last executing test programs:

3.116887006s ago: executing program 0 (id=3716):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x1, 0x2, 0x0)
setsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000180)={0x77359400}, 0x10)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r2, &(0x7f0000000180), &(0x7f00000000c0)=@tcp6=r1}, 0x20)
recvmmsg(r1, &(0x7f0000000a00)=[{{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f00000005c0)=""/5, 0x5}], 0x1}}], 0x2, 0x0, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001940)=@newtaction={0x48, 0x30, 0x871a15abc695fa3d, 0xfffffffd, 0x0, {}, [{0x34, 0x1, [@m_pedit={0x30, 0x1, 0x0, 0x0, {{0xa}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000010}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x6, 0x5, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x23}, [@ldst={0x1, 0x0, 0x3, 0x1, 0x1, 0x8}, @call={0x85, 0x0, 0x0, 0xc8}]}, &(0x7f0000000140)='GPL\x00', 0x10000002, 0x0, 0x0, 0x41100, 0x6f, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xf}, 0x94)
ioctl$XFS_IOC_FD_TO_HANDLE(r0, 0xc038586a, &(0x7f0000000100)={r0, &(0x7f0000000000)='\x00', 0x200800, &(0x7f0000000040)={@_ha_fsid={[0x3, 0x3]}, {0xb0, 0xfff, 0x3, 0x3}}, 0x8, &(0x7f0000000080)={@_ha_fsid}, &(0x7f00000000c0)=0xb})

2.851285137s ago: executing program 1 (id=3718):
r0 = socket$kcm(0x2, 0x200000000000001, 0x0)
sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0, 0xffffffffffffff19}, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x16, 0x20, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000007000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000180100002020737200000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)
setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f0000000100)=r1, 0x4)
sendmsg$inet(r0, &(0x7f0000002b00)={0x0, 0x0, 0x0}, 0x4040)
socket$kcm(0x2, 0x200000000000001, 0x0) (async)
sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0, 0xffffffffffffff19}, 0x0) (async)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) (async)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x16, 0x20, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000007000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000180100002020737200000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) (async)
setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f0000000100)=r1, 0x4) (async)
sendmsg$inet(r0, &(0x7f0000002b00)={0x0, 0x0, 0x0}, 0x4040) (async)

2.828140882s ago: executing program 4 (id=3719):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a000000050000000300000004"], 0x48)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
close(0x3)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x5, 0x4, 0x4, 0xf, 0x0, 0x1}, 0x50)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000003000000850000008600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000cc0)={r4}, 0xc)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000004700)={'team0\x00', <r5=>0x0})
r6 = socket$netlink(0x10, 0x3, 0x10)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00')
sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x20000000)
socket(0x2, 0x80805, 0x0)
sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
r7 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r7, &(0x7f00000002c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha384\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, 0x0, 0x0)
r8 = accept$alg(r7, 0x0, 0x0)
recvmmsg(r8, &(0x7f0000000a00)=[{{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f00000028c0)=""/4071, 0xff7}], 0x1}, 0x6}], 0x400000000000294, 0x2101, 0x0)
r9 = socket$inet6_sctp(0xa, 0x5, 0x84)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={0x14, 0x2e, 0x9, 0x70bd27, 0x0, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x42804}, 0x0)
shutdown(r9, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f0000000200)={<r11=>0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e21, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r9, 0x84, 0x7a, &(0x7f0000000340)={r11, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84)
bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbff, 0x4}, 0xc)
sendmsg$TEAM_CMD_OPTIONS_SET(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="10010000", @ANYRES16=r1, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32=r5, @ANYBLOB="f400028061000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000500030003000000080004"], 0x110}, 0x1, 0x0, 0x0, 0x4000401}, 0x2404c080)

2.722310073s ago: executing program 3 (id=3720):
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, 0x0, &(0x7f0000000200))
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="020000000400000008d7460001"], 0x48)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000900)={{r0}, &(0x7f0000000880), &(0x7f00000008c0)='%-5lx  \x00'}, 0x20)
r1 = socket$kcm(0xa, 0x2, 0x3a)
socket$inet6_tcp(0xa, 0x1, 0x0)
shutdown(r1, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x17, 0x6c}, [@ldst={0x6}]}, &(0x7f0000000080)='GPL\x00', 0x4, 0x3e0, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x76}, 0x48)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_queued_recursive\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0)
r4 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r4, 0x107, 0xe, &(0x7f0000000080)=0xd938, 0x4)
mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x0)
sendmsg$NFT_BATCH(r2, 0x0, 0x20000890)
sendmsg$kcm(r1, &(0x7f0000000440)={&(0x7f0000000800)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, &(0x7f0000000c00)=[{&(0x7f0000000780)="80005b020eaa4da2", 0xfdef}], 0x1, 0x0, 0x0, 0x900}, 0x0)
r5 = socket$inet6(0x10, 0x3, 0x0)
sendto$inet6(r5, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0)
r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0)
ioctl$PPPIOCNEWUNIT(r6, 0xc004743e, &(0x7f0000000140))
recvfrom$inet6(r5, 0x0, 0x0, 0x2000, 0x0, 0x0)
write$cgroup_subtree(r2, &(0x7f0000000000)={[{0x2b, 'net'}, {0x2b, 'devices'}, {0x2d, 'net'}, {0x2b, 'cpu'}, {0x2d, 'memory'}]}, 0x20)

2.650859739s ago: executing program 1 (id=3722):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000240)={'veth0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000980)=@newqdisc={0x64, 0x24, 0x4ee4e6a52ff56561, 0x2, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0xffff, 0xffff}, {0xfff3}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x36, 0x2, 0x7}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x4, 0xff, 0x8, 0x0, 0x5, 0x8}}, {0x4}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x40000}, 0x4040010)
r5 = socket$unix(0x1, 0x1, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000c80)=@delchain={0x200, 0x65, 0x300, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x2, 0xfff1}, {0x0, 0x1}, {0xd}}, [@TCA_RATE={0x6, 0x5, {0xb, 0x40}}, @filter_kind_options=@f_basic={{0xa}, {0x1c8, 0x2, [@TCA_BASIC_ACT={0x1c4, 0x3, [@m_sample={0x90, 0x17, 0x0, 0x0, {{0xb}, {0x14, 0x2, 0x0, 0x1, [@TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x5}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x1ff}]}, {0x53, 0x6, "b8730bcd8ddfb0cffa1010c53d4df91f70e6681082f91a4145109deeda5a4d688b502e9e5fb31881656055da8fdc67de778cc1d9fb3225094b830fee6477dc1217949682a6b1c818baa5a267ca54c4"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_skbmod={0x130, 0x18, 0x0, 0x0, {{0xb}, {0x90, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0xa5, 0x8e, 0x8, 0x795a, 0x80000001}, 0xd}}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x7164}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x47, 0x5, 0x5, 0x3, 0x36e02f08}, 0x10}}, @TCA_SKBMOD_SMAC={0xa, 0x4, @local}, @TCA_SKBMOD_SMAC={0xa, 0x4, @multicast}, @TCA_SKBMOD_SMAC={0xa, 0x4, @random="fb77bb14dfdc"}, @TCA_SKBMOD_DMAC={0xa}, @TCA_SKBMOD_SMAC={0xa, 0x4, @random="383ce4fcf765"}]}, {0x75, 0x6, "e01f8830c936128dcc5aa84b532a9773b913b135689e405c0ce38b7d60a30ea12bc7693e62a8a2119ee0a35570149336bca2041f8799213d2654b5ddc0449dedf1d3be5c49698824a822e354dc325cf6c153cbd5998230c31b464c2d47a57d77fa067fea8eb5d3b35b62c50ff3155d18ef"}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0x200}, 0x1, 0x0, 0x0, 0x40008c5}, 0x20000080)
r6 = socket(0x10, 0x803, 0x0)
sendto(r6, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r6, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400})
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
ppoll(0x0, 0x0, &(0x7f0000000340)={0x0, 0xff}, 0x0, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x200, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0x5}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x6, '\b\x00'}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084)
r8 = socket(0x400000000010, 0x3, 0x0)
r9 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendmmsg$inet6(r9, &(0x7f0000000480)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private0, 0xfffffffc}, 0x1c, &(0x7f0000000300)=[{&(0x7f00000006c0)="b3", 0x1}], 0x1}}, {{&(0x7f0000000200)={0xa, 0x4e24, 0x8001, @rand_addr=' \x01\x00', 0x42a}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000700)="98", 0x1}], 0x1}}, {{&(0x7f0000000180)={0xa, 0x4e22, 0x4, @dev={0xfe, 0x80, '\x00', 0x35}, 0x6}, 0x1c, &(0x7f00000001c0)=[{&(0x7f0000000340)="2f63954f55", 0x5}], 0x1}}], 0x3, 0x44)
listen(r9, 0x100101)
accept(r9, 0x0, 0x0)
r10 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r11=>0x0})
sendmsg$nl_route_sched(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=@delqdisc={0x24, 0x25, 0x1, 0x70bd25, 0x255fdbff, {0x0, 0x0, 0x0, r11, {}, {0x8, 0xfff1}, {0x4, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20081054}, 0x24008088)

2.125195836s ago: executing program 1 (id=3724):
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$inet_mptcp(0x2, 0x1, 0x106)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
write$tun(r2, &(0x7f0000000000)=ANY=[], 0x38)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0)
setsockopt$inet_int(r1, 0x0, 0xf, &(0x7f0000000000)=0x9, 0x4)
setsockopt$inet_int(r1, 0x0, 0x18, 0x0, 0x0)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan0\x00'})
syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xa, 0x9, 0x8, 0x40, 0x0, 0x1}, 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000480), 0x1000, r4}, 0x38)
sendmsg$NL802154_CMD_NEW_SEC_KEY(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="50010000", @ANYRES32=r3, @ANYBLOB="3f9d00000000fddbdf271700000008000300", @ANYRES64=0x0, @ANYBLOB="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"], 0x150}, 0x1, 0x0, 0x0, 0x20040000}, 0x2004c084)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x73, 0x11, 0x3d}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x76}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70)

2.003167315s ago: executing program 4 (id=3725):
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000001a00)={0x0, 0x0, &(0x7f00000019c0)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="2800000011148d8a29bd7000fcdbdf2508004b0013000000080001"], 0x28}, 0x1, 0x0, 0x0, 0x8040}, 0x4004800)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) (async)
connect$inet6(r1, &(0x7f0000000300)={0xa, 0x4e22, 0x2, @loopback, 0x5}, 0x1c) (async)
setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000540), 0x3c) (async)
setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000000)=@gcm_256={{0x304}, '\x00', "e8582491a0c4050000000000f6542a9b6800000000000000003967d2daa45b4e", "61241765", "74016aff130000fd"}, 0x38)
sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="e400"], 0x100}, 0x0) (async)
r2 = socket$inet(0x2, 0x2, 0x1) (async)
r3 = socket$nl_route(0x10, 0x3, 0x0)
pselect6(0x40, &(0x7f0000000080)={0x610a, 0x0, 0x0, 0x7, 0xb98c, 0x273, 0xffffffffffffffff, 0x5}, &(0x7f0000000340)={0x0, 0xfffffffffffffff7, 0xfff, 0x3, 0x8, 0x5, 0x568, 0x6}, &(0x7f00000003c0)={0xff, 0x100000001, 0x2, 0x0, 0x80000000, 0x9, 0x7, 0x4}, &(0x7f0000000400)={0x0, 0x3938700}, &(0x7f00000004c0)={&(0x7f0000000480)={[0xae]}, 0x8}) (async)
sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="280000006800010002000000fcffff7f00006384428fbfcd8b31020001000000047d6670b6c5b9ca"], 0x28}, 0x1, 0x0, 0x0, 0x24008080}, 0x4000)
connect$inet(r2, &(0x7f0000000180)={0x2, 0x0, @local}, 0x10) (async)
r4 = socket$l2tp(0x2, 0x2, 0x73)
ioctl$sock_inet_SIOCADDRT(r4, 0x890b, &(0x7f0000000240)={0x0, {0x2, 0x4e22, @loopback}, {0x2, 0x4e22, @remote}, {0x2, 0x4e24, @private=0xa010102}, 0x81, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x3, 0x5c0, 0x3})
getsockopt$inet_tcp_int(r2, 0x6, 0x1, &(0x7f0000000000), &(0x7f0000000040)=0x4) (async)
sendmmsg$inet(r2, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000002c0)="080014973284feea4f", 0x9}, {0x0}], 0x2}}], 0x1, 0x2004000)

1.971750932s ago: executing program 0 (id=3726):
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (async)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1900000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000000000000070b1615b09af6b19e434707cae9950b0a2bc097400560ca15cd1a5235ac5c6d828961fee26b229f2315221019796b414aa95a9745d45c810410b2d0314cb42fc8c369bb8b455f42f5669922dd2e3e9095e0ff63fce7e000d959f04e8a46e020cd93d6f86255c863d7872fe21d4044b"], 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r2, &(0x7f0000000380), &(0x7f0000000000), 0x2}, 0x20) (async)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r2, &(0x7f0000000380), &(0x7f0000000000), 0x2}, 0x20)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001700)={{r2}, &(0x7f0000001680), &(0x7f00000016c0)='%pB    \x00'}, 0x20) (async)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001700)={{r2}, &(0x7f0000001680), &(0x7f00000016c0)='%pB    \x00'}, 0x20)
socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r3 = socket$kcm(0x2, 0x3, 0x2)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast})
write$tun(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="0800080006000900000014000000451a00142c9c6f"], 0xfce)

1.735631603s ago: executing program 3 (id=3728):
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000180)={0x0, 0x7, 0x10, 0x2653, 0x6}, &(0x7f00000001c0)=0x18)
setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, 0x0, 0x0)
unshare(0x2c020400)
r1 = socket$rds(0x15, 0x5, 0x0)
setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r1, 0x114, 0xa, &(0x7f00000003c0)=ANY=[@ANYBLOB="03f1a8"], 0x4)
setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x3, 0x0, 0x0)
sendmsg$DEVLINK_CMD_SB_POOL_SET(0xffffffffffffffff, 0x0, 0x88bb682c920f3640)
ioctl$BTRFS_IOC_SNAP_DESTROY(0xffffffffffffffff, 0x5000940f, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'wlan0\x00'})
ioctl(r2, 0x8b20, &(0x7f0000000040))
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x801)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x76901, 0x0)
r4 = socket(0x840000000002, 0x3, 0x100)
connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e20, @rand_addr=0x64010101}, 0x10)
sendmmsg$inet(r4, &(0x7f0000005240), 0x4000095, 0x0)
socket$key(0xf, 0x3, 0x2)
setsockopt$inet_int(r4, 0x0, 0x27, 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}})
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10)
sendmsg$NFT_BATCH(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0)
write$tun(r3, &(0x7f00000004c0)={@val, @void, @eth={@multicast, @multicast, @val={@val={0x88a8, 0x5, 0x1, 0x4}, {0x8100, 0x6, 0x0, 0x6}}, {@ipv4={0x800, @generic={{0x5, 0x4, 0x1, 0x6, 0x1d, 0xe4, 0x0, 0x8, 0x11, 0x0, @dev={0xac, 0x14, 0x14, 0x29}, @loopback}, "3eda35701bfb0bc2f1"}}}}}, 0x37)

1.728184195s ago: executing program 4 (id=3729):
syz_emit_ethernet(0x46, &(0x7f0000000240)=ANY=[@ANYBLOB="ffffffffffffbbbbbbbbbbbb86dd6000000000102b00fc0200000000000000000000000000000000aa670000000000001a2110000000089078"], 0x0)

1.632919519s ago: executing program 1 (id=3730):
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="09000000170000000a0000004080000042"], 0x50)
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r2, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10)
r3 = accept(r0, 0x0, 0x0)
setsockopt$sock_timeval(r3, 0x1, 0x42, &(0x7f0000000300)={0x0, 0xea60}, 0x10)
getsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000000380)={@remote, <r4=>0x0}, &(0x7f0000000400)=0x14)
r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000500), 0x4)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1e000000a8000000330000000010000001980000", @ANYRES32=r1, @ANYBLOB="e200000000000000000000000000000000000000619875619ffe1672e62eebbb2954ade4a3a0774b8c44a5751ce0f937f1b314e43d92cf222b57270dd8ec72a4d6dda116139db1a9abaddc131921ea53c1cebafedea59c0be7bb", @ANYRES32=r4, @ANYRES32, @ANYBLOB="03000000000000000200"/20, @ANYRES32=r5, @ANYBLOB='\x00\x00\x00\x00'], 0x50)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r6, &(0x7f0000000080), &(0x7f00000002c0)=@tcp=r3}, 0x20)
recvmsg$can_bcm(r3, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x2000)
getpeername$packet(r3, 0x0, &(0x7f00000001c0))
r7 = socket$nl_route(0x10, 0x3, 0x0)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x42, 0x6, 0x8, 0x0, 0x1}, 0x48)
r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000080)={'nicvf0\x00', 0x7c2})
ioctl$TUNATTACHFILTER(r9, 0x401054d5, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x35, 0x0, 0x6, 0xfffffffe}, {}]})
r10 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_rx_ring(r10, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x3}, 0x1c)
r11 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r11, 0x1, r10, &(0x7f0000000000)={0x2})
syz_emit_ethernet(0x4e, &(0x7f0000000780)={@local, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00 \x00', 0x18, 0x3a, 0xff, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @local, {[], @mld={0x187, 0x0, 0x0, 0x0, 0x0, @local}}}}}}, 0x0)
r12 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r3)
sendmsg$BATADV_CMD_SET_HARDIF(r3, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)={0x60, r12, 0x2, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x7}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x789}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000000}, 0x90)
r13 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
close(r13)
bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='\f\x00'/20, @ANYRES32=r8, @ANYRES64=r5, @ANYRES32=0x0, @ANYRESDEC=r2, @ANYRES64=r3], 0x48)
bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}, @IFLA_LINKMODE={0x5, 0x11, 0x4e}, @IFLA_OPERSTATE={0x5, 0x10, 0xc}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x0)

1.613873378s ago: executing program 2 (id=3731):
syz_emit_ethernet(0x166, &(0x7f00000002c0)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x40}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x130, 0x3a, 0xff, @remote, @local, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x7, [{0x18, 0x18, "00540200a600828dadce42ce3d02d319e0cabb0171499f7642598cf1a1d40ca51300988c260ed2c4af88bdac1fc3925f5acb8e09cece04229969a0aee0537e1cc71b3009ab18767945d27594b37cd8abb99636a90bca4c54c3ce345b74a5344d2cdda99627bb20ea64b77b50c6dd7ac0ce2c39bcfef13daaef4db59a4483f2894602231daf4f31b82654278904b95919abbb34b324bdfc5ea17efe35444c3cc8f5cb729268ea2d5032fee7123364eac506f32a93621cf58e9f47d53114fb"}, {0x4, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af1802"}, {0x3, 0x1, "005ff9297d00001392000100"}]}}}}}}, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$netlink(0x10, 0x3, 0x10)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x50, 0x9, 0x6, 0x3, 0x0, 0x0, {0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010101}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x10004893}, 0x80)
r3 = syz_genetlink_get_family_id$team(&(0x7f0000000540), r1)
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000240)={'team0\x00', <r4=>0x0})
sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYRESOCT=r0, @ANYRES16=0x0, @ANYBLOB="01002abd7000fcdbdf250100000008000100", @ANYRES32=r4, @ANYRES8=r3], 0x58}, 0x1, 0x1000000, 0x0, 0x24004000}, 0x24040840)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a310000000068000000060a010400000000000000000100000008000b4000000000400004802800018007000100637400001c000280080001400000000108000240000000090500030000000000140001800a0001007265646972000000040002800900010073797a30"], 0xdc}, 0x1, 0x0, 0x0, 0x5090}, 0x24008804)

1.530509954s ago: executing program 4 (id=3732):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="700000ec1000370429bd7000bfac64e17edd93bc736fffdbdf2c00000000", @ANYRES32=0x0, @ANYRESDEC=r1, @ANYRES8=r1, @ANYBLOB="0400130014000200fe"], 0x70}, 0x1, 0x0, 0x0, 0x8005}, 0x4004804)
sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='@%\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00#\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="04460600016004001400030064756d6d7930000000000000000000000a000100ffffffffffff0000"], 0x40}, 0x1, 0x0, 0x0, 0x20000001}, 0x20044850)
r2 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000000)={0x1, [<r4=>0x0]}, &(0x7f0000000080)=0x8)
setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x83, &(0x7f0000000480)={r4, 0x2}, 0x8)
getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r1, 0x84, 0x1a, &(0x7f0000000100)={r4, 0x86, "d9799aade554137606380765295e99dba898da276b9b85fcf0f933e905e17e1329c7517f55ced9f9423b546ed8c9589ce6c7e9bf60eb80e236f27dd36f95e82e964a3742aaa3ea0f14fc0493274467bfff9b0025676ed0157bdc093f3991dfe1cb505ef97253629ece0d40069369515f78153f6ff825c188bc464050ea56ef033d26a82f7899"}, &(0x7f0000000080)=0x8e)

1.429229085s ago: executing program 3 (id=3733):
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f00000000c0)={0xfffc}, 0x8)
sendto$inet6(r1, &(0x7f0000000580)="81", 0x1, 0xc001, &(0x7f0000000280)={0xa, 0x0, 0x0, @loopback, 0x81}, 0x1c)
setsockopt$inet_sctp6_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000140)={0xfff7, 0x0, 0x97c, 0xd86c}, 0x8)
r2 = syz_genetlink_get_family_id$devlink(&(0x7f00000004c0), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x3c, r2, 0x1, 0x0, 0x0, {0x13}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_PORT_INDEX={0x8}]}, 0x3c}}, 0x0)
getpid()
getpid()
ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_DESTROY(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000007c0)=ANY=[@ANYBLOB="1c0000000306010200000000000000000700000a0500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40814)
r4 = socket(0x2, 0x80805, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)
getsockopt$bt_hci(r4, 0x84, 0x1, &(0x7f0000000000)=""/4087, &(0x7f0000001000)=0xff7)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001580)={0x0, 0x0, 0x0}, 0x0)
r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
connect$bt_l2cap(r5, &(0x7f0000000000)={0x1f, 0xfff, @any, 0x7}, 0xe)
bind$bt_l2cap(r5, &(0x7f0000000040)={0x1f, 0x8, @any, 0xfdff}, 0xe)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newtfilter={0x50, 0x2c, 0xd3f, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0xffe0}, {0x0, 0xfff3}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x20, 0x2, [@TCA_FLOWER_KEY_ENC_IPV6_SRC={0x14, 0x1f, @ipv4={'\x00', '\xff\xff', @multicast1}}, @TCA_FLOWER_KEY_ENC_IP_TOS={0x5, 0x50, 0x9}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x20004804)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
write$tun(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="c971080001002700000027000000460000", @ANYBLOB="ba0000009078001809c40005020000000000"], 0xfd6c)
sendmsg$IPSET_CMD_CREATE(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="580000000206030000000000000000000300000705000100070000000900020073797a31000000000c00078008001240000000050500050002000000050004000100000011000300686173683a69702c706f727400"], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000)
r7 = socket$l2tp(0x2, 0x2, 0x73)
bind$inet(r7, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000400), 0x6e, &(0x7f0000000a80)=[{0x0}, {&(0x7f0000000540)=""/228, 0xe4}, {&(0x7f0000000640)=""/215, 0xd7}, {&(0x7f00000015c0)=""/4096, 0x1000}, {0x0}, {&(0x7f00000008c0)=""/237, 0xed}, {&(0x7f00000009c0)=""/129, 0x81}], 0x7, &(0x7f0000000b00)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xc8}, 0x2000)
setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000080)='lo\x00', 0x10)

1.417956733s ago: executing program 0 (id=3734):
socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00')
unshare(0x6a040000)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0)
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000180)=0x5a4f, 0x4)
socket$nl_route(0x10, 0x3, 0x0)
connect$inet(r0, &(0x7f0000001bc0)={0x2, 0x4e23, @loopback}, 0x10)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0)
sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x1, 0x803, 0x0)
getsockname$packet(r2, 0x0, 0x0)
sendmsg$nl_route(r1, 0x0, 0x8000)
epoll_create1(0x0)
sendto(r0, 0x0, 0x0, 0x4008044, 0x0, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_xfrm(0x10, 0x3, 0x6)
syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='io.stat\x00', 0x26e1, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x8901, 0x0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
socket$inet6_mptcp(0xa, 0x1, 0x106)

1.407845419s ago: executing program 2 (id=3735):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'ip6gre0\x00', <r1=>0x0})
r2 = socket(0x2, 0x5, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000940)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
pipe(&(0x7f0000000440)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff)
r7 = socket$inet6_sctp(0xa, 0x5, 0x84)
socket(0x2, 0x80805, 0x0)
r8 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=ANY=[@ANYBLOB="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", @ANYBLOB="fc9a5fdce7556c525709ee951990ce73d848cfb1103983556fa857f0f87f14934197d3ea6c2c8d209bf9b7fda2fc1ff49451a359b5b5980186373bb4f272b549b0b0d512b3a43678254b754aad6ff4f4dbffe44e3094f363c87fac9e9424a0e41b397c1cba98e8072e3ae5cea41e48ad0e540e067521ac28bc12982a057de686af3962bcd798860957d0bdf79e6f", @ANYRESDEC, @ANYRES16=0x0, @ANYRESDEC=r3, @ANYRES16=r1, @ANYRESHEX=r7, @ANYBLOB="9aa36bb6a59d04baec0caface64eba250c8f4ea9c9432e7b2db2057c9d197f00b0f69f98312b35834440ed53b9df69ade34b38dd4d1408d5e1886bc9ddbd46e81b9f4a8039cfbf50498a627d3b90303fa223e6695744f12fefaa2e8a55fff592c903605f80f9c56dfd389d66c895ab46b636c41ebc32f38ec8f01d059c6118ebfa095bc5cf246637303be05bf313fe97172ce834b54d6d788c11d888bfe65f51409e40c05e8de7b77e42233588805e49fbb371ac28602aebc2bc26275b78ac097d7b108ba8782d78", @ANYRESOCT=r2], 0xa0}, 0x1, 0x0, 0x0, 0x8800}, 0x24040000)
splice(r4, 0x0, r6, 0x0, 0xf3a, 0x0)
r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100), r5)
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r10, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x7}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DIRECTION={0x5}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x17}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x13}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x0)
sendmsg$TIPC_CMD_SET_LINK_TOL(r2, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x30, r9, 0x10, 0x70bd25, 0x25dfdbfd, {{}, {}, {0x14, 0x18, {0x401, @bearer=@l2={'ib', 0x3a, 'ip6tnl0\x00'}}}}, ["", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x8080}, 0x81)
ioctl$int_in(r6, 0x5452, &(0x7f0000000000)=0x10001)
write(r3, 0x0, 0x0)
r11 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="580000001000ff00eea5879ad0015ccd9db7875167b7fbe617506226afe80b9436869bd95b0b24e15ebfa51cef0780996e95b7c7035b32ed1b0af32ea1bc7f671f0d9755bc637604258a9a66c24b36d7f89ef1081f8018109d2e37af886c7f3298e33cff7eacf4be77329bb4c73566d27535af7b2dd51b89e6689c423494b34193a45f65ac82dcb8c498ab3f24270187775d738d61c077a2a04af392bfedf65300dfc19df2ffdc745800ec8b0e74aeb4d02a5405f3a2f1ed79653e16d3e25720eee0492734d6c4890142d46ff47c343614297b8dbfb733dc9ee90951a739197eda7bd0eb058227e726f0407b54fcb033cd98945ad6210315", @ANYRES32=0x0, @ANYBLOB="150c0000000000002c0012800e0001006970366772657461700000001800028014000600fe8000000000000000000000000000380a000100aaaaaaaaaa160000"], 0x58}, 0x1, 0x0, 0x0, 0x28001}, 0x8000)
r12 = socket$inet6_sctp(0xa, 0x5, 0x84)
ioctl$sock_inet_SIOCGIFADDR(r12, 0x8915, &(0x7f0000000000)={'pim6reg\x00'})
shutdown(r12, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)={<r13=>0xffffffffffffffff, <r14=>0xffffffffffffffff})
sendmsg$unix(r13, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000480)="aa", 0x1}], 0x1, &(0x7f00000002c0)=ANY=[@ANYBLOB="1400"], 0x18}, 0xc800)
bind$unix(r13, &(0x7f0000000040)=@abs={0x1, 0x0, 0x4e24}, 0x6e)
recvmmsg(r14, &(0x7f0000001140), 0x700, 0x2, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r12, 0x84, 0x6f, &(0x7f0000000200)={<r15=>0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e21, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10)
setsockopt$inet_sctp_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000000080)={r15, 0xff, 0x8000, 0x400}, 0x10)

1.132991943s ago: executing program 1 (id=3736):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="180800001bc81a000000000000000001851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000101180000000000000000000000000000009500000000000000360a000000000000180100002020782500000000002020207b1af8ff00000000bfa10000000000000701000000ffffffb702000020000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2}, 0x94)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000030900010073797a310000000054000000030a010400000000000000000100ffff0900030073797a310000000028000480080002400000000008000140000000051400030076657468315f6d6163767461700000100900010073797a31"], 0x9c}}, 0x2000000c)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$smc(&(0x7f0000000140), 0xffffffffffffffff)
r3 = syz_init_net_socket$ax25(0x3, 0x2, 0xcc)
setsockopt$ax25_SO_BINDTODEVICE(r3, 0x101, 0x19, 0x0, 0x0)
sendmsg$SMC_PNETID_FLUSH(r2, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f0000000600)=ANY=[@ANYBLOB="080000002e18d5c1574c8779aa509a03a24c9cf00adfb7c89f631a4c92b314dc8b78b0e7560096b12f38cf11cf8cbd71f1e280008a22122b3372182554783c5c17232805c783fc206bf34dcfc77ecdbac3e95c1c5da813a0e54b6bfba9393c2f46510f4d918d1364ce94c72ae05f04bf2b8bc419e84136c1b51403c10854ccf3cab554593c76417a6c37378b14e70e1b9b5c", @ANYRES32=r0, @ANYBLOB="08002cbd7000fbdbdf2504000000140002006e72300000000000000000000000000014000200636169663000000000000000000000000500040001000000050004000100000014000200767863616e3100"/90], 0x60}, 0x1, 0x0, 0x0, 0x200000c0}, 0x2000c090)
r4 = syz_init_net_socket$ax25(0x3, 0x5, 0xf0)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000500)={{{@in6=@remote, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0}}, {{@in=@private}, 0x0, @in=@dev}}, &(0x7f0000000180)=0xe8)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r7 = openat$cgroup_procs(r6, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000800)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000300)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x801, 0x0, 0x0, {0x0, 0x0, 0x1}, @NFT_OBJECT_CT_TIMEOUT=@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x1}}, @NFT_MSG_NEWTABLE={0x5c, 0x0, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x4}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x30, 0x9, 0xa, 0x3, 0x0, 0x0, {0x2, 0x0, 0x7}, [@NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x4}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x5}, @NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x8c}]}, @NFT_MSG_DELFLOWTABLE={0x20, 0x18, 0xa, 0x301, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWSET={0x30, 0x9, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x35}, @NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x400}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x124}, 0x1, 0x0, 0x0, 0x40000}, 0x4820)
write$cgroup_pid(r7, &(0x7f00000000c0), 0x12)
pread64(r7, &(0x7f0000001840)=""/4096, 0x1000, 0x1)
ioctl$SIOCAX25DELUID(r4, 0x89e2, &(0x7f00000001c0)={0x3, @null, r5})

1.132329926s ago: executing program 4 (id=3737):
socket$inet_icmp_raw(0x2, 0x3, 0x1) (async)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4) (async)
r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00')
unshare(0x6a040000) (async)
ioctl$BTRFS_IOC_DEFRAG(r0, 0x50009402, 0x0) (async)
r1 = socket$inet6(0xa, 0x80002, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0) (async)
unshare(0x40000480)
setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f00000001c0)=0x6533, 0x4) (async)
connect$inet(r2, &(0x7f00000002c0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) (async)
sendmmsg(r2, &(0x7f0000001c80)=[{{&(0x7f0000000040)=@ethernet={0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x80, &(0x7f0000001980)=[{&(0x7f00000000c0)="b8cb9d2bc8600f6447a7d689fba2a6beb1aca7", 0x13}, {&(0x7f0000000100)="73e612a11abca872ac4873e047", 0xd}, {&(0x7f0000000740)="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", 0x1000}, {&(0x7f0000001740)="4788fa4a1aee0b3af3fdead2adba3f154b77d3cdc629017d7dbfb87205baec763b43d386af1337436289e07518bda329d955d8f1827b67c448d2c24836065f222d3d6d44fb102cd3d82398a9", 0x4c}, {&(0x7f00000017c0)="9c88f0cc3243d6bcfc3826b601ea27bc862251095259b6bc7f46ca4ecce0cc48c01457d641bd04196783985845e81a81912a54239ad1a2480c41eb009c9850c1e461bfa41bbffd868ed00feb5ee4633bcb68f50cb5edff16d715c41ade00f7d1147706a1b2509949e752c9ce6ef8dbdcbe0e5678daa171176f2f42272959c2d0a9adc1b2cf03b88784987aba0805ca2f8649ca9d847e479fbc8de6df7481b46cdb28f43e25ac97c9863d0d6d725cefd2eb42ed3064453acd6417f8bf04dc555056b438acf74c3ef0a7a0dfc2f50900000000000000d485dcf28c108aba211bf04903df4ac1c4cc0c68cd3727000000000000000000", 0xf5}, {&(0x7f0000002180)="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", 0x1000}, {&(0x7f0000000140)}, {&(0x7f00000018c0)="3d7a4f5160ed8657b1990577f27c4872f46b34b3852de352c5576d7988c260ae7ad9b9c39cf5851aa23dbed03e411ea594633c8da858208539b593efa9497865b5e6aaa8c4dab6c79bf1e47f2f84770d01787dee1e74d04ba1fd28e45bbd26116c2fc1a1d47e5db95a30fca31946b18679024794b9c053e6c3cc9eaf785146b2049790b89b9cc16831671a34aa24cf50e081bbfc065f92716c6775e6497fcd147b67383385cace32fffe40a36c11310d6ab7d5", 0xb3}], 0x8, &(0x7f0000001a00)=[{0x108, 0x110, 0x800, "452c3eb46646a424f3afbb2a57ad5184aaf3619a83351cbcc03e40e9b75c43c7b2287909f669f30213291f319d01d142ca9794b51ee595beed5d3e529612b800474763c39dd726694c765755295dae6faa7cd9eb2a22041de45ca497c8daec275be1dc0cd238c693a037049208992fe93e52197a7b0abc0564e1a98d1fee7a10c3c8189b693e46c35225020849b1bff14df6ca144fa8162160db9be933879083cd57a73e35e3375487cbf42d0dfa755e88e23fc36929eeb7cbbd5fecd79a87d7eb1d0d888ff2d10f23ed6962ec81aa962b775a6ec50e3b915ea76715fa47e371e33c105ea2616b0e6d6b67d1f5d9afef8e38"}, {0xa8, 0x0, 0xad8, "3124de1c06aef97332d6da87a1e6cf415f5c71dff360bd990a72bc918ce6c84bc51c846050613b7b8a396a7512e913ae3283ed254c4eaf5969eb9871288fda998e54a8a19ecba11d66741d33f552a394b6f48fb039e22dae20c61b1ecf344146faed0ba008014dae6af410ceb9268bd220c30a6b8c208d5e81fbb1a1c4e3d8ce17beec0e41d1f73b2353f46ca9768b856f3584dc5bebafbf"}, {0x58, 0x115, 0x0, "ade4516b00411b985357e35b27f2c43752858b90fa3aa5cd0f8e55dc88d32f2125d8c5de0b66ac8809fe7e916bfec36494762e0ec8a865fecc36e2c8a168553ef052"}, {0x38, 0x117, 0x2, "fbc0615f02b1e1aa435f93f2c8298ee26208709062b74b4e6a632bb2937b321fab2726"}, {0x30, 0x10f, 0x6, "3716f463f401978efd7f023cdad7c5370b989ca69e405c57c1cd"}], 0x270}}], 0x1, 0x4000) (async)
setsockopt$sock_int(r2, 0x1, 0x29, &(0x7f0000000000)=0x7b, 0x4) (async)
recvfrom$inet(r2, 0x0, 0x0, 0x2043, 0x0, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0xedc623580215bdcd, 0x12, r3, 0x0) (async)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2f, &(0x7f00000004c0)={0x3, {{0xa, 0x4e21, 0x8, @private1={0xfc, 0x1, '\x00', 0x1}, 0x401}}, {{0xa, 0x4e22, 0x5, @mcast2, 0x2}}}, 0x108) (async)
pipe(&(0x7f0000000200)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000440)={0x0, 0x2, 0x8, 0x200})
write$cgroup_pid(r4, &(0x7f0000000000), 0xffffff98) (async)
write(0xffffffffffffffff, 0x0, 0x0) (async)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r1, 0x4058587a, &(0x7f0000000440)={{r0, &(0x7f0000000240)='\x00', 0x115480, &(0x7f0000000280)={@_ha_fsid={[0x1, 0x3]}, {0x7, 0xd, 0x8, 0x18e}}, 0x3, &(0x7f0000000300), &(0x7f0000000340)=0x10}, {[0x8, 0x4, 0x5, 0x2]}, 0x2, 0x86, &(0x7f0000000380)=""/134}) (async)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$IP_VS_SO_GET_DAEMON(r5, 0x0, 0x487, &(0x7f0000002100), &(0x7f0000000000)=0x30)
connect$inet6(r1, &(0x7f0000002140)={0xa, 0x4e25, 0x1, @mcast2, 0x7}, 0x1c) (async)
sendmmsg$inet6(r1, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00)
r6 = socket(0x10, 0x3, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000180)={'gre0\x00', &(0x7f0000000600)={'sit0\x00', 0x0, 0x7800, 0x1, 0x3, 0x6, {{0x39, 0x4, 0x1, 0xa, 0xe4, 0x64, 0x0, 0xc, 0x29, 0x0, @remote, @multicast1, {[@ssrr={0x89, 0xb, 0x63, [@initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @generic={0x7, 0x4, "500e"}, @noop, @timestamp={0x44, 0x1c, 0xb7, 0x0, 0x5, [0x0, 0xffffffff, 0x8, 0x43, 0x80000001, 0x7fffffff]}, @lsrr={0x83, 0x17, 0xf, [@dev={0xac, 0x14, 0x14, 0x30}, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x30}, @dev={0xac, 0x14, 0x14, 0x30}]}, @generic={0x86, 0x10, "a263b6b846a853be63b19e5adc89"}, @ra={0x94, 0x4, 0x1}, @timestamp_addr={0x44, 0x54, 0xaf, 0x1, 0x8, [{@multicast1, 0x3ff}, {@rand_addr=0x64010101, 0xfffffffa}, {@remote, 0xe}, {@remote, 0x8001}, {@broadcast, 0x4}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x8e8}, {@multicast2, 0x800}, {@loopback}, {@rand_addr=0x64010102, 0x9}, {@multicast2, 0xc}]}, @timestamp_prespec={0x44, 0x24, 0xb2, 0x3, 0x2, [{@rand_addr=0x64010102, 0x8}, {@private=0xa010101, 0x94}, {@dev={0xac, 0x14, 0x14, 0x18}, 0x6}, {@multicast1, 0x8}]}]}}}}}) (async)
sendmsg$nl_route(r6, 0x0, 0x0)

1.080261417s ago: executing program 3 (id=3738):
socket$nl_route(0x10, 0x3, 0x0) (async)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$fou(&(0x7f00000001c0), r1)
r3 = socket$qrtr(0x2a, 0x2, 0x0)
ioctl$sock_qrtr_TIOCOUTQ(r3, 0x5411, &(0x7f0000000580)) (async)
ioctl$sock_qrtr_TIOCOUTQ(r3, 0x5411, &(0x7f0000000580))
sendmsg$FOU_CMD_GET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000007c0)=ANY=[@ANYBLOB="0002436a10277b682105f17171000000000000", @ANYRES16=r2, @ANYBLOB="e3d128bd7000fbdbdf25030000000800060064010100080008000a010100060001004e22000006000a004e20000008000b00", @ANYRES32=0x0, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x8010)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$ARPT_SO_SET_REPLACE(r4, 0x0, 0x60, &(0x7f0000000240)={'filter\x00', 0x104, 0x4, 0x3c0, 0x0, 0x1f0, 0x1f0, 0x2d8, 0x2d8, 0x2d8, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x7, 0x0, {@mac=@local}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'dvmrp0\x00', 'macvlan0\x00'}, 0xc0, 0xe8}, @unspec=@NFQUEUE1={0x28}}, {{@arp={@loopback, @multicast2, 0x0, 0x0, 0x0, 0x0, {@mac=@local}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pim6reg0\x00', 'veth0\x00'}, 0xc0, 0x108}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xe8}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x410)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="400000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="50c20000000000001800128008000100677460000c000280050005000000000008000300", @ANYRES32=0x0, @ANYBLOB], 0x40}}, 0x0) (async)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="400000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="50c20000000000001800128008000100677460000c000280050005000000000008000300", @ANYRES32=0x0, @ANYBLOB], 0x40}}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0))
socket$nl_sock_diag(0x10, 0x3, 0x4) (async)
socket$nl_sock_diag(0x10, 0x3, 0x4)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) (async)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000240)={'macvlan0\x00', <r6=>0x0})
gettid()
r7 = socket(0x10, 0x803, 0x0)
bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x80000000, 0x0, 0x0, 0x20780, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000}, 0x94)
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r8, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000000000000000000000000000850000003d00000095"], &(0x7f00000000c0)='GPL\x00', 0x1, 0x98, &(0x7f0000000000)=""/152}, 0x94) (async)
r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000000000000000000000000000850000003d00000095"], &(0x7f00000000c0)='GPL\x00', 0x1, 0x98, &(0x7f0000000000)=""/152}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x12, 0x7, 0x8, 0xb}, 0x50) (async)
r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x12, 0x7, 0x8, 0xb}, 0x50)
bpf$BPF_PROG_DETACH(0x8, &(0x7f00000001c0)={@map=r10, r9, 0x7}, 0x10)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r10, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r8}, 0x20) (async)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r10, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r8}, 0x20)
sendmmsg$inet6(r8, &(0x7f0000000b00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000003c0)="b0", 0x1}], 0x11}}], 0x2, 0x1)
r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r11, 0x8933, &(0x7f0000000780)={'wpan1\x00'})
sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x60, 0x10, 0x403, 0xf7fffff9, 0x25dfdbfb, {0x0, 0x0, 0x74, r6, 0x59808, 0x35004}, [@IFLA_LINK={0x8}, @IFLA_IFNAME={0x14, 0x3, 'veth1_macvtap\x00'}, @IFLA_MAP={0x24, 0xe, {0x2, 0x5, 0x6, 0x7, 0x2}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4802}, 0x4000050)
sendmsg$DCCPDIAG_GETSOCK(r7, &(0x7f0000000540)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000440)={0xb0, 0x13, 0x800, 0x70bd2c, 0x25dfdbfc, {0x0, 0xd, 0x6d, 0x4, {0x4e24, 0x4e21, [0x235d, 0x4, 0x3, 0x7a7], [0x4, 0x4, 0x0, 0x200], r6, [0x4, 0x5]}, 0x4, 0x5}, [@INET_DIAG_REQ_BYTECODE={0x10, 0x1, "5ef75238c7e4ff908fd80856"}, @INET_DIAG_REQ_BYTECODE={0x51, 0x1, "6591e9adada34aab93179ce0649bf1621e1da62a26faf6b8baa0d3dc7badb2b89913ac314ccc1b7d33f0ce446221090d0a9db1214a323da970cd5cbfbdf98229f10afb653ace0aa63a0392fc24"}]}, 0xb0}, 0x1, 0x0, 0x0, 0x4040}, 0x800) (async)
sendmsg$DCCPDIAG_GETSOCK(r7, &(0x7f0000000540)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000440)={0xb0, 0x13, 0x800, 0x70bd2c, 0x25dfdbfc, {0x0, 0xd, 0x6d, 0x4, {0x4e24, 0x4e21, [0x235d, 0x4, 0x3, 0x7a7], [0x4, 0x4, 0x0, 0x200], r6, [0x4, 0x5]}, 0x4, 0x5}, [@INET_DIAG_REQ_BYTECODE={0x10, 0x1, "5ef75238c7e4ff908fd80856"}, @INET_DIAG_REQ_BYTECODE={0x51, 0x1, "6591e9adada34aab93179ce0649bf1621e1da62a26faf6b8baa0d3dc7badb2b89913ac314ccc1b7d33f0ce446221090d0a9db1214a323da970cd5cbfbdf98229f10afb653ace0aa63a0392fc24"}]}, 0xb0}, 0x1, 0x0, 0x0, 0x4040}, 0x800)
r12 = socket$igmp6(0xa, 0x3, 0x2)
ioctl$NILFS_IOCTL_GET_SUINFO(r12, 0x80186e84, &(0x7f00000006c0)={&(0x7f0000000680)=[{0xfffffffffffffffa, 0x6, 0x1}], 0x1, 0x10, 0x9, 0x80e3})

1.01867314s ago: executing program 2 (id=3739):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000780)={'ip6gretap0\x00', &(0x7f0000000740)=@ethtool_sset_info={0x37, 0x9, 0x7fffffffffffffff}})
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_init_net_socket$rose(0xb, 0x5, 0x0)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x50, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x50}}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000007c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000000100000024000300b08073e8d44e91e3da922c22438244bb885c69e269c8e9d835"], 0x38}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_ifreq(r5, 0x8971, 0x0)
sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x14, 0x0, 0x50dc85624ea6cf59, 0x70bd25, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x400c001}, 0x400c088)
sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0)
unshare(0x26020480)
socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
r7 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
tee(r7, r6, 0x100000000, 0x8)
r8 = socket(0x15, 0x80005, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000001c0)="d8000000150081044e81f782db44b9040a78080206000000040000a1180003", 0x1f}], 0x1, 0x0, 0x0, 0x7400}, 0x0)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x388, 0x1e, 0xa, 0x105, 0x0, 0x0, {0x7, 0x0, 0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x35c, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}, {0x34c}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x2, 0x84}}}, 0x40c}}, 0x40000)
getsockopt(r8, 0x200000000114, 0x2719, 0xffffffffffffffff, 0x0)
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_LIST(r10, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x0, 0x20}, 0xc)
bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x1e)
socket$inet6(0xa, 0x3, 0x2c)
setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, &(0x7f0000000000), 0x4)

801.17622ms ago: executing program 3 (id=3740):
socket$inet6_sctp(0xa, 0x1, 0x84) (async)
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r0, 0x84, 0x80, &(0x7f0000000000)='\x00\x00\x00\x00\t\x00\x00\x00', 0x8) (async)
setsockopt(r0, 0x84, 0x80, &(0x7f0000000000)='\x00\x00\x00\x00\t\x00\x00\x00', 0x8)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x10000, '\x00', 0x0, 0x0, 0x4}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r1}, &(0x7f00000001c0), &(0x7f0000000100)}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xe, 0x4, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, [@generic={0x91, 0x1, 0x1, 0x6e}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
socket$inet6_tcp(0xa, 0x1, 0x0) (async)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge0\x00', <r4=>0x0})
sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@delneigh={0x30, 0x1d, 0x1, 0x0, 0x25dfdbfb, {0x7, 0x0, 0x0, r4, 0x40, 0x10, 0x4}, [@NDA_LLADDR={0xa, 0x2, @remote}, @NDA_VLAN={0x6, 0x5, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
ioctl$sock_inet6_SIOCDIFADDR(r2, 0x8936, &(0x7f0000000040)={@loopback, 0x55, r4}) (async)
ioctl$sock_inet6_SIOCDIFADDR(r2, 0x8936, &(0x7f0000000040)={@loopback, 0x55, r4})
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000300)={r1, <r5=>0xffffffffffffffff}, 0x4)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000180)={0x0, r1}, 0x8)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x10, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000001000000b7080000000000007b8af8ff00000000b7080000020000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB='\x00'], &(0x7f0000000140)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffcf2}, 0x94)

667.979798ms ago: executing program 2 (id=3741):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x40000)
r1 = socket$nl_route(0x10, 0x3, 0x0) (async)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff}) (async, rerun: 64)
r3 = socket$inet_mptcp(0x2, 0x1, 0x106) (rerun: 64)
connect$inet(r3, &(0x7f0000000140)={0x2, 0x4e21, @empty}, 0x10) (async, rerun: 32)
r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (rerun: 32)
ioctl$sock_netdev_private(r4, 0x8914, &(0x7f0000000000)) (async)
r5 = socket$inet6(0xa, 0x3, 0x2)
setsockopt$sock_linger(r5, 0x1, 0xd, &(0x7f0000000000)={0x1, 0x81}, 0x8) (async)
close(r5) (async)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64)
sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x81}, 0x0) (rerun: 64)
r8 = syz_init_net_socket$ax25(0x3, 0x5, 0xf0)
setsockopt$ax25_SO_BINDTODEVICE(r8, 0x101, 0x19, &(0x7f00000001c0)=@bpq0, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r2, &(0x7f0000000200)={0x10}) (async)
syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) (async, rerun: 32)
bind$netlink(r1, &(0x7f0000000040)={0x10, 0x0, 0x25dfdbfd, 0x100}, 0xc) (rerun: 32)
sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x80) (async)
setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) (async)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), r7) (async)
r9 = socket(0x400000000010, 0x3, 0x0) (async)
r10 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r11=>0x0})
sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@delchain={0x0, 0x65, 0x20, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x7, 0xf}, {0xf, 0x1}, {0xfff1, 0x1}}, [@TCA_RATE={0x0, 0x5, {0x8, 0x1}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) (async, rerun: 64)
sendmsg$nl_route_sched(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)=@deltfilter={0x54, 0x2d, 0x8, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, r11, {0x7, 0xd}, {0x4, 0xa}, {0xfff3, 0xe}}, [@TCA_RATE={0x6, 0x5, {0x1b, 0x40}}, @TCA_CHAIN={0x8, 0xb, 0x80000000}, @TCA_CHAIN={0x8, 0xb, 0x4}, @filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_TO={0x8, 0x2, 0x56}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x800) (async, rerun: 64)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r7, &(0x7f00000002c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000180)={&(0x7f0000000600)=ANY=[@ANYRESDEC=r3, @ANYRES8=r9, @ANYBLOB="0000000000000000df251400000008000f0005000000440001801400020073797a5f74756e000000000000070000000041001061c85b0a12f5b519a69691ea10f2831ad7f833d9e5629e661de6fde247a8926ae1f5f8b3ac1b993175ce7c2b9570edb7b9e45a559be620ec837fec9cec37d230d2a9b704d73558a77884fe0e79707e535ccbac81d41d9277d4718a6fcaed4117b3e15a515aa06c2d61f8dbff43d138c1e009ce0acf2082778bff8b5287a404e9f594b1a44d07536d9cca7424be6b194b7b7bfaf07b8a3a1a0eaa22ae82b6fb2b9c4bb4ce5f6ca482f8a7ae9b431b6097f138b5a1d5a6323508b020b3c2555197618e431fb9f1eff93555a121b50659941b79959a9a50521f3bb110e3537bc0d00eeeb7d7426b0a8f186030f8cb4d429d10490cca092619e5488e75c52479348c80d95a6fcb2202e3e25978b7f544688d0ed9817ff39d820d80f2a6996b5aa6d375ec95e84a8d08bb4f3c", @ANYRES32=r11, @ANYBLOB="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"], 0x70}, 0x1, 0x0, 0x0, 0x40c5}, 0x8800)

638.062517ms ago: executing program 3 (id=3742):
r0 = epoll_create1(0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000200)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x1e, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7338}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x29}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000008c0)={0xffffffffffffffff, 0x0, 0x7b, 0x89, &(0x7f0000000600)="b0b4a88b74dc7e056c11a4c86c53e4174b029ecf4a58750ec74bc8b9355b22eb409dd3a5bca62bb3f407b379b65f0eafae36aca770beb035ce6b331a6534e5d81925fc6a1b9d95776d1431c3cb01d8989a4b47e9171853912737089bc827f5b7d7223dcc540a2ae1402e03fcaf0a6cf259944a3740f8baed4fc750", &(0x7f0000000680)=""/137, 0x8, 0x0, 0xfb, 0x69, &(0x7f0000000740)="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", &(0x7f0000000840)="126229a6604f80f4cf0d640e2b3e3072b99e4b8134475abb3605a2d67ace0f96ffbeb0762b56e2b37fdb9247b5caabe1090303a91df42742912e7c37d49ca253e26db06ba98d24e6a2405bc99aa5b76d3a5b10191a388219cbe41c2d02a12ff0781c00ba1b61c887e0", 0x2, 0x0, 0x1}, 0x50)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
recvfrom$unix(r1, &(0x7f0000000280)=""/178, 0xb2, 0x0, &(0x7f0000000500)=@file={0x1, './file0\x00'}, 0x6e)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x60880, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'pim6reg1\x00', 0x400})
socketpair(0x1, 0x5, 0x0, &(0x7f0000000240)={<r4=>0xffffffffffffffff})
getsockopt$sock_buf(r4, 0x1, 0x39, 0xffffffffffffffff, &(0x7f0000000000)=0xc)
r5 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', <r6=>0x0})
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000003500010326bd7000fcffffff06"], 0x14}, 0x1, 0x0, 0x0, 0x41882}, 0x4000)
sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0x8}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x7f}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000040}, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001300)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0x0, 0x1}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8035}, @TCA_FLOWER_KEY_ARP_SIP={0x8, 0x39, @broadcast}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000}, 0x44010)
r8 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014})
epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r0, &(0x7f0000000000)={0xa0000001})
epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r2, &(0x7f0000000040)={0x2004})
epoll_pwait(r8, &(0x7f0000000400)=[{}], 0x1, 0x80, 0x0, 0x0)

437.489629ms ago: executing program 0 (id=3743):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa10000000000000701"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095", @ANYRESOCT=r0, @ANYRESDEC=r0], 0x0, 0x5, 0x0, 0x0, 0x40e00, 0x0, '\x00', 0x0, 0x2}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000580)="63eced8e46aa7ce5a833c9f7b942", 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa10000000000000701"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095", @ANYRESOCT=r0, @ANYRESDEC=r0], 0x0, 0x5, 0x0, 0x0, 0x40e00, 0x0, '\x00', 0x0, 0x2}, 0x94) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000580)="63eced8e46aa7ce5a833c9f7b942", 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async)

390.616425ms ago: executing program 2 (id=3744):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f0000000040)='hugetlb.1GB.rsvd.max_usage_in_bytes\x00', 0x2, 0x0)
writev(r1, &(0x7f00000012c0)=[{0x0, 0x300}, {&(0x7f0000002ac0)='l', 0x1}], 0x2) (async)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) (async)
r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x2, 0x300}, {0x6e, 0x0, 0xd}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xc, 0x9, 0x0, 0x0, 0x35}, {0x3, 0x0, 0x6, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r2}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

267.019905ms ago: executing program 0 (id=3745):
recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@newqdisc={0x24, 0x24, 0x8, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x5}, {0xffff, 0xffff}, {0xfff3, 0x6}}}, 0x24}}, 0x8040)
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x33, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x1}]}, 0x10)
bind$inet6(r1, &(0x7f0000000280)={0xa, 0x4e20, 0x3, @loopback, 0x80ad}, 0x18)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="740000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b030040000000004c0012800b00010067656e65766500003c0002800800050001000000140007000000000000000005000000000000000108000f"], 0x74}}, 0x0)
sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0)

81.964516ms ago: executing program 2 (id=3746):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x10) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x10)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x40, 0x0)
close(r1)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x5, 0x7, 0xb3}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) (async)
sendmsg$nl_route_sched(r3, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x5, 0x7, 0xb3}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x58, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r5, {0x10}, {}, {0xe, 0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x401, 0xe, 0x7, 0x7, 0x9, 0x40, 0xffffffff, 0x6}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4040098}, 0x4000) (async)
sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x58, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r5, {0x10}, {}, {0xe, 0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x401, 0xe, 0x7, 0x7, 0x9, 0x40, 0xffffffff, 0x6}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4040098}, 0x4000)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
socket$packet(0x11, 0x3, 0x300) (async)
r7 = socket$packet(0x11, 0x3, 0x300)
sendto$packet(r7, &(0x7f0000000140)="bad330fbc9b5544972e7a5ea0756", 0x36, 0x40, &(0x7f00000001c0)={0x11, 0x1a, r6, 0x1, 0xd8, 0x6, @random="98c8ca7122df"}, 0x14)
sendto$packet(r7, &(0x7f0000000480)="c1858aec1d0a21756f66b4805f3a", 0xe, 0x40000, &(0x7f0000000240)={0x11, 0xf8, r6, 0x1, 0x5, 0x6, @random="24f51e8e0a5a"}, 0x14)
socket$netlink(0x10, 0x3, 0x0) (async)
r8 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r8, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async)
sendmmsg(r8, &(0x7f00000002c0), 0x40000000000009f, 0x0)

81.664638ms ago: executing program 0 (id=3747):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0)
sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="6c00000010001fff109e00008000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000003f0000440012800b00010067656e6576650000340002800500030003000000060005004e20000005000400ab000000050009000100000005000a0001000000050009000100000008000a00", @ANYRES32=r4], 0x6c}, 0x1, 0x0, 0x0, 0x1}, 0x0)
r5 = socket(0x10, 0x803, 0x2)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r5)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r6, @ANYBLOB="01"], 0x3c}}, 0x0)
socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="300000001c000104000000000000000002000000", @ANYRES32=r4, @ANYBLOB="000014000a000100aaaaaaaeaaaa000008000f00010000003e11859a3351e595fc6522303ecd2fe0412ad5804dc9e8bde88de007f9ab798191cb7644fdb058e834a9b9d0ffbdaa25858ca385f7b40983bbd331faab301bd7d19c4d35"], 0x30}, 0x1, 0x0, 0x0, 0x408c0}, 0x0)

38.909213ms ago: executing program 4 (id=3748):
getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0xc, &(0x7f0000001500)=""/243, &(0x7f0000001600)=0xf3)
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
ioctl$PPPIOCGL2TPSTATS(r0, 0x8901, &(0x7f0000000080))
r1 = socket$can_j1939(0x1d, 0x2, 0x7)
recvmsg$can_j1939(r1, &(0x7f00000014c0)={&(0x7f0000000000)=@hci, 0x80, &(0x7f0000001400)=[{&(0x7f0000000080)=""/107, 0x6b}, {&(0x7f0000000100)=""/4096, 0x1000}, {&(0x7f0000001100)=""/237, 0xed}, {&(0x7f0000001200)=""/132, 0x84}, {&(0x7f00000012c0)=""/255, 0xff}, {&(0x7f00000013c0)=""/60, 0x3c}], 0x6, &(0x7f0000001480)=""/16, 0x10}, 0x80002000)

0s ago: executing program 1 (id=3749):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x42000, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2})
r1 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x6, 0x30, 0xfffffff9}]}, 0x10)
getsockopt$sock_buf(r1, 0x1, 0x1a, 0x0, &(0x7f0000000100))
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
r4 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_PAUSE_SET(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x2c, r6, 0x2799f5eec7981083, 0x70bd28, 0x259fdbfc, {}, [@ETHTOOL_A_PAUSE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4c810}, 0x20000004)
sendmsg$ETHTOOL_MSG_EEE_SET(r4, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x14, r6, 0x400, 0x70bd25, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x8c1)
ioctl$TUNSETLINK(r0, 0x400454cd, 0x339)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @multicast})
r8 = socket$igmp(0x2, 0x3, 0x2)
ioctl$sock_netdev_private(r8, 0x8948, &(0x7f0000000140)="a6cc04e2d8f1c38afbf14b29b86e3a")
close(r0)

kernel console output (not intermixed with test programs):

netlink: 8 bytes leftover after parsing attributes in process `syz.1.2615'.
[  377.853195][T15875] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2618'.
[  377.980641][T15883] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2621'.
[  378.343877][T15902] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2627'.
[  378.422194][T15902] netlink: 'syz.3.2627': attribute type 1 has an invalid length.
[  378.544872][T15902] 8021q: adding VLAN 0 to HW filter on device bond13
[  378.611092][T15917] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2627'.
[  378.681096][T15913] bond13: (slave veth19): Enslaving as an active interface with a down link
[  378.963795][T15931] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2636'.
[  379.119373][T15939] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2638'.
[  379.129149][T15939] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2638'.
[  379.169513][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms
[  379.177636][    C0] lec:lec_tx_timeout: lec0
[  379.182413][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  379.205643][T15942] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2638'.
[  380.067215][T15973] bond11: option arp_validate: mode dependency failed, not supported in mode 802.3ad(4)
[  380.107100][T15973] bond11 (unregistering): Released all slaves
[  380.183322][T15978] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2647'.
[  380.214234][T15991] erspan0: entered promiscuous mode
[  380.906009][T16029] netlink: 'syz.4.2665': attribute type 1 has an invalid length.
[  381.128007][T16038] netlink: 'syz.1.2666': attribute type 12 has an invalid length.
[  381.146187][T16040] xt_CT: You must specify a L4 protocol and not use inversions on it
[  381.248930][T16043] netlink: 'syz.2.2667': attribute type 22 has an invalid length.
[  381.290390][T16043] netlink: 'syz.2.2667': attribute type 1 has an invalid length.
[  381.508989][T16062] 8021q: VLANs not supported on nlmon0
[  382.433222][T16134] __nla_validate_parse: 6 callbacks suppressed
[  382.433244][T16134] netlink: 207952 bytes leftover after parsing attributes in process `syz.1.2690'.
[  382.687976][T16146] netlink: 92 bytes leftover after parsing attributes in process `syz.3.2694'.
[  383.342751][T16180] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2703'.
[  383.488687][ T6348] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  383.497700][ T6348] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 20000 - 0
[  383.507657][ T6348] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  383.524656][ T6348] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 20000 - 0
[  383.533805][T16182] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2704'.
[  383.546959][ T6348] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  383.555798][ T6348] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 20000 - 0
[  383.591338][ T6348] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  383.606611][ T6348] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 20000 - 0
[  383.896870][T16209] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2707'.
[  383.932688][T16207] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2711'.
[  384.040162][T16212] netlink: 'syz.1.2710': attribute type 1 has an invalid length.
[  384.070601][T16214] --map-set only usable from mangle table
[  384.097492][T16210] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2710'.
[  384.112413][T16210] bond9: entered promiscuous mode
[  384.117821][T16210] bond9: entered allmulticast mode
[  384.123858][T16210] 8021q: adding VLAN 0 to HW filter on device bond9
[  384.162699][T16219] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2714'.
[  384.184091][T16219] tipc: Enabled bearer <eth:vlan0>, priority 0
[  384.199617][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5020 ms
[  384.207753][    C0] lec:lec_tx_timeout: lec0
[  384.212787][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  384.253511][T16210] 8021q: adding VLAN 0 to HW filter on device bond9
[  384.275980][T16210] bond9: (slave geneve4): making interface the new active one
[  384.285486][T16210] geneve4: entered promiscuous mode
[  384.291838][T16210] geneve4: entered allmulticast mode
[  384.298364][T16210] bond9: (slave geneve4): Enslaving as an active interface with an up link
[  384.326206][T16224] geneve1: left allmulticast mode
[  384.332021][T16224] geneve1: left promiscuous mode
[  384.355556][ T6338] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 20004 - 0
[  384.376097][ T6338] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 20004 - 0
[  384.399123][ T6338] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 20004 - 0
[  384.426623][T16233] netlink: 'syz.2.2715': attribute type 1 has an invalid length.
[  384.428881][ T6338] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 20004 - 0
[  384.446722][ T6338] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  384.494058][T16233] 8021q: adding VLAN 0 to HW filter on device bond7
[  384.500518][T16236] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2719'.
[  384.525573][ T6338] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  384.531510][T16233] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2715'.
[  384.558753][T16222] bond7: (slave veth21): Enslaving as an active interface with a down link
[  384.581080][ T6338] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  384.591646][ T6338] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  385.098878][T16272] netlink: 'syz.0.2730': attribute type 5 has an invalid length.
[  385.587394][T16297] netlink: 'syz.1.2738': attribute type 1 has an invalid length.
[  385.645963][T16297] bond10: entered promiscuous mode
[  385.661820][T16297] 8021q: adding VLAN 0 to HW filter on device bond10
[  385.678261][T16302] bond10: entered allmulticast mode
[  385.711416][T16297] bond10: (slave bridge5): making interface the new active one
[  385.719061][T16297] bridge5: entered promiscuous mode
[  385.740310][T16297] bridge5: entered allmulticast mode
[  385.754829][T16297] bond10: (slave bridge5): Enslaving as an active interface with an up link
[  385.861602][T16308] netlink: 'syz.1.2740': attribute type 1 has an invalid length.
[  385.871055][T16308] netlink: 'syz.1.2740': attribute type 1 has an invalid length.
[  385.879046][T16309] netlink: 'syz.1.2740': attribute type 1 has an invalid length.
[  385.887432][T16309] netlink: 'syz.1.2740': attribute type 1 has an invalid length.
[  386.670326][T16338] lec:lec_vcc_attach: copy from user failed for 28 bytes
[  386.729702][T16343] validate_nla: 2 callbacks suppressed
[  386.729726][T16343] netlink: 'syz.2.2750': attribute type 10 has an invalid length.
[  386.962597][T16343] team0: entered promiscuous mode
[  386.968087][T16343] team0: entered allmulticast mode
[  386.989266][T16343] bridge0: port 1(team0) entered blocking state
[  387.006755][T16343] bridge0: port 1(team0) entered disabled state
[  387.017746][T16343] net_ratelimit: 392 callbacks suppressed
[  387.017767][T16343] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  387.227788][T16351] gre0: left promiscuous mode
[  387.286265][T16351] 8021q: adding VLAN 0 to HW filter on device bond0
[  387.297324][T16351] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  387.704977][T16379] __nla_validate_parse: 9 callbacks suppressed
[  387.704998][T16379] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2758'.
[  387.764406][T16383] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2759'.
[  387.798120][T16384] netlink: 'syz.1.2759': attribute type 62 has an invalid length.
[  387.989346][T16403] xt_connbytes: Forcing CT accounting to be enabled
[  388.005217][T16403] xt_CT: You must specify a L4 protocol and not use inversions on it
[  388.052681][T16409] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2765'.
[  388.108041][T16414] bridge0: entered allmulticast mode
[  388.368439][T16430] A link change request failed with some changes committed already. Interface bond1 may have been left with an inconsistent configuration, please check.
[  388.431342][T16430] A link change request failed with some changes committed already. Interface veth1_virt_wifi may have been left with an inconsistent configuration, please check.
[  388.543393][T16435] syzkaller0: entered promiscuous mode
[  388.549043][T16435] syzkaller0: entered allmulticast mode
[  389.229568][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms
[  389.237885][    C0] lec:lec_tx_timeout: lec0
[  389.242954][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  390.266930][T16452] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2778'.
[  390.467450][T16482] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2787'.
[  390.478524][T16478] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2786'.
[  390.494167][T16484] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2786'.
[  390.525383][T16484] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2786'.
[  390.538886][T16484] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2786'.
[  390.638641][T16491] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2790'.
[  390.750503][T16501] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check.
[  390.963521][T16515] netlink: 'syz.0.2797': attribute type 13 has an invalid length.
[  390.987975][T16515] netlink: 'syz.0.2797': attribute type 17 has an invalid length.
[  391.198627][T16515] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  391.467754][T16542] netlink: 'syz.1.2802': attribute type 2 has an invalid length.
[  392.162667][T16576] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  392.173632][T16576] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  392.182821][T16576] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  392.197908][T16576] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  392.207048][T16576] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  392.233938][   T51] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  392.243949][   T51] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  392.251360][   T51] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  392.259953][   T51] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  392.268352][   T51] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  392.505938][T16583] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  392.558381][T16583] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  392.691088][T16583] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  392.740945][T16587] __nla_validate_parse: 71 callbacks suppressed
[  392.740968][T16587] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2817'.
[  392.781887][T16587] openvswitch: netlink: Flow actions attr not present in new flow.
[  392.806313][T16568] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2813'.
[  392.865158][T16574] chnl_net:caif_netlink_parms(): no params data found
[  392.887190][T16587] netlink: 'syz.2.2817': attribute type 1 has an invalid length.
[  392.896265][T16587] netlink: 228 bytes leftover after parsing attributes in process `syz.2.2817'.
[  392.910007][T16587] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2817'.
[  393.062458][T16574] bridge0: port 1(bridge_slave_0) entered blocking state
[  393.070454][T16574] bridge0: port 1(bridge_slave_0) entered disabled state
[  393.074312][T16603] netlink: 'syz.3.2820': attribute type 2 has an invalid length.
[  393.077809][T16574] bridge_slave_0: entered allmulticast mode
[  393.097702][T16574] bridge_slave_0: entered promiscuous mode
[  393.112677][T16603] !©�9: entered promiscuous mode
[  393.118499][T16574] bridge0: port 2(bridge_slave_1) entered blocking state
[  393.120476][T16606] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2821'.
[  393.126616][T16574] bridge0: port 2(bridge_slave_1) entered disabled state
[  393.142594][T16574] bridge_slave_1: entered allmulticast mode
[  393.150903][T16605] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2821'.
[  393.151737][T16574] bridge_slave_1: entered promiscuous mode
[  393.180408][T16604] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2821'.
[  393.254878][T16574] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  393.303611][T16574] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  393.387092][T16616] ip6erspan1: entered allmulticast mode
[  393.424345][T16620] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2824'.
[  393.435140][T16574] team0: Port device team_slave_0 added
[  393.452127][T16574] team0: Port device team_slave_1 added
[  393.458295][T16619] batman_adv: batadv0: Removing interface: batadv_slave_0
[  393.478218][T16619] batman_adv: batadv0: Removing interface: batadv_slave_1
[  393.650664][T16626] netlink: 'syz.4.2825': attribute type 11 has an invalid length.
[  393.668870][T16626] netlink: 'syz.4.2825': attribute type 23 has an invalid length.
[  393.677823][T16626] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2825'.
[  393.735656][T16574] batman_adv: batadv0: Adding interface: batadv_slave_0
[  393.750223][T16574] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  393.855163][T16574] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  393.879160][T16643] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2829'.
[  393.893533][T16574] batman_adv: batadv0: Adding interface: batadv_slave_1
[  393.901618][T16574] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  393.928819][T16574] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  394.085545][T16574] hsr_slave_0: entered promiscuous mode
[  394.102043][T16574] hsr_slave_1: entered promiscuous mode
[  394.112069][T16574] debugfs: 'hsr0' already exists in 'hsr'
[  394.119844][T16574] Cannot create hsr debugfs directory
[  394.224939][T16653] x_tables: duplicate underflow at hook 3
[  394.244428][T16653] nbd: couldn't find a device at index 0
[  394.250338][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms
[  394.250367][    C0] lec:lec_tx_timeout: lec0
[  394.259069][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  394.320015][T16576] Bluetooth: hci5: command tx timeout
[  394.907307][T16674] netlink: 'syz.2.2836': attribute type 2 has an invalid length.
[  395.074969][T16681] geneve4: entered promiscuous mode
[  395.110659][  T194] wlan1: Trigger new scan to find an IBSS to join
[  395.368913][T16574] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  395.409716][T16574] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  395.432607][T16574] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  395.446650][T16574] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  395.673435][T16574] 8021q: adding VLAN 0 to HW filter on device bond0
[  395.752358][T16574] 8021q: adding VLAN 0 to HW filter on device team0
[  395.769010][ T6338] bridge0: port 1(bridge_slave_0) entered blocking state
[  395.776367][ T6338] bridge0: port 1(bridge_slave_0) entered forwarding state
[  395.833381][ T6338] bridge0: port 2(bridge_slave_1) entered blocking state
[  395.840630][ T6338] bridge0: port 2(bridge_slave_1) entered forwarding state
[  396.210852][T16576] block nbd10: Receive control failed (result -1)
[  396.391056][T16576] Bluetooth: hci5: command tx timeout
[  396.398573][T16740] tipc: Invalid UDP bearer configuration
[  396.398632][T16740] tipc: Enabling of bearer <udp:sy{±> rejected, failed to enable media
[  396.747613][T16574] 8021q: adding VLAN 0 to HW filter on device batadv0
[  396.981386][T16574] veth0_vlan: entered promiscuous mode
[  397.011493][T16574] veth1_vlan: entered promiscuous mode
[  397.111147][T16574] veth0_macvtap: entered promiscuous mode
[  397.134014][T16574] veth1_macvtap: entered promiscuous mode
[  397.196156][T16574] batman_adv: batadv0: Interface activated: batadv_slave_0
[  397.243262][T16574] batman_adv: batadv0: Interface activated: batadv_slave_1
[  397.284856][ T6348] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  397.295145][ T6348] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  397.312003][ T6348] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  397.321482][ T6348] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  397.487137][T16783] dvmrp0: entered allmulticast mode
[  397.631180][ T6348] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  397.656282][ T6348] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  397.709192][ T6348] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  397.728302][ T6348] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  398.071177][ T6335] wlan1: Trigger new scan to find an IBSS to join
[  398.104988][T16796] bridge1: entered promiscuous mode
[  398.196846][T16793] __nla_validate_parse: 11 callbacks suppressed
[  398.196870][T16793] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2866'.
[  398.429371][T16812] netlink: 47 bytes leftover after parsing attributes in process `syz.4.2869'.
[  398.473476][T16576] Bluetooth: hci5: command tx timeout
[  398.498767][T16813] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.2869'.
[  399.080173][T16843] netlink: 'syz.1.2878': attribute type 6 has an invalid length.
[  399.251464][T16851] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2879'.
[  399.269521][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5020 ms
[  399.277626][    C0] lec:lec_tx_timeout: lec0
[  399.282569][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  399.829930][T16870] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2886'.
[  399.855882][T16870] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2886'.
[  399.878118][T16870] netlink: 'syz.3.2886': attribute type 4 has an invalid length.
[  400.208697][T16881] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2887'.
[  400.246411][T16881] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2887'.
[  400.471265][T16888] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2890'.
[  400.555701][T16576] Bluetooth: hci5: command tx timeout
[  400.663639][T16896] sctp: [Deprecated]: syz.1.2893 (pid 16896) Use of struct sctp_assoc_value in delayed_ack socket option.
[  400.663639][T16896] Use struct sctp_sack_info instead
[  400.691267][T16896] sctp: [Deprecated]: syz.1.2893 (pid 16896) Use of struct sctp_assoc_value in delayed_ack socket option.
[  400.691267][T16896] Use struct sctp_sack_info instead
[  401.117360][ T6348] wlan1: Trigger new scan to find an IBSS to join
[  401.236227][T16914] syzkaller1: entered promiscuous mode
[  401.242957][T16914] syzkaller1: entered allmulticast mode
[  401.364078][T16919] netlink: 'syz.2.2899': attribute type 16 has an invalid length.
[  401.435998][T16927] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2899'.
[  401.558577][T16919] tipc: Resetting bearer <eth:syzkaller0>
[  401.639745][ T6335] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  401.660428][ T6335] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  401.668878][ T6335] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  401.728312][ T6335] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  401.757605][ T6335] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  401.770984][ T6335] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  401.780013][ T6335] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  401.788529][ T6335] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  402.066600][T16952] netlink: 'syz.3.2906': attribute type 1 has an invalid length.
[  402.066769][   T79] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  402.131756][T16952] 8021q: adding VLAN 0 to HW filter on device bond14
[  402.298174][T16964] netlink: 'syz.2.2908': attribute type 1 has an invalid length.
[  402.403001][T16970] pim6reg: entered allmulticast mode
[  402.613993][T16985] syzkaller1: entered promiscuous mode
[  402.619942][T16985] syzkaller1: entered allmulticast mode
[  403.579290][T17032] netlink: 'syz.3.2919': attribute type 2 has an invalid length.
[  403.647417][T17032] ÃM¯”ÛÓó: entered promiscuous mode
[  403.715990][T17042] __nla_validate_parse: 2 callbacks suppressed
[  403.716012][T17042] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2923'.
[  403.804635][T17049] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2926'.
[  403.824257][T17048] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2925'.
[  404.070776][T16576] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  404.251340][T17079] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2933'.
[  404.292393][T17081] netlink: 'syz.2.2935': attribute type 1 has an invalid length.
[  404.325821][T17083] netlink: 'syz.1.2936': attribute type 8 has an invalid length.
[  404.346213][T17092] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2935'.
[  404.396946][ T1930] block nbd9: Possible stuck request ffff888027380000: control (read@0,1024B). Runtime 30 seconds
[  404.396996][ T1873] block nbd8: Possible stuck request ffff888027310000: control (read@0,1024B). Runtime 30 seconds
[  404.397827][ T1873] block nbd8: Possible stuck request ffff888027310200: control (read@1024,1024B). Runtime 30 seconds
[  404.409916][ T1930] block nbd9: Possible stuck request ffff888027380200: control (read@1024,1024B). Runtime 30 seconds
[  404.421864][T17097] ipt_REJECT: ECHOREPLY no longer supported.
[  404.430645][ T1930] block nbd9: Possible stuck request ffff888027380400: control (read@2048,1024B). Runtime 30 seconds
[  404.430681][ T1930] block nbd9: Possible stuck request ffff888027380600: control (read@3072,1024B). Runtime 30 seconds
[  404.432660][T17081] 8021q: adding VLAN 0 to HW filter on device bond8
[  404.444438][ T1873] block nbd8: Possible stuck request ffff888027310400: control (read@2048,1024B). Runtime 30 seconds
[  404.492894][ T1873] block nbd8: Possible stuck request ffff888027310600: control (read@3072,1024B). Runtime 30 seconds
[  404.510842][T17092] bond8 (unregistering): Released all slaves
[  404.702899][T17114] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2943'.
[  404.702985][T17112] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2942'.
[  404.800477][T17121] SET target dimension over the limit!
[  404.914899][T17122] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2940'.
[  404.925691][T17122] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2940'.
[  404.936304][T17112] netlink: 'syz.4.2942': attribute type 11 has an invalid length.
[  404.959486][T17112] netlink: 'syz.4.2942': attribute type 23 has an invalid length.
[  404.960932][T17122] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2940'.
[  405.008051][T17110] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  405.022797][T17110] Bluetooth: hci5: Error when powering off device on rfkill (-4)
[  405.041497][T17116] gretap2: entered promiscuous mode
[  405.119427][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5840 ms
[  405.127520][    C0] lec:lec_tx_timeout: lec0
[  405.133257][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  405.282427][T17136] tipc: Started in network mode
[  405.287452][T17136] tipc: Node identity , cluster identity 4711
[  405.296103][T17136] tipc: Failed to obtain node identity
[  405.302514][T17136] tipc: Enabling of bearer <eth:caif0> rejected, failed to enable media
[  405.318041][T17136] 0ªX¹¦À: renamed from caif0
[  405.345041][T17136] 0ªX¹¦À: entered allmulticast mode
[  405.350966][T17136] A link change request failed with some changes committed already. Interface 
60ªX¹¦À may have been left with an inconsistent configuration, please check.
[  405.644450][T17157] can: request_module (can-proto-4) failed.
[  405.906633][T17180] openvswitch: netlink: Key type 769 is out of range max 32
[  405.906634][T17179] openvswitch: netlink: Key type 769 is out of range max 32
[  406.047391][T17184] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  406.256592][T17188] tipc: Resetting bearer <eth:syzkaller0>
[  406.736050][T17233] netlink: 'syz.2.2975': attribute type 29 has an invalid length.
[  407.316109][T17281] IPVS: sync thread started: state = BACKUP, mcast_ifn = hsr0, syncid = 786440, id = 0
[  407.543179][T17284] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  407.584007][T17284] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  407.639728][T17284] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  407.646064][T17284] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  407.739563][T17284] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  407.764848][T17294] sysfs: cannot create duplicate filename '/class/ieee80211/

Ï€ã!Äû'
[  407.779147][T17284] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  407.809625][T17284] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  407.816179][T17294] CPU: 0 UID: 0 PID: 17294 Comm: syz.1.2995 Not tainted syzkaller #0 PREEMPT(full) 
[  407.816210][T17294] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  407.816222][T17294] Call Trace:
[  407.816231][T17294]  <TASK>
[  407.816241][T17294]  dump_stack_lvl+0xe8/0x150
[  407.816278][T17294]  sysfs_warn_dup+0x8e/0xa0
[  407.816310][T17294]  sysfs_do_create_link_sd+0xc0/0x110
[  407.816344][T17294]  device_add_class_symlinks+0x1cf/0x240
[  407.816373][T17294]  device_add+0x475/0xb70
[  407.816401][T17294]  wiphy_register+0x1d73/0x2d50
[  407.816445][T17294]  ? __pfx_wiphy_register+0x10/0x10
[  407.816478][T17294]  ? __pfx_netdev_run_todo+0x10/0x10
[  407.816504][T17294]  ? minstrel_ht_alloc+0x6e0/0x7e0
[  407.816536][T17294]  ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0
[  407.816574][T17294]  ieee80211_register_hw+0x35f0/0x42c0
[  407.816625][T17294]  ? ieee80211_register_hw+0x1451/0x42c0
[  407.816666][T17294]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  407.816714][T17294]  ? __hrtimer_setup+0x181/0x200
[  407.816742][T17294]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  407.816772][T17294]  mac80211_hwsim_new_radio+0x3334/0x5b60
[  407.816834][T17294]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  407.816854][T17294]  ? kstrndup+0xbf/0x160
[  407.816894][T17294]  hwsim_new_radio_nl+0xf6a/0x1c00
[  407.816946][T17294]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  407.816981][T17294]  ? rcu_is_watching+0x15/0xb0
[  407.817011][T17294]  ? trace_kmalloc+0x2a/0x110
[  407.817042][T17294]  ? __nla_parse+0x40/0x60
[  407.817078][T17294]  ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0
[  407.817102][T17294]  ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0
[  407.817136][T17294]  genl_family_rcv_msg_doit+0x22a/0x330
[  407.817169][T17294]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  407.817209][T17294]  ? bpf_lsm_capable+0x9/0x20
[  407.817236][T17294]  ? security_capable+0x7e/0x2c0
[  407.817271][T17294]  genl_rcv_msg+0x61c/0x7a0
[  407.817304][T17294]  ? __pfx_genl_rcv_msg+0x10/0x10
[  407.817327][T17294]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  407.817351][T17294]  ? __lock_acquire+0x6b5/0x2cf0
[  407.817393][T17294]  netlink_rcv_skb+0x232/0x4b0
[  407.817423][T17294]  ? __pfx_genl_rcv_msg+0x10/0x10
[  407.817448][T17294]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  407.817509][T17294]  ? down_read+0x272/0x2e0
[  407.817527][T17294]  ? genl_rcv+0xd/0x40
[  407.817550][T17294]  genl_rcv+0x28/0x40
[  407.817569][T17294]  netlink_unicast+0x80f/0x9b0
[  407.817606][T17294]  ? __pfx_netlink_unicast+0x10/0x10
[  407.817633][T17294]  ? netlink_sendmsg+0x650/0xb40
[  407.817658][T17294]  ? skb_put+0x11b/0x210
[  407.817693][T17294]  netlink_sendmsg+0x813/0xb40
[  407.817736][T17294]  ? __pfx_netlink_sendmsg+0x10/0x10
[  407.817766][T17294]  ? aa_sock_msg_perm+0xf1/0x1b0
[  407.817794][T17294]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  407.817820][T17294]  ____sys_sendmsg+0x972/0x9f0
[  407.817839][T17294]  ? futex_unqueue+0x211/0x240
[  407.817870][T17294]  ? __pfx_____sys_sendmsg+0x10/0x10
[  407.817901][T17294]  ? import_iovec+0x73/0xa0
[  407.817938][T17294]  ___sys_sendmsg+0x2a5/0x360
[  407.817969][T17294]  ? __pfx____sys_sendmsg+0x10/0x10
[  407.818001][T17294]  ? futex_wait+0x29a/0x380
[  407.818063][T17294]  ? __fget_files+0x2a/0x420
[  407.818092][T17294]  ? __fget_files+0x3a0/0x420
[  407.818136][T17294]  __x64_sys_sendmsg+0x1bd/0x2a0
[  407.818162][T17294]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  407.818196][T17294]  ? rcu_is_watching+0x15/0xb0
[  407.818239][T17294]  do_syscall_64+0x14d/0xf80
[  407.818269][T17294]  ? trace_irq_disable+0x3b/0x150
[  407.818299][T17294]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  407.818320][T17294]  ? clear_bhb_loop+0x40/0x90
[  407.818348][T17294]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  407.818370][T17294] RIP: 0033:0x7fed8539c799
[  407.818391][T17294] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  407.818410][T17294] RSP: 002b:00007fed862a1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  407.818435][T17294] RAX: ffffffffffffffda RBX: 00007fed85615fa0 RCX: 00007fed8539c799
[  407.818452][T17294] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000004
[  407.818475][T17294] RBP: 00007fed85432c99 R08: 0000000000000000 R09: 0000000000000000
[  407.818488][T17294] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  407.818500][T17294] R13: 00007fed85616038 R14: 00007fed85615fa0 R15: 00007ffd1cad1638
[  407.818539][T17294]  </TASK>
[  408.271362][T17284] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  408.277697][T17284] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  408.307184][   T51] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  408.317735][   T51] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  408.347125][   T51] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  408.361177][   T51] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  408.369020][   T51] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  408.420500][T17300] syzkaller0: entered promiscuous mode
[  408.445476][T17300] syzkaller0: entered allmulticast mode
[  408.479094][T16576] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  408.495226][T16576] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  408.514584][T16576] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  408.526154][T16576] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  408.536115][T16576] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  408.652931][T17300] tipc: Started in network mode
[  408.657886][T17300] tipc: Node identity 3e1664f7f5bf, cluster identity 4711
[  408.666644][T17300] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  408.688988][T17295] tipc: Resetting bearer <eth:syzkaller0>
[  408.713881][T17295] tipc: Disabling bearer <eth:syzkaller0>
[  408.849573][T17316] syzkaller1: entered promiscuous mode
[  408.855394][T17316] syzkaller1: entered allmulticast mode
[  409.065257][T17298] chnl_net:caif_netlink_parms(): no params data found
[  409.261935][T17328] bridge0: port 2(bridge_slave_1) entered disabled state
[  409.269792][T17328] bridge0: port 1(bridge_slave_0) entered disabled state
[  409.403064][T17298] bridge0: port 1(bridge_slave_0) entered blocking state
[  409.452200][T17298] bridge0: port 1(bridge_slave_0) entered disabled state
[  409.460230][T17298] bridge_slave_0: entered allmulticast mode
[  409.468314][T17298] bridge_slave_0: entered promiscuous mode
[  409.484275][T17298] bridge0: port 2(bridge_slave_1) entered blocking state
[  409.492329][T17339] __nla_validate_parse: 112 callbacks suppressed
[  409.492349][T17339] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3006'.
[  409.500667][T17298] bridge0: port 2(bridge_slave_1) entered disabled state
[  409.537939][T17298] bridge_slave_1: entered allmulticast mode
[  409.576620][T17298] bridge_slave_1: entered promiscuous mode
[  409.697872][T17298] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  409.726827][T17349] bridge0: port 1(bridge_slave_0) entered blocking state
[  409.737744][T17349] bridge0: port 1(bridge_slave_0) entered disabled state
[  409.746793][T17349] bridge_slave_0: entered allmulticast mode
[  409.756898][T17349] bridge_slave_0: entered promiscuous mode
[  409.770713][T17298] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  409.836315][T17359] netlink: 27 bytes leftover after parsing attributes in process `syz.4.3013'.
[  409.881410][T17298] team0: Port device team_slave_0 added
[  409.891701][T17298] team0: Port device team_slave_1 added
[  409.955967][T17370] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3015'.
[  410.001646][T17298] batman_adv: batadv0: Adding interface: batadv_slave_0
[  410.009272][T17298] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  410.038144][T17298] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  410.059175][T17298] batman_adv: batadv0: Adding interface: batadv_slave_1
[  410.074064][T17298] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  410.114572][T17298] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  410.128689][T17375] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3016'.
[  410.139612][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms
[  410.146433][T17375] macvlan0: entered promiscuous mode
[  410.147724][    C0] lec:lec_tx_timeout: lec0
[  410.148185][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  410.154322][T17375] macvlan0: entered allmulticast mode
[  410.186290][T17375] veth1_to_batadv: entered allmulticast mode
[  410.202428][T17370] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3015'.
[  410.216934][T17370] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3015'.
[  410.242491][T17372] netlink: 'syz.4.3015': attribute type 4 has an invalid length.
[  410.375294][T17298] hsr_slave_0: entered promiscuous mode
[  410.383108][T17298] hsr_slave_1: entered promiscuous mode
[  410.391557][T17298] debugfs: 'hsr0' already exists in 'hsr'
[  410.397442][T17298] Cannot create hsr debugfs directory
[  410.498293][T17395] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  410.574016][T17395] tipc: Disabling bearer <eth:syzkaller0>
[  410.629653][   T51] Bluetooth: hci2: command tx timeout
[  410.959279][T17298] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  410.970121][T17298] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  410.980054][T17298] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  410.991900][T17298] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  411.063354][T17298] 8021q: adding VLAN 0 to HW filter on device bond0
[  411.082836][T17298] 8021q: adding VLAN 0 to HW filter on device team0
[  411.096311][ T6335] bridge0: port 1(bridge_slave_0) entered blocking state
[  411.103464][ T6335] bridge0: port 1(bridge_slave_0) entered forwarding state
[  411.119040][ T6333] bridge0: port 2(bridge_slave_1) entered blocking state
[  411.126382][ T6333] bridge0: port 2(bridge_slave_1) entered forwarding state
[  411.298166][T17298] 8021q: adding VLAN 0 to HW filter on device batadv0
[  411.347541][T17298] veth0_vlan: entered promiscuous mode
[  411.358539][T17298] veth1_vlan: entered promiscuous mode
[  411.390805][T17298] veth0_macvtap: entered promiscuous mode
[  411.402857][T17298] veth1_macvtap: entered promiscuous mode
[  411.421532][T17298] batman_adv: batadv0: Interface activated: batadv_slave_0
[  411.438532][T17298] batman_adv: batadv0: Interface activated: batadv_slave_1
[  411.453145][   T35] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  411.463837][   T35] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  411.475180][   T35] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  411.484568][   T35] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  411.557757][ T6335] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  411.578872][ T6335] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  411.610800][ T6335] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  411.618710][ T6335] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  411.751293][ T5944] IPVS: starting estimator thread 0...
[  411.758670][T17414] IPVS: set_ctl: invalid protocol: 60 10.1.1.2:20004
[  411.767306][T17414] IPVS: sh: FWM 3 0x00000003 - no destination available
[  411.775419][    C1] IPVS: sh: FWM 3 0x00000003 - no destination available
[  411.787432][T17412] IPVS: sh: FWM 3 0x00000003 - no destination available
[  411.795297][    C1] IPVS: sh: FWM 3 0x00000003 - no destination available
[  411.860388][T17415] IPVS: using max 26 ests per chain, 62400 per kthread
[  412.720041][   T51] Bluetooth: hci2: command tx timeout
[  414.792651][   T51] Bluetooth: hci2: command tx timeout
[  415.159600][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms
[  415.167730][    C0] lec:lec_tx_timeout: lec0
[  415.172629][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  416.870639][   T51] Bluetooth: hci2: command tx timeout
[  420.179579][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms
[  420.187717][    C0] lec:lec_tx_timeout: lec0
[  420.192339][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  425.199545][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms
[  425.207615][    C0] lec:lec_tx_timeout: lec0
[  425.212875][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  430.229623][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5020 ms
[  430.237841][    C0] lec:lec_tx_timeout: lec0
[  430.242656][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  434.470367][ T1873] block nbd8: Possible stuck request ffff888027310000: control (read@0,1024B). Runtime 60 seconds
[  434.479584][ T1930] block nbd9: Possible stuck request ffff888027380000: control (read@0,1024B). Runtime 60 seconds
[  434.481589][ T1873] block nbd8: Possible stuck request ffff888027310200: control (read@1024,1024B). Runtime 60 seconds
[  434.492735][ T1930] block nbd9: Possible stuck request ffff888027380200: control (read@1024,1024B). Runtime 60 seconds
[  434.514230][ T1930] block nbd9: Possible stuck request ffff888027380400: control (read@2048,1024B). Runtime 60 seconds
[  434.525268][ T1930] block nbd9: Possible stuck request ffff888027380600: control (read@3072,1024B). Runtime 60 seconds
[  434.536683][ T1873] block nbd8: Possible stuck request ffff888027310400: control (read@2048,1024B). Runtime 60 seconds
[  434.547708][ T1873] block nbd8: Possible stuck request ffff888027310600: control (read@3072,1024B). Runtime 60 seconds
[  435.249513][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms
[  435.257665][    C0] lec:lec_tx_timeout: lec0
[  435.262340][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  436.154442][ T5193] udevd[5193]: worker [15562] /devices/virtual/block/nbd8 is taking a long time
[  436.164004][ T5193] udevd[5193]: worker [15692] /devices/virtual/block/nbd9 is taking a long time
[  440.242193][ T1299] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  440.269493][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms
[  440.277824][    C0] lec:lec_tx_timeout: lec0
[  440.282550][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  446.069464][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5790 ms
[  446.077915][    C0] lec:lec_tx_timeout: lec0
[  446.082742][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  451.110523][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5030 ms
[  451.118617][    C0] lec:lec_tx_timeout: lec0
[  451.123307][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  456.139505][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms
[  456.147609][    C0] lec:lec_tx_timeout: lec0
[  456.152613][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  456.194919][T17435] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3026'.
[  456.515720][T17441] syzkaller0: entered promiscuous mode
[  456.521855][T17441] syzkaller0: entered allmulticast mode
[  456.612763][T16576] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  456.625068][T16576] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  456.641194][T16576] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  456.649892][T16576] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  456.670163][T16576] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  456.900819][T17462] nbd: couldn't find a device at index 0
[  456.958734][T17466] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3035'.
[  457.281931][T17483] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3040'.
[  457.378694][T17449] chnl_net:caif_netlink_parms(): no params data found
[  457.491828][T17492] batadv_slave_0: entered promiscuous mode
[  457.518452][T17491] batadv_slave_0: left promiscuous mode
[  457.536731][T17499] netlink: 'syz.3.3042': attribute type 3 has an invalid length.
[  457.545305][T17499] netlink: 'syz.3.3042': attribute type 1 has an invalid length.
[  457.553187][T17499] netlink: 232 bytes leftover after parsing attributes in process `syz.3.3042'.
[  457.595337][T17449] bridge0: port 1(bridge_slave_0) entered blocking state
[  457.603909][T17449] bridge0: port 1(bridge_slave_0) entered disabled state
[  457.613137][T17449] bridge_slave_0: entered allmulticast mode
[  457.622464][T17449] bridge_slave_0: entered promiscuous mode
[  457.630370][T17502] netem: change failed
[  457.634970][T17449] bridge0: port 2(bridge_slave_1) entered blocking state
[  457.642543][T17449] bridge0: port 2(bridge_slave_1) entered disabled state
[  457.650020][T17449] bridge_slave_1: entered allmulticast mode
[  457.658403][T17449] bridge_slave_1: entered promiscuous mode
[  457.699258][T17507] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3046'.
[  457.744932][T17449] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  457.777627][T17449] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  457.797459][T17508] 
@0Ù: renamed from bond_slave_1 (while UP)
[  457.876337][T17449] team0: Port device team_slave_0 added
[  457.886696][T17449] team0: Port device team_slave_1 added
[  457.921740][T17449] batman_adv: batadv0: Adding interface: batadv_slave_0
[  457.928732][T17449] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  457.966074][T17449] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  457.986598][T17449] batman_adv: batadv0: Adding interface: batadv_slave_1
[  458.010336][T17449] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  458.055241][T17449] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  458.109061][T17449] hsr_slave_0: entered promiscuous mode
[  458.116006][T17449] hsr_slave_1: entered promiscuous mode
[  458.122924][T17449] debugfs: 'hsr0' already exists in 'hsr'
[  458.128680][T17449] Cannot create hsr debugfs directory
[  458.296378][T17449] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  458.308868][T17449] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0
[  458.403475][T17449] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  458.414906][T17449] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0
[  458.507801][T17449] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  458.518613][T17449] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0
[  458.582467][T17449] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  458.593310][T17449] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0
[  458.709973][T16576] Bluetooth: hci1: command tx timeout
[  458.732740][T17449] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  458.744066][T17449] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  458.754396][T17449] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  458.764965][T17449] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  458.846879][T17449] 8021q: adding VLAN 0 to HW filter on device bond0
[  458.868522][T17449] 8021q: adding VLAN 0 to HW filter on device team0
[  458.889346][ T6338] bridge0: port 1(bridge_slave_0) entered blocking state
[  458.896572][ T6338] bridge0: port 1(bridge_slave_0) entered forwarding state
[  458.924154][ T6338] bridge0: port 2(bridge_slave_1) entered blocking state
[  458.931403][ T6338] bridge0: port 2(bridge_slave_1) entered forwarding state
[  459.114121][T17449] 8021q: adding VLAN 0 to HW filter on device batadv0
[  459.163327][T17449] veth0_vlan: entered promiscuous mode
[  459.176037][T17449] veth1_vlan: entered promiscuous mode
[  459.207327][T17449] veth0_macvtap: entered promiscuous mode
[  459.217564][T17449] veth1_macvtap: entered promiscuous mode
[  459.236395][T17449] batman_adv: batadv0: Interface activated: batadv_slave_0
[  459.256426][T17449] batman_adv: batadv0: Interface activated: batadv_slave_1
[  459.274412][  T194] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  459.283518][  T194] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  459.296041][  T194] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  459.306237][  T194] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  459.375167][  T194] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  459.388882][  T194] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  459.414875][  T194] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  459.422984][  T194] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  460.794370][T16576] Bluetooth: hci1: command tx timeout
[  461.159495][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms
[  461.167534][    C0] lec:lec_tx_timeout: lec0
[  461.172362][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  462.870487][T16576] Bluetooth: hci1: command tx timeout
[  464.552561][ T1873] block nbd8: Possible stuck request ffff888027310000: control (read@0,1024B). Runtime 90 seconds
[  464.552623][ T1930] block nbd9: Possible stuck request ffff888027380000: control (read@0,1024B). Runtime 90 seconds
[  464.563696][ T1873] block nbd8: Possible stuck request ffff888027310200: control (read@1024,1024B). Runtime 90 seconds
[  464.575026][ T1930] block nbd9: Possible stuck request ffff888027380200: control (read@1024,1024B). Runtime 90 seconds
[  464.585956][ T1873] block nbd8: Possible stuck request ffff888027310400: control (read@2048,1024B). Runtime 90 seconds
[  464.597964][ T1930] block nbd9: Possible stuck request ffff888027380400: control (read@2048,1024B). Runtime 90 seconds
[  464.608789][ T1873] block nbd8: Possible stuck request ffff888027310600: control (read@3072,1024B). Runtime 90 seconds
[  464.618940][ T1930] block nbd9: Possible stuck request ffff888027380600: control (read@3072,1024B). Runtime 90 seconds
[  464.950460][T16576] Bluetooth: hci1: command tx timeout
[  466.179595][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms
[  466.187648][    C0] lec:lec_tx_timeout: lec0
[  466.192349][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  471.199472][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms
[  471.207629][    C0] lec:lec_tx_timeout: lec0
[  471.212427][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  476.219518][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms
[  476.227561][    C0] lec:lec_tx_timeout: lec0
[  494.630021][ T1930] block nbd9: Possible stuck request ffff888027380000: control (read@0,1024B). Runtime 120 seconds
[  494.640923][ T1873] block nbd8: Possible stuck request ffff888027310000: control (read@0,1024B). Runtime 120 seconds
[  494.640922][ T1930] block nbd9: Possible stuck request ffff888027380200: control (read@1024,1024B). Runtime 120 seconds
[  494.640962][ T1930] block nbd9: Possible stuck request ffff888027380400: control (read@2048,1024B). Runtime 120 seconds
[  494.652257][ T1873] block nbd8: Possible stuck request ffff888027310200: control (read@1024,1024B). Runtime 120 seconds
[  494.663043][ T1930] block nbd9: Possible stuck request ffff888027380600: control (read@3072,1024B). Runtime 120 seconds
[  494.697574][ T1873] block nbd8: Possible stuck request ffff888027310400: control (read@2048,1024B). Runtime 120 seconds
[  494.729766][ T1873] block nbd8: Possible stuck request ffff888027310600: control (read@3072,1024B). Runtime 120 seconds
[  496.020874][T11718] lec:lec_start_xmit: lec0:No lecd attached
[  497.123835][ T6335] bond1 (unregistering): Released all slaves
[  497.138133][ T6335] bond0 (unregistering): Released all slaves
[  497.152030][ T6335] bond2 (unregistering): Released all slaves
[  497.166027][ T6335] bond3 (unregistering): Released all slaves
[  497.188776][ T6335] bond4 (unregistering): Released all slaves
[  497.207908][ T6335] bond5 (unregistering): Released all slaves
[  497.221654][ T6335] bond6 (unregistering): Released all slaves
[  497.236669][ T6335] bond7 (unregistering): (slave veth21): Releasing active interface
[  497.253747][ T6335] bond7 (unregistering): Released all slaves
[  497.393217][ T6335] tipc: Disabling bearer <eth:syzkaller0>
[  497.406573][ T6335] tipc: Left network mode
[  498.382303][ T6335] IPVS: stop unused estimator thread 0...
[  501.109643][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5090 ms
[  501.117685][    C0] lec:lec_tx_timeout: lec0
[  501.672921][ T1299] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  501.683226][ T1299] lec:lec_start_xmit: lec0:No lecd attached
[  505.320781][T17547] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3053'.
[  505.322908][T17549] IPVS: sh: FWM 3 0x00000003 - no destination available
[  505.349301][    C1] IPVS: sh: FWM 3 0x00000003 - no destination available
[  505.644391][   T51] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  505.657010][   T51] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  505.664720][T17561] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3056'.
[  505.680993][   T51] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  505.691491][   T51] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  505.706604][   T51] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  506.097628][T17576] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3060'.
[  506.208076][T17579] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3060'.
[  506.317322][T17585] wlan1 speed is unknown, defaulting to 1000
[  506.327597][T17585] wlan1 speed is unknown, defaulting to 1000
[  506.356434][T17585] wlan1 speed is unknown, defaulting to 1000
[  506.362937][T17590] netlink: 148 bytes leftover after parsing attributes in process `syz.3.3062'.
[  506.398007][T17585] infiniband óyz2: RDMA CMA: cma_listen_on_dev, error -98
[  506.448440][T17556] chnl_net:caif_netlink_parms(): no params data found
[  506.477375][T17585] wlan1 speed is unknown, defaulting to 1000
[  506.504948][T17585] wlan1 speed is unknown, defaulting to 1000
[  506.542953][T17585] wlan1 speed is unknown, defaulting to 1000
[  506.602224][T17585] wlan1 speed is unknown, defaulting to 1000
[  506.650308][T17585] wlan1 speed is unknown, defaulting to 1000
[  506.682455][T17604] netlink: 200 bytes leftover after parsing attributes in process `syz.2.3065'.
[  506.711686][T17585] wlan1 speed is unknown, defaulting to 1000
[  506.771620][T17585] wlan1 speed is unknown, defaulting to 1000
[  506.771789][T17556] bridge0: port 1(bridge_slave_0) entered blocking state
[  506.786069][T17556] bridge0: port 1(bridge_slave_0) entered disabled state
[  506.796338][T17556] bridge_slave_0: entered allmulticast mode
[  506.806961][T17556] bridge_slave_0: entered promiscuous mode
[  506.817710][T17556] bridge0: port 2(bridge_slave_1) entered blocking state
[  506.825897][T17556] bridge0: port 2(bridge_slave_1) entered disabled state
[  506.834220][T17556] bridge_slave_1: entered allmulticast mode
[  506.844506][T17556] bridge_slave_1: entered promiscuous mode
[  506.859173][T17585] wlan1 speed is unknown, defaulting to 1000
[  506.911608][T17556] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  506.936793][T17556] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  507.021464][T17613] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3066'.
[  507.036391][T17610] team0 (unregistering): Port device C removed
[  507.060329][T17610] team0 (unregistering): Port device team_slave_1 removed
[  507.080757][T17610] team0 (unregistering): Port device syz_tun removed
[  507.109464][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5430 ms
[  507.117517][    C0] lec:lec_tx_timeout: lec0
[  507.151718][T17615] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3068'.
[  507.202441][T17622] bond2 (unregistering): Released all slaves
[  507.257223][T17632] netlink: 'syz.2.3068': attribute type 2 has an invalid length.
[  507.302821][T17556] team0: Port device team_slave_0 added
[  507.318459][T17632] : entered promiscuous mode
[  507.338903][T17612] wlan1 speed is unknown, defaulting to 1000
[  507.374414][T17556] team0: Port device team_slave_1 added
[  507.516558][T17637] IPv6: sit1: Disabled Multicast RS
[  507.750029][T16576] Bluetooth: hci3: command tx timeout
[  507.819123][T17556] batman_adv: batadv0: Adding interface: batadv_slave_0
[  507.827414][T17556] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  507.858619][T17556] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  507.873586][T17556] batman_adv: batadv0: Adding interface: batadv_slave_1
[  507.886600][T17556] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  507.923212][T17556] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  508.029273][T17556] hsr_slave_0: entered promiscuous mode
[  508.043259][T17556] hsr_slave_1: entered promiscuous mode
[  508.050495][T17556] debugfs: 'hsr0' already exists in 'hsr'
[  508.056393][T17556] Cannot create hsr debugfs directory
[  508.065669][T17668] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3081'.
[  508.093861][T17671] netlink: 666 bytes leftover after parsing attributes in process `syz.1.3082'.
[  508.380947][T17679] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  508.406086][T17677] netlink: 'syz.2.3085': attribute type 4 has an invalid length.
[  508.422288][T17679] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  508.444787][T17679] bond0 (unregistering): Released all slaves
[  508.510663][T17691] vlan2: entered promiscuous mode
[  508.564352][T17691] bridge0: entered promiscuous mode
[  509.048809][T17709] netlink: 'syz.2.3089': attribute type 10 has an invalid length.
[  509.092368][T17709] team0: Cannot enslave team device to itself
[  509.291797][T17713] tipc: Started in network mode
[  509.296729][T17713] tipc: Node identity 3ac1e6ebe39c, cluster identity 4711
[  509.310999][T17713] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  509.331952][T17713] syzkaller0: entered promiscuous mode
[  509.337494][T17713] syzkaller0: entered allmulticast mode
[  509.397331][T17713] tipc: Resetting bearer <eth:syzkaller0>
[  509.504980][T17712] tipc: Resetting bearer <eth:syzkaller0>
[  509.541980][T17712] tipc: Disabling bearer <eth:syzkaller0>
[  509.727488][T17556] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  509.817003][T17732] syzkaller0: entered promiscuous mode
[  509.823236][T17732] syzkaller0: entered allmulticast mode
[  509.830430][T16576] Bluetooth: hci3: command tx timeout
[  509.831429][T17556] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  511.910645][T16576] Bluetooth: hci3: command tx timeout
[  512.218656][T17556] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  512.262921][T17556] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  512.342341][T17765] rds_bind: 23 callbacks suppressed
[  512.342364][T17765] RDS: rds_bind could not find a transport for ::ffff:172.20.20.187, load rds_tcp or rds_rdma?
[  512.407553][T17768] netlink: 'syz.1.3105': attribute type 3 has an invalid length.
[  512.513832][T17775] sctp: [Deprecated]: syz.0.3106 (pid 17775) Use of struct sctp_assoc_value in delayed_ack socket option.
[  512.513832][T17775] Use struct sctp_sack_info instead
[  512.628459][T17556] 8021q: adding VLAN 0 to HW filter on device bond0
[  512.695857][T17556] 8021q: adding VLAN 0 to HW filter on device team0
[  512.718225][ T6335] bridge0: port 1(bridge_slave_0) entered blocking state
[  512.725442][ T6335] bridge0: port 1(bridge_slave_0) entered forwarding state
[  512.766851][ T6335] bridge0: port 2(bridge_slave_1) entered blocking state
[  512.774280][ T6335] bridge0: port 2(bridge_slave_1) entered forwarding state
[  513.014778][T17805] __nla_validate_parse: 3 callbacks suppressed
[  513.014799][T17805] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3116'.
[  513.528568][T17556] 8021q: adding VLAN 0 to HW filter on device batadv0
[  513.672628][T17822] wlan1 speed is unknown, defaulting to 1000
[  513.764178][T17818] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3118'.
[  513.990216][T16576] Bluetooth: hci3: command tx timeout
[  514.056506][T17838] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3120'.
[  514.494582][T17852] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3123'.
[  514.546666][T17852] bridge1: port 1(erspan0) entered blocking state
[  514.557004][T17852] bridge1: port 1(erspan0) entered disabled state
[  514.565072][T17852] erspan0: entered allmulticast mode
[  514.597078][T17852] erspan0: entered promiscuous mode
[  514.613061][T17852] bridge1: port 1(erspan0) entered blocking state
[  514.619847][T17852] bridge1: port 1(erspan0) entered forwarding state
[  514.721979][T17556] veth0_vlan: entered promiscuous mode
[  514.782090][T17856] ip6erspan0: entered allmulticast mode
[  514.793034][T17556] veth1_vlan: entered promiscuous mode
[  514.898913][T17556] veth0_macvtap: entered promiscuous mode
[  514.933098][T17556] veth1_macvtap: entered promiscuous mode
[  514.998410][T17556] batman_adv: batadv0: Interface activated: batadv_slave_0
[  515.061174][T17556] batman_adv: batadv0: Interface activated: batadv_slave_1
[  515.091365][ T6348] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  515.112211][ T6338] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  515.165584][ T6338] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  515.206108][ T6338] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  515.378554][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  515.402892][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  515.456991][ T6341] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  515.487855][ T6341] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  515.578277][T17879] IPv6: NLM_F_CREATE should be specified when creating new route
[  515.676747][T17882] netlink: 240 bytes leftover after parsing attributes in process `syz.1.3134'.
[  516.071216][T17893] netlink: 3 bytes leftover after parsing attributes in process `syz.0.3137'.
[  516.401034][T17900] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  516.414957][   T51] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  516.431610][   T51] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  516.442205][   T51] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  516.468432][   T51] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  516.482075][   T51] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  516.617859][T17901] wlan1 speed is unknown, defaulting to 1000
[  516.645638][T17907] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3143'.
[  517.273674][ T6335] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  517.358805][ T8531] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  517.402065][   T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  517.533134][ T6335] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  517.701381][T17928] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  517.710074][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  517.841038][ T6335] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  517.928127][ T6335] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  518.026948][T17901] chnl_net:caif_netlink_parms(): no params data found
[  518.310759][T17945] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3153'.
[  518.321301][T17945] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  518.340133][ T5922] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  518.348846][T17945] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  518.401188][T17945] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  518.441258][T17944] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  518.441505][T17950] xt_hashlimit: size too large, truncated to 1048576
[  518.467282][T17944] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  518.499789][T17952] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3155'.
[  518.520352][T17901] bridge0: port 1(bridge_slave_0) entered blocking state
[  518.527513][T17901] bridge0: port 1(bridge_slave_0) entered disabled state
[  518.535567][T17901] bridge_slave_0: entered allmulticast mode
[  518.549488][T16576] Bluetooth: hci4: command tx timeout
[  518.567567][T17959] netlink: 'syz.1.3154': attribute type 15 has an invalid length.
[  518.599609][T17901] bridge_slave_0: entered promiscuous mode
[  518.606810][T17959] netlink: 666 bytes leftover after parsing attributes in process `syz.1.3154'.
[  518.622281][T17901] bridge0: port 2(bridge_slave_1) entered blocking state
[  518.656944][T17901] bridge0: port 2(bridge_slave_1) entered disabled state
[  518.674497][T17901] bridge_slave_1: entered allmulticast mode
[  518.683508][T17901] bridge_slave_1: entered promiscuous mode
[  518.713360][T17955] tipc: Started in network mode
[  518.718371][T17955] tipc: Node identity 4e96374db06b, cluster identity 4711
[  518.728025][T17955] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  518.740246][T17944] syzkaller0: entered promiscuous mode
[  518.746056][T17944] syzkaller0: entered allmulticast mode
[  518.755426][T17959] vlan0: entered promiscuous mode
[  518.790373][T17959] vlan0: entered allmulticast mode
[  518.809921][T17959] veth0_vlan: entered allmulticast mode
[  518.937153][T17954] bridge1: port 1(erspan0) entered disabled state
[  518.977779][T17954] bridge0: port 2(bridge_slave_1) entered disabled state
[  518.985606][T17954] bridge0: port 1(bridge_slave_0) entered disabled state
[  519.095899][T17954] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  519.114096][T17954] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  519.176458][T17954] vlan0: left promiscuous mode
[  519.182464][T17954] vlan0: left allmulticast mode
[  519.187330][T17954] veth0_vlan: left allmulticast mode
[  519.246567][T17954] ip6erspan0: left allmulticast mode
[  519.253015][T17943] tipc: Resetting bearer <eth:syzkaller0>
[  519.274715][T17943] tipc: Disabling bearer <eth:syzkaller0>
[  519.292831][T17901] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  519.306240][T17901] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  519.333084][ T6338] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  519.344395][ T6338] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  519.363503][ T6338] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  519.395460][ T6335] veth17: left allmulticast mode
[  519.401515][ T6335] veth17: left promiscuous mode
[  519.408272][ T6335] bridge0: port 2(veth17) entered disabled state
[  519.443464][ T6335] veth15: left allmulticast mode
[  519.451306][ T6335] veth15: left promiscuous mode
[  519.456418][ T6335] bridge0: port 1(veth15) entered disabled state
[  519.474504][ T6335] dvmrp0: left allmulticast mode
[  519.562003][T17985] netlink: 'syz.4.3160': attribute type 2 has an invalid length.
[  519.587752][T17985] netlink: 'syz.4.3160': attribute type 2 has an invalid length.
[  519.671781][ T6335] bond9 (unregistering): (slave geneve0): Releasing backup interface
[  519.675566][T17988] netlink: 210832 bytes leftover after parsing attributes in process `syz.1.3162'.
[  519.757390][ T6335] bond3 (unregistering): (slave bridge2): Releasing backup interface
[  520.055150][ T6335] bond1 (unregistering): Released all slaves
[  520.069317][ T6335] bond2 (unregistering): Released all slaves
[  520.090471][ T6335] bond3 (unregistering): Released all slaves
[  520.104726][ T6335] bond4 (unregistering): Released all slaves
[  520.131943][ T6335] bond5 (unregistering): (slave veth5): Releasing backup interface
[  520.143357][ T6335] bond5 (unregistering): Released all slaves
[  520.158498][ T6335] bond6 (unregistering): Released all slaves
[  520.174203][ T6335] bond0 (unregistering): (slave veth11): Releasing active interface
[  520.184444][ T6335] bond0 (unregistering): Released all slaves
[  520.206479][ T6335] bond7 (unregistering): (slave macvlan5): Releasing backup interface
[  520.215905][ T6335] bond7 (unregistering): Released all slaves
[  520.231437][ T6335] bond8 (unregistering): Released all slaves
[  520.246450][ T6335] bond9 (unregistering): Released all slaves
[  520.262180][ T6335] bond10 (unregistering): (slave veth13): Releasing active interface
[  520.274254][ T6335] bond10 (unregistering): Released all slaves
[  520.288668][ T6335] bond11 (unregistering): Released all slaves
[  520.315262][ T6335] bond12 (unregistering): Released all slaves
[  520.330624][ T6335] bond13 (unregistering): (slave veth19): Releasing active interface
[  520.340407][ T6335] bond13 (unregistering): Released all slaves
[  520.355353][ T6335] bond14 (unregistering): Released all slaves
[  520.385911][ T6338] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  520.402656][T17979] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3160'.
[  520.421235][T17978] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3159'.
[  520.437668][T17978] netlink: 'syz.2.3159': attribute type 3 has an invalid length.
[  520.446364][T17978] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3159'.
[  520.464832][T17978] netlink: 'syz.2.3159': attribute type 3 has an invalid length.
[  520.542976][T17901] team0: Port device team_slave_0 added
[  520.558494][ T6335] !©�9: left promiscuous mode
[  520.629993][T16576] Bluetooth: hci4: command tx timeout
[  520.650824][T17991] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3163'.
[  520.679080][T17901] team0: Port device team_slave_1 added
[  520.771171][T17997] syzkaller0: entered promiscuous mode
[  520.776793][T17997] syzkaller0: entered allmulticast mode
[  520.793989][ T6335] ÃM¯”ÛÓó: left promiscuous mode
[  520.932225][ T6335] tipc: Disabling bearer <udp:syz2>
[  520.963016][ T6335] tipc: Left network mode
[  520.968524][T17901] batman_adv: batadv0: Adding interface: batadv_slave_0
[  520.987590][T17901] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  521.070894][T17901] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  521.132017][T17901] batman_adv: batadv0: Adding interface: batadv_slave_1
[  521.153434][T17901] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  521.220267][T17901] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  521.390798][T18027] netlink: 112 bytes leftover after parsing attributes in process `syz.4.3170'.
[  521.406191][T18026] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3171'.
[  521.608427][T17901] hsr_slave_0: entered promiscuous mode
[  521.633186][T17901] hsr_slave_1: entered promiscuous mode
[  521.664419][T17901] debugfs: 'hsr0' already exists in 'hsr'
[  521.688054][T17901] Cannot create hsr debugfs directory
[  521.854513][T18033] syzkaller0: entered promiscuous mode
[  521.885887][T18033] syzkaller0: entered allmulticast mode
[  522.400322][T18056] ipvlan1: entered promiscuous mode
[  522.529255][T18066] netlink: 'syz.0.3182': attribute type 61 has an invalid length.
[  522.549079][T18066] netlink: 'syz.0.3182': attribute type 62 has an invalid length.
[  522.629729][ T6187] net_ratelimit: 16 callbacks suppressed
[  522.629750][ T6187] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  522.711043][T16576] Bluetooth: hci4: command tx timeout
[  522.873689][ T6335] hsr_slave_0: left promiscuous mode
[  522.891599][ T6335] hsr_slave_1: left promiscuous mode
[  523.350665][ T6193] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  523.670948][ T6187] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  523.678485][T18086] syzkaller0: entered promiscuous mode
[  523.685476][T18086] syzkaller0: entered allmulticast mode
[  523.718757][T18110] __nla_validate_parse: 4 callbacks suppressed
[  523.718779][T18110] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3189'.
[  523.953786][ T5922] IPVS: starting estimator thread 0...
[  523.955192][T18116] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  524.053276][T18121] IPVS: using max 49 ests per chain, 117600 per kthread
[  524.710204][ T1930] block nbd9: Possible stuck request ffff888027380000: control (read@0,1024B). Runtime 150 seconds
[  524.721831][   T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  524.730557][ T1930] block nbd9: Possible stuck request ffff888027380200: control (read@1024,1024B). Runtime 150 seconds
[  524.741702][ T1930] block nbd9: Possible stuck request ffff888027380400: control (read@2048,1024B). Runtime 150 seconds
[  524.752784][ T1930] block nbd9: Possible stuck request ffff888027380600: control (read@3072,1024B). Runtime 150 seconds
[  524.764278][ T1873] block nbd8: Possible stuck request ffff888027310000: control (read@0,1024B). Runtime 150 seconds
[  524.775994][ T1873] block nbd8: Possible stuck request ffff888027310200: control (read@1024,1024B). Runtime 150 seconds
[  524.788123][ T1873] block nbd8: Possible stuck request ffff888027310400: control (read@2048,1024B). Runtime 150 seconds
[  524.800838][T16576] Bluetooth: hci4: command tx timeout
[  524.812658][ T1873] block nbd8: Possible stuck request ffff888027310600: control (read@3072,1024B). Runtime 150 seconds
[  525.548158][T18111] wlan1 speed is unknown, defaulting to 1000
[  525.707558][ T6335] IPVS: stop unused estimator thread 0...
[  525.751155][ T6187] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  525.771591][T18129] ipt_ECN: cannot use operation on non-tcp rule
[  526.093444][T18147] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3195'.
[  526.355051][T17901] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  526.389788][ T6193] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  526.392357][T18159] netlink: 'syz.0.3199': attribute type 1 has an invalid length.
[  526.408836][T18153] syzkaller0: entered promiscuous mode
[  526.416144][T18153] syzkaller0: entered allmulticast mode
[  526.454684][T17901] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  526.487852][T17901] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  526.534757][T18165] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3199'.
[  526.547415][T17901] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  526.616126][T18167] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3199'.
[  526.631086][ T6193] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  526.645697][T18159] bond0: (slave vxcan5): The slave device specified does not support setting the MAC address
[  526.658391][T18159] bond0: (slave vxcan5): Error -95 calling set_mac_address
[  526.670460][T18169] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  526.734424][T18165] bond0: (slave bridge2): Enslaving as an active interface with a down link
[  526.748858][T18167] 8021q: adding VLAN 0 to HW filter on device bond0
[  526.765101][T18159] macvlan2: entered promiscuous mode
[  526.771229][T18159] macvlan2: entered allmulticast mode
[  526.777404][T18159] bond0: entered promiscuous mode
[  526.783734][T18159] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  526.791040][ T5944] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  526.805172][T18159] bond0: left promiscuous mode
[  527.038520][T18174] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3201'.
[  527.048833][T17901] 8021q: adding VLAN 0 to HW filter on device bond0
[  527.149112][T17901] 8021q: adding VLAN 0 to HW filter on device team0
[  527.236871][ T6341] bridge0: port 1(bridge_slave_0) entered blocking state
[  527.244282][ T6341] bridge0: port 1(bridge_slave_0) entered forwarding state
[  527.314069][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[  527.321353][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[  527.486359][T17901] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  527.830273][ T5944] net_ratelimit: 1 callbacks suppressed
[  527.830294][ T5944] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  527.913589][ T6193] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  528.062374][T18235] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3216'.
[  528.181073][T18244] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3217'.
[  528.242035][T18236] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  528.305218][T18241] pimreg: tun_chr_ioctl cmd 1074025677
[  528.335351][T18241] pimreg: linktype set to 780
[  528.369151][T18244] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3217'.
[  528.393848][T18244] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3217'.
[  528.462010][T18236] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  528.592802][T18236] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  528.634066][T17901] 8021q: adding VLAN 0 to HW filter on device batadv0
[  528.646982][T18253] wlan1 speed is unknown, defaulting to 1000
[  528.691986][T18236] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  528.697610][T18266] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  528.742826][T18254] wlan1 speed is unknown, defaulting to 1000
[  528.870409][ T2152] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  529.138081][T18277] dvmrp1: tun_chr_ioctl cmd 2148553947
[  529.148325][  T194] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  529.238733][ T6333] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  529.396363][ T6333] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  529.417082][T18288] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3226'.
[  529.436394][   T12] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  529.514378][T17901] veth0_vlan: entered promiscuous mode
[  529.525170][T18290] openvswitch: netlink: VXLAN extension 307 out of range max 1
[  529.563547][T17901] veth1_vlan: entered promiscuous mode
[  529.697349][T17901] veth0_macvtap: entered promiscuous mode
[  529.775885][T17901] veth1_macvtap: entered promiscuous mode
[  529.803624][ T5944] IPVS: starting estimator thread 0...
[  529.837878][T18305] netlink: 'syz.0.3231': attribute type 2 has an invalid length.
[  529.861487][T18305] netlink: 'syz.0.3231': attribute type 1 has an invalid length.
[  529.879152][T17901] batman_adv: batadv0: Interface activated: batadv_slave_0
[  529.892173][T18308] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  529.902311][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  529.915149][ T5944] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  529.923622][T18302] IPVS: using max 25 ests per chain, 60000 per kthread
[  529.934312][T17901] batman_adv: batadv0: Interface activated: batadv_slave_1
[  530.004527][T18308] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3232'.
[  530.045658][ T6335] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  530.061022][T18314] syzkaller1: entered promiscuous mode
[  530.071932][T18314] syzkaller1: entered allmulticast mode
[  530.097933][T18308] geneve2: entered promiscuous mode
[  530.120599][ T6335] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  530.137041][ T6335] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  530.147473][ T6335] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  530.260228][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  530.268090][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  530.381664][T18318] openvswitch: netlink: Unexpected mask (mask=201040, allowed=10048)
[  530.404374][ T6335] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  530.433285][ T6335] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  530.469788][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  530.546520][T18338] netlink: 'syz.1.3237': attribute type 10 has an invalid length.
[  530.577711][T18338] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  530.911187][T18349] ipt_ECN: cannot use operation on non-tcp rule
[  530.989272][T18355] wlan1 speed is unknown, defaulting to 1000
[  531.025028][T18349] wlan1 speed is unknown, defaulting to 1000
[  531.254940][T18370] xt_policy: output policy not valid in PREROUTING and INPUT
[  531.386044][T18376] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3245'.
[  531.492748][T18370] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3245'.
[  531.584814][T18382] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  531.605229][T18387] Cannot find add_set index 2 as target
[  532.056655][T18382] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  532.089057][T18405] netlink: 'syz.1.3254': attribute type 21 has an invalid length.
[  532.138817][T18405] netlink: 168 bytes leftover after parsing attributes in process `syz.1.3254'.
[  532.202186][T18410] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3255'.
[  532.235167][T18405] netlink: 'syz.1.3254': attribute type 11 has an invalid length.
[  532.304006][T18382] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  532.524588][T18382] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  532.781287][  T194] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  532.888582][ T6335] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  532.939169][ T6341] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  532.978191][   T49] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  533.013420][T18437] netlink: 'syz.3.3261': attribute type 10 has an invalid length.
[  533.030256][ T5944] net_ratelimit: 3 callbacks suppressed
[  533.030280][ T5944] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  533.095953][T18437] veth0_vlan: left promiscuous mode
[  533.142468][T18437] veth0_vlan: entered promiscuous mode
[  533.194002][T18437] team0: Device veth0_vlan failed to register rx_handler
[  533.879226][T18478] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3272'.
[  533.990405][ T6193] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  534.070080][ T5944] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  534.090483][T18491] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3276'.
[  535.126842][ T2152] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  535.231538][T18491] netdevsim netdevsim3 netdevsim0: entered promiscuous mode
[  535.239042][T18491] netdevsim netdevsim3 netdevsim0: entered allmulticast mode
[  535.271319][T18491] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3276'.
[  535.283391][T18502] tipc: New replicast peer: 0.0.0.0
[  535.289124][T18502] tipc: Enabled bearer <udp:syz2>, priority 10
[  535.349924][T18519] bond1: entered promiscuous mode
[  535.355456][T18519] 8021q: adding VLAN 0 to HW filter on device bond1
[  535.393170][T18522] xt_hashlimit: size too large, truncated to 1048576
[  535.663729][T18535] netlink: 120 bytes leftover after parsing attributes in process `syz.4.3284'.
[  535.675422][T18535] netlink: 'syz.4.3284': attribute type 1 has an invalid length.
[  535.685007][T18535] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3284'.
[  535.797147][T18537] sctp: [Deprecated]: syz.2.3283 (pid 18537) Use of struct sctp_assoc_value in delayed_ack socket option.
[  535.797147][T18537] Use struct sctp_sack_info instead
[  535.833807][T18541] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3285'.
[  535.943565][T18549] geneve1: entered promiscuous mode
[  536.113189][T18561] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3290'.
[  536.151258][ T2152] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  536.169278][T18562] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3287'.
[  536.256480][T18568] netlink: 'syz.1.3293': attribute type 6 has an invalid length.
[  536.270663][T18568] netlink: 'syz.1.3293': attribute type 7 has an invalid length.
[  536.278610][T18568] netlink: 'syz.1.3293': attribute type 8 has an invalid length.
[  536.437293][ T6173] tipc: Node number set to 3416876279
[  536.459104][T18579] dvmrp0: entered allmulticast mode
[  536.517568][T18579] vcan0: tx drop: invalid da for name 0x0000000000000001
[  536.553765][T18582] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  536.566947][T18583] syzkaller0: entered promiscuous mode
[  536.574784][T18583] syzkaller0: entered allmulticast mode
[  536.632362][T18583] tipc: Resetting bearer <eth:syzkaller0>
[  536.656153][T18583] tipc: Disabling bearer <eth:syzkaller0>
[  536.683591][T18589] netlink: 'syz.3.3296': attribute type 13 has an invalid length.
[  536.694111][T18589] netlink: 'syz.3.3296': attribute type 17 has an invalid length.
[  536.763225][T18587] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3296'.
[  536.867537][T18589] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  536.890898][  T796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  537.024744][T18600] sit1: entered promiscuous mode
[  537.042011][ T5922] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  537.184180][T18610] netlink: 'syz.2.3301': attribute type 5 has an invalid length.
[  537.189858][ T6187] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  537.243873][T18608] wlan1 speed is unknown, defaulting to 1000
[  537.330812][T18615] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3301'.
[  537.347545][T18607] wlan1 speed is unknown, defaulting to 1000
[  537.387888][T18615] 8021q: VLANs not supported on vcan0
[  537.596724][T18628] netlink: 'syz.2.3305': attribute type 1 has an invalid length.
[  537.615864][T18623] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3302'.
[  537.640559][T18623] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3302'.
[  537.725194][T18628] bond2: entered promiscuous mode
[  537.751032][T18628] 8021q: adding VLAN 0 to HW filter on device bond2
[  537.947028][T18631] 8021q: adding VLAN 0 to HW filter on device bond2
[  537.969995][T18631] bond2: (slave vti0): The slave device specified does not support setting the MAC address
[  537.990129][T18631] bond2: (slave vti0): Setting fail_over_mac to active for active-backup mode
[  538.010952][T18631] bond2: (slave vti0): making interface the new active one
[  538.028122][T18631] vti0: entered promiscuous mode
[  538.041159][T18631] bond2: (slave vti0): Enslaving as an active interface with an up link
[  538.151020][   T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  538.232944][   T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  538.601478][T18636] wlan1 speed is unknown, defaulting to 1000
[  538.800236][T18655] ..0ªî{X¹¦: renamed from gretap0
[  538.800791][T18652] netlink: 'syz.0.3312': attribute type 10 has an invalid length.
[  538.816236][T18655] ..0ªî{X¹¦: entered allmulticast mode
[  538.823656][T18655] A link change request failed with some changes committed already. Interface ..0ªî{X¹¦ may have been left with an inconsistent configuration, please check.
[  539.242370][T18673] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5
[  539.279318][   T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  539.437990][T18682] hsr_slave_0 (unregistering): left promiscuous mode
[  539.771498][T18700] netlink: 'syz.2.3327': attribute type 5 has an invalid length.
[  539.856428][T18702] wlan1 speed is unknown, defaulting to 1000
[  540.311969][ T6187] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  540.324675][T18726] netlink: 'syz.0.3336': attribute type 10 has an invalid length.
[  540.362097][T18729] netlink: 'syz.2.3337': attribute type 10 has an invalid length.
[  540.390786][T18726] __nla_validate_parse: 6 callbacks suppressed
[  540.390810][T18726] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3336'.
[  540.440974][T18729] bridge0: port 3(netdevsim0) entered blocking state
[  540.448511][T18729] bridge0: port 3(netdevsim0) entered disabled state
[  540.477253][T18726] netlink: 76 bytes leftover after parsing attributes in process `syz.0.3336'.
[  540.489704][T18729] netdevsim netdevsim2 netdevsim0: entered allmulticast mode
[  540.499017][T18729] netdevsim netdevsim2 netdevsim0: entered promiscuous mode
[  540.522561][T18729] bridge0: port 3(netdevsim0) entered blocking state
[  540.529546][T18729] bridge0: port 3(netdevsim0) entered forwarding state
[  540.766485][T18750] netlink: 'syz.3.3343': attribute type 1 has an invalid length.
[  540.822136][T18750] vlan2: entered allmulticast mode
[  540.834376][T18750] veth1_macvtap: entered allmulticast mode
[  540.910612][T18762] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3345'.
[  541.153299][T18776] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3349'.
[  541.163932][T18778] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3350'.
[  541.192792][ T5922] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  541.355008][ T6187] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  541.363245][ T6187] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  541.589264][T18793] netlink: 88 bytes leftover after parsing attributes in process `syz.0.3355'.
[  541.613822][T18795] netlink: 92 bytes leftover after parsing attributes in process `syz.1.3356'.
[  541.647434][T18797] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  541.984160][T18812] netlink: 212348 bytes leftover after parsing attributes in process `syz.3.3360'.
[  542.028082][T18812] netlink: ct family unspecified
[  542.047853][T18813] netlink: 'syz.3.3360': attribute type 1 has an invalid length.
[  542.558466][T18830] syz.2.3365: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  542.600664][T18830] CPU: 1 UID: 0 PID: 18830 Comm: syz.2.3365 Not tainted syzkaller #0 PREEMPT(full) 
[  542.600697][T18830] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  542.600711][T18830] Call Trace:
[  542.600720][T18830]  <TASK>
[  542.600729][T18830]  dump_stack_lvl+0xe8/0x150
[  542.600768][T18830]  warn_alloc+0x249/0x340
[  542.600796][T18830]  ? stack_trace_save+0xa9/0x100
[  542.600822][T18830]  ? __pfx_warn_alloc+0x10/0x10
[  542.600864][T18830]  ? kasan_save_track+0x4f/0x80
[  542.600886][T18830]  ? kasan_save_track+0x3e/0x80
[  542.600906][T18830]  ? __kasan_kmalloc+0x93/0xb0
[  542.600927][T18830]  ? __kmalloc_cache_noprof+0x31c/0x660
[  542.600950][T18830]  ? xskq_create+0x56/0x170
[  542.600977][T18830]  ? xsk_setsockopt+0x54c/0x990
[  542.601001][T18830]  ? do_sock_setsockopt+0x17c/0x1b0
[  542.601032][T18830]  ? __x64_sys_setsockopt+0x13d/0x1b0
[  542.601061][T18830]  ? do_syscall_64+0x14d/0xf80
[  542.601096][T18830]  __vmalloc_node_range_noprof+0x132/0x1730
[  542.601158][T18830]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  542.601191][T18830]  ? __kasan_kmalloc+0x93/0xb0
[  542.601224][T18830]  vmalloc_user_noprof+0xad/0xe0
[  542.601247][T18830]  ? xskq_create+0xbf/0x170
[  542.601277][T18830]  xskq_create+0xbf/0x170
[  542.601308][T18830]  xsk_init_queue+0x8a/0xe0
[  542.601338][T18830]  xsk_setsockopt+0x54c/0x990
[  542.601367][T18830]  ? __pfx_xsk_setsockopt+0x10/0x10
[  542.601392][T18830]  ? __pfx_aa_sk_perm+0x10/0x10
[  542.601422][T18830]  ? aa_sock_opt_perm+0xff/0x1a0
[  542.601453][T18830]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  542.601477][T18830]  ? __pfx_xsk_setsockopt+0x10/0x10
[  542.601504][T18830]  do_sock_setsockopt+0x17c/0x1b0
[  542.601543][T18830]  __x64_sys_setsockopt+0x13d/0x1b0
[  542.601583][T18830]  do_syscall_64+0x14d/0xf80
[  542.601610][T18830]  ? trace_irq_disable+0x3b/0x150
[  542.601639][T18830]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  542.601662][T18830]  ? clear_bhb_loop+0x40/0x90
[  542.601688][T18830]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  542.601710][T18830] RIP: 0033:0x7f311df9c799
[  542.601732][T18830] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  542.601751][T18830] RSP: 002b:00007f311eda0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  542.601776][T18830] RAX: ffffffffffffffda RBX: 00007f311e216090 RCX: 00007f311df9c799
[  542.601791][T18830] RDX: 0000000000000006 RSI: 000000000000011b RDI: 000000000000000a
[  542.601804][T18830] RBP: 00007f311e032c99 R08: 0000000000000004 R09: 0000000000000000
[  542.601817][T18830] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[  542.601830][T18830] R13: 00007f311e216128 R14: 00007f311e216090 R15: 00007fff0ad13008
[  542.601876][T18830]  </TASK>
[  542.601886][T18830] Mem-Info:
[  542.640101][T18831] syzkaller1: entered promiscuous mode
[  542.902319][T18830] active_anon:12843 inactive_anon:0 isolated_anon:0
[  542.902319][T18830]  active_file:3491 inactive_file:40116 isolated_file:0
[  542.902319][T18830]  unevictable:768 dirty:56 writeback:0
[  542.902319][T18830]  slab_reclaimable:12887 slab_unreclaimable:132883
[  542.902319][T18830]  mapped:29826 shmem:4262 pagetables:1440
[  542.902319][T18830]  sec_pagetables:0 bounce:0
[  542.902319][T18830]  kernel_misc_reclaimable:0
[  542.902319][T18830]  free:1284356 free_pcp:8749 free_cma:0
[  542.958382][T18837] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3367'.
[  542.979709][T18831] syzkaller1: entered allmulticast mode
[  542.998004][T18830] Node 0 active_anon:51572kB inactive_anon:0kB active_file:13964kB inactive_file:160260kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:119304kB dirty:224kB writeback:0kB shmem:15312kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14344kB pagetables:5732kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  543.044854][T18830] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:128kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  543.117367][T18830] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  543.229421][T18830] lowmem_reserve[]: 0 2492 2493 2493 2493
[  543.238550][T18830] Node 0 DMA32 free:1179092kB boost:0kB min:34200kB low:42748kB high:51296kB reserved_highatomic:0KB free_highatomic:0KB active_anon:45448kB inactive_anon:0kB active_file:13964kB inactive_file:160260kB unevictable:1536kB writepending:240kB zspages:0kB present:3129332kB managed:2552736kB mlocked:0kB bounce:0kB free_pcp:34816kB local_pcp:17316kB free_cma:0kB
[  543.275570][  T796] net_ratelimit: 1 callbacks suppressed
[  543.275590][  T796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  543.333159][T18843] openvswitch: netlink: Flow key attr not present in new flow.
[  543.381281][T18830] lowmem_reserve[]: 0 0 0 0 0
[  543.386024][T18830] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:884kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:4kB free_cma:0kB
[  543.434028][ T6187] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  543.510854][T18830] lowmem_reserve[]: 0 0 0 0 0
[  543.516859][T18830] Node 1 Normal free:3943140kB boost:0kB min:55688kB low:69608kB high:83528kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:5792kB local_pcp:5792kB free_cma:0kB
[  543.583948][T18846] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3369'.
[  543.629176][T18830] lowmem_reserve[]: 0 0 0 0 0
[  543.661021][T18830] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  543.709935][T18830] Node 0 DMA32: 5909*4kB (UE) 4166*8kB (UME) 2052*16kB (UE) 737*32kB (UME) 252*64kB (UME) 160*128kB (UME) 289*256kB (UM) 237*512kB (UME) 146*1024kB (UME) 78*2048kB (UME) 128*4096kB (UM) = 1178852kB
[  543.753709][T18830] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  543.787004][T18830] Node 1 Normal: 0*4kB 1*8kB (M) 1*16kB (M) 2*32kB (UM) 1*64kB (M) 1*128kB (M) 2*256kB (M) 2*512kB (M) 1*1024kB (M) 2*2048kB (U) 961*4096kB (M) = 3943192kB
[  543.819682][T18830] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  543.852830][T18830] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  543.894540][T18830] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  543.911050][T18830] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  543.922259][T18830] 45099 total pagecache pages
[  543.926971][T18830] 0 pages in swap cache
[  543.933484][T18830] Free swap  = 124996kB
[  543.937670][T18830] Total swap = 124996kB
[  543.950484][T18830] 2097051 pages RAM
[  543.954420][T18830] 0 pages HighMem/MovableOnly
[  543.959209][T18830] 427031 pages reserved
[  543.969843][T18830] 0 pages cma reserved
[  544.134483][T18865] netlink: 'syz.4.3376': attribute type 1 has an invalid length.
[  544.155714][T18865] netlink: 'syz.4.3376': attribute type 1 has an invalid length.
[  544.237889][T18865] wlan1 speed is unknown, defaulting to 1000
[  544.244440][ T5922] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  544.471640][   T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  544.891692][T18895] n: the hash_elasticity option has been deprecated and is always 16
[  544.914110][T18895] n: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  545.274088][T18909] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  545.296639][T18910] openvswitch: netlink: Flow key attr not present in new flow.
[  545.365253][T18909] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  545.464534][T18909] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  545.510156][ T5944] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  545.521599][T18912] macvlan2: entered promiscuous mode
[  545.527214][T18912] bond0: entered promiscuous mode
[  545.533375][T18912] bond_slave_0: entered promiscuous mode
[  545.540182][T18912] bond_slave_1: entered promiscuous mode
[  545.546508][T18912] dummy0: entered promiscuous mode
[  545.557013][T18912] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  545.566113][T18912] bond0: left promiscuous mode
[  545.571757][T18912] bond_slave_0: left promiscuous mode
[  545.578990][T18912] bond_slave_1: left promiscuous mode
[  545.585466][T18912] dummy0: left promiscuous mode
[  545.605020][T18909] bridge0: port 3(netdevsim0) entered disabled state
[  545.652868][T18909] netdevsim netdevsim2 netdevsim0 (unregistering): left allmulticast mode
[  545.681338][T18909] netdevsim netdevsim2 netdevsim0 (unregistering): left promiscuous mode
[  545.691496][T18915] netlink: 'syz.3.3388': attribute type 1 has an invalid length.
[  545.701273][T18909] bridge0: port 3(netdevsim0) entered disabled state
[  545.735167][T18909] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  545.830477][ T5922] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  545.913921][T18922] netlink: 'syz.1.3391': attribute type 1 has an invalid length.
[  545.923638][T18922] __nla_validate_parse: 3 callbacks suppressed
[  545.923659][T18922] netlink: 96 bytes leftover after parsing attributes in process `syz.1.3391'.
[  545.957731][T18922] netlink: 1 bytes leftover after parsing attributes in process `syz.1.3391'.
[  545.978136][T18922] netlink: 658 bytes leftover after parsing attributes in process `syz.1.3391'.
[  546.053137][ T6341] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  546.154469][T18935] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3393'.
[  546.172201][T18935] 8021q: adding VLAN 0 to HW filter on device bond0
[  546.220494][  T194] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  546.240954][  T194] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  546.273767][ T6348] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  546.297251][T18943] sctp: [Deprecated]: syz.0.3394 (pid 18943) Use of int in maxseg socket option.
[  546.297251][T18943] Use struct sctp_assoc_value instead
[  546.399067][T18944] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3397'.
[  546.549951][   T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  546.717889][T18970] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3402'.
[  546.718415][T18968] netlink: 'syz.2.3403': attribute type 12 has an invalid length.
[  547.547238][T19013] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3414'.
[  547.585589][T19009] syzkaller0: entered promiscuous mode
[  547.592745][ T5944] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  547.592787][T19013] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3414'.
[  547.609627][T19019] netlink: 'syz.2.3413': attribute type 1 has an invalid length.
[  547.619241][T19009] syzkaller0: entered allmulticast mode
[  547.635940][T19019] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3413'.
[  547.844711][T19026] xt_cgroup: xt_cgroup: no path or classid specified
[  548.014248][T19036] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3420'.
[  548.058763][T19036] 8021q: adding VLAN 0 to HW filter on device bond1
[  548.115199][T19036] macsec1: entered promiscuous mode
[  548.121643][T19036] bond1: entered promiscuous mode
[  548.127132][T19036] macsec1: entered allmulticast mode
[  548.133185][T19036] bond1: entered allmulticast mode
[  548.144126][T19036] bond1: left allmulticast mode
[  548.149185][T19036] bond1: left promiscuous mode
[  548.172729][T19043] syzkaller0: entered promiscuous mode
[  548.178377][T19043] syzkaller0: entered allmulticast mode
[  548.630433][ T2152] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  548.727881][T19069] nbd: illegal input index 38656
[  548.795218][T19074] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  548.805501][T19074] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  548.815922][T19074] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  548.826431][T19074] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  548.835301][T19074] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  548.844277][T19074] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  548.880519][ T6173] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  549.029782][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  549.059926][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  549.082587][T19093] syzkaller0: entered promiscuous mode
[  549.089673][T19093] syzkaller0: entered allmulticast mode
[  549.110965][T19089] tipc: Started in network mode
[  549.116847][T19089] tipc: Node identity 12d4a0a46512, cluster identity 4711
[  549.125660][T19089] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  549.281346][T19091] tipc: Resetting bearer <eth:syzkaller0>
[  549.329208][T19091] tipc: Disabling bearer <eth:syzkaller0>
[  549.852152][T19132] netlink: 'syz.2.3449': attribute type 10 has an invalid length.
[  549.873263][T19138] netlink: 'syz.0.3451': attribute type 1 has an invalid length.
[  549.891307][T19139] netlink: 'syz.0.3451': attribute type 1 has an invalid length.
[  549.933646][T19139] bond2: entered promiscuous mode
[  549.941941][T19139] 8021q: adding VLAN 0 to HW filter on device bond2
[  549.954842][T19132] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  549.968174][T19137] No such timeout policy "syz1"
[  550.088504][T19147] netlink: 'syz.2.3452': attribute type 11 has an invalid length.
[  550.098658][T19147] netlink: 'syz.2.3452': attribute type 23 has an invalid length.
[  550.526519][T19161] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  550.602872][T19159] pim6reg1: entered allmulticast mode
[  550.985549][T19182] dvmrp1: entered allmulticast mode
[  551.007032][T19185] netlink: 'syz.4.3464': attribute type 4 has an invalid length.
[  551.017071][T19182] dvmrp1: left allmulticast mode
[  551.100536][ T6348] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  551.118310][ T6348] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  551.141911][ T6348] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  551.163040][ T6348] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  551.286230][T19198] netlink: 'syz.4.3466': attribute type 3 has an invalid length.
[  551.297253][T19198] netlink: 'syz.4.3466': attribute type 1 has an invalid length.
[  551.307171][T19198] __nla_validate_parse: 18 callbacks suppressed
[  551.307190][T19198] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3466'.
[  551.323447][T19198] NCSI netlink: No device for ifindex 808464432
[  551.472925][T19205] netlink: 'syz.3.3469': attribute type 8 has an invalid length.
[  551.518064][T19205] bridge0: port 2(bridge_slave_1) entered disabled state
[  551.526953][T19205] bridge0: port 1(bridge_slave_0) entered disabled state
[  551.765011][T19226] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3474'.
[  551.789090][T19226] netlink: 'syz.1.3474': attribute type 39 has an invalid length.
[  552.056834][T19238] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3477'.
[  552.145311][T19238] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3477'.
[  552.145339][  T194] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  552.155719][T19238] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3477'.
[  552.201255][  T194] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  552.234962][  T194] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  552.314023][  T194] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  552.508196][T19267] netlink: 'syz.4.3486': attribute type 3 has an invalid length.
[  553.037634][T19290] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3493'.
[  553.049949][T19291] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3493'.
[  553.063153][T19288] sit0: entered promiscuous mode
[  553.100705][T19288] netlink: 1 bytes leftover after parsing attributes in process `syz.3.3492'.
[  553.178215][T19288] syzkaller1: entered promiscuous mode
[  553.206500][T19294] ipt_ECN: cannot use operation on non-tcp rule
[  553.216636][T19297] wlan1 speed is unknown, defaulting to 1000
[  553.367384][T19294] wlan1 speed is unknown, defaulting to 1000
[  553.533169][T19304] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3496'.
[  553.637248][T19316] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3500'.
[  553.964350][   T12] bond0: (slave bond_slave_0): interface is now down
[  553.980624][   T12] bond0: (slave 
4
@0Ù): interface is now down
[  553.986857][   T12] bond0: (slave wlan1): interface is now down
[  554.024100][   T12] bond0: (slave bond_slave_0): interface is now down
[  554.041370][   T12] bond0: (slave 
4
@0Ù): interface is now down
[  554.062229][   T12] bond0: (slave wlan1): interface is now down
[  554.084755][   T12] bond0: now running without any active interface!
[  554.755771][T19349] tap0: tun_chr_ioctl cmd 1074025676
[  554.765836][T19349] tap0: owner set to 0
[  554.790341][ T1930] block nbd9: Possible stuck request ffff888027380000: control (read@0,1024B). Runtime 180 seconds
[  554.801874][ T1930] block nbd9: Possible stuck request ffff888027380200: control (read@1024,1024B). Runtime 180 seconds
[  554.801904][ T1873] block nbd8: Possible stuck request ffff888027310000: control (read@0,1024B). Runtime 180 seconds
[  554.801943][ T1873] block nbd8: Possible stuck request ffff888027310200: control (read@1024,1024B). Runtime 180 seconds
[  554.835890][ T1930] block nbd9: Possible stuck request ffff888027380400: control (read@2048,1024B). Runtime 180 seconds
[  554.842646][ T1873] block nbd8: Possible stuck request ffff888027310400: control (read@2048,1024B). Runtime 180 seconds
[  554.847005][ T1930] block nbd9: Possible stuck request ffff888027380600: control (read@3072,1024B). Runtime 180 seconds
[  554.859055][ T1873] block nbd8: Possible stuck request ffff888027310600: control (read@3072,1024B). Runtime 180 seconds
[  555.505768][T19366] syzkaller0: entered promiscuous mode
[  555.512410][T19366] syzkaller0: entered allmulticast mode
[  555.884068][T19391] SET target dimension over the limit!
[  555.905373][T19392] geneve2: entered promiscuous mode
[  556.197692][T19402] syzkaller0: entered promiscuous mode
[  556.214460][T19402] syzkaller0: entered allmulticast mode
[  556.248451][T19403] validate_nla: 3 callbacks suppressed
[  556.248473][T19403] netlink: 'syz.0.3527': attribute type 12 has an invalid length.
[  556.527663][T19426] __nla_validate_parse: 14 callbacks suppressed
[  556.527687][T19426] netlink: 7 bytes leftover after parsing attributes in process `syz.3.3532'.
[  556.611450][T19427] wlan1 speed is unknown, defaulting to 1000
[  557.031349][T19427] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3534'.
[  557.042591][T19427] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3534'.
[  557.524828][T19441] netlink: 'syz.1.3537': attribute type 2 has an invalid length.
[  557.642093][T19445] net_ratelimit: 4 callbacks suppressed
[  557.642114][T19445] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  557.716803][T19451] netlink: 36752 bytes leftover after parsing attributes in process `syz.2.3539'.
[  557.731434][T19450] IPVS: set_ctl: invalid protocol: 46 127.0.0.1:20001
[  557.841797][T19456] syzkaller0: entered promiscuous mode
[  557.857837][T19456] syzkaller0: entered allmulticast mode
[  558.211255][T19465] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3544'.
[  558.358931][T19443] Bluetooth: hci2: Opcode 0x0401 failed: -4
[  558.968037][T19483] lo speed is unknown, defaulting to 1000
[  558.990161][T19483] lo speed is unknown, defaulting to 1000
[  558.996818][T19483] lo speed is unknown, defaulting to 1000
[  559.041737][T19483] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  559.118365][T19483] lo speed is unknown, defaulting to 1000
[  559.147871][T19483] lo speed is unknown, defaulting to 1000
[  559.167520][T19483] lo speed is unknown, defaulting to 1000
[  559.207321][T19483] lo speed is unknown, defaulting to 1000
[  559.221670][T19483] lo speed is unknown, defaulting to 1000
[  559.241557][T19483] lo speed is unknown, defaulting to 1000
[  559.264068][T19483] lo speed is unknown, defaulting to 1000
[  559.295009][T19483] lo speed is unknown, defaulting to 1000
[  559.591476][T16576] Bluetooth: hci2: command 0x0401 tx timeout
[  559.930774][T19520] x_tables: duplicate entry at hook 3
[  560.007802][T19525] syzkaller0: entered promiscuous mode
[  560.036788][T19525] syzkaller0: entered allmulticast mode
[  560.117902][T19531] netlink: 'syz.4.3562': attribute type 8 has an invalid length.
[  560.297149][T19545] netlink: 'syz.1.3567': attribute type 1 has an invalid length.
[  560.468644][T19545] 8021q: adding VLAN 0 to HW filter on device bond3
[  560.575249][T19550] bond3: (slave geneve2): making interface the new active one
[  560.584994][T19550] bond3: (slave geneve2): Enslaving as an active interface with an up link
[  560.861530][T19552] bridge_slave_0: left allmulticast mode
[  560.876292][T19552] bridge_slave_0: left promiscuous mode
[  560.886923][T19552] bridge0: port 1(bridge_slave_0) entered disabled state
[  560.931581][T19552] bridge_slave_1: left allmulticast mode
[  560.941187][T19552] bridge_slave_1: left promiscuous mode
[  560.957999][T19552] bridge0: port 2(bridge_slave_1) entered disabled state
[  561.081100][T19552] team0: Port device team_slave_0 removed
[  561.117146][T19552] team0: Port device team_slave_1 removed
[  561.127758][T19552] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  561.131100][T19569] netlink: 112 bytes leftover after parsing attributes in process `syz.4.3570'.
[  561.161148][T19552] batman_adv: batadv0: Removing interface: batadv_slave_0
[  561.182894][T19552] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  561.208292][T19552] batman_adv: batadv0: Removing interface: batadv_slave_1
[  561.251538][T19552] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  561.286217][   T79] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  561.307622][   T79] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  561.408443][T19570] geneve3: entered promiscuous mode
[  561.425106][   T79] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  561.453709][   T79] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  561.807871][T19598] netlink: 'syz.3.3576': attribute type 6 has an invalid length.
[  561.830366][T19598] netlink: 'syz.3.3576': attribute type 7 has an invalid length.
[  561.838416][T19598] netlink: 'syz.3.3576': attribute type 8 has an invalid length.
[  561.876886][T19598] netlink: 'syz.3.3576': attribute type 15 has an invalid length.
[  562.041735][T19607] wlan1 speed is unknown, defaulting to 1000
[  562.087628][T19607] lo speed is unknown, defaulting to 1000
[  562.108679][T19613] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3579'.
[  562.129137][T19613] nbd: couldn't find a device at index 0
[  562.466593][T19630] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3582'.
[  562.480881][T19630] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3582'.
[  562.525840][T19614] bridge0: port 2(bridge_slave_1) entered disabled state
[  562.533679][T19614] bridge0: port 1(bridge_slave_0) entered disabled state
[  562.654168][T19601] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  562.676503][T19601] Bluetooth: hci2: Error when powering off device on rfkill (-4)
[  562.760679][T19633] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3582'.
[  563.115931][ T1299] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  563.128405][ T1299] lec:lec_start_xmit: lec0:No lecd attached
[  563.231256][T19614] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  563.311143][T19614] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  563.806718][T19630] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR
[  563.846714][T19632] 8021q: VLANs not supported on sit0
[  563.861681][T19601] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  563.867616][T19601] Bluetooth: hci1: Error when powering off device on rfkill (-4)
[  563.883871][ T6348] netdevsim netdevsim4 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  563.910752][ T6348] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  563.936956][ T6348] netdevsim netdevsim4 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  563.946979][T19601] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  563.958297][ T6348] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  563.970394][T19601] Bluetooth: hci3: Error when powering off device on rfkill (-4)
[  564.011619][ T6348] netdevsim netdevsim4 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  564.022165][ T6348] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  564.033221][ T6348] netdevsim netdevsim4 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  564.043158][ T6348] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  564.054620][T19601] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  564.067796][T19601] Bluetooth: hci4: Error when powering off device on rfkill (-4)
[  564.776483][T19687] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 64993
[  565.226640][T19707] wlan1 speed is unknown, defaulting to 1000
[  565.278561][T19707] lo speed is unknown, defaulting to 1000
[  565.397350][T19719] syzkaller1: entered allmulticast mode
[  565.677815][T19735] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3604'.
[  565.955805][T19750] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3605'.
[  565.993737][T19746] netlink: 108 bytes leftover after parsing attributes in process `syz.4.3606'.
[  566.023096][T19749] tipc: Started in network mode
[  566.028020][T19749] tipc: Node identity 6257fec10e5d, cluster identity 4711
[  566.065266][T19749] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  566.080787][T19751] syzkaller0: entered promiscuous mode
[  566.087507][T19756] netlink: 96 bytes leftover after parsing attributes in process `syz.1.3608'.
[  566.111391][T19751] syzkaller0: entered allmulticast mode
[  566.141891][T19756] 8021q: VLANs not supported on ip6_vti0
[  566.169722][T19749] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3607'.
[  566.179416][T19749] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3607'.
[  566.190905][T19751] tipc: Resetting bearer <eth:syzkaller0>
[  566.312812][T19748] tipc: Resetting bearer <eth:syzkaller0>
[  566.374899][T19748] tipc: Disabling bearer <eth:syzkaller0>
[  566.443509][T19772] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  566.452505][T19772] syzkaller0: entered promiscuous mode
[  566.458095][T19772] syzkaller0: entered allmulticast mode
[  566.523163][T19772] tipc: Resetting bearer <eth:syzkaller0>
[  566.582909][T19774] 8021q: adding VLAN 0 to HW filter on device bond4
[  566.597319][T19769] tipc: Resetting bearer <eth:syzkaller0>
[  566.658882][T19769] tipc: Disabling bearer <eth:syzkaller0>
[  566.772992][T19788] wlan1 speed is unknown, defaulting to 1000
[  566.786963][T19788] lo speed is unknown, defaulting to 1000
[  567.064251][T19796] wlan1 speed is unknown, defaulting to 1000
[  567.108315][T19796] lo speed is unknown, defaulting to 1000
[  567.776160][T19830] Bluetooth: MGMT ver 1.23
[  567.787251][T19830] x_tables: duplicate underflow at hook 3
[  567.966240][T19832] syzkaller1: entered promiscuous mode
[  567.972010][T19832] syzkaller1: entered allmulticast mode
[  568.139382][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms
[  568.147448][    C0] lec:lec_tx_timeout: lec0
[  568.152349][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  568.261247][T19842] ipvlan2: entered promiscuous mode
[  568.266606][T19842] ipvlan2: entered allmulticast mode
[  568.329618][T19842] gretap0: entered allmulticast mode
[  568.347186][T19846] xt_l2tp: missing protocol rule (udp|l2tpip)
[  568.363566][T19842] team0: Device ipvlan2 failed to register rx_handler
[  568.411748][T19845] openvswitch: netlink: ct_state flags 010000e0 unsupported
[  568.421522][T19845] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 !
[  568.664984][T19857] syzkaller1: entered promiscuous mode
[  568.689569][T19857] syzkaller1: entered allmulticast mode
[  568.928452][T19852] __nla_validate_parse: 1 callbacks suppressed
[  568.928476][T19852] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3634'.
[  569.022417][T19852] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3634'.
[  569.072284][  T194] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  569.083096][  T194] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  569.109992][  T194] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  569.141959][  T194] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  569.395232][T19869] wlan1 speed is unknown, defaulting to 1000
[  569.439942][T19869] lo speed is unknown, defaulting to 1000
[  570.271612][T19910] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.3646'.
[  570.283198][T19910] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.3646'.
[  570.438625][T19913] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3648'.
[  570.473956][T19914] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3647'.
[  570.547237][T19917] netlink: 'syz.2.3650': attribute type 13 has an invalid length.
[  570.672595][T19927] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  570.784569][T19929] netlink: 7064 bytes leftover after parsing attributes in process `syz.1.3652'.
[  570.809961][T19929] openvswitch: netlink: Missing key (keys=40, expected=2000)
[  571.151917][T19944] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3657'.
[  571.760600][T19969] netlink: 'syz.1.3662': attribute type 3 has an invalid length.
[  571.797062][T19969] wlan1 speed is unknown, defaulting to 1000
[  571.806669][T19969] lo speed is unknown, defaulting to 1000
[  571.846176][T19971] xt_NFQUEUE: number of total queues is 0
[  571.894548][T19974] netlink: 'syz.1.3662': attribute type 4 has an invalid length.
[  572.526417][T20005] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  572.543847][T20005] batman_adv: batadv0: Removing interface: batadv_slave_0
[  572.553952][T20008] netlink: 'syz.0.3674': attribute type 1 has an invalid length.
[  572.589075][T20008] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3674'.
[  572.605138][T20005] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  572.619029][T20005] batman_adv: batadv0: Removing interface: batadv_slave_1
[  572.836275][T20027] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3680'.
[  573.151139][T20049] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  573.159414][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms
[  573.174720][    C0] lec:lec_tx_timeout: lec0
[  573.231673][T20049] dvmrp0: entered allmulticast mode
[  573.421128][T20058] netlink: 'syz.3.3689': attribute type 10 has an invalid length.
[  573.491235][T20058] 8021q: adding VLAN 0 to HW filter on device bond0
[  573.525157][T20058] team0: Port device bond0 added
[  573.858669][T20090] netlink: 'syz.2.3694': attribute type 1 has an invalid length.
[  573.926693][T20090] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR
[  574.140025][T20107] __nla_validate_parse: 3 callbacks suppressed
[  574.140047][T20107] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3697'.
[  574.210628][T20110] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[  574.376266][T20125] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3700'.
[  574.941208][T20150] netlink: 'syz.3.3708': attribute type 11 has an invalid length.
[  575.300557][T20178] netlink: 164 bytes leftover after parsing attributes in process `syz.4.3712'.
[  575.346144][T20176] wlan1 speed is unknown, defaulting to 1000
[  575.364094][T20176] lo speed is unknown, defaulting to 1000
[  575.447576][T20168] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  575.926395][T20201] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3721'.
[  575.947814][T20201] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3721'.
[  576.007015][T20201] netlink: 'syz.2.3721': attribute type 1 has an invalid length.
[  576.020415][T20205] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3722'.
[  576.299297][T20207] netlink: 41 bytes leftover after parsing attributes in process `syz.4.3719'.
[  576.356715][T20207] netlink: 124 bytes leftover after parsing attributes in process `syz.4.3719'.
[  576.584519][T20232] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3725'.
[  576.611412][T20232] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3725'.
[  576.710946][T20237] syzkaller1: entered promiscuous mode
[  576.720727][T20237] syzkaller1: entered allmulticast mode
[  577.362784][T20264] wlan1 speed is unknown, defaulting to 1000
[  577.377857][T20264] lo speed is unknown, defaulting to 1000
[  577.652941][T20292] netlink: 'syz.2.3739': attribute type 3 has an invalid length.
[  577.691339][T20281] wlan1 speed is unknown, defaulting to 1000
[  577.699201][T20292] netlink: 'syz.2.3739': attribute type 3 has an invalid length.
[  577.715512][T20281] lo speed is unknown, defaulting to 1000
[  578.449009][T20324] netlink: 'syz.0.3747': attribute type 1 has an invalid length.
[  578.458678][T20323] syzkaller0: entered promiscuous mode
[  578.469632][    C0] ------------[ cut here ]------------
[  578.475559][    C0] ODEBUG: free active (active state 0) object: ffff888026167490 object type: timer_list hint: rose_t0timer_expiry+0x0/0x560
[  578.488796][    C0] WARNING: lib/debugobjects.c:632 at debug_check_no_obj_freed+0x405/0x550, CPU#0: syz-executor/17449
[  578.499818][    C0] Modules linked in:
[  578.504011][    C0] CPU: 0 UID: 0 PID: 17449 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[  578.513738][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  578.523848][    C0] RIP: 0010:debug_check_no_obj_freed+0x44a/0x550
[  578.530524][    C0] Code: 89 44 24 20 e8 e7 2c 77 fd 48 8b 44 24 20 4c 8b 4d 00 4c 89 ef 48 c7 c6 40 bb 27 8c 48 c7 c2 c0 c0 27 8c 8b 0c 24 4d 89 f8 50 <67> 48 0f b9 3a 48 83 c4 08 4c 8b 6c 24 18 48 b9 00 00 00 00 00 fc
[  578.550190][    C0] RSP: 0018:ffffc90000007b68 EFLAGS: 00010246
[  578.556401][    C0] RAX: ffffffff8a964de0 RBX: ffffffff9a467380 RCX: 0000000000000000
[  578.564436][    C0] RDX: ffffffff8c27c0c0 RSI: ffffffff8c27bb40 RDI: ffffffff901beb60
[  578.572478][    C0] RBP: ffffffff8bcf3ce0 R08: ffff888026167490 R09: ffffffff8bcf5000
[  578.580554][    C0] R10: dffffc0000000000 R11: ffffffff81b1e6a0 R12: ffff888026167600
[  578.588554][    C0] R13: ffffffff901beb60 R14: ffff888026167000 R15: ffff888026167490
[  578.596697][    C0] FS:  00005555687de500(0000) GS:ffff888125467000(0000) knlGS:0000000000000000
[  578.605699][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  578.612444][    C0] CR2: 00007ffc5842ffd0 CR3: 000000005bcca000 CR4: 00000000003526f0
[  578.620473][    C0] Call Trace:
[  578.623770][    C0]  <IRQ>
[  578.626633][    C0]  ? __pfx_rose_t0timer_expiry+0x10/0x10
[  578.632361][    C0]  kfree+0x13a/0x630
[  578.636282][    C0]  ? rose_timer_expiry+0x4cb/0x600
[  578.641526][    C0]  rose_timer_expiry+0x4cb/0x600
[  578.646506][    C0]  ? call_timer_fn+0x178/0x640
[  578.651407][    C0]  call_timer_fn+0x192/0x640
[  578.656025][    C0]  ? __pfx_rose_timer_expiry+0x10/0x10
[  578.661571][    C0]  ? call_timer_fn+0xd4/0x640
[  578.666277][    C0]  ? __pfx_call_timer_fn+0x10/0x10
[  578.671484][    C0]  ? _raw_spin_unlock_irq+0x23/0x50
[  578.676722][    C0]  ? __pfx_rose_timer_expiry+0x10/0x10
[  578.682266][    C0]  __run_timer_base+0x652/0x8b0
[  578.687150][    C0]  ? ktime_get+0x45/0x200
[  578.691570][    C0]  ? __pfx___run_timer_base+0x10/0x10
[  578.696982][    C0]  ? sched_clock_cpu+0x74/0x440
[  578.701927][    C0]  run_timer_softirq+0xb7/0x170
[  578.706820][    C0]  handle_softirqs+0x22a/0x870
[  578.711798][    C0]  ? __irq_exit_rcu+0x5f/0x150
[  578.716614][    C0]  __irq_exit_rcu+0x5f/0x150
[  578.721554][    C0]  irq_exit_rcu+0x9/0x30
[  578.725846][    C0]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  578.731594][    C0]  </IRQ>
[  578.734552][    C0]  <TASK>
[  578.737510][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  578.743585][    C0] RIP: 0010:lock_acquire+0xa4/0x2e0
[  578.748851][    C0] Code: 3d d0 d4 6f 0e 00 0f 84 c1 00 00 00 65 8b 05 b3 4d 7a 11 85 c0 0f 85 b2 00 00 00 65 48 8b 05 fb 07 7a 11 83 b8 54 0b 00 00 00 <0f> 85 9d 00 00 00 9c 5b fa 48 c7 c7 7a 3b f1 8d e8 97 45 0d 0a 65
[  578.768731][    C0] RSP: 0018:ffffc900045d7898 EFLAGS: 00000246
[  578.774871][    C0] RAX: ffff8880568ddb80 RBX: 00007f5ab779d9d7 RCX: 0000000080000001
[  578.783115][    C0] RDX: 0000000000000000 RSI: ffffffff81d54497 RDI: 1ffffffff1cebc84
[  578.791261][    C0] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  578.799260][    C0] R10: ffffc900045d79f8 R11: ffffffff81b0bfa0 R12: 0000000000000002
[  578.807310][    C0] R13: ffffffff8e75e420 R14: 0000000000000000 R15: 0000000000000000
[  578.815383][    C0]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  578.821737][    C0]  ? is_bpf_text_address+0x47/0x2b0
[  578.827059][    C0]  ? lock_acquire+0x79/0x2e0
[  578.831740][    C0]  is_bpf_text_address+0x47/0x2b0
[  578.836877][    C0]  ? is_bpf_text_address+0x26/0x2b0
[  578.842264][    C0]  ? is_bpf_text_address+0x26/0x2b0
[  578.847527][    C0]  kernel_text_address+0xa5/0xe0
[  578.852552][    C0]  __kernel_text_address+0xd/0x30
[  578.857625][    C0]  unwind_get_return_address+0x4d/0x90
[  578.863216][    C0]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  578.869427][    C0]  arch_stack_walk+0xfb/0x150
[  578.874154][    C0]  ? do_getname+0x2e/0x250
[  578.878608][    C0]  stack_trace_save+0xa9/0x100
[  578.883452][    C0]  ? __pfx_stack_trace_save+0x10/0x10
[  578.888934][    C0]  ? unwind_get_return_address+0x4d/0x90
[  578.894669][    C0]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  578.900889][    C0]  ? arch_stack_walk+0xfb/0x150
[  578.905779][    C0]  kasan_save_track+0x3e/0x80
[  578.910525][    C0]  ? kasan_save_track+0x3e/0x80
[  578.915397][    C0]  ? __kasan_slab_alloc+0x6c/0x80
[  578.920505][    C0]  ? kmem_cache_alloc_noprof+0x2bc/0x650
[  578.926160][    C0]  ? do_getname+0x2e/0x250
[  578.929849][T20323] syzkaller0: entered allmulticast mode
[  578.930637][    C0]  ? user_path_at+0x2a/0x160
[  578.940864][    C0]  ? __x64_sys_umount+0xf6/0x170
[  578.945836][    C0]  ? do_syscall_64+0x14d/0xf80
[  578.950701][    C0]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  578.956941][    C0]  __kasan_slab_alloc+0x6c/0x80
[  578.961895][    C0]  kmem_cache_alloc_noprof+0x2bc/0x650
[  578.967471][    C0]  ? do_getname+0x2e/0x250
[  578.971982][    C0]  ? kmem_cache_alloc_noprof+0x15a/0x650
[  578.977650][    C0]  do_getname+0x2e/0x250
[  578.981963][    C0]  ? user_path_at+0x1e/0x160
[  578.986591][    C0]  user_path_at+0x2a/0x160
[  578.991093][    C0]  __x64_sys_umount+0xf6/0x170
[  578.995905][    C0]  ? __pfx___x64_sys_umount+0x10/0x10
[  579.001409][    C0]  do_syscall_64+0x14d/0xf80
[  579.006124][    C0]  ? trace_irq_disable+0x3b/0x150
[  579.011251][    C0]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  579.017353][    C0]  ? clear_bhb_loop+0x40/0x90
[  579.022133][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  579.028071][    C0] RIP: 0033:0x7f5ab779d9d7
[  579.032587][    C0] Code: a2 c7 05 1c fd 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[  579.052267][    C0] RSP: 002b:00007ffc58430628 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  579.060853][    C0] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f5ab779d9d7
[  579.068947][    C0] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc584306e0
[  579.076985][    C0] RBP: 00007ffc584306e0 R08: 00007ffc584316e0 R09: 00000000ffffffff
[  579.085053][    C0] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffc58431770
[  579.093101][    C0] R13: 00007f5ab7832050 R14: 000000000008d232 R15: 00007ffc584317b0
[  579.101175][    C0]  </TASK>
[  579.104226][    C0] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  579.111620][    C0] CPU: 0 UID: 0 PID: 17449 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[  579.121257][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  579.131410][    C0] Call Trace:
[  579.134695][    C0]  <IRQ>
[  579.137553][    C0]  vpanic+0x56c/0xa60
[  579.141548][    C0]  ? __pfx__printk+0x10/0x10
[  579.146142][    C0]  ? __pfx_vpanic+0x10/0x10
[  579.150652][    C0]  ? is_bpf_text_address+0x292/0x2b0
[  579.155945][    C0]  ? is_bpf_text_address+0x26/0x2b0
[  579.161244][    C0]  panic+0xc5/0xd0
[  579.164974][    C0]  ? __pfx_panic+0x10/0x10
[  579.169413][    C0]  __warn+0x315/0x4f0
[  579.173402][    C0]  ? debug_check_no_obj_freed+0x405/0x550
[  579.179127][    C0]  ? debug_check_no_obj_freed+0x405/0x550
[  579.184858][    C0]  __report_bug+0x29a/0x540
[  579.189373][    C0]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  579.195193][    C0]  ? debug_check_no_obj_freed+0x405/0x550
[  579.200919][    C0]  ? __pfx___report_bug+0x10/0x10
[  579.205957][    C0]  ? run_timer_softirq+0xb7/0x170
[  579.210987][    C0]  ? handle_softirqs+0x22a/0x870
[  579.215933][    C0]  ? __irq_exit_rcu+0x5f/0x150
[  579.220705][    C0]  ? sysvec_apic_timer_interrupt+0xa6/0xc0
[  579.226522][    C0]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  579.232681][    C0]  ? lock_acquire+0xa4/0x2e0
[  579.237341][    C0]  ? is_bpf_text_address+0x47/0x2b0
[  579.242539][    C0]  ? kernel_text_address+0xa5/0xe0
[  579.247655][    C0]  report_bug_entry+0x19a/0x290
[  579.252519][    C0]  ? debug_check_no_obj_freed+0x44a/0x550
[  579.258241][    C0]  ? debug_check_no_obj_freed+0x44f/0x550
[  579.263966][    C0]  handle_bug+0xce/0x200
[  579.268318][    C0]  exc_invalid_op+0x1a/0x50
[  579.272822][    C0]  asm_exc_invalid_op+0x1a/0x20
[  579.277677][    C0] RIP: 0010:debug_check_no_obj_freed+0x44a/0x550
[  579.284096][    C0] Code: 89 44 24 20 e8 e7 2c 77 fd 48 8b 44 24 20 4c 8b 4d 00 4c 89 ef 48 c7 c6 40 bb 27 8c 48 c7 c2 c0 c0 27 8c 8b 0c 24 4d 89 f8 50 <67> 48 0f b9 3a 48 83 c4 08 4c 8b 6c 24 18 48 b9 00 00 00 00 00 fc
[  579.303706][    C0] RSP: 0018:ffffc90000007b68 EFLAGS: 00010246
[  579.309832][    C0] RAX: ffffffff8a964de0 RBX: ffffffff9a467380 RCX: 0000000000000000
[  579.317814][    C0] RDX: ffffffff8c27c0c0 RSI: ffffffff8c27bb40 RDI: ffffffff901beb60
[  579.325790][    C0] RBP: ffffffff8bcf3ce0 R08: ffff888026167490 R09: ffffffff8bcf5000
[  579.333850][    C0] R10: dffffc0000000000 R11: ffffffff81b1e6a0 R12: ffff888026167600
[  579.341822][    C0] R13: ffffffff901beb60 R14: ffff888026167000 R15: ffff888026167490
[  579.349919][    C0]  ? __pfx_timer_debug_hint+0x10/0x10
[  579.355300][    C0]  ? __pfx_rose_t0timer_expiry+0x10/0x10
[  579.360949][    C0]  ? __pfx_rose_t0timer_expiry+0x10/0x10
[  579.366614][    C0]  kfree+0x13a/0x630
[  579.370651][    C0]  ? rose_timer_expiry+0x4cb/0x600
[  579.375789][    C0]  rose_timer_expiry+0x4cb/0x600
[  579.380833][    C0]  ? call_timer_fn+0x178/0x640
[  579.385622][    C0]  call_timer_fn+0x192/0x640
[  579.390227][    C0]  ? __pfx_rose_timer_expiry+0x10/0x10
[  579.395702][    C0]  ? call_timer_fn+0xd4/0x640
[  579.400478][    C0]  ? __pfx_call_timer_fn+0x10/0x10
[  579.405864][    C0]  ? _raw_spin_unlock_irq+0x23/0x50
[  579.411066][    C0]  ? __pfx_rose_timer_expiry+0x10/0x10
[  579.416815][    C0]  __run_timer_base+0x652/0x8b0
[  579.421672][    C0]  ? ktime_get+0x45/0x200
[  579.426018][    C0]  ? __pfx___run_timer_base+0x10/0x10
[  579.431506][    C0]  ? sched_clock_cpu+0x74/0x440
[  579.436369][    C0]  run_timer_softirq+0xb7/0x170
[  579.441228][    C0]  handle_softirqs+0x22a/0x870
[  579.446005][    C0]  ? __irq_exit_rcu+0x5f/0x150
[  579.450826][    C0]  __irq_exit_rcu+0x5f/0x150
[  579.455423][    C0]  irq_exit_rcu+0x9/0x30
[  579.459673][    C0]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  579.465342][    C0]  </IRQ>
[  579.468303][    C0]  <TASK>
[  579.471238][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  579.477322][    C0] RIP: 0010:lock_acquire+0xa4/0x2e0
[  579.482527][    C0] Code: 3d d0 d4 6f 0e 00 0f 84 c1 00 00 00 65 8b 05 b3 4d 7a 11 85 c0 0f 85 b2 00 00 00 65 48 8b 05 fb 07 7a 11 83 b8 54 0b 00 00 00 <0f> 85 9d 00 00 00 9c 5b fa 48 c7 c7 7a 3b f1 8d e8 97 45 0d 0a 65
[  579.502138][    C0] RSP: 0018:ffffc900045d7898 EFLAGS: 00000246
[  579.508214][    C0] RAX: ffff8880568ddb80 RBX: 00007f5ab779d9d7 RCX: 0000000080000001
[  579.516192][    C0] RDX: 0000000000000000 RSI: ffffffff81d54497 RDI: 1ffffffff1cebc84
[  579.524170][    C0] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  579.532156][    C0] R10: ffffc900045d79f8 R11: ffffffff81b0bfa0 R12: 0000000000000002
[  579.540213][    C0] R13: ffffffff8e75e420 R14: 0000000000000000 R15: 0000000000000000
[  579.548202][    C0]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  579.554380][    C0]  ? is_bpf_text_address+0x47/0x2b0
[  579.559653][    C0]  ? lock_acquire+0x79/0x2e0
[  579.564891][    C0]  is_bpf_text_address+0x47/0x2b0
[  579.570108][    C0]  ? is_bpf_text_address+0x26/0x2b0
[  579.575338][    C0]  ? is_bpf_text_address+0x26/0x2b0
[  579.580554][    C0]  kernel_text_address+0xa5/0xe0
[  579.585497][    C0]  __kernel_text_address+0xd/0x30
[  579.590527][    C0]  unwind_get_return_address+0x4d/0x90
[  579.596007][    C0]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  579.602261][    C0]  arch_stack_walk+0xfb/0x150
[  579.606975][    C0]  ? do_getname+0x2e/0x250
[  579.611417][    C0]  stack_trace_save+0xa9/0x100
[  579.616994][    C0]  ? __pfx_stack_trace_save+0x10/0x10
[  579.622382][    C0]  ? unwind_get_return_address+0x4d/0x90
[  579.628034][    C0]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  579.634191][    C0]  ? arch_stack_walk+0xfb/0x150
[  579.639127][    C0]  kasan_save_track+0x3e/0x80
[  579.643901][    C0]  ? kasan_save_track+0x3e/0x80
[  579.648762][    C0]  ? __kasan_slab_alloc+0x6c/0x80
[  579.653788][    C0]  ? kmem_cache_alloc_noprof+0x2bc/0x650
[  579.659433][    C0]  ? do_getname+0x2e/0x250
[  579.663869][    C0]  ? user_path_at+0x2a/0x160
[  579.668466][    C0]  ? __x64_sys_umount+0xf6/0x170
[  579.673439][    C0]  ? do_syscall_64+0x14d/0xf80
[  579.678220][    C0]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  579.684334][    C0]  __kasan_slab_alloc+0x6c/0x80
[  579.689193][    C0]  kmem_cache_alloc_noprof+0x2bc/0x650
[  579.694650][    C0]  ? do_getname+0x2e/0x250
[  579.699073][    C0]  ? kmem_cache_alloc_noprof+0x15a/0x650
[  579.704712][    C0]  do_getname+0x2e/0x250
[  579.708956][    C0]  ? user_path_at+0x1e/0x160
[  579.713550][    C0]  user_path_at+0x2a/0x160
[  579.717970][    C0]  __x64_sys_umount+0xf6/0x170
[  579.722739][    C0]  ? __pfx___x64_sys_umount+0x10/0x10
[  579.728133][    C0]  do_syscall_64+0x14d/0xf80
[  579.732730][    C0]  ? trace_irq_disable+0x3b/0x150
[  579.737773][    C0]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  579.743839][    C0]  ? clear_bhb_loop+0x40/0x90
[  579.748545][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  579.754474][    C0] RIP: 0033:0x7f5ab779d9d7
[  579.758906][    C0] Code: a2 c7 05 1c fd 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[  579.778525][    C0] RSP: 002b:00007ffc58430628 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  579.786951][    C0] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f5ab779d9d7
[  579.794924][    C0] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc584306e0
[  579.802895][    C0] RBP: 00007ffc584306e0 R08: 00007ffc584316e0 R09: 00000000ffffffff
[  579.810877][    C0] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffc58431770
[  579.818849][    C0] R13: 00007f5ab7832050 R14: 000000000008d232 R15: 00007ffc584317b0
[  579.826841][    C0]  </TASK>
[  579.830010][    C0] Kernel Offset: disabled
[  579.834349][    C0] Rebooting in 86400 seconds..