last executing test programs:

6.464168661s ago: executing program 1 (id=1221):
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
socket$alg(0x26, 0x5, 0x0)
r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
r1 = socket(0x15, 0x5, 0x0)
bind$l2tp6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x20)
connect$llc(r0, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10) (async)
connect$llc(r0, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10)
bind$llc(r0, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000001380), 0x0, 0x40001)
socketpair$unix(0x1, 0x2, 0x0, 0x0) (async)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
bpf$BPF_PROG_DETACH(0x1c, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000980)=ANY=[@ANYBLOB="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", @ANYRES8=<r2=>r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x3d, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f00000001c0)=ANY=[@ANYRESOCT=r4], 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) (async)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f00000001c0)=ANY=[@ANYRESOCT=r4], 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r3], 0x0, 0x2, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r5, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r3], 0x0, 0x2, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r5, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = socket(0x11, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="e5000000000000007910480000000000890438000000000095000072", @ANYRESDEC=r1, @ANYRESHEX=r2], &(0x7f0000003ff6)='GPL\x00', 0x3ff, 0xc3, &(0x7f0000000b80)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg=0x7, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) (async)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="e5000000000000007910480000000000890438000000000095000072", @ANYRESDEC=r1, @ANYRESHEX=r2], &(0x7f0000003ff6)='GPL\x00', 0x3ff, 0xc3, &(0x7f0000000b80)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg=0x7, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94)
setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x25, &(0x7f0000000080)=0x2118, 0x4)
sendmmsg(r6, &(0x7f0000000000)=[{{&(0x7f0000000640)=@qipcrtr={0x2a, 0x1, 0x4001}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000040)="d479183d7d98d181a4b5f3e38100e2f288a8d2", 0x13}, {&(0x7f0000001c00)="659900c3f7c8e544e1abc41796cae4c9908368acb3abdb908ada84b1c98b91c34352f80ed64e4606a25bcbab94869ac816a7fb9c29a8c768fbffb21ad7f6013ff676da589c2e0865cfd321543070c3dd36bf94deb1d137c220d9c559", 0x5c}], 0x2}}], 0x1, 0x24044015) (async)
sendmmsg(r6, &(0x7f0000000000)=[{{&(0x7f0000000640)=@qipcrtr={0x2a, 0x1, 0x4001}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000040)="d479183d7d98d181a4b5f3e38100e2f288a8d2", 0x13}, {&(0x7f0000001c00)="659900c3f7c8e544e1abc41796cae4c9908368acb3abdb908ada84b1c98b91c34352f80ed64e4606a25bcbab94869ac816a7fb9c29a8c768fbffb21ad7f6013ff676da589c2e0865cfd321543070c3dd36bf94deb1d137c220d9c559", 0x5c}], 0x2}}], 0x1, 0x24044015)
recvmmsg(r6, &(0x7f0000000900)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000005c0)=""/126, 0x6e}], 0x40}, 0x2}, {{&(0x7f0000000540)=@l2tp6={0xa, 0x0, 0x0, @private1}, 0x0, &(0x7f0000000800)=[{&(0x7f00000006c0)=""/194}, {&(0x7f00000007c0)=""/20}], 0x0, &(0x7f0000000840)=""/138}, 0x4}], 0x1, 0x2002, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) (async)
r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0)
ioctl$PPPIOCNEWUNIT(r7, 0xc004743e, &(0x7f0000000180)=0x4000000) (async)
ioctl$PPPIOCNEWUNIT(r7, 0xc004743e, &(0x7f0000000180)=0x4000000)
ioctl$PPPIOCSFLAGS1(r7, 0x40047459, &(0x7f0000000080)=0x6100204) (async)
ioctl$PPPIOCSFLAGS1(r7, 0x40047459, &(0x7f0000000080)=0x6100204)
pwritev(r7, &(0x7f0000000100)=[{&(0x7f0000000540)="00214797357e0e8d442441e9beae583d48ac340dc69d54af976b6a7c18c4907ed175462f18ec0e16ad9f57abed3bad46320d0d4abf7c3a617f1b2fbe8b338d1fce4490668ce9faadcf6b44b9906eeb59241caa04a1bf2399f37a7f221861e3580bdf025cb470613b79119f1c9fe8b9ee5d1f41b6af7d12a2ba71c7a74727cece06221eadc4d7137811e483a94c1164f4496f0fe1829f55cd2d91b74aeee64bc05e7014dbb599bad1be2d8ced5b1a3131", 0xb0}, {&(0x7f0000000240)}], 0x2, 0x739, 0xfffffffe) (async)
pwritev(r7, &(0x7f0000000100)=[{&(0x7f0000000540)="00214797357e0e8d442441e9beae583d48ac340dc69d54af976b6a7c18c4907ed175462f18ec0e16ad9f57abed3bad46320d0d4abf7c3a617f1b2fbe8b338d1fce4490668ce9faadcf6b44b9906eeb59241caa04a1bf2399f37a7f221861e3580bdf025cb470613b79119f1c9fe8b9ee5d1f41b6af7d12a2ba71c7a74727cece06221eadc4d7137811e483a94c1164f4496f0fe1829f55cd2d91b74aeee64bc05e7014dbb599bad1be2d8ced5b1a3131", 0xb0}, {&(0x7f0000000240)}], 0x2, 0x739, 0xfffffffe)
r8 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r8, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20)
setsockopt$XDP_TX_RING(r8, 0x11b, 0x3, &(0x7f00000005c0)=0x200000, 0x4)
sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000000}, 0xfffffffffffffeec, &(0x7f0000000380)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2000ae97", @ANYRES16=0x0, @ANYBLOB="010427bd7000fcdbdf25140000000c0006000100000001000000"], 0x20}}, 0x4090)
socket$tipc(0x1e, 0x2, 0x0)

6.19979883s ago: executing program 1 (id=1226):
r0 = socket$inet6(0xa, 0x1, 0x8010000000000084)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0xb, @empty}, 0x1c)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}}, 0x1c)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty, 0xfffffffe}}, 0x80000, 0x0, 0x0, 0x0, 0xb3550aa4ba878396}, 0x9c)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000d00)=@nat={'nat\x00', 0x19, 0x1, 0x21e, [0x200000002300, 0x0, 0x0, 0x2000000024be, 0x2000000024ee], 0x20, 0x0, &(0x7f0000002300)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff01000000050000006b0000000016636169663000000000000000e3ff00007665746831000000000000000000000073797a5f74756e0039da0000f8ff0000000076657468310000000000000000001000aaaaaaaaaa3d000000ff00000180c2000003ff00ffffff00ae000000560100008e0100006f776e6572000000000000000000000000000000001800"/198, @ANYRES32, @ANYRES32, @ANYRES32=0xee00, @ANYRES32, @ANYBLOB="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"]}, 0x296)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newtaction={0x18, 0x30, 0xffff, 0x70bd29, 0x0, {}, [{0x4}]}, 0x18}}, 0x0)
getsockname$unix(0xffffffffffffffff, &(0x7f0000000000)=@abs, &(0x7f0000000080)=0x6e)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
syz_emit_ethernet(0x1f, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa0011aa34bbb95aa76c0cee145e4c67651dcaac"], 0x0)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/time\x00')
unshare(0x6a040000)
r3 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000080)={0x84, @private=0xa010101, 0x15, 0x3, 'sh\x00', 0x2e, 0x5, 0x72}, 0x2c)
r4 = socket$kcm(0xa, 0x2, 0x0)
setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e20, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@loopback, 0x4e20, 0x10000, 0x2, 0x2}}, 0x44)
unshare(0x2010100)
sendmsg$sock(r4, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff)
r5 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r5, &(0x7f0000000040)={0x0, 0xa1, &(0x7f00000011c0)=[{&(0x7f0000000080)="5c00000013006bec9e3be35c6e17aa31076b876c0d000000ba090000160af3653c001ac00400020208000200030001002c000000eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0000300000000000000ffffc6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x2000c090)
r6 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYRESDEC=r3, @ANYRES32=0x0, @ANYBLOB="001280ee000100626f6e64000000001c0002800500010004002000080020000000000000000000"], 0x4c}, 0x1, 0x0, 0x0, 0x84}, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000440)={'veth1_to_hsr\x00'})

6.040197578s ago: executing program 1 (id=1230):
r0 = syz_init_net_socket$llc(0x1a, 0x801, 0x0)
bind$llc(r0, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x81, 0x42}, 0x10)
connect$llc(r0, &(0x7f0000000340)={0x1a, 0x322, 0x0, 0x0, 0x4, 0x90, @random="48bd00"}, 0x10)
r1 = syz_init_net_socket$llc(0x1a, 0x801, 0x0)
bind$llc(r1, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x81, 0x42}, 0x10)
r2 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bond0\x00', <r3=>0x0})
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0xc8, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r3, {}, {0xffff, 0xffff}, {0xa}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x74, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x5, 0x4, 0x2, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x8001]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x46, 0x5, 0x7}]}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x4, 0x6, 0x100, 0x19e, 0x0, 0x7ff, 0x200}}, {0x4}}]}]}, 0xc8}}, 0x0)
close(r1)

5.920530455s ago: executing program 1 (id=1231):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @timestamp={0xd, 0x0, 0x0, 0xf396, 0x2, 0xf, 0x7fffffff, 0x1}}}}}, 0x0)
write$tun(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="08000800060006fd"], 0xfce)

4.81849251s ago: executing program 1 (id=1235):
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
socket$alg(0x26, 0x5, 0x0)
r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
connect$llc(r0, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10)
bind$llc(r0, 0x0, 0x0)
sendmmsg(r0, &(0x7f0000001380), 0x3fffffffffffeed, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
bpf$BPF_PROG_DETACH(0x1c, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
bind$inet6(r2, &(0x7f0000000640)={0xa, 0x4e20, 0x8, @mcast1, 0x6}, 0x1c)
sendto$inet6(r2, 0x0, 0x0, 0xd0, &(0x7f0000000800)={0xa, 0x4e20, 0xfffffffa, @ipv4={'\x00', '\xff\xff', @remote}, 0x6e}, 0x1c)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r3, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r4, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50)

4.749346025s ago: executing program 1 (id=1237):
socket$packet(0x11, 0x3, 0x300)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x60ae0}], 0x318, 0x0, 0xdb0, 0xf5ffffff}, 0x3f01) (async)
sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x18, &(0x7f00000000c0), 0x31}, 0x0) (async)
sendmmsg$sock(r1, &(0x7f0000002c80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000008c0)="9a1646e333841dd817f884072bcfc4e86d09eae42c771150d2a0f7409c1370d3638a8b435039d8f5f5a58fd9696b618dee51e4869aced576ce4348d9b259fb3273c6a36fc309164021180c785a3c299cbf15a38790db0474eb0b41d11d4893959adec407e9ba742652a28fc5165a05b7593682298736a7ccd86db5f3758d2939e9992035d6de58a4b803a94a72a31139fd6e1f77b7e96492191da02c8bfd789de8bc6acd5484430d64a233fd9512f3d646d33db37e305f92dc1db89bd85b2689c942b596c0a45c4efff576", 0xcb}, {&(0x7f00000009c0)="efaf7a93d21cbcbd56d058e53b498eb5aec446ded5a0a15afc4a85e66ba967dd32bdaa041334d821c83f07626dff625725d9d7f2454a3c0354409cd461092701a394007cca7bf7ed39cb6d0860fc9fffc3867688808a8a9fa32d9c9f797ac6d2f35665413642d174ba233adaa36bf0d40144a05abc9458f98e5738d6952053397589681183bf74246782eaa788d1afbf227f54319c505f1678a3165181261067da7d2cc5ce2f9a8ca0b99fa09f8e95675cd7666c5e2edb4b8029c371ccfe0497285e0e223106e4b43dbbdae8faa67a625fff23346e701f1c8cf9b6cd0d485c422d1c07b63988d3377dfe6634b1e184", 0xef}, {&(0x7f0000000ac0)="8f30e4f3a357d24b35a884da0ffdc5c42f7ce57129b691f99daded3f1e2aa5f6738c747cd9fa7b3e59a5a24970b0a2a5bcc8cd72fc0a6e472442b441e273146cb840d20afb23fa12cfaaf4d54ffea9bdaf5d445e4773e815b6462cdc4b449d55a1d007a07e49cef17635abf4c4986abcc36fc5529e63aa97265af26fd3286548b2a7932c81883c382b1598d0761891370633573d40cd4b425576ff4998bf040fa0aef4b64392fc7f7b6fafb4a073a88f883f16c9c771664b430d91", 0xbb}, {&(0x7f0000000b80)="3b3d07b7091f697381965e2e7909f9f6f54a284af3f8fdb1c24e6d0c4a7f58ffca9b24b191f510fbf55fd3e76154e2a4fe1e14c7bbff4c24907805f79e2a90f0d8c8faccbd2243475ecfa1f5fac83b8910baf212596b2a4a23aab8eb9cfa683836af5e50b1bc4f815b49fc47f85fe32f63a26492042b663d8c955bfad12d47e8", 0x80}], 0x4}}, {{0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f0000000d80)="d51927d7b27f39aa725cb19a990f66ac9aae2f7d92045a4c05e60f4dc5dc6c4e4ac8449b9915fb289bf1692a4c7d9440950ee716b680274b3c53048b6a2aeca47c5e6987db6b4fb364fa1e1709caa0696b9e02eabc8757ef2dd6a17f3efa", 0x5e}, {&(0x7f0000000e00)="96bc7002996addfa3b96a5e4de4cf18b08fa24022c9eb8cd8932ada8710619787de006", 0x23}, {&(0x7f0000000e40)="1304235350b0171b15c5c7a6c9861daf", 0x10}, {&(0x7f0000000e80)="048dc9fb57afe301fd6f4184903098607627504035b7aa74e71b85eaa192909644d18f5695718d3c3532f6ed73c2422e87d6d3032447f236426269422e70740455409baf685a743e7e079b3ac4a1b592da8a23ea97a80da6ec7fb46355caf53ab8efe6d61dbb939c5f96f86c3d", 0x6d}, {&(0x7f0000000f00)="68a55df1c6bed91373cc79fcf0ea4c17187a680c0c711ae1d37231d4e7cd61719f501fd0d890485c98ee906e64fad259a1", 0x31}], 0x5}}, {{0x0, 0x0, &(0x7f0000001340)=[{&(0x7f00000010c0)="1f193ccd5e71244bc55dbcdc29e1a25fb59915f7f84fb5105984bc94ac926679df8c", 0x22}, {&(0x7f0000001100)="b35ba3572fcda875bc97e8", 0xb}, {&(0x7f0000001140)="795f2ce94a7d8725e389c01b493ee679f9e1f4660442a05c2cbbf66384679166ec101d934bd017c061424e92d24f48d86b", 0x31}, {&(0x7f0000001180)="93", 0x1}, {&(0x7f00000011c0)="3dff21fdbef2b0b843e0740163754db27084ece48f14e2ccb75ed71caecb8d01a49808a0a2269f17dc98a78e584f6cc71495faa98957034a6e6f6e9ea743d838d77a3f108a034c89", 0x48}, {&(0x7f0000001240)="b17b27be17bcb19544700a33471f8c21345d9ed983455906bb74ac68c911b5f14c7d60075f017c69c25768", 0x2b}, {&(0x7f0000001280)="45871f6c7aa143cfbb579d430702b24380586237795f6665c24e267fb8c62c14f85be705fbab74d85c8d479162b42724e414f24b9602b0c068930b8f0431f77f7ed4bb04c4bd7edbacb55c07e24b2b7ffbc83bb39385066e27b3b6727c8861edea62c5532877c2bc886e9f673bc9ef731ee32104bc102a8fda64676a9edf0e47f36cd6a35fd53b13b1f365ade8150f7e35c258b0253d8c4dcbc8", 0x9a}], 0x7}}, {{0x0, 0x0, &(0x7f0000001640)=[{&(0x7f00000014c0)="d480dc1917d9339f4084892894143b343fddd9303f0429a7ae5d89e2d238c7a6d95b89164290c367be830f56c6b95c492363a9b522", 0x35}], 0x1}}], 0x5, 0x0) (async)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000140), 0xffffffffffffffff) (async)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000180)=<r4=>0x0) (async)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000001c0)=<r5=>0x0) (async)
r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$nfc(&(0x7f0000000500), r7) (async)
ioctl$IOCTL_GET_NCIDEV_IDX(r6, 0x0, &(0x7f0000000580)=<r9=>0x0)
sendmsg$NFC_CMD_SE_IO(r7, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a00)={0x2c, r8, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r9}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0x1}, @NFC_ATTR_SE_APDU={0x5, 0x19, "d8"}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) (async)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000200)=<r10=>0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000280)=<r11=>0x0) (async)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000002c0)=<r12=>0x0)
sendmsg$NFC_CMD_DEACTIVATE_TARGET(r2, &(0x7f0000000600)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x5c, r3, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0x1}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r4}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0x1}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r9}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r10}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r11}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r12}]}, 0x5c}}, 0xd15e5f220d473756) (async)
r13 = syz_init_net_socket$llc(0x1a, 0x801, 0x0)
bind$llc(r13, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x81, 0x42}, 0x10) (async)
connect$llc(r13, &(0x7f0000000340)={0x1a, 0x322, 0x0, 0x0, 0x4, 0x90, @random="48bd00"}, 0x10) (async)
r14 = syz_init_net_socket$llc(0x1a, 0x801, 0x0)
bind$llc(r14, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x81, 0x42}, 0x10)
close(r14)

308.596409ms ago: executing program 0 (id=1304):
r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
clock_gettime(0x0, &(0x7f0000000040)={<r1=>0x0, <r2=>0x0})
setsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000140)={r1, r2/1000+60000}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r3}, 0xc)
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4000c}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_AGEING_TIME={0x8, 0x32, 0x1}]}}}]}, 0x3c}}, 0x4040)
connect$llc(r0, &(0x7f0000000000)={0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, @remote}, 0x10)
syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async)
clock_gettime(0x0, &(0x7f0000000040)) (async)
setsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000140)={r1, r2/1000+60000}, 0x10) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r3}, 0xc) (async)
socket$netlink(0x10, 0x3, 0x0) (async)
sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4000c}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_AGEING_TIME={0x8, 0x32, 0x1}]}}}]}, 0x3c}}, 0x4040) (async)
connect$llc(r0, &(0x7f0000000000)={0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, @remote}, 0x10) (async)

306.14999ms ago: executing program 2 (id=1305):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
r3 = socket$inet_smc(0x2b, 0x1, 0x0)
ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r1, 0x4058587a, 0x0)
setsockopt$IP_VS_SO_SET_TIMEOUT(r3, 0x0, 0x48a, &(0x7f0000000700)={0x7fff, 0x0, 0x2}, 0xc)
connect$llc(r2, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10)
recvmmsg(r2, &(0x7f00000050c0)=[{{0x0, 0x0, 0x0}, 0x4}], 0x40000000000018c, 0x2, 0x0)
socket$tipc(0x1e, 0x2, 0x0)
r4 = socket$tipc(0x1e, 0x5, 0x0)
setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10)
r5 = socket$tipc(0x1e, 0x5, 0x0)
setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x3, 0x3, 0x3}, 0x10)
sendmmsg(r2, &(0x7f0000001380), 0x3fffffffffffeed, 0x0)
syz_genetlink_get_family_id$wireguard(&(0x7f0000000480), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', <r6=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0x2}, {0xffff, 0xffff}, {0x10}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x10, 0x3, 0x0, 0x1}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x51}, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="4c0000001800ddd000000000000000000200000000000d05000000000600150005000000280016802400010003"], 0x4c}}, 0x0)
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_inet6_tcp_SIOCATMARK(r8, 0x8905, &(0x7f00000001c0))
sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000880)=@newqdisc={0x178, 0x24, 0xd0f, 0x200000, 0x0, {0x60, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x148, 0x2, [@TCA_GRED_STAB={0x104, 0x2, "abcc61b4e508c02286f1bafc7a22c407a52b0e13291c865d493f15736245f220cd4e40006df455836aa3bd3aaa2c9b95578719c46f89e01798d28b6d63cf7465ea95bd97b018b7afaccdcb28bb42d677b73c44e790f0875fb4b795ca95b7dd712d2c5d69945535f92f74a71236743acd06103cd77bd07f2df5989ee40e409b077cc85e96554beb53c986a216051bd5979a8cfcfe9f98be58ffcf44f6cfda8579dbaedceee578bfd1fb554b6e185e9315425ef0a3fc69d17ede93fc7c46357990f7acfdb8216ea52f604b9f12033688caa4b04adecfc926b3f6ca25bcb5432905e3f30ccbf10cf0f2d00858ba2bbd2702b8d4a7a7c744fbaa2fa35b1c586020d6"}, @TCA_GRED_PARMS={0x38, 0x1, {0x100, 0x5, 0x400, 0x9, 0x81, 0x101, 0xe, 0xc40, 0x7fffffff, 0xfffffffd, 0x20, 0xb, 0x1d, 0x6, 0xca11, 0x10000}}, @TCA_GRED_MAX_P={0x8, 0x4, 0x2}]}}]}, 0x178}, 0x1, 0x0, 0x0, 0xc5}, 0x24008004)
r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0x4, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x34}, 0x94)
ioctl$sock_SIOCADDDLCI(r3, 0x8980, &(0x7f0000000080)={'pimreg1\x00', 0xb})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)

305.123227ms ago: executing program 0 (id=1306):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_SET_FLAGS(r1, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f00000008c0)={0x3c, r2, 0x1, 0x70bd2b, 0x25dfdbfa, {}, [@MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x22}}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4801}, 0x4000850)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
r5 = socket$inet_smc(0x2b, 0x1, 0x0)
ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r3, 0x4058587a, 0x0)
setsockopt$IP_VS_SO_SET_TIMEOUT(r5, 0x0, 0x48a, &(0x7f0000000700)={0x7fff, 0x0, 0x2}, 0xc)
connect$llc(r4, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10)
recvmmsg(r4, &(0x7f00000050c0)=[{{0x0, 0x0, 0x0}, 0x4}], 0x40000000000018c, 0x2, 0x0)
r6 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000080)={0x4000, 0x110003, 0x0, 0x9}, 0x10)
sendmsg$nl_generic(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000160001f47efde4be701161000a000000040000800400", @ANYRES32=r6], 0x1c}}, 0x0)
socket$tipc(0x1e, 0x2, 0x0)
r7 = socket$tipc(0x1e, 0x5, 0x0)
setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x0, 0x3}, 0x10)
r8 = socket$tipc(0x1e, 0x5, 0x0)
setsockopt$TIPC_GROUP_JOIN(r8, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x3, 0x3, 0x3}, 0x10)
sendmmsg(r7, &(0x7f00000006c0)=[{{&(0x7f00000001c0)=@l2tp6={0xa, 0x0, 0x3ff, @empty, 0x9, 0x3}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000240)="85d8df37aabba4db7a652945a13d8291f6e6def8366c9b7cc89283a616245f476ff7eef5e6329db694f2e76f6ae0865b4556d55d7828e6bac451039a9d57426f29e6faf60f2dc167c57fe29642f6b8ddd75fca3e2ba37482f71d55a757610c1bc2b21d13a930af135fa033f2b7f785aa0fa8271388b7d7795e652cfc53aec3d220706bb5845777b6ac5cfc7d7f8e3e2e577f48e0fcee49efd0542911b410d1649398522506c894a6cbb33289fd642a0beb3dc18aef130c49de7a43ac", 0xbc}, {&(0x7f00000003c0)="d448d6c1c58ad55e37a424ea643221412ef3f2b81c578da206f8cf928c2edc23c42a3cdbf88e113a853cc60412ba595db8b6c45f8280c33d47e5424d37698242fd79c4e5566331e93e6fecc0b215585bae26a3604de0b1d67af7f5a5fac2561a4448666ed760508bf8094bbd75d3623923d0f394f3f10af0d1087bc2bb0f6aa6a6d06a6f0ca7dd6829c1107a9fd7bb5d2c54f19aef1bd7d9faeb1b7986d846facaa6896e9b4863da8a27ae31c6a3549828e0", 0xb2}], 0x2, &(0x7f00000005c0)=[{0xd8, 0x107, 0x1ff, "905378642bf97a861044662dbb0eb376dfe44007ff847d8ff9d95f00c7ce5ce157d5812f31e5858c441add2daa9c792004eb2cbf3665aaf2adcec9b3d562571738af2019288dc5fb0eb2ec4057d3188b643225f12c2bd948b70e8951728d9ef242d84866fe56e56d9be91f3be72c9edd93fe4339f8bf8c720fd92e959fc9d149d1209fd86e63f5c394abdb63c83c2746333bc2f9b38996dfa7eb520b717a5d9f04456d3f5f4a72706201c9731ddc3f96a22cbceec61eba539c10905bc513b22d695aa25e2ca2c6db"}], 0xd8}}], 0x1, 0x0)
syz_genetlink_get_family_id$wireguard(&(0x7f0000000480), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00', <r9=>0x0})
socket$inet_tcp(0x2, 0x1, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0x2}, {0xffff, 0xffff}, {0x10}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x10, 0x3, 0x0, 0x1}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x51}, 0x0)
r10 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="4c0000001800ddd000000000000000000200000000000d05000000000600150005000000280016802400010003"], 0x4c}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000880)=@newqdisc={0x178, 0x24, 0xd0f, 0x200000, 0x0, {0x60, 0x0, 0x0, r9, {}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x148, 0x2, [@TCA_GRED_STAB={0x104, 0x2, "abcc61b4e508c02286f1bafc7a22c407a52b0e13291c865d493f15736245f220cd4e40006df455836aa3bd3aaa2c9b95578719c46f89e01798d28b6d63cf7465ea95bd97b018b7afaccdcb28bb42d677b73c44e790f0875fb4b795ca95b7dd712d2c5d69945535f92f74a71236743acd06103cd77bd07f2df5989ee40e409b077cc85e96554beb53c986a216051bd5979a8cfcfe9f98be58ffcf44f6cfda8579dbaedceee578bfd1fb554b6e185e9315425ef0a3fc69d17ede93fc7c46357990f7acfdb8216ea52f604b9f12033688caa4b04adecfc926b3f6ca25bcb5432905e3f30ccbf10cf0f2d00858ba2bbd2702b8d4a7a7c744fbaa2fa35b1c586020d6"}, @TCA_GRED_PARMS={0x38, 0x1, {0x100, 0x5, 0x400, 0x9, 0x81, 0x101, 0xe, 0xc40, 0x7fffffff, 0xfffffffd, 0x20, 0xb, 0x1d, 0x6, 0xca11, 0x10000}}, @TCA_GRED_MAX_P={0x8, 0x4, 0x2}]}}]}, 0x178}, 0x1, 0x0, 0x0, 0xc5}, 0x24008004)
r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0x4, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0xa}, [@call={0x85, 0x0, 0x0, 0x75}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x34}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)

230.178429ms ago: executing program 2 (id=1307):
r0 = syz_init_net_socket$llc(0x1a, 0x801, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000006"], 0x66) (async)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000006"], 0x66)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000024c0), &(0x7f0000000000), 0xb97a, r1}, 0x38)
ioctl$sock_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000000))
connect$llc(r0, &(0x7f0000000040)={0x1a, 0x1, 0x0, 0x0, 0xe, 0x29, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x40}}, 0x10)

229.518234ms ago: executing program 0 (id=1308):
r0 = socket$nl_route(0x10, 0x3, 0x0) (async)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async, rerun: 32)
r3 = socket$inet_smc(0x2b, 0x1, 0x0) (rerun: 32)
ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r1, 0x4058587a, 0x0) (async)
setsockopt$IP_VS_SO_SET_TIMEOUT(r3, 0x0, 0x48a, &(0x7f0000000700)={0x7fff, 0x0, 0x2}, 0xc) (async)
connect$llc(r2, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10) (async)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r5 = socket$kcm(0x2, 0xa, 0x2)
r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_IPV6_HOPOPTS(r6, 0x29, 0x36, 0x0, 0x8)
connect$inet6(r6, &(0x7f00000004c0)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) (async, rerun: 64)
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async, rerun: 64)
write$tun(r4, &(0x7f0000000300)=ANY=[@ANYBLOB="000086dd03000a000000140000076c07010033d43afffe800000000000000000000000000010ff020000000000000000000000000001"], 0x340a)
recvmmsg(r2, &(0x7f00000050c0)=[{{0x0, 0x0, 0x0}, 0x4}], 0x40000000000018c, 0x2, 0x0) (async, rerun: 32)
socket$tipc(0x1e, 0x2, 0x0) (rerun: 32)
r7 = socket$tipc(0x1e, 0x5, 0x0)
setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) (async)
r8 = socket$tipc(0x1e, 0x5, 0x0)
setsockopt$TIPC_GROUP_JOIN(r8, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x3, 0x3, 0x3}, 0x10) (async)
sendmmsg(r2, &(0x7f0000001380), 0x3fffffffffffeed, 0x0)
syz_genetlink_get_family_id$wireguard(&(0x7f0000000480), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', <r9=>0x0}) (async)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000040000701fcffffff00000100017c0000040042800c0001800600060065580000100002800c00118008001c"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) (async)
r11 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) (async)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000200)={'wlan1\x00', <r12=>0x0})
sendmsg$NL80211_CMD_RADAR_DETECT(r10, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1552b2efe36eaa0a}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r11, @ANYBLOB="5e0000000800030000000000000002000000", @ANYRES32=r12, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x40040}, 0x44) (async)
sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0x2}, {0xffff, 0xffff}, {0x10}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x10, 0x3, 0x0, 0x1}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x51}, 0x0)

159.305795ms ago: executing program 2 (id=1309):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0) (async)
r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async, rerun: 32)
r3 = socket$inet_smc(0x2b, 0x1, 0x0) (rerun: 32)
ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r1, 0x4058587a, 0x0) (async, rerun: 64)
setsockopt$IP_VS_SO_SET_TIMEOUT(r3, 0x0, 0x48a, &(0x7f0000000700)={0x7fff, 0x0, 0x2}, 0xc) (rerun: 64)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x11, 0x0, &(0x7f0000003840), &(0x7f00000004c0)='GPL\x00', 0x10000, 0x9f, &(0x7f0000000a00)=""/159, 0x41100, 0x6c, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000440)={0x8, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f00000002c0)=[0x1, 0xffffffffffffffff, 0x1, 0xffffffffffffffff], &(0x7f00000005c0)=[{0xfffffffe, 0x5, 0x8, 0x8}, {0x4, 0x3, 0x0, 0x8}, {0x0, 0x5, 0x11, 0x9}, {0x0, 0x3, 0xb, 0x7}, {0x7, 0x1, 0x10, 0x6}], 0x10, 0x7}, 0x94)
setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000740)=r4, 0x4) (async)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r5, &(0x7f0000000100)=ANY=[], 0x32600) (async)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) (async, rerun: 32)
bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0), 0x8) (async, rerun: 32)
getsockopt$IP_VS_SO_GET_SERVICES(r3, 0x0, 0x482, &(0x7f0000000ac0)=""/151, &(0x7f0000000840)=0x97)
connect$llc(r2, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10) (async)
recvmmsg(r2, &(0x7f00000050c0)=[{{0x0, 0x0, 0x0}, 0x4}], 0x40000000000018c, 0x2, 0x0) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b7050000000000007910a800000000005d0a00000000e5ff9400000800000000"], &(0x7f00000002c0)='GPL\x00', 0x5, 0xbc, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080), 0x10}, 0x94) (async, rerun: 32)
socket$tipc(0x1e, 0x2, 0x0) (rerun: 32)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000001500)=ANY=[@ANYRESHEX=r2], &(0x7f0000000200)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040)={0x3}, 0x10}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r6, 0x2f00020b, 0xe, 0x0, &(0x7f0000000240)="63ecedf7b98637fa929140ac5ea1", 0x0, 0xefdf, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r7 = socket$tipc(0x1e, 0x5, 0x0)
setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) (async, rerun: 32)
r8 = socket$tipc(0x1e, 0x5, 0x0) (rerun: 32)
setsockopt$TIPC_GROUP_JOIN(r8, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x3, 0x3, 0x3}, 0x10) (async, rerun: 32)
sendmmsg(r2, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) (async, rerun: 32)
syz_genetlink_get_family_id$wireguard(&(0x7f0000000480), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', <r9=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0x2}, {0x9, 0xffff}, {0x10, 0x2}}, [@TCA_RATE={0x6, 0x5, {0x7f, 0x1}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x51}, 0x10) (async, rerun: 64)
r10 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64)
sendmsg$nl_route(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[], 0x4c}}, 0x4000810)
sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000880)=@newqdisc={0x178, 0x24, 0xd0f, 0x200000, 0x0, {0x60, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x148, 0x2, [@TCA_GRED_STAB={0x104, 0x2, "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"}, @TCA_GRED_PARMS={0x38, 0x1, {0x100100, 0x5, 0x400, 0x9, 0x81, 0x101, 0xe, 0xc40, 0x7ffffffe, 0xfffffffd, 0x21, 0x7, 0x1d, 0x6, 0xca11, 0x10000}}, @TCA_GRED_MAX_P={0x8, 0x4, 0x2}]}}]}, 0x178}, 0x1, 0x0, 0x0, 0xc5}, 0x24088094)

157.297535ms ago: executing program 2 (id=1310):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0) (async)
r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async)
r3 = socket$inet_smc(0x2b, 0x1, 0x0)
ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r1, 0x4058587a, 0x0) (async)
setsockopt$IP_VS_SO_SET_TIMEOUT(r3, 0x0, 0x48a, &(0x7f0000000700)={0x7fff, 0x0, 0x2}, 0xc) (async)
connect$llc(r2, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10)
recvmmsg(r2, &(0x7f00000050c0)=[{{0x0, 0x0, 0x0}, 0x4}], 0x40000000000018c, 0x2, 0x0)
socket$tipc(0x1e, 0x2, 0x0)
r4 = socket$tipc(0x1e, 0x5, 0x0)
setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) (async)
r5 = socket$tipc(0x1e, 0x5, 0x0)
setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x3, 0x3, 0x3}, 0x10) (async)
sendmmsg(r2, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) (async)
syz_genetlink_get_family_id$wireguard(&(0x7f0000000480), 0xffffffffffffffff) (async)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', <r6=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001240)=@newqdisc={0x860, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0x2}, {0xffff, 0xffff}, {0x10}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x834, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x6, 0x9, 0x7fff, 0x3, 0x9, 0x4c, 0xc, 0x81, 0x200, 0x400, 0x3, 0x36, 0x9, 0xfffffffd, 0xc6, 0x8, 0x9, 0x80, 0x181d7530, 0x80000001, 0xfffffff7, 0x3, 0xea5, 0x80, 0x8e7, 0x2, 0xfffffffd, 0x9, 0x7a8a, 0x5, 0x6, 0x9, 0x1, 0x3, 0x728, 0x8f3, 0x2, 0x3, 0xc, 0x7e9b, 0x518, 0xf3, 0xe, 0x7, 0x0, 0x6, 0x1, 0xd1d1, 0x2, 0x200, 0x3, 0x4, 0x8, 0x8, 0x8, 0x3, 0x7, 0x1, 0x4dce, 0x100, 0x7, 0x5, 0x4, 0x3, 0x5, 0x3, 0x8, 0x401, 0x9, 0x101, 0x4, 0x28, 0xb, 0x5, 0x3, 0x5, 0x4, 0x1, 0x5, 0x5, 0x0, 0x7, 0x7, 0xc, 0x2, 0x200000, 0x9, 0xb9, 0x7f, 0x9, 0x9, 0x8, 0x8001, 0x3, 0x8, 0x1000, 0xa20e, 0xffff, 0x401, 0xfff, 0xfffffffe, 0x304, 0xffffffff, 0x7, 0x3, 0x7fffffff, 0xfffffffd, 0x8, 0xf, 0x0, 0xfc0a, 0xe, 0xb40, 0x2, 0x7fff, 0x0, 0x8, 0x6, 0x3, 0x2, 0x80, 0x8000, 0x0, 0x66ee3fa1, 0xd, 0x9, 0x2, 0x80, 0x2000000, 0x507, 0x6, 0xfffff219, 0xd, 0x80, 0x40, 0x1, 0x7, 0x6, 0x5, 0xfffffffa, 0x761, 0x81, 0x3, 0x30f, 0x6, 0xfff, 0x2, 0x9, 0x10, 0x2, 0x0, 0xf5, 0x6, 0x7f, 0x3, 0x6, 0x6e, 0x7, 0x1, 0x8001, 0x7, 0x2, 0xffffffff, 0x3, 0x9, 0x1000, 0xfffffe00, 0xc, 0x50000000, 0x7, 0x101, 0x6, 0x0, 0x4, 0x6, 0x6505, 0x4, 0x8, 0x4, 0x3ff, 0x6, 0x8001, 0x6, 0x2, 0x5, 0x8, 0x8, 0x0, 0x80000000, 0x200, 0xfffffffb, 0x1280, 0x5, 0x2, 0x34db, 0x641, 0x58a37b91, 0x5, 0x8, 0x4, 0x5, 0x43b2, 0x3, 0x9, 0xffff, 0x9, 0x5, 0x7, 0x7, 0x9, 0x3, 0x6, 0x9, 0x4, 0xd6, 0x0, 0x7, 0x5, 0x5, 0x2, 0x8, 0x4, 0x7, 0x1, 0x81, 0x5, 0xf1, 0x5, 0x8b0, 0x81, 0x2, 0x10001, 0x0, 0x1083a6e8, 0x2, 0x7, 0x3, 0x7, 0xc6db, 0x7, 0x7fffffff, 0x9, 0x6, 0x0, 0x1, 0xf3de, 0x3, 0x1, 0x5, 0x7, 0x4, 0x6, 0x7, 0x1, 0x3205b5bf, 0x8]}, @TCA_TBF_RTAB={0x404, 0x2, [0x48, 0x0, 0x3, 0x8, 0x2, 0x4, 0xfc, 0xfffffff8, 0x10001, 0x892, 0x0, 0x10000, 0x5, 0x1, 0x71, 0x3, 0x4, 0x0, 0x35, 0x1, 0x8, 0x3, 0x9, 0x100, 0xe0, 0x5, 0x6, 0x8, 0xcc6, 0x1ff, 0xfffffff8, 0xd, 0x0, 0x8, 0x0, 0xffffffff, 0x800, 0x9f1, 0x0, 0x9, 0x2, 0xffff0000, 0x400, 0x10001, 0x7, 0xfed, 0xa2, 0x7, 0x3ff, 0x6, 0x641a, 0x0, 0x81, 0xfffffffe, 0x4, 0x6, 0xd, 0x9, 0x2, 0x1, 0x9, 0x7, 0x23, 0x5, 0x3, 0x6, 0x82, 0x8, 0x6, 0x8, 0x5, 0x5, 0xa, 0x8, 0x8000, 0x4, 0x0, 0x7ff, 0x80000000, 0x401, 0x6, 0x8, 0x2, 0x34, 0x2, 0x4, 0x2, 0x2, 0x8, 0xcd6d, 0x0, 0x6b, 0x101, 0x80, 0x3, 0xa, 0x8, 0x5b, 0xe, 0x0, 0x1, 0x77, 0x800, 0x7, 0x4, 0xfc, 0x10000, 0x200, 0x10, 0x87, 0x8, 0x1, 0x7, 0x8, 0xd, 0x1, 0x2, 0x0, 0x7, 0xad6a, 0x791b, 0xffff, 0x7, 0xd, 0x9, 0x8, 0x1, 0x4, 0xff, 0xf, 0x7, 0x6, 0x9, 0x5, 0x1, 0x5, 0x80000000, 0xffff, 0xcf8b, 0x3, 0x800, 0x4, 0x18, 0xffffffff, 0x7, 0x4, 0x700e6f74, 0x9, 0x71, 0xfffffe04, 0x9c1b, 0x6, 0x6, 0x10, 0x2, 0x5, 0x1, 0x1, 0x3, 0xdc3, 0x8000, 0x6, 0x10000, 0xda, 0x9, 0x52, 0x8b, 0x80000000, 0x3, 0x0, 0x3, 0xae, 0x3, 0x7, 0x1, 0xa, 0x41a758c5, 0x0, 0x3fb, 0xffff0001, 0xa, 0xd3d, 0xfffffff9, 0x200, 0xa748, 0xd, 0x4, 0x6, 0xa, 0x5, 0x3, 0x229c, 0xd, 0x1, 0x87c, 0xb223, 0x7, 0x0, 0x1, 0x8, 0x31, 0x8000, 0x5, 0x8, 0x0, 0x8, 0x9, 0xfffffff9, 0x80000000, 0x40, 0x85d, 0x40, 0x7fff, 0x9, 0x0, 0x584, 0x5000000, 0xbcd5, 0xddbc2942, 0x5, 0x511e2db4, 0x1, 0x1, 0x80000000, 0x2, 0x6, 0x6, 0x1, 0x3, 0x2, 0x7, 0x3, 0xece, 0x7, 0x8, 0x80000007, 0x1, 0x9f10, 0x10001, 0xfffffff5, 0x4, 0x401, 0x2, 0x7ff, 0x1, 0x2, 0x5, 0xfffffff7, 0x51, 0x0, 0x9, 0x7fffffff, 0x3, 0x5, 0x80000000, 0x6]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x3c, 0x1, 0x80, 0x3, 0x81, 0x8}, {0x1, 0x1, 0x4, 0xf3, 0xfffc, 0xfffffffe}, 0x1221, 0x9, 0x1a56}}]}}]}, 0x860}, 0x1, 0x0, 0x0, 0x51}, 0x0) (async)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="4c0000001800ddd000000000000000000200000000000d05000000000600150005000000280016802400010003"], 0x4c}}, 0x0) (async)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)={0x14, 0x2c, 0x107, 0xfffffffc, 0x25dfdbff, {0x2, 0x7c}}, 0x14}, 0x1, 0x0, 0x0, 0xc000}, 0xc010)
sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000880)=@newqdisc={0x178, 0x24, 0xd0f, 0x200000, 0x0, {0x60, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x148, 0x2, [@TCA_GRED_STAB={0x104, 0x2, "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"}, @TCA_GRED_PARMS={0x38, 0x1, {0x100, 0x5, 0x400, 0x9, 0x81, 0x101, 0xe, 0xc40, 0x7fffffff, 0xfffffffd, 0x20, 0xb, 0x1d, 0x6, 0xca11, 0x10000}}, @TCA_GRED_MAX_P={0x8, 0x4, 0x2}]}}]}, 0x178}, 0x1, 0x0, 0x0, 0xc5}, 0x24008004) (async)
r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0x4, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0xa}, [@call={0x85, 0x0, 0x0, 0x75}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x34}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)

97.064546ms ago: executing program 2 (id=1311):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
r3 = socket$inet_smc(0x2b, 0x1, 0x0)
ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r1, 0x4058587a, 0x0)
setsockopt$IP_VS_SO_SET_TIMEOUT(r3, 0x0, 0x48a, &(0x7f0000000700)={0x7fff, 0x0, 0x2}, 0xc)
connect$llc(r2, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
r5 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r5, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r4, {0x2, 0x0, @broadcast}, 0x2}}, 0x2e)
getsockopt(r5, 0x111, 0x1, 0x0, &(0x7f0000000080))
recvmmsg(r2, &(0x7f00000050c0)=[{{0x0, 0x0, 0x0}, 0x4}], 0x40000000000018c, 0x2, 0x0)
r6 = socket$tipc(0x1e, 0x2, 0x0)
socket$tipc(0x1e, 0x5, 0x0)
setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000200)={0x100043, 0x2, 0x2, 0x3}, 0x10)
r7 = socket$tipc(0x1e, 0x5, 0x0)
setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x3, 0x3, 0x3}, 0x10)
sendmmsg(r2, &(0x7f0000001380), 0x3fffffffffffeed, 0x0)
syz_genetlink_get_family_id$wireguard(&(0x7f0000000480), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', <r8=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0x2}, {0xffff, 0xffff}, {0x10}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x10, 0x3, 0x0, 0x1}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x51}, 0x0)
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="4c0000001800ddd000000000000000000200000000000d05000000000600150005000000280016802400010003"], 0x4c}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000880)=@newqdisc={0x178, 0x24, 0xd0f, 0x200000, 0x0, {0x60, 0x0, 0x0, r8, {}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x148, 0x2, [@TCA_GRED_STAB={0x104, 0x2, "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"}, @TCA_GRED_PARMS={0x38, 0x1, {0x100, 0x5, 0x400, 0x9, 0x81, 0x101, 0xe, 0xc40, 0x7fffffff, 0xfffffffd, 0x20, 0xb, 0x1d, 0x6, 0xca11, 0x10000}}, @TCA_GRED_MAX_P={0x8, 0x4, 0x2}]}}]}, 0x178}, 0x1, 0x0, 0x0, 0xc5}, 0x24008004)
r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000fdffffff000000000a00000085000000750000005e000000ea72f8f1584ed15e1f3d000000000000b9605403dc1622778dc71fed60ece3085d3c93082beb9dab3207f930ce298ffab6073c9655e325622a2638f23832099d005263584bfa1d29af51f9e2de5ac5162c81566be5cf7331f5f82e9b4f58dbcc5b8fb19ade0e70ce3b23c00abee92932ce57d6c8d8fb50b7442cff84857608c1a4179bf80315fa80b4b944118e3823"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x34}, 0x94)
r11 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt(r11, 0x84, 0x4, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)

96.293742ms ago: executing program 0 (id=1312):
r0 = socket$rds(0x15, 0x5, 0x0)
sendmsg$rds(r0, &(0x7f0000000340)={&(0x7f0000000300)={0x2, 0x0, @empty}, 0x10, 0x0}, 0x0)
r1 = syz_init_net_socket$llc(0x1a, 0x801, 0x0)
bind$llc(r1, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x81, 0x42}, 0x10)
close(r1)

95.801214ms ago: executing program 0 (id=1313):
r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r2)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r3 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0)
setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x11e, 0x48b, 0x0, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETSET(r4, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004007}, 0x40)
r5 = socket$unix(0x1, 0x2, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0xfffffffffffffcbc, &(0x7f00000001c0)={&(0x7f00000004c0)=@newqdisc={0x64, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x8000000, {0x0, 0x0, 0x0, r7, {0x0, 0xe}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x34, 0x2, {{0xe, 0x7, 0x6361, 0xfffffffd, 0xfffffffd, 0x6}, [@TCA_NETEM_LOSS={0x18, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x30, 0x2, {0xffffffff, 0xffffffff, 0x2, 0x1}}]}]}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008001}, 0x24004880)
setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000140)={0x0, 0x7530}, 0x10)
connect$llc(r0, &(0x7f0000000080)={0x1a, 0x1, 0x4, 0x0, 0x0, 0x8, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x10)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r8, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0xb0, 0x0, 0x8, 0x70bd27, 0x25dfdbfb, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x5c800}, {0x6, 0x16, 0x3}, {0x5}, {0x6, 0x11, 0x800}, {0x8, 0xb, 0x8}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8}, {0x6, 0x16, 0xd}, {0x5}, {0x6, 0x11, 0x6}, {0x8, 0xb, 0x100}}]}, 0xb0}}, 0x40890)

470.571µs ago: executing program 2 (id=1314):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
r3 = socket$inet_smc(0x2b, 0x1, 0x0)
ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r1, 0x4058587a, 0x0)
setsockopt$IP_VS_SO_SET_TIMEOUT(r3, 0x0, 0x48a, &(0x7f0000000700)={0x7fff, 0x0, 0x2}, 0xc)
connect$llc(r2, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10)
recvmmsg(r2, &(0x7f00000050c0)=[{{0x0, 0x0, 0x0}, 0x4}], 0x40000000000018c, 0x2, 0x0)
socket$tipc(0x1e, 0x2, 0x0)
r4 = socket$tipc(0x1e, 0x5, 0x0)
setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10)
r5 = socket$tipc(0x1e, 0x5, 0x0)
setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x3, 0x3, 0x3}, 0x10)
sendmmsg(r2, &(0x7f0000001380), 0x3fffffffffffeed, 0x0)
syz_genetlink_get_family_id$wireguard(&(0x7f0000000480), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', <r6=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0x2}, {0xffff, 0xffff}, {0x10}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x10, 0x3, 0x0, 0x1}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x51}, 0x0)
r7 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000ac0)=@filter={'filter\x00', 0xe, 0x4, 0x358, 0xffffffff, 0x1e8, 0x1e8, 0xd0, 0xffffffff, 0xffffffff, 0x320, 0x320, 0x320, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x3, 0x3, 0x4}, {0x0, 0x4, 0x3}}}}, {{@ipv6={@mcast2, @private0={0xfc, 0x0, '\x00', 0x1}, [0x0, 0xff, 0xffffff00, 0xffffffff], [0xff, 0xffffff00, 0xffffffff, 0xff], 'wlan0\x00', 'bridge_slave_0\x00', {}, {0xff}, 0x0, 0x4, 0x6, 0x1}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x0, 0x8000}}}, {{@ipv6={@private1={0xfc, 0x1, '\x00', 0x1}, @mcast2, [0xffffffff, 0xffffff00, 0xffffff, 0x3cfa071f66be0dd3], [0xff000000, 0xff000000, 0xffffff00, 0xff], 'veth1_to_hsr\x00', 'vlan0\x00', {0xff}, {}, 0x3b, 0x78, 0x2, 0x1}, 0x0, 0xa8, 0xe8}, @common=@unspec=@ERROR={0x22, 'ERROR\x00', 0x0, "9847fdc1479cca6e850542bb97e4096e345c9f1a70b1d8501618472b17cd"}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b8)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="4c0000001800ddd000000000000000000200000000000d05000000000600150005000000280016802400010003"], 0x4c}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000880)=@newqdisc={0x178, 0x24, 0xd0f, 0x200000, 0x0, {0x60, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x148, 0x2, [@TCA_GRED_STAB={0x104, 0x2, "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"}, @TCA_GRED_PARMS={0x38, 0x1, {0x100, 0x5, 0x400, 0x9, 0x81, 0x101, 0xe, 0xc40, 0x7fffffff, 0xfffffffd, 0x20, 0xb, 0x1d, 0x6, 0xca11, 0x10000}}, @TCA_GRED_MAX_P={0x8, 0x4, 0x2}]}}]}, 0x178}, 0x1, 0x0, 0x0, 0xc5}, 0x24008004)
r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0x4, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0xa}, [@call={0x85, 0x0, 0x0, 0x75}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x34}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)

0s ago: executing program 0 (id=1315):
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async)
r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
socket$alg(0x26, 0x5, 0x0)
connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x22}}, 0x4, 0x2, 0x4}}, 0x26)
sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040), 0xc, 0x0}, 0x40)
r1 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r1, 0x0, 0x0)
getsockopt$inet_mptcp_buf(r1, 0x11c, 0x3, &(0x7f0000000040)=""/185, &(0x7f0000000140)=0xb9)
r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
connect$llc(r2, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10)
bind$llc(r2, 0x0, 0x0)
sendmmsg(r2, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) (async)
sendmmsg(r2, &(0x7f0000001380), 0x3fffffffffffeed, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
bpf$BPF_PROG_DETACH(0x1c, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES64=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x7, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="720ac4ff000000007110ab000000001a95000000000000"], &(0x7f0000000480)='GPL\x00'}, 0x80)
bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) (async)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48)
socket$netlink(0x10, 0x3, 0x10) (async)
r4 = socket$netlink(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, <r6=>0x0}, &(0x7f0000000200)=0x14)
sendmsg$ETHTOOL_MSG_FEATURES_GET(r4, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f00000008c0)={0xb4, r5, 0x10, 0x70bd28, 0x25dfdb7b, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x1}, 0x4044014)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f00000003c0)={'ip6gre0\x00', &(0x7f0000000280)={'ip6tnl0\x00', 0x0, 0x2f, 0x2, 0x8, 0x5, 0x0, @mcast1, @ipv4={'\x00', '\xff\xff', @remote}, 0x7800, 0x7, 0xfffffc01, 0x3}}) (async)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f00000003c0)={'ip6gre0\x00', &(0x7f0000000280)={'ip6tnl0\x00', <r7=>0x0, 0x2f, 0x2, 0x8, 0x5, 0x0, @mcast1, @ipv4={'\x00', '\xff\xff', @remote}, 0x7800, 0x7, 0xfffffc01, 0x3}})
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r7, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r7, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94)
unshare(0x20000400) (async)
unshare(0x20000400)
setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x2, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async)
r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
openat$cgroup_pressure(r8, &(0x7f0000000040)='io.pressure\x00', 0x2, 0x0) (async)
r9 = openat$cgroup_pressure(r8, &(0x7f0000000040)='io.pressure\x00', 0x2, 0x0)
ppoll(&(0x7f0000001080)=[{r9, 0x21}], 0x1, 0x0, 0x0, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:19909' (ED25519) to the list of known hosts.
syzkaller login: [   57.086767][ T5597] cgroup: Unknown subsys name 'net'
[   57.229386][ T5597] cgroup: Unknown subsys name 'cpuset'
[   57.234748][ T5597] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   58.709353][ T5597] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   62.231608][ T5002] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   62.235579][ T5002] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   62.238660][ T5002] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   62.252664][ T5619] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   62.256791][ T5619] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   62.265999][ T5616] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   62.269158][ T5616] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   62.272311][ T5616] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   62.273893][ T5621] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   62.274827][ T5616] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   62.278328][ T5621] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   62.283464][ T5621] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   62.287033][   T55] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   62.295219][ T5002] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   62.301831][ T5002] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   62.789634][ T5613] bridge0: port 1(bridge_slave_0) entered blocking state
[   62.792587][ T5613] bridge0: port 1(bridge_slave_0) entered disabled state
[   62.796040][ T5613] bridge_slave_0: entered allmulticast mode
[   62.798759][ T5613] bridge_slave_0: entered promiscuous mode
[   62.822400][ T5613] bridge0: port 2(bridge_slave_1) entered blocking state
[   62.825161][ T5613] bridge0: port 2(bridge_slave_1) entered disabled state
[   62.827436][ T5613] bridge_slave_1: entered allmulticast mode
[   62.830075][ T5613] bridge_slave_1: entered promiscuous mode
[   62.879643][ T5613] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   62.902534][ T5613] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   62.957061][ T5620] bridge0: port 1(bridge_slave_0) entered blocking state
[   62.961212][ T5620] bridge0: port 1(bridge_slave_0) entered disabled state
[   62.964201][ T5620] bridge_slave_0: entered allmulticast mode
[   62.968341][ T5620] bridge_slave_0: entered promiscuous mode
[   62.983763][ T5617] bridge0: port 1(bridge_slave_0) entered blocking state
[   62.987246][ T5617] bridge0: port 1(bridge_slave_0) entered disabled state
[   62.989603][ T5617] bridge_slave_0: entered allmulticast mode
[   62.993307][ T5617] bridge_slave_0: entered promiscuous mode
[   62.998731][ T5617] bridge0: port 2(bridge_slave_1) entered blocking state
[   63.001604][ T5617] bridge0: port 2(bridge_slave_1) entered disabled state
[   63.004573][ T5617] bridge_slave_1: entered allmulticast mode
[   63.009044][ T5617] bridge_slave_1: entered promiscuous mode
[   63.013490][ T5620] bridge0: port 2(bridge_slave_1) entered blocking state
[   63.016643][ T5620] bridge0: port 2(bridge_slave_1) entered disabled state
[   63.019591][ T5620] bridge_slave_1: entered allmulticast mode
[   63.023322][ T5620] bridge_slave_1: entered promiscuous mode
[   63.030236][ T5613] team0: Port device team_slave_0 added
[   63.054557][ T5613] team0: Port device team_slave_1 added
[   63.105313][ T5617] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   63.112008][ T5617] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   63.118291][ T5620] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   63.122881][ T5620] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   63.126268][ T5613] batman_adv: batadv0: Adding interface: batadv_slave_0
[   63.128795][ T5613] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   63.136902][ T5613] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   63.160934][ T5613] batman_adv: batadv0: Adding interface: batadv_slave_1
[   63.163174][ T5613] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   63.171586][ T5613] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   63.183192][ T5617] team0: Port device team_slave_0 added
[   63.186450][ T5620] team0: Port device team_slave_0 added
[   63.196460][ T5617] team0: Port device team_slave_1 added
[   63.199320][ T5620] team0: Port device team_slave_1 added
[   63.240315][ T5620] batman_adv: batadv0: Adding interface: batadv_slave_0
[   63.243452][ T5620] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   63.252421][ T5620] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   63.257696][ T5617] batman_adv: batadv0: Adding interface: batadv_slave_0
[   63.260624][ T5617] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   63.269325][ T5617] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   63.284027][ T5620] batman_adv: batadv0: Adding interface: batadv_slave_1
[   63.287297][ T5620] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   63.297876][ T5620] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   63.302441][ T5617] batman_adv: batadv0: Adding interface: batadv_slave_1
[   63.305181][ T5617] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   63.313243][ T5617] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   63.321864][ T5613] hsr_slave_0: entered promiscuous mode
[   63.325110][ T5613] hsr_slave_1: entered promiscuous mode
[   63.391122][ T5620] hsr_slave_0: entered promiscuous mode
[   63.393390][ T5620] hsr_slave_1: entered promiscuous mode
[   63.396320][ T5620] debugfs: 'hsr0' already exists in 'hsr'
[   63.398786][ T5620] Cannot create hsr debugfs directory
[   63.407381][ T5617] hsr_slave_0: entered promiscuous mode
[   63.409682][ T5617] hsr_slave_1: entered promiscuous mode
[   63.411738][ T5617] debugfs: 'hsr0' already exists in 'hsr'
[   63.413635][ T5617] Cannot create hsr debugfs directory
[   63.628006][ T5613] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   63.638051][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   63.642222][ T5613] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   63.646852][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   63.650183][ T5613] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   63.657425][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   63.667762][ T5613] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   63.675856][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   63.727839][ T5617] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   63.735047][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   63.738117][ T5617] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   63.742562][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   63.750817][ T5617] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   63.758311][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   63.761218][ T5617] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   63.765481][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   63.849313][ T5620] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   63.856975][ T5620] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   63.860413][ T5620] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   63.864397][ T5620] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   63.873322][ T5620] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   63.878225][ T5620] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   63.880856][ T5620] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   63.885303][ T5620] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   63.908543][ T5613] 8021q: adding VLAN 0 to HW filter on device bond0
[   63.937913][ T5613] 8021q: adding VLAN 0 to HW filter on device team0
[   63.953621][   T26] bridge0: port 1(bridge_slave_0) entered blocking state
[   63.956387][   T26] bridge0: port 1(bridge_slave_0) entered forwarding state
[   63.965983][   T26] bridge0: port 2(bridge_slave_1) entered blocking state
[   63.968207][   T26] bridge0: port 2(bridge_slave_1) entered forwarding state
[   63.992691][ T5617] 8021q: adding VLAN 0 to HW filter on device bond0
[   64.034428][ T5617] 8021q: adding VLAN 0 to HW filter on device team0
[   64.049301][   T40] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.051630][   T40] bridge0: port 1(bridge_slave_0) entered forwarding state
[   64.063590][   T40] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.066418][   T40] bridge0: port 2(bridge_slave_1) entered forwarding state
[   64.096233][ T5620] 8021q: adding VLAN 0 to HW filter on device bond0
[   64.122999][ T5620] 8021q: adding VLAN 0 to HW filter on device team0
[   64.132072][   T40] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.134362][   T40] bridge0: port 1(bridge_slave_0) entered forwarding state
[   64.152052][   T52] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.154394][   T52] bridge0: port 2(bridge_slave_1) entered forwarding state
[   64.347124][ T5613] 8021q: adding VLAN 0 to HW filter on device batadv0
[   64.355459][ T5002] Bluetooth: hci1: command tx timeout
[   64.355443][ T5619] Bluetooth: hci2: command tx timeout
[   64.357812][ T5002] Bluetooth: hci0: command tx timeout
[   64.388600][ T5613] veth0_vlan: entered promiscuous mode
[   64.396314][ T5613] veth1_vlan: entered promiscuous mode
[   64.421556][ T5613] veth0_macvtap: entered promiscuous mode
[   64.427174][ T5613] veth1_macvtap: entered promiscuous mode
[   64.436180][ T5617] 8021q: adding VLAN 0 to HW filter on device batadv0
[   64.452842][ T5613] batman_adv: batadv0: Interface activated: batadv_slave_0
[   64.464441][ T5620] 8021q: adding VLAN 0 to HW filter on device batadv0
[   64.468445][ T5613] batman_adv: batadv0: Interface activated: batadv_slave_1
[   64.482920][   T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   64.486496][   T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   64.489536][   T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   64.499813][   T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   64.559147][ T5617] veth0_vlan: entered promiscuous mode
[   64.581667][ T5620] veth0_vlan: entered promiscuous mode
[   64.591835][ T5617] veth1_vlan: entered promiscuous mode
[   64.597603][   T26] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   64.603014][ T5620] veth1_vlan: entered promiscuous mode
[   64.605863][   T26] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   64.650615][   T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   64.653546][   T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   64.655909][ T5617] veth0_macvtap: entered promiscuous mode
[   64.669834][ T5617] veth1_macvtap: entered promiscuous mode
[   64.684373][ T5620] veth0_macvtap: entered promiscuous mode
[   64.706729][ T5620] veth1_macvtap: entered promiscuous mode
[   64.717726][ T5613] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   64.723203][ T5617] batman_adv: batadv0: Interface activated: batadv_slave_0
[   64.731005][ T5620] batman_adv: batadv0: Interface activated: batadv_slave_0
[   64.738987][ T5617] batman_adv: batadv0: Interface activated: batadv_slave_1
[   64.751790][ T5620] batman_adv: batadv0: Interface activated: batadv_slave_1
[   64.757693][   T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   64.775430][   T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   64.785739][   T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   64.800365][   T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   64.805098][   T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   64.817132][   T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   64.824738][   T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   64.833042][   T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   64.925849][ T1019] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   64.929689][ T1019] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   64.945435][   T26] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   64.948617][   T26] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   64.970831][ T1019] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   64.974528][ T1019] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   64.987560][   T26] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   64.990773][   T26] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   65.235723][   T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   65.239820][ T5736] netlink: 'syz.2.3': attribute type 5 has an invalid length.
[   65.499457][ T5744] Driver unsupported XDP return value 0 on prog  (id 3) dev N/A, expect packet loss!
[   65.556898][ T5695] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   65.722043][ T5673] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   65.731997][ T5673] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   65.787022][ T5750] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7'.
[   66.145394][  T797] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   66.435630][ T5002] Bluetooth: hci2: command tx timeout
[   66.436077][   T55] Bluetooth: hci0: command tx timeout
[   66.440243][ T5619] Bluetooth: hci1: command tx timeout
[   66.496475][ T5695] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   66.596733][   T31] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   66.915371][ T5695] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   67.116628][ T5779] syz.1.15 uses obsolete (PF_INET,SOCK_PACKET)
[   67.366286][ T5785] netlink: 'syz.1.16': attribute type 11 has an invalid length.
[   67.370582][ T5785] netlink: 7064 bytes leftover after parsing attributes in process `syz.1.16'.
[   67.374237][ T5786] netlink: 'syz.2.17': attribute type 1 has an invalid length.
[   67.555494][  T797] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   67.580822][ T5792] Zero length message leads to an empty skb
[   67.636717][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   68.515475][   T55] Bluetooth: hci1: command tx timeout
[   68.515622][ T5002] Bluetooth: hci0: command tx timeout
[   68.517784][ T5619] Bluetooth: hci2: command tx timeout
[   68.544592][ T5813] syzkaller0: entered promiscuous mode
[   68.546873][ T5813] syzkaller0: entered allmulticast mode
[   68.945244][ T5825] netlink: 84 bytes leftover after parsing attributes in process `syz.1.29'.
[   69.522323][ T5839] warning: `syz.2.35' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   69.647099][ T5843] veth3: entered promiscuous mode
[   69.734769][ T5847] netlink: 'syz.0.39': attribute type 1 has an invalid length.
[   70.351849][ T5880] xt_hashlimit: max too large, truncated to 1048576
[   70.532232][ T5892] netlink: 56 bytes leftover after parsing attributes in process `syz.2.55'.
[   70.538996][ T5892] netlink: 24 bytes leftover after parsing attributes in process `syz.2.55'.
[   70.596323][   T55] Bluetooth: hci1: command tx timeout
[   70.598666][ T5619] Bluetooth: hci2: command tx timeout
[   70.605064][ T5619] Bluetooth: hci0: command tx timeout
[   70.605184][    C1] net_ratelimit: 32 callbacks suppressed
[   70.605201][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   70.664237][ T5906] netlink: 12 bytes leftover after parsing attributes in process `syz.2.59'.
[   70.668141][ T5906] netlink: 12 bytes leftover after parsing attributes in process `syz.2.59'.
[   70.671739][ T5906] netlink: 12 bytes leftover after parsing attributes in process `syz.2.59'.
[   70.674590][ T5906] netlink: 12 bytes leftover after parsing attributes in process `syz.2.59'.
[   70.678241][ T5906] netlink: 12 bytes leftover after parsing attributes in process `syz.2.59'.
[   70.755239][ T5695] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   70.852709][ T5917] ip6t_srh: unknown srh match flags  4000
[   71.074937][ T5695] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   71.078101][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   71.319612][ T5928] netlink: 'syz.0.66': attribute type 1 has an invalid length.
[   71.475520][    T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   71.613630][ T5940] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   71.616822][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   71.637418][    T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   71.683955][ T5942] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[   71.705447][ T5940] team0: entered promiscuous mode
[   71.713711][ T5940] team_slave_0: entered promiscuous mode
[   71.720671][ T5940] team_slave_1: entered promiscuous mode
[   71.730964][ T5940] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[   71.804927][ T5695] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   71.857084][ T5947] __nla_validate_parse: 28 callbacks suppressed
[   71.857099][ T5947] netlink: 140 bytes leftover after parsing attributes in process `syz.1.72'.
[   72.509315][ T5975] raw_sendmsg: syz.0.78 forgot to set AF_INET. Fix it!
[   72.614434][ T5981] netlink: 20 bytes leftover after parsing attributes in process `syz.2.81'.
[   72.745255][ T5681] IPVS: starting estimator thread 0...
[   72.835540][ T5998] IPVS: using max 81 ests per chain, 194400 per kthread
[   73.464974][ T5984] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[   73.686299][ T5673] IPVS: stop unused estimator thread 0...
[   73.704034][ T6025] netlink: 'syz.2.89': attribute type 2 has an invalid length.
[   73.733929][ T6024] netlink: 'syz.0.90': attribute type 21 has an invalid length.
[   73.738562][ T6024] netlink: 128 bytes leftover after parsing attributes in process `syz.0.90'.
[   73.742480][ T6024] netlink: 'syz.0.90': attribute type 4 has an invalid length.
[   73.745363][ T6024] netlink: 'syz.0.90': attribute type 5 has an invalid length.
[   73.748322][ T6024] netlink: 3 bytes leftover after parsing attributes in process `syz.0.90'.
[   74.032473][ T6053] netlink: 12 bytes leftover after parsing attributes in process `syz.0.97'.
[   74.037080][ T6053] netlink: 8 bytes leftover after parsing attributes in process `syz.0.97'.
[   74.246095][ T6061] netlink: 260 bytes leftover after parsing attributes in process `syz.0.100'.
[   74.367982][ T6074] erspan1: entered promiscuous mode
[   74.369721][ T6074] erspan1: entered allmulticast mode
[   74.418736][ T6081] IPVS: set_ctl: invalid protocol: 161 0.0.0.0:20000
[   74.447578][ T6083] netlink: 8 bytes leftover after parsing attributes in process `syz.0.106'.
[   74.484381][ T6088] netlink: 15672 bytes leftover after parsing attributes in process `syz.0.107'.
[   74.491215][ T6088] netlink: 28 bytes leftover after parsing attributes in process `syz.0.107'.
[   74.524451][ T6092] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   74.551232][ T6094] syzkaller0: entered promiscuous mode
[   74.553123][ T6094] syzkaller0: entered allmulticast mode
[   74.698519][ T6096] syzkaller1: entered promiscuous mode
[   74.700369][ T6096] syzkaller1: entered allmulticast mode
[   74.869702][ T6101] netlink: 'syz.2.112': attribute type 4 has an invalid length.
[   75.624881][ T5681] net_ratelimit: 307 callbacks suppressed
[   75.624895][ T5681] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   75.811633][ T6173] block nbd0: Unsupported socket: should be TCP or UNIX.
[   75.821719][ T6173] ip6t_srh: unknown srh match flags  4000
[   75.875841][ T5681] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   75.884893][ T6175] tipc: Invalid UDP bearer configuration
[   75.884921][ T6175] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[   75.964908][  T896] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   76.072111][ T6184] netlink: 'syz.0.136': attribute type 13 has an invalid length.
[   76.075778][ T6184] syz_tun: refused to change device tx_queue_len
[   76.077946][ T6184] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check.
[   76.116319][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   76.279738][  T896] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   76.282446][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   76.364095][ T6197] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   76.367923][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   76.374196][ T5673] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   76.520767][ T1381] ieee802154 phy0 wpan0: encryption failed: -22
[   76.527034][ T1381] ieee802154 phy1 wpan1: encryption failed: -22
[   76.531734][ T6213] syzkaller0: entered promiscuous mode
[   76.534070][ T6213] syzkaller0: entered allmulticast mode
[   76.655304][ T6227] tap0: tun_chr_ioctl cmd 1074025681
[   76.902307][ T6256] tipc: Invalid UDP bearer configuration
[   76.902376][ T6256] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[   76.972029][ T6262] __nla_validate_parse: 44 callbacks suppressed
[   76.972043][ T6262] netlink: 28 bytes leftover after parsing attributes in process `syz.1.158'.
[   76.980559][ T6262] netlink: 28 bytes leftover after parsing attributes in process `syz.1.158'.
[   76.986850][ T6262] netlink: 28 bytes leftover after parsing attributes in process `syz.1.158'.
[   76.989687][ T6262] netlink: 28 bytes leftover after parsing attributes in process `syz.1.158'.
[   77.022423][ T6265] : renamed from lo (while UP)
[   78.609900][ T6343] syzkaller1: entered promiscuous mode
[   78.620006][ T6343] syzkaller1: entered allmulticast mode
[   78.629016][ T6343] netlink: 28 bytes leftover after parsing attributes in process `syz.1.178'.
[   78.632454][ T6343] netlink: 7 bytes leftover after parsing attributes in process `syz.1.178'.
[   78.651824][ T6347] netlink: 5000 bytes leftover after parsing attributes in process `syz.2.179'.
[   78.675892][ T6313] Bluetooth: hci0: Opcode 0x0401 failed: -4
[   78.836663][ T6359] syzkaller0: entered promiscuous mode
[   78.842075][ T6359] syzkaller0: entered allmulticast mode
[   78.896366][ T6363] netlink: 208240 bytes leftover after parsing attributes in process `syz.1.184'.
[   78.993822][   T31] hsr0: entered promiscuous mode
[   79.208306][ T6378] netlink: 4 bytes leftover after parsing attributes in process `syz.0.190'.
[   79.560363][ T6398] netlink: 4 bytes leftover after parsing attributes in process `syz.0.198'.
[   79.878017][ T5619] Bluetooth: hci0: command 0x0401 tx timeout
[   80.649103][ T6467] net_ratelimit: 438 callbacks suppressed
[   80.649126][ T6467] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   80.657281][ T6467] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   80.660630][ T6467] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   80.702042][ T6466] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   80.714960][ T6467] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   80.884096][ T6477] syzkaller1: entered promiscuous mode
[   80.886050][ T6477] syzkaller1: entered allmulticast mode
[   81.155109][  T896] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   81.475977][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   81.482136][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   82.035132][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   82.038890][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   83.227434][ T6447] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[   83.599892][ T6518] netlink: 'syz.0.231': attribute type 1 has an invalid length.
[   83.605191][ T6518] __nla_validate_parse: 4 callbacks suppressed
[   83.605200][ T6518] netlink: 4 bytes leftover after parsing attributes in process `syz.0.231'.
[   83.609549][ T6518] netlink: 'syz.0.231': attribute type 1 has an invalid length.
[   83.688390][ T6519] syzkaller1: entered promiscuous mode
[   83.690759][ T6519] syzkaller1: entered allmulticast mode
[   83.942685][ T6543] tipc: Invalid UDP bearer configuration
[   83.942766][ T6543] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[   83.950845][ T6543] sch_fq: defrate 4294967293 ignored.
[   84.214021][ T6564] tipc: Started in network mode
[   84.219047][ T6564] tipc: Node identity , cluster identity 4711
[   84.221504][ T6564] tipc: Failed to obtain node identity
[   84.223646][ T6564] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   84.551956][ T6596] ipt_rpfilter: unknown options
[   84.622741][ T6604] netlink: 20 bytes leftover after parsing attributes in process `syz.0.254'.
[   84.628131][ T6603] netlink: 20 bytes leftover after parsing attributes in process `syz.0.254'.
[   84.969969][ T6638] IPVS: set_ctl: invalid protocol: 60 224.0.0.2:20000
[   84.972827][ T5079] IPVS: starting estimator thread 0...
[   85.064820][ T6642] IPVS: using max 81 ests per chain, 194400 per kthread
[   85.286115][   T10] cfg80211: failed to load regulatory.db
[   85.657230][ T5079] net_ratelimit: 279 callbacks suppressed
[   85.657250][ T5079] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   85.703076][ T6679] netlink: 'syz.0.271': attribute type 11 has an invalid length.
[   85.719147][ T6677] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   85.733980][ T6677] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   85.749192][ T6677] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   85.763662][ T6677] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   85.778008][ T6677] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   85.791718][ T6677] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   85.805995][ T6677] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   85.818207][ T6677] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   85.821497][ T6677] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   86.412195][ T6723] netlink: 'syz.2.281': attribute type 11 has an invalid length.
[   86.421988][ T6723] netlink: 44 bytes leftover after parsing attributes in process `syz.2.281'.
[   86.533541][ T6725] netlink: 'syz.0.282': attribute type 11 has an invalid length.
[   86.816420][ T6750] netlink: 28 bytes leftover after parsing attributes in process `syz.0.287'.
[   86.864965][ T6750] netlink: 'syz.0.287': attribute type 4 has an invalid length.
[   86.870420][ T6750] netlink: 32 bytes leftover after parsing attributes in process `syz.0.287'.
[   86.892594][ T6750] netlink: 80 bytes leftover after parsing attributes in process `syz.0.287'.
[   87.333760][ T6778] netlink: 52 bytes leftover after parsing attributes in process `syz.2.293'.
[   88.188481][ T6825] netlink: 8 bytes leftover after parsing attributes in process `syz.2.309'.
[   88.314485][ T6836] Bluetooth: MGMT ver 1.23
[   88.322808][ T6834] syz.2.311 (6834) used obsolete PPPIOCDETACH ioctl
[   88.598009][ T6857] netlink: 20 bytes leftover after parsing attributes in process `syz.2.316'.
[   88.633102][ T6857] netlink: 12 bytes leftover after parsing attributes in process `syz.2.316'.
[   88.645701][ T6012] block nbd64: NBD_DISCONNECT
[   88.743830][ T6865] bridge1: the hash_elasticity option has been deprecated and is always 16
[   88.748520][ T6865] bridge1: entered allmulticast mode
[   88.771610][ T6868] bridge2: the hash_elasticity option has been deprecated and is always 16
[   88.775314][ T6868] bridge2: entered allmulticast mode
[   88.879575][ T6877] tipc: Invalid UDP bearer configuration
[   88.879604][ T6877] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[   89.069291][ T6890] netlink: 220 bytes leftover after parsing attributes in process `syz.1.323'.
[   89.072800][ T6891] netlink: 220 bytes leftover after parsing attributes in process `syz.1.323'.
[   89.382588][ T6915] netlink: 208 bytes leftover after parsing attributes in process `syz.0.329'.
[   89.388464][ T6915] netlink: 208 bytes leftover after parsing attributes in process `syz.0.329'.
[   90.004432][ T6937] netlink: 28 bytes leftover after parsing attributes in process `syz.1.338'.
[   90.141933][ T6952] tipc: Invalid UDP bearer configuration
[   90.141960][ T6952] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[   90.175768][ T6955] tipc: Invalid UDP bearer configuration
[   90.175795][ T6955] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[   90.327261][ T6973] netlink: 12 bytes leftover after parsing attributes in process `syz.2.349'.
[   90.401377][ T6988] netlink: 'syz.0.355': attribute type 1 has an invalid length.
[   90.417527][ T6988] netlink: 'syz.0.355': attribute type 2 has an invalid length.
[   90.834853][   T31] net_ratelimit: 410 callbacks suppressed
[   90.834866][   T31] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   90.843351][   T31] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   90.952787][ T7023] netlink: 'syz.1.364': attribute type 11 has an invalid length.
[   90.971986][ T7023] netlink: 44 bytes leftover after parsing attributes in process `syz.1.364'.
[   91.026952][ T7031] sctp: [Deprecated]: syz.1.365 (pid 7031) Use of struct sctp_assoc_value in delayed_ack socket option.
[   91.026952][ T7031] Use struct sctp_sack_info instead
[   91.161425][ T7050] netlink: 12 bytes leftover after parsing attributes in process `syz.1.368'.
[   91.235257][   T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   91.243194][   T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   91.246244][    T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   91.555013][  T896] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   91.602230][ T7099] netdevsim netdevsim1 netdevsim0: entered promiscuous mode
[   91.606266][ T7100] netlink: 'syz.1.375': attribute type 1 has an invalid length.
[   91.627951][ T7100] 8021q: adding VLAN 0 to HW filter on device bond1
[   91.879817][   T31] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   91.883074][  T896] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   91.901858][ T7144] netlink: 34 bytes leftover after parsing attributes in process `syz.0.379'.
[   92.032829][ T7149] erspan0: entered promiscuous mode
[   92.035387][ T7149] macvlan2: entered allmulticast mode
[   92.037149][ T7149] erspan0: entered allmulticast mode
[   92.348537][ T7165] af_packet: tpacket_rcv: packet too big, clamped from 28 to 4294967272. macoff=96
[   92.525534][ T5079] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   92.528328][    T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   92.528544][ T7175] netlink: 'syz.1.391': attribute type 47 has an invalid length.
[   96.035019][   T31] net_ratelimit: 19 callbacks suppressed
[   96.035044][   T31] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   96.041094][  T896] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   96.755224][   T31] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   96.836293][    T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   97.076761][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   97.080417][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   97.315033][ T5079] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   97.794900][  T896] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   98.116602][  T896] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   98.120230][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  101.235319][ T5695] net_ratelimit: 10 callbacks suppressed
[  101.235343][ T5695] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  101.243217][  T896] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  101.476327][ T5695] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  101.635001][ T5079] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  101.955280][  T896] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  102.275513][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  102.279131][  T896] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  102.754935][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  102.757682][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  102.915133][    T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  104.916384][ T7218] __nla_validate_parse: 3 callbacks suppressed
[  104.916398][ T7218] netlink: 32 bytes leftover after parsing attributes in process `syz.1.400'.
[  104.950413][ T7227] netlink: 'syz.0.402': attribute type 1 has an invalid length.
[  104.952949][ T7227] netlink: 224 bytes leftover after parsing attributes in process `syz.0.402'.
[  105.097790][ T7252] netlink: 8 bytes leftover after parsing attributes in process `syz.0.405'.
[  106.438079][  T896] net_ratelimit: 152 callbacks suppressed
[  106.438095][  T896] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  106.442883][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  107.084985][ T5079] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  107.154846][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  107.475450][ T5695] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  107.479033][   T31] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  107.565001][ T5079] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  107.998195][ T7236] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  108.058634][ T7265] xt_CT: No such helper "syz0"
[  108.064380][ T7265] netlink: 'syz.2.410': attribute type 1 has an invalid length.
[  108.068058][ T7265] netlink: 'syz.2.410': attribute type 2 has an invalid length.
[  108.127346][ T7274] 8021q: VLANs not supported on vcan0
[  108.195159][   T31] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  108.199233][ T7281] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  108.208479][ T7281] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  108.320731][ T7290] netlink: 280 bytes leftover after parsing attributes in process `syz.2.418'.
[  108.603465][ T7312] tipc: Invalid UDP bearer configuration
[  108.603493][ T7312] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  108.631438][ T7312] vlan2: entered promiscuous mode
[  108.633595][ T7312] bond_slave_1: entered promiscuous mode
[  108.730904][ T7319] netlink: 4 bytes leftover after parsing attributes in process `syz.2.429'.
[  108.738815][ T7326] netlink: 48 bytes leftover after parsing attributes in process `syz.0.430'.
[  108.893157][ T7346] netlink: 'syz.2.435': attribute type 11 has an invalid length.
[  108.895900][ T7346] netlink: 44 bytes leftover after parsing attributes in process `syz.2.435'.
[  108.937001][ T7355] netlink: 'syz.0.438': attribute type 28 has an invalid length.
[  109.132967][ T7365] netlink: 44 bytes leftover after parsing attributes in process `syz.2.441'.
[  110.269566][ T7445] netlink: 16 bytes leftover after parsing attributes in process `syz.1.462'.
[  111.636480][ T5695] net_ratelimit: 298 callbacks suppressed
[  111.636499][ T5695] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  111.642321][  T896] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  111.694392][ T7504] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  111.698559][ T7504] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  111.702185][ T7504] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  111.707344][ T7504] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  111.711443][ T7504] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  111.806562][ T7507] netlink: 'syz.1.482': attribute type 3 has an invalid length.
[  111.886587][ T5079] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  112.139931][ T7533] netlink: 196 bytes leftover after parsing attributes in process `syz.1.492'.
[  112.143343][ T7533] openvswitch: netlink: Flow key attr not present in new flow.
[  112.249540][ T7543] netlink: 60 bytes leftover after parsing attributes in process `syz.2.496'.
[  112.304590][ T7547] tipc: Invalid UDP bearer configuration
[  112.304924][ T7547] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  112.322029][ T7547] netlink: 8 bytes leftover after parsing attributes in process `syz.1.499'.
[  112.354919][ T5695] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  112.390023][ T7560] tipc: Invalid UDP bearer configuration
[  112.390051][ T7560] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  112.491029][ T7569] netlink: 60 bytes leftover after parsing attributes in process `syz.1.505'.
[  113.141125][ T7611] netlink: 'syz.1.514': attribute type 1 has an invalid length.
[  113.170526][ T7611] bond2: entered promiscuous mode
[  113.172957][ T7611] 8021q: adding VLAN 0 to HW filter on device bond2
[  113.326715][ T7609] nbd0: detected capacity change from 0 to 63
[  113.414420][ T7618] block nbd0: Receive control failed (result -104)
[  113.416012][   T56] block nbd0: Receive control failed (result -32)
[  113.612517][ T7627] bridge0: port 2(bridge_slave_1) entered disabled state
[  113.616671][ T7627] bridge0: port 1(bridge_slave_0) entered disabled state
[  113.850089][ T7627] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  113.872160][ T7627] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  114.073793][   T13] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  114.078828][   T13] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  114.086671][   T13] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  114.095056][   T13] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  114.221531][ T7668] sctp: [Deprecated]: syz.1.523 (pid 7668) Use of int in max_burst socket option.
[  114.221531][ T7668] Use struct sctp_assoc_value instead
[  114.398944][ T7682] netlink: 48 bytes leftover after parsing attributes in process `syz.0.529'.
[  114.403121][ T7682] bridge_slave_0: left allmulticast mode
[  114.407192][ T7682] bridge_slave_0: left promiscuous mode
[  114.410549][ T7682] bridge0: port 1(bridge_slave_0) entered disabled state
[  114.428864][ T7682] tipc: Failed to remove unknown binding: 66,0,0/0:3792214961/3792214963
[  114.451879][ T7682] tipc: Failed to remove unknown binding: 66,0,0/0:3792214961/3792214962
[  114.467668][ T7682] tipc: Failed to remove unknown binding: 66,0,0/0:3792214961/3792214963
[  114.480230][ T7682] tipc: Failed to remove unknown binding: 66,0,0/0:3792214961/3792214962
[  114.574844][ T7695] syzkaller1: entered promiscuous mode
[  114.576707][ T7695] syzkaller1: entered allmulticast mode
[  114.770926][ T7707] netlink: 60 bytes leftover after parsing attributes in process `syz.2.535'.
[  115.097644][ T7722] bridge_slave_0: left allmulticast mode
[  115.099592][ T7722] bridge_slave_0: left promiscuous mode
[  115.101550][ T7722] bridge0: port 1(bridge_slave_0) entered disabled state
[  115.109999][ T7722] bridge_slave_1: left allmulticast mode
[  115.112308][ T7722] bridge_slave_1: left promiscuous mode
[  115.115034][ T7722] bridge0: port 2(bridge_slave_1) entered disabled state
[  115.128873][ T7722] bond0: (slave bond_slave_0): Releasing backup interface
[  115.141467][ T7722] bond0: (slave bond_slave_1): Releasing backup interface
[  115.141721][ T7729] Cannot find add_set index 2 as target
[  115.163393][ T7722] team_slave_0: left promiscuous mode
[  115.172837][ T7722] team0: Port device team_slave_0 removed
[  115.177341][ T7722] team_slave_1: left promiscuous mode
[  115.189061][ T7722] team0: Port device team_slave_1 removed
[  115.193180][ T7722] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  115.198903][ T7722] batman_adv: batadv0: Removing interface: batadv_slave_0
[  115.205395][ T7722] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  115.208493][ T7722] batman_adv: batadv0: Removing interface: batadv_slave_1
[  115.221895][ T7730] team0: Mode changed to "activebackup"
[  115.618902][ T7769] netlink: 60 bytes leftover after parsing attributes in process `syz.2.549'.
[  115.838026][ T7787] netlink: 340 bytes leftover after parsing attributes in process `syz.1.554'.
[  116.359549][ T7817] netlink: 'syz.2.561': attribute type 11 has an invalid length.
[  116.915804][ T5695] net_ratelimit: 422 callbacks suppressed
[  116.915824][ T5695] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  117.357927][ T7910] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  117.367395][ T7910] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  117.382573][ T7910] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  117.386438][ T7910] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  117.397123][ T7910] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  117.399823][ T7910] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  117.402730][ T7910] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  117.407111][ T7910] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  117.410423][ T7910] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  117.902474][ T7943] syzkaller1: entered promiscuous mode
[  117.905837][ T7943] syzkaller1: entered allmulticast mode
[  118.271552][ T7958] netlink: 100 bytes leftover after parsing attributes in process `syz.0.590'.
[  118.687700][ T7984] IPv6: NLM_F_CREATE should be specified when creating new route
[  118.690774][ T7984] netlink: 12 bytes leftover after parsing attributes in process `syz.2.597'.
[  118.774372][ T7992] x_tables: duplicate underflow at hook 2
[  118.928425][ T8012] syzkaller1: entered promiscuous mode
[  118.930487][ T8012] syzkaller1: entered allmulticast mode
[  119.747856][ T8038] netlink: 24 bytes leftover after parsing attributes in process `syz.0.615'.
[  119.825101][ T8038] netlink: 4 bytes leftover after parsing attributes in process `syz.0.615'.
[  119.890521][ T8052] netlink: 4 bytes leftover after parsing attributes in process `syz.0.615'.
[  120.012427][ T8061] RDS: rds_bind could not find a transport for ::ffff:10.1.1.1, load rds_tcp or rds_rdma?
[  120.132346][ T8071] ip6t_srh: unknown srh match flags  4000
[  120.358797][ T5619] Bluetooth: hci2: link tx timeout
[  120.361744][ T5619] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  120.372915][ T5619] Bluetooth: hci2: link tx timeout
[  120.377143][ T5619] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  120.395851][ T8097] netlink: 148 bytes leftover after parsing attributes in process `syz.2.636'.
[  120.399217][ T8097] netlink: 40 bytes leftover after parsing attributes in process `syz.2.636'.
[  120.442931][ T8109] bridge0: port 3(syz_tun) entered blocking state
[  120.448915][ T8109] bridge0: port 3(syz_tun) entered disabled state
[  120.459996][ T8109] syz_tun: entered allmulticast mode
[  120.464340][ T8109] syz_tun: entered promiscuous mode
[  120.467911][ T8109] bridge0: port 3(syz_tun) entered blocking state
[  120.470133][ T8109] bridge0: port 3(syz_tun) entered forwarding state
[  120.527829][ T8117] tipc: Invalid UDP bearer configuration
[  120.527868][ T8117] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  120.654223][ T8123] netlink: 16 bytes leftover after parsing attributes in process `syz.2.643'.
[  120.660549][ T8128] netlink: 60 bytes leftover after parsing attributes in process `syz.1.645'.
[  120.716594][ T8132] xt_TPROXY: Can be used only with -p tcp or -p udp
[  121.182219][ T8171] netlink: 24 bytes leftover after parsing attributes in process `syz.0.658'.
[  121.222655][ T8176] ip6t_srh: unknown srh match flags  4000
[  121.246821][ T8176] netlink: 28 bytes leftover after parsing attributes in process `syz.1.660'.
[  121.248763][ T8173] tipc: Started in network mode
[  121.252537][ T8173] tipc: Node identity 7781, cluster identity 4711
[  121.256809][ T8173] tipc: Node number set to 30593
[  121.419423][ T8194] netlink: 8 bytes leftover after parsing attributes in process `syz.0.658'.
[  121.488199][ T8199] tipc: Invalid UDP bearer configuration
[  121.488222][ T8199] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  121.547972][ T8199] netlink: 14 bytes leftover after parsing attributes in process `syz.2.666'.
[  121.717989][ T8210] geneve0: entered promiscuous mode
[  121.720066][ T8210] geneve0: entered allmulticast mode
[  121.724018][ T5673] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0
[  121.731982][ T5673] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0
[  121.738144][ T8211] netlink: 24 bytes leftover after parsing attributes in process `syz.1.668'.
[  121.753563][ T8211] netlink: 24 bytes leftover after parsing attributes in process `syz.1.668'.
[  121.757274][ T5673] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0
[  121.763166][ T5673] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0
[  121.806403][ T8214] netlink: 'syz.2.670': attribute type 1 has an invalid length.
[  121.824216][ T8214] bond1: entered promiscuous mode
[  121.826183][ T8214] 8021q: adding VLAN 0 to HW filter on device bond1
[  121.840383][ T8214] macvtap1: entered allmulticast mode
[  121.990395][ T8213] nbd1: detected capacity change from 0 to 63
[  122.009882][   T57] block nbd1: Receive control failed (result -104)
[  122.014592][ T8218] block nbd1: Receive control failed (result -32)
[  122.115303][ T5695] net_ratelimit: 274 callbacks suppressed
[  122.115318][ T5695] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  122.121209][ T7644] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  122.286752][   T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  122.449302][ T5619] Bluetooth: hci2: command 0x0406 tx timeout
[  123.090376][ T7651] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  123.154922][ T5695] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  123.157667][ T7644] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  123.246546][ T7651] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  123.305991][ T8243] 8021q: adding VLAN 0 to HW filter on device bond1
[  123.311011][ T8241] netlink: 108 bytes leftover after parsing attributes in process `syz.2.677'.
[  123.337518][ T8241] netlink: 108 bytes leftover after parsing attributes in process `syz.2.677'.
[  123.414394][ T8254] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  123.426110][ T8254] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  123.435295][ T8254] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  123.444209][ T8256] netlink: 'syz.1.681': attribute type 1 has an invalid length.
[  123.465212][ T8256] bond3: entered promiscuous mode
[  123.468142][ T8256] 8021q: adding VLAN 0 to HW filter on device bond3
[  123.483503][ T8256] 8021q: adding VLAN 0 to HW filter on device bond3
[  123.486332][ T8256] bond3: (slave wireguard0): The slave device specified does not support setting the MAC address
[  123.489580][ T8256] bond3: (slave wireguard0): Setting fail_over_mac to active for active-backup mode
[  123.496555][ T8256] bond3: (slave wireguard0): making interface the new active one
[  123.498980][ T8256] wireguard0: entered promiscuous mode
[  123.501871][ T8256] bond3: (slave wireguard0): Enslaving as an active interface with an up link
[  124.161863][ T8284] netlink: 'syz.1.691': attribute type 83 has an invalid length.
[  124.311837][ T8299] netlink: 'syz.0.695': attribute type 1 has an invalid length.
[  124.532943][ T8305] tipc: Invalid UDP bearer configuration
[  124.532968][ T8305] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  125.156838][ T8383] bridge0: port 3(syz_tun) entered disabled state
[  125.170254][ T8385] netlink: 'syz.2.720': attribute type 13 has an invalid length.
[  125.170543][ T8383] bridge0: port 2(bridge_slave_1) entered disabled state
[  125.175243][ T8383] bridge0: port 1(bridge_slave_0) entered disabled state
[  125.186524][ T8385] netlink: 'syz.2.720': attribute type 17 has an invalid length.
[  125.391964][ T8383] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  125.405623][ T8383] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  125.627459][ T8385] bridge0: port 3(syz_tun) entered blocking state
[  125.630225][ T8385] bridge0: port 3(syz_tun) entered forwarding state
[  125.641543][ T8385] 8021q: adding VLAN 0 to HW filter on device bond0
[  125.650572][ T8385] 8021q: adding VLAN 0 to HW filter on device team0
[  125.658882][ T8385] 8021q: adding VLAN 0 to HW filter on device batadv0
[  125.687308][ T8385] bridge0: port 1(bridge_slave_0) entered blocking state
[  125.689646][ T8385] bridge0: port 1(bridge_slave_0) entered forwarding state
[  125.694505][ T8385] bridge0: port 2(bridge_slave_1) entered blocking state
[  125.696793][ T8385] bridge0: port 2(bridge_slave_1) entered forwarding state
[  125.708436][ T8385] batman_adv: batadv0: Interface activated: batadv_slave_0
[  125.712366][ T8385] batman_adv: batadv0: Interface activated: batadv_slave_1
[  125.721396][ T8385] 8021q: adding VLAN 0 to HW filter on device hsr0
[  125.732606][ T8385] veth1_vlan: left promiscuous mode
[  125.735339][ T8385] veth0_vlan: left promiscuous mode
[  125.737816][ T8385] veth0_vlan: entered promiscuous mode
[  125.742371][ T8385] veth1_vlan: entered promiscuous mode
[  125.748254][ T8385] veth1_macvtap: left promiscuous mode
[  125.750713][ T8385] veth0_macvtap: left promiscuous mode
[  125.753342][ T8385] veth0_macvtap: entered promiscuous mode
[  125.761175][ T8385] veth1_macvtap: entered promiscuous mode
[  125.765745][ T8385] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  125.771144][ T8385] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  125.777357][ T8385] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  125.782731][ T8385] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  125.789314][ T8385] mac80211_hwsim hwsim5 wlan0: entered promiscuous mode
[  125.798572][ T8385] vlan2: left promiscuous mode
[  125.800251][ T8385] bond_slave_1: left promiscuous mode
[  125.803337][ T8385] geneve0: left promiscuous mode
[  125.805152][ T8385] geneve0: left allmulticast mode
[  125.807762][ T8385] bond1: left promiscuous mode
[  125.809557][ T8385] 8021q: adding VLAN 0 to HW filter on device bond1
[  125.812122][ T8385] bond1: entered allmulticast mode
[  125.813938][ T8385] macvtap1: left allmulticast mode
[  125.816294][ T8385] bond1: left allmulticast mode
[  125.818161][ T8385] 8021q: adding VLAN 0 to HW filter on device macvtap1
[  125.831489][ T8389] bridge0: port 2(bridge_slave_1) entered disabled state
[  126.254174][ T8447] __nla_validate_parse: 3 callbacks suppressed
[  126.254207][ T8447] netlink: 16 bytes leftover after parsing attributes in process `syz.2.734'.
[  126.281830][ T8457] netlink: 8 bytes leftover after parsing attributes in process `syz.1.737'.
[  126.316940][ T8462] netlink: 'syz.0.735': attribute type 1 has an invalid length.
[  126.337988][ T8462] bond2: entered promiscuous mode
[  126.340950][ T8462] 8021q: adding VLAN 0 to HW filter on device bond2
[  126.462359][ T8485] dvmrp0: entered allmulticast mode
[  126.467664][ T8452] nbd2: detected capacity change from 0 to 63
[  126.485028][ T8452] netlink: 52 bytes leftover after parsing attributes in process `syz.0.735'.
[  126.639922][ T8218] block nbd2: Receive control failed (result -104)
[  126.642509][   T57] block nbd2: Receive control failed (result -32)
[  126.712342][ T8513] netlink: 8 bytes leftover after parsing attributes in process `syz.1.752'.
[  126.719338][ T8513] netlink: 104 bytes leftover after parsing attributes in process `syz.1.752'.
[  126.820290][ T8522] netlink: 176 bytes leftover after parsing attributes in process `syz.1.755'.
[  126.823156][ T8522] netlink: 'syz.1.755': attribute type 1 has an invalid length.
[  126.846533][ T8520] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  126.857653][ T8520] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  127.057761][ T8545] sctp: [Deprecated]: syz.1.762 (pid 8545) Use of int in maxseg socket option.
[  127.057761][ T8545] Use struct sctp_assoc_value instead
[  127.314934][ T5695] net_ratelimit: 308 callbacks suppressed
[  127.314950][ T5695] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  127.390600][ T8575] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  127.401465][ T8575] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  127.413006][ T8575] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  127.417262][ T8575] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  127.421774][ T8575] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  127.425567][ T8575] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  127.428864][ T8575] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  127.431514][ T8575] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  127.434064][ T8575] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  127.556616][ T8575] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold
[  128.310140][ T8674] netlink: 'syz.2.791': attribute type 21 has an invalid length.
[  129.611339][ T8734] syzkaller0: entered promiscuous mode
[  129.616926][ T8734] syzkaller0: entered allmulticast mode
[  129.809492][ T8755] rdma_op ffff8881bbf521f0 conn xmit_rdma 0000000000000000
[  129.819077][ T8755] netlink: 44 bytes leftover after parsing attributes in process `syz.2.818'.
[  130.250176][ T8785] netlink: 168 bytes leftover after parsing attributes in process `syz.2.829'.
[  130.413900][ T8804] Bluetooth: MGMT ver 1.23
[  130.460920][ T8806] netlink: 'syz.1.836': attribute type 7 has an invalid length.
[  130.463657][ T8806] netlink: 148 bytes leftover after parsing attributes in process `syz.1.836'.
[  130.637963][   T33] audit: type=1800 audit(1778676989.571:2): pid=8807 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.835" name="memory.events" dev="tmpfs" ino=1354 res=0 errno=0
[  130.957596][ T8822] netlink: 3 bytes leftover after parsing attributes in process `syz.2.840'.
[  131.217151][ T8827] tipc: Invalid UDP bearer configuration
[  131.217197][ T8827] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  131.537113][ T8853] netlink: 8 bytes leftover after parsing attributes in process `syz.0.849'.
[  131.546726][ T8853] netlink: 8 bytes leftover after parsing attributes in process `syz.0.849'.
[  131.553458][ T8853] netlink: 8 bytes leftover after parsing attributes in process `syz.0.849'.
[  131.715182][ T8868] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.854'.
[  131.750352][ T8875] netlink: 72 bytes leftover after parsing attributes in process `syz.0.856'.
[  131.839952][ T8882] netlink: 'syz.0.857': attribute type 1 has an invalid length.
[  131.854809][ T8882] bond3: entered promiscuous mode
[  131.856727][ T8882] 8021q: adding VLAN 0 to HW filter on device bond3
[  132.043593][ T8881] nbd3: detected capacity change from 0 to 63
[  132.055349][   T56] block nbd3: Receive control failed (result -32)
[  132.060289][ T7618] block nbd3: Receive control failed (result -32)
[  132.063565][ T7864] block nbd3: Send control failed (result -32)
[  132.067772][ T7864] block nbd3: Request send failed, requeueing
[  132.074776][ T7864] block nbd3: Dead connection, failed to find a fallback
[  132.077314][  T366] block nbd3: Dead connection, failed to find a fallback
[  132.083035][  T366] block nbd3: shutting down sockets
[  132.085152][  T366] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  132.088810][  T366] Buffer I/O error on dev nbd3, logical block 0, async page read
[  132.092080][ T7864] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  132.103274][ T7864] Buffer I/O error on dev nbd3, logical block 1, async page read
[  132.109245][ T7864] I/O error, dev nbd3, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  132.116229][ T7864] Buffer I/O error on dev nbd3, logical block 2, async page read
[  132.124852][ T7864] I/O error, dev nbd3, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  132.127696][ T7864] Buffer I/O error on dev nbd3, logical block 3, async page read
[  132.130152][ T7864] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  132.132912][ T7864] Buffer I/O error on dev nbd3, logical block 0, async page read
[  132.145477][ T7864] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  132.150456][ T7864] Buffer I/O error on dev nbd3, logical block 1, async page read
[  132.158917][ T7864] I/O error, dev nbd3, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  132.161729][ T7864] Buffer I/O error on dev nbd3, logical block 2, async page read
[  132.164209][ T7864] I/O error, dev nbd3, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  132.167352][ T7864] Buffer I/O error on dev nbd3, logical block 3, async page read
[  132.170176][ T7864] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  132.173087][ T7864] Buffer I/O error on dev nbd3, logical block 0, async page read
[  132.175978][ T7864] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  132.178846][ T7864] Buffer I/O error on dev nbd3, logical block 1, async page read
[  132.182586][ T7864] ldm_validate_partition_table(): Disk read failed.
[  132.186170][ T7864] Dev nbd3: unable to read RDB block 0
[  132.188691][ T7864]  nbd3: unable to read partition table
[  132.195590][ T7864] ldm_validate_partition_table(): Disk read failed.
[  132.198994][ T7864] Dev nbd3: unable to read RDB block 0
[  132.201430][ T7864]  nbd3: unable to read partition table
[  132.408675][ T7637] hid-generic 0005:046D:0A0E.0001: item fetching failed at offset 0/1
[  132.416584][ T7637] hid-generic 0005:046D:0A0E.0001: probe with driver hid-generic failed with error -22
[  132.517506][ T5695] net_ratelimit: 437 callbacks suppressed
[  132.517529][ T5695] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  132.657815][ T8942] netlink: 8 bytes leftover after parsing attributes in process `syz.0.872'.
[  132.662283][ T8942] netlink: 'syz.0.872': attribute type 5 has an invalid length.
[  132.665358][ T8942] netlink: 16 bytes leftover after parsing attributes in process `syz.0.872'.
[  132.674222][ T8942] netlink: 4 bytes leftover after parsing attributes in process `syz.0.872'.
[  132.688535][ T8945] netlink: 8 bytes leftover after parsing attributes in process `syz.1.873'.
[  132.692672][ T8945] netlink: 8 bytes leftover after parsing attributes in process `syz.1.873'.
[  132.808667][ T8954] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  132.822030][ T8954] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  132.838827][ T8954] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  132.844253][ T8954] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  132.856934][ T8954] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  132.860715][ T8954] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  132.864200][ T8954] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  132.868448][ T8954] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  132.873216][ T8954] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  132.926318][ T8956] netlink: 'syz.0.877': attribute type 2 has an invalid length.
[  132.928826][ T8956] netlink: 'syz.0.877': attribute type 2 has an invalid length.
[  132.940305][ T8956] macsec1: entered promiscuous mode
[  133.000353][ T8956] tipc: Invalid UDP bearer configuration
[  133.000402][ T8956] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  133.478541][ T8988] xt_hashlimit: max too large, truncated to 1048576
[  133.559845][ T8997] geneve2: entered promiscuous mode
[  137.714885][ T7637] net_ratelimit: 139 callbacks suppressed
[  137.714899][ T7637] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  137.875112][   T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  137.966231][ T1381] ieee802154 phy0 wpan0: encryption failed: -22
[  137.968792][ T1381] ieee802154 phy1 wpan1: encryption failed: -22
[  138.355297][ T7637] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  138.755125][ T7637] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  139.395082][ T7637] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  139.795002][ T7644] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  140.355071][ T5079] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  140.435693][ T7644] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  140.835171][ T7637] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  140.915169][   T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  142.915031][ T5695] net_ratelimit: 3 callbacks suppressed
[  142.915047][ T5695] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  143.405371][ T5079] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  143.555198][ T7644] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  143.717358][   T53] block nbd0: Connection timed out, retrying (0/2 alive)
[  143.721160][   T53] block nbd0: Connection timed out, retrying (0/2 alive)
[  143.723841][   T53] block nbd0: Connection timed out, retrying (0/2 alive)
[  143.726789][   T53] block nbd0: Connection timed out, retrying (0/2 alive)
[  143.730349][   T53] block nbd0: Dead connection, failed to find a fallback
[  143.733247][   T53] block nbd0: shutting down sockets
[  143.735764][   T53] blk_print_req_error: 138 callbacks suppressed
[  143.735774][   T53] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  143.741609][   T53] buffer_io_error: 138 callbacks suppressed
[  143.741618][   T53] Buffer I/O error on dev nbd0, logical block 3, async page read
[  143.747033][   T53] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  143.750447][   T53] Buffer I/O error on dev nbd0, logical block 2, async page read
[  143.753387][   T53] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  143.757053][   T53] Buffer I/O error on dev nbd0, logical block 1, async page read
[  143.761291][   T53] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  143.764886][   T53] Buffer I/O error on dev nbd0, logical block 0, async page read
[  143.769492][ T7229] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  143.773005][ T7229] Buffer I/O error on dev nbd0, logical block 0, async page read
[  143.775725][ T7229] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  143.778579][ T7229] Buffer I/O error on dev nbd0, logical block 1, async page read
[  143.781045][ T7229] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  143.784256][ T7229] Buffer I/O error on dev nbd0, logical block 2, async page read
[  143.787319][ T7229] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  143.790594][ T7229] Buffer I/O error on dev nbd0, logical block 3, async page read
[  143.793353][ T7229] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  143.797115][ T7229] Buffer I/O error on dev nbd0, logical block 0, async page read
[  143.800199][ T7229] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  143.803350][ T7229] Buffer I/O error on dev nbd0, logical block 1, async page read
[  143.807809][ T7229] ldm_validate_partition_table(): Disk read failed.
[  143.810663][ T7229] Dev nbd0: unable to read RDB block 0
[  143.813151][ T7229]  nbd0: unable to read partition table
[  143.817998][ T7229] ldm_validate_partition_table(): Disk read failed.
[  143.821084][ T7229] Dev nbd0: unable to read RDB block 0
[  143.824052][ T7229]  nbd0: unable to read partition table
[  143.955282][ T5695] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  143.955366][   T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  144.356028][ T7644] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  144.361434][   T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  144.996641][ T7644] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  145.006340][   T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  145.395134][ T5695] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  146.910619][ T9081] __nla_validate_parse: 2 callbacks suppressed
[  146.910635][ T9081] netlink: 8 bytes leftover after parsing attributes in process `syz.1.912'.
[  146.917395][ T9081] netlink: 8 bytes leftover after parsing attributes in process `syz.1.912'.
[  147.544133][ T9089] xt_hashlimit: max too large, truncated to 1048576
[  147.633258][ T9098] netlink: 156 bytes leftover after parsing attributes in process `syz.0.918'.
[  147.766767][ T9119] netlink: 8 bytes leftover after parsing attributes in process `syz.1.923'.
[  147.842431][ T9130] netlink: 12 bytes leftover after parsing attributes in process `syz.2.925'.
[  147.850382][ T9130] ip6t_REJECT: ECHOREPLY is not supported
[  147.916701][ T9139] netlink: 68 bytes leftover after parsing attributes in process `syz.2.927'.
[  147.968883][ T9144] syzkaller0: entered promiscuous mode
[  147.971290][ T9144] syzkaller0: entered allmulticast mode
[  147.972974][ T9146] netlink: 'syz.2.930': attribute type 1 has an invalid length.
[  147.980294][ T9146] netlink: 224 bytes leftover after parsing attributes in process `syz.2.930'.
[  148.023128][ T9148] netlink: 'syz.2.931': attribute type 1 has an invalid length.
[  148.040783][ T9148] 8021q: adding VLAN 0 to HW filter on device bond2
[  148.058762][ T9148] bond2: (slave veth5): Enslaving as an active interface with a down link
[  148.066180][ T9148] netlink: 14 bytes leftover after parsing attributes in process `syz.2.931'.
[  148.115606][ T7644] net_ratelimit: 409 callbacks suppressed
[  148.115617][ T7644] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  148.184773][ T9164] netlink: 'syz.2.936': attribute type 1 has an invalid length.
[  148.375568][ T9179] netlink: 4 bytes leftover after parsing attributes in process `syz.1.939'.
[  148.434804][ T9104] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  148.515405][ T7644] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  148.727060][ T9227] netlink: 20 bytes leftover after parsing attributes in process `syz.0.952'.
[  148.741123][ T9229] netlink: 'syz.2.953': attribute type 1 has an invalid length.
[  148.752595][ T9229] bond3: entered promiscuous mode
[  148.754428][ T9229] 8021q: adding VLAN 0 to HW filter on device bond3
[  148.758008][ T9231] bond3: entered allmulticast mode
[  148.763861][ T5653] nci: nci_extract_activation_params_iso_dep: unsupported activation_rf_tech_and_mode 0x80
[  149.164886][ T7644] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  149.475023][   T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  149.475865][ T9211] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  149.558504][ T9251] syzkaller0: entered promiscuous mode
[  149.561104][ T9251] syzkaller0: entered allmulticast mode
[  149.840095][ T9276] syzkaller0: entered promiscuous mode
[  149.844326][ T9276] syzkaller0: entered allmulticast mode
[  150.035586][ T7651] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  150.194840][ T7637] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  150.595466][ T5695] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  150.763303][ T9296] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  150.806070][ T9317] netlink: 'syz.1.974': attribute type 4 has an invalid length.
[  150.996585][ T9336] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  151.005674][ T9336] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  151.008911][ T9338] netlink: 'syz.2.982': attribute type 1 has an invalid length.
[  151.020442][ T9336] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  151.049083][ T9338] bond4: entered promiscuous mode
[  151.052532][ T9338] 8021q: adding VLAN 0 to HW filter on device bond4
[  152.037463][  T366] block nbd1: Connection timed out, retrying (0/2 alive)
[  152.039827][  T366] block nbd1: Connection timed out, retrying (0/2 alive)
[  152.042127][  T366] block nbd1: Connection timed out, retrying (0/2 alive)
[  152.044389][  T366] block nbd1: Connection timed out, retrying (0/2 alive)
[  152.047185][  T366] block nbd1: Dead connection, failed to find a fallback
[  152.049438][  T366] block nbd1: shutting down sockets
[  152.051826][  T366] blk_print_req_error: 138 callbacks suppressed
[  152.051835][  T366] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  152.058428][  T366] buffer_io_error: 138 callbacks suppressed
[  152.058435][  T366] Buffer I/O error on dev nbd1, logical block 3, async page read
[  152.062995][  T366] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  152.066418][  T366] Buffer I/O error on dev nbd1, logical block 2, async page read
[  152.069256][  T366] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  152.072738][  T366] Buffer I/O error on dev nbd1, logical block 1, async page read
[  152.075528][  T366] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  152.078697][  T366] Buffer I/O error on dev nbd1, logical block 0, async page read
[  152.082416][ T7774] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  152.087590][ T7774] Buffer I/O error on dev nbd1, logical block 0, async page read
[  152.090922][ T7774] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  152.094444][ T7774] Buffer I/O error on dev nbd1, logical block 1, async page read
[  152.099519][ T7774] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  152.103373][ T7774] Buffer I/O error on dev nbd1, logical block 2, async page read
[  152.106254][ T7774] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  152.109221][ T7774] Buffer I/O error on dev nbd1, logical block 3, async page read
[  152.112131][ T7774] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  152.115570][ T7774] Buffer I/O error on dev nbd1, logical block 0, async page read
[  152.118724][ T7774] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  152.122125][ T7774] Buffer I/O error on dev nbd1, logical block 1, async page read
[  152.125941][ T7774] ldm_validate_partition_table(): Disk read failed.
[  152.129726][ T7774] Dev nbd1: unable to read RDB block 0
[  152.132678][ T9384] syzkaller0: entered promiscuous mode
[  152.133010][ T7774]  nbd1: unable to read partition table
[  152.139600][ T9384] syzkaller0: entered allmulticast mode
[  152.141442][ T7774] ldm_validate_partition_table(): Disk read failed.
[  152.144997][ T7774] Dev nbd1: unable to read RDB block 0
[  152.147812][ T9384] PF_CAN: dropped non conform CAN FD skbuff: dev type 280, len 65487
[  152.148227][ T7774]  nbd1: unable to read partition table
[  152.159179][ T9384] netlink: 'syz.1.995': attribute type 11 has an invalid length.
[  152.233694][ T9389] __nla_validate_parse: 8 callbacks suppressed
[  152.233703][ T9389] netlink: 12 bytes leftover after parsing attributes in process `syz.2.996'.
[  152.271316][ T9396] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input4
[  152.283581][ T9396] netlink: 8 bytes leftover after parsing attributes in process `syz.2.998'.
[  152.994231][ T9467] netlink: 750 bytes leftover after parsing attributes in process `syz.2.1016'.
[  153.314946][ T7644] net_ratelimit: 147 callbacks suppressed
[  153.314964][ T7644] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  153.474838][ T5695] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  153.967083][ T5079] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  154.193786][ T9498] openvswitch: netlink: Unexpected mask (mask=240040, allowed=10048)
[  154.357789][ T5695] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  154.383200][ T9515] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  154.387224][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  154.393196][ T9515] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  154.398254][ T5673] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  154.403393][ T9515] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  154.424593][ T9518] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1034'.
[  154.551710][ T9538] netdevsim netdevsim0: Direct firmware load for . failed with error -2
[  154.568977][ T9538] netdevsim netdevsim0: Falling back to sysfs fallback for: .
[  154.810417][ T9542] netlink: 'syz.2.1041': attribute type 1 has an invalid length.
[  154.845653][ T9542] bond5: entered promiscuous mode
[  154.855044][ T9542] 8021q: adding VLAN 0 to HW filter on device bond5
[  154.882343][ T9542] 8021q: adding VLAN 0 to HW filter on device bond6
[  154.889694][ T9542] bond5: (slave bond6): making interface the new active one
[  154.892786][ T9542] bond6: entered promiscuous mode
[  154.895963][ T9542] bond5: (slave bond6): Enslaving as an active interface with an up link
[  155.441011][ T9558] netlink: 'syz.1.1044': attribute type 1 has an invalid length.
[  155.451781][ T9558] netlink: 'syz.1.1044': attribute type 3 has an invalid length.
[  155.509558][ T9564] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1046'.
[  155.572812][ T9574] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1049'.
[  155.692068][ T9579] netlink: 248 bytes leftover after parsing attributes in process `syz.2.1051'.
[  156.039647][ T9599] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1055'.
[  156.083123][ T9605] tipc: Invalid UDP bearer configuration
[  156.083147][ T9605] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  156.194868][   T55] Bluetooth: hci2: command 0x0406 tx timeout
[  156.512325][ T9627] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1062'.
[  156.518796][  T366] block nbd2: Connection timed out, retrying (0/2 alive)
[  156.521093][  T366] block nbd2: Connection timed out, retrying (0/2 alive)
[  156.523237][  T366] block nbd2: Connection timed out, retrying (0/2 alive)
[  156.525603][  T366] block nbd2: Connection timed out, retrying (0/2 alive)
[  156.527835][  T366] block nbd2: Dead connection, failed to find a fallback
[  156.529956][  T366] block nbd2: shutting down sockets
[  156.543076][ T7216] ldm_validate_partition_table(): Disk read failed.
[  156.556451][ T7216] Dev nbd2: unable to read RDB block 0
[  156.559231][ T7216]  nbd2: unable to read partition table
[  156.565057][ T7216] ldm_validate_partition_table(): Disk read failed.
[  156.568147][ T7216] Dev nbd2: unable to read RDB block 0
[  156.574429][ T7216]  nbd2: unable to read partition table
[  156.848237][ T9637] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1064'.
[  157.084742][ T9654] syzkaller0: entered promiscuous mode
[  157.086930][ T9654] syzkaller0: entered allmulticast mode
[  157.183975][ T9660] netlink: 'syz.2.1070': attribute type 3 has an invalid length.
[  157.186979][ T9660] netlink: 'syz.2.1070': attribute type 3 has an invalid length.
[  157.483876][ T9687] __nla_validate_parse: 3 callbacks suppressed
[  157.483887][ T9687] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1082'.
[  157.504990][ T9687] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1082'.
[  157.609494][ T9696] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1083'.
[  157.613124][ T9696] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1083'.
[  157.678371][ T9702] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1086'.
[  157.681926][ T9702] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1086'.
[  157.689259][ T9702] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1086'.
[  157.692989][ T9702] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1086'.
[  157.697092][ T9702] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1086'.
[  157.697761][ T9705] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1084'.
[  157.714445][ T9702] 8021q: adding VLAN 0 to HW filter on device bond0
[  157.718116][ T9702] 8021q: adding VLAN 0 to HW filter on device team0
[  157.724570][ T9702] 8021q: adding VLAN 0 to HW filter on device batadv0
[  157.742748][ T9702] batman_adv: batadv0: Interface activated: batadv_slave_0
[  157.747179][ T9702] batman_adv: batadv0: Interface activated: batadv_slave_1
[  157.753253][ T9702] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  157.757113][ T9702] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  157.765200][ T9702] veth1_vlan: left promiscuous mode
[  157.767567][ T9702] veth0_vlan: left promiscuous mode
[  157.769785][ T9702] veth0_vlan: entered promiscuous mode
[  157.773406][ T9702] veth1_vlan: entered promiscuous mode
[  157.779037][ T9702] veth1_macvtap: left promiscuous mode
[  157.781341][ T9702] veth0_macvtap: left promiscuous mode
[  157.783797][ T9702] veth0_macvtap: entered promiscuous mode
[  157.786477][ T9702] veth1_macvtap: entered promiscuous mode
[  157.791758][ T9702] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  157.795411][ T9702] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  157.798666][ T9702] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  157.801524][ T9702] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  157.806575][ T9702] veth3: left promiscuous mode
[  157.809036][ T9702] erspan1: left promiscuous mode
[  157.810991][ T9702] erspan1: left allmulticast mode
[  157.816950][ T9702] bond2: left promiscuous mode
[  157.819052][ T9702] bond3: left promiscuous mode
[  157.834498][ T8502] bridge0: port 2(bridge_slave_1) entered blocking state
[  157.836911][ T8502] bridge0: port 2(bridge_slave_1) entered forwarding state
[  157.876169][   T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  157.879199][   T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  157.884298][   T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  157.891551][   T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  158.065295][   T13] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  158.071128][   T13] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  158.094932][ T5695] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  158.190363][ T9755] netlink: 'syz.1.1098': attribute type 2 has an invalid length.
[  158.201013][ T9751] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  158.225933][ T9751] syzkaller0: entered promiscuous mode
[  158.229069][ T9751] syzkaller0: entered allmulticast mode
[  158.232744][ T9751] tipc: Resetting bearer <eth:syzkaller0>
[  158.234880][ T9759] netlink: 'syz.1.1100': attribute type 1 has an invalid length.
[  158.239189][ T9756] syzkaller0: entered promiscuous mode
[  158.241682][ T9756] syzkaller0: entered allmulticast mode
[  158.272890][ T9759] bond4: entered promiscuous mode
[  158.275306][ T9759] 8021q: adding VLAN 0 to HW filter on device bond4
[  158.291346][ T9748] tipc: Resetting bearer <eth:syzkaller0>
[  158.345157][ T5695] net_ratelimit: 176 callbacks suppressed
[  158.345169][ T5695] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  158.356253][ T5695] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  158.437372][ T5695] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  158.515828][ T5695] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  158.519495][ T7637] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  158.594948][   T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  158.995966][ T7637] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  159.165303][   T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  159.250266][ T9748] tipc: Disabling bearer <eth:syzkaller0>
[  159.269950][ T9767] bond4: (slave bridge4): making interface the new active one
[  159.273239][ T9767] bridge4: entered promiscuous mode
[  159.277687][ T9767] bond4: (slave bridge4): Enslaving as an active interface with an up link
[  159.313435][ T5673] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  159.323264][ T9772] netlink: 'syz.1.1101': attribute type 1 has an invalid length.
[  159.324589][ T5673] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  159.325802][ T9772] netlink: 'syz.1.1101': attribute type 4 has an invalid length.
[  159.342556][ T5673] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  159.478057][   T55] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[  159.483259][ T7637] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  159.970488][ T9828] netlink: 'syz.1.1112': attribute type 4 has an invalid length.
[  160.126966][ T9838] RDS: rds_bind could not find a transport for ::ffff:100.1.1.1, load rds_tcp or rds_rdma?
[  160.780520][ T9869] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[  160.848493][ T9871] ip6t_srh: unknown srh match flags  4000
[  161.142290][ T9895] bridge1: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms)
[  161.164462][ T9895] syzkaller0: entered promiscuous mode
[  161.169304][ T9895] syzkaller0: entered allmulticast mode
[  161.502057][ T9925] ieee802154 phy0 wpan0: encryption failed: -22
[  161.507589][ T9914] ieee802154 phy0 wpan0: encryption failed: -22
[  161.700484][ T9942] xt_hashlimit: size too large, truncated to 1048576
[  161.703872][ T9941] syzkaller0: entered promiscuous mode
[  161.707901][ T9941] syzkaller0: entered allmulticast mode
[  161.727620][ T9941] tipc: Started in network mode
[  161.729931][ T9941] tipc: Node identity 2279595ab46, cluster identity 4711
[  161.733369][ T9941] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  161.750889][ T9940] tipc: Resetting bearer <eth:syzkaller0>
[  161.782202][ T9940] tipc: Disabling bearer <eth:syzkaller0>
[  161.874901][    C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  162.323144][ T9998] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  162.331317][ T9998] syzkaller0: entered promiscuous mode
[  162.333610][ T9998] syzkaller0: entered allmulticast mode
[  162.351624][ T9998] tipc: Resetting bearer <eth:syzkaller0>
[  162.365593][ T9997] tipc: Resetting bearer <eth:syzkaller0>
[  162.376034][ T9997] tipc: Disabling bearer <eth:syzkaller0>
[  162.477490][T10010] IPVS: set_ctl: invalid protocol: 92 172.20.20.52:20002
[  163.494166][T10022] netlink: 'syz.1.1168': attribute type 1 has an invalid length.
[  163.507559][T10022] __nla_validate_parse: 86 callbacks suppressed
[  163.507571][T10022] netlink: 13 bytes leftover after parsing attributes in process `syz.1.1168'.
[  163.559015][   T89] net_ratelimit: 37 callbacks suppressed
[  163.559029][   T89] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  163.559972][   T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  163.575407][T10028] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1170'.
[  163.635383][ T5695] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  163.715590][ T5695] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  163.739584][T10053] netlink: 'syz.1.1177': attribute type 7 has an invalid length.
[  163.868057][T10065] tipc: Invalid UDP bearer configuration
[  163.868084][T10065] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  163.959146][T10075] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  163.972121][T10075] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  163.996147][T10075] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  164.001378][T10075] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  164.009951][T10079] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  164.021259][T10079] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  164.169456][T10089] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1188'.
[  164.180043][T10088] netlink: 'syz.1.1184': attribute type 8 has an invalid length.
[  164.187310][T10088] sch_fq: defrate 0 ignored.
[  165.599344][T10125] syzkaller0: entered promiscuous mode
[  165.604345][T10125] syzkaller0: entered allmulticast mode
[  165.711306][T10141] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1206'.
[  165.753575][T10141] syzkaller0: entered promiscuous mode
[  165.755959][T10141] syzkaller0: entered allmulticast mode
[  165.761193][T10148] x_tables: duplicate underflow at hook 1
[  165.979156][T10182] batadv_slave_0: entered promiscuous mode
[  165.981492][T10182] tipc: Invalid UDP bearer configuration
[  165.981512][T10182] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  166.053405][T10182] netlink: 232 bytes leftover after parsing attributes in process `syz.2.1218'.
[  166.061180][T10181] batadv_slave_0: left promiscuous mode
[  166.208074][T10212] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1225'.
[  166.499720][T10238] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1230'.
[  168.273536][T10289] IPVS: set_ctl: invalid protocol: 44 172.20.20.187:20001
[  168.505613][T10297] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1246'.
[  168.598849][T10301] net_ratelimit: 168 callbacks suppressed
[  168.598860][T10301] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0)
[  168.606720][T10301] veth0: entered promiscuous mode
[  168.608661][T10301] bond0: entered promiscuous mode
[  168.610314][T10301] bond_slave_0: entered promiscuous mode
[  168.612200][T10301] bond_slave_1: entered promiscuous mode
[  168.614521][T10300] bond0: left promiscuous mode
[  168.626019][T10300] bond_slave_0: left promiscuous mode
[  168.632203][T10300] bond_slave_1: left promiscuous mode
[  168.636572][T10300] veth0: left promiscuous mode
[  168.678700][   T89] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  168.713326][T10313] tipc: Invalid UDP bearer configuration
[  168.713353][T10313] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  168.780094][T10323] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0)
[  168.846438][ T5695] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  168.915355][ T7637] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  168.950869][T10327] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  168.959166][T10327] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  168.970897][T10327] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  168.974505][T10327] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  168.980639][T10327] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  169.011160][T10333] netlink: 168 bytes leftover after parsing attributes in process `syz.0.1260'.
[  169.253001][T10352] netlink: 'syz.0.1265': attribute type 1 has an invalid length.
[  169.278191][T10352] bond4: entered promiscuous mode
[  169.280375][T10352] 8021q: adding VLAN 0 to HW filter on device bond4
[  169.312590][T10356] netlink: 'syz.2.1266': attribute type 4 has an invalid length.
[  169.443005][T10365] can: request_module (can-proto-0) failed.
[  169.449259][T10365] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1268'.
[  169.462174][T10365] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1268'.
[  169.563385][T10371] tipc: Invalid UDP bearer configuration
[  169.563410][T10371] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  169.669601][T10379] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1273'.
[  169.679096][T10379] veth1_macvtap: left promiscuous mode
[  169.954919][    C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  170.064487][T10391] sctp: [Deprecated]: syz.0.1276 (pid 10391) Use of struct sctp_assoc_value in delayed_ack socket option.
[  170.064487][T10391] Use struct sctp_sack_info instead
[  170.754328][T10403] block nbd0: reconnected socket
[  170.756975][T10403] nbd: socks must be embedded in a SOCK_ITEM attr
[  170.761755][ T8218] block nbd0: Receive control failed (result -32)
[  172.117431][T10476] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1302'.
[  172.402743][T10514] syzkaller0: entered promiscuous mode
[  172.408543][T10514] syzkaller0: entered allmulticast mode
[  172.507421][T10520] 
[  172.508232][T10520] ======================================================
[  172.510728][T10520] WARNING: possible circular locking dependency detected
[  172.512992][T10520] syzkaller #0 Not tainted
[  172.514590][T10520] ------------------------------------------------------
[  172.516863][T10520] syz.0.1315/10520 is trying to acquire lock:
[  172.518945][T10520] ffffffff8ea85520 (fs_reclaim){+.+.}-{0:0}, at: kmem_cache_alloc_lru_noprof+0x45/0x640
[  172.521996][T10520] 
[  172.521996][T10520] but task is already holding lock:
[  172.524231][T10520] ffff8881012d7980 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_iop_lookup+0x5f/0x320
[  172.527070][T10520] 
[  172.527070][T10520] which lock already depends on the new lock.
[  172.527070][T10520] 
[  172.530151][T10520] 
[  172.530151][T10520] the existing dependency chain (in reverse order) is:
[  172.532863][T10520] 
[  172.532863][T10520] -> #8 (&root->kernfs_rwsem){++++}-{4:4}:
[  172.535261][T10520]        down_write+0x96/0x200
[  172.536850][T10520]        kernfs_add_one+0x41/0x5c0
[  172.538701][T10520]        kernfs_create_dir_ns+0xde/0x130
[  172.540601][T10520]        internal_create_group+0x425/0x1180
[  172.542402][T10520]        cpuhp_invoke_callback+0x445/0x860
[  172.544148][T10520]        cpuhp_issue_call+0x430/0x7a0
[  172.546063][T10520]        __cpuhp_setup_state_cpuslocked+0x3d9/0x6b0
[  172.548459][T10520]        __cpuhp_setup_state+0x3f/0x60
[  172.550440][T10520]        do_one_initcall+0x250/0x870
[  172.552371][T10520]        do_initcall_level+0x104/0x190
[  172.554101][T10520]        do_initcalls+0x59/0xa0
[  172.555651][T10520]        kernel_init_freeable+0x2a6/0x3e0
[  172.557435][T10520]        kernel_init+0x1d/0x1d0
[  172.558965][T10520]        ret_from_fork+0x514/0xb70
[  172.560534][T10520]        ret_from_fork_asm+0x1a/0x30
[  172.562156][T10520] 
[  172.562156][T10520] -> #7 (cpuhp_state_mutex){+.+.}-{4:4}:
[  172.564526][T10520] 
[  172.564526][T10520] -> #6 (cpu_hotplug_lock){++++}-{0:0}:
[  172.566970][T10520]        cpus_read_lock+0x42/0x160
[  172.568555][T10520]        static_key_slow_inc+0x12/0x30
[  172.570259][T10520]        nbd_genl_reconfigure+0x132f/0x1ea0
[  172.572241][T10520]        genl_family_rcv_msg_doit+0x22a/0x330
[  172.574461][T10520]        genl_rcv_msg+0x61c/0x7a0
[  172.576205][T10520]        netlink_rcv_skb+0x232/0x4b0
[  172.578083][T10520]        genl_rcv+0x28/0x40
[  172.579497][T10520]        netlink_unicast+0x75c/0x8e0
[  172.581192][T10520]        netlink_sendmsg+0x813/0xb40
[  172.583081][T10520]        ____sys_sendmsg+0x972/0x9f0
[  172.584919][T10520]        ___sys_sendmsg+0x2a5/0x360
[  172.586757][T10520]        __x64_sys_sendmsg+0x1bd/0x2a0
[  172.588536][T10520]        do_syscall_64+0x15f/0xf80
[  172.590304][T10520]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  172.592671][T10520] 
[  172.592671][T10520] -> #5 (&nsock->tx_lock){+.+.}-{4:4}:
[  172.595230][T10520]        __mutex_lock+0x1a3/0x1550
[  172.597040][T10520]        nbd_queue_rq+0x37b/0x1100
[  172.598835][T10520]        blk_mq_dispatch_rq_list+0xa70/0x1910
[  172.600866][T10520]        __blk_mq_sched_dispatch_requests+0xdcc/0x1600
[  172.603148][T10520]        blk_mq_sched_dispatch_requests+0xd7/0x190
[  172.605363][T10520]        blk_mq_run_hw_queue+0x348/0x4f0
[  172.607101][T10520]        blk_mq_dispatch_list+0xd16/0xe10
[  172.608834][T10520]        blk_mq_flush_plug_list+0x48d/0x570
[  172.610662][T10520]        __blk_flush_plug+0x3ed/0x4d0
[  172.612314][T10520]        __submit_bio+0x28d/0x580
[  172.613853][T10520]        submit_bio_noacct_nocheck+0x2f4/0xa40
[  172.615726][T10520]        block_read_full_folio+0x599/0x830
[  172.617506][T10520]        filemap_read_folio+0x137/0x3b0
[  172.619194][T10520]        do_read_cache_folio+0x358/0x590
[  172.620921][T10520]        read_part_sector+0xb6/0x2b0
[  172.622532][T10520]        adfspart_check_ICS+0xb1/0x960
[  172.624176][T10520]        bdev_disk_changed+0x817/0x1770
[  172.625871][T10520]        blkdev_get_whole+0x380/0x510
[  172.627493][T10520]        bdev_open+0x31e/0xd30
[  172.628937][T10520]        blkdev_open+0x470/0x610
[  172.630419][T10520]        do_dentry_open+0x785/0x14e0
[  172.632018][T10520]        vfs_open+0x3b/0x340
[  172.633433][T10520]        path_openat+0x2e08/0x3860
[  172.635013][T10520]        do_file_open+0x23e/0x4a0
[  172.636548][T10520]        do_sys_openat2+0x113/0x200
[  172.638122][T10520]        __x64_sys_openat+0x138/0x170
[  172.639716][T10520]        do_syscall_64+0x15f/0xf80
[  172.641241][T10520]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  172.643173][T10520] 
[  172.643173][T10520] -> #4 (&cmd->lock){+.+.}-{4:4}:
[  172.645331][T10520]        __mutex_lock+0x1a3/0x1550
[  172.646887][T10520]        nbd_queue_rq+0xc6/0x1100
[  172.648397][T10520]        blk_mq_dispatch_rq_list+0xa70/0x1910
[  172.650219][T10520]        __blk_mq_sched_dispatch_requests+0xdcc/0x1600
[  172.652278][T10520]        blk_mq_sched_dispatch_requests+0xd7/0x190
[  172.654255][T10520]        blk_mq_run_hw_queue+0x348/0x4f0
[  172.655959][T10520]        blk_mq_dispatch_list+0xd16/0xe10
[  172.657642][T10520]        blk_mq_flush_plug_list+0x48d/0x570
[  172.659373][T10520]        __blk_flush_plug+0x3ed/0x4d0
[  172.661092][T10520]        __submit_bio+0x28d/0x580
[  172.662811][T10520]        submit_bio_noacct_nocheck+0x2f4/0xa40
[  172.664662][T10520]        block_read_full_folio+0x599/0x830
[  172.666605][T10520]        filemap_read_folio+0x137/0x3b0
[  172.668311][T10520]        do_read_cache_folio+0x358/0x590
[  172.670071][T10520]        read_part_sector+0xb6/0x2b0
[  172.671965][T10520]        adfspart_check_ICS+0xb1/0x960
[  172.673854][T10520]        bdev_disk_changed+0x817/0x1770
[  172.675673][T10520]        blkdev_get_whole+0x380/0x510
[  172.677555][T10520]        bdev_open+0x31e/0xd30
[  172.679300][T10520]        blkdev_open+0x470/0x610
[  172.681215][T10520]        do_dentry_open+0x785/0x14e0
[  172.683051][T10520]        vfs_open+0x3b/0x340
[  172.684605][T10520]        path_openat+0x2e08/0x3860
[  172.686419][T10520]        do_file_open+0x23e/0x4a0
[  172.688240][T10520]        do_sys_openat2+0x113/0x200
[  172.690182][T10520]        __x64_sys_openat+0x138/0x170
[  172.691948][T10520]        do_syscall_64+0x15f/0xf80
[  172.693784][T10520]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  172.696030][T10520] 
[  172.696030][T10520] -> #3 (set->srcu){.+.+}-{0:0}:
[  172.698515][T10520]        __synchronize_srcu+0xca/0x300
[  172.700446][T10520]        elevator_switch+0x1e8/0x7a0
[  172.702418][T10520]        elevator_change+0x2cc/0x450
[  172.704367][T10520]        elevator_set_default+0x36c/0x430
[  172.706288][T10520]        blk_register_queue+0x3e9/0x4e0
[  172.708228][T10520]        __add_disk+0x677/0xd50
[  172.709797][T10520]        add_disk_fwnode+0xfb/0x480
[  172.711331][T10520]        nbd_dev_add+0x72c/0xb50
[  172.712802][T10520]        nbd_init+0x168/0x1f0
[  172.714212][T10520]        do_one_initcall+0x250/0x870
[  172.716065][T10520]        do_initcall_level+0x104/0x190
[  172.718109][T10520]        do_initcalls+0x59/0xa0
[  172.719836][T10520]        kernel_init_freeable+0x2a6/0x3e0
[  172.721991][T10520]        kernel_init+0x1d/0x1d0
[  172.723656][T10520]        ret_from_fork+0x514/0xb70
[  172.725397][T10520]        ret_from_fork_asm+0x1a/0x30
[  172.727150][T10520] 
[  172.727150][T10520] -> #2 (&q->elevator_lock){+.+.}-{4:4}:
[  172.729438][T10520]        __mutex_lock+0x1a3/0x1550
[  172.731014][T10520]        elevator_change+0x1b3/0x450
[  172.732597][T10520]        elevator_set_none+0xb5/0x140
[  172.734212][T10520]        blk_mq_update_nr_hw_queues+0x5e7/0x1a60
[  172.736135][T10520]        nbd_start_device+0x17f/0xb10
[  172.737715][T10520]        nbd_genl_connect+0x165b/0x1cf0
[  172.739390][T10520]        genl_family_rcv_msg_doit+0x22a/0x330
[  172.741193][T10520]        genl_rcv_msg+0x61c/0x7a0
[  172.742692][T10520]        netlink_rcv_skb+0x232/0x4b0
[  172.744255][T10520]        genl_rcv+0x28/0x40
[  172.745637][T10520]        netlink_unicast+0x75c/0x8e0
[  172.747218][T10520]        netlink_sendmsg+0x813/0xb40
[  172.748827][T10520]        ____sys_sendmsg+0x972/0x9f0
[  172.750436][T10520]        ___sys_sendmsg+0x2a5/0x360
[  172.752022][T10520]        __x64_sys_sendmsg+0x1bd/0x2a0
[  172.753691][T10520]        do_syscall_64+0x15f/0xf80
[  172.755251][T10520]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  172.757149][T10520] 
[  172.757149][T10520] -> #1 (&q->q_usage_counter(io)#49){++++}-{0:0}:
[  172.759729][T10520]        blk_alloc_queue+0x546/0x680
[  172.761339][T10520]        __blk_mq_alloc_disk+0x197/0x390
[  172.763051][T10520]        nbd_dev_add+0x499/0xb50
[  172.764555][T10520]        nbd_init+0x168/0x1f0
[  172.766005][T10520]        do_one_initcall+0x250/0x870
[  172.767585][T10520]        do_initcall_level+0x104/0x190
[  172.769228][T10520]        do_initcalls+0x59/0xa0
[  172.770715][T10520]        kernel_init_freeable+0x2a6/0x3e0
[  172.772465][T10520]        kernel_init+0x1d/0x1d0
[  172.773969][T10520]        ret_from_fork+0x514/0xb70
[  172.775512][T10520]        ret_from_fork_asm+0x1a/0x30
[  172.777128][T10520] 
[  172.777128][T10520] -> #0 (fs_reclaim){+.+.}-{0:0}:
[  172.779316][T10520]        __lock_acquire+0x15a5/0x2cf0
[  172.780959][T10520]        lock_acquire+0x106/0x350
[  172.782502][T10520]        fs_reclaim_acquire+0x71/0x100
[  172.784133][T10520]        kmem_cache_alloc_lru_noprof+0x45/0x640
[  172.785973][T10520]        alloc_inode+0xb8/0x1b0
[  172.787424][T10520]        iget_locked+0x131/0x6a0
[  172.788897][T10520]        kernfs_get_inode+0x4f/0x780
[  172.790524][T10520]        kernfs_iop_lookup+0x1fe/0x320
[  172.792159][T10520]        lookup_one_qstr_excl+0x12d/0x360
[  172.793916][T10520]        filename_create+0x20e/0x370
[  172.795497][T10520]        filename_mkdirat+0xd2/0x510
[  172.797126][T10520]        __se_sys_mkdirat+0x35/0x150
[  172.798753][T10520]        do_syscall_64+0x15f/0xf80
[  172.800320][T10520]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  172.802252][T10520] 
[  172.802252][T10520] other info that might help us debug this:
[  172.802252][T10520] 
[  172.805288][T10520] Chain exists of:
[  172.805288][T10520]   fs_reclaim --> cpuhp_state_mutex --> &root->kernfs_rwsem
[  172.805288][T10520] 
[  172.809157][T10520]  Possible unsafe locking scenario:
[  172.809157][T10520] 
[  172.811360][T10520]        CPU0                    CPU1
[  172.812979][T10520]        ----                    ----
[  172.814605][T10520]   rlock(&root->kernfs_rwsem);
[  172.816097][T10520]                                lock(cpuhp_state_mutex);
[  172.818177][T10520]                                lock(&root->kernfs_rwsem);
[  172.820339][T10520]   lock(fs_reclaim);
[  172.821511][T10520] 
[  172.821511][T10520]  *** DEADLOCK ***
[  172.821511][T10520] 
[  172.824018][T10520] 3 locks held by syz.0.1315/10520:
[  172.825582][T10520]  #0: ffff88816f66a410 (sb_writers#9){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90
[  172.828362][T10520]  #1: ffff888112b6b5d8 (&type->i_mutex_dir_key#6/1){+.+.}-{4:4}, at: filename_create+0x200/0x370
[  172.831555][T10520]  #2: ffff8881012d7980 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_iop_lookup+0x5f/0x320
[  172.834603][T10520] 
[  172.834603][T10520] stack backtrace:
[  172.836365][T10520] CPU: 1 UID: 0 PID: 10520 Comm: syz.0.1315 Not tainted syzkaller #0 PREEMPT(full) 
[  172.836376][T10520] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  172.836385][T10520] Call Trace:
[  172.836390][T10520]  <TASK>
[  172.836395][T10520]  dump_stack_lvl+0xe8/0x150
[  172.836405][T10520]  print_circular_bug+0x2e1/0x300
[  172.836416][T10520]  check_noncircular+0x12e/0x150
[  172.836426][T10520]  __lock_acquire+0x15a5/0x2cf0
[  172.836436][T10520]  ? percpu_ref_get_many+0x19/0x140
[  172.836450][T10520]  ? kmem_cache_alloc_lru_noprof+0x45/0x640
[  172.836460][T10520]  lock_acquire+0x106/0x350
[  172.836468][T10520]  ? kmem_cache_alloc_lru_noprof+0x45/0x640
[  172.836478][T10520]  ? find_inode_fast+0xd2/0x550
[  172.836488][T10520]  ? alloc_inode+0xb8/0x1b0
[  172.836496][T10520]  fs_reclaim_acquire+0x71/0x100
[  172.836507][T10520]  ? kmem_cache_alloc_lru_noprof+0x45/0x640
[  172.836516][T10520]  kmem_cache_alloc_lru_noprof+0x45/0x640
[  172.836527][T10520]  alloc_inode+0xb8/0x1b0
[  172.836535][T10520]  iget_locked+0x131/0x6a0
[  172.836545][T10520]  kernfs_get_inode+0x4f/0x780
[  172.836555][T10520]  kernfs_iop_lookup+0x1fe/0x320
[  172.836566][T10520]  lookup_one_qstr_excl+0x12d/0x360
[  172.836576][T10520]  filename_create+0x20e/0x370
[  172.836587][T10520]  ? __pfx_filename_create+0x10/0x10
[  172.836598][T10520]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  172.836606][T10520]  filename_mkdirat+0xd2/0x510
[  172.836639][T10520]  ? __pfx_filename_mkdirat+0x10/0x10
[  172.836652][T10520]  ? do_getname+0x151/0x250
[  172.836659][T10520]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  172.836667][T10520]  __se_sys_mkdirat+0x35/0x150
[  172.836678][T10520]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  172.836685][T10520]  do_syscall_64+0x15f/0xf80
[  172.836697][T10520]  ? trace_irq_disable+0x3b/0x140
[  172.836708][T10520]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  172.836716][T10520] RIP: 0033:0x7fe22119cdd9
[  172.836725][T10520] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  172.836732][T10520] RSP: 002b:00007fe222103028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102
[  172.836741][T10520] RAX: ffffffffffffffda RBX: 00007fe221415fa0 RCX: 00007fe22119cdd9
[  172.836746][T10520] RDX: 00000000000001ff RSI: 0000200000000000 RDI: ffffffffffffff9c
[  172.836752][T10520] RBP: 00007fe221232d69 R08: 0000000000000000 R09: 0000000000000000
[  172.836757][T10520] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  172.836761][T10520] R13: 00007fe221416038 R14: 00007fe221415fa0 R15: 00007ffcfd1e20e8
[  172.836769][T10520]  </TASK>
[  173.795125][ T7651] net_ratelimit: 156 callbacks suppressed
[  173.795142][ T7651] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  173.799775][ T5079] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  174.035285][ T5695] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  174.115306][   T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  174.118484][ T5695] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  174.355187][   T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  174.435113][   T52] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  175.075280][ T1019] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  175.078552][ T5695] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  175.081909][ T7637] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  179.234880][ T7637] net_ratelimit: 10 callbacks suppressed
[  179.234897][ T7637] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  179.315024][ T7637] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  179.875194][   T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  180.115311][   T52] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  180.195772][   T52] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  180.205038][ T7644] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  180.276144][ T7637] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  180.355136][ T5695] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  180.435114][   T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  181.315962][ T5695] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
