last executing test programs:

20.429371029s ago: executing program 0 (id=11793):
r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000080), 0x8)
getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f00000000c0)={<r1=>0x0, 0x6}, &(0x7f0000000100)=0x8)
getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000140)={0x6639, 0x3, 0x8, 0x4, 0x3, 0x8, 0xaa, 0xc, r1}, &(0x7f0000000180)=0x20) (async)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) (async)
ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f0000000000)={'veth1_to_bond\x00', 0x400}) (async, rerun: 64)
ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f0000000040)={'gretap0\x00', 0x200}) (async, rerun: 64)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000000061129800000000009500d90300000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0xe}, 0x94)

19.432771203s ago: executing program 0 (id=11799):
setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f0000000040)={0x101, 0x5, 0x3ff, 0x8}, 0x10)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$l2tp6(0xa, 0x2, 0x73)
getpeername$l2tp6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2}, &(0x7f00000000c0)=0x20)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="000000008b2f00001c00128009000100626f6e64000000000c00028008000500ffedffff080003"], 0x44}}, 0x0)

18.880382813s ago: executing program 0 (id=11809):
r0 = socket$inet6(0xa, 0x2, 0x38)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000900)=@raw={'raw\x00', 0x8, 0x3, 0x2c8, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x1f8, 0xffffffff, 0xffffffff, 0x1f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast1, @dev={0xfe, 0x80, '\x00', 0x21}, [0x0, 0x0, 0x0, 0xffffff00], [0xff, 0xffffff00, 0xff000000], 'syz_tun\x00', 'veth1\x00', {0xff}, {0xff}, 0x32, 0x4, 0x2, 0x12}, 0x0, 0xa8, 0xd0}, @common=@unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0xdf77782b65c3a720}}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [0x0, 0x0, 0xff000000, 0xffffffff], [], 'erspan0\x00', 'gre0\x00', {}, {}, 0x87, 0x0, 0x0, 0x21}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@frag={{0x30}, {[0x6, 0xffff], 0x6, 0x5, 0x1}}, @inet=@rpfilter={{0x28}, {0x2}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0xfffffc69)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000100)=0x3b23, 0x4)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r3, &(0x7f00000006c0)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000600)=0x14)
r5 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r5, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx2\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, 0x0, 0x0)
r6 = accept4(r5, 0x0, 0x0, 0x800)
sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
r8 = socket(0x1, 0x803, 0x0)
getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x4c}}, 0x0)
r10 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000500)="d8000000180081064e81f782db4cb904021e0800fd007c05e8fe55a10a000b000140020203600e41b0000900ac0006031100000016001500090002000000035c3b61c1d67f6f94007134cf6efbca4158858e796834b25ae5a3048000a007a290457f01a7cee4090000001fb7913fd25a21ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667e006dcdf63951f", 0xa2}, {&(0x7f0000000280)="c6e92830568379be24e7d2cfa14e3179fea6a9af4f780998ebb65a384d5eea865c38871cc1350c7e42fcf530054c203e2273e02faf8c31", 0x37}], 0x2}, 0x22040000)
r11 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r11, &(0x7f0000000700)={0x28, 0x0, 0x2710, @local}, 0x10)
listen(r11, 0x0)
r12 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r12, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10)
r13 = accept(r11, 0x0, 0x0)
setsockopt$sock_timeval(r13, 0x1, 0x42, &(0x7f0000000300)={0x0, 0xea60}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x12, 0x4, 0x4, 0xa4}, 0x50)

17.68481087s ago: executing program 0 (id=11816):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000200008000a40fffffffc0800034000000007400000000c0a010100004800000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xac}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)

17.376444691s ago: executing program 0 (id=11819):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'veth0\x00', <r3=>0x0})
unshare(0x400)
setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000000)={r3, 0x3, 0x6, @remote}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="190000000400000004000000"], 0x48)
sendmsg$NL80211_CMD_GET_WOWLAN(0xffffffffffffffff, 0x0, 0x20000000)
sendmsg$tipc(0xffffffffffffffff, &(0x7f0000002340)={&(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x3, {0x1, 0x1, 0x1}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x0)
r4 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000000), 0x8)
r5 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000000), 0x4)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000009c0000000b"], 0x50)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400000004"], 0x48)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e"], 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r6}, 0x0, 0x0}, 0x20)
socket$inet_tcp(0x2, 0x1, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=@newtfilter={0x24, 0x11, 0x1, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x74, r3, {0xf, 0x10}, {0x1, 0xfff1}, {0xffe0, 0x3}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x3204c8a0}, 0x840)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000ec0)={'batadv0\x00', <r7=>0x0})
r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYBLOB="0f0700000000fcffffff0c00000008000300", @ANYRES32=r7], 0x1c}, 0x1, 0x0, 0x0, 0x5}, 0x0)
openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000440), r0)

16.8055629s ago: executing program 0 (id=11823):
r0 = socket$inet(0x2, 0x3, 0x2)
sendmmsg$inet(r0, &(0x7f00000016c0)=[{{0x0, 0x0, &(0x7f0000000180)}}, {{&(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10, &(0x7f0000001640)=[{&(0x7f00000002c0)="d0d20d8684fbed9f7379e8a2d55a83b9e65458420ff33c0971d1c411ced8d4a6b6353360b27246ce78f56ecbb48929410c657196edaab20125a4950e73afff5eed8768073ffc2f01c7164605599010314de2491d0f81cc3e321bce5dafa653580495fe4e2ec319763da068cb9e7b510b8287fd1eb70b32c21b4692fa049c377e0880e389e3e3905c505d57", 0x8b}, {&(0x7f0000000380)="65b5ae82fe0a65c248f6648bc90b7b880b837672510e606fa7cdcb8823562fb08a04cccf0fd06601f1925d291e216d6fc531fd35b115f241c0d84bb9544d11be3abc9be6ed6f4d24ef884a4444cdcadfe38e9761616ea1d869763a5ba42b6b1f81917761724e1f638545ab222a43fcdbab3ef6e2c421ab026b06bfdc2172b27e657a2248fb88ad4849ba316aec12db79c0c14d90bebacf2f6d590be58b2b6fc2a8cbff69870201fecbe305b8b8f622", 0xaf}, {&(0x7f0000000440)="9af8383272189286242c6fe02362b1f5a4375f600b44dd9a27d107977695f75927bfdaded5a9a0eac2f986464bf57938b037ace4b3eea04cb623225d51be76a055fc567f658d8f469b52850c9eb6954ad3cd2a898e2bb6101f26f0eb77673e4c23454c1f42a0d454145750e2a5deee2a29f3fca25edb857b1f33bdeb19cb7b2cd359ca08d539830019cb1322383ae98f2af901b53c8e0c", 0x97}, {&(0x7f0000000500)="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", 0x1000}, {&(0x7f0000001500)="e541", 0x2}, {&(0x7f0000001540)="de96e6d7693e3a74318366a8a89369708b7b8949d52008d3a68a712c4ccc66ccdfe90258b4e2e691fad662d6d2f851b780d79151ae1c6bd690112c884fef3835680f00746363cb29db03608295662b7adebaef57a717d8fc15c26f2225d2a693b6999e016ef6a5db5ec7256878816db7c18c95ae6d9ca475d779ff109290c93ab36220ecc7a4d351029717f223de1e26198bae93451bccdf79e841859c7117f3c22b2f44a477493ac8defe05bd97faeea6d6de93b393bf79bbbf44a142905a5f97be4608b238ccf02197bccb2c3205e79122ca", 0xd3}], 0x6}}], 0x2, 0x800)
pipe(&(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
write(r2, &(0x7f0000000280)="96fa2c0bff209929", 0x8)
tee(r1, r3, 0x6, 0x9)
ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000140)={0x0, r0, 0x8000000000000000, 0x7, 0x6, 0x770})
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x20)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={0x0, 0x0, 0x37, 0x0, 0x0, 0x0, 0x10000, @value=r4}, 0x28)
unshare(0x2c020400)
r5 = socket$can_raw(0x1d, 0x3, 0x1)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0)
write$cgroup_int(r6, &(0x7f0000000000), 0xffffff6a)
ioctl$FS_IOC_RESVSP(r6, 0x4030582b, &(0x7f00000001c0)={0x1100, 0x2, 0xffffffffffffffff, 0x9, 0x0, 0xfdfd})
r7 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r7, &(0x7f00000000c0), 0x10)
sendmsg$can_bcm(r7, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x5, 0x0, 0x1, {0x0, 0xea60}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "3fae8a9ad451a727"}}, 0x48}}, 0x0)
sendmsg$can_bcm(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x5, 0x609f, 0x0, {0x0, 0x2710}, {0x0, 0xea60}, {}, 0x1, @can={{0x3, 0x1}, 0x1, 0x3, 0x0, 0x0, "6ee7ba2197db18bc"}}, 0x48}, 0x1, 0x0, 0x0, 0x20000800}, 0x44801)
setsockopt$CAN_RAW_ERR_FILTER(r5, 0x65, 0x7, 0x0, 0x0)
setsockopt$inet_mreqsrc(r0, 0x0, 0x28, &(0x7f0000000040)={@multicast1, @empty, @loopback}, 0xc)
getsockopt$inet_buf(r0, 0x0, 0x29, &(0x7f0000000040)=""/185, &(0x7f0000000100)=0xb9)

15.324427423s ago: executing program 4 (id=11831):
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x4) (async)
sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) (async)
sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="6c0000000b0601080000000000000000020000020500010007000000440007801800148014000240fc0200000000000000000000000000011800018014000240fe8000000000000000000000000000aa060004404e23000005000700880000000900020073797a31"], 0x6c}, 0x1, 0x0, 0x0, 0x48}, 0x4800) (async)
r0 = socket$netlink(0x10, 0x3, 0xc)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)={0x100, 0x1403, 0x400, 0x70bd27, 0x25dfdbfd, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'pimreg\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'geneve1\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth0_to_team\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'pim6reg1\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'caif0\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'geneve0\x00'}}]}, 0x100}}, 0x0) (async)
sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0)

15.18990859s ago: executing program 4 (id=11832):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000540)={0x4c, 0x0, 0x8, 0x201, 0x0, 0x0, {0x7, 0x0, 0x9}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xccbf}, @CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @udp=[@CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x3780000}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2f}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4040044}, 0x4000)
setsockopt$inet6_IPV6_DSTOPTS(0xffffffffffffffff, 0x29, 0x3b, &(0x7f0000000000)={0x3c, 0x21, '\x00', [@generic={0x9, 0x14, "b0aa8d61bb92657e76993c42d8c01efb25bb8f60"}, @pad1, @enc_lim={0x4, 0x1, 0x3}, @padn={0x1, 0x1, [0x0]}, @enc_lim={0x4, 0x1, 0x5}, @generic={0x23, 0xb2, "b1369b0406ad85b13460d88feffb39af9638e353647237dbc0ddea9bf51c594c2e64a6e0bf0e3861d4e20a5723d91b854942209e0bd6b9490da36a0cacf4faca74534a21da21618067ed59ed2edc6961274872eea8df9ec3843364d932587dc2dc83135016755546078ef3a15fe6f81dba0855ef6417c86c431ea2b2e10ce1cf4d8b9d8168288263d582a52f8523a580080e8b3c7d9aabec821fdac4a7b3ffc874174527d3975c4295de5a33e28a063f0070"}, @ra={0x5, 0x2, 0x2}, @calipso={0x7, 0x30, {0x2, 0xa, 0x6, 0x0, [0xffffffffffff8000, 0x2, 0x7ff, 0xfffffffffffffffc, 0x3]}}]}, 0x118)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x4, 0x1}, 0x50)
r2 = socket(0x400000000010, 0x3, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r4 = socket(0x400000000010, 0x3, 0x0)
r5 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x3}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0)
socketpair$unix(0x1, 0x3, 0x0, 0x0)
r7 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, r8, {}, {}, {0xffe0, 0x5}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_HASH={0x8, 0x2, 0xffffffff}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20004000}, 0x20048850)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd2d, 0x2, {0x0, 0x0, 0x0, r9, {0x0, 0x10}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_BASECLASS={0x8, 0x3, {0xffe0, 0x10}}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1e3a9}]}}]}, 0x44}}, 0x2)
bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@bloom_filter={0x1e, 0x8, 0x1, 0x7fffffff, 0x5000, r1, 0x0, '\x00', r9, 0xffffffffffffffff, 0x3, 0x0, 0x5, 0x3}, 0x50)
syz_emit_ethernet(0x5e, &(0x7f00000004c0)={@broadcast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x28, 0x3a, 0xff, @dev, @local, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @loopback, @mcast2}}}}}}, 0x0)

14.659325511s ago: executing program 4 (id=11835):
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="84010000100013070000000000000000e0000001000000000000000000000000ac"], 0x184}}, 0x0)
r0 = socket$inet6(0xa, 0x800000000000002, 0x0)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000340)=0x63ba, 0x4)
r1 = socket$phonet(0x23, 0x2, 0x1)
sendmsg$inet(r1, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x2000c0c1)
sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r1, &(0x7f00000015c0)={0x0, 0x0, &(0x7f0000001580)={0x0}, 0x1, 0x0, 0x0, 0x2}, 0x8000010)
setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000100)=0x8, 0x4)
socket$packet(0x11, 0x2, 0x300)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000280)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
recvmsg(r2, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00)
sendmsg$tipc(r3, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0)
write$cgroup_devices(r3, 0x0, 0x9)
sendmmsg$inet6(r0, &(0x7f0000000300)=[{{&(0x7f0000000000)={0xa, 0x4e1e, 0x3, @empty, 0xfff}, 0x1c, 0x0}}], 0x1, 0x60080004)
recvmmsg(r0, &(0x7f00000003c0), 0x1, 0x40002142, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
socket(0x1, 0x3, 0x200000)
close(0x4)
unshare(0x6a040000)
r4 = socket(0x10, 0x803, 0x0)
r5 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', <r6=>0x0})
r7 = socket$inet(0xa, 0x801, 0x84)
listen(r7, 0xfffffffd)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="ac0000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c00028005000100000000000800074000000002180006801400040020010000000000000000000000000001"], 0xac}}, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(r8, 0x0, 0x0)
accept4(r7, 0x0, 0x0, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newtfilter={0x158, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0x10}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x124, 0x2, [@TCA_U32_ACT={0xfc, 0x7, [@m_mirred={0xf8, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x3, 0x401, 0xffffffffffffffff, 0xe80, 0x4}, 0x4, r6}}]}, {0xaa, 0x6, "3e75ffff454932196190cafb130eae2a745b8560ec3cab3a8075096b09684633568daea2426619bd1ad4102a3713cd52f295de578a4cd0b4bf3e6c8dae393d6d071acd584c4dc93e34009be9cc32d72a4ae012185477f6b4a434060000000000000090b082904eb9346d3811d3c7f8d0bb299f502bdd9d6ff7f2248b17e707009df53c6df5fc19d9790c4408d302008c20f6553c63070e1cd6b8913dfdb5a078e680f676f760"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}, @TCA_U32_SEL={0x24, 0x5, {0x8, 0x7, 0x1, 0x3d3f, 0x0, 0xfff, 0x3, 0x58f, [{0x2, 0x20008000, 0x4, 0x1}]}}]}}, @TCA_RATE={0x6, 0x5, {0xff, 0xf8}}]}, 0x158}, 0x1, 0x0, 0x0, 0x1}, 0x24040084)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="200000001400010028bd7000fcdbdf25022001c8", @ANYRES32=r2, @ANYBLOB="08000700c11414c0c7c0ea0c1a482c747411479dbec1d9314cba0829ec1eb2"], 0x20}}, 0x40000c0)

9.548132727s ago: executing program 4 (id=11855):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000200)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="c0000000", @ANYRES16=r1, @ANYBLOB="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"], 0xc0}, 0x1, 0x0, 0x0, 0x20040805}, 0x50)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd630080fc00082c00db5b6861589bcfe8875a060300000023000000000000000000000000ac1414aa33"], 0xfdef)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20008090)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000002dc0), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f00000006c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x24, r3, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {}, {0x8, 0x2, 0x6}}, ["", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4880}, 0x20008000)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90)
r4 = socket$phonet_pipe(0x23, 0x5, 0x2)
setsockopt$PNPIPE_HANDLE(r4, 0x113, 0x3, 0x0, 0x0)
connect$phonet_pipe(r4, &(0x7f0000000040)={0x23, 0x1f, 0xfb, 0xf7}, 0x10)
r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0xf5ffffff, &(0x7f0000000000)='%', 0x0, 0xd01, 0xbe02, 0x0, 0x0, 0x0, 0x0, 0x2, 0x31}, 0x48)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000800)={<r7=>0x0, 0x5}, &(0x7f0000000840)=0x8)
getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000880)=@sack_info={r7, 0x1c24, 0x3}, &(0x7f00000008c0)=0xc)
sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x2c, r6, 0x400, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x3, 0x28}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000080}, 0x8000000)
sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x25dfdbfe, {{@in6=@remote, @in=@local, 0xfffc, 0x0, 0x0, 0x0, 0xa}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x9ff, 0x40800000000000, 0x800000000000000}}, [@tmpl={0x44, 0x5, [{{@in6=@ipv4={'\x00', '\xff\xff', @private=0xa010100}, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x20000c90}, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'bond0\x00', <r9=>0x0})
syz_genetlink_get_family_id$l2tp(&(0x7f0000001ec0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000001f80)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x40000)
r10 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
sendmsg$NL80211_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0xc001)
sendmsg$NL80211_CMD_RELOAD_REGDB(r0, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x14, r10, 0x400, 0x70bd28, 0x25dfdbff, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0xc0}, 0x4)
sendmsg$nl_route_sched(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x8fe02, {0x0, 0x0, 0x0, r9, {0xfff1, 0xffed}, {0xa, 0xb}, {0xfff2, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x8021}, 0x4008000)

9.124017073s ago: executing program 3 (id=11859):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000fcffffff00000000000000008500000036000000180100006420002500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000001800000850000000600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xe, 0x0, &(0x7f0000000880)="e977e82a0d0f0b11c3e35739287f", 0x0, 0x1004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r2, 0x84, 0x23, &(0x7f0000000200)={0x0, 0x7}, 0x8)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
writev(r1, &(0x7f0000000100)=[{&(0x7f0000000a40)="2e9b3d0007e03dd651930121c575963f88", 0x11}, {&(0x7f0000000140)="fb49b8a4b02d81", 0x7}], 0x2)
r3 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000040)={0x8, <r4=>0x0}, 0x8)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000080)={0xffffffffffffffff, r3, 0x5, 0x0, @val=@tracing={r4, 0x7fffffffffffffff}}, 0x20)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000300)={'syztnl2\x00', <r6=>0x0, 0x7, 0x700, 0x2, 0x7ff, {{0x27, 0x4, 0x0, 0x7, 0x9c, 0x67, 0x0, 0x7, 0x2b, 0x0, @dev={0xac, 0x14, 0x14, 0x43}, @multicast2, {[@timestamp_addr={0x44, 0x3c, 0x76, 0x1, 0x1, [{@remote, 0x8}, {@loopback, 0x7}, {@multicast1, 0x7}, {@local, 0x80000001}, {@dev={0xac, 0x14, 0x14, 0xa}}, {@broadcast, 0x80000000}, {@local, 0x97b}]}, @timestamp_prespec={0x44, 0x2c, 0xa5, 0x3, 0x8, [{@empty, 0x6}, {@private=0xa010101, 0x9}, {@local, 0x7}, {@dev={0xac, 0x14, 0x14, 0x12}, 0xfff}, {@multicast2, 0x3}]}, @lsrr={0x83, 0x1f, 0x53, [@dev={0xac, 0x14, 0x14, 0x30}, @multicast1, @loopback, @remote, @rand_addr=0x64010102, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1]}, @noop]}}}}})
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000480)={'ip6_vti0\x00', &(0x7f0000000400)={'syztnl2\x00', r6, 0x29, 0xfa, 0x9, 0x3, 0x24, @private0={0xfc, 0x0, '\x00', 0x1}, @empty, 0x7, 0x40, 0xa21a, 0x1}})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="178d048604bf0bfb1945d7430008", 0x0, 0x501, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50)

8.777998925s ago: executing program 4 (id=11860):
bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) (async)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0x0, 0xa, 0x7ffffffb, 0x14, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x2, 0x0, 0x2}, 0x50)

6.484121475s ago: executing program 4 (id=11864):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000003c0)={0x0, 0xa0, &(0x7f00000008c0)=[@in6={0xa, 0x4e22, 0x2, @private2}, @in6={0xa, 0x4e20, 0x3ac9, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7}, @in={0x2, 0x4e22, @broadcast}, @in={0x2, 0x4e24, @multicast2}, @in6={0xa, 0x4e24, 0x7ff, @dev={0xfe, 0x80, '\x00', 0x3a}, 0x3}, @in6={0xa, 0x4e25, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}, 0x6}, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x22}}]}, &(0x7f0000000240)=0x10) (async)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000003c0)={<r2=>0x0, 0xa0, &(0x7f00000008c0)=[@in6={0xa, 0x4e22, 0x2, @private2}, @in6={0xa, 0x4e20, 0x3ac9, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7}, @in={0x2, 0x4e22, @broadcast}, @in={0x2, 0x4e24, @multicast2}, @in6={0xa, 0x4e24, 0x7ff, @dev={0xfe, 0x80, '\x00', 0x3a}, 0x3}, @in6={0xa, 0x4e25, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}, 0x6}, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x22}}]}, &(0x7f0000000240)=0x10)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value, &(0x7f00000004c0)=0x8) (async)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value, &(0x7f00000004c0)=0x8)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFULNL_MSG_CONFIG(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x28, 0x1, 0x4, 0x101, 0x0, 0x0, {0x1}, [@NFULA_CFG_CMD={0x5, 0x1, 0x2}, @NFULA_CFG_MODE={0xa, 0x2, {0x5, 0x3}}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000010}, 0x800)
socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) (async)
bind$alg(r4, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58)
r5 = accept4(r4, 0x0, 0x0, 0x800)
setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f00000001c0)="00940a37", 0x4) (async)
setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f00000001c0)="00940a37", 0x4)
bpf$BPF_PROG_DETACH(0x9, &(0x7f00000002c0)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB, @ANYRES64=r1, @ANYBLOB, @ANYRES64=0x0], 0x20) (async)
bpf$BPF_PROG_DETACH(0x9, &(0x7f00000002c0)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB, @ANYRES64=r1, @ANYBLOB, @ANYRES64=0x0], 0x20)
socket$packet(0x11, 0x2, 0x300) (async)
socket$packet(0x11, 0x2, 0x300)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
sendmsg$tipc(r6, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0)
write$cgroup_devices(r6, 0x0, 0x9)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0)
sendto$unix(r5, &(0x7f0000000440)="36d9a32e92c131d730b1abaedb51eb66fd2d5b1f7eda4f0e859fdaf294bad70673813533d8bf1c6a77b65a7afdc01b29e73571071a68d5def5d7df839810da130b9348f4d9d407eb478d5bfb298c552a498271af70914e14ba9476fd2a0e47984c25ea20afab3064a748add27a7149e9c4705475bda2ecec9ec30214f28c5e16fd3f50f604f20232c534409e52bff64fc6ca0f5e254083aec2794b7216e002e87caf3d0fa7d04ff9e3b03e81595a04979594ff6ea888bf13de8e8f74c6178e31e47593732ae1a501ad3641d423195a788efdb643f50a8c8b9794a62f7b8dfa0fa7da9d391b92ce2a7f9fe0f9d584a377", 0xf0, 0x800, 0x0, 0x0) (async)
sendto$unix(r5, &(0x7f0000000440)="36d9a32e92c131d730b1abaedb51eb66fd2d5b1f7eda4f0e859fdaf294bad70673813533d8bf1c6a77b65a7afdc01b29e73571071a68d5def5d7df839810da130b9348f4d9d407eb478d5bfb298c552a498271af70914e14ba9476fd2a0e47984c25ea20afab3064a748add27a7149e9c4705475bda2ecec9ec30214f28c5e16fd3f50f604f20232c534409e52bff64fc6ca0f5e254083aec2794b7216e002e87caf3d0fa7d04ff9e3b03e81595a04979594ff6ea888bf13de8e8f74c6178e31e47593732ae1a501ad3641d423195a788efdb643f50a8c8b9794a62f7b8dfa0fa7da9d391b92ce2a7f9fe0f9d584a377", 0xf0, 0x800, 0x0, 0x0)
recvfrom(r5, &(0x7f00000030c0)=""/4117, 0xffffffffffffffbf, 0x1, 0x0, 0xffffffffffffffb5)
getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f00000006c0)={r2, 0x84, "8b0c744f4f9da0515f1834caecbbd56cd4ea860422712c181f644e301d6a1ecd194f2afb0b9d439b061f6383eb3895d7574e8ce2fe99298a91b9832d445527a24c2c5f470160c0e7655abf9494321191a8a7a4b8d1061d6e18d90155644008d053dd262ef8749dacfa197bd6261c937f56fb0e4756f6327dbadfad51473f01fdf5f5d35e"}, &(0x7f0000000780)=0x8c) (async)
getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f00000006c0)={r2, 0x84, "8b0c744f4f9da0515f1834caecbbd56cd4ea860422712c181f644e301d6a1ecd194f2afb0b9d439b061f6383eb3895d7574e8ce2fe99298a91b9832d445527a24c2c5f470160c0e7655abf9494321191a8a7a4b8d1061d6e18d90155644008d053dd262ef8749dacfa197bd6261c937f56fb0e4756f6327dbadfad51473f01fdf5f5d35e"}, &(0x7f0000000780)=0x8c)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$IPVS_CMD_ZERO(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="04000000", @ANYRES16=r8, @ANYBLOB="0100000400800100000010000000"], 0x14}}, 0x0)
ioctl$sock_bt_bnep_BNEPCONNADD(r5, 0x400442c8, &(0x7f0000000100)=ANY=[@ANYRES32=r7, @ANYBLOB])
setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xf, &(0x7f0000d10ffc)=0x200, 0x4)
sendmsg$nl_route(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000304000000000000000100000300", @ANYRES32=0x0, @ANYBLOB="680ab00000000000140012800a000100767863616e000000b61aee4d70f10400028004001a03bf4616a078103c4b1a6dff5b6edc439efd9c5cbf67e59a186fd6df59e056be2eeb052526a3f658dbde0934ca3e5ef97cde60a0dedb666eca6ee68e5e49e9127e10577b5d3138184d2d137a85534e18239e362e2541a5cf1994daa6e6ff131d920ff833a9ea5b9579f7e4cfe67cdf57fc938d710fd929a2c55f0d0cee0d8b6ecedb3dd445603ce616fa642e687a5220ec16690a7a1080541743321349d2cdfd8f54ee292d7c4382e2fb3497ea24e129e98f6d5f344ad6ca"], 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f00000004c0)=[@in6={0xa, 0x0, 0x0, @local, 0x1}], 0x1c)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) (async)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r9=>0xffffffffffffffff, <r10=>0xffffffffffffffff})
sendmsg$inet(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000f80)=[{&(0x7f0000000880)='m', 0x1}], 0x1}, 0x5)
setsockopt$sock_attach_bpf(r9, 0x1, 0x10, &(0x7f0000000100), 0x4) (async)
setsockopt$sock_attach_bpf(r9, 0x1, 0x10, &(0x7f0000000100), 0x4)

5.171931945s ago: executing program 3 (id=11868):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100))
socket$alg(0x26, 0x5, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000001b40)={0x1c, 0x20000000000000bb, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x32, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = socket(0x1, 0x803, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="1c0000001500010300000000000000000c00000008000100", @ANYRES32=r0], 0x1c}, 0x1, 0x0, 0x0, 0xc001}, 0x4000000)
sendmsg$NLBL_UNLABEL_C_STATICADD(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x6b7e369c4a37b0ea)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x3, &(0x7f0000000040)=@framed={{0x26, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0xffb8}}, &(0x7f0000000000)='GPL\x00'}, 0x94)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) (async)
socket$alg(0x26, 0x5, 0x0) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000001b40)={0x1c, 0x20000000000000bb, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x32, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
socket(0x1, 0x803, 0x0) (async)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="1c0000001500010300000000000000000c00000008000100", @ANYRES32=r0], 0x1c}, 0x1, 0x0, 0x0, 0xc001}, 0x4000000) (async)
sendmsg$NLBL_UNLABEL_C_STATICADD(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x6b7e369c4a37b0ea) (async)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x3, &(0x7f0000000040)=@framed={{0x26, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0xffb8}}, &(0x7f0000000000)='GPL\x00'}, 0x94) (async)

4.589644132s ago: executing program 3 (id=11871):
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x7, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0xb4}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x90)
r0 = socket(0x10, 0x3, 0x0)
sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0)
setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000000000), 0x4)

4.363285065s ago: executing program 3 (id=11873):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000000), r0)
r2 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r2)
getsockname$packet(r2, &(0x7f0000000180)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newlink={0x81, 0x10, 0x437, 0x800000, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, 0x504c3, 0x800}, [@IFLA_LINKINFO={0x10, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x4}}}]}, 0x30}, 0x1, 0x0, 0x0, 0x2000c014}, 0x24048040)
sendmsg$GTP_CMD_DELPDP(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002cbd70000e0000000202ff0008000100", @ANYRES32=r3, @ANYBLOB="0800020001"], 0x24}, 0x1, 0x0, 0x0, 0x44800}, 0x20000000)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x4bd1bfda, 0x0, 0x6}, 0x1c)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0xfffffffe, 0xd00, 0x2}, 0x1c)
r4 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r4, 0x0, 0x0)
unshare(0x2c060000)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/mnt\x00')
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000000)=ANY=[@ANYBLOB="200000002e00010026bdf000fcdbdf2504"], 0x20}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0300002e00090027bd7000000000000400000048031180"], 0x35c}, 0x1, 0x0, 0x0, 0x42804}, 0x4000010)
socket$nl_generic(0x10, 0x3, 0x10)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="200000002c00070127bd7000fcdbdf25097c00000804003200040003805fe867247ccab6b79bc03d4ec030d1cf7a7e901a9a523937121609f798a36545aa55edd624aae998082d76983f43f2ec1c582f9b38799f2e3b145dc7041f6c8ff9e68ffdd92f56bb82f7d187d215c60107d397a235998d5562b2d0fb9d8e2d50e66c17744466a300613908552b2932e3435cdd45dc5c26ac75486338190eda0665047c1eba4e978f8133ce84557964e599"], 0x20}, 0x1, 0x0, 0x0, 0xc000}, 0xc010)
r8 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'bridge0\x00', <r9=>0x0})
sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000001d00070f000000000000000007000000", @ANYRES32=r9, @ANYBLOB="40002700060010"], 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x0)
r10 = syz_init_net_socket$llc(0x1a, 0x2, 0x0)
sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r8, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000280)={&(0x7f0000000380)={0x5c, 0x0, 0x2, 0x70bd2a, 0x25dfdbff, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xff}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x7f}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40800}, 0x4090)
ioctl$F2FS_IOC_START_ATOMIC_WRITE(r10, 0xf501, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27}, 0x48)

3.192013921s ago: executing program 3 (id=11878):
socket$kcm(0xa, 0x3, 0x87)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
pselect6(0x40, &(0x7f0000000040)={0x3, 0x7, 0xd, 0x7, 0x5, 0xc, 0x5, 0x6}, 0x0, 0x0, 0x0, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="034886dd120000000000140000006000000003088700fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef)
r2 = socket$l2tp6(0xa, 0x2, 0x73)
sendmmsg$inet6(r2, &(0x7f0000003b80)=[{{&(0x7f0000000000)={0xa, 0x4e24, 0x8, @empty, 0x7}, 0x1c, 0x0, 0x0, &(0x7f00000002c0)=[@pktinfo={{0x24, 0x29, 0x32, {@loopback}}}], 0x28}}], 0x1, 0x8000)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x8, 0x1000000}, 0xfffffffffffffd59, 0x10, &(0x7f0000000040), 0xeafcf7e0, 0x0, 0xffffffffffffffff, 0xd}, 0x48)

3.060707778s ago: executing program 2 (id=11879):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000002c0)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x800)
bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0600000004000000080000000800000000000000", @ANYRES16=r0, @ANYBLOB="000000010000000000001ef01763", @ANYRESOCT=0x0, @ANYRES32], 0x48)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000380), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_NEW(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000500)=ANY=[@ANYBLOB="340000007cf84469ef44d75553d70ab133f8f6ac5370e154225a3f586a0b5d6506d5069ff9432325734af76a4fcec0553ff4efa18a1ddcdf67acf701037905d65c893714762b1ded6687f0a355253c99eb01bbd746149610cecd598c0b393edef758573bebad9dbef951e8be64e04f308a5f62", @ANYRES16=r3, @ANYBLOB="05090000000000000000240000000e0001006e657464657673696d0000000f0002006e657464657673696d300000"], 0x34}}, 0x0)
r4 = socket(0x400000000010, 0x3, 0x0)
r5 = socket$unix(0x1, 0x5, 0x0)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
getsockopt$IP_SET_OP_GET_BYNAME(r0, 0x1, 0x53, &(0x7f00000000c0)={0x6, 0x7, 'syz0\x00'}, &(0x7f0000000200)=0x28)
r7 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x5c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9, 0x1}, {0x4}, {0xe, 0xd}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x401}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x2, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}, @TCA_INGRESS_BLOCK={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x90}, 0x4000c00)
r8 = socket$netlink(0x10, 0x3, 0x0)
r9 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r10=>0x0})
sendmsg$nl_route_sched(r8, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24000084)
r11 = socket$nl_route(0x10, 0x3, 0x0)
r12 = socket$unix(0x1, 0x1, 0x0)
setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r4, 0x84, 0x1e, &(0x7f0000000240)=0xd1, 0x4)
ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r13=>0x0})
sendmsg$nl_route_sched(r11, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newqdisc={0x38, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r13, {}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x7}}]}, 0x38}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r14=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r14, {0x0, 0xffff}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x80000001, 0x5, 0x3, 0xfffffff7, 0x1, 0x26d6}}}}]}, 0x4c}}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0xd, &(0x7f0000000100)=ANY=[@ANYBLOB="180200000000000000000000000000008510000001000000950000000000000018010000202073250000000000202020731af8ff00000000bfa100000000000007010000f8fffffdb702000008000000b703000000000028850000007a00000095"], &(0x7f00000001c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfce}, 0x94)
mmap(&(0x7f0000ff1000/0xd000)=nil, 0xd000, 0x2, 0x80010, 0xffffffffffffffff, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000009c0)=ANY=[@ANYBLOB="9feb01001800000000000000240000002400000002000000000000000000000d0a0000000000000001000005"], &(0x7f0000000f40)=""/4089, 0x3e, 0xff9, 0x1, 0xfffffffa}, 0x28)
sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f7", 0x1}, {&(0x7f00000003c0)="e8", 0x1}], 0x2}], 0x1, 0x40800)

2.191943162s ago: executing program 1 (id=11881):
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000004780)=[{{0x0, 0x0, &(0x7f0000001880)=[{&(0x7f00000006c0)="760bd5f0", 0x4}], 0x1, 0x0, 0x0, 0x20000080}}], 0x1, 0x20000000)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'macvlan0\x00', <r1=>0x0})
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000000)={<r2=>0x0, 0xd, 0x6}, &(0x7f0000000040)=0x8)
getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000080)={r2, 0x8, 0x2, 0x5, 0x54, 0x9}, &(0x7f0000000100)=0x14)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000024c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="98000000100001042abd7000fefffffd00000000", @ANYRES32=r1, @ANYBLOB="82490e0000000000780016807400018014000b0002000000000000000100000000000000280001"], 0x98}, 0x1, 0x0, 0x0, 0xc10}, 0x8000)

2.166042147s ago: executing program 2 (id=11882):
r0 = socket$can_raw(0x1d, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000))
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={<r1=>0xffffffffffffffff})
mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r3 = accept4(r2, 0x0, 0x0, 0x80800)
setsockopt$sock_int(r3, 0x1, 0x7, &(0x7f00000014c0)=0x10000b, 0x4)
sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000640)=""/88, 0x58}, {&(0x7f0000000740)=""/105, 0xfffffe0b}], 0x2}, 0x0)
r4 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xfffffffd, {0x0, 0x0, 0x0, r5, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x0, 0x4, 0xc52d}}}}]}, 0x44}}, 0x4c850) (async)
sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xfffffffd, {0x0, 0x0, 0x0, r5, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x0, 0x4, 0xc52d}}}}]}, 0x44}}, 0x4c850)
sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001180)=@newtfilter={0x4c, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xfff3, 0xfff3}, {0x0, 0xfff3}, {0xd, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0x18, 0x2, [@TCA_MATCHALL_ACT={0x4}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0xb, 0xfff2}}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0x0, 0x9}}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20041004}, 0x0) (async)
sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001180)=@newtfilter={0x4c, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xfff3, 0xfff3}, {0x0, 0xfff3}, {0xd, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0x18, 0x2, [@TCA_MATCHALL_ACT={0x4}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0xb, 0xfff2}}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0x0, 0x9}}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20041004}, 0x0)
recvmmsg(r1, &(0x7f0000005a80)=[{{&(0x7f0000000040)=@can, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/108}], 0x0, &(0x7f0000000300)=""/4096}}, {{&(0x7f0000001300)=@xdp, 0x0, &(0x7f0000002440)=[{&(0x7f0000001380)=""/4096}, {&(0x7f0000002380)=""/152}]}, 0x400}, {{&(0x7f0000002480)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x0, {0xa, 0x0, 0x0, @private0}}, 0x0, &(0x7f0000004680)=[{&(0x7f0000002500)=""/4096}, {&(0x7f0000003500)=""/4096}, {&(0x7f0000004500)=""/101}, {&(0x7f0000004580)=""/148}, {&(0x7f0000004640)=""/1}]}, 0x80000001}, {{0x0, 0x0, &(0x7f0000005840)=[{&(0x7f0000004700)=""/127}, {&(0x7f0000004780)=""/142}, {&(0x7f0000004840)=""/4096}], 0x0, &(0x7f0000005880)=""/55}, 0x8}, {{0x0, 0x0, &(0x7f00000059c0)=[{&(0x7f00000058c0)=""/137}, {&(0x7f0000005980)=""/32}], 0x0, &(0x7f0000005a00)=""/65}, 0x7}], 0x1, 0xd507ed3fb1b95f1e, 0x0) (async)
recvmmsg(r1, &(0x7f0000005a80)=[{{&(0x7f0000000040)=@can, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/108}], 0x0, &(0x7f0000000300)=""/4096}}, {{&(0x7f0000001300)=@xdp, 0x0, &(0x7f0000002440)=[{&(0x7f0000001380)=""/4096}, {&(0x7f0000002380)=""/152}]}, 0x400}, {{&(0x7f0000002480)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x0, {0xa, 0x0, 0x0, @private0}}, 0x0, &(0x7f0000004680)=[{&(0x7f0000002500)=""/4096}, {&(0x7f0000003500)=""/4096}, {&(0x7f0000004500)=""/101}, {&(0x7f0000004580)=""/148}, {&(0x7f0000004640)=""/1}]}, 0x80000001}, {{0x0, 0x0, &(0x7f0000005840)=[{&(0x7f0000004700)=""/127}, {&(0x7f0000004780)=""/142}, {&(0x7f0000004840)=""/4096}], 0x0, &(0x7f0000005880)=""/55}, 0x8}, {{0x0, 0x0, &(0x7f00000059c0)=[{&(0x7f00000058c0)=""/137}, {&(0x7f0000005980)=""/32}], 0x0, &(0x7f0000005a00)=""/65}, 0x7}], 0x1, 0xd507ed3fb1b95f1e, 0x0)
shutdown(r1, 0x0) (async)
shutdown(r1, 0x0)

1.861640322s ago: executing program 2 (id=11883):
socket$nl_route(0x10, 0x3, 0x0)

1.85581564s ago: executing program 3 (id=11884):
socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet(0x2, 0x4, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee7, 0x8031, 0xffffffffffffffff, 0x2000)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r1=>0x0})
sendmsg$NL80211_CMD_GET_INTERFACE(0xffffffffffffffff, 0x0, 0x800)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="10000000040000000800000005"], 0x48)
r3 = socket(0x10, 0x80002, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r2}, &(0x7f0000000000), &(0x7f0000000040)=r4}, 0xa)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r4, r1}, 0x14)
syz_emit_ethernet(0x0, 0x0, 0x0)
syz_emit_ethernet(0xd84, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], 0x0)
setsockopt$packet_fanout(r3, 0x107, 0x12, 0x0, 0x0)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00')
unshare(0x6a040000)
r5 = socket$inet6(0xa, 0x3, 0x8000000003c)
connect$inet6(r5, &(0x7f0000000040)={0xa, 0xffff, 0xe9, @dev={0xfe, 0x80, '\x00', 0xa}, 0x5}, 0x1c)
sendmsg(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="2b10", 0x2}], 0x1, 0x0, 0x0, 0x2c}, 0x4084)
bind$inet6(r5, &(0x7f0000000140)={0xa, 0x4e22, 0x2, @mcast1, 0x1}, 0x1c)

1.796172733s ago: executing program 1 (id=11885):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7b, 0x4)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10)
r1 = socket$qrtr(0x2a, 0x2, 0x0)
connect$qrtr(r1, &(0x7f0000000000)={0x2a, 0x0, 0x7ffe}, 0xc)
bind$qrtr(r1, &(0x7f00000000c0)={0x2a, 0x1, 0x7ffe}, 0xc)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000080)={0x0, <r2=>0x0}, &(0x7f0000000180)=0xc)
setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000001c0)={{{@in=@remote, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e21, 0x0, 0x4e24, 0x8, 0x2, 0x0, 0x0, 0x2b, 0x0, r2}, {0xfffffffffffff493, 0x61a, 0x44e, 0x2, 0x5, 0x69, 0x6, 0x6}, {0x1, 0x32f8, 0x8, 0xfffffffffffffffb}, 0x5, 0x6e6bbe, 0x1, 0x1, 0x0, 0x1}, {{@in=@loopback, 0x4d3, 0x2b}, 0x2, @in6=@mcast1, 0x3502, 0x5, 0x3, 0x2, 0x1fffe0, 0x4, 0x7}}, 0xe8)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000140)='yeah', 0x4)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10)
sendto$inet(r0, &(0x7f0000000700)="0c268a927f1f6588b967481241ba78600a34f65ac618ded8974895abeaf4b4834ff959bcecc7a95425a3a07e758044ab4ea6f7c555d88fecf90b037511bf746bec66ba", 0x994b6e03113064ae, 0x0, 0x0, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xc250}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x18, 0x2, 0x0, 0x1, @val={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x52800, 0x4400}}}}}}, @IFLA_MASTER={0x8, 0x3}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x10)
recvmsg(r0, &(0x7f0000000100)={0x0, 0xa, &(0x7f0000002200)=[{&(0x7f0000000780)=""/4108, 0x437aba2}], 0x1, 0x0, 0xfffffdee, 0x407006}, 0x104)

1.712397962s ago: executing program 2 (id=11886):
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, 0x0, 0x8080)
socket(0x10, 0x80002, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40003}, 0x4040850)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000009c0)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a4c000000030a0fdb00000000000000000a0020050900030073797a30000000000900010073797a31000000001400048008000240e7b140bb08000140000000030a000700726f75746500000014000000110001"], 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840)
r1 = socket(0xa, 0x3, 0xff)
sendmsg$inet6(r1, &(0x7f0000001c00)={&(0x7f0000000140)={0xa, 0xa, 0x87, @dev={0xfe, 0x80, '\x00', 0x12}}, 0x1c, &(0x7f0000000000)=[{&(0x7f0000000180)}, {&(0x7f00000003c0)="9e91d91a92dc7c8fff658bb539e08d97fa631f943ee2ffb332c99223a7dfe52c1f3c218206", 0x25}], 0x2}, 0x20008b88)

1.541905895s ago: executing program 2 (id=11887):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000080000000000000064ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, 0x0, 0x0)
bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @empty}, 0x1c)
sendto$inet6(r1, &(0x7f0000000180)=':', 0x1, 0x24044013, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000000280)={0x3, {{0xa, 0x4e24, 0x7, @mcast2}}}, 0x88)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000000)={r0, 0xe0, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0xffffff70, &(0x7f0000001440)=[0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfffffffffffffcac, 0xfffffffffffffffd}}, 0x10)

1.497179077s ago: executing program 1 (id=11888):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="ffde000003000000635600813300000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000940)={0xd, 0xc, &(0x7f0000002b80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b792bded4f0000007b8af8ff40000000bfa200000000000007020000f8ffffffb703000007000200b704000000000000850000005900e1009500000000000000"], &(0x7f0000002b40)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}, 0x90)
r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
bind$nfc_llcp(r1, &(0x7f0000001040)={0x27, 0x0, 0xfffffffe, 0x4, 0x0, 0x1, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x3f}, 0x60)
sendto(r1, 0x0, 0x0, 0x0, &(0x7f0000000700)=@ax25={{0x3, @bcast, 0x5}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}, 0x80)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
r3 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000000)={0xfffffce3, 0x7, 0x2, 0x5}, 0x10)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000100000000000500000a54000000060a010400000000000000000a0000010900010073797a31000000002800048024000125d4371fe48c316b64535298800b000100736f636b65740000140002800800024000000008080001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000)
sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="280000001200015e36bfa1000000000007000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$fou(&(0x7f00000069c0), 0xffffffffffffffff)
sendmsg$FOU_CMD_ADD(r4, &(0x7f0000006ac0)={0x0, 0x0, &(0x7f0000006a80)={&(0x7f0000000000)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010029bd7000fbdbdf250100000014000900fe80160000000000000000000000001a080008000000000006000a004e230000"], 0x38}, 0x1, 0x0, 0x0, 0x4044840}, 0x48804)
setsockopt$inet_sctp6_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0xc}, 0x8)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1e, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}]}, &(0x7f0000000640)=0x10)
getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r2, 0x84, 0x13, &(0x7f0000000240)={0x0, 0x5}, &(0x7f0000000280)=0x8)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cpuset.effective_mems\x00', 0x275a, 0x0)
r7 = syz_genetlink_get_family_id$tipc2(&(0x7f00000004c0), 0xffffffffffffffff)
sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000001880)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB, @ANYRES16=r7, @ANYBLOB="010028bd7000ffdbdf2508000000"], 0x14}}, 0x44000)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r6, 0x0)

779.942719ms ago: executing program 1 (id=11889):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$netlink(0x10, 0x3, 0x14)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SET_LINK_TOL(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x68, r3, 0x1, 0x0, 0x0, {{}, {}, {0x4c, 0x18, {0x8d0, @link='broadcast-link\x00'}}}}, 0x68}}, 0x0)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)={0x28, 0x4, 0x8, 0x401, 0x0, 0x0, {0xa, 0x0, 0x3}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xf9}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x40080d0}, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000040)={'wlan0\x00', <r5=>0x0})
syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_NOACK_MAP(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x78, 0x0, 0x400, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x7fffffff, 0x2}}}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x2}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x326}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x9}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x3}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x7}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x81}, @NL80211_ATTR_NOACK_MAP={0x6}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x8}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x4}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x6}]}, 0x78}, 0x1, 0x0, 0x0, 0x4}, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="40000000400007012dbd7000ffdbdf25017c0000000000800c00018006000600900a0000100002800c00038004001c80040073800c0009002005000000000000"], 0x40}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000)
sendmsg$TIPC_NL_MON_GET(r1, &(0x7f0000000400)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0x74, 0x0, 0x300, 0x70bd29, 0x25dfdbfd, {}, [@TIPC_NLA_NODE={0x54, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x4f, 0x3, "b49d9355b0cda255071a221656e58372878f34ec768e6326abf8f447ffe39d4668f3a13c6656ca1024c101d5defe68beea0da4b6cf80532d6ff99c0f60249cc87c99b66d5ea0b349ca9475"}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x5}]}]}, 0x74}}, 0x80)

514.251774ms ago: executing program 2 (id=11890):
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_GET_ADDR(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="140400a3", @ANYRES16=r3, @ANYBLOB="01002cbd7000ffdbdf2503000000"], 0x14}, 0x1, 0x0, 0x0, 0x4010}, 0xc100)
pipe(&(0x7f0000000180)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000c80)={'lo\x00', <r8=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000001200)={0x0, 0xfffffffffffffff5, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x18, 0x10, 0x3}, @TCA_FQ_FLOW_MAX_RATE={0x2, 0x2, 0x14000000}, @TCA_FQ_PLIMIT={0x1300, 0x1, 0x5}]}}]}, 0x48}}, 0x0)
ioctl$int_in(r4, 0x5452, &(0x7f00000000c0)=0x704)
splice(r2, 0x0, r5, 0x0, 0x1100000000f336, 0x1)
r9 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001600)={0x48, r9, 0x1, 0x70bd2c, 0x1000, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x9}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r0}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r0}}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x128}]}, 0x48}}, 0x4)

296.356597ms ago: executing program 1 (id=11891):
unshare(0x6020400) (async)
r0 = gettid()
syz_open_procfs$namespace(r0, &(0x7f0000000000)='ns/uts\x00') (async)
unshare(0x2c060000)
close(0x3) (async)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) (async)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="050000000e000000400000000300000041000000", @ANYRES32, @ANYBLOB="2000000000bb000000000000006c67cc2e37040030598202e29421e79dd786ce77a6418bcbb4576898ab11625c30892c2799029ba339075326bf05e11386aa91b21582a1a34d10e6031d5200"/85, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140), &(0x7f0000000040), 0x1003, r1}, 0x38) (async)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000380)={r1, &(0x7f0000000300), 0x0}, 0x20) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x13, 0x7, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x36}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}]}, &(0x7f00000004c0)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)

0s ago: executing program 1 (id=11892):
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) (async)
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) (async)
unshare(0x400) (async)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=@framed={{0x62, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0x1e}}, &(0x7f0000000480)='GPL\x00'}, 0x90) (async)
r2 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000001c0)=r1, 0x4) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r0, @ANYBLOB="0000000002000000b70500000800000085000000aa00000095"], &(0x7f0000000300)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94)
r3 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) (async)
socket(0x80000000000000a, 0x2, 0x0) (async)
r4 = socket(0x80000000000000a, 0x2, 0x0)
setsockopt$inet6_group_source_req(r4, 0x29, 0x2a, &(0x7f0000000080)={0x20, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) (async)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="12000000ec00000008100000235db20f74866fcb", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
r6 = socket$inet_udp(0x2, 0x2, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r5, &(0x7f0000000480), &(0x7f0000000280)=@udp=r6, 0x1}, 0x20) (async)
poll(&(0x7f0000000240)=[{r6, 0x4140}], 0x1, 0xfffffffe)
setsockopt$inet6_group_source_req(r4, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0xffff, 0x0, @mcast1={0xff, 0x7}, 0x10000}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108) (async)
r7 = socket$phonet_pipe(0x23, 0x5, 0x2)
bind$phonet(r7, &(0x7f0000000040)={0x23, 0x4}, 0x10)
r8 = socket$phonet_pipe(0x23, 0x5, 0x2)
unshare(0x24060400) (async)
r9 = socket$tipc(0x1e, 0x5, 0x0)
sendmsg$tipc(r9, &(0x7f0000000c80)={&(0x7f0000000980)=@id, 0x10, 0x0}, 0x0) (async)
setsockopt$TIPC_GROUP_JOIN(r9, 0x10f, 0x87, &(0x7f0000000300)={0x40, 0x0, 0x1, 0x3}, 0x10) (async)
close(0x3) (async)
r10 = socket$phonet_pipe(0x23, 0x5, 0x2)
bind$phonet(r10, &(0x7f0000000040)={0x23, 0x14}, 0x10) (async)
bind$phonet(r8, &(0x7f0000000000)={0x23, 0x4, 0x1}, 0x10) (async)
setsockopt$inet6_group_source_req(r4, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}}}, 0x108) (async)
close(0x4)

kernel console output (not intermixed with test programs):

tap0: entered promiscuous mode
[ 1666.446885][T15435] debugfs: 'hsr1' already exists in 'hsr'
[ 1666.453155][T15435] Cannot create hsr debugfs directory
[ 1666.457530][T15444] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1666.470906][T13162] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1666.491914][T15435] hsr1: Slave A (bridge0) is not up; please bring it up to get a fully working HSR network
[ 1666.528803][T15435] hsr1: Slave B (ip6gretap0) is not up; please bring it up to get a fully working HSR network
[ 1666.546460][T15439] 8021q: VLANs not supported on nlmon0
[ 1666.877959][T15467] netlink: 24 bytes leftover after parsing attributes in process `syz.1.10656'.
[ 1666.943973][T13488] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1666.952513][T13180] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1666.987125][T15467] netlink: 3 bytes leftover after parsing attributes in process `syz.1.10656'.
[ 1667.382549][T15494] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10661'.
[ 1667.407225][T15486] syzkaller0: entered promiscuous mode
[ 1667.423088][T15486] syzkaller0: entered allmulticast mode
[ 1667.429299][T15495] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10661'.
[ 1667.445685][T15495] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10661'.
[ 1667.464330][T15489] dvmrp0: entered allmulticast mode
[ 1667.502593][T13162] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1667.908986][T15516] netlink: 'syz.0.10662': attribute type 49 has an invalid length.
[ 1668.550017][T13162] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1668.874306][ T1318] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1669.602573][T13163] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1669.983819][T13180] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1670.647040][T13163] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1671.670303][T32461] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1672.728914][ T6991] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1672.737245][ T6991] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1672.823191][T15517] netlink: 'syz.4.10663': attribute type 6 has an invalid length.
[ 1672.831574][T15517] netlink: 'syz.4.10663': attribute type 7 has an invalid length.
[ 1672.849848][T15517] netlink: 'syz.4.10663': attribute type 8 has an invalid length.
[ 1672.873637][T15519] 8021q: VLANs not supported on nlmon0
[ 1673.022774][T13180] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1673.178752][T15533] netlink: 28 bytes leftover after parsing attributes in process `syz.0.10669'.
[ 1673.230242][T15533] netlink: 28 bytes leftover after parsing attributes in process `syz.0.10669'.
[ 1673.305334][T15541] netlink: 76 bytes leftover after parsing attributes in process `syz.3.10671'.
[ 1673.434961][T15545] netlink: 'syz.0.10669': attribute type 1 has an invalid length.
[ 1673.622949][T15550] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1673.741026][T13162] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1673.860923][T15558] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[ 1673.948902][T15566] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 1, id = 0
[ 1674.006300][T15569] netlink: 28 bytes leftover after parsing attributes in process `syz.4.10679'.
[ 1674.104684][   T29] audit: type=1804 audit(1780421239.162:34): pid=15570 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.10679" name="/newroot/262/memory.events" dev="tmpfs" ino=1359 res=1 errno=0
[ 1674.154089][   T29] audit: type=1800 audit(1780421239.162:35): pid=15570 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.10679" name="memory.events" dev="tmpfs" ino=1359 res=0 errno=0
[ 1674.187557][   T29] audit: type=1804 audit(1780421239.212:36): pid=15570 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.10679" name="/newroot/262/memory.events" dev="tmpfs" ino=1359 res=1 errno=0
[ 1674.780028][T32461] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1675.265865][T13180] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1675.519381][T15586] netlink: 'syz.0.10684': attribute type 1 has an invalid length.
[ 1675.604688][T15590] netlink: 28 bytes leftover after parsing attributes in process `syz.0.10684'.
[ 1675.627507][T15587] netlink: 28 bytes leftover after parsing attributes in process `syz.0.10684'.
[ 1675.750965][T15576] bond6: option downdelay: invalid value (18446744073709551613)
[ 1675.770517][T15576] bond6: option downdelay: allowed values 0 - 2147483647
[ 1675.787713][T15576] bond6 (unregistering): Released all slaves
[ 1675.822524][T13162] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1675.886870][T15586] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR
[ 1676.106447][T15615] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10690'.
[ 1676.155288][T15615] ip6tnl4: entered allmulticast mode
[ 1676.267203][T15623] netlink: 16 bytes leftover after parsing attributes in process `syz.0.10689'.
[ 1676.295748][T15611] syzkaller0: entered promiscuous mode
[ 1676.320290][T15611] syzkaller0: entered allmulticast mode
[ 1676.880598][T13162] net_ratelimit: 2 callbacks suppressed
[ 1676.880621][T13162] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1677.275165][T15627] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[ 1677.910217][T13162] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1678.473315][ T6987] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1678.952702][T13162] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1679.114036][ T9395] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1680.014349][T13162] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1681.040099][T32461] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1682.071561][T32461] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1682.141455][T13180] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1682.388363][T15647] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10696'.
[ 1682.595259][T15656] batadv_slave_1: entered promiscuous mode
[ 1682.615435][T15656] netlink: 72 bytes leftover after parsing attributes in process `syz.3.10699'.
[ 1682.727781][T15656] batadv_slave_1: left promiscuous mode
[ 1683.007423][T15669] openvswitch: netlink: nsh attr 14384 is out of range max 3
[ 1683.016053][T15669] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1683.100418][T13163] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1683.177594][T15677] nbd: socks must be embedded in a SOCK_ITEM attr
[ 1683.209208][T15679] netlink: 28 bytes leftover after parsing attributes in process `syz.3.10708'.
[ 1683.236944][T15679] netlink: 28 bytes leftover after parsing attributes in process `syz.3.10708'.
[ 1683.250896][T15682] netlink: 88 bytes leftover after parsing attributes in process `syz.0.10710'.
[ 1683.409447][T15693] netlink: 'syz.3.10708': attribute type 1 has an invalid length.
[ 1683.499105][T15699] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10708'.
[ 1683.579670][T15696] netlink: 220 bytes leftover after parsing attributes in process `syz.4.10714'.
[ 1683.635805][T15696] netlink: 220 bytes leftover after parsing attributes in process `syz.4.10714'.
[ 1683.653275][T15696] netlink: 56 bytes leftover after parsing attributes in process `syz.4.10714'.
[ 1683.783041][T15711] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[ 1684.140482][T13163] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1684.236268][ T6996] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1684.355234][T15738] netlink: 'syz.3.10720': attribute type 83 has an invalid length.
[ 1684.861150][ T9395] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1685.180540][T32461] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1685.283735][T15738] lo speed is unknown, defaulting to 1000
[ 1685.723390][T15740] dvmrp0: entered allmulticast mode
[ 1686.818443][T15789] netlink: 'syz.3.10728': attribute type 1 has an invalid length.
[ 1686.857170][T15774] syzkaller0: entered promiscuous mode
[ 1686.883516][T15774] syzkaller0: entered allmulticast mode
[ 1686.986734][T15794] netlink: 'syz.2.10726': attribute type 13 has an invalid length.
[ 1687.016225][T15782] bond8: option lacp_rate: mode dependency failed, not supported in mode active-backup(1)
[ 1687.034291][T15782] bond8 (unregistering): Released all slaves
[ 1687.089450][T15784] netlink: 60 bytes leftover after parsing attributes in process `syz.2.10726'.
[ 1687.183932][T15782] netlink: 'syz.4.10727': attribute type 12 has an invalid length.
[ 1687.225867][T15789] 8021q: adding VLAN 0 to HW filter on device bond6
[ 1687.251161][T15791] bond6: (slave veth0_to_bond): Enslaving as an active interface with a down link
[ 1687.281839][T15797] macvlan0: entered promiscuous mode
[ 1687.287246][T15797] macvlan0: entered allmulticast mode
[ 1687.293858][T15797] bond6: entered promiscuous mode
[ 1687.300886][T15797] 8021q: adding VLAN 0 to HW filter on device macvlan0
[ 1687.308683][T15797] bond6: (slave macvlan0): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[ 1687.326019][T15797] bond6: left promiscuous mode
[ 1687.500160][T32461] net_ratelimit: 4 callbacks suppressed
[ 1687.500178][T32461] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1687.553479][T15782] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1687.859471][T15817] __nla_validate_parse: 1 callbacks suppressed
[ 1687.859492][T15817] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10733'.
[ 1687.927053][T15822] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10733'.
[ 1687.937430][T15822] netlink: 348 bytes leftover after parsing attributes in process `syz.3.10733'.
[ 1687.947874][T15822] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10733'.
[ 1687.959175][T15822] netlink: 348 bytes leftover after parsing attributes in process `syz.3.10733'.
[ 1687.970266][T15822] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10733'.
[ 1688.220942][ T9395] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1688.248419][T15836] SET target dimension over the limit!
[ 1688.547245][T32461] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1689.350864][ T6987] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1689.585994][T32461] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1690.629399][T32461] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1691.261545][T13177] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1691.670202][T13163] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1691.849380][T15844] netlink: 'syz.4.10738': attribute type 7 has an invalid length.
[ 1691.872728][T15844] netlink: 'syz.4.10738': attribute type 8 has an invalid length.
[ 1691.912145][T15851] netlink: 40 bytes leftover after parsing attributes in process `syz.2.10741'.
[ 1692.003512][T15859] netlink: 'syz.1.10742': attribute type 1 has an invalid length.
[ 1692.038906][T15854] bond7 (unregistering): Released all slaves
[ 1692.197972][T15859] bond2: entered promiscuous mode
[ 1692.211688][T15859] bond2: entered allmulticast mode
[ 1692.225742][T15859] 8021q: adding VLAN 0 to HW filter on device bond2
[ 1692.284203][T15862] erspan1: entered allmulticast mode
[ 1692.306656][T15874] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1692.317634][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1692.334915][T15862] bond2: (slave erspan1): making interface the new active one
[ 1692.344745][T15862] erspan1: entered promiscuous mode
[ 1692.358045][T15862] bond2: (slave erspan1): Enslaving as an active interface with an up link
[ 1692.420602][T15871] bond8: option lacp_active: invalid value (8)
[ 1692.434208][T15880] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10743'.
[ 1692.448242][T15871] bond8 (unregistering): Released all slaves
[ 1692.458186][T15880] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10743'.
[ 1692.623944][T15887] netlink: 'syz.0.10748': attribute type 39 has an invalid length.
[ 1692.702057][T13163] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1692.767714][T15892] netlink: 'syz.4.10750': attribute type 1 has an invalid length.
[ 1692.794369][T15890] nbd: must specify at least one socket
[ 1692.946343][T15895] 8021q: adding VLAN 0 to HW filter on device bond9
[ 1692.960664][T15895] bond8: (slave bond9): making interface the new active one
[ 1692.972310][T15895] bond8: (slave bond9): Enslaving as an active interface with an up link
[ 1693.082559][T15892] bond8: (slave gretap2): Enslaving as a backup interface with an up link
[ 1693.120763][T15901] netlink: 'syz.0.10751': attribute type 1 has an invalid length.
[ 1693.199260][T15874] lo speed is unknown, defaulting to 1000
[ 1693.333159][T15909] netlink: 'syz.4.10755': attribute type 3 has an invalid length.
[ 1693.352202][T15908] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10754'.
[ 1693.741760][T13163] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1694.077455][T15937] syzkaller0: entered promiscuous mode
[ 1694.085787][T15937] syzkaller0: entered allmulticast mode
[ 1694.098373][T15932] netlink: 'syz.0.10761': attribute type 49 has an invalid length.
[ 1694.220595][T15942] netlink: 'syz.4.10764': attribute type 5 has an invalid length.
[ 1694.303414][ T9395] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1694.390746][T15950] netlink: 100 bytes leftover after parsing attributes in process `syz.2.10765'.
[ 1694.401604][T15950] netlink: 100 bytes leftover after parsing attributes in process `syz.2.10765'.
[ 1694.467366][ T9395] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1694.476770][T13488] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1694.509922][ T6994] batadv0: left allmulticast mode
[ 1694.521872][ T6994] batadv0: left promiscuous mode
[ 1694.535316][ T6994] bridge0: port 1(batadv0) entered disabled state
[ 1694.581895][ T6994] dvmrp0: left allmulticast mode
[ 1694.790786][T13162] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1694.964815][T15962] netlink: 68 bytes leftover after parsing attributes in process `syz.3.10771'.
[ 1694.975013][ T6994] bond2 (unregistering): (slave gretap1): Releasing active interface
[ 1695.119001][ T6994] bond13 (unregistering): (slave geneve3): Releasing active interface
[ 1695.220680][ T6994] tipc: Disabling bearer <eth:syzkaller0>
[ 1695.308972][ T6994] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1695.319652][ T6994] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1695.332923][ T6994] bond0 (unregistering): Released all slaves
[ 1695.345521][ T6994] bond1 (unregistering): Released all slaves
[ 1695.370464][ T6994] bond2 (unregistering): Released all slaves
[ 1695.388338][ T6994] bond3 (unregistering): Released all slaves
[ 1695.414624][ T6994] bond4 (unregistering): Released all slaves
[ 1695.436049][ T6994] bond5 (unregistering): Released all slaves
[ 1695.463749][ T6994] bond6 (unregistering): Released all slaves
[ 1695.479821][ T6994] bond7 (unregistering): Released all slaves
[ 1695.497005][ T6994] bond8 (unregistering): Released all slaves
[ 1695.514461][ T6994] bond9 (unregistering): Released all slaves
[ 1695.551014][ T6994] bond10 (unregistering): Released all slaves
[ 1695.568083][ T6994] bond11 (unregistering): Released all slaves
[ 1695.590229][ T6994] bond12 (unregistering): (slave veth0_to_bond): Releasing active interface
[ 1695.612741][ T6994] bond12 (unregistering): Released all slaves
[ 1695.639641][ T6994] bond13 (unregistering): Released all slaves
[ 1695.666181][ T6994] bond14 (unregistering): Released all slaves
[ 1695.724959][T13162] syz0: Port: 1 Link DOWN
[ 1695.827230][T13162] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1695.951407][T15975] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1695.979051][T15969] syzkaller0: entered promiscuous mode
[ 1695.985529][T15969] syzkaller0: entered allmulticast mode
[ 1696.024318][T15979] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1696.032197][T15970] netlink: 300 bytes leftover after parsing attributes in process `syz.1.10773'.
[ 1696.125346][ T6994] tipc: Left network mode
[ 1696.150526][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1696.296688][T15973] netlink: 'syz.4.10776': attribute type 49 has an invalid length.
[ 1696.320069][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1696.837711][T16010] netlink: 68 bytes leftover after parsing attributes in process `syz.4.10782'.
[ 1697.533349][T16021] netlink: 32 bytes leftover after parsing attributes in process `syz.0.10786'.
[ 1697.646043][T16040] netlink: 32 bytes leftover after parsing attributes in process `syz.0.10786'.
[ 1697.900534][T13162] net_ratelimit: 5 callbacks suppressed
[ 1697.900555][T13162] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1697.959254][T16046] syzkaller0: entered promiscuous mode
[ 1697.987836][T16046] syzkaller0: entered allmulticast mode
[ 1698.194829][ T6994] hsr_slave_0: left promiscuous mode
[ 1698.244405][ T6994] hsr_slave_1: left promiscuous mode
[ 1698.678947][T16069] netlink: 'syz.4.10792': attribute type 1 has an invalid length.
[ 1698.909599][T16069] netlink: 176 bytes leftover after parsing attributes in process `syz.4.10792'.
[ 1698.948913][T13162] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1699.631418][T16034] lo speed is unknown, defaulting to 1000
[ 1699.657852][ T6991] smbdirect: ib_dev[syz0] removed
[ 1699.886115][T16101] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10799'.
[ 1699.981696][T13162] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1700.096106][T16109] netlink: 68 bytes leftover after parsing attributes in process `syz.1.10800'.
[ 1700.223870][ T6989] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1700.239613][T16111] netlink: 40 bytes leftover after parsing attributes in process `syz.4.10801'.
[ 1700.381900][T13177] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1700.429398][T16116] syzkaller0: entered promiscuous mode
[ 1700.484949][T16116] syzkaller0: entered allmulticast mode
[ 1700.508528][ T6994] IPVS: stop unused estimator thread 0...
[ 1700.945763][T16129] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR
[ 1701.023147][T13162] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1701.158503][T16138] netlink: 'syz.2.10807': attribute type 1 has an invalid length.
[ 1701.275318][T16151] syzkaller0: entered promiscuous mode
[ 1701.296438][T16151] syzkaller0: entered allmulticast mode
[ 1701.353365][T16147] bond4: (slave bridge8): making interface the new active one
[ 1701.390929][T16147] bond4: (slave bridge8): Enslaving as an active interface with an up link
[ 1701.400686][T16156] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10810'.
[ 1701.585438][ T6993] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1701.596275][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1701.638436][ T6993] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1701.647043][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1701.857357][T16181] netlink: 'syz.0.10813': attribute type 16 has an invalid length.
[ 1701.914271][T16181] netlink: 'syz.0.10813': attribute type 3 has an invalid length.
[ 1701.961429][T16181] netlink: 64066 bytes leftover after parsing attributes in process `syz.0.10813'.
[ 1702.096720][T16150] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[ 1702.307822][T16188] syzkaller0: entered promiscuous mode
[ 1702.326312][T16188] syzkaller0: entered allmulticast mode
[ 1702.337399][T16190] netlink: 68 bytes leftover after parsing attributes in process `syz.1.10816'.
[ 1702.637409][T16209] bond5: option lacp_active: mode dependency failed, not supported in mode balance-rr(0)
[ 1702.655744][T16209] bond5 (unregistering): Released all slaves
[ 1702.724993][T16211] team0: No ports can be present during mode change
[ 1703.101920][T13163] net_ratelimit: 11 callbacks suppressed
[ 1703.101956][T13163] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1703.245775][T16244] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10833'.
[ 1703.291399][T11550] Bluetooth: hci1: link tx timeout
[ 1703.304267][T11550] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa
[ 1703.349307][T16236] syzkaller0: entered promiscuous mode
[ 1703.355094][T16236] syzkaller0: entered allmulticast mode
[ 1703.377413][T16244] vlan1: entered promiscuous mode
[ 1703.391437][T16257] netlink: 20 bytes leftover after parsing attributes in process `syz.3.10835'.
[ 1703.423065][T13177] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1703.647852][T16264] netlink: 68 bytes leftover after parsing attributes in process `syz.3.10837'.
[ 1704.060956][T13177] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1704.150501][T13162] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1704.852586][T16316] netlink: 52 bytes leftover after parsing attributes in process `syz.0.10852'.
[ 1705.205547][T13162] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1705.343324][T11550] Bluetooth: hci1: command 0x0405 tx timeout
[ 1705.998135][ T6989] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1706.230436][T13162] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1706.464659][T13177] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1707.262044][T13162] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1708.042079][T16253] lo speed is unknown, defaulting to 1000
[ 1708.068315][T16319] bridge3: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[ 1708.100451][T16314] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[ 1708.152748][T16333] netlink: 68 bytes leftover after parsing attributes in process `syz.1.10853'.
[ 1708.287967][T16335] tipc: Enabling of bearer <ufp:s> rejected, media not registered
[ 1708.303414][T13162] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1708.532702][T16343] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[ 1708.588225][T16345] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1708.606554][T16345] netlink: 4560 bytes leftover after parsing attributes in process `syz.4.10857'.
[ 1708.653584][T16345] netlink: 4560 bytes leftover after parsing attributes in process `syz.4.10857'.
[ 1708.713328][T16351] netlink: 52 bytes leftover after parsing attributes in process `syz.3.10858'.
[ 1708.735776][T16351] netlink: 'syz.3.10858': attribute type 1 has an invalid length.
[ 1708.900047][T16356] sctp: [Deprecated]: syz.1.10860 (pid 16356) Use of int in max_burst socket option deprecated.
[ 1708.900047][T16356] Use struct sctp_assoc_value instead
[ 1709.104266][T16358] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10861'.
[ 1709.217448][T16366] netlink: 'syz.0.10864': attribute type 1 has an invalid length.
[ 1709.339240][T16371] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10865'.
[ 1709.358718][T13163] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1709.426331][T16376] netlink: 'syz.4.10867': attribute type 2 has an invalid length.
[ 1709.494426][T16382] netlink: 68 bytes leftover after parsing attributes in process `syz.2.10869'.
[ 1709.505516][ T9395] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1709.515805][T16376] netlink: 220 bytes leftover after parsing attributes in process `syz.4.10867'.
[ 1709.552203][T16376] netlink: 220 bytes leftover after parsing attributes in process `syz.4.10867'.
[ 1709.739249][T16390] IPVS: set_ctl: invalid protocol: 59 255.255.255.255:20003
[ 1709.902592][T16399] batman_adv: batadv0: Interface activated: vlan2
[ 1709.939318][T16401] __nla_validate_parse: 1 callbacks suppressed
[ 1709.939338][T16401] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10873'.
[ 1710.023961][T16406] netlink: 41 bytes leftover after parsing attributes in process `syz.1.10875'.
[ 1710.048670][T16406] netlink: 140 bytes leftover after parsing attributes in process `syz.1.10875'.
[ 1710.061371][T16399] bridge0: port 3(bond0) entered blocking state
[ 1710.067875][T16399] bridge0: port 3(bond0) entered forwarding state
[ 1710.116535][T16399] 8021q: adding VLAN 0 to HW filter on device team0
[ 1710.135389][T16399] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1710.162035][T16417] netlink: 'syz.0.10874': attribute type 6 has an invalid length.
[ 1710.221104][T16399] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1710.233212][T16399] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1710.252403][T16399] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[ 1710.263392][T16399] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 1710.278800][T16399] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[ 1710.352324][ T6998] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1710.359605][ T6998] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1710.373608][ T6998] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1710.380966][ T6998] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1710.390129][T13162] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1710.431731][T16406] netlink: 41 bytes leftover after parsing attributes in process `syz.1.10875'.
[ 1710.821048][T16438] xt_hashlimit: size too large, truncated to 1048576
[ 1710.831825][T16442] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1710.843162][T16444] openvswitch: netlink: nsh attr 14384 is out of range max 3
[ 1710.887321][T16444] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1710.947352][T16442] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1711.070818][T16453] –: renamed from dummy0
[ 1711.238545][T16438] xt_hashlimit: size too large, truncated to 1048576
[ 1711.331723][T16456] netlink: 68 bytes leftover after parsing attributes in process `syz.1.10887'.
[ 1711.575923][T16438] xt_hashlimit: size too large, truncated to 1048576
[ 1712.156618][T16470] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1712.242869][T16487] netlink: 212348 bytes leftover after parsing attributes in process `syz.4.10894'.
[ 1712.324585][T16482] netlink: 52 bytes leftover after parsing attributes in process `syz.0.10893'.
[ 1712.618389][T16503] syzkaller0: entered promiscuous mode
[ 1712.624833][T16503] syzkaller0: entered allmulticast mode
[ 1712.864110][T16514] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10900'.
[ 1712.887355][T16515] netlink: 68 bytes leftover after parsing attributes in process `syz.3.10902'.
[ 1712.936244][T16518] SET target dimension over the limit!
[ 1713.114154][T16522] netlink: 36 bytes leftover after parsing attributes in process `syz.4.10904'.
[ 1713.241424][T16525] can: request_module (can-proto-0) failed.
[ 1713.500741][T13163] net_ratelimit: 117 callbacks suppressed
[ 1713.500763][T13163] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1713.516552][T16532] IPVS: set_ctl: invalid protocol: 43 172.20.20.187:20001
[ 1713.644018][T16537] netlink: 'syz.4.10905': attribute type 1 has an invalid length.
[ 1713.672378][ T9395] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1714.549508][T13163] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1715.587658][ T9395] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1715.600383][T13163] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1716.639279][T13163] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1716.780576][ T6998] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1717.082926][T16564] __nla_validate_parse: 8 callbacks suppressed
[ 1717.082947][T16564] netlink: 68 bytes leftover after parsing attributes in process `syz.3.10914'.
[ 1717.183481][T16568] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1717.330575][T16575] netlink: 68 bytes leftover after parsing attributes in process `syz.3.10916'.
[ 1717.660059][T13163] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1717.722424][T16595] netlink: 'syz.0.10920': attribute type 1 has an invalid length.
[ 1717.770720][T16595] 8021q: adding VLAN 0 to HW filter on device bond8
[ 1717.791600][    C1] vcan0: j1939_tp_rxtimer: 0xffff888047727000: rx timeout, send abort
[ 1717.853476][T16595] vlan2: entered promiscuous mode
[ 1717.858543][T16595] bond8: entered promiscuous mode
[ 1717.890233][T16595] vlan2: entered allmulticast mode
[ 1717.895947][T16595] bond8: entered allmulticast mode
[ 1717.962448][T16606] mac80211_hwsim hwsim125 syzkaller0: entered promiscuous mode
[ 1717.970652][T16606] mac80211_hwsim hwsim125 syzkaller0: entered allmulticast mode
[ 1717.998272][T16597] netlink: 32 bytes leftover after parsing attributes in process `syz.0.10920'.
[ 1718.018695][T16597] tipc: Invalid UDP bearer configuration
[ 1718.018755][T16597] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[ 1718.149473][T16597] bond8: (slave bridge4): making interface the new active one
[ 1718.160493][T16597] bridge4: entered promiscuous mode
[ 1718.178560][T16597] bridge4: entered allmulticast mode
[ 1718.185641][T16612] netlink: 228 bytes leftover after parsing attributes in process `syz.4.10925'.
[ 1718.222446][T16597] bond8: (slave bridge4): Enslaving as an active interface with an up link
[ 1718.248822][T16617] bridge0: entered allmulticast mode
[ 1718.302189][    C1] vcan0: j1939_tp_rxtimer: 0xffff888047727000: abort rx timeout. Force session deactivation
[ 1718.582927][T16637] nbd: must specify a size in bytes for the device
[ 1718.607842][T16638] netlink: 68 bytes leftover after parsing attributes in process `syz.3.10932'.
[ 1718.623063][T13177] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1718.711783][T13163] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1718.739627][T16644] mac80211_hwsim hwsim122 wlan0: entered promiscuous mode
[ 1718.765492][T16648] netlink: 'syz.0.10934': attribute type 16 has an invalid length.
[ 1718.784470][T16645] netlink: 7 bytes leftover after parsing attributes in process `syz.4.10933'.
[ 1718.793538][    C1] vcan0: j1939_tp_rxtimer: 0xffff888047726c00: rx timeout, send abort
[ 1718.819928][T16648] netlink: 'syz.0.10934': attribute type 17 has an invalid length.
[ 1718.835275][T16645] netlink: 7 bytes leftover after parsing attributes in process `syz.4.10933'.
[ 1718.854560][T16645] netlink: 7 bytes leftover after parsing attributes in process `syz.4.10933'.
[ 1718.911966][T16645] netlink: 7 bytes leftover after parsing attributes in process `syz.4.10933'.
[ 1718.924002][T16645] netlink: 7 bytes leftover after parsing attributes in process `syz.4.10933'.
[ 1719.293641][    C1] vcan0: j1939_tp_rxtimer: 0xffff888047726c00: abort rx timeout. Force session deactivation
[ 1719.534609][T16671] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0x3
[ 1719.562398][T16671] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1719.740349][T32461] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1719.795179][T16680] netlink: 'syz.1.10945': attribute type 1 has an invalid length.
[ 1719.835049][T16680] 8021q: adding VLAN 0 to HW filter on device bond4
[ 1719.863642][T16680] vlan2: entered promiscuous mode
[ 1719.868903][T16680] bond4: entered promiscuous mode
[ 1719.875364][T16680] vlan2: entered allmulticast mode
[ 1719.881216][T16680] bond4: entered allmulticast mode
[ 1720.044506][T16686] bond4: (slave bridge7): making interface the new active one
[ 1720.077581][T16686] bridge7: entered promiscuous mode
[ 1720.095023][T16686] bridge7: entered allmulticast mode
[ 1720.121607][T16686] bond4: (slave bridge7): Enslaving as an active interface with an up link
[ 1720.233347][T16690] bridge0: port 5(vlan1) entered blocking state
[ 1720.256275][T16690] bridge0: port 5(vlan1) entered disabled state
[ 1720.274995][T16690] vlan1: entered allmulticast mode
[ 1720.292372][T16690] geneve0: entered allmulticast mode
[ 1720.316790][T16690] vlan1: entered promiscuous mode
[ 1720.335787][T16690] geneve0: entered promiscuous mode
[ 1720.633724][T16705] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1720.657284][T16705] bridge_slave_0 (unregistering): left allmulticast mode
[ 1720.670264][T16705] bridge_slave_0 (unregistering): left promiscuous mode
[ 1720.688859][T16705] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1720.706042][T16710] netlink: 'syz.1.10952': attribute type 1 has an invalid length.
[ 1720.781529][T13163] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1721.252425][T16696] lo speed is unknown, defaulting to 1000
[ 1721.662817][T13177] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1721.728842][T16752] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1721.763093][T16752] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1721.772177][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1722.132881][T16767] __nla_validate_parse: 68 callbacks suppressed
[ 1722.132905][T16767] netlink: 16 bytes leftover after parsing attributes in process `syz.1.10966'.
[ 1722.256856][T16761] netlink: 'syz.2.10964': attribute type 49 has an invalid length.
[ 1722.364094][T16767] netlink: 24 bytes leftover after parsing attributes in process `syz.1.10966'.
[ 1722.380283][T16774] syzkaller0: entered promiscuous mode
[ 1722.392996][T16774] syzkaller0: entered allmulticast mode
[ 1723.015906][T16799] netlink: 68 bytes leftover after parsing attributes in process `syz.0.10973'.
[ 1723.330918][T16809] netlink: 68 bytes leftover after parsing attributes in process `syz.2.10975'.
[ 1723.382151][T16774] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[ 1723.487667][T16815] netlink: 256 bytes leftover after parsing attributes in process `syz.0.10978'.
[ 1723.981231][T13163] net_ratelimit: 4 callbacks suppressed
[ 1723.981251][T13163] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1724.065276][T16835] netlink: 'syz.4.10982': attribute type 10 has an invalid length.
[ 1724.096566][T16850] netlink: 68 bytes leftover after parsing attributes in process `syz.2.10986'.
[ 1724.143686][T16835] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 1724.201827][T16835] team0: Port device netdevsim1 added
[ 1724.247671][T16852] tipc: Enabled bearer <eth:team0>, priority 0
[ 1724.275729][T16852] netlink: 32 bytes leftover after parsing attributes in process `syz.2.10987'.
[ 1724.452852][T16866] netlink: 'syz.1.10992': attribute type 11 has an invalid length.
[ 1724.599311][T16881] netlink: 68 bytes leftover after parsing attributes in process `syz.3.10995'.
[ 1724.610800][T16878] syzkaller1: entered promiscuous mode
[ 1724.638071][T16878] syzkaller1: entered allmulticast mode
[ 1724.659358][T16885] netlink: 68 bytes leftover after parsing attributes in process `syz.4.10997'.
[ 1724.703858][T13177] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1725.033027][T13163] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1725.348263][T16913] netlink: 24 bytes leftover after parsing attributes in process `syz.2.11006'.
[ 1725.361628][ T9395] tipc: Node number set to 3235799657
[ 1725.403136][T16913] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate.
[ 1725.447380][T16917] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[ 1725.652806][T16929] netlink: 'syz.2.11011': attribute type 2 has an invalid length.
[ 1726.060387][T13163] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1726.104878][T16944] ip6gre1: entered promiscuous mode
[ 1726.118661][T16944] ip6gre1: entered allmulticast mode
[ 1726.358593][T16953] netlink: 'syz.2.11019': attribute type 27 has an invalid length.
[ 1726.850807][T16977] vcan0: tx drop: invalid da for name 0x00000000000000c7
[ 1727.078127][T16987] bond10: (slave bond_slave_1): Device is not bonding slave
[ 1727.086082][T16987] bond10: option active_slave: invalid value (bond_slave_1)
[ 1727.102406][T13163] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1727.114201][T16987] bond10 (unregistering): Released all slaves
[ 1727.483013][T17002] __nla_validate_parse: 38 callbacks suppressed
[ 1727.483034][T17002] netlink: 68 bytes leftover after parsing attributes in process `syz.2.11033'.
[ 1727.742775][T13177] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1727.790276][T17007] netlink: 'syz.0.11036': attribute type 10 has an invalid length.
[ 1727.806706][T17014] netlink: 'syz.1.11038': attribute type 32 has an invalid length.
[ 1727.836061][T17007] netlink: 40 bytes leftover after parsing attributes in process `syz.0.11036'.
[ 1727.869031][T17007] dummy0: entered allmulticast mode
[ 1727.893926][T17007] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[ 1728.103939][T17028] netlink: 36 bytes leftover after parsing attributes in process `syz.2.11042'.
[ 1728.135282][T17028] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[ 1728.151345][T13163] lo speed is unknown, defaulting to 1000
[ 1728.166072][T13163] syz2: Port: 1 Link DOWN
[ 1728.211938][T17033] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11042'.
[ 1728.221298][T17033] openvswitch: netlink: IPv4 frag type 127 is out of range max 2
[ 1728.382686][T17038] sctp: [Deprecated]: syz.0.11041 (pid 17038) Use of struct sctp_assoc_value in delayed_ack socket option.
[ 1728.382686][T17038] Use struct sctp_sack_info instead
[ 1730.302268][ T1318] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1730.666498][T17010] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[ 1730.679356][T17025] netlink: 'syz.0.11041': attribute type 1 has an invalid length.
[ 1730.717600][T17025] netlink: 'syz.0.11041': attribute type 1 has an invalid length.
[ 1730.967157][T17049] netlink: 60 bytes leftover after parsing attributes in process `syz.2.11045'.
[ 1730.982727][T17052] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11047'.
[ 1731.012281][T17052] team0: Port device team_slave_1 removed
[ 1731.080187][T17057] tun0: tun_chr_ioctl cmd 1074025681
[ 1731.177718][T17060] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11050'.
[ 1731.201202][T17068] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11051'.
[ 1731.369312][T17076] netlink: 12 bytes leftover after parsing attributes in process `syz.4.11055'.
[ 1731.400337][T17079] netlink: 44 bytes leftover after parsing attributes in process `syz.0.11057'.
[ 1732.424003][T17123] pimreg: entered allmulticast mode
[ 1732.576422][T17130] __nla_validate_parse: 93 callbacks suppressed
[ 1732.576443][T17130] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11067'.
[ 1732.817428][T17136] netlink: 56 bytes leftover after parsing attributes in process `syz.1.11069'.
[ 1732.902072][T17144] netlink: 16 bytes leftover after parsing attributes in process `syz.0.11071'.
[ 1732.946228][T17144] netlink: 'syz.0.11071': attribute type 4 has an invalid length.
[ 1732.972738][T17144] netlink: 224 bytes leftover after parsing attributes in process `syz.0.11071'.
[ 1733.310810][T17142] x_tables: duplicate underflow at hook 1
[ 1733.331553][T17162] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11077'.
[ 1733.390710][T17141] lo speed is unknown, defaulting to 1000
[ 1733.770618][T17176] netlink: 200 bytes leftover after parsing attributes in process `syz.4.11081'.
[ 1733.934268][T17185] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11083'.
[ 1734.008761][T17187] x_tables: duplicate underflow at hook 1
[ 1734.266911][T17200] netlink: 20 bytes leftover after parsing attributes in process `syz.3.11088'.
[ 1734.870192][T17202] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[ 1735.058618][T17241] pimreg9: entered allmulticast mode
[ 1735.156110][T17250] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11099'.
[ 1735.305203][T17257] netlink: 'syz.3.11103': attribute type 1 has an invalid length.
[ 1735.328518][T17258] netlink: 20 bytes leftover after parsing attributes in process `syz.0.11102'.
[ 1735.425891][T17261] gretap2: entered allmulticast mode
[ 1735.437907][T17261] bond7: (slave gretap2): making interface the new active one
[ 1735.449684][T17261] bond7: (slave gretap2): Enslaving as an active interface with an up link
[ 1735.475734][T17263] tipc: Resetting bearer <eth:team0>
[ 1735.521766][T17263] tipc: Resetting bearer <eth:team0>
[ 1735.788880][T17282] netlink: 'syz.3.11108': attribute type 5 has an invalid length.
[ 1735.820193][T17270] netlink: 'syz.4.11105': attribute type 3 has an invalid length.
[ 1736.153936][T17298] IPVS: Error connecting to the multicast addr
[ 1736.497570][T17319] netlink: 'syz.2.11120': attribute type 1 has an invalid length.
[ 1736.595002][T17319] 8021q: adding VLAN 0 to HW filter on device bond5
[ 1736.638460][T17323] bond5: down delay (1) is not a multiple of miimon (100), value rounded to 0 ms
[ 1736.676937][T17323] bond5: option ad_user_port_key: mode dependency failed, not supported in mode balance-alb(6)
[ 1736.865689][T17336] bridge: RTM_NEWNEIGH with unconfigured vlan 1 on bridge0
[ 1737.315745][T17358] tipc: Invalid UDP bearer configuration
[ 1737.315803][T17358] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[ 1737.379516][T17358] IPVS: set_ctl: invalid protocol: 41 10.1.1.1:20000
[ 1737.584769][T17368] __nla_validate_parse: 14 callbacks suppressed
[ 1737.584789][T17368] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11129'.
[ 1737.604638][T17367] netlink: 20 bytes leftover after parsing attributes in process `syz.2.11131'.
[ 1737.636157][T17367] vlan1: entered promiscuous mode
[ 1737.644594][T17372] netlink: 68 bytes leftover after parsing attributes in process `syz.4.11132'.
[ 1738.085452][T17400] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11138'.
[ 1738.128637][T17400] v: entered promiscuous mode
[ 1738.139451][T17400] macvlan1: entered allmulticast mode
[ 1738.147987][T17400] v: entered allmulticast mode
[ 1738.179678][T17408] veth0_macvtap: Caught tx_queue_len zero misconfig
[ 1738.541008][T17424] netlink: 20 bytes leftover after parsing attributes in process `syz.3.11145'.
[ 1738.558563][T17430] netlink: 68 bytes leftover after parsing attributes in process `syz.1.11146'.
[ 1738.966194][T17447] SET target dimension over the limit!
[ 1739.182390][T17453] syzkaller0: entered promiscuous mode
[ 1739.205780][T17453] syzkaller0: entered allmulticast mode
[ 1739.246251][T17453] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11156'.
[ 1739.329983][T17467] netlink: 20 bytes leftover after parsing attributes in process `syz.0.11161'.
[ 1739.535408][T17477] netlink: 52 bytes leftover after parsing attributes in process `syz.3.11165'.
[ 1739.693529][T17488] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.11169'.
[ 1739.905539][T17499] vlan4: entered promiscuous mode
[ 1740.083811][T17465] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[ 1740.272394][T17520] veth0_macvtap: Caught tx_queue_len zero misconfig
[ 1740.322611][T17520] netlink: 'syz.2.11179': attribute type 9 has an invalid length.
[ 1740.672637][T17528] openvswitch: netlink: Unexpected mask (mask=20440, allowed=10048)
[ 1740.712119][T17521] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma?
[ 1741.004370][T17551] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[ 1741.413903][T17570] syzkaller0: entered promiscuous mode
[ 1741.429928][T17570] syzkaller0: entered allmulticast mode
[ 1741.867020][T17567] lo speed is unknown, defaulting to 1000
[ 1742.323673][T17596] IPVS: set_ctl: invalid protocol: 59 255.255.255.255:20003
[ 1742.694807][T17607] __nla_validate_parse: 9 callbacks suppressed
[ 1742.694829][T17607] netlink: 28 bytes leftover after parsing attributes in process `syz.2.11205'.
[ 1742.744611][T17607] nbd: must specify at least one socket
[ 1743.213088][T17626] batadv_slave_1: Caught tx_queue_len zero misconfig
[ 1743.356286][T17632] netlink: 'syz.3.11212': attribute type 1 has an invalid length.
[ 1743.394243][T17635] IPVS: set_ctl: invalid protocol: 59 255.255.255.255:20003
[ 1743.532323][T17632] 8021q: adding VLAN 0 to HW filter on device bond9
[ 1743.546714][T17632] bond8: (slave bond9): making interface the new active one
[ 1743.555598][T17632] bond8: (slave bond9): Enslaving as an active interface with an up link
[ 1743.593713][T17637] bond8: (slave gretap3): Enslaving as a backup interface with an up link
[ 1743.624941][T17632] netlink: 28 bytes leftover after parsing attributes in process `syz.3.11212'.
[ 1743.664678][T17632] 8021q: adding VLAN 0 to HW filter on device bond8
[ 1743.759242][T17645] netlink: 'syz.0.11214': attribute type 49 has an invalid length.
[ 1743.876345][T17648] netlink: 'syz.3.11217': attribute type 1 has an invalid length.
[ 1743.900401][T17648] netlink: 224 bytes leftover after parsing attributes in process `syz.3.11217'.
[ 1743.940071][T17650] tipc: Resetting bearer <eth:team0>
[ 1744.432122][T17669] netlink: 41 bytes leftover after parsing attributes in process `syz.0.11223'.
[ 1744.457522][T17671] batadv_slave_1: entered promiscuous mode
[ 1744.463050][T17669] netlink: 120 bytes leftover after parsing attributes in process `syz.0.11223'.
[ 1744.473060][T17672] IPVS: set_ctl: invalid protocol: 59 255.255.255.255:20003
[ 1744.498935][T17669] netlink: 41 bytes leftover after parsing attributes in process `syz.0.11223'.
[ 1744.513611][T17669] netlink: 'syz.0.11223': attribute type 21 has an invalid length.
[ 1744.522161][T17669] netlink: 'syz.0.11223': attribute type 6 has an invalid length.
[ 1744.530883][T17669] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11223'.
[ 1744.735803][T17684] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11226'.
[ 1744.759630][T17684] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11226'.
[ 1744.771494][T17673] syzkaller0: entered promiscuous mode
[ 1744.780114][T17673] syzkaller0: entered allmulticast mode
[ 1745.092680][T17691] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[ 1745.220739][T17691] netlink: 'syz.0.11229': attribute type 10 has an invalid length.
[ 1745.472369][T17710] syzkaller1: entered promiscuous mode
[ 1745.486115][T17710] syzkaller1: entered allmulticast mode
[ 1745.668289][T17723] IPVS: set_ctl: invalid protocol: 59 255.255.255.255:20003
[ 1745.992531][T17746] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11239'.
[ 1746.372362][T17755] syzkaller0: entered promiscuous mode
[ 1746.393365][T17755] syzkaller0: entered allmulticast mode
[ 1746.716692][T17780] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input16
[ 1747.705131][T17841] netlink: 'syz.0.11277': attribute type 5 has an invalid length.
[ 1747.722944][T17843] __nla_validate_parse: 5 callbacks suppressed
[ 1747.722964][T17843] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11278'.
[ 1747.791773][T17841] netlink: 'syz.0.11277': attribute type 5 has an invalid length.
[ 1747.964143][T17849] netlink: 28 bytes leftover after parsing attributes in process `syz.4.11281'.
[ 1748.066899][T17852] syzkaller0: entered promiscuous mode
[ 1748.077081][T17853] netlink: 20 bytes leftover after parsing attributes in process `syz.0.11283'.
[ 1748.086701][T17852] syzkaller0: entered allmulticast mode
[ 1748.144594][T17857] netlink: 68 bytes leftover after parsing attributes in process `syz.3.11285'.
[ 1748.342813][T17867] netlink: 'syz.4.11287': attribute type 10 has an invalid length.
[ 1748.368742][T17865] netlink: 'syz.0.11288': attribute type 2 has an invalid length.
[ 1749.040289][T17897] netlink: 28 bytes leftover after parsing attributes in process `syz.4.11299'.
[ 1749.076788][T17896] netlink: 20 bytes leftover after parsing attributes in process `syz.0.11298'.
[ 1749.158819][   T29] audit: type=1804 audit(1780421314.202:37): pid=17901 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.11299" name="/newroot/396/memory.events" dev="tmpfs" ino=2041 res=1 errno=0
[ 1749.226286][   T29] audit: type=1800 audit(1780421314.212:38): pid=17901 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.11299" name="memory.events" dev="tmpfs" ino=2041 res=0 errno=0
[ 1749.298921][   T29] audit: type=1804 audit(1780421314.212:39): pid=17901 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.11299" name="/newroot/396/memory.events" dev="tmpfs" ino=2041 res=1 errno=0
[ 1749.595216][T17911] IPVS: set_ctl: invalid protocol: 381 172.20.20.170:20003
[ 1749.698777][T17919] netlink: 40 bytes leftover after parsing attributes in process `syz.4.11306'.
[ 1749.730170][T17919] IPv6: NLM_F_CREATE should be specified when creating new route
[ 1749.754154][T17919] netlink: 40 bytes leftover after parsing attributes in process `syz.4.11306'.
[ 1749.795264][T17919] netlink: 40 bytes leftover after parsing attributes in process `syz.4.11306'.
[ 1749.831189][T17922] netlink: 40 bytes leftover after parsing attributes in process `syz.4.11306'.
[ 1751.052046][T17966] openvswitch: netlink: IPv4 tun info is not correct
[ 1751.285862][T17977] syzkaller0: entered promiscuous mode
[ 1751.292006][T17977] syzkaller0: entered allmulticast mode
[ 1751.817299][T18005] bridge0: port 1(batadv0) entered blocking state
[ 1751.841225][T18005] bridge0: port 1(batadv0) entered disabled state
[ 1751.864963][T18005] batadv0: entered allmulticast mode
[ 1751.895260][T18005] batadv0: entered promiscuous mode
[ 1752.079252][T18013] IPVS: Scheduler module ip_vs_ not found
[ 1752.290181][ T6995] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled
[ 1752.299511][ T6995] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled
[ 1752.368941][T18026] netlink: 'syz.1.11333': attribute type 1 has an invalid length.
[ 1752.616567][T18031] syzkaller1: entered promiscuous mode
[ 1752.623454][T18031] syzkaller1: entered allmulticast mode
[ 1752.742645][T18036] __nla_validate_parse: 10 callbacks suppressed
[ 1752.742665][T18036] netlink: 20 bytes leftover after parsing attributes in process `syz.2.11335'.
[ 1752.782689][T18036] netlink: 'syz.2.11335': attribute type 2 has an invalid length.
[ 1752.813389][T18036] netlink: 'syz.2.11335': attribute type 1 has an invalid length.
[ 1752.865220][T18036] netlink: 'syz.2.11335': attribute type 1 has an invalid length.
[ 1753.050873][T18049] FAULT_INJECTION: forcing a failure.
[ 1753.050873][T18049] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1753.108985][T18049] CPU: 1 UID: 0 PID: 18049 Comm: syz.2.11342 Not tainted syzkaller #0 PREEMPT(full) 
[ 1753.109016][T18049] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[ 1753.109030][T18049] Call Trace:
[ 1753.109039][T18049]  <TASK>
[ 1753.109048][T18049]  dump_stack_lvl+0xe8/0x150
[ 1753.109087][T18049]  should_fail_ex+0x412/0x560
[ 1753.109118][T18049]  _copy_from_iter+0x1d3/0x1670
[ 1753.109147][T18049]  ? rcu_is_watching+0x15/0xb0
[ 1753.109181][T18049]  ? __pfx__copy_from_iter+0x10/0x10
[ 1753.109223][T18049]  ? netlink_sendmsg+0x650/0xb40
[ 1753.109250][T18049]  ? skb_put+0x11b/0x210
[ 1753.109278][T18049]  netlink_sendmsg+0x6c0/0xb40
[ 1753.109314][T18049]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1753.109343][T18049]  ? aa_sock_msg_perm+0xf1/0x1b0
[ 1753.109379][T18049]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[ 1753.109414][T18049]  ____sys_sendmsg+0x972/0x9f0
[ 1753.109439][T18049]  ? __might_fault+0xaf/0x130
[ 1753.109476][T18049]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1753.109511][T18049]  ? import_iovec+0x73/0xa0
[ 1753.109541][T18049]  ___sys_sendmsg+0x2a5/0x360
[ 1753.109564][T18049]  ? __lock_acquire+0x6b5/0x2cf0
[ 1753.109593][T18049]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1753.109659][T18049]  ? __fget_files+0x2a/0x420
[ 1753.109690][T18049]  ? __fget_files+0x3a0/0x420
[ 1753.109727][T18049]  __x64_sys_sendmsg+0x1bd/0x2a0
[ 1753.109756][T18049]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[ 1753.109792][T18049]  ? __pfx_ksys_write+0x10/0x10
[ 1753.109838][T18049]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1753.109863][T18049]  do_syscall_64+0x174/0x580
[ 1753.109888][T18049]  ? trace_irq_disable+0x3b/0x140
[ 1753.109920][T18049]  ? clear_bhb_loop+0x40/0x90
[ 1753.109946][T18049]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1753.109967][T18049] RIP: 0033:0x7f9816b9ce59
[ 1753.109988][T18049] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1753.110006][T18049] RSP: 002b:00007f98179e0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1753.110029][T18049] RAX: ffffffffffffffda RBX: 00007f9816e15fa0 RCX: 00007f9816b9ce59
[ 1753.110045][T18049] RDX: 0000000004000014 RSI: 0000200000000a80 RDI: 0000000000000003
[ 1753.110060][T18049] RBP: 00007f98179e0090 R08: 0000000000000000 R09: 0000000000000000
[ 1753.110074][T18049] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1753.110087][T18049] R13: 00007f9816e16038 R14: 00007f9816e15fa0 R15: 00007ffe6ee1ac58
[ 1753.110123][T18049]  </TASK>
[ 1753.486652][T18056] veth0_to_bridge: entered promiscuous mode
[ 1753.493124][T18056] macvtap0: entered allmulticast mode
[ 1753.498646][T18056] veth0_to_bridge: entered allmulticast mode
[ 1753.509434][T18056] veth0_to_bridge: left allmulticast mode
[ 1753.515480][T18056] veth0_to_bridge: left promiscuous mode
[ 1754.220918][T18089] netlink: 24 bytes leftover after parsing attributes in process `syz.1.11353'.
[ 1754.326285][T13466] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1754.339002][T13466] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1754.507372][T18104] netlink: 56 bytes leftover after parsing attributes in process `syz.4.11357'.
[ 1754.958958][T18107] lo speed is unknown, defaulting to 1000
[ 1755.259370][T18129] netlink: set zone limit has 4 unknown bytes
[ 1755.470098][    C0] vcan0: j1939_tp_rxtimer: 0xffff888057215800: rx timeout, send abort
[ 1755.573286][T18119] lo speed is unknown, defaulting to 1000
[ 1755.586593][T18140] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[ 1755.677005][T18139] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[ 1755.741978][T18139] netlink: 212340 bytes leftover after parsing attributes in process `syz.4.11367'.
[ 1755.767544][T18139] openvswitch: netlink: Message has 6 unknown bytes.
[ 1755.788946][T18145] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[ 1755.978389][    C0] vcan0: j1939_tp_rxtimer: 0xffff888057215800: abort rx timeout. Force session deactivation
[ 1756.185012][T18151] syzkaller0: entered promiscuous mode
[ 1756.200759][T18151] syzkaller0: entered allmulticast mode
[ 1756.475067][T18158] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11372'.
[ 1756.756096][T18171] netlink: 'syz.3.11375': attribute type 1 has an invalid length.
[ 1757.050374][T18176] bond10: (slave bridge7): making interface the new active one
[ 1757.094254][T18176] bond10: (slave bridge7): Enslaving as an active interface with an up link
[ 1757.388704][T18198] netlink: 20 bytes leftover after parsing attributes in process `syz.3.11380'.
[ 1757.500451][T13163] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[ 1757.530187][ T6995] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[ 1757.806166][T18214] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input17
[ 1758.154667][T18221] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11387'.
[ 1758.323528][T18203] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[ 1758.339859][T18203] Bluetooth: hci2: Error when powering off device on rfkill (-4)
[ 1758.380321][T13163] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[ 1758.392974][T18203] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[ 1758.408364][T18203] Bluetooth: hci4: Error when powering off device on rfkill (-4)
[ 1758.555811][ T6989] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[ 1758.560496][T18209] lo speed is unknown, defaulting to 1000
[ 1758.580794][ T6989] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[ 1758.636048][T18203] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[ 1758.642702][T18203] Bluetooth: hci5: Error when powering off device on rfkill (-4)
[ 1758.667032][T18229] netlink: 160 bytes leftover after parsing attributes in process `syz.3.11390'.
[ 1758.720290][T18228] netlink: 'syz.3.11390': attribute type 11 has an invalid length.
[ 1758.737107][T18203] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 1758.766006][T18203] Bluetooth: hci1: Error when powering off device on rfkill (-4)
[ 1758.773596][T18231] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11391'.
[ 1758.970145][T13179] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[ 1758.979102][T18239] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11394'.
[ 1758.989311][T18239] netlink: 'syz.1.11394': attribute type 5 has an invalid length.
[ 1759.001418][T18239] netlink: 20 bytes leftover after parsing attributes in process `syz.1.11394'.
[ 1759.115755][T18245] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11392'.
[ 1759.257261][T18239] geneve2: entered promiscuous mode
[ 1759.263522][T18239] geneve2: entered allmulticast mode
[ 1759.372660][T18245] macvlan2: entered promiscuous mode
[ 1759.382163][T18245] bond0: entered promiscuous mode
[ 1759.397373][T18245] 8021q: adding VLAN 0 to HW filter on device macvlan2
[ 1759.446221][ T6989] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 256 - 0
[ 1759.490896][ T6989] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 256 - 0
[ 1759.537496][ T6989] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 256 - 0
[ 1759.585584][ T6998] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 256 - 0
[ 1759.992898][T18256] netlink: 136 bytes leftover after parsing attributes in process `syz.0.11396'.
[ 1760.014766][T18256] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check.
[ 1760.181570][T18270] netlink: 27 bytes leftover after parsing attributes in process `syz.4.11399'.
[ 1760.353099][T18284] netlink: 68 bytes leftover after parsing attributes in process `syz.3.11402'.
[ 1760.567280][T18300] RDS: rds_bind could not find a transport for ::ffff:100.1.1.0, load rds_tcp or rds_rdma?
[ 1760.824071][T18315] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11413'.
[ 1760.843067][T18314] ip6tnl5: entered promiscuous mode
[ 1760.856479][T18314] ip6tnl5: entered allmulticast mode
[ 1761.204544][T18336] netlink: 'syz.4.11418': attribute type 1 has an invalid length.
[ 1761.816614][T18368] sctp: [Deprecated]: syz.1.11428 (pid 18368) Use of struct sctp_assoc_value in delayed_ack socket option.
[ 1761.816614][T18368] Use struct sctp_sack_info instead
[ 1762.176941][T18382] netlink: 'syz.2.11433': attribute type 1 has an invalid length.
[ 1762.343405][T18382] bond6: entered promiscuous mode
[ 1762.377788][T18382] 8021q: adding VLAN 0 to HW filter on device bond6
[ 1762.463357][T18387] 8021q: adding VLAN 0 to HW filter on device bond6
[ 1762.510010][T18387] bond6: (slave ip6gre2): The slave device specified does not support setting the MAC address
[ 1762.541670][T18387] bond6: (slave ip6gre2): Setting fail_over_mac to active for active-backup mode
[ 1762.584814][T18387] bond6: (slave ip6gre2): making interface the new active one
[ 1762.633859][T18387] ip6gre2: entered promiscuous mode
[ 1762.668363][T18387] bond6: (slave ip6gre2): Enslaving as an active interface with an up link
[ 1762.780476][    C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[ 1763.291790][T18430] __nla_validate_parse: 18 callbacks suppressed
[ 1763.291814][T18430] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11445'.
[ 1763.605809][T18449] sock: sock_set_timeout: `syz.3.11450' (pid 18449) tries to set negative timeout
[ 1763.616046][T18447] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11449'.
[ 1763.659112][T18449] dvmrp0: left allmulticast mode
[ 1763.678756][T18449] dvmrp8: left allmulticast mode
[ 1763.685644][T18451] netlink: 28 bytes leftover after parsing attributes in process `syz.4.11451'.
[ 1763.894200][T18457] netlink: 32 bytes leftover after parsing attributes in process `syz.0.11452'.
[ 1763.928485][T18459] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11454'.
[ 1763.949664][T18461] netlink: 28 bytes leftover after parsing attributes in process `syz.1.11453'.
[ 1763.963010][T18461] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11453'.
[ 1763.993401][T18459] 8021q: adding VLAN 0 to HW filter on device bond7
[ 1764.235000][T18471] netlink: 16 bytes leftover after parsing attributes in process `syz.3.11455'.
[ 1764.336028][T18484] tunl0: Caught tx_queue_len zero misconfig
[ 1764.405653][T18484] IPv6: sit1: Disabled Multicast RS
[ 1764.475915][T18484] sit1: entered promiscuous mode
[ 1764.500947][T18484] sit1: entered allmulticast mode
[ 1764.654809][T18498] No such timeout policy "syz1"
[ 1764.744713][T18507] netlink: 16 bytes leftover after parsing attributes in process `syz.2.11463'.
[ 1764.802646][T18512] netlink: 12 bytes leftover after parsing attributes in process `syz.4.11466'.
[ 1765.060499][T18527] netlink: 'syz.3.11469': attribute type 1 has an invalid length.
[ 1765.107017][T18527] 8021q: adding VLAN 0 to HW filter on device bond11
[ 1765.149292][T18527] bond6: (slave veth0_to_bond): Releasing active interface
[ 1765.157931][T18530] xt_CT: No such helper "snmp_trap"
[ 1765.177703][T18527] bond11: (slave veth0_to_bond): Enslaving as an active interface with a down link
[ 1765.212713][T18535] bond11: entered promiscuous mode
[ 1765.232195][T18535] bond11: entered allmulticast mode
[ 1765.414051][T18546] netlink: 'syz.4.11474': attribute type 11 has an invalid length.
[ 1765.778051][T18557] syzkaller0: entered promiscuous mode
[ 1765.790396][T18557] syzkaller0: entered allmulticast mode
[ 1765.930092][T18566] syzkaller0: entered promiscuous mode
[ 1765.947647][T18566] syzkaller0: entered allmulticast mode
[ 1766.432958][T18594] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1766.455840][T18594] syzkaller0: entered promiscuous mode
[ 1766.476032][T18594] syzkaller0: entered allmulticast mode
[ 1766.574719][T18594] tipc: Resetting bearer <eth:syzkaller0>
[ 1766.604639][T18593] tipc: Resetting bearer <eth:syzkaller0>
[ 1766.672769][T18593] tipc: Disabling bearer <eth:syzkaller0>
[ 1766.768651][T18608] syzkaller0: entered promiscuous mode
[ 1766.776723][T18608] syzkaller0: entered allmulticast mode
[ 1767.303559][T18628] netlink: 'syz.3.11501': attribute type 14 has an invalid length.
[ 1767.810767][T18650] bridge0: port 3(ipvlan0) entered blocking state
[ 1767.843263][T18650] bridge0: port 3(ipvlan0) entered disabled state
[ 1767.874709][T18650] ipvlan0: entered allmulticast mode
[ 1767.918584][T18650] ipvlan0: left allmulticast mode
[ 1768.214500][T18659] syzkaller0: entered promiscuous mode
[ 1768.228935][T18659] syzkaller0: entered allmulticast mode
[ 1768.477361][T18644] lo speed is unknown, defaulting to 1000
[ 1768.551933][T18674] syzkaller0: entered promiscuous mode
[ 1768.565528][T18674] syzkaller0: entered allmulticast mode
[ 1768.856445][T18683] netlink: 'syz.2.11516': attribute type 27 has an invalid length.
[ 1769.024256][T18689] __nla_validate_parse: 12 callbacks suppressed
[ 1769.024278][T18689] netlink: 28 bytes leftover after parsing attributes in process `syz.1.11518'.
[ 1769.068982][T18691] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.11517'.
[ 1769.146019][T18683] xt_hashlimit: max too large, truncated to 1048576
[ 1769.545374][T18699] xt_TCPMSS: Only works on TCP SYN packets
[ 1769.745886][T18704] syzkaller0: entered promiscuous mode
[ 1769.751694][T18704] syzkaller0: entered allmulticast mode
[ 1769.916626][T18706] ip6gretap1: entered promiscuous mode
[ 1770.007208][T18718] netlink: 228 bytes leftover after parsing attributes in process `syz.2.11528'.
[ 1770.077817][T18722] netlink: 'syz.2.11528': attribute type 13 has an invalid length.
[ 1770.099955][T18722] netlink: 'syz.2.11528': attribute type 17 has an invalid length.
[ 1770.130412][T18724] netlink: 28 bytes leftover after parsing attributes in process `syz.4.11529'.
[ 1770.530476][T18718] tipc: Resetting bearer <eth:team0>
[ 1771.107933][T18718] v: left allmulticast mode
[ 1771.207082][T18722] v: left promiscuous mode
[ 1771.236255][T18722] 8021q: adding VLAN 0 to HW filter on device team0
[ 1771.244124][T18722] tipc: Resetting bearer <eth:team0>
[ 1771.251177][T18722] tipc: Resetting bearer <eth:team0>
[ 1771.261297][    C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[ 1771.264408][T18722] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1771.287471][ T1786] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1771.298736][T13162] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1771.308254][T13178] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1771.318820][T13164] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1771.364314][T18722] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[ 1771.375021][T18722] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 1771.389370][T18722] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[ 1771.406552][T18727] bridge_slave_1: entered allmulticast mode
[ 1771.529392][T32461] lo speed is unknown, defaulting to 1000
[ 1771.548895][T32461] syz2: Port: 1 Link ACTIVE
[ 1771.560853][T18743] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11531'.
[ 1771.697760][T18747] netlink: 24 bytes leftover after parsing attributes in process `syz.3.11533'.
[ 1771.947441][T18761] syzkaller0: entered promiscuous mode
[ 1771.954914][T18762] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11536'.
[ 1771.964142][T18761] syzkaller0: entered allmulticast mode
[ 1771.980084][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1771.990225][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1771.999458][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1772.010233][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1772.018752][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1772.384005][T18778] netlink: 28 bytes leftover after parsing attributes in process `syz.0.11542'.
[ 1772.521868][T18783] syzkaller0: entered promiscuous mode
[ 1772.530625][T18783] syzkaller0: entered allmulticast mode
[ 1772.553408][T18790] netlink: 'syz.0.11546': attribute type 1 has an invalid length.
[ 1772.562059][T18790] netlink: 'syz.0.11546': attribute type 4 has an invalid length.
[ 1772.570569][T18790] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.11546'.
[ 1772.592731][T18790] netlink: 'syz.0.11546': attribute type 1 has an invalid length.
[ 1772.620395][T18790] netlink: 'syz.0.11546': attribute type 4 has an invalid length.
[ 1772.638615][T18790] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.11546'.
[ 1772.898196][T18800] netlink: 'syz.2.11549': attribute type 2 has an invalid length.
[ 1772.917260][T18800] netlink: 'syz.2.11549': attribute type 11 has an invalid length.
[ 1773.352934][T18822] netlink: 'syz.0.11557': attribute type 58 has an invalid length.
[ 1773.503271][T18830] syzkaller0: entered promiscuous mode
[ 1773.508903][T18830] syzkaller0: entered allmulticast mode
[ 1774.027863][T18845] netlink: 'syz.2.11565': attribute type 4 has an invalid length.
[ 1774.068842][T32461] lo speed is unknown, defaulting to 1000
[ 1774.078428][T18845] netlink: 'syz.2.11565': attribute type 4 has an invalid length.
[ 1774.086901][T32461] syz2: Port: 1 Link DOWN
[ 1774.096120][ T9395] lo speed is unknown, defaulting to 1000
[ 1774.110306][ T9395] syz2: Port: 1 Link ACTIVE
[ 1774.118759][T18856] __nla_validate_parse: 3 callbacks suppressed
[ 1774.118780][T18856] netlink: 20 bytes leftover after parsing attributes in process `syz.3.11567'.
[ 1774.137916][T18849] netlink: 'syz.0.11564': attribute type 49 has an invalid length.
[ 1774.224864][T18858] xt_hashlimit: size too large, truncated to 1048576
[ 1774.231808][T18858] xt_hashlimit: max too large, truncated to 1048576
[ 1774.402637][T18865] syzkaller0: entered promiscuous mode
[ 1774.408388][T18865] syzkaller0: entered allmulticast mode
[ 1774.830245][T18882] bond12: option xmit_hash_policy: invalid value (10)
[ 1774.839554][T18882] bond12 (unregistering): Released all slaves
[ 1774.878141][T18887] netlink: 20 bytes leftover after parsing attributes in process `syz.2.11579'.
[ 1775.294115][T18903] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11582'.
[ 1775.375507][T18903] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11582'.
[ 1775.593040][T18915] syzkaller0: entered promiscuous mode
[ 1775.607435][T18915] syzkaller0: entered allmulticast mode
[ 1776.105178][T18928] netlink: 20 bytes leftover after parsing attributes in process `syz.4.11590'.
[ 1776.457873][T18932] gre0: left promiscuous mode
[ 1776.476302][T18932] gre0: left allmulticast mode
[ 1776.646356][T18932] batman_adv: batadv0: Interface deactivated: vlan2
[ 1776.719619][T18946] net_ratelimit: 6 callbacks suppressed
[ 1776.719640][T18946] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1776.734254][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1776.758278][T18946] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1776.804025][T18946] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1776.812646][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1776.831761][T18946] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1776.853661][T18954] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1776.861958][T18954] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1776.900487][T18954] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1776.910559][T18946] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1777.029810][T18932] bridge0: port 3(bond0) entered disabled state
[ 1777.036762][T18932] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1777.044258][T18932] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1777.657561][T18932] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1777.740784][T18932] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1777.797398][T18932] mac80211_hwsim hwsim122 wlan0: left promiscuous mode
[ 1777.806812][T18932] veth3: left promiscuous mode
[ 1777.826406][T18932] vlan3: left promiscuous mode
[ 1777.831529][T18932] bond3: left promiscuous mode
[ 1777.836378][T18932] batadv1: left promiscuous mode
[ 1777.842571][T18932] vlan3: left allmulticast mode
[ 1777.847507][T18932] bond3: left allmulticast mode
[ 1777.853114][T18932] batadv1: left allmulticast mode
[ 1777.869975][T18932] ip6gre2: left promiscuous mode
[ 1777.875408][T18932] ip6gre2: left allmulticast mode
[ 1777.906974][T18932] bond7: left promiscuous mode
[ 1777.961912][T18932] mac80211_hwsim hwsim125 syzkaller0: left promiscuous mode
[ 1777.971151][T18932] mac80211_hwsim hwsim125 syzkaller0: left allmulticast mode
[ 1777.984050][T18932] vlan4: left promiscuous mode
[ 1778.034246][T18932] ip6gretap1: left promiscuous mode
[ 1778.141341][T13488] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[ 1778.201474][ T6989] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[ 1778.247698][ T6989] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[ 1778.292475][ T6989] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[ 1778.343677][T18968] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11599'.
[ 1778.380150][T18968] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11599'.
[ 1778.518619][T13488] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[ 1778.541931][T18976] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11602'.
[ 1778.569049][T13488] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[ 1778.677044][T13488] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[ 1778.695057][T13488] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[ 1778.796719][T18978] syzkaller0: entered promiscuous mode
[ 1778.813599][T18978] syzkaller0: entered allmulticast mode
[ 1778.921415][T18950] lo speed is unknown, defaulting to 1000
[ 1778.956545][T18982] netlink: 12 bytes leftover after parsing attributes in process `syz.4.11605'.
[ 1779.162928][T18982] bond12: option primary: mode dependency failed, not supported in mode balance-rr(0)
[ 1779.175619][T18990] block nbd5: Unsupported socket: should be TCP or UNIX.
[ 1779.293335][T18982] bond12 (unregistering): Released all slaves
[ 1779.735220][T18986] bond0: left promiscuous mode
[ 1779.741722][T18986] bond_slave_0: left promiscuous mode
[ 1779.747451][T18986] bond_slave_1: left promiscuous mode
[ 1779.782880][T18989] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11607'.
[ 1779.793449][T18971] lo speed is unknown, defaulting to 1000
[ 1779.803613][T13466] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1779.831880][T13466] netdevsim netdevsim1 eth0: unset [1, 1] type 2 family 0 port 256 - 0
[ 1779.946093][T13466] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1779.955881][T13466] netdevsim netdevsim1 eth1: unset [1, 1] type 2 family 0 port 256 - 0
[ 1780.026263][T13466] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1780.046204][T13466] netdevsim netdevsim1 eth2: unset [1, 1] type 2 family 0 port 256 - 0
[ 1780.078996][T13466] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1780.102199][T13466] netdevsim netdevsim1 eth3: unset [1, 1] type 2 family 0 port 256 - 0
[ 1780.173952][T19005] bond7: option lacp_active: invalid value (8)
[ 1780.189323][T19005] bond7 (unregistering): Released all slaves
[ 1780.429351][T18970] lo speed is unknown, defaulting to 1000
[ 1780.456293][T19018] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11614'.
[ 1780.703553][T19029] netlink: 44 bytes leftover after parsing attributes in process `syz.2.11615'.
[ 1781.044911][T19026] syzkaller0: entered promiscuous mode
[ 1781.054671][T19026] syzkaller0: entered allmulticast mode
[ 1781.330286][T19038] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11619'.
[ 1786.669908][    C1] net_ratelimit: 470 callbacks suppressed
[ 1786.669930][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1786.684691][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1786.694840][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1786.706769][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1787.555671][T19085] syzkaller0: entered promiscuous mode
[ 1787.568870][T19085] syzkaller0: entered allmulticast mode
[ 1787.793534][ T6989] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1787.802336][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1787.842686][ T6989] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1787.851530][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1787.886076][ T6990] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1787.895055][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1788.917364][T19136] mac80211_hwsim hwsim125 syzkaller0: entered promiscuous mode
[ 1788.950613][T19136] mac80211_hwsim hwsim125 syzkaller0: entered allmulticast mode
[ 1789.035052][T19139] bridge0: Device is already in use.
[ 1789.062681][T19143] netlink: 104 bytes leftover after parsing attributes in process `syz.3.11646'.
[ 1789.165699][T19145] syzkaller0: entered promiscuous mode
[ 1789.179903][    C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[ 1789.204734][T19145] syzkaller0: entered allmulticast mode
[ 1789.242127][T19150] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1789.270905][T19145] tipc: Resetting bearer <eth:syzkaller0>
[ 1789.306935][T19144] tipc: Resetting bearer <eth:syzkaller0>
[ 1789.378109][T19144] tipc: Disabling bearer <eth:syzkaller0>
[ 1789.406431][T19154] netlink: 52 bytes leftover after parsing attributes in process `syz.4.11650'.
[ 1789.859169][T19167] netlink: 10 bytes leftover after parsing attributes in process `syz.1.11656'.
[ 1790.026825][T19176] netlink: 44 bytes leftover after parsing attributes in process `syz.0.11655'.
[ 1790.052676][T19167] 8021q: adding VLAN 0 to HW filter on device bond7
[ 1790.104710][T19167] bridge0: port 3(bond7) entered blocking state
[ 1790.155038][T19167] bridge0: port 3(bond7) entered disabled state
[ 1790.170636][T19167] bond7: entered allmulticast mode
[ 1790.190868][T19167] bond7: entered promiscuous mode
[ 1790.443403][T19182] netlink: 20 bytes leftover after parsing attributes in process `syz.1.11659'.
[ 1791.008398][T19205] netlink: 1036 bytes leftover after parsing attributes in process `syz.3.11666'.
[ 1791.333344][T19216] validate_nla: 1 callbacks suppressed
[ 1791.333368][T19216] netlink: 'syz.3.11669': attribute type 1 has an invalid length.
[ 1791.474313][T19216] 8021q: adding VLAN 0 to HW filter on device bond12
[ 1791.557055][T19213] bond12: (slave geneve3): making interface the new active one
[ 1791.569260][T19213] bond12: (slave geneve3): Enslaving as an active interface with an up link
[ 1791.581346][T19219] syzkaller0: entered promiscuous mode
[ 1791.595806][T19219] syzkaller0: entered allmulticast mode
[ 1791.651195][ T6990] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1791.690183][ T6990] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1791.743791][ T1318] net_ratelimit: 10 callbacks suppressed
[ 1791.743813][ T1318] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1791.872754][ T6990] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1791.898293][ T6990] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1792.112275][T19228] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11673'.
[ 1792.266339][T19228] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11673'.
[ 1792.647933][T19246] netlink: 'syz.4.11676': attribute type 49 has an invalid length.
[ 1793.377279][T19259] netlink: 'syz.4.11679': attribute type 13 has an invalid length.
[ 1793.421992][T19259] netlink: 'syz.4.11679': attribute type 17 has an invalid length.
[ 1793.441839][T19259] lo: entered promiscuous mode
[ 1793.455822][T19259] lo: entered allmulticast mode
[ 1793.483095][T19259] tunl0: entered promiscuous mode
[ 1793.520477][T19259] tunl0: entered allmulticast mode
[ 1793.546546][T19259] gre0: entered promiscuous mode
[ 1793.559107][T19266] netlink: 12 bytes leftover after parsing attributes in process `syz.4.11679'.
[ 1793.601947][T19259] gre0: entered allmulticast mode
[ 1793.613741][T19266] netlink: 12 bytes leftover after parsing attributes in process `syz.4.11679'.
[ 1793.642185][T19259] gretap0: entered promiscuous mode
[ 1793.672792][T19259] gretap0: entered allmulticast mode
[ 1793.693087][T19259] gretap0: refused to change device tx_queue_len
[ 1793.711052][T19259] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[ 1793.895104][T19245] lo speed is unknown, defaulting to 1000
[ 1794.114264][T19279] tap0: tun_chr_ioctl cmd 1074025677
[ 1794.135506][T19279] tap0: linktype set to 805
[ 1795.153594][T19305] syzkaller0: entered promiscuous mode
[ 1795.183214][T19305] syzkaller0: entered allmulticast mode
[ 1795.304042][T19311] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11691'.
[ 1795.459311][T19312] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1795.553271][T19319] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.11694'.
[ 1795.563174][T19321] openvswitch: netlink: IPv6 tunnel dst address is zero
[ 1796.682296][T19332] syz.4.11699: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[ 1796.699465][T19332] CPU: 0 UID: 0 PID: 19332 Comm: syz.4.11699 Not tainted syzkaller #0 PREEMPT(full) 
[ 1796.699517][T19332] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[ 1796.699548][T19332] Call Trace:
[ 1796.699558][T19332]  <TASK>
[ 1796.699567][T19332]  dump_stack_lvl+0xe8/0x150
[ 1796.699604][T19332]  warn_alloc+0x249/0x340
[ 1796.699639][T19332]  ? stack_trace_save+0xa9/0x100
[ 1796.699675][T19332]  ? __pfx_warn_alloc+0x10/0x10
[ 1796.699713][T19332]  ? kasan_save_track+0x4f/0x80
[ 1796.699750][T19332]  ? kasan_save_track+0x3e/0x80
[ 1796.699778][T19332]  ? __kasan_kmalloc+0x93/0xb0
[ 1796.699807][T19332]  ? __kmalloc_cache_noprof+0x31c/0x660
[ 1796.699837][T19332]  ? xskq_create+0x56/0x170
[ 1796.699876][T19332]  ? xsk_setsockopt+0x54c/0x990
[ 1796.699903][T19332]  ? do_sock_setsockopt+0x17c/0x1b0
[ 1796.699928][T19332]  ? __x64_sys_setsockopt+0x13d/0x1b0
[ 1796.699950][T19332]  ? do_syscall_64+0x174/0x580
[ 1796.699977][T19332]  __vmalloc_node_range_noprof+0x132/0x1750
[ 1796.700046][T19332]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[ 1796.700085][T19332]  ? __kasan_kmalloc+0x93/0xb0
[ 1796.700124][T19332]  vmalloc_user_noprof+0xad/0xe0
[ 1796.700155][T19332]  ? xskq_create+0xbf/0x170
[ 1796.700186][T19332]  xskq_create+0xbf/0x170
[ 1796.700220][T19332]  xsk_init_queue+0x8a/0xe0
[ 1796.700253][T19332]  xsk_setsockopt+0x54c/0x990
[ 1796.700285][T19332]  ? __pfx_xsk_setsockopt+0x10/0x10
[ 1796.700314][T19332]  ? __pfx_aa_sk_perm+0x10/0x10
[ 1796.700351][T19332]  ? aa_sock_opt_perm+0xff/0x1a0
[ 1796.700387][T19332]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[ 1796.700417][T19332]  ? __pfx_xsk_setsockopt+0x10/0x10
[ 1796.700448][T19332]  do_sock_setsockopt+0x17c/0x1b0
[ 1796.700477][T19332]  __x64_sys_setsockopt+0x13d/0x1b0
[ 1796.700504][T19332]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1796.700529][T19332]  do_syscall_64+0x174/0x580
[ 1796.700550][T19332]  ? trace_irq_disable+0x3b/0x140
[ 1796.700581][T19332]  ? clear_bhb_loop+0x40/0x90
[ 1796.700608][T19332]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1796.700629][T19332] RIP: 0033:0x7feec759ce59
[ 1796.700652][T19332] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1796.700671][T19332] RSP: 002b:00007feec847e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[ 1796.700695][T19332] RAX: ffffffffffffffda RBX: 00007feec7815fa0 RCX: 00007feec759ce59
[ 1796.700711][T19332] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003
[ 1796.700843][T19332] RBP: 00007feec7632d6f R08: 0000000000000004 R09: 0000000000000000
[ 1796.700864][T19332] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1796.700879][T19332] R13: 00007feec7816038 R14: 00007feec7815fa0 R15: 00007fff9e6a8bc8
[ 1796.700921][T19332]  </TASK>
[ 1797.064468][T19304] tipc: Resetting bearer <eth:syzkaller0>
[ 1797.076008][T19332] Mem-Info:
[ 1797.119861][T19332] active_anon:6230 inactive_anon:5 isolated_anon:0
[ 1797.119861][T19332]  active_file:2710 inactive_file:41507 isolated_file:0
[ 1797.119861][T19332]  unevictable:768 dirty:181 writeback:0
[ 1797.119861][T19332]  slab_reclaimable:13706 slab_unreclaimable:163472
[ 1797.119861][T19332]  mapped:30917 shmem:1331 pagetables:1383
[ 1797.119861][T19332]  sec_pagetables:0 bounce:0
[ 1797.119861][T19332]  kernel_misc_reclaimable:0
[ 1797.119861][T19332]  free:1197382 free_pcp:25940 free_cma:0
[ 1797.205614][T19332] Node 0 active_anon:24920kB inactive_anon:20kB active_file:10840kB inactive_file:165820kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:17172kB dirty:724kB writeback:0kB shmem:3788kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:15976kB pagetables:5380kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[ 1797.251694][T19332] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:106496kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:152kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[ 1797.256389][T19304] tipc: Disabling bearer <eth:syzkaller0>
[ 1797.294758][T19332] Node 0 DMA free:15240kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:120kB local_pcp:68kB free_cma:0kB
[ 1797.358208][T19332] lowmem_reserve[]: 0 2492 2493 2493 2493
[ 1797.383516][T19332] Node 0 DMA32 free:1320624kB boost:0kB min:34188kB low:42732kB high:51276kB reserved_highatomic:0KB free_highatomic:0KB active_anon:24820kB inactive_anon:20kB active_file:10840kB inactive_file:165820kB unevictable:1536kB writepending:724kB zspages:0kB present:3129332kB managed:2552608kB mlocked:0kB bounce:0kB free_pcp:41936kB local_pcp:21168kB free_cma:0kB
[ 1797.452439][T19339] netlink: 48 bytes leftover after parsing attributes in process `syz.1.11700'.
[ 1797.464330][T19332] lowmem_reserve[]: 0 0 0 0 0
[ 1797.469267][T19332] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:672kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 1797.509009][T19332] lowmem_reserve[]: 0 0 0 0 0
[ 1797.575390][T19332] Node 1 Normal free:3453864kB boost:0kB min:55704kB low:69628kB high:83552kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:61752kB local_pcp:31576kB free_cma:0kB
[ 1797.669911][T19332] lowmem_reserve[]: 0 0 0 0 0
[ 1797.689815][T19332] Node 0 DMA: 2*4kB (U) 2*8kB (U) 1*16kB (U) 1*32kB (U) 1*64kB (U) 2*128kB (U) 2*256kB (U) 2*512kB (U) 3*1024kB (U) 3*2048kB (UM) 1*4096kB (U) = 15240kB
[ 1797.780001][T19332] Node 0 DMA32: 6803*4kB (UME) 9905*8kB (UME) 6441*16kB (UME) 650*32kB (UME) 751*64kB (UME) 1232*128kB (UME) 904*256kB (UME) 510*512kB (UME) 248*1024kB (UME) 67*2048kB (UM) 0*4096kB = 1319780kB
[ 1797.807050][T19344] syzkaller1: entered promiscuous mode
[ 1797.825132][T19332] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[ 1797.844661][T19332] Node 1 Normal: 5*4kB (UM) 7*8kB (UM) 11*16kB (UM) 7*32kB (UM) 10*64kB (UM) 9*128kB (UM) 7*256kB (UM) 8*512kB (UM) 7*1024kB (UM) 7*2048kB (U) 836*4096kB (UM) = 3453916kB
[ 1797.888611][T19344] syzkaller1: entered allmulticast mode
[ 1797.919911][T19332] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 1797.976050][T19332] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[ 1798.018522][T19332] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 1798.080568][T19332] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[ 1798.130782][T19332] 46259 total pagecache pages
[ 1798.156631][T19332] 0 pages in swap cache
[ 1798.179634][T19332] Free swap  = 124996kB
[ 1798.203898][T19332] Total swap = 124996kB
[ 1798.220177][T19332] 2097051 pages RAM
[ 1798.226125][T19332] 0 pages HighMem/MovableOnly
[ 1798.249046][T19332] 427116 pages reserved
[ 1798.264155][T19367] netlink: 'syz.1.11704': attribute type 11 has an invalid length.
[ 1798.278838][T19332] 0 pages cma reserved
[ 1799.116652][T19384] x_tables: duplicate underflow at hook 2
[ 1799.274014][T19376] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue
[ 1799.352912][T19376] syzkaller0: entered promiscuous mode
[ 1799.369814][T19376] syzkaller0: entered allmulticast mode
[ 1799.534448][T19387] netlink: 32 bytes leftover after parsing attributes in process `syz.4.11709'.
[ 1799.561159][T19392] bond0: (slave wlan0): Error: Device is in use and cannot be enslaved
[ 1799.566550][T19387] openvswitch: netlink: Flow key attr not present in new flow.
[ 1799.595225][T19390] openvswitch: netlink: Missing key (keys=40, expected=2000)
[ 1799.846912][T19400] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11715'.
[ 1800.061302][T13164] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1800.387965][T19424] netlink: 'syz.0.11719': attribute type 13 has an invalid length.
[ 1800.602739][T19425] sch_tbf: burst 6 is lower than device gretap0 mtu (1476) !
[ 1800.697048][T19427] netlink: 36 bytes leftover after parsing attributes in process `syz.0.11719'.
[ 1800.756662][T19427] netlink: 36 bytes leftover after parsing attributes in process `syz.0.11719'.
[ 1800.782095][T19430] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1800.798329][T19427] netlink: 36 bytes leftover after parsing attributes in process `syz.0.11719'.
[ 1800.835736][T19427] netlink: 36 bytes leftover after parsing attributes in process `syz.0.11719'.
[ 1800.885167][T19427] netlink: 36 bytes leftover after parsing attributes in process `syz.0.11719'.
[ 1800.945694][T19430] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1800.975915][T19427] netlink: 36 bytes leftover after parsing attributes in process `syz.0.11719'.
[ 1801.016561][T19427] netlink: 36 bytes leftover after parsing attributes in process `syz.0.11719'.
[ 1801.077899][T19427] netlink: 36 bytes leftover after parsing attributes in process `syz.0.11719'.
[ 1801.104687][T19430] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1801.140509][T19427] netlink: 36 bytes leftover after parsing attributes in process `syz.0.11719'.
[ 1801.158774][T19430] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1801.197147][T19436] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1801.211449][T19427] netlink: 36 bytes leftover after parsing attributes in process `syz.0.11719'.
[ 1801.230795][T19436] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1801.274266][T19436] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1801.528963][T19427] bond0: left promiscuous mode
[ 1801.601115][ T6988] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[ 1801.645683][ T6988] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[ 1801.705332][ T6988] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[ 1801.743422][ T6988] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[ 1802.352231][T19444] lo speed is unknown, defaulting to 1000
[ 1809.664447][T13164] net_ratelimit: 160 callbacks suppressed
[ 1809.664465][T13164] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1815.163467][T19461] bridge0: left allmulticast mode
[ 1815.233092][T19472] __nla_validate_parse: 196 callbacks suppressed
[ 1815.233115][T19472] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11727'.
[ 1815.255918][T19461] bond13: invalid ARP target 0.0.0.0 specified for addition
[ 1815.266429][T19461] bond13: option arp_ip_target: invalid value (0)
[ 1815.293447][T19461] bond13 (unregistering): Released all slaves
[ 1815.728782][T19486] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1815.738389][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1816.407036][T19503] FAULT_INJECTION: forcing a failure.
[ 1816.407036][T19503] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1816.429832][T19503] CPU: 1 UID: 0 PID: 19503 Comm: syz.4.11739 Not tainted syzkaller #0 PREEMPT(full) 
[ 1816.429867][T19503] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[ 1816.429881][T19503] Call Trace:
[ 1816.429890][T19503]  <TASK>
[ 1816.429899][T19503]  dump_stack_lvl+0xe8/0x150
[ 1816.429930][T19503]  should_fail_ex+0x412/0x560
[ 1816.429961][T19503]  _copy_from_user+0x2d/0xb0
[ 1816.429989][T19503]  __sys_connect+0x156/0x450
[ 1816.430015][T19503]  ? __pfx___sys_connect+0x10/0x10
[ 1816.430050][T19503]  ? __pfx_ksys_write+0x10/0x10
[ 1816.430119][T19503]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1816.430143][T19503]  __x64_sys_connect+0x7a/0x90
[ 1816.430165][T19503]  do_syscall_64+0x174/0x580
[ 1816.430187][T19503]  ? trace_irq_disable+0x3b/0x140
[ 1816.430220][T19503]  ? clear_bhb_loop+0x40/0x90
[ 1816.430247][T19503]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1816.430268][T19503] RIP: 0033:0x7feec759ce59
[ 1816.430288][T19503] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1816.430306][T19503] RSP: 002b:00007feec847e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a
[ 1816.430328][T19503] RAX: ffffffffffffffda RBX: 00007feec7815fa0 RCX: 00007feec759ce59
[ 1816.430344][T19503] RDX: 000000000000002e RSI: 0000200000000040 RDI: 0000000000000006
[ 1816.430358][T19503] RBP: 00007feec847e090 R08: 0000000000000000 R09: 0000000000000000
[ 1816.430371][T19503] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1816.430384][T19503] R13: 00007feec7816038 R14: 00007feec7815fa0 R15: 00007fff9e6a8bc8
[ 1816.430419][T19503]  </TASK>
[ 1816.439547][T19505] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[ 1816.681771][T19509] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11740'.
[ 1816.721097][T19505] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[ 1816.788569][T19505] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[ 1816.820259][T19515] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11743'.
[ 1816.867637][T19508] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11740'.
[ 1816.882810][T19517] netlink: 76 bytes leftover after parsing attributes in process `syz.4.11743'.
[ 1816.937843][T19509] : entered promiscuous mode
[ 1816.955253][T19505] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[ 1816.976330][T19505] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[ 1817.015412][T19508] openvswitch: : Dropping previously announced user features
[ 1817.015924][T19505] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[ 1817.054107][T19505] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[ 1817.106062][T19505] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[ 1817.211990][T19522] netlink: 'syz.2.11745': attribute type 13 has an invalid length.
[ 1817.234409][T19522] netlink: 'syz.2.11745': attribute type 17 has an invalid length.
[ 1817.295565][T19522] tipc: Resetting bearer <eth:team0>
[ 1817.359000][T19522] bridge_slave_1: left allmulticast mode
[ 1817.509390][T19538] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11745'.
[ 1817.862252][T19550] netlink: 20 bytes leftover after parsing attributes in process `syz.0.11752'.
[ 1817.887543][T19552] FAULT_INJECTION: forcing a failure.
[ 1817.887543][T19552] name failslab, interval 1, probability 0, space 0, times 0
[ 1817.933167][T19552] CPU: 0 UID: 0 PID: 19552 Comm: syz.4.11753 Not tainted syzkaller #0 PREEMPT(full) 
[ 1817.933198][T19552] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[ 1817.933212][T19552] Call Trace:
[ 1817.933224][T19552]  <TASK>
[ 1817.933234][T19552]  dump_stack_lvl+0xe8/0x150
[ 1817.933267][T19552]  should_fail_ex+0x412/0x560
[ 1817.933298][T19552]  should_failslab+0xa8/0x100
[ 1817.933324][T19552]  __kmalloc_noprof+0xe8/0x760
[ 1817.933353][T19552]  ? l2tp_v3_session_get+0x60d/0x7c0
[ 1817.933463][T19552]  ? l2tp_session_create+0x42/0xd40
[ 1817.933485][T19552]  ? l2tp_v3_session_get+0x96/0x7c0
[ 1817.933511][T19552]  l2tp_session_create+0x42/0xd40
[ 1817.933675][T19552]  pppol2tp_connect+0xc96/0x17c0
[ 1817.933721][T19552]  ? __pfx_pppol2tp_connect+0x10/0x10
[ 1817.933760][T19552]  ? __pfx_aa_sk_perm+0x10/0x10
[ 1817.933802][T19552]  ? hook_socket_connect+0x107/0x190
[ 1817.933842][T19552]  ? bpf_lsm_socket_connect+0x9/0x20
[ 1817.933880][T19552]  __sys_connect+0x312/0x450
[ 1817.933910][T19552]  ? __pfx___sys_connect+0x10/0x10
[ 1817.933951][T19552]  ? __pfx_ksys_write+0x10/0x10
[ 1817.933994][T19552]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1817.934022][T19552]  __x64_sys_connect+0x7a/0x90
[ 1817.934056][T19552]  do_syscall_64+0x174/0x580
[ 1817.934082][T19552]  ? trace_irq_disable+0x3b/0x140
[ 1817.934118][T19552]  ? clear_bhb_loop+0x40/0x90
[ 1817.934149][T19552]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1817.934177][T19552] RIP: 0033:0x7feec759ce59
[ 1817.934202][T19552] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1817.934223][T19552] RSP: 002b:00007feec847e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a
[ 1817.934249][T19552] RAX: ffffffffffffffda RBX: 00007feec7815fa0 RCX: 00007feec759ce59
[ 1817.934266][T19552] RDX: 000000000000002e RSI: 0000200000000040 RDI: 0000000000000006
[ 1817.934281][T19552] RBP: 00007feec847e090 R08: 0000000000000000 R09: 0000000000000000
[ 1817.934297][T19552] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1817.934311][T19552] R13: 00007feec7816038 R14: 00007feec7815fa0 R15: 00007fff9e6a8bc8
[ 1817.934352][T19552]  </TASK>
[ 1818.426798][T19564] FAULT_INJECTION: forcing a failure.
[ 1818.426798][T19564] name failslab, interval 1, probability 0, space 0, times 0
[ 1818.442989][T19564] CPU: 0 UID: 0 PID: 19564 Comm: syz.1.11756 Not tainted syzkaller #0 PREEMPT(full) 
[ 1818.443019][T19564] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[ 1818.443045][T19564] Call Trace:
[ 1818.443054][T19564]  <TASK>
[ 1818.443064][T19564]  dump_stack_lvl+0xe8/0x150
[ 1818.443094][T19564]  should_fail_ex+0x412/0x560
[ 1818.443124][T19564]  should_failslab+0xa8/0x100
[ 1818.443148][T19564]  __kmalloc_cache_noprof+0x88/0x660
[ 1818.443181][T19564]  ? rtnl_newlink+0x136/0x1bb0
[ 1818.443209][T19564]  rtnl_newlink+0x136/0x1bb0
[ 1818.443243][T19564]  ? __pfx_rtnl_newlink+0x10/0x10
[ 1818.443271][T19564]  ? __lock_acquire+0x6b5/0x2cf0
[ 1818.443297][T19564]  ? __lock_acquire+0x6b5/0x2cf0
[ 1818.443330][T19564]  ? unwind_next_frame+0xa6/0x2550
[ 1818.443365][T19564]  ? unwind_next_frame+0xa6/0x2550
[ 1818.443393][T19564]  ? is_bpf_text_address+0x26/0x2b0
[ 1818.443428][T19564]  ? is_bpf_text_address+0x26/0x2b0
[ 1818.443456][T19564]  ? __lock_acquire+0x6b5/0x2cf0
[ 1818.443482][T19564]  ? kernel_text_address+0xa5/0xe0
[ 1818.443513][T19564]  ? __kernel_text_address+0xd/0x30
[ 1818.443541][T19564]  ? unwind_get_return_address+0x4d/0x90
[ 1818.443566][T19564]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[ 1818.443597][T19564]  ? arch_stack_walk+0xfb/0x150
[ 1818.443635][T19564]  ? rtnetlink_rcv_msg+0x1b9/0xbe0
[ 1818.443671][T19564]  ? __pfx_rtnl_newlink+0x10/0x10
[ 1818.443690][T19564]  rtnetlink_rcv_msg+0x7d5/0xbe0
[ 1818.443708][T19564]  ? kmem_cache_alloc_node_noprof+0x384/0x690
[ 1818.443737][T19564]  ? netlink_sendmsg+0x5d4/0xb40
[ 1818.443763][T19564]  ? rtnetlink_rcv_msg+0x1b9/0xbe0
[ 1818.443783][T19564]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[ 1818.443805][T19564]  ? __lock_acquire+0x6b5/0x2cf0
[ 1818.443840][T19564]  netlink_rcv_skb+0x232/0x4b0
[ 1818.443863][T19564]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[ 1818.443885][T19564]  ? __pfx_netlink_rcv_skb+0x10/0x10
[ 1818.443922][T19564]  ? netlink_deliver_tap+0x2e/0x1b0
[ 1818.443947][T19564]  ? netlink_deliver_tap+0x2e/0x1b0
[ 1818.443978][T19564]  netlink_unicast+0x75c/0x8e0
[ 1818.444012][T19564]  netlink_sendmsg+0x813/0xb40
[ 1818.444058][T19564]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1818.444087][T19564]  ? aa_sock_msg_perm+0xf1/0x1b0
[ 1818.444121][T19564]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[ 1818.444152][T19564]  ____sys_sendmsg+0x972/0x9f0
[ 1818.444176][T19564]  ? __might_fault+0xaf/0x130
[ 1818.444211][T19564]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1818.444247][T19564]  ? import_iovec+0x73/0xa0
[ 1818.444278][T19564]  ___sys_sendmsg+0x2a5/0x360
[ 1818.444301][T19564]  ? __lock_acquire+0x6b5/0x2cf0
[ 1818.444330][T19564]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1818.444394][T19564]  ? __fget_files+0x2a/0x420
[ 1818.444420][T19564]  ? __fget_files+0x3a0/0x420
[ 1818.444456][T19564]  __x64_sys_sendmsg+0x1bd/0x2a0
[ 1818.444483][T19564]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[ 1818.444519][T19564]  ? __pfx_ksys_write+0x10/0x10
[ 1818.444561][T19564]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1818.444584][T19564]  do_syscall_64+0x174/0x580
[ 1818.444607][T19564]  ? trace_irq_disable+0x3b/0x140
[ 1818.444638][T19564]  ? clear_bhb_loop+0x40/0x90
[ 1818.444665][T19564]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1818.444686][T19564] RIP: 0033:0x7f3f1219ce59
[ 1818.444706][T19564] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1818.444723][T19564] RSP: 002b:00007f3f12f7d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1818.444746][T19564] RAX: ffffffffffffffda RBX: 00007f3f12415fa0 RCX: 00007f3f1219ce59
[ 1818.444762][T19564] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000014
[ 1818.444775][T19564] RBP: 00007f3f12f7d090 R08: 0000000000000000 R09: 0000000000000000
[ 1818.444788][T19564] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1818.444801][T19564] R13: 00007f3f12416038 R14: 00007f3f12415fa0 R15: 00007ffd9388ac28
[ 1818.444836][T19564]  </TASK>
[ 1819.377965][T19578] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11762'.
[ 1819.432034][T19578] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11762'.
[ 1819.558188][T19588] FAULT_INJECTION: forcing a failure.
[ 1819.558188][T19588] name failslab, interval 1, probability 0, space 0, times 0
[ 1819.573675][T19588] CPU: 1 UID: 0 PID: 19588 Comm: syz.1.11765 Not tainted syzkaller #0 PREEMPT(full) 
[ 1819.573704][T19588] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[ 1819.573718][T19588] Call Trace:
[ 1819.573729][T19588]  <TASK>
[ 1819.573740][T19588]  dump_stack_lvl+0xe8/0x150
[ 1819.573773][T19588]  should_fail_ex+0x412/0x560
[ 1819.573804][T19588]  should_failslab+0xa8/0x100
[ 1819.573825][T19588]  ? radix_tree_node_alloc+0x7e/0x3a0
[ 1819.573950][T19588]  kmem_cache_alloc_noprof+0x87/0x650
[ 1819.573988][T19588]  radix_tree_node_alloc+0x7e/0x3a0
[ 1819.574027][T19588]  radix_tree_extend+0x139/0x550
[ 1819.574069][T19588]  idr_get_free+0x1c2/0xa70
[ 1819.574115][T19588]  idr_alloc_u32+0x18d/0x320
[ 1819.574144][T19588]  ? __pfx_idr_alloc_u32+0x10/0x10
[ 1819.574170][T19588]  ? net_generic+0x1e/0x240
[ 1819.574195][T19588]  ? l2tp_session_register+0xda/0x10b0
[ 1819.574220][T19588]  l2tp_session_register+0x18c/0x10b0
[ 1819.574246][T19588]  ? l2tp_session_create+0x6ff/0xd40
[ 1819.574274][T19588]  ? __pfx_l2tp_session_register+0x10/0x10
[ 1819.574310][T19588]  pppol2tp_connect+0xdc0/0x17c0
[ 1819.574348][T19588]  ? __pfx_pppol2tp_connect+0x10/0x10
[ 1819.574382][T19588]  ? __pfx_aa_sk_perm+0x10/0x10
[ 1819.574418][T19588]  ? hook_socket_connect+0x107/0x190
[ 1819.574462][T19588]  ? bpf_lsm_socket_connect+0x9/0x20
[ 1819.574493][T19588]  __sys_connect+0x312/0x450
[ 1819.574517][T19588]  ? __pfx___sys_connect+0x10/0x10
[ 1819.574552][T19588]  ? __pfx_ksys_write+0x10/0x10
[ 1819.574589][T19588]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1819.574613][T19588]  __x64_sys_connect+0x7a/0x90
[ 1819.574634][T19588]  do_syscall_64+0x174/0x580
[ 1819.574656][T19588]  ? trace_irq_disable+0x3b/0x140
[ 1819.574686][T19588]  ? clear_bhb_loop+0x40/0x90
[ 1819.574714][T19588]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1819.574733][T19588] RIP: 0033:0x7f3f1219ce59
[ 1819.574754][T19588] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1819.574772][T19588] RSP: 002b:00007f3f12f7d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a
[ 1819.574793][T19588] RAX: ffffffffffffffda RBX: 00007f3f12415fa0 RCX: 00007f3f1219ce59
[ 1819.574808][T19588] RDX: 000000000000002e RSI: 0000200000000040 RDI: 0000000000000006
[ 1819.574821][T19588] RBP: 00007f3f12f7d090 R08: 0000000000000000 R09: 0000000000000000
[ 1819.574833][T19588] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1819.574845][T19588] R13: 00007f3f12416038 R14: 00007f3f12415fa0 R15: 00007ffd9388ac28
[ 1819.574881][T19588]  </TASK>
[ 1820.043304][T19595] netlink: 84 bytes leftover after parsing attributes in process `syz.1.11769'.
[ 1820.185861][T19596] syzkaller0: entered promiscuous mode
[ 1820.217123][T19596] syzkaller0: entered allmulticast mode
[ 1820.590540][T19605] syzkaller0: entered promiscuous mode
[ 1820.596719][T19605] syzkaller0: entered allmulticast mode
[ 1820.619339][T19606] FAULT_INJECTION: forcing a failure.
[ 1820.619339][T19606] name failslab, interval 1, probability 0, space 0, times 0
[ 1820.653880][T19602] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11770'.
[ 1820.672815][T19606] CPU: 0 UID: 0 PID: 19606 Comm: syz.2.11771 Not tainted syzkaller #0 PREEMPT(full) 
[ 1820.672846][T19606] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[ 1820.672859][T19606] Call Trace:
[ 1820.672869][T19606]  <TASK>
[ 1820.672879][T19606]  dump_stack_lvl+0xe8/0x150
[ 1820.672910][T19606]  should_fail_ex+0x412/0x560
[ 1820.672940][T19606]  should_failslab+0xa8/0x100
[ 1820.672964][T19606]  __kmalloc_cache_noprof+0x88/0x660
[ 1820.672993][T19606]  ? __pfx_stack_trace_save+0x10/0x10
[ 1820.673025][T19606]  ? rtnl_newlink+0x136/0x1bb0
[ 1820.673053][T19606]  rtnl_newlink+0x136/0x1bb0
[ 1820.673076][T19606]  ? kasan_save_track+0x3e/0x80
[ 1820.673104][T19606]  ? kasan_save_free_info+0x46/0x50
[ 1820.673127][T19606]  ? __kasan_slab_free+0x5c/0x80
[ 1820.673157][T19606]  ? dev_hard_start_xmit+0x2cd/0x830
[ 1820.673182][T19606]  ? __dev_queue_xmit+0x14d9/0x3950
[ 1820.673206][T19606]  ? __netlink_deliver_tap+0x5ad/0x850
[ 1820.673230][T19606]  ? netlink_deliver_tap+0x19c/0x1b0
[ 1820.673252][T19606]  ? netlink_unicast+0x730/0x8e0
[ 1820.673279][T19606]  ? netlink_sendmsg+0x813/0xb40
[ 1820.673304][T19606]  ? __pfx_rtnl_newlink+0x10/0x10
[ 1820.673323][T19606]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1820.673388][T19606]  ? kasan_quarantine_put+0xbb/0x1f0
[ 1820.673416][T19606]  ? lockdep_hardirqs_on+0x7a/0x110
[ 1820.673445][T19606]  ? nlmon_xmit+0xb0/0x100
[ 1820.673467][T19606]  ? kmem_cache_free+0x182/0x650
[ 1820.673511][T19606]  ? __lock_acquire+0x6b5/0x2cf0
[ 1820.673539][T19606]  ? __dev_queue_xmit+0x2b6/0x3950
[ 1820.673569][T19606]  ? __local_bh_enable_ip+0xd0/0x130
[ 1820.673592][T19606]  ? lockdep_hardirqs_on+0x7a/0x110
[ 1820.673613][T19606]  ? __dev_queue_xmit+0x2b6/0x3950
[ 1820.673637][T19606]  ? __local_bh_enable_ip+0xd0/0x130
[ 1820.673657][T19606]  ? __dev_queue_xmit+0x2b6/0x3950
[ 1820.673691][T19606]  ? rtnetlink_rcv_msg+0x1b9/0xbe0
[ 1820.673730][T19606]  ? __pfx_rtnl_newlink+0x10/0x10
[ 1820.673750][T19606]  rtnetlink_rcv_msg+0x7d5/0xbe0
[ 1820.673776][T19606]  ? rtnetlink_rcv_msg+0x1b9/0xbe0
[ 1820.673796][T19606]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[ 1820.673813][T19606]  ? ref_tracker_free+0x693/0x840
[ 1820.673841][T19606]  ? __pfx_ref_tracker_free+0x10/0x10
[ 1820.673877][T19606]  netlink_rcv_skb+0x232/0x4b0
[ 1820.673904][T19606]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[ 1820.673928][T19606]  ? __pfx_netlink_rcv_skb+0x10/0x10
[ 1820.673967][T19606]  ? netlink_deliver_tap+0x2e/0x1b0
[ 1820.673991][T19606]  ? netlink_deliver_tap+0x2e/0x1b0
[ 1820.674022][T19606]  netlink_unicast+0x75c/0x8e0
[ 1820.674056][T19606]  netlink_sendmsg+0x813/0xb40
[ 1820.674093][T19606]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1820.674122][T19606]  ? aa_sock_msg_perm+0xf1/0x1b0
[ 1820.674156][T19606]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[ 1820.674189][T19606]  ____sys_sendmsg+0x972/0x9f0
[ 1820.674214][T19606]  ? __might_fault+0xaf/0x130
[ 1820.674253][T19606]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1820.674295][T19606]  ? import_iovec+0x73/0xa0
[ 1820.674325][T19606]  ___sys_sendmsg+0x2a5/0x360
[ 1820.674348][T19606]  ? __lock_acquire+0x6b5/0x2cf0
[ 1820.674376][T19606]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1820.674442][T19606]  ? __fget_files+0x2a/0x420
[ 1820.674467][T19606]  ? __fget_files+0x3a0/0x420
[ 1820.674505][T19606]  __x64_sys_sendmsg+0x1bd/0x2a0
[ 1820.674534][T19606]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[ 1820.674570][T19606]  ? __pfx_ksys_write+0x10/0x10
[ 1820.674611][T19606]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1820.674634][T19606]  do_syscall_64+0x174/0x580
[ 1820.674658][T19606]  ? clear_bhb_loop+0x40/0x90
[ 1820.674685][T19606]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1820.674706][T19606] RIP: 0033:0x7f9816b9ce59
[ 1820.674727][T19606] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1820.674745][T19606] RSP: 002b:00007f98179e0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1820.674769][T19606] RAX: ffffffffffffffda RBX: 00007f9816e15fa0 RCX: 00007f9816b9ce59
[ 1820.674785][T19606] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000014
[ 1820.674799][T19606] RBP: 00007f98179e0090 R08: 0000000000000000 R09: 0000000000000000
[ 1820.674813][T19606] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1820.674826][T19606] R13: 00007f9816e16038 R14: 00007f9816e15fa0 R15: 00007ffe6ee1ac58
[ 1820.674862][T19606]  </TASK>
[ 1820.680282][T19602] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11770'.
[ 1821.194746][T19602] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11770'.
[ 1821.220843][T19602] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11770'.
[ 1821.277853][T19602] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11770'.
[ 1821.348596][T19608] netlink: 888 bytes leftover after parsing attributes in process `syz.0.11772'.
[ 1821.468530][T19620] netlink: 96 bytes leftover after parsing attributes in process `syz.3.11775'.
[ 1821.747717][T19629] netlink: 'syz.0.11778': attribute type 11 has an invalid length.
[ 1821.771086][T19628] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2
[ 1821.785325][T19628] batman_adv: batadv0: Adding interface: gretap2
[ 1821.792893][T19628] batman_adv: batadv0: The MTU of interface gretap2 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1821.837735][T19628] batman_adv: batadv0: Interface activated: gretap2
[ 1822.148903][T19641] netlink: 'syz.1.11781': attribute type 1 has an invalid length.
[ 1822.508820][T19643] 8021q: adding VLAN 0 to HW filter on device bond9
[ 1822.548439][T19658] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11784'.
[ 1822.570375][T19643] bond8: (slave bond9): making interface the new active one
[ 1822.592052][T19643] bond8: (slave bond9): Enslaving as an active interface with an up link
[ 1822.994612][T19668] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11786'.
[ 1823.041560][T19671] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11787'.
[ 1823.300505][T19688] net_ratelimit: 60 callbacks suppressed
[ 1823.300527][T19688] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1823.334642][T19690] hsr0: entered promiscuous mode
[ 1823.355061][T19688] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1823.383615][T19688] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1823.499086][T19688] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1823.539237][T19688] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1823.603416][T19693] syz_tun: left promiscuous mode
[ 1823.671901][T19693] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1823.706655][T19693] 8021q: adding VLAN 0 to HW filter on device team0
[ 1823.890193][T19693] batadv_slave_1: left promiscuous mode
[ 1823.965372][T19693] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[ 1823.994016][T19693] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 1824.012756][T19693] 8021q: adding VLAN 0 to HW filter on device hsr0
[ 1824.028440][T19693] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[ 1824.058407][T19696] hsr_slave_0: left promiscuous mode
[ 1824.078840][T19696] hsr_slave_1: left promiscuous mode
[ 1824.105768][T19696] hsr0 (unregistering): left promiscuous mode
[ 1824.207472][ T6998] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1824.215277][ T6998] bridge0: port 1(bridge_slave_0) entered listening state
[ 1824.363632][T19713] macvlan0: entered promiscuous mode
[ 1824.381772][    C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[ 1824.637244][T19729] netlink: 'syz.4.11800': attribute type 5 has an invalid length.
[ 1824.735890][T19727] 

: option downdelay: invalid value (18446744073709547007)
[ 1824.786261][T19727] 

: option downdelay: allowed values 0 - 2147483647
[ 1824.810935][T19727] 

 (unregistering): Released all slaves
[ 1824.938096][T19750] netlink: 'syz.2.11807': attribute type 1 has an invalid length.
[ 1825.027764][T19750] 8021q: adding VLAN 0 to HW filter on device bond8
[ 1825.394364][T19761] netlink: 'syz.0.11809': attribute type 11 has an invalid length.
[ 1826.217246][T19782] __nla_validate_parse: 5 callbacks suppressed
[ 1826.217268][T19782] netlink: 876 bytes leftover after parsing attributes in process `syz.4.11815'.
[ 1826.237662][T19782] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11815'.
[ 1826.652720][T19802] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11820'.
[ 1826.666373][T19801] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11819'.
[ 1826.841167][T19811] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1827.665791][T19823] syzkaller1: entered promiscuous mode
[ 1827.690546][T19823] syzkaller1: entered allmulticast mode
[ 1827.698781][T19825] netlink: 20 bytes leftover after parsing attributes in process `syz.2.11827'.
[ 1827.807536][T19823] netlink: 132 bytes leftover after parsing attributes in process `syz.4.11826'.
[ 1828.002233][T11550] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 1828.018627][T11550] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 1828.037338][T11550] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 1828.057570][T11550] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 1828.088566][T19836] netlink: 216 bytes leftover after parsing attributes in process `syz.3.11828'.
[ 1828.095627][T11550] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 1828.151298][T19836] netlink: 24 bytes leftover after parsing attributes in process `syz.3.11828'.
[ 1828.230514][T19836] netlink: 16 bytes leftover after parsing attributes in process `syz.3.11828'.
[ 1828.252287][T19836] netlink: 216 bytes leftover after parsing attributes in process `syz.3.11828'.
[ 1828.337385][T31212] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 1828.349011][T31212] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 1828.359241][T31212] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 1828.380991][T31212] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 1828.392511][T31212] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 1828.867956][T13164] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1830.460032][T11550] Bluetooth: hci3: command tx timeout
[ 1830.758910][ T6989] dvmrp0: left allmulticast mode
[ 1830.783663][ T6989] pimreg: left allmulticast mode
[ 1830.915995][T19891] netlink: 'syz.3.11837': attribute type 11 has an invalid length.
[ 1831.356490][ T6989] bond7 (unregistering): (slave gretap3): Releasing active interface
[ 1831.439352][ T6989] team0: Port device geneve1 removed
[ 1831.501349][ T6989] bond5 (unregistering): (slave bridge0): Releasing backup interface
[ 1831.597201][ T6989] bond8 (unregistering): (slave bridge4): Releasing active interface
[ 1831.610657][ T6989] bridge4 (unregistering): left promiscuous mode
[ 1831.617466][ T6989] bridge4 (unregistering): left allmulticast mode
[ 1831.698442][ T6989] bond0 (unregistering): Released all slaves
[ 1831.718761][ T6989] bond1 (unregistering): Released all slaves
[ 1831.742213][ T6989] bond2 (unregistering): Released all slaves
[ 1831.775442][ T6989] bond3 (unregistering): Released all slaves
[ 1831.802277][ T6989] bond4 (unregistering): Released all slaves
[ 1831.829143][ T6989] bond5 (unregistering): Released all slaves
[ 1831.861769][ T6989] bond6 (unregistering): Released all slaves
[ 1831.887382][ T6989] bond7 (unregistering): Released all slaves
[ 1831.923619][ T6989] bond8 (unregistering): Released all slaves
[ 1831.949619][ T6989] bond9 (unregistering): Released all slaves
[ 1831.982835][ T6989] bond10 (unregistering): Released all slaves
[ 1832.022553][T19876] lo speed is unknown, defaulting to 1000
[ 1832.054038][T19891] __nla_validate_parse: 3 callbacks suppressed
[ 1832.054060][T19891] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11837'.
[ 1832.098612][T19900] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1832.149831][T19891] netlink: 'syz.3.11837': attribute type 11 has an invalid length.
[ 1832.182416][ T6993] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[ 1832.235436][ T6993] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[ 1832.294558][ T6993] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[ 1832.370378][ T6993] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[ 1832.541091][T11550] Bluetooth: hci3: command tx timeout
[ 1832.607802][T19917] netlink: 68 bytes leftover after parsing attributes in process `syz.1.11842'.
[ 1832.610058][ T6989] tipc: Disabling bearer <udp:syz2>
[ 1832.636635][ T6989] tipc: Left network mode
[ 1832.651601][T19920] netlink: 'syz.2.11845': attribute type 1 has an invalid length.
[ 1832.720709][T19913] dvmrp8: entered allmulticast mode
[ 1832.776420][T19924] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11845'.
[ 1832.862916][T19920] 8021q: adding VLAN 0 to HW filter on device bond9
[ 1833.001901][T19921] vlan2: entered promiscuous mode
[ 1833.034550][T19921] bond9: entered promiscuous mode
[ 1833.040564][T19921] vlan2: entered allmulticast mode
[ 1833.066828][T19921] bond9: entered allmulticast mode
[ 1833.248074][T19830] lo speed is unknown, defaulting to 1000
[ 1833.695836][T19949] netlink: 14 bytes leftover after parsing attributes in process `syz.2.11851'.
[ 1833.894308][T19945] syzkaller0: entered promiscuous mode
[ 1833.913790][T19955] netlink: 24 bytes leftover after parsing attributes in process `syz.1.11850'.
[ 1833.947823][T19945] syzkaller0: entered allmulticast mode
[ 1834.552874][T19969] bond0: Caught tx_queue_len zero misconfig
[ 1834.605425][ T5295] 8021q: adding VLAN 0 to HW filter on device eth1
[ 1834.623449][T11550] Bluetooth: hci3: command tx timeout
[ 1834.899236][T19986] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[ 1834.920432][T19984] netlink: 5 bytes leftover after parsing attributes in process `syz.2.11857'.
[ 1834.997342][T19990] 
: renamed from bond0
[ 1836.001471][T20013] netlink: 20 bytes leftover after parsing attributes in process `syz.1.11863'.
[ 1836.699805][T11550] Bluetooth: hci3: command tx timeout
[ 1836.841971][ T6989] hsr_slave_0: left promiscuous mode
[ 1836.875220][ T6989] hsr_slave_1: left promiscuous mode
[ 1838.626088][T20039] netlink: 28 bytes leftover after parsing attributes in process `syz.2.11866'.
[ 1838.650126][T20039] netlink: 28 bytes leftover after parsing attributes in process `syz.2.11866'.
[ 1838.685981][ T5295] 8021q: adding VLAN 0 to HW filter on device eth2
[ 1838.797582][T19830] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1838.830200][T19830] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1838.857889][T19830] bridge_slave_0: entered allmulticast mode
[ 1838.876002][T19830] bridge_slave_0: entered promiscuous mode
[ 1838.904693][T19830] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1838.926897][T19830] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1838.944835][T19830] bridge_slave_1: entered allmulticast mode
[ 1838.961869][T19830] bridge_slave_1: entered promiscuous mode
[ 1839.157058][T19830] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1839.211539][T19830] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1839.231172][T20056] netlink: 10 bytes leftover after parsing attributes in process `syz.2.11870'.
[ 1839.521099][T19830] team0: Port device team_slave_0 added
[ 1839.569449][T19830] team0: Port device team_slave_1 added
[ 1839.727475][T19830] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1839.746670][T19830] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1839.776334][T20067] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11873'.
[ 1839.820222][T19830] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1839.883261][ T6989] IPVS: stop unused estimator thread 0...
[ 1839.923797][T19830] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1839.948994][T19830] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1840.032623][T19830] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1840.374597][T20077] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11873'.
[ 1840.427105][T19830] hsr_slave_0: entered promiscuous mode
[ 1840.453065][T19830] hsr_slave_1: entered promiscuous mode
[ 1841.018804][T20101] netlink: 'syz.2.11879': attribute type 13 has an invalid length.
[ 1841.164027][T20101] tipc: Resetting bearer <eth:team0>
[ 1841.309546][ T5295] 8021q: adding VLAN 0 to HW filter on device eth3
[ 1841.496962][T20102] syzkaller0: Caught tx_queue_len zero misconfig
[ 1841.505201][T20104] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11879'.
[ 1841.946292][T20112] macvlan0: entered promiscuous mode
[ 1841.960360][T20112] netlink: 52 bytes leftover after parsing attributes in process `syz.1.11881'.
[ 1843.175743][T19830] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 1843.199190][T19830] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 1843.220912][T19830] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 1843.246666][T19830] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 1843.280403][T19830] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 1843.308094][T20161] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1843.329605][T19830] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 1843.372322][T19830] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 1843.415745][T19830] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 1843.592427][T20172] lo: Caught tx_queue_len zero misconfig
[ 1843.658454][T19830] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1843.731247][T19830] 8021q: adding VLAN 0 to HW filter on device team0
[ 1843.768708][ T6988] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1843.776020][ T6988] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1843.855325][ T6993] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1843.863714][ T6993] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1843.953677][T20128] lo speed is unknown, defaulting to 1000
[ 1844.017193][T20175] 
[ 1844.019590][T20175] ======================================================
[ 1844.026900][T20175] WARNING: possible circular locking dependency detected
[ 1844.034236][T20175] syzkaller #0 Not tainted
[ 1844.039311][T20175] ------------------------------------------------------
[ 1844.046714][T20175] syz.2.11890/20175 is trying to acquire lock:
[ 1844.052908][T20175] ffff888027701828 (&q->elevator_lock){+.+.}-{4:4}, at: elevator_change+0x1b3/0x450
[ 1844.062470][T20175] 
[ 1844.062470][T20175] but task is already holding lock:
[ 1844.069948][T20175] ffff888027701300 (&q->q_usage_counter(io)#54){++++}-{0:0}, at: elevator_change+0x198/0x450
[ 1844.080753][T20175] 
[ 1844.080753][T20175] which lock already depends on the new lock.
[ 1844.080753][T20175] 
[ 1844.091319][T20175] 
[ 1844.091319][T20175] the existing dependency chain (in reverse order) is:
[ 1844.100447][T20175] 
[ 1844.100447][T20175] -> #6 (&q->q_usage_counter(io)#54){++++}-{0:0}:
[ 1844.110419][T20175]        blk_alloc_queue+0x546/0x680
[ 1844.116069][T20175]        __blk_mq_alloc_disk+0x197/0x390
[ 1844.121799][T20175]        nbd_dev_add+0x499/0xb50
[ 1844.126987][T20175]        nbd_init+0x168/0x1f0
[ 1844.132019][T20175]        do_one_initcall+0x250/0x870
[ 1844.137681][T20175]        do_initcall_level+0x104/0x190
[ 1844.143432][T20175]        do_initcalls+0x59/0xa0
[ 1844.148323][T20175]        kernel_init_freeable+0x2a6/0x3e0
[ 1844.154156][T20175]        kernel_init+0x1d/0x1d0
[ 1844.159391][T20175]        ret_from_fork+0x514/0xb70
[ 1844.164528][T20175]        ret_from_fork_asm+0x1a/0x30
[ 1844.169938][T20175] 
[ 1844.169938][T20175] -> #5 (fs_reclaim){+.+.}-{0:0}:
[ 1844.177535][T20175]        fs_reclaim_acquire+0x71/0x100
[ 1844.183128][T20175]        __kmalloc_cache_node_noprof+0x46/0x6b0
[ 1844.190540][T20175]        create_worker+0x113/0x7e0
[ 1844.195677][T20175]        workqueue_prepare_cpu+0xe4/0x170
[ 1844.201676][T20175]        cpuhp_invoke_callback+0x445/0x860
[ 1844.208024][T20175]        _cpu_up+0x2ce/0x5b0
[ 1844.212989][T20175]        cpu_up+0x1d2/0x220
[ 1844.217785][T20175]        cpuhp_bringup_mask+0xb2/0x1a0
[ 1844.223354][T20175]        cpuhp_bringup_cpus_parallel+0x109/0x120
[ 1844.230080][T20175]        bringup_nonboot_cpus+0x17/0x30
[ 1844.236049][T20175]        smp_init+0x32/0x110
[ 1844.241269][T20175]        kernel_init_freeable+0x288/0x3e0
[ 1844.247029][T20175]        kernel_init+0x1d/0x1d0
[ 1844.251990][T20175]        ret_from_fork+0x514/0xb70
[ 1844.257406][T20175]        ret_from_fork_asm+0x1a/0x30
[ 1844.263054][T20175] 
[ 1844.263054][T20175] -> #4 (cpu_hotplug_lock){++++}-{0:0}:
[ 1844.271156][T20175]        cpus_read_lock+0x42/0x160
[ 1844.276562][T20175]        static_key_slow_inc+0x12/0x30
[ 1844.282234][T20175]        nbd_genl_reconfigure+0x132f/0x1ea0
[ 1844.288407][T20175]        genl_family_rcv_msg_doit+0x22a/0x330
[ 1844.294606][T20175]        genl_rcv_msg+0x61c/0x7a0
[ 1844.299662][T20175]        netlink_rcv_skb+0x232/0x4b0
[ 1844.305596][T20175]        genl_rcv+0x28/0x40
[ 1844.310149][T20175]        netlink_unicast+0x75c/0x8e0
[ 1844.315458][T20175]        netlink_sendmsg+0x813/0xb40
[ 1844.320762][T20175]        ____sys_sendmsg+0x972/0x9f0
[ 1844.326151][T20175]        ___sys_sendmsg+0x2a5/0x360
[ 1844.331485][T20175]        __x64_sys_sendmsg+0x1bd/0x2a0
[ 1844.337057][T20175]        do_syscall_64+0x174/0x580
[ 1844.342475][T20175]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1844.349281][T20175] 
[ 1844.349281][T20175] -> #3 (&nsock->tx_lock){+.+.}-{4:4}:
[ 1844.357660][T20175]        __mutex_lock+0x1a3/0x1550
[ 1844.363255][T20175]        nbd_queue_rq+0x37b/0x1100
[ 1844.368637][T20175]        blk_mq_dispatch_rq_list+0xa70/0x1910
[ 1844.375106][T20175]        __blk_mq_sched_dispatch_requests+0xdcc/0x1600
[ 1844.382245][T20175]        blk_mq_sched_dispatch_requests+0xd7/0x190
[ 1844.389234][T20175]        blk_mq_run_hw_queue+0x348/0x4f0
[ 1844.394898][T20175]        blk_mq_dispatch_list+0xd16/0xe10
[ 1844.400745][T20175]        blk_mq_flush_plug_list+0x48d/0x570
[ 1844.407125][T20175]        __blk_flush_plug+0x3ed/0x4d0
[ 1844.412706][T20175]        __submit_bio+0x28d/0x580
[ 1844.417854][T20175]        submit_bio_noacct_nocheck+0x2f4/0xa40
[ 1844.424116][T20175]        block_read_full_folio+0x599/0x830
[ 1844.430137][T20175]        filemap_read_folio+0x137/0x3b0
[ 1844.435722][T20175]        do_read_cache_folio+0x358/0x590
[ 1844.441474][T20175]        read_part_sector+0xb6/0x2b0
[ 1844.448015][T20175]        adfspart_check_ICS+0xb1/0x960
[ 1844.454732][T20175]        bdev_disk_changed+0x817/0x1770
[ 1844.460307][T20175]        blkdev_get_whole+0x380/0x510
[ 1844.466053][T20175]        bdev_open+0x31e/0xd30
[ 1844.470925][T20175]        blkdev_open+0x470/0x610
[ 1844.475947][T20175]        do_dentry_open+0x822/0x13a0
[ 1844.481348][T20175]        vfs_open+0x3b/0x340
[ 1844.486132][T20175]        path_openat+0x2e08/0x3860
[ 1844.491350][T20175]        do_file_open+0x23e/0x4a0
[ 1844.496482][T20175]        do_sys_openat2+0x113/0x200
[ 1844.501701][T20175]        __x64_sys_openat+0x138/0x170
[ 1844.507527][T20175]        do_syscall_64+0x174/0x580
[ 1844.512653][T20175]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1844.519082][T20175] 
[ 1844.519082][T20175] -> #2 (&cmd->lock){+.+.}-{4:4}:
[ 1844.526401][T20175]        __mutex_lock+0x1a3/0x1550
[ 1844.531538][T20175]        nbd_queue_rq+0xc6/0x1100
[ 1844.536931][T20175]        blk_mq_dispatch_rq_list+0xa70/0x1910
[ 1844.543050][T20175]        __blk_mq_sched_dispatch_requests+0xdcc/0x1600
[ 1844.549920][T20175]        blk_mq_sched_dispatch_requests+0xd7/0x190
[ 1844.556453][T20175]        blk_mq_run_hw_queue+0x348/0x4f0
[ 1844.562101][T20175]        blk_mq_dispatch_list+0xd16/0xe10
[ 1844.568044][T20175]        blk_mq_flush_plug_list+0x48d/0x570
[ 1844.573967][T20175]        __blk_flush_plug+0x3ed/0x4d0
[ 1844.579363][T20175]        __submit_bio+0x28d/0x580
[ 1844.584403][T20175]        submit_bio_noacct_nocheck+0x2f4/0xa40
[ 1844.590583][T20175]        block_read_full_folio+0x599/0x830
[ 1844.596500][T20175]        filemap_read_folio+0x137/0x3b0
[ 1844.602255][T20175]        do_read_cache_folio+0x358/0x590
[ 1844.608020][T20175]        read_part_sector+0xb6/0x2b0
[ 1844.613365][T20175]        adfspart_check_ICS+0xb1/0x960
[ 1844.618936][T20175]        bdev_disk_changed+0x817/0x1770
[ 1844.624639][T20175]        blkdev_get_whole+0x380/0x510
[ 1844.630311][T20175]        bdev_open+0x31e/0xd30
[ 1844.635104][T20175]        blkdev_open+0x470/0x610
[ 1844.640068][T20175]        do_dentry_open+0x822/0x13a0
[ 1844.645386][T20175]        vfs_open+0x3b/0x340
[ 1844.650010][T20175]        path_openat+0x2e08/0x3860
[ 1844.655147][T20175]        do_file_open+0x23e/0x4a0
[ 1844.660285][T20175]        do_sys_openat2+0x113/0x200
[ 1844.665500][T20175]        __x64_sys_openat+0x138/0x170
[ 1844.670959][T20175]        do_syscall_64+0x174/0x580
[ 1844.676144][T20175]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1844.682844][T20175] 
[ 1844.682844][T20175] -> #1 (set->srcu){.+.+}-{0:0}:
[ 1844.690169][T20175]        __synchronize_srcu+0xca/0x300
[ 1844.696438][T20175]        elevator_switch+0x1e8/0x7a0
[ 1844.702014][T20175]        elevator_change+0x2cc/0x450
[ 1844.707324][T20175]        elevator_set_default+0x36c/0x430
[ 1844.713252][T20175]        blk_register_queue+0x3e9/0x4e0
[ 1844.719081][T20175]        __add_disk+0x677/0xd50
[ 1844.724128][T20175]        add_disk_fwnode+0xfb/0x480
[ 1844.729363][T20175]        nbd_dev_add+0x72c/0xb50
[ 1844.734509][T20175]        nbd_init+0x168/0x1f0
[ 1844.739573][T20175]        do_one_initcall+0x250/0x870
[ 1844.745149][T20175]        do_initcall_level+0x104/0x190
[ 1844.750813][T20175]        do_initcalls+0x59/0xa0
[ 1844.755779][T20175]        kernel_init_freeable+0x2a6/0x3e0
[ 1844.761662][T20175]        kernel_init+0x1d/0x1d0
[ 1844.766637][T20175]        ret_from_fork+0x514/0xb70
[ 1844.771870][T20175]        ret_from_fork_asm+0x1a/0x30
[ 1844.777613][T20175] 
[ 1844.777613][T20175] -> #0 (&q->elevator_lock){+.+.}-{4:4}:
[ 1844.785642][T20175]        __lock_acquire+0x15a5/0x2cf0
[ 1844.791051][T20175]        lock_acquire+0x106/0x350
[ 1844.796112][T20175]        __mutex_lock+0x1a3/0x1550
[ 1844.801240][T20175]        elevator_change+0x1b3/0x450
[ 1844.806543][T20175]        elevator_set_none+0xb5/0x140
[ 1844.811931][T20175]        blk_mq_update_nr_hw_queues+0x5e7/0x1a60
[ 1844.818733][T20175]        nbd_start_device+0x17f/0xb10
[ 1844.824372][T20175]        nbd_genl_connect+0x165b/0x1cf0
[ 1844.830642][T20175]        genl_family_rcv_msg_doit+0x22a/0x330
[ 1844.836868][T20175]        genl_rcv_msg+0x61c/0x7a0
[ 1844.842359][T20175]        netlink_rcv_skb+0x232/0x4b0
[ 1844.848047][T20175]        genl_rcv+0x28/0x40
[ 1844.852941][T20175]        netlink_unicast+0x75c/0x8e0
[ 1844.858346][T20175]        netlink_sendmsg+0x813/0xb40
[ 1844.863914][T20175]        ____sys_sendmsg+0x972/0x9f0
[ 1844.869509][T20175]        ___sys_sendmsg+0x2a5/0x360
[ 1844.875435][T20175]        __x64_sys_sendmsg+0x1bd/0x2a0
[ 1844.881109][T20175]        do_syscall_64+0x174/0x580
[ 1844.886683][T20175]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1844.893560][T20175] 
[ 1844.893560][T20175] other info that might help us debug this:
[ 1844.893560][T20175] 
[ 1844.904433][T20175] Chain exists of:
[ 1844.904433][T20175]   &q->elevator_lock --> fs_reclaim --> &q->q_usage_counter(io)#54
[ 1844.904433][T20175] 
[ 1844.918920][T20175]  Possible unsafe locking scenario:
[ 1844.918920][T20175] 
[ 1844.926572][T20175]        CPU0                    CPU1
[ 1844.932491][T20175]        ----                    ----
[ 1844.938221][T20175]   lock(&q->q_usage_counter(io)#54);
[ 1844.943621][T20175]                                lock(fs_reclaim);
[ 1844.950400][T20175]                                lock(&q->q_usage_counter(io)#54);
[ 1844.958332][T20175]   lock(&q->elevator_lock);
[ 1844.963373][T20175] 
[ 1844.963373][T20175]  *** DEADLOCK ***
[ 1844.963373][T20175] 
[ 1844.972566][T20175] 6 locks held by syz.2.11890/20175:
[ 1844.977858][T20175]  #0: ffffffff8fe392e8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[ 1844.986074][T20175]  #1: ffffffff8fe39120 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[ 1844.995849][T20175]  #2: ffff8880279319c0 (&set->update_nr_hwq_lock){++++}-{4:4}, at: blk_mq_update_nr_hw_queues+0xad/0x1a60
[ 1845.007276][T20175]  #3: ffff8880279318d0 (&set->tag_list_lock){+.+.}-{4:4}, at: blk_mq_update_nr_hw_queues+0xc0/0x1a60
[ 1845.018267][T20175]  #4: ffff888027701300 (&q->q_usage_counter(io)#54){++++}-{0:0}, at: elevator_change+0x198/0x450
[ 1845.028920][T20175]  #5: ffff888027701338 (&q->q_usage_counter(queue)#38){+.+.}-{0:0}, at: elevator_change+0x198/0x450
[ 1845.039894][T20175] 
[ 1845.039894][T20175] stack backtrace:
[ 1845.046055][T20175] CPU: 0 UID: 0 PID: 20175 Comm: syz.2.11890 Not tainted syzkaller #0 PREEMPT(full) 
[ 1845.046075][T20175] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[ 1845.046087][T20175] Call Trace:
[ 1845.046094][T20175]  <TASK>
[ 1845.046103][T20175]  dump_stack_lvl+0xe8/0x150
[ 1845.046126][T20175]  print_circular_bug+0x2e1/0x300
[ 1845.046151][T20175]  check_noncircular+0x12e/0x150
[ 1845.046176][T20175]  __lock_acquire+0x15a5/0x2cf0
[ 1845.046205][T20175]  ? elevator_change+0x1b3/0x450
[ 1845.046224][T20175]  lock_acquire+0x106/0x350
[ 1845.046241][T20175]  ? elevator_change+0x1b3/0x450
[ 1845.046266][T20175]  __mutex_lock+0x1a3/0x1550
[ 1845.046285][T20175]  ? elevator_change+0x1b3/0x450
[ 1845.046305][T20175]  ? rcu_is_watching+0x15/0xb0
[ 1845.046328][T20175]  ? work_grab_pending+0x3d1/0x990
[ 1845.046347][T20175]  ? elevator_change+0x1b3/0x450
[ 1845.046367][T20175]  ? __pfx___mutex_lock+0x10/0x10
[ 1845.046384][T20175]  ? enable_work+0x17f/0x230
[ 1845.046403][T20175]  ? lockdep_hardirqs_on+0x7a/0x110
[ 1845.046423][T20175]  ? __cancel_work_sync+0xf7/0x110
[ 1845.046444][T20175]  ? blk_mq_cancel_work_sync+0xa5/0xe0
[ 1845.046474][T20175]  elevator_change+0x1b3/0x450
[ 1845.046497][T20175]  elevator_set_none+0xb5/0x140
[ 1845.046516][T20175]  ? __pfx_elevator_set_none+0x10/0x10
[ 1845.046539][T20175]  ? xa_load+0x1db/0x210
[ 1845.046559][T20175]  blk_mq_update_nr_hw_queues+0x5e7/0x1a60
[ 1845.046590][T20175]  ? kernfs_add_one+0x477/0x5c0
[ 1845.046615][T20175]  ? __pfx_blk_mq_update_nr_hw_queues+0x10/0x10
[ 1845.046643][T20175]  ? sysfs_add_file_mode_ns+0x259/0x300
[ 1845.046666][T20175]  nbd_start_device+0x17f/0xb10
[ 1845.046695][T20175]  ? device_create_file+0xf4/0x1b0
[ 1845.046722][T20175]  nbd_genl_connect+0x165b/0x1cf0
[ 1845.046747][T20175]  ? __pfx___nla_validate_parse+0x10/0x10
[ 1845.046774][T20175]  ? __pfx_nbd_genl_connect+0x10/0x10
[ 1845.046800][T20175]  ? rcu_is_watching+0x15/0xb0
[ 1845.046819][T20175]  ? trace_kmalloc+0x2a/0xf0
[ 1845.046846][T20175]  ? __nla_parse+0x40/0x60
[ 1845.046867][T20175]  ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0
[ 1845.046893][T20175]  ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0
[ 1845.046922][T20175]  genl_family_rcv_msg_doit+0x22a/0x330
[ 1845.046949][T20175]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[ 1845.046980][T20175]  ? __lock_acquire+0x6b5/0x2cf0
[ 1845.047001][T20175]  genl_rcv_msg+0x61c/0x7a0
[ 1845.047028][T20175]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 1845.047051][T20175]  ? __pfx_nbd_genl_connect+0x10/0x10
[ 1845.047081][T20175]  netlink_rcv_skb+0x232/0x4b0
[ 1845.047100][T20175]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 1845.047124][T20175]  ? __pfx_netlink_rcv_skb+0x10/0x10
[ 1845.047149][T20175]  ? down_read+0x270/0x2e0
[ 1845.047167][T20175]  ? genl_rcv+0xd/0x40
[ 1845.047190][T20175]  genl_rcv+0x28/0x40
[ 1845.047212][T20175]  netlink_unicast+0x75c/0x8e0
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[ 1845.047233][T20175]  netlink_sendmsg+0x813/0xb40
[ 1845.047256][T20175]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1845.047277][T20175]  ? aa_sock_msg_perm+0xf1/0x1b0
[ 1845.047303][T20175]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[ 1845.047328][T20175]  ____sys_sendmsg+0x972/0x9f0
[ 1845.047348][T20175]  ? __might_fault+0xaf/0x130
[ 1845.047373][T20175]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1845.047396][T20175]  ? import_iovec+0x73/0xa0
[ 1845.047418][T20175]  ___sys_sendmsg+0x2a5/0x360
[ 1845.047435][T20175]  ? __lock_acquire+0x6b5/0x2cf0
[ 1845.047460][T20175]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1845.047482][T20175]  ? futex_wait+0x2a2/0x390
[ 1845.047517][T20175]  ? __fget_files+0x2a/0x420
[ 1845.047538][T20175]  ? __fget_files+0x3a0/0x420
[ 1845.047563][T20175]  __x64_sys_sendmsg+0x1bd/0x2a0
[ 1845.047583][T20175]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[ 1845.047606][T20175]  ? rcu_is_watching+0x15/0xb0
[ 1845.047629][T20175]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1845.047647][T20175]  do_syscall_64+0x174/0x580
[ 1845.047664][T20175]  ? trace_irq_disable+0x3b/0x140
[ 1845.047689][T20175]  ? clear_bhb_loop+0x40/0x90
[ 1845.047708][T20175]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1845.047725][T20175] RIP: 0033:0x7f9816b9ce59
[ 1845.047741][T20175] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1845.047756][T20175] RSP: 002b:00007f98179bf028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1845.047774][T20175] RAX: ffffffffffffffda RBX: 00007f9816e16090 RCX: 00007f9816b9ce59
[ 1845.047786][T20175] RDX: 0000000000000004 RSI: 0000200000001ac0 RDI: 0000000000000006
[ 1845.047797][T20175] RBP: 00007f9816c32d6f R08: 0000000000000000 R09: 0000000000000000
[ 1845.047808][T20175] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1845.047819][T20175] R13: 00007f9816e16128 R14: 00007f9816e16090 R15: 00007ffe6ee1ac58
[ 1845.047839][T20175]  </TASK>
[ 1845.131641][T19830] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[ 1845.532268][T19830] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 1845.723022][T11550] block nbd5: Receive control failed (result -32)
[ 1845.732036][T11550] block nbd5: Receive control failed (result -32)
[ 1846.856472][ T1786] team0: Port device netdevsim1 removed
[ 1846.986570][T20128] team0: Port device syz_tun removed
[ 1847.148856][ T1786] vlan1: left allmulticast mode
[ 1847.158643][ T1786] geneve0: left allmulticast mode
[ 1847.165398][ T1786] vlan1: left promiscuous mode
[ 1847.172923][ T1786] geneve0: left promiscuous mode
[ 1847.178528][ T1786] bridge0: port 5(vlan1) entered disabled state
[ 1847.188775][ T1786] batadv2: left allmulticast mode
[ 1847.209837][ T1786] batadv2: left promiscuous mode
[ 1847.215106][ T1786] bridge0: port 4(batadv2) entered disabled state
[ 1847.231308][ T1786] bond0: left allmulticast mode
[ 1847.237402][ T1786] bond_slave_0: left allmulticast mode
[ 1847.243363][ T1786] bond_slave_1: left allmulticast mode
[ 1847.248915][ T1786] bond0: left promiscuous mode
[ 1847.254266][ T1786] bond_slave_0: left promiscuous mode
[ 1847.260465][ T1786] bond_slave_1: left promiscuous mode
[ 1847.266702][ T1786] bridge0: port 3(bond0) entered disabled state
[ 1847.275377][ T1786] bridge_slave_1: left promiscuous mode
[ 1847.282470][ T1786] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1847.295627][ T1786] bridge_slave_0: left allmulticast mode
[ 1847.301968][ T1786] bridge_slave_0: left promiscuous mode
[ 1847.308376][ T1786] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1847.414580][ T1786] ip6gretap0 (unregistering): left promiscuous mode
[ 1847.546503][ T1786] batman_adv: batadv0: Removing interface: vlan2
[ 1848.062456][T13164] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1848.070940][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1848.082730][ T1786] bond8 (unregistering): (slave gretap2): Releasing backup interface
[ 1848.132094][ T1786] bridge0 (unregistering): left promiscuous mode
[ 1848.156135][ T1786] bond2 (unregistering): (slave bridge3): Releasing active interface
[ 1848.282935][ T1786] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1848.294341][ T1786] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1848.308036][ T1786] bond0 (unregistering): Released all slaves
[ 1848.318115][ T1786] bond1 (unregistering): Released all slaves
[ 1848.337399][ T1786] bond2 (unregistering): Released all slaves
[ 1848.353469][ T1786] bond3 (unregistering): (slave batadv1): Releasing active interface
[ 1848.362594][ T1786] bond3 (unregistering): Released all slaves
[ 1848.377595][ T1786] bond4 (unregistering): (slave veth5): Releasing active interface
[ 1848.393438][ T1786] bond4 (unregistering): Released all slaves
[ 1848.405933][ T1786] bond5 (unregistering): Released all slaves
[ 1848.421631][ T1786] bond6 (unregistering): (slave dummy0): Releasing active interface
[ 1848.435491][ T1786] bond6 (unregistering): (slave veth9): Releasing active interface
[ 1848.444574][ T1786] bond6 (unregistering): Released all slaves
[ 1848.456978][ T1786] bond7 (unregistering): Released all slaves
[ 1848.469915][ T1786] bond8 (unregistering): (slave bond9): Releasing backup interface
[ 1848.478673][ T1786] bond8 (unregistering): Released all slaves
[ 1848.496195][ T1786] bond9 (unregistering): Released all slaves
[ 1848.510465][ T1786] bond10 (unregistering): Released all slaves
[ 1848.525535][ T1786] bond11 (unregistering): Released all slaves
[ 1848.699016][ T1786] : left promiscuous mode
[ 1848.735135][ T1786] tipc: Left network mode
[ 1849.124243][ T1786] hsr_slave_0: left promiscuous mode
[ 1849.132642][ T1786] hsr_slave_1: left promiscuous mode
[ 1849.138689][ T1786] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1849.146891][ T1786] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1849.271488][ T1786] team0 (unregistering): Port device team_slave_1 removed
[ 1849.295326][ T1786] team0 (unregistering): Port device team_slave_0 removed
[ 1849.867128][ T1786] IPVS: stop unused estimator thread 0...
[ 1849.894401][ T5295] 8021q: adding VLAN 0 to HW filter on device eth1
[ 1850.052498][ T1786] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1850.063105][ T1786] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1850.103577][ T1786] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1850.114045][ T1786] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1850.164909][ T1786] netdevsim netdevsim3 netdevsim1 (unregistering): left allmulticast mode
[ 1850.174293][ T1786] netdevsim netdevsim3 netdevsim1 (unregistering): left promiscuous mode
[ 1850.183031][ T1786] bridge0: port 2(netdevsim1) entered disabled state
[ 1850.193307][ T1786] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1850.204871][ T1786] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1850.264479][ T1786] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1850.278987][ T1786] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1850.337059][ T5295] 8021q: adding VLAN 0 to HW filter on device eth2
[ 1850.650609][ T1786] bridge_slave_0: left allmulticast mode
[ 1850.661162][ T1786] bridge_slave_0: left promiscuous mode
[ 1850.667020][ T1786] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1850.696631][ T1786] bridge_slave_1: left allmulticast mode
[ 1850.710332][ T1786] bridge_slave_1: left promiscuous mode
[ 1850.716130][ T1786] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1850.727279][ T1786] bridge_slave_0: left allmulticast mode
[ 1850.733306][ T1786] bridge_slave_0: left promiscuous mode
[ 1850.739063][ T1786] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1850.936617][ T1786] bond7 (unregistering): (slave gretap2): Releasing active interface
[ 1850.950161][ T1786] bond8 (unregistering): (slave gretap3): Releasing backup interface
[ 1850.968761][ T1786] bond12 (unregistering): (slave geneve3): Releasing active interface
[ 1851.001819][ T1786] bond1 (unregistering): (slave bridge3): Removing an active aggregator
[ 1851.010713][ T1786] bond1 (unregistering): (slave bridge3): Releasing backup interface
[ 1851.018823][ T1786] bond1 (unregistering): (slave bridge3): the permanent HWaddr of slave - 1a:80:10:f8:22:68 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[ 1851.047768][ T1786] bridge3 (unregistering): left promiscuous mode
[ 1851.054306][ T1786] bridge3 (unregistering): left allmulticast mode
[ 1851.063526][ T1786] bond1 (unregistering): (slave bridge4): Releasing backup interface
[ 1851.072264][ T1786] bridge4 (unregistering): left promiscuous mode
[ 1851.078618][ T1786] bridge4 (unregistering): left allmulticast mode
[ 1851.091286][ T1786] bond10 (unregistering): (slave bridge7): Releasing active interface
[ 1851.114131][ T1786] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1851.126153][ T1786] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1851.136146][ T1786] bond0 (unregistering): Released all slaves
[ 1851.147235][ T1786] bond1 (unregistering): Released all slaves
[ 1851.158663][ T1786] bond2 (unregistering): (slave veth3): Releasing active interface
[ 1851.167367][ T1786] bond2 (unregistering): Released all slaves
[ 1851.177524][ T1786] bond3 (unregistering): Released all slaves
[ 1851.189464][ T1786] bond4 (unregistering): Released all slaves
[ 1851.213172][ T1786] bond5 (unregistering): Released all slaves
[ 1851.224804][ T1786] bond6 (unregistering): Released all slaves
[ 1851.234921][ T1786] bond7 (unregistering): Released all slaves
[ 1851.245899][ T1786] bond8 (unregistering): (slave bond9): Releasing backup interface
[ 1851.254892][ T1786] bond8 (unregistering): Released all slaves
[ 1851.265630][ T1786] bond9 (unregistering): Released all slaves
[ 1851.278171][ T1786] bond10 (unregistering): Released all slaves
[ 1851.290992][ T1786] bond11 (unregistering): (slave veth0_to_bond): Releasing active interface
[ 1851.301194][ T1786] bond11 (unregistering): Released all slaves
[ 1851.314783][ T1786] bond12 (unregistering): Released all slaves
[ 1851.359551][ T1786] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1851.372874][ T1786] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1851.388147][ T1786] bond0 (unregistering): Released all slaves
[ 1851.397153][ T5295] 8021q: adding VLAN 0 to HW filter on device eth3
[ 1851.496456][ T1786] tipc: Left network mode
[ 1851.807249][ T5295] 8021q: adding VLAN 0 to HW filter on device eth4
[ 1852.232810][ T1786] hsr_slave_0: left promiscuous mode
[ 1852.238951][ T1786] hsr_slave_1: left promiscuous mode
[ 1852.263439][ T1786] hsr_slave_0: left promiscuous mode
[ 1852.270465][ T1786] hsr_slave_1: left promiscuous mode
[ 1852.276429][ T1786] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1852.284694][ T1786] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1852.455022][ T1786] team0 (unregistering): Port device team_slave_1 removed
[ 1852.467604][ T1786] team0 (unregistering): Port device team_slave_0 removed
[ 1852.595255][ T1786] team0 (unregistering): Port device team_slave_1 removed
[ 1852.606797][ T1786] team0 (unregistering): Port device team_slave_0 removed
[ 1852.674193][ T5295] 8021q: adding VLAN 0 to HW filter on device eth5
[ 1853.045097][ T5295] 8021q: adding VLAN 0 to HW filter on device eth8
[ 1853.100295][ T1786] IPVS: stop unused estimator thread 0...
[ 1853.180832][ T1318] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1853.362994][ T5295] 8021q: adding VLAN 0 to HW filter on device eth6
[ 1853.639117][ T5295] 8021q: adding VLAN 0 to HW filter on device eth7
[ 1853.923962][ T5295] 8021q: adding VLAN 0 to HW filter on device eth9