T25966] Call Trace:
[  667.508097][T25966]  <TASK>
[  667.508107][T25966]  dump_stack_lvl+0xe8/0x150
[  667.508127][T25966]  print_deadlock_bug+0x279/0x290
[  667.508150][T25966]  __lock_acquire+0x24bf/0x2cd0
[  667.508167][T25966]  ? __lock_acquire+0x683/0x2cd0
[  667.508182][T25966]  ? rtnl_newlink+0x148e/0x1bd0
[  667.508205][T25966]  ? rtnetlink_rcv_msg+0x802/0xc00
[  667.508226][T25966]  ? netlink_rcv_skb+0x226/0x4a0
[  667.508241][T25966]  ? netlink_unicast+0x7bb/0x940
[  667.508262][T25966]  ? netlink_sendmsg+0x813/0xb40
[  667.508277][T25966]  ? ____sys_sendmsg+0x9b9/0xa20
[  667.508293][T25966]  ? ___sys_sendmsg+0x2a5/0x360
[  667.508306][T25966]  ? __x64_sys_sendmsg+0x1bd/0x2a0
[  667.508321][T25966]  ? do_syscall_64+0x174/0x580
[  667.508338][T25966]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  667.508358][T25966]  ? __ethtool_get_link_ksettings+0x109/0x250
[  667.508377][T25966]  lock_acquire+0x106/0x350
[  667.508392][T25966]  ? __ethtool_get_link_ksettings+0x109/0x250
[  667.508417][T25966]  __mutex_lock+0x19d/0x1590
[  667.508434][T25966]  ? __ethtool_get_link_ksettings+0x109/0x250
[  667.508453][T25966]  ? lockdep_hardirqs_on+0x7a/0x110
[  667.508468][T25966]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  667.508490][T25966]  ? __wake_up_common_lock+0x195/0x1f0
[  667.508514][T25966]  ? __ethtool_get_link_ksettings+0x109/0x250
[  667.508534][T25966]  ? __pfx___mutex_lock+0x10/0x10
[  667.508551][T25966]  ? igmp_group_added+0x238/0x910
[  667.508664][T25966]  ? igmpv3_del_delrec+0x204/0x710
[  667.508681][T25966]  __ethtool_get_link_ksettings+0x109/0x250
[  667.508703][T25966]  bond_netdev_event+0x643/0xf80
[  667.508860][T25966]  ? __pfx_bond_netdev_event+0x10/0x10
[  667.508886][T25966]  ? ipmr_device_event+0x1f6/0x220
[  667.508936][T25966]  notifier_call_chain+0x1a5/0x3d0
[  667.508970][T25966]  __dev_notify_flags+0x1aa/0x310
[  667.509015][T25966]  ? __pfx___dev_notify_flags+0x10/0x10
[  667.509029][T25966]  ? __dev_change_flags+0x5f1/0x820
[  667.509045][T25966]  ? __pfx___dev_change_flags+0x10/0x10
[  667.509063][T25966]  netif_change_flags+0xde/0x1b0
[  667.509079][T25966]  dev_change_flags+0x128/0x260
[  667.509132][T25966]  vlan_device_event+0x1b4e/0x1f00
[  667.509222][T25966]  ? packet_notifier+0xf1b/0xf70
[  667.509276][T25966]  ? br_device_event+0x282/0x9c0
[  667.509315][T25966]  ? __pfx_phonet_device_notify+0x10/0x10
[  667.509361][T25966]  ? __pfx_vlan_device_event+0x10/0x10
[  667.509384][T25966]  ? bcm_notifier+0xa9/0x890
[  667.509425][T25966]  ? raw_notifier+0x9d/0x7d0
[  667.509469][T25966]  ? cgw_notifier+0x314/0x380
[  667.509485][T25966]  notifier_call_chain+0x1a5/0x3d0
[  667.509507][T25966]  __dev_notify_flags+0x1aa/0x310
[  667.509522][T25966]  ? __pfx___dev_notify_flags+0x10/0x10
[  667.509535][T25966]  ? __dev_change_flags+0x5f1/0x820
[  667.509552][T25966]  ? __pfx___dev_change_flags+0x10/0x10
[  667.509568][T25966]  ? __local_bh_enable_ip+0xd0/0x130
[  667.509590][T25966]  netif_change_flags+0xde/0x1b0
[  667.509607][T25966]  do_setlink+0xdd6/0x4670
[  667.509627][T25966]  ? __lock_acquire+0x683/0x2cd0
[  667.509642][T25966]  ? __pfx_do_setlink+0x10/0x10
[  667.509657][T25966]  ? __lock_acquire+0x683/0x2cd0
[  667.509676][T25966]  ? lockdep_hardirqs_on+0x7a/0x110
[  667.509692][T25966]  ? do_raw_spin_lock+0x12b/0x2f0
[  667.509719][T25966]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  667.509742][T25966]  ? lockdep_hardirqs_on+0x7a/0x110
[  667.509757][T25966]  ? __mutex_lock+0x10ab/0x1590
[  667.509773][T25966]  ? __mutex_lock+0x5c5/0x1590
[  667.509789][T25966]  ? rtnl_newlink+0x8a3/0x1bd0
[  667.509812][T25966]  ? __pfx___mutex_lock+0x10/0x10
[  667.509831][T25966]  ? ns_capable+0x89/0xe0
[  667.509846][T25966]  ? rtnl_link_get_net_capable+0xd3/0x310
[  667.509863][T25966]  rtnl_newlink+0x148e/0x1bd0
[  667.509890][T25966]  ? __pfx_rtnl_newlink+0x10/0x10
[  667.509911][T25966]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  667.509942][T25966]  ? kasan_quarantine_put+0xbb/0x1f0
[  667.509962][T25966]  ? lockdep_hardirqs_on+0x7a/0x110
[  667.509977][T25966]  ? nlmon_xmit+0xb0/0x100
[  667.510025][T25966]  ? kmem_cache_free+0x182/0x650
[  667.510053][T25966]  ? __lock_acquire+0x683/0x2cd0
[  667.510069][T25966]  ? __dev_queue_xmit+0x29b/0x37f0
[  667.510116][T25966]  ? __local_bh_enable_ip+0xd0/0x130
[  667.510131][T25966]  ? lockdep_hardirqs_on+0x7a/0x110
[  667.510144][T25966]  ? __dev_queue_xmit+0x29b/0x37f0
[  667.510160][T25966]  ? __local_bh_enable_ip+0xd0/0x130
[  667.510173][T25966]  ? __dev_queue_xmit+0x29b/0x37f0
[  667.510193][T25966]  ? rtnetlink_rcv_msg+0x1c9/0xc00
[  667.510215][T25966]  ? __pfx_rtnl_newlink+0x10/0x10
[  667.510241][T25966]  ? __pfx_rtnl_newlink+0x10/0x10
[  667.510263][T25966]  rtnetlink_rcv_msg+0x802/0xc00
[  667.510287][T25966]  ? rtnetlink_rcv_msg+0x1c9/0xc00
[  667.510308][T25966]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  667.510330][T25966]  ? ref_tracker_free+0x689/0x830
[  667.510348][T25966]  ? __pfx_ref_tracker_free+0x10/0x10
[  667.510368][T25966]  netlink_rcv_skb+0x226/0x4a0
[  667.510384][T25966]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  667.510407][T25966]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  667.510427][T25966]  ? netlink_deliver_tap+0x2e/0x1b0
[  667.510443][T25966]  ? netlink_deliver_tap+0x2e/0x1b0
[  667.510460][T25966]  netlink_unicast+0x7bb/0x940
[  667.510487][T25966]  netlink_sendmsg+0x813/0xb40
[  667.510507][T25966]  ? __pfx_netlink_sendmsg+0x10/0x10
[  667.510525][T25966]  ? aa_sock_msg_perm+0xf1/0x1b0
[  667.510548][T25966]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  667.510568][T25966]  ? __pfx_netlink_sendmsg+0x10/0x10
[  667.510584][T25966]  ____sys_sendmsg+0x9b9/0xa20
[  667.510602][T25966]  ? __might_fault+0xaf/0x130
[  667.510623][T25966]  ? __pfx_____sys_sendmsg+0x10/0x10
[  667.510642][T25966]  ? import_iovec+0x73/0xa0
[  667.510661][T25966]  ___sys_sendmsg+0x2a5/0x360
[  667.510676][T25966]  ? __lock_acquire+0x683/0x2cd0
[  667.510693][T25966]  ? __pfx____sys_sendmsg+0x10/0x10
[  667.510711][T25966]  ? futex_wake+0x4d7/0x5b0
[  667.510747][T25966]  ? __fget_files+0x2a/0x420
[  667.510764][T25966]  ? __fget_files+0x3a2/0x420
[  667.510786][T25966]  __x64_sys_sendmsg+0x1bd/0x2a0
[  667.510803][T25966]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  667.510822][T25966]  ? rcu_is_watching+0x15/0xb0
[  667.510844][T25966]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  667.510860][T25966]  do_syscall_64+0x174/0x580
[  667.510874][T25966]  ? trace_irq_disable+0x3b/0x140
[  667.510895][T25966]  ? clear_bhb_loop+0x40/0x90
[  667.510912][T25966]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  667.510927][T25966] RIP: 0033:0x7f569ab9ce59
[  667.510944][T25966] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  667.510957][T25966] RSP: 002b:00007f569bb00028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  667.510975][T25966] RAX: ffffffffffffffda RBX: 00007f569ae16090 RCX: 00007f569ab9ce59
[  667.510987][T25966] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000008
[  667.510997][T25966] RBP: 00007f569ac32d6f R08: 0000000000000000 R09: 0000000000000000
[  667.511007][T25966] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  667.511017][T25966] R13: 00007f569ae16128 R14: 00007f569ae16090 R15: 00007ffd8110c268
[  667.511036][T25966]  </TASK>
[  667.918890][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  668.999195][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  670.038894][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  671.088887][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  672.118885][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  673.158934][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  674.198951][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  675.238931][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  676.278962][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog