last executing test programs:

4.359503997s ago: executing program 3 (id=2013):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWSET={0x30, 0x9, 0xa, 0x201, 0x0, 0x0, {0x7, 0x0, 0x7}, [@NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x5}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x14}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x58}, 0x1, 0x0, 0x0, 0x4008091}, 0x10)
openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
socket$kcm(0x11, 0x3, 0x0)
socket$unix(0x1, 0x5, 0x0)
close(0xffffffffffffffff)
socket$kcm(0xa, 0x3, 0x87)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r2 = socket$kcm(0x2, 0xa, 0x2)
pselect6(0x40, &(0x7f0000000040)={0x3, 0x7, 0xd, 0x7fc0000000000003, 0x1, 0x1004, 0x2000000000000007, 0x6}, 0x0, 0x0, 0x0, 0x0)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="034886dd120000000000140000006000000003088700fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$inet6(0xa, 0x3, 0x5)
r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x1c, r4, 0x200, 0x70bd29, 0x25dfdbff, {}, [@ETHTOOL_A_PAUSE_TX={0x5, 0x4, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20002010}, 0x4000000)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000100)={@dev={0xfe, 0x80, '\x00', 0x41}, 0x800, 0x0, 0x3, 0x9, 0x1}, 0x20)
setsockopt$inet6_int(r3, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4)
sendmmsg(r3, &(0x7f0000001500)=[{{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @ipv4={'\x00', '\xff\xff', @empty}, 0x7, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000001580)=ANY=[@ANYBLOB="120000000000000029000000", @ANYRES64=r3], 0x108}}], 0x1, 0xc040)

4.138563428s ago: executing program 4 (id=2017):
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r1, &(0x7f0000000440), 0x10)
listen(r1, 0x5)
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r2, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10)
r3 = accept4$unix(r1, 0x0, 0x0, 0x0)
sendto$packet(r2, &(0x7f0000000600)="5f0efc3e1792a50972d2eb21bdff9ca4ac804c2847689e7fd3f3fe7bf05ddc63ff512d4074687760a5fbd1fc97777a6e55123f04cc8437b15f4b2c6f5027dcea15b6658d", 0xffffff3d, 0x0, 0x0, 0xffffffffffffff10)
recvmsg(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000300)=""/74, 0xffffff78}], 0x1}, 0x10012)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x101042, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000002c0)={'tunl0\x00', &(0x7f0000000140)={'erspan0\x00', <r5=>0x0, 0x40, 0x8000, 0xd9e, 0xfff, {{0x35, 0x4, 0x1, 0xe, 0xd4, 0x64, 0x0, 0x9, 0x2f, 0x0, @multicast2, @broadcast, {[@timestamp_prespec={0x44, 0x3c, 0xc4, 0x3, 0x9, [{@dev={0xac, 0x14, 0x14, 0x25}, 0x80000001}, {@rand_addr=0x64010101, 0x9}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@local, 0x3}, {@multicast2, 0x7}, {@remote, 0x3ff}, {@broadcast, 0x5}]}, @lsrr={0x83, 0x1f, 0x4d, [@broadcast, @rand_addr=0x64010102, @local, @empty, @local, @empty, @multicast2]}, @cipso={0x86, 0x1a, 0x3, [{0x0, 0x5, "b576a5"}, {0x6, 0xf, "f502d80d02d52209a2f374879c"}]}, @noop, @generic={0x88, 0x10, "92220d807d773ba41e9f21d4edf4"}, @end, @lsrr={0x83, 0x7, 0xa1, [@multicast1]}, @timestamp={0x44, 0x10, 0x9a, 0x0, 0x5, [0x2, 0xb, 0xa]}, @generic={0x88, 0xc, "10d655c0ede2a05e15e7"}, @lsrr={0x83, 0x13, 0xa7, [@dev={0xac, 0x14, 0x14, 0x17}, @multicast1, @multicast2, @broadcast]}]}}}}})
sendmsg$nl_route_sched(r4, &(0x7f0000000400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=@deltfilter={0x2c, 0x2d, 0x10, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, {0x0, 0xf}, {0xffe0, 0xa}, {0x5, 0x5}}, [@TCA_CHAIN={0x8, 0xb, 0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x8010)
ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)=0x4)
ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110e22fff6)
close(0x4)

3.255640118s ago: executing program 3 (id=2026):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000040071fc0000000000000000850000002c000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f00000001c0)='GPL\x00', 0x5, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x18000000000002a0, 0x11, 0x0, &(0x7f0000000000)="b9ff0300600d698cff9e14f086dd02f5d1", 0x0, 0x99, 0x60000000, 0x63, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3}, 0x50)

3.19330378s ago: executing program 4 (id=2028):
sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="8c000000", @ANYRESOCT, @ANYBLOB="0002290800030006000000080002000100000008000300000000000800040099740000080004000e0000000800020006000000050005008000000004000680080003000600000034000680060001000200000008"], 0x8c}, 0x1, 0x0, 0x0, 0x4000014}, 0x80)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x20, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x0, 0x3, 0x5}}]}, @action_gd=@TCA_ACT_TAB={0x43, 0x1, [{0x10, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3e}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x2004c8d8)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000dc0)=@newqdisc={0x684, 0x24, 0x1, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x6}, @TCA_STAB={0x118, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xff, 0x4, 0x8, 0x2, 0x0, 0x8, 0x1, 0x3}}, {0xa, 0x2, [0x4, 0x6, 0x0]}}, {{0x1c, 0x1, {0x26, 0xa3, 0x1, 0x1800000, 0x2, 0x6, 0xfffffffa, 0x2}}, {0x8, 0x2, [0x2, 0x1]}}, {{0x1c, 0x1, {0x4, 0x75, 0xfff2, 0x7, 0x2, 0x101, 0x3, 0x3}}, {0xa, 0x2, [0x4, 0x9, 0x2]}}, {{0x1c, 0x1, {0xfa, 0x6, 0x644, 0x3d1a, 0x0, 0xc15, 0x8, 0x6}}, {0x10, 0x2, [0x7f, 0x2, 0x6, 0x3, 0x27bf, 0x4b8]}}, {{0x1c, 0x1, {0x1, 0x6, 0x40, 0x373, 0x2, 0x9, 0x4bb0, 0x4}}, {0xc, 0x2, [0x7, 0x9, 0x35, 0x0]}}, {{0x1c, 0x1, {0xf, 0x2, 0xe, 0x65, 0x0, 0x81, 0x81, 0x4}}, {0xc, 0x2, [0x10, 0x1, 0x7, 0xfff8]}}, {{0x1c, 0x1, {0xfd, 0x0, 0x1, 0x3, 0x0, 0x8, 0x21, 0x1}}, {0x6, 0x2, [0x1000]}}]}, @qdisc_kind_options=@q_choke={{0xa}, {0x52c, 0x2, [@TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_PARMS={0x14, 0x1, {0xf8ff, 0x7, 0x4, 0x12, 0x10, 0xb}}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}]}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x1ff}]}, 0x684}, 0x1, 0x0, 0x0, 0x40}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x4, 0xc0000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x3, 0x3}, {0xa, 0xe}, {0x0, 0x9}}, [@qdisc_kind_options=@q_choke={{0xa}, {0xc, 0x2, [@TCA_CHOKE_MAX_P={0x8, 0x3, 0x8d}]}}]}, 0x3c}}, 0x20004055)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0)
accept4$rose(0xffffffffffffffff, &(0x7f0000000440)=@full={0xb, @dev, @rose, 0x0, [@remote, @null, @netrom, @rose, @default]}, &(0x7f0000000480)=0x40, 0x80000) (async)
r2 = accept4$rose(0xffffffffffffffff, &(0x7f0000000440)=@full={0xb, @dev, @rose, 0x0, [@remote, @null, @netrom, @rose, @default]}, &(0x7f0000000480)=0x40, 0x80000)
ioctl$SIOCRSGCAUSE(r2, 0x89e0, &(0x7f00000004c0))
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22e8a65c15}, 0x4008840)
socket$netlink(0x10, 0x3, 0x0) (async)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000000b00010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) (async)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000000b00010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0x68}, 0x1, 0x0, 0x0, 0x2000094}, 0x0)
close(0x3)
socket$netlink(0x10, 0x3, 0x0) (async)
r4 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00'}) (async)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', <r5=>0x0})
sendmsg$nl_route(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYRES8=0x0, @ANYRESDEC=r5, @ANYBLOB="409c0c62d57f47faa50c703760bb2cae710036d5d7645ca5c98b0800000027162e58a99a20d30506fca2cd00279f4fc2e09f4fedcbed4c226e77f7d34407e8a2", @ANYRES16=r4], 0x30}}, 0x0) (async)
sendmsg$nl_route(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYRES8=0x0, @ANYRESDEC=r5, @ANYBLOB="409c0c62d57f47faa50c703760bb2cae710036d5d7645ca5c98b0800000027162e58a99a20d30506fca2cd00279f4fc2e09f4fedcbed4c226e77f7d34407e8a2", @ANYRES16=r4], 0x30}}, 0x0)
r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000240), 0xffffffffffffffff)
r7 = socket$caif_seqpacket(0x25, 0x5, 0x0)
setsockopt$CAIFSO_LINK_SELECT(r7, 0x116, 0x7f, &(0x7f0000000580)=0xd, 0x4) (async)
setsockopt$CAIFSO_LINK_SELECT(r7, 0x116, 0x7f, &(0x7f0000000580)=0xd, 0x4)
connect$caif(r7, &(0x7f0000000040)=@dgm={0x25, 0x2, 0x8}, 0x18)
sendmsg$TIPC_CMD_GET_NETID(r4, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r6, 0x800, 0x70bd27, 0x25dfdbff, {}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000001}, 0x4001)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
socket$kcm(0x2, 0xa, 0x2) (async)
r8 = socket$kcm(0x2, 0xa, 0x2)
socket(0x10, 0x3, 0x0) (async)
r9 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r9, 0x10e, 0xc, &(0x7f0000000280)={0xffffffff}, 0x10)
sendmsg$nl_generic(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x20, 0x12, 0xa01, 0x0, 0x0, {0xa, 0x0, 0x300}}, 0x26}}, 0x0)
ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}})

3.179196149s ago: executing program 3 (id=2029):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000040), &(0x7f0000000180)=0x4)
sendto$inet6(r0, &(0x7f0000000080)='X', 0x1, 0x0, &(0x7f0000000140)={0xa, 0x0, 0x0, @private0}, 0x1c)
setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000100)={0x66, 0xfe, 0x4, 0x5, 0xa8, 0x20, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x9}, 0xe)
setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000000)=0x6, 0x4)
shutdown(r0, 0x1)
recvmmsg(r0, &(0x7f0000005000)=[{{0x0, 0x2a, 0x0, 0x0, &(0x7f00000000c0)=""/19, 0x13}, 0x3}], 0x4000169, 0x60, 0x0)
mmap(&(0x7f0000196000/0x1000)=nil, 0x1000, 0x0, 0x840000000000a132, 0xffffffffffffffff, 0x0)

2.954366099s ago: executing program 4 (id=2031):
socket$netlink(0x10, 0x3, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x24}}, 0x0)
getsockname$packet(r1, &(0x7f0000000540)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)=ANY=[@ANYRES32=0x0, @ANYRES32, @ANYRES64=<r5=>r4, @ANYRES64=0x0, @ANYRES16=r4], 0x20)
bpf$TOKEN_CREATE(0x24, &(0x7f00000008c0)={0x0, r4}, 0x8)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000a80)={0x9, <r6=>0x0}, 0x8)
bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYRESOCT=r5], &(0x7f0000000940)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9}, 0x94)
sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000780)=@newqdisc={0x138, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x108, 0x2, {{0x100, 0x65, 0x3, 0xd913, 0x81, 0x1}, [@TCA_NETEM_LOSS={0xe0, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0x5, 0x3, 0x3ff}}, @NETEM_LOSS_GE={0x14, 0x2, {0x8, 0x9, 0x9, 0x6}}, @NETEM_LOSS_GE={0x14, 0x2, {0x8, 0x3, 0x40, 0x200}}, @NETEM_LOSS_GE={0x14, 0x2, {0x2, 0xfffffff1, 0x1ff, 0x81}}, @NETEM_LOSS_GI={0x18, 0x1, {0xfffffffa, 0x7, 0x7f, 0x4, 0xa4e3}}, @NETEM_LOSS_GI={0x18, 0x1, {0xb, 0x8, 0x400, 0x7, 0x40}}, @NETEM_LOSS_GE={0x14, 0x2, {0x1ff, 0x7, 0xd, 0x40}}, @NETEM_LOSS_GI={0x18, 0x1, {0x13cb40, 0x4, 0x7fffffff, 0x100, 0x1}}, @NETEM_LOSS_GI={0x18, 0x1, {0x5, 0x8, 0x9ae1, 0x10000, 0x400}}, @NETEM_LOSS_GI={0x18, 0x1, {0x3, 0x6, 0x2, 0xd, 0x22}}]}, @TCA_NETEM_REORDER={0xc, 0x3, {0x3a78, 0xfffffff6}}]}}}]}, 0x138}}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000280)={0x0, 0x99, 0xb, 0x0, 0x1, 0x5392, 0xc, 0x9, {0x0, @in6={{0xa, 0x4e20, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}, 0x10}}, 0x81, 0x3, 0xc, 0x4b, 0x9}}, 0x0)
r9 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c000280080001400000000014000180090001006cdbf80789f3f947dd000280080003"], 0xe4}}, 0x20050840)
sendmsg$kcm(r9, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0)
r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="0ffdbf0000000400009a04000000167167ba1f000000", @ANYRES32, @ANYBLOB="fdffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
r11 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x24, 0x140f, 0x1, 0x70bd25, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x9, 0x45, 'issm\x00'}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000840}, 0x4004804)
r12 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002e00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000180)=ANY=[@ANYRES32=r10, @ANYRES32=r12, @ANYBLOB="05"], 0x10)
getsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f00000000c0)={@local, @private}, &(0x7f0000000140)=0xc)
r13 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3)
getpeername(r13, 0x0, 0x0)
ioctl$XFS_IOC_FD_TO_HANDLE(r7, 0xc038586a, &(0x7f0000000600)={<r14=>r3, &(0x7f00000001c0)='memory.stat\x00', 0x200000, &(0x7f0000000500)={@_ha_fsid={[0x7, 0xfffffffb]}, {0x7, 0x822, 0x1, 0x2}}, 0x0, &(0x7f0000000580), &(0x7f00000005c0)=0xfffffffa})
bind$bt_hci(r14, &(0x7f0000000680)={0x1f, 0xffffffffffffffff, 0x2}, 0x6)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r10}, &(0x7f00000006c0), &(0x7f0000000700)=r8}, 0x20)
sendmsg$inet(r7, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3)

2.626849573s ago: executing program 1 (id=2035):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000006080)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000ac03000000000000850000003300000095"], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r1}, &(0x7f0000000040), &(0x7f0000000880)=r2}, 0xffffffffffffffcf)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r4=>0x0})
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000380)={r2, r4, 0x25, 0x0, @val=@tracing={0x0, 0x5a7}}, 0x20)
sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newqdisc={0x9c, 0x10, 0x1, 0x800, 0x0, {0x0, 0x0, 0x0, r4, {0x9, 0x1}, {0x4}, {0xe, 0xb}}, [@TCA_STAB={0x4c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xfe, 0x9, 0x40, 0x862, 0x2, 0x1ff, 0x1, 0x2}}, {0x8, 0x2, [0x8, 0x80]}}, {{0x1c, 0x1, {0x2, 0x7, 0x1, 0xe7b, 0x0, 0x5, 0x1, 0x1}}, {0x6, 0x2, [0x0]}}]}, @TCA_STAB={0x2c, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x6, 0x0, 0x491, 0x0, 0x0, 0x0, 0x5, 0x3}}, {0xa, 0x1b, [0x0, 0x0, 0x9]}}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x90}, 0x4000c00)
socket$netlink(0x10, 0x3, 0x0) (async)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000006080)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000ac03000000000000850000003300000095"], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r1}, &(0x7f0000000040), &(0x7f0000000880)=r2}, 0xffffffffffffffcf) (async)
socket$inet_tcp(0x2, 0x1, 0x0) (async)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) (async)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000380)={r2, r4, 0x25, 0x0, @val=@tracing={0x0, 0x5a7}}, 0x20) (async)
sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newqdisc={0x9c, 0x10, 0x1, 0x800, 0x0, {0x0, 0x0, 0x0, r4, {0x9, 0x1}, {0x4}, {0xe, 0xb}}, [@TCA_STAB={0x4c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xfe, 0x9, 0x40, 0x862, 0x2, 0x1ff, 0x1, 0x2}}, {0x8, 0x2, [0x8, 0x80]}}, {{0x1c, 0x1, {0x2, 0x7, 0x1, 0xe7b, 0x0, 0x5, 0x1, 0x1}}, {0x6, 0x2, [0x0]}}]}, @TCA_STAB={0x2c, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x6, 0x0, 0x491, 0x0, 0x0, 0x0, 0x5, 0x3}}, {0xa, 0x1b, [0x0, 0x0, 0x9]}}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x90}, 0x4000c00) (async)

2.580673387s ago: executing program 0 (id=2036):
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x5}, 0x10)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r1) (async)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r2, &(0x7f0000002080), 0xe)
listen(r2, 0xa) (async)
connect$bt_l2cap(r2, &(0x7f00000000c0)={0x1f, 0x80, @any, 0x0, 0x2}, 0xe) (async)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r3)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async)
sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, 'X.'}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
write(r0, &(0x7f00000002c0)="240000001e005f0214fffffffffffff80f000000000000000000080008000d40ff000000", 0x24)

2.455453966s ago: executing program 2 (id=2037):
socket(0x11, 0x2, 0xffc) (async)
r0 = socket$nl_route(0x10, 0x3, 0x0) (async)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vxcan0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newtaction={0x88, 0x30, 0xffff, 0x70bd29, 0x0, {0x0, 0x0, 0x1300}, [{0x74, 0x1, [@m_mirred={0x70, 0x1, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x4, {{0xffdff7e8, 0x3, 0x20000000}, 0x1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x0, 0x1, 0x400, 0xfffffff7}, 0x21, r2}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x20008880}, 0x80) (async)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000800)=@can_newroute={0x154, 0x18, 0x1, 0x70bd27, 0x25dfdbfd, {0x1d, 0x1, 0x4}, [@CGW_CS_CRC8={0x11e, 0x6, {0x3, 0x1, 0x3, 0x2, 0xff, "71ec6d721744cd5200080000f8cfcad4e4ec6511ec028c5028564abce83afe14c93e15e556c2baed7f893fe841c155a2b2a4b9f3052995cdf66a9c7922ff0300005b6c67281f1519cd7c32c2bf7563b9452575505da99ea128d37616896be8764a2c78edbad5bde7a5e405bdc893770338925f824bd24689c0d11a5568fc3aaa9ad0d7766d8ea8d3bf1006e3df494e2f373148ecb4adafdd39874e9808b12c301f47f3b740e105d0ed18fae7289635301ebd8949268090b3bcd4cbed5f1cfe93cff41a9630802f9650529827c5e301953a8abaafa1f121e590f74e28233f4129d4577eee87ec5d42c3ef0619022c00", 0x0, "5c8d03000000000000002a5e15c8a95d29e5b2ea"}}, @CGW_CS_XOR={0x8, 0x5, {0xfffffffffffffffe, 0x1, 0xf5, 0x2}}, @CGW_MOD_XOR={0x15, 0x3, {{{0x3, 0x1}, 0x5, 0x2, 0x0, 0x0, "54831bdbae1d82b3"}, 0x7}}]}, 0x154}}, 0x240448c8)
r3 = socket(0x400000000010, 0x3, 0x0)
setsockopt$inet_sctp_SCTP_RECVNXTINFO(r3, 0x84, 0x21, &(0x7f0000000140)=0x87, 0x4)
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffe5}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) (async)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r3)
sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r3, &(0x7f0000000a40)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000a80)=ANY=[@ANYRES16=r4, @ANYBLOB], 0x110}, 0x1, 0x0, 0x0, 0x20004800}, 0x800) (async)
ioctl$SIOCGETNODEID(r3, 0x89e1, &(0x7f0000000040)={0x2})

2.454437822s ago: executing program 1 (id=2038):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, &(0x7f00000001c0)=0x9c)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xfe, 0x0, &(0x7f0000000100)="b9ff03316844268cb89e14f0080065e0050200000000001177fbac141416e000030a44079f03b180006000000000845013f2325f003901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014c0000c0adc043084617d7ecf41effff38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d7da058f6efa6d1f5f7ff400"/254, 0x0, 0xfe, 0x60000000, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000000), 0x0, 0x0, 0x2}, 0x26)
r2 = accept$netrom(0xffffffffffffffff, &(0x7f0000000000)={{0x3, @default}, [@rose, @remote, @default, @default, @bcast, @default, @bcast, @bcast]}, &(0x7f00000002c0)=0x48)
socket$nl_xfrm(0x10, 0x3, 0x6) (async)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=@newsa={0x128, 0x10, 0x7, 0x0, 0x0, {{@in6=@mcast2, @in=@multicast2, 0x4e20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x0, 0x0, 0x2, 0x0, 0x10000000, 0xffffffffffffffff}, {0x0, 0x200000, 0x7}, {0x40000, 0xfffffffd, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x34}, [@coaddr={0x14, 0xe, @in6=@remote}, @lifetime_val={0x24, 0x9, {0x3, 0x8000000000000001, 0xb4, 0x5}}]}, 0x128}}, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6) (async)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=@newsa={0x104, 0x1a, 0x7, 0x70bd2a, 0x0, {{@in6=@dev={0xfe, 0x80, '\x00', 0x1b}, @in=@multicast1, 0x3, 0x0, 0x4e22, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x5a, 0xb400, 0x2, 0x7, 0x0, 0x60000, 0x0, 0x2000000001}, {0x0, 0x200000, 0x7, 0xfffffffffffffffd}, {0x40000, 0x0, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in6=@remote}]}, 0x104}}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x17, 0x0, 0x8400, 0x1, 0x0, 0x1}, 0x48) (async)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x17, 0x0, 0x8400, 0x1, 0x0, 0x1}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r5}, 0x0, &(0x7f0000000040)}, 0x20) (async)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r5, <r6=>0xffffffffffffffff}, 0x0, &(0x7f0000000040)}, 0x20)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r6, 0x0, &(0x7f0000001780)=""/4096}, 0x20)
r7 = socket$pppl2tp(0x18, 0x1, 0x1)
r8 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r7, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r8, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2}}, 0x2e)
sendmmsg(r7, &(0x7f0000008b40)=[{{0x0, 0x15, &(0x7f0000000a40)=[{0x0, 0xff87}, {&(0x7f0000001540)="f2", 0x1}], 0x2}}], 0x1, 0x0)
ioctl$sock_netrom_SIOCADDRT(r2, 0x890b, &(0x7f0000000f00)={0x0, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bpq0, 0x2, 'syz0\x00', @null, 0xc9a, 0x4, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @null, @default, @bcast, @bcast]}) (async)
ioctl$sock_netrom_SIOCADDRT(r2, 0x890b, &(0x7f0000000f00)={0x0, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bpq0, 0x2, 'syz0\x00', @null, 0xc9a, 0x4, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @null, @default, @bcast, @bcast]})

2.390755224s ago: executing program 2 (id=2039):
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x24004004)
r0 = socket$key(0xf, 0x3, 0x2)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000850000000f00000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000140)=ANY=[@ANYRES32=0x1, @ANYRES32=r2, @ANYBLOB="2e00000010"], 0x20)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000140)=ANY=[], 0x20)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0)
sendmsg$key(r0, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002000000da16c167d803f1f805000600200000000a00060000000000ff0000000000000000001ffeff0001000003f1dc7f7c6e7c02000100000000000040000280ffffff05000500000000000a"], 0x80}}, 0x0)
r3 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_inet_SIOCSIFDSTADDR(r3, 0x8919, &(0x7f0000000000)={'lo\x00', {0x2, 0x4c23, @loopback}})
sendmmsg(r0, &(0x7f0000000180), 0x400008a, 0xff80)
socketpair(0xa, 0x80000, 0x0, &(0x7f0000000100))
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x200a0, 0x18841}, [@IFLA_GROUP={0x8}, @IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x10000, 0x7}}]}]}]}, 0x3c}}, 0x800)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)

2.386693259s ago: executing program 0 (id=2040):
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r2 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="00200000ffffffffffffbbdabb05000000004500003cfffe000000299078ac1ee000dfff000000e0ebc7a1e0ff7a9499ffe05befe1fdbc66e400d7e83306de4200"/78], 0x4e)
sendmmsg$inet(r0, &(0x7f0000002c80)=[{{&(0x7f0000000940)={0x2, 0x4e20, @local}, 0x10, &(0x7f0000000340)=[{&(0x7f0000000380)="00dd41dc115d27cf850a782da28375b561df298712d56b", 0x2}], 0x1}}, {{&(0x7f0000000c40)={0x2, 0x4e20, @local}, 0x10, 0x0, 0x0, &(0x7f0000000d80), 0x30}}], 0x2, 0x41)
socket$nl_netfilter(0x10, 0x3, 0xc)

2.271180636s ago: executing program 3 (id=2041):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r0}, 0x4)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002f000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a500000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xf99017019b42da6b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) (async)
setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4)
setsockopt$packet_int(r2, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4)
socket$nl_route(0x10, 0x3, 0x0) (async)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x8}, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x20400, 0x0) (async)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x20400, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r5 = socket(0x400000000010, 0x3, 0x0)
r6 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0xfffffffffffffdbc, 0x2, {{0x1, 0xd, 0x0, 0x9, 0x8}, 0x6, 0x1, 0x1, 0x4, 0x8, 0xe, 0x7, 0x1d, 0x3, 0x9, {0xa2d6, 0x200, 0xb, 0x40, 0x2, 0x1ff}}}}]}, 0x78}}, 0x0) (async)
sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0xfffffffffffffdbc, 0x2, {{0x1, 0xd, 0x0, 0x9, 0x8}, 0x6, 0x1, 0x1, 0x4, 0x8, 0xe, 0x7, 0x1d, 0x3, 0x9, {0xa2d6, 0x200, 0xb, 0x40, 0x2, 0x1ff}}}}]}, 0x78}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1a, 0x4, &(0x7f0000000600)=ANY=[@ANYRES32=r1, @ANYRES64=r2], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', r7, @fallback=0xf, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x9}, 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x7fff}, 0x10}, 0x94) (async)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1a, 0x4, &(0x7f0000000600)=ANY=[@ANYRES32=r1, @ANYRES64=r2], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', r7, @fallback=0xf, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x9}, 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x7fff}, 0x10}, 0x94)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="5c00000002060108000000000000000000000000050005000a000000050001000700000005000400000000000900020073797a310000000015000300686173683a69702c706f72742c6e6574000000000c00078008000640"], 0x5c}}, 0x20084884)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x1}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0)
socket(0x400000000010, 0x3, 0x0)
r8 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@newtfilter={0xcc, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0xe, 0x7}, {}, {0x7}}, [@filter_kind_options=@f_u32={{0x8}, {0xa0, 0x2, [@TCA_U32_SEL={0x94, 0x5, {0x7, 0xef, 0x8, 0x8, 0x5, 0x9, 0x7, 0x0, [{0x1000, 0x4, 0x401, 0x6}, {0x6, 0x7, 0x1008, 0x3}, {0xfffffff9, 0x43, 0x7ffd, 0x6}, {0x7fde, 0x40, 0x51, 0x3ff}, {0x5, 0xb, 0x8, 0x42}, {0x6, 0x4, 0x8, 0x8}, {0x8001, 0x0, 0x0, 0x8001}, {0x1, 0x1800004, 0x8000}]}}, @TCA_U32_CLASSID={0x8, 0x1, {0x5, 0xfff3}}]}}]}, 0xcc}, 0x1, 0x0, 0x0, 0x80}, 0xc040)
r10 = socket$netlink(0x10, 0x3, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r11 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_COMPAT_GET(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="30000000000b0102000000000100000003000000080002400000000008000340000000010b0001006d616e676c65"], 0x30}}, 0x20004084) (async)
sendmsg$NFNL_MSG_COMPAT_GET(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="30000000000b0102000000000100000003000000080002400000000008000340000000010b0001006d616e676c65"], 0x30}}, 0x20004084)
socket$inet6_tcp(0xa, 0x1, 0x0) (async)
r12 = socket$inet6_tcp(0xa, 0x1, 0x0)
r13 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r13, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x1, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x1021, 0x3}, [@IFLA_GROUP={0x8}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0xfffffffd}]}, 0x30}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) (async)
sendmsg$nl_route(r13, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x1, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x1021, 0x3}, [@IFLA_GROUP={0x8}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0xfffffffd}]}, 0x30}, 0x1, 0x0, 0x0, 0x801}, 0x4000000)
getsockopt$inet6_int(r12, 0x29, 0x4e, 0x0, &(0x7f0000000080))
sendmmsg(r10, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async)
sendmmsg(r10, &(0x7f00000002c0), 0x40000000000009f, 0x0)
recvmsg$kcm(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000340)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x80, &(0x7f0000000580)=[{&(0x7f00000003c0)=""/190, 0xbe}], 0x1}, 0x2020)

2.266558214s ago: executing program 1 (id=2042):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0)
sendmsg$TIPC_NL_BEARER_SET(r1, 0x0, 0x4040)
r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000000c0)=<r3=>0x0)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r4)
r6 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
ioctl$int_in(r6, 0x5421, &(0x7f0000000040)=0x4)
listen(r6, 0x80)
accept$netrom(r6, 0x0, 0x0)
sendmsg$NFC_CMD_DEV_UP(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r5, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r3}]}, 0x1c}}, 0x0)
r7 = socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
sendmsg$nl_xfrm(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x15, 0xf1f, 0x1, 0x25dfdbfd, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@remote, 0x4e20, 0x0, 0x4e23, 0xfffc, 0xa, 0x10, 0x0, 0x2}, {0x8, 0x1, 0x0, 0x0, 0x100, 0x0, 0xffffffff, 0xffffffffffffffff}, {0x0, 0xfffffffffffffffa, 0x4, 0x3}, 0x4, 0x6e6bb5, 0x0, 0x1, 0x3, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x4000001}, 0x4)
close(0x3)
write$nci(r2, &(0x7f0000000c40)=@NCI_GID_PROPRIETARY_NFT={0xf, 0x1, 0x3, 0x0, 0x1, "9f"}, 0x4)
r8 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$sock_int(r8, 0x1, 0x28, 0x0, 0x0)
syz_genetlink_get_family_id$fou(&(0x7f0000000240), r0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)

2.065907994s ago: executing program 0 (id=2043):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
setsockopt$bt_l2cap_L2CAP_LM(r3, 0x6, 0x3, &(0x7f0000000340)=0x31, 0x4)
pipe(&(0x7f0000000180))
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3, 0x8032, 0xffffffffffffffff, 0x8884d000)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r4)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000440)={'batadv0\x00', <r6=>0x0})
sendmsg$BATADV_CMD_SET_MESH(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000040)={0x1c, r5, 0x1, 0x70bd28, 0x4000001, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}]}, 0x1c}}, 0x80)
sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r2, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x50, r5, 0x10, 0x70bd2c, 0x25dfdbfc, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x3}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xfffffff1}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x2}]}, 0x50}, 0x1, 0x0, 0x0, 0x22008000}, 0x10)
sendmsg$DEVLINK_CMD_RATE_SET(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000c40)={0x44, r1, 0x1, 0x0, 0x0, {0x2c}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x58, 0x3}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x20}]}, 0x44}}, 0x8040)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="020000000400000008fc23000100000080000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32=0x0], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r7}, &(0x7f00000000c0), 0x0}, 0x20)
socket(0x10, 0x3, 0x0)
r8 = socket(0x840000000002, 0x3, 0x100)
connect$inet(r8, 0x0, 0x0)
r9 = socket$nl_route(0x10, 0x3, 0x0)
r10 = socket(0x15, 0x5, 0x0)
getsockopt(r10, 0x200000000114, 0x2713, &(0x7f0000c35fff)=""/1, 0x0)
sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x28, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3000a}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0)
syz_genetlink_get_family_id$nl80211(0x0, r8)
sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r8, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004800}, 0x800)
r11 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r11, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000002200)=ANY=[@ANYBLOB], 0x8c}}, 0x0)
sendmmsg$inet(r8, 0x0, 0x0, 0x0)

1.939599561s ago: executing program 4 (id=2044):
socket$netlink(0x10, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000900), 0xffffffffffffffff)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9}, [@call={0x85, 0x0, 0x0, 0x2a}]}, 0x0, 0x2, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
r0 = socket(0x28, 0x5, 0x0)
bind$vsock_stream(r0, &(0x7f0000000040), 0x10)
listen(r0, 0x0)
socket(0x28, 0x5, 0x0)
socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0))
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x4, &(0x7f0000000dc0)=ANY=[@ANYBLOB="18050000000004000000000000000000850000007b00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94)
r2 = socket$packet(0x11, 0x3, 0x300)
setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000080)=r1, 0x4)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=@delchain={0x34, 0x64, 0xf31, 0xfffffffe, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff3}, {0xfff3, 0xffff}, {0xa, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40054}, 0x4804)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c000000020603000000000000000000000000001400078008001240000000000500150002000000050001000600000005000500020000000500040000000000090002"], 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a03000000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140004"], 0xa4}}, 0x0)

1.938045781s ago: executing program 1 (id=2045):
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="18000000040001000000009500000000008000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94)
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x3, &(0x7f0000000400)=[{0x20, 0x0, 0x2, 0xfffbf010}, {0x25, 0x0, 0x0, 0x7ffff021}, {0x6}]}, 0x10)
socket$inet(0x2, 0x80000, 0x6)
ioctl(r0, 0xad7, &(0x7f0000000040)="a3c009e0c9ec83d4dcea3f322103397ca6993b39e6c518639eea3e8a72dce647a7bebf9ef739a7")
r2 = socket$inet6(0xa, 0x800000000000002, 0x0)
setsockopt$inet6_mtu(r2, 0x29, 0x17, &(0x7f0000000500)=0x3, 0x4)
sendmmsg$inet6(r2, &(0x7f0000003580)=[{{&(0x7f0000000140)={0xa, 0x4e21, 0x8, @dev={0xfe, 0x80, '\x00', 0x29}}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000003480)=[{&(0x7f0000000080)="4b3dfd19afe32b8af29701067f380c324ba5d82d1001a21e88c869f27282abb33d5efe2aaa0fdd2bc11efbd7c1cf2d0a09d3dec0a5540030c7f3764909c3c707efc5771ae3a7e3226fd96d797cdd1b69ba9f6ad42d9e67d62c48ed524d2c5d3423065ecbced57a75f9a2ab902c56b510a35423203b1b4563997bd59adbf2a2", 0x7f}, {0x0}], 0x2}}], 0x2, 0xc040)
setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r2, 0x6, 0x15, &(0x7f0000000080)=0x3, 0x4)

1.924652942s ago: executing program 2 (id=2046):
socket$inet_smc(0x2b, 0x1, 0x0) (async)
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$OSF_MSG_ADD(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={0x14, 0x0, 0x5, 0x101}, 0x14}}, 0x0)
setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0xb001, 0xff03, 0x3f0, 0x0, 0x1f8, 0x1f8, 0x308, 0x308, 0x308, 0x7fffffe, 0x0, {[{{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0x1f8}}, {{@uncond, 0xc0, 0x110, 0x0, {0x0, 0x1e03}}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @remote, @loopback, 0x8}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@random="6a75dec8fcaf", @mac=@local, @multicast1, @multicast1, 0x4, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28, '\x00', 0x0, 0xfffffffb}}}}, 0x440)

1.808986299s ago: executing program 2 (id=2047):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$unix(0x1, 0x2, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0xa8, r2, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x7ff, 0x70}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MNTR_FLAGS={0x20, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "a8e693ccc99e6b49540fb89523d838857ce8f792da990547"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}], @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0xa8}, 0x1, 0x0, 0x0, 0x91}, 0x24044884)

1.631717686s ago: executing program 1 (id=2048):
socket$inet_icmp_raw(0x2, 0x3, 0x1)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1900000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000fc00"/28], 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000780)={r1, &(0x7f0000000800), &(0x7f0000000880)=""/2, 0x2}, 0x20)
close(0x4)
ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000200)=<r2=>0x0)
syz_open_procfs$namespace(r2, &(0x7f0000000080)='ns/ipc\x00')
unshare(0x6a040000)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000140)={'ip6_vti0\x00', 0x0, 0x29, 0xf, 0x95, 0xeb, 0x4, @local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1, 0x7, 0xfffffffd, 0x9}})
r3 = socket(0x10, 0x3, 0x0)
sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[], 0x50}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000700)=ANY=[@ANYBLOB="1c0000005e0001"], 0x1c}, 0x1, 0x0, 0x0, 0x831e368c771a0719}, 0x400c080)
sendmmsg(r3, &(0x7f0000000000), 0x4000000000001f2, 0x0)
syz_emit_ethernet(0x86, &(0x7f00000000c0)={@link_local, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x8, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @local, @multicast1}, {0x0, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x0, "306720a65ecadd8f8d4096edd3a616a0c3491e3bea200200", "8e6dbc6bc4b02931a149e80581e14a2c", {"a65651e8000000000000007f96141e51", "dac60bebf4c50000000000000200"}}}}}}}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="040100001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b0001006272696467650000140002800800050001200000080001"], 0x104}}, 0x0)

566.79696ms ago: executing program 4 (id=2049):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f0000000000)=@framed={{0x1d, 0xa, 0xa, 0x0, 0x0, 0x61, 0x10, 0x20}}, &(0x7f0000000480)='syzkaller\x00'}, 0x80)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x7, 0x17, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000080008500000005000000bf09000000000000b60901000000002066000000646c6c2518010000696c6c2500000000002020207b9af8ff000000005d9100000000000037010000f8ffffffb702000008000000b70300000000000015000000060000003f93000000000000b5030000000000008500000076000000b7000000000000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{0x1}, &(0x7f0000000100), &(0x7f0000000140)=r1}, 0x20)

557.729249ms ago: executing program 3 (id=2050):
r0 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newqdisc={0x7c, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x100, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x4c, 0x2, [@TCA_GRED_MAX_P={0xfffc, 0x4, 0x4cc1}, @TCA_GRED_LIMIT={0x8, 0x5, 0x4}, @TCA_GRED_PARMS={0x38, 0x1, {0x6b5, 0x4, 0x3ff, 0x2, 0x6, 0xfffffca7, 0x8001, 0x9, 0x4, 0x4, 0xf, 0xe, 0x4, 0x99, 0x4, 0x5e}}]}}]}, 0x7c}, 0x1, 0x0, 0x0, 0x8040}, 0x0)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000007d40)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000004c0)={{r2, <r3=>0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000580)='%-010d \x00'}, 0x20)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r3}, 0x4)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0x11, &(0x7f0000000340)=ANY=[@ANYBLOB="180200000000000000000000020004008500000097000000b7080000000000007b8af8ff00000000b7080000ffffffff7b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x0, 0xe, 0x0, &(0x7f0000000100)="b347d4211a17c1d89ee99b6f73ac", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
ioctl$sock_SIOCSIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f0000000000))
socket(0x10, 0x3, 0x0) (async)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) (async)
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newqdisc={0x7c, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x100, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x4c, 0x2, [@TCA_GRED_MAX_P={0xfffc, 0x4, 0x4cc1}, @TCA_GRED_LIMIT={0x8, 0x5, 0x4}, @TCA_GRED_PARMS={0x38, 0x1, {0x6b5, 0x4, 0x3ff, 0x2, 0x6, 0xfffffca7, 0x8001, 0x9, 0x4, 0x4, 0xf, 0xe, 0x4, 0x99, 0x4, 0x5e}}]}}]}, 0x7c}, 0x1, 0x0, 0x0, 0x8040}, 0x0) (async)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000007d40)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) (async)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000004c0)={{r2}, &(0x7f00000000c0), &(0x7f0000000580)='%-010d \x00'}, 0x20) (async)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r3}, 0x4) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0x11, &(0x7f0000000340)=ANY=[@ANYBLOB="180200000000000000000000020004008500000097000000b7080000000000007b8af8ff00000000b7080000ffffffff7b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) (async)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x0, 0xe, 0x0, &(0x7f0000000100)="b347d4211a17c1d89ee99b6f73ac", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async)
ioctl$sock_SIOCSIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f0000000000)) (async)

507.660754ms ago: executing program 2 (id=2051):
r0 = socket$key(0xf, 0x3, 0x2)
writev(r0, &(0x7f0000000080)=[{&(0x7f0000000100)="16f7d0611e3a8eed4c5b92596fb2d4d4", 0x10}, {0x0}], 0x2)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x20, 0x10, 0x801, 0xfffffffd, 0x8000100, {0x0, 0x0, 0x0, 0x0, 0x2000, 0x20421}}, 0x20}, 0x1, 0x0, 0x0, 0x4040840}, 0x8024)

500.947814ms ago: executing program 0 (id=2052):
r0 = socket$inet_udp(0x2, 0x2, 0x0) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="1800faff02000000000000000040000018420000fdffffff000000000000000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000023cf000085000000060000009500000000000000"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 64)
r1 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=@ipv6_newnexthop={0x24, 0x68, 0x309, 0x0, 0xfffffffc, {0xa, 0x0, 0x0, 0x0, 0x4}, [@NHA_ID={0x8, 0x1, 0x2}, @NHA_FDB={0x4}]}, 0x24}}, 0x4040) (async)
r3 = socket$can_j1939(0x1d, 0x2, 0x7)
connect$can_j1939(r3, 0x0, 0x0) (async)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={<r4=>0xffffffffffffffff})
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=@newlink={0x58, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x24, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_INDEX={0x8, 0x15, 0xc4db7}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0xd}, @IFLA_GRE_FLAGS={0x8, 0xd, 0xfffffffd}, @IFLA_GRE_IKEY={0x8, 0x4, 0x8001}]}}}]}, 0x58}}, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, 0x25, 0x109, 0x870bd22, 0xfffffff9, {0x2}, [@nested={0x8, 0x3f, 0x0, 0x1, [@nested={0x4, 0x122}]}, @typed={0x8, 0x3, 0x0, 0x0, @u32}, @typed={0x8, 0x40, 0x0, 0x0, @fd}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1000c957}, 0x0) (async)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=ANY=[@ANYBLOB="880000000001010400010000000000000200ff7f240001801400018008000100ac1e000108000200ac1414000c0002800500010000000000240002800c00028005000100000000001400018008000100ac1e01010800020000000000080007400000000024000e8014000180080001"], 0x88}}, 0x0) (async, rerun: 32)
sendmsg$NL80211_CMD_SET_QOS_MAP(r6, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x2c, 0x0, 0x200, 0x70bd2b, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_QOS_MAP={0x16, 0xc7, {[{0x3}, {0x6, 0x5}, {0x7, 0x7}, {0x4, 0x6}, {0x3, 0x2}], "b1037454c0ada5e9"}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4024804}, 0x40040) (async, rerun: 32)
ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r4, 0x4058587a, &(0x7f0000001880)={{<r8=>r6, &(0x7f0000000500)='.\x00', 0x80881, &(0x7f0000000540)={@align=0xfffffffffffffffd, {0x81, 0x9, 0x3, 0x4}}, 0x3, &(0x7f0000000580)={@_ha_fsid}, &(0x7f00000005c0)=0x1}, {[0x6, 0x230, 0x1]}, 0x7, 0x1000, &(0x7f0000000880)=""/4096})
r9 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r9, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000003000)={0x1c, 0x52, 0x1, 0x70bd2a, 0x0, {0xa}, [@generic="76ae529d48"]}, 0x1c}}, 0x20008040) (async)
setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r8, 0x84, 0x16, &(0x7f0000001900)={0x9, [0x9f76, 0xc01, 0x4, 0x1, 0x8, 0x9, 0x9, 0x0, 0x4]}, 0x16) (async)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16, @ANYBLOB="230900000000000000000100000005000700000000000800090000000000060002000100000008000a000000000008001700345f6debc22f4ee3566e52dd3f8008e2469b2dbf52ac488670afd6ab89ac59a62e60e93cc1584092b97ceed9546ccf5a5ed4336660422fa81daa091c717906cf3d2a8da8192d71f70ba39e", @ANYRES64=r0], 0x3c}}, 0x0)

304.223931ms ago: executing program 0 (id=2053):
bpf$MAP_CREATE(0x1101000000000000, &(0x7f0000000540)=ANY=[@ANYBLOB="eaffffff80000000001a0000f72dab84c3f7cffa", @ANYRES32=0x1, @ANYBLOB="800800"/20, @ANYRES32=0x0, @ANYRES32, @ANYRES8=0x0], 0x50)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), 0xffffffffffffffff)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0)
r1 = openat$cgroup_type(r0, &(0x7f0000000300), 0x2, 0x0)
write$cgroup_type(r1, &(0x7f0000000280), 0x9)
r2 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0)
r3 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_FLUSH(r3, 0x0, 0xd1, &(0x7f0000000000)=0x9, 0x4)
mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x3000005, 0x12, r3, 0xfab49000)
sendto$inet(r3, 0x0, 0x0, 0x60004010, &(0x7f0000000b40)={0x2, 0x4e24, @broadcast}, 0x10)
setsockopt$MRT_ADD_VIF(r3, 0x0, 0xca, &(0x7f0000000080)={0x1f, 0x4, 0x3f, 0x2003208, @vifc_lcl_addr=@dev={0xac, 0x14, 0x14, 0x32}, @private=0xa010104}, 0x10)
write$cgroup_pid(r2, &(0x7f0000000c40), 0x12)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
write$cgroup_pid(r2, &(0x7f0000000080), 0x12)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03", 0x3}], 0x1}, 0x0)
r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r5)
ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f00000000c0))
sendmsg$NFC_CMD_DEV_UP(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=ANY=[], 0x1c}}, 0x4008054)
write$nci(r4, &(0x7f0000000300)=ANY=[@ANYBLOB='p\x00\t'], 0xc)
write$nci(r4, &(0x7f0000000040)=ANY=[@ANYBLOB="5001"], 0x14)
write$nci(r4, 0x0, 0x0)
connect$llc(0xffffffffffffffff, &(0x7f00000001c0)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)

302.400748ms ago: executing program 4 (id=2054):
r0 = socket$netlink(0x10, 0x3, 0x0) (async)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002"], 0x3c}}, 0x0) (async, rerun: 64)
r3 = socket(0x1, 0x803, 0x0) (rerun: 64)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) (async)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket(0x1, 0x803, 0x0) (async, rerun: 64)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={<r6=>0xffffffffffffffff}) (rerun: 64)
getsockopt$TIPC_SOCK_RECVQ_DEPTH(r6, 0x10f, 0x84, 0x0, &(0x7f0000000840))
sendmsg$ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x14000008}, 0x20000000) (async)
sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0x58, 0x0, 0x2, 0x70bd26, 0x25dfdbff, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0xfffff5ed}, @SEG6_ATTR_DST={0x14, 0x1, @local}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x3}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x2}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x3}]}, 0x58}}, 0x20000000) (async, rerun: 64)
r7 = socket$alg(0x26, 0x5, 0x0) (rerun: 64)
bind$alg(r7, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) (async, rerun: 32)
setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000c18000)="ed5696c5820fae0000000000000080beef911d564c90c200", 0x18) (rerun: 32)
r8 = accept4(r7, 0x0, 0x0, 0x800)
sendmmsg$unix(r8, &(0x7f00000020c0)=[{{&(0x7f00000050c0)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x80}}, {{&(0x7f0000000540)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="24000000000000001701000002"], 0x28, 0x2000c000}}], 0x2, 0x88) (async)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
r10 = socket$inet(0xa, 0x801, 0x84)
listen(r10, 0xfffffffd)
accept4(r10, 0x0, 0x0, 0x0) (async)
r11 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000840)={&(0x7f00000009c0)=ANY=[@ANYBLOB="28000000120001", @ANYBLOB], 0x28}}, 0x0) (async)
sendmmsg(r11, &(0x7f0000000000), 0x4000000000001f2, 0x0)
r12 = socket$inet6(0xa, 0x3, 0x88)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r10, 0x89f0, &(0x7f00000005c0)={'syztnl1\x00', &(0x7f0000000480)={'tunl0\x00', r2, 0x8000, 0x8000, 0x40, 0x4, {{0x22, 0x4, 0x0, 0x4, 0x88, 0x65, 0x0, 0x9, 0x2, 0x0, @empty, @broadcast, {[@end, @timestamp_prespec={0x44, 0x24, 0x29, 0x3, 0x0, [{@empty, 0x5}, {@dev={0xac, 0x14, 0x14, 0x23}, 0x1}, {@remote, 0x9}, {@loopback, 0x6}]}, @ssrr={0x89, 0xb, 0x45, [@broadcast, @rand_addr=0x64010101]}, @timestamp_prespec={0x44, 0x44, 0x46, 0x3, 0x8, [{@empty, 0x4}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x9d}, {@multicast1, 0x3}, {@rand_addr=0x64010101, 0x71e}, {@rand_addr=0x64010100, 0x101}, {@empty, 0x2}, {@multicast1, 0x3ff}, {@private=0xa010102, 0x2}]}]}}}}}) (async)
setsockopt$inet6_IPV6_XFRM_POLICY(r12, 0x29, 0x23, &(0x7f0000000980)={{{@in=@multicast1, @in6=@remote, 0x4e1f, 0xfd, 0x0, 0x3, 0x2}, {0x10000, 0x200000004, 0x40000000007, 0x6811221d, 0x100000000, 0x4, 0x200000003, 0x9}, {0x45, 0xfffffffffffffffd, 0x7}, 0x1, 0x0, 0x1, 0x0, 0x6}, {{@in=@empty, 0x0, 0x6c}, 0xa, @in=@local, 0x3502, 0x1, 0x0, 0x0, 0x9, 0x3}}, 0xe8) (async, rerun: 64)
connect$inet6(r12, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) (async, rerun: 64)
sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00030000000000001c0012800c0001006d6163766c616e000c000280080001000800000008000500", @ANYRES32=r9, @ANYBLOB="00720000277438277843a84e1510cb9de7f479bcffe0329bf62a60dbeae81f1e3c", @ANYBLOB], 0x4c}}, 0x0)

282.491536ms ago: executing program 2 (id=2055):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge0\x00'}) (async)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge0\x00'})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000600)=ANY=[@ANYBLOB="3800000018000100000000000000000002000000fc0c0009000900000600150002"], 0x38}}, 0x2000a080)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000000)) (async)
ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000000))
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="780000001000830404000000fedbdf2500007400", @ANYRES32=r2, @ANYBLOB="0008000007500500580012800b000100627269646765000048000280050019000200000005"], 0x78}, 0x1, 0x0, 0x0, 0x800}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x9, 0xa1ffffff}, 0x0)

145.287677ms ago: executing program 3 (id=2056):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$fou(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$FOU_CMD_ADD(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)={0x24, r3, 0x209, 0x0, 0x0, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x2}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e20}]}, 0x24}}, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r5 = socket$unix(0x1, 0x1, 0x0)
r6 = socket$kcm(0x11, 0x3, 0x0)
r7 = socket(0x400000000010, 0x3, 0x0)
r8 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r9, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8810}, 0x8000)
sendmsg$nl_route_sched(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newtfilter={0x58, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0x9, 0x4}, {}, {0x7, 0x6}}, [@filter_kind_options=@f_basic={{0xa}, {0x28, 0x2, [@TCA_BASIC_EMATCHES={0x24, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0xceb, 0x7, 0x4}, {{0x0, 0x0, 0x1, 0x1}, {0x0, 0x0, 0x1}}}}]}]}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20041090}, 0x0)
r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r10)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r11=>0x0})
sendmsg$kcm(r6, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r11, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)='\'', 0x5dc}], 0x1}, 0x4)
sendmsg$FOU_CMD_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x24, r3, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@FOU_ATTR_PORT={0x6, 0x1, 0x4e20}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @private=0xa010101}]}, 0x24}, 0x1, 0x0, 0x0, 0x20008001}, 0x840)
sendmsg$FOU_CMD_DEL(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="000229bd7000fedbdf250200ff00140007000000000000000000000000000000000005db00030087000000060001004e24000014ec0600"/70], 0x4c}}, 0x45)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x4, &(0x7f00000001c0)=@framed={{}, [@ldst={0x1, 0x1, 0x4, 0x9, 0xa, 0x50}]}, &(0x7f0000000240)='GPL\x00', 0x4, 0x1005, &(0x7f00000014c0)=""/4101, 0x0, 0xc}, 0x94)
syz_emit_ethernet(0x66, &(0x7f0000000480)={@broadcast, @dev, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x2f, 0x0, @private, @multicast1}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x6558}, {0x0, 0x0, 0x0, 0x0, 0x11}, {}, {0x8, 0x88be, 0x81000004}}}}}}, 0x0)

136.308835ms ago: executing program 1 (id=2057):
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0xfff, 0x4}, 0x10)
pipe(&(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = socket$inet6_sctp(0xa, 0x1, 0x84)
close(0x3)
r6 = socket(0x2, 0x3, 0x0)
r7 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r7, 0x0)
close(0x3)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000200)={<r8=>0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x7a, &(0x7f0000000340)={r8, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84)
sendmmsg$inet_sctp(r6, &(0x7f00000032c0), 0x0, 0x40)
setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000280)={r8, 0xff}, 0x8)
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r5, 0x84, 0x74, &(0x7f0000000080)={0x0, 0xfffe, 0x10, 0xaf9}, &(0x7f00000010c0)=0x18)
r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000006c0), 0xffffffffffffffff)
sendmsg$IEEE802154_SCAN_REQ(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000580)={0x2c, r9, 0x300, 0x70bd2d, 0x25dfdbfb, {}, [@IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0x12}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0x5}, @IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0x3}]}, 0x2c}}, 0x40)
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r10=>0xffffffffffffffff})
r11 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a54000000060a979935432501f200010073797a3100000000200004801c0001800a00010071756575650000000c00028006000140008500000900020073796c443d922f14c14408630000000005000740890000001400000011000100000000000007e887e66e3eddc493b8063f2d52ade17622e80f0853488e6f49fe0634d971e340d91a00"/166], 0x7c}, 0x1, 0x0, 0x0, 0x8890}, 0x24000000)
splice(r4, 0x0, r10, 0x0, 0xf3a, 0x0)
write(r2, &(0x7f0000000240)="94", 0x1)
vmsplice(r10, &(0x7f0000000180), 0x0, 0x0)
write$cgroup_devices(r10, &(0x7f0000000100)={'a', ' *:* ', 'm\x00'}, 0x8)
write(r3, 0x0, 0x0)
r12 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$XFS_IOC_SWAPEXT(r1, 0xc0c0586d, &(0x7f00000003c0)={0x0, r12, r2, 0x100000000, 0x9, '\x00', {0x2, 0x9, 0xffe9, 0x3, 0x9, 0x8, 0x96, 0x6f26, {0xffffffffffffff7f, 0xe8d6}, {0x6, 0x4}, {0x3}, 0x7ff, 0x9, 0xc70b, 0xc7, 0xd0a4, 0x2, 0xf, 0xb128, 0x9, 0x0, '\x00', 0x1, 0x3, 0x800, 0x1}})

0s ago: executing program 0 (id=2058):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
r2 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
close(r2)
bpf$PROG_BIND_MAP(0x23, &(0x7f0000000000)={r0, r1}, 0xc)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r4 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}})
writev(r3, &(0x7f00000006c0)=[{&(0x7f0000000440)="2e9b3d0007e03dd65193dfb6c575963f88a8", 0x12}, {&(0x7f0000000100)="31020002", 0x4}, {&(0x7f0000000a80)='h?', 0x2}], 0x3)
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x5, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x30}, 0x94)
r5 = socket(0x10, 0x803, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x43}, 0x94)
syz_emit_ethernet(0x7a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000086dd6015690900442f10"], 0x0)
r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0xf5ffffff, &(0x7f0000000000)='%', 0x0, 0xd01, 0xbe02, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
r7 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r7, &(0x7f0000000140)={0x28, 0x0, 0x0, @my=0x1}, 0x10)
setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r7, 0x28, 0x1, &(0x7f0000000100)=0xfffffffffffffffe, 0x112)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000100001000000000000dfff000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a0101000b000000000000000900010073797a30000000004000038008000140000000002c0003801400010067656e65766530c85b89000000000000000000140001006c6f00000000000000002e698e06000000000000080002"], 0xb4}, 0x1, 0x0, 0x0, 0x104}, 0x40000)
r9 = socket$packet(0x11, 0x2, 0x300)
getsockopt$packet_int(r9, 0x107, 0x11, 0x0, &(0x7f00000001c0)=0xffffffffffffffcb)
sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001400b595000000000000000002000000", @ANYRES32=r5, @ANYBLOB="140001000040000000000000000000000000000014000200fe8000000000000000000000000000aa140006"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x80)
sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=ANY=[], 0x6c}, 0x1, 0x0, 0x0, 0x20008824}, 0x4800)

kernel console output (not intermixed with test programs):

z.0.608': attribute type 5 has an invalid length.
[  168.887950][ T8557] netlink: 3 bytes leftover after parsing attributes in process `syz.0.608'.
[  169.350876][ T8466] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  169.668341][ T8584] netlink: 'syz.1.610': attribute type 11 has an invalid length.
[  169.687003][ T8584] netlink: 'syz.1.610': attribute type 23 has an invalid length.
[  169.712724][ T8584] netlink: 224 bytes leftover after parsing attributes in process `syz.1.610'.
[  169.885082][ T8588] netlink: 'syz.1.610': attribute type 11 has an invalid length.
[  169.894087][ T8588] netlink: 'syz.1.610': attribute type 23 has an invalid length.
[  169.933155][ T8588] netlink: 224 bytes leftover after parsing attributes in process `syz.1.610'.
[  170.614383][ T8628] Cannot find set identified by id 0 to match
[  170.943180][ T8639] vlan3: entered promiscuous mode
[  170.960165][ T8639] bridge0: entered promiscuous mode
[  171.022782][ T8617] netlink: 28 bytes leftover after parsing attributes in process `syz.4.615'.
[  171.225834][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[  171.234415][    C1] lec:lec_tx_timeout: lec0
[  171.239377][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  171.832594][ T8645] netlink: 'syz.0.621': attribute type 1 has an invalid length.
[  171.953284][ T8649] netlink: 12 bytes leftover after parsing attributes in process `syz.4.623'.
[  171.972498][ T8649] netlink: 4 bytes leftover after parsing attributes in process `syz.4.623'.
[  172.009487][ T8649] hsr_slave_0: left promiscuous mode
[  172.020699][ T8649] hsr_slave_1: left promiscuous mode
[  172.167342][ T8654] vlan3: entered allmulticast mode
[  172.181611][ T8649] netlink: 14 bytes leftover after parsing attributes in process `syz.4.623'.
[  172.195273][ T8654] bond0: entered allmulticast mode
[  172.202073][ T8657] netlink: 'syz.0.626': attribute type 1 has an invalid length.
[  172.216328][ T8654] bond_slave_0: entered allmulticast mode
[  172.233978][ T8654] bond_slave_1: entered allmulticast mode
[  172.297877][ T8649] bond0 (unregistering): left promiscuous mode
[  172.316510][ T8649] bond_slave_0: left promiscuous mode
[  172.346022][ T8649] bond_slave_1: left promiscuous mode
[  172.378130][ T8649] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  172.396067][ T8649] bond_slave_0: left allmulticast mode
[  172.412805][ T8649] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  172.429594][ T8649] bond_slave_1: left allmulticast mode
[  172.436180][ T8649] bond0 (unregistering): Released all slaves
[  172.455461][ T8664] netlink: 12 bytes leftover after parsing attributes in process `syz.3.624'.
[  172.503239][ T8656] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  172.511565][ T8660] syzkaller0: entered promiscuous mode
[  172.517488][ T8660] syzkaller0: entered allmulticast mode
[  172.525112][ T8663] netlink: 24 bytes leftover after parsing attributes in process `syz.2.625'.
[  172.534473][ T8663] netlink: 24 bytes leftover after parsing attributes in process `syz.2.625'.
[  172.544132][ T8663] netlink: 'syz.2.625': attribute type 5 has an invalid length.
[  172.552444][ T8664] syz_tun: Device is already in use.
[  172.577995][ T8656] tipc: Resetting bearer <eth:syzkaller0>
[  172.631251][ T8652] tipc: Resetting bearer <eth:syzkaller0>
[  172.704513][ T8652] tipc: Disabling bearer <eth:syzkaller0>
[  172.777757][ T8672] netlink: 44 bytes leftover after parsing attributes in process `syz.4.629'.
[  172.787739][ T8670] netlink: 'syz.0.628': attribute type 3 has an invalid length.
[  172.803892][ T8670] netlink: 'syz.0.628': attribute type 1 has an invalid length.
[  172.823529][ T8670] netlink: 224 bytes leftover after parsing attributes in process `syz.0.628'.
[  173.149438][ T8684] netlink: 'syz.0.633': attribute type 1 has an invalid length.
[  173.227966][ T8684] 8021q: adding VLAN 0 to HW filter on device bond6
[  173.255963][ T8684] netlink: 28 bytes leftover after parsing attributes in process `syz.0.633'.
[  173.978511][ T8721] netlink: 'syz.3.641': attribute type 1 has an invalid length.
[  174.325157][ T8732] netlink: 8 bytes leftover after parsing attributes in process `syz.4.645'.
[  174.567994][   T30] audit: type=1800 audit(1777234008.854:2): pid=8746 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.647" name="memory.events" dev="tmpfs" ino=547 res=0 errno=0
[  175.192266][ T8754] sit1: entered promiscuous mode
[  176.044554][ T8784] netlink: 'syz.4.657': attribute type 21 has an invalid length.
[  176.253743][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[  176.261864][    C1] lec:lec_tx_timeout: lec0
[  176.266998][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  176.474202][ T8803] bond0: Removing last ns target with arp_interval on
[  176.654550][ T8809] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  177.209335][ T8816] A link change request failed with some changes committed already. Interface ipvlan0 may have been left with an inconsistent configuration, please check.
[  177.364559][ T8820] netem: incorrect ge model size
[  177.382112][ T8820] netem: change failed
[  177.387433][ T8821] netem: incorrect ge model size
[  177.394373][ T8821] netem: change failed
[  177.681536][ T8830] __nla_validate_parse: 14 callbacks suppressed
[  177.681557][ T8830] netlink: 68 bytes leftover after parsing attributes in process `syz.4.669'.
[  177.779483][ T8832] syzkaller0: entered promiscuous mode
[  177.794207][ T8832] syzkaller0: entered allmulticast mode
[  178.298704][ T8839] netlink: 24 bytes leftover after parsing attributes in process `syz.2.672'.
[  178.319577][ T8839] netlink: 24 bytes leftover after parsing attributes in process `syz.2.672'.
[  179.136984][ T8866] netlink: 'syz.1.677': attribute type 1 has an invalid length.
[  179.148590][ T8864] netlink: 16 bytes leftover after parsing attributes in process `syz.2.676'.
[  179.451140][ T8850] ipvlan2: entered promiscuous mode
[  179.476018][ T8866] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR
[  179.657867][ T8875] netlink: 12 bytes leftover after parsing attributes in process `syz.0.680'.
[  179.846276][ T8877] bond2: entered promiscuous mode
[  179.852016][ T8877] 8021q: adding VLAN 0 to HW filter on device bond2
[  179.859435][ T8881] bond7: entered promiscuous mode
[  179.875381][ T8881] bond7: entered allmulticast mode
[  179.892285][ T8884] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  180.526116][ T8916] bond8: option lacp_rate: mode dependency failed, not supported in mode active-backup(1)
[  180.549219][ T8916] bond8 (unregistering): Released all slaves
[  181.259651][ T8944] netlink: 16 bytes leftover after parsing attributes in process `syz.0.694'.
[  181.273742][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[  181.281944][    C1] lec:lec_tx_timeout: lec0
[  181.288662][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  181.536479][ T8949] tap0: tun_chr_ioctl cmd 1074025677
[  181.555728][ T8949] tap0: linktype set to 776
[  181.664436][ T8952] Unsupported ieee802154 address type: 0
[  182.650323][ T8992] syzkaller1: entered promiscuous mode
[  182.680933][ T8992] syzkaller1: entered allmulticast mode
[  182.696926][ T8999] netlink: 'syz.0.708': attribute type 61 has an invalid length.
[  182.752280][ T8999] netlink: 8 bytes leftover after parsing attributes in process `syz.0.708'.
[  182.875206][ T8999] syzkaller1: entered promiscuous mode
[  182.883986][ T8999] syzkaller1: entered allmulticast mode
[  182.957677][ T9010] netlink: 8 bytes leftover after parsing attributes in process `syz.4.709'.
[  183.709259][ T9033] netlink: 'syz.0.714': attribute type 13 has an invalid length.
[  183.733908][ T9032] netlink: 'syz.0.714': attribute type 13 has an invalid length.
[  183.756370][ T9033] netlink: 'syz.0.714': attribute type 17 has an invalid length.
[  183.775352][ T9032] netlink: 'syz.0.714': attribute type 17 has an invalid length.
[  184.030574][ T9032] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  184.103148][ T9033] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  184.942996][ T9068] netlink: 24 bytes leftover after parsing attributes in process `syz.0.718'.
[  185.291593][ T9074] netlink: 10 bytes leftover after parsing attributes in process `syz.4.717'.
[  185.352388][ T9061] syzkaller0: entered promiscuous mode
[  185.375507][ T9061] syzkaller0: entered allmulticast mode
[  186.259619][ T9111] netlink: 16166 bytes leftover after parsing attributes in process `syz.0.723'.
[  186.662696][ T9127] netlink: 16 bytes leftover after parsing attributes in process `syz.0.725'.
[  187.063702][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5770 ms
[  187.071904][    C1] lec:lec_tx_timeout: lec0
[  187.077243][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  187.355072][ T9153] IPVS: fo: FWM 3 0x00000003 - no destination available
[  187.408323][ T9157] sch_tbf: peakrate 2 is lower than or equals to rate 8607250805684256844 !
[  187.416085][ T9153] IPVS: fo: FWM 3 0x00000003 - no destination available
[  187.613199][ T9164] netlink: 8 bytes leftover after parsing attributes in process `syz.1.730'.
[  187.795812][ T9171] openvswitch: netlink: Key type 50 is out of range max 32
[  187.808843][ T9171] netlink: 211584 bytes leftover after parsing attributes in process `syz.0.733'.
[  188.437121][ T9192] netlink: 8 bytes leftover after parsing attributes in process `syz.4.737'.
[  188.455746][ T9192] netlink: 8 bytes leftover after parsing attributes in process `syz.4.737'.
[  188.979978][ T9209] geneve2: entered promiscuous mode
[  188.994144][ T9209] geneve2: entered allmulticast mode
[  189.089800][ T6106] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 20000 - 0
[  189.119837][ T6106] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 20000 - 0
[  189.188985][ T6106] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 20000 - 0
[  189.225278][ T6119] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 20000 - 0
[  189.438272][ T9221] netlink: 64 bytes leftover after parsing attributes in process `syz.0.744'.
[  190.003065][ T9243] netlink: 8 bytes leftover after parsing attributes in process `syz.0.749'.
[  190.616576][ T9260] Bluetooth: MGMT ver 1.23
[  190.656686][ T9260] netlink: 1 bytes leftover after parsing attributes in process `syz.2.753'.
[  190.716784][ T9260] netlink: 16 bytes leftover after parsing attributes in process `syz.2.753'.
[  190.859143][ T9274] IPVS: fo: FWM 3 0x00000003 - no destination available
[  190.938301][ T9257] syzkaller0: entered promiscuous mode
[  190.973892][ T9257] syzkaller0: entered allmulticast mode
[  191.190854][ T9285] netlink: 20 bytes leftover after parsing attributes in process `syz.4.755'.
[  191.368775][ T9290] netlink: 12 bytes leftover after parsing attributes in process `syz.4.755'.
[  192.107425][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5030 ms
[  192.115635][    C1] lec:lec_tx_timeout: lec0
[  192.120705][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  193.685336][ T9308] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6
[  193.891712][ T9319] netlink: 100 bytes leftover after parsing attributes in process `syz.1.761'.
[  193.918091][ T9319] netlink: 8 bytes leftover after parsing attributes in process `syz.1.761'.
[  193.946539][ T9319] netlink: 8 bytes leftover after parsing attributes in process `syz.1.761'.
[  194.237084][ T9325] netlink: 'syz.2.762': attribute type 9 has an invalid length.
[  194.387572][ T9329] netlink: 12 bytes leftover after parsing attributes in process `syz.1.764'.
[  194.410703][ T9335] netlink: 'syz.0.765': attribute type 1 has an invalid length.
[  194.413818][ T9329] netlink: 8 bytes leftover after parsing attributes in process `syz.1.764'.
[  194.502141][ T9340] netlink: 8 bytes leftover after parsing attributes in process `syz.4.766'.
[  194.539398][ T9339] netlink: 8 bytes leftover after parsing attributes in process `syz.4.766'.
[  194.853920][ T9349] netlink: 60 bytes leftover after parsing attributes in process `syz.0.768'.
[  195.267376][ T9367] netlink: 'syz.0.771': attribute type 1 has an invalid length.
[  195.302505][ T9367] netlink: 24 bytes leftover after parsing attributes in process `syz.0.771'.
[  195.337275][ T9364] netlink: 20 bytes leftover after parsing attributes in process `syz.2.772'.
[  196.449804][ T9394] IPVS: set_ctl: invalid protocol: 47 100.1.1.1:65534
[  197.133784][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[  197.143219][    C1] lec:lec_tx_timeout: lec0
[  197.151191][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  198.108587][ T9439] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1
[  198.201690][   T29] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  198.674485][ T5928] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  198.906875][ T9460] __nla_validate_parse: 9 callbacks suppressed
[  198.906898][ T9460] netlink: 4768 bytes leftover after parsing attributes in process `syz.2.794'.
[  198.924251][ T8174] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  199.008557][ T9460] netlink: 4768 bytes leftover after parsing attributes in process `syz.2.794'.
[  199.945633][ T6106] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  199.997508][ T6106] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  200.161995][ T9498] netlink: 8 bytes leftover after parsing attributes in process `syz.4.802'.
[  200.217273][ T9498] netlink: 60 bytes leftover after parsing attributes in process `syz.4.802'.
[  200.244747][ T9498] netlink: 16 bytes leftover after parsing attributes in process `syz.4.802'.
[  200.271297][ T9501] netlink: 212336 bytes leftover after parsing attributes in process `syz.3.803'.
[  200.287596][ T9499] netlink: 4 bytes leftover after parsing attributes in process `syz.4.802'.
[  200.363371][ T9499] vlan3: entered promiscuous mode
[  200.381429][ T9499] bridge0: entered promiscuous mode
[  200.475462][ T5844] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  201.211162][ T9519] ip6erspan0: entered promiscuous mode
[  201.270219][ T9519] ip6erspan0: entered allmulticast mode
[  201.868024][ T9538] netlink: 16 bytes leftover after parsing attributes in process `syz.2.812'.
[  202.045574][ T9543] netlink: 4 bytes leftover after parsing attributes in process `syz.4.814'.
[  202.163731][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[  202.173002][    C1] lec:lec_tx_timeout: lec0
[  202.178223][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  202.712096][ T9566] veth0: entered promiscuous mode
[  202.794203][ T9566] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  202.931707][ T9568] syzkaller0: entered promiscuous mode
[  202.937599][ T9573] netlink: 60 bytes leftover after parsing attributes in process `syz.1.819'.
[  202.953943][ T9568] syzkaller0: entered allmulticast mode
[  202.985314][ T9574] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  203.040145][ T9565] veth0: left promiscuous mode
[  203.046258][ T9572] TC_ACT_REPEAT abuse ?
[  203.080007][ T9576] vlan3: entered promiscuous mode
[  203.091274][ T9576] geneve1: entered promiscuous mode
[  203.107497][ T9576] vlan3: entered allmulticast mode
[  203.117084][ T9576] geneve1: entered allmulticast mode
[  204.264126][    C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  204.497818][ T9621] __nla_validate_parse: 5 callbacks suppressed
[  204.497837][ T9621] netlink: 4 bytes leftover after parsing attributes in process `syz.4.831'.
[  204.836467][ T9632] netlink: 'syz.1.835': attribute type 12 has an invalid length.
[  205.388385][ T9655] netlink: 'syz.1.841': attribute type 2 has an invalid length.
[  205.523096][ T9659] netlink: 48 bytes leftover after parsing attributes in process `syz.4.842'.
[  205.620322][ T5844] IPVS: starting estimator thread 0...
[  205.714099][ T9667] IPVS: using max 25 ests per chain, 60000 per kthread
[  205.985832][ T9677] netlink: 'syz.2.847': attribute type 2 has an invalid length.
[  206.072680][ T9681] netlink: 16 bytes leftover after parsing attributes in process `syz.2.847'.
[  206.240167][ T9683] netlink: 'syz.3.849': attribute type 1 has an invalid length.
[  206.317138][ T9685] netlink: 4 bytes leftover after parsing attributes in process `syz.3.849'.
[  206.385066][ T9683] 8021q: adding VLAN 0 to HW filter on device bond2
[  206.546629][ T9685] bond2 (unregistering): Released all slaves
[  206.824949][ T5853] Bluetooth: hci1: command 0x0406 tx timeout
[  206.825510][   T50] Bluetooth: hci3: command 0x0406 tx timeout
[  206.832008][ T5854] Bluetooth: hci2: command 0x0406 tx timeout
[  207.173329][ T9710] netlink: 60 bytes leftover after parsing attributes in process `syz.0.852'.
[  207.193729][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[  207.202877][    C1] lec:lec_tx_timeout: lec0
[  207.208351][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  207.484731][ T9717] netlink: 4 bytes leftover after parsing attributes in process `syz.2.856'.
[  207.999259][ T9727] 8021q: adding VLAN 0 to HW filter on device bond0
[  208.010023][ T9727] 8021q: adding VLAN 0 to HW filter on device team0
[  208.023443][ T9727] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  208.043330][ T9737] xt_hashlimit: size too large, truncated to 1048576
[  208.246193][ T9744] netlink: 'syz.2.863': attribute type 1 has an invalid length.
[  208.485791][ T9758] netlink: 24 bytes leftover after parsing attributes in process `syz.0.866'.
[  208.668890][ T9744] bond3: entered promiscuous mode
[  208.700719][ T9744] 8021q: adding VLAN 0 to HW filter on device bond3
[  208.829342][ T9748] bond3: (slave bridge4): making interface the new active one
[  208.838534][ T9748] bridge4: entered promiscuous mode
[  208.850218][ T9776] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  208.860342][ T9748] bond3: (slave bridge4): Enslaving as an active interface with an up link
[  209.260082][ T9784] netlink: 8 bytes leftover after parsing attributes in process `syz.0.871'.
[  209.370197][ T9792] netlink: 12 bytes leftover after parsing attributes in process `syz.1.872'.
[  209.429339][ T9792] nbd: illegal input index -1113835520
[  209.668989][ T9799] netlink: 192 bytes leftover after parsing attributes in process `syz.1.872'.
[  209.751657][ T9787] netlink: 8 bytes leftover after parsing attributes in process `syz.1.872'.
[  209.778083][ T9787] netlink: 8 bytes leftover after parsing attributes in process `syz.1.872'.
[  209.785068][ T9793] syzkaller1: entered promiscuous mode
[  209.819450][ T9793] syzkaller1: entered allmulticast mode
[  210.497864][ T9815] netlink: 4 bytes leftover after parsing attributes in process `syz.4.876'.
[  212.048710][ T9846] netlink: 32 bytes leftover after parsing attributes in process `syz.3.885'.
[  212.065039][ T9846] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  212.223783][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[  212.233229][    C1] lec:lec_tx_timeout: lec0
[  212.240416][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  212.423867][    C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  212.609405][ T9863] IPVS: set_ctl: invalid protocol: 137 172.20.20.170:20001
[  217.263674][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms
[  217.272520][    C1] lec:lec_tx_timeout: lec0
[  217.277786][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  223.073719][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5790 ms
[  223.082389][    C1] lec:lec_tx_timeout: lec0
[  223.087692][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  228.113752][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms
[  228.122796][    C1] lec:lec_tx_timeout: lec0
[  228.128456][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  228.423972][    C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  233.153785][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms
[  233.163585][    C1] lec:lec_tx_timeout: lec0
[  233.168926][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  237.130511][ T9941] netlink: 'syz.4.899': attribute type 2 has an invalid length.
[  237.575957][ T9954] netlink: 12 bytes leftover after parsing attributes in process `syz.1.905'.
[  238.183980][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[  238.193364][    C1] lec:lec_tx_timeout: lec0
[  238.199088][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  238.238118][ T9967] netlink: 8 bytes leftover after parsing attributes in process `syz.2.907'.
[  239.156311][ T9984] netlink: 12 bytes leftover after parsing attributes in process `syz.0.912'.
[  239.179381][ T9994] netlink: 4 bytes leftover after parsing attributes in process `syz.4.915'.
[  239.236292][T10003] netlink: 12 bytes leftover after parsing attributes in process `syz.4.915'.
[  239.504973][T10008] netlink: 11 bytes leftover after parsing attributes in process `syz.2.918'.
[  239.527055][T10009] netlink: 1480 bytes leftover after parsing attributes in process `syz.1.919'.
[  239.538788][T10008] netlink: 28 bytes leftover after parsing attributes in process `syz.2.918'.
[  239.590950][T10011] netlink: 140 bytes leftover after parsing attributes in process `syz.3.920'.
[  240.617589][T10045] netlink: 72 bytes leftover after parsing attributes in process `syz.4.929'.
[  241.287400][T10054] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  241.333408][T10054] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  241.754684][T10054] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  241.770821][T10054] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  241.817437][T10082] netlink: 'syz.3.937': attribute type 10 has an invalid length.
[  242.052895][T10054] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  242.093277][T10054] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  242.392059][T10054] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  242.417283][T10054] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  242.964494][ T8174] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  242.989392][ T8174] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  243.054445][ T8174] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  243.082392][ T8174] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  243.165408][ T8174] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  243.188428][ T8174] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  243.213769][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[  243.223165][    C1] lec:lec_tx_timeout: lec0
[  243.229365][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  243.308220][ T6120] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  243.335542][ T6120] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  243.369087][T10133] netlink: 'syz.4.948': attribute type 1 has an invalid length.
[  243.408932][T10133] __nla_validate_parse: 1 callbacks suppressed
[  243.408951][T10133] netlink: 728 bytes leftover after parsing attributes in process `syz.4.948'.
[  243.765530][T10154] Bluetooth: MGMT ver 1.23
[  244.032891][T10161] netlink: 'syz.2.956': attribute type 3 has an invalid length.
[  244.072955][T10158] syzkaller0: entered promiscuous mode
[  244.097510][T10158] syzkaller0: entered allmulticast mode
[  247.615505][T10203] x_tables: duplicate underflow at hook 1
[  248.253757][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms
[  248.263172][    C1] lec:lec_tx_timeout: lec0
[  248.268961][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  249.190622][T10251] netlink: 8 bytes leftover after parsing attributes in process `syz.2.981'.
[  249.222134][T10251] netlink: 24 bytes leftover after parsing attributes in process `syz.2.981'.
[  249.527364][T10265] netlink: 16 bytes leftover after parsing attributes in process `syz.3.984'.
[  249.640653][T10218] infiniband !yz!: set active
[  249.647733][T10218] infiniband !yz!: added team_slave_0
[  249.820533][T10218] smbdirect: ib_dev[!yz!]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000
[  249.856982][T10218] smbdirect: ib_dev[!yz!]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32
[  249.879668][T10218] smbdirect: ib_dev[!yz!]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005
[  250.099644][T10218] RDS/IB: !yz!: added
[  250.106716][T10218] smc: adding ib device !yz! with port count 1
[  250.114448][T10218] smc:    ib device !yz! port 1 has no pnetid
[  250.805856][T10295] netlink: 'syz.1.991': attribute type 10 has an invalid length.
[  250.815581][T10295] netlink: 228 bytes leftover after parsing attributes in process `syz.1.991'.
[  251.338507][T10306] netlink: 8 bytes leftover after parsing attributes in process `syz.3.992'.
[  251.383502][T10306] netlink: 12 bytes leftover after parsing attributes in process `syz.3.992'.
[  251.423139][T10306] netlink: 'syz.3.992': attribute type 5 has an invalid length.
[  251.922136][T10306] netlink: 8 bytes leftover after parsing attributes in process `syz.3.992'.
[  251.949948][ T6116] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  251.984585][T10306] netlink: 12 bytes leftover after parsing attributes in process `syz.3.992'.
[  252.008224][ T6116] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  252.032920][T10306] netlink: 'syz.3.992': attribute type 5 has an invalid length.
[  252.060530][ T6116] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  252.116324][ T6116] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  252.231063][T10324] nr0: tun_chr_ioctl cmd 1074025677
[  252.261527][T10324] nr0: linktype set to 774
[  252.317564][T10324] netlink: 4 bytes leftover after parsing attributes in process `syz.4.995'.
[  252.455167][T10330] syzkaller0: entered promiscuous mode
[  252.487608][T10330] syzkaller0: entered allmulticast mode
[  252.547647][T10330] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  252.630197][T10334] netlink: 'syz.1.997': attribute type 1 has an invalid length.
[  252.656101][T10328] tipc: Resetting bearer <eth:syzkaller0>
[  252.656577][T10334] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  252.787547][T10328] tipc: Disabling bearer <eth:syzkaller0>
[  253.293862][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms
[  253.303893][    C1] lec:lec_tx_timeout: lec0
[  253.309359][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  253.378828][T10363] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1000'.
[  253.524372][   T48] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 20000 - 0
[  253.573313][   T48] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 20000 - 0
[  253.696054][T10373] sctp: [Deprecated]: syz.3.1003 (pid 10373) Use of int in maxseg socket option.
[  253.696054][T10373] Use struct sctp_assoc_value instead
[  253.793435][   T48] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 20000 - 0
[  253.849691][   T48] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 20000 - 0
[  254.011008][T10342] bridge_slave_0 (unregistering): left allmulticast mode
[  254.093791][T10342] bridge_slave_0 (unregistering): left promiscuous mode
[  254.135724][T10342] bridge0: port 1(bridge_slave_0) entered disabled state
[  254.260148][T10383] netlink: 'syz.2.1004': attribute type 4 has an invalid length.
[  254.414861][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  254.539994][T10387] netlink: 'syz.1.1007': attribute type 12 has an invalid length.
[  254.579565][T10387] netlink: 'syz.1.1007': attribute type 29 has an invalid length.
[  254.615237][T10387] __nla_validate_parse: 1 callbacks suppressed
[  254.615257][T10387] netlink: 148 bytes leftover after parsing attributes in process `syz.1.1007'.
[  254.659523][T10387] netlink: 59 bytes leftover after parsing attributes in process `syz.1.1007'.
[  255.289580][T10407] openvswitch: netlink: IPv4 tun info is not correct
[  255.303978][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  255.312386][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  255.336610][   T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  255.347721][ T5898] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  255.368499][ T5899] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  255.406570][T10406] nbd0: detected capacity change from 0 to 63
[  255.527814][T10408] nbd1: detected capacity change from 0 to 63
[  255.561049][ T5843] block nbd0: Receive control failed (result -104)
[  255.576019][ T5850] block nbd1: Receive control failed (result -32)
[  255.591896][ T9926] block nbd1: Dead connection, failed to find a fallback
[  255.615611][ T9926] block nbd1: shutting down sockets
[  255.636348][ T9926] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  255.655881][ T9926] Buffer I/O error on dev nbd1, logical block 0, async page read
[  255.664827][ T9926] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  255.675320][ T9926] Buffer I/O error on dev nbd1, logical block 1, async page read
[  255.686064][ T9926] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  255.697649][ T9926] Buffer I/O error on dev nbd1, logical block 2, async page read
[  255.731964][ T9926] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  255.786233][ T9926] Buffer I/O error on dev nbd1, logical block 3, async page read
[  255.823154][ T9926] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  255.886656][ T9926] Buffer I/O error on dev nbd1, logical block 0, async page read
[  255.924531][ T9926] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  255.967961][ T9926] Buffer I/O error on dev nbd1, logical block 1, async page read
[  256.000548][ T9926] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  256.079397][ T9926] Buffer I/O error on dev nbd1, logical block 2, async page read
[  256.102945][ T9926] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  256.134990][ T9926] Buffer I/O error on dev nbd1, logical block 3, async page read
[  256.163571][ T9926] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  256.220123][ T9926] Buffer I/O error on dev nbd1, logical block 0, async page read
[  256.274884][ T9926] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  256.317519][ T9926] Buffer I/O error on dev nbd1, logical block 1, async page read
[  256.356557][ T9926] ldm_validate_partition_table(): Disk read failed.
[  256.358354][ T5928] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  256.386642][ T9926] Dev nbd1: unable to read RDB block 0
[  256.444892][ T9926]  nbd1: unable to read partition table
[  256.569472][ T9926] ldm_validate_partition_table(): Disk read failed.
[  256.590320][ T6106] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  256.621762][ T9926] Dev nbd1: unable to read RDB block 0
[  256.662006][ T9926]  nbd1: unable to read partition table
[  257.465324][T10452] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1020'.
[  257.540160][T10452] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1020'.
[  257.575728][T10452] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1020'.
[  257.864345][    C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  257.946901][T10460] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1021'.
[  258.158717][T10460] 8021q: adding VLAN 0 to HW filter on device macvlan3
[  258.483883][ T5928] net_ratelimit: 4 callbacks suppressed
[  258.483939][ T5928] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  259.143681][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5830 ms
[  259.153094][    C1] lec:lec_tx_timeout: lec0
[  259.158917][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  259.615268][   T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  259.616320][T10492] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1028'.
[  260.308456][T10495] syzkaller0: entered promiscuous mode
[  260.344339][T10495] syzkaller0: entered allmulticast mode
[  260.357559][ T5956] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  260.727568][   T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  261.081565][ T6116] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  261.125434][ T5956] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  261.182444][   T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  261.725486][T10519] openvswitch: netlink: IP tunnel TTL not specified.
[  261.791390][T10522] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1031'.
[  261.821554][T10522] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1031'.
[  261.841846][   T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  262.362944][   T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  263.993982][   T29] net_ratelimit: 1 callbacks suppressed
[  263.994020][   T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  264.173749][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[  264.183078][    C1] lec:lec_tx_timeout: lec0
[  264.188907][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  264.276128][ T5898] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  265.066355][   T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  266.116788][ T5928] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  266.615735][T10560] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1034'.
[  266.783271][T10565] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1037'.
[  266.830301][T10565] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1037'.
[  267.146913][ T5928] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  267.218558][T10579] erspan0: entered promiscuous mode
[  267.256323][T10579] macsec1: entered promiscuous mode
[  267.307506][T10579] erspan0: left promiscuous mode
[  267.313095][ T5919] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  267.419832][T10580] erspan0: entered promiscuous mode
[  267.440312][T10580] macsec1: entered promiscuous mode
[  267.470038][T10580] erspan0: left promiscuous mode
[  267.790491][T10586] bond8: entered promiscuous mode
[  267.832325][T10586] 8021q: adding VLAN 0 to HW filter on device bond8
[  268.106633][  T396] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  268.196382][ T5928] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  268.528315][T10609] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1046'.
[  268.756903][T10610] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1045'.
[  269.213752][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms
[  269.223202][    C1] lec:lec_tx_timeout: lec0
[  269.228628][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  269.228973][   T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  270.001609][T10642] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1052'.
[  270.060185][T10646] sch_tbf: burst 0 is lower than device lo mtu (11337746) !
[  270.344929][ T5956] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  270.727055][T10663] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1055'.
[  271.185319][T10668] macvtap1: entered promiscuous mode
[  271.207818][T10668] macvtap1: entered allmulticast mode
[  271.242031][T10668] veth1: entered allmulticast mode
[  271.264926][T10668] veth1: entered promiscuous mode
[  271.298584][T10668] team0: Device macvtap1 failed to register rx_handler
[  271.362660][T10668] veth1: left allmulticast mode
[  271.402843][T10668] veth1: left promiscuous mode
[  271.482580][T10681] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  271.542280][T10681] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1060'.
[  272.052021][T10691] ipt_rpfilter: unknown options
[  272.212275][T10696] netlink: 'syz.0.1065': attribute type 4 has an invalid length.
[  273.185409][T10723] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1073'.
[  273.226940][   T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  273.258989][T10723] veth1_macvtap: left promiscuous mode
[  273.370792][T10729] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1075'.
[  273.381931][T10729] netlink: 256 bytes leftover after parsing attributes in process `syz.2.1075'.
[  273.396281][ T5898] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  274.000785][T10748] netlink: 1004 bytes leftover after parsing attributes in process `syz.0.1078'.
[  274.045547][T10751] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  274.257500][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms
[  274.266646][    C1] lec:lec_tx_timeout: lec0
[  274.273817][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  275.149617][  T396] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  275.571590][T10804] netlink: 'syz.1.1086': attribute type 1 has an invalid length.
[  275.583001][T10804] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1086'.
[  275.604258][   T48] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  275.613536][T10804] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1086'.
[  275.624514][   T48] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  275.634917][   T48] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  275.643498][   T48] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  275.776355][T10772] sctp: [Deprecated]: syz.3.1084 (pid 10772) Use of struct sctp_assoc_value in delayed_ack socket option.
[  275.776355][T10772] Use struct sctp_sack_info instead
[  275.794994][ T5928] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  276.481471][T10811] syzkaller1: entered promiscuous mode
[  276.487491][T10811] syzkaller1: entered allmulticast mode
[  276.564939][T10812] xt_hashlimit: size too large, truncated to 1048576
[  277.730091][T10774] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  278.194403][T10820] syzkaller0: entered promiscuous mode
[  278.211942][T10820] syzkaller0: entered allmulticast mode
[  278.303135][T10825] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1094'.
[  278.316673][T10826] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1094'.
[  278.345362][ T6116] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  278.619287][T10836] pimreg: entered allmulticast mode
[  278.652431][T10836] pimreg: left allmulticast mode
[  278.825880][ T5919] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  279.283700][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[  279.293206][    C1] lec:lec_tx_timeout: lec0
[  279.299127][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  279.676949][T10867] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1110'.
[  279.854512][T10875] netlink: 'syz.1.1112': attribute type 21 has an invalid length.
[  279.876562][T10875] netlink: 'syz.1.1112': attribute type 22 has an invalid length.
[  279.934169][T10875] netlink: 'syz.1.1112': attribute type 23 has an invalid length.
[  279.994870][T10875] netlink: 'syz.1.1112': attribute type 25 has an invalid length.
[  280.036648][T10875] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1112'.
[  280.905026][ T6116] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  280.961340][T10913] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1122'.
[  281.183408][T10917] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1124'.
[  281.231169][T10919] netlink: 124 bytes leftover after parsing attributes in process `syz.2.1125'.
[  281.278382][T10919] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  281.622289][T10935] netlink: 'syz.0.1127': attribute type 1 has an invalid length.
[  281.705903][T10935] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1127'.
[  281.867423][ T5919] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  282.375015][T10955] netlink: 'syz.0.1129': attribute type 1 has an invalid length.
[  282.439224][T10955] netlink: 'syz.0.1129': attribute type 2 has an invalid length.
[  282.455265][T10954] vlan0: entered promiscuous mode
[  282.474126][T10954] bridge0: entered promiscuous mode
[  282.484188][T10955] netlink: 'syz.0.1129': attribute type 1 has an invalid length.
[  282.563284][T10955] netlink: 'syz.0.1129': attribute type 3 has an invalid length.
[  282.657606][T10955] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1129'.
[  282.824649][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  284.114700][ T6116] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  284.833194][T11021] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1143'.
[  284.895434][T11023] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1143'.
[  285.249931][T11034] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1145'.
[  285.298704][T11036] netlink: 5 bytes leftover after parsing attributes in process `syz.0.1146'.
[  285.383681][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 6080 ms
[  285.393043][    C1] lec:lec_tx_timeout: lec0
[  285.398427][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  285.864422][ T5898] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  286.025037][ T8174] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  286.047282][ T1665] block nbd0: Possible stuck request ffff888027aae000: control (read@0,1024B). Runtime 30 seconds
[  286.062162][ T1665] block nbd0: Possible stuck request ffff888027aae1c0: control (read@1024,1024B). Runtime 30 seconds
[  286.075796][ T1665] block nbd0: Possible stuck request ffff888027aae380: control (read@2048,1024B). Runtime 30 seconds
[  286.089984][ T1665] block nbd0: Possible stuck request ffff888027aae540: control (read@3072,1024B). Runtime 30 seconds
[  286.091879][T11056] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.1150'.
[  286.161090][T11056] openvswitch: netlink: Key type 769 is out of range max 32
[  286.274163][ T5850] Bluetooth: hci4: command tx timeout
[  286.289055][T11058] sctp: [Deprecated]: syz.1.1151 (pid 11058) Use of int in maxseg socket option.
[  286.289055][T11058] Use struct sctp_assoc_value instead
[  286.398141][T11061] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1152'.
[  286.470791][T11066] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  286.484506][T11066] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  286.520186][T11066] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  286.563923][T11073] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.1155'.
[  286.570581][T11066] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  286.632744][T11066] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  286.658867][T11072] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  286.709996][T11064] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  286.934154][ T5919] IPVS: starting estimator thread 0...
[  287.033834][T11085] IPVS: using max 28 ests per chain, 67200 per kthread
[  287.274736][T11092] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1159'.
[  287.322525][T11096] netlink: 11562 bytes leftover after parsing attributes in process `syz.3.1160'.
[  287.954746][ T6116] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  288.811907][T11129] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1168'.
[  289.457570][T11142] erspan1: left promiscuous mode
[  289.462691][T11142] erspan1: left allmulticast mode
[  289.469622][T11142] sit1: left promiscuous mode
[  289.476081][T11142] bond2: left promiscuous mode
[  289.481583][T11142] geneve2: left promiscuous mode
[  289.486991][T11142] geneve2: left allmulticast mode
[  289.492605][T11142] ip6erspan0: left promiscuous mode
[  289.498627][T11142] ip6erspan0: left allmulticast mode
[  289.535140][T11150] syzkaller0: entered promiscuous mode
[  289.544290][T11150] syzkaller0: entered allmulticast mode
[  290.400746][T11161] syzkaller0: entered promiscuous mode
[  290.446228][T11161] syzkaller0: entered allmulticast mode
[  291.029986][T11188] __nla_validate_parse: 1 callbacks suppressed
[  291.030031][T11188] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1183'.
[  291.154302][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5750 ms
[  291.163801][    C1] lec:lec_tx_timeout: lec0
[  291.169160][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  291.436530][T11198] net_ratelimit: 4 callbacks suppressed
[  291.436552][T11198] openvswitch: netlink: Flow key attr not present in new flow.
[  291.790671][ T6116] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  291.829706][T11203] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1185'.
[  292.915971][ T5919] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  293.704754][ T8174] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  294.099902][T11188] team_slave_0 (unregistering): left promiscuous mode
[  294.135304][T11188] team_slave_0 (unregistering): left allmulticast mode
[  294.190668][T11188] team0: Port device team_slave_0 removed
[  294.244314][T11201] vlan3: entered allmulticast mode
[  294.261525][T11203] bond0 (unregistering): left promiscuous mode
[  294.274018][T11203] bond_slave_0: left promiscuous mode
[  294.279770][T11203] bond_slave_1: left promiscuous mode
[  294.292912][T11203] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  294.310702][T11203] bond_slave_0: left allmulticast mode
[  294.328124][T11203] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  294.358055][T11203] bond_slave_1: left allmulticast mode
[  294.364512][T11203] bond0 (unregistering): Released all slaves
[  294.411142][T11214] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  294.420076][T11214] IPv6: NLM_F_CREATE should be set when creating new route
[  294.427413][T11214] IPv6: NLM_F_CREATE should be set when creating new route
[  294.848416][T11228] netlink: 240 bytes leftover after parsing attributes in process `syz.3.1190'.
[  294.918988][T11229] syzkaller1: entered promiscuous mode
[  294.931168][T11229] syzkaller1: entered allmulticast mode
[  294.985777][T11231] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1192'.
[  295.194290][T11234] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1193'.
[  295.214266][T11234] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1193'.
[  295.422395][T11247] netlink: 'syz.2.1197': attribute type 1 has an invalid length.
[  295.438357][T11246] netlink: 'syz.2.1197': attribute type 1 has an invalid length.
[  295.612832][T11247] bond4: entered promiscuous mode
[  295.621166][T11247] 8021q: adding VLAN 0 to HW filter on device bond4
[  295.629061][   T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  295.731375][T11248] bond4: (slave veth7): making interface the new active one
[  295.770794][T11248] veth7: entered promiscuous mode
[  295.816446][T11248] bond4: (slave veth7): Enslaving as an active interface with an up link
[  295.964852][ T5956] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  296.183785][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[  296.193278][    C1] lec:lec_tx_timeout: lec0
[  296.198631][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  296.211730][T11281] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.1203'.
[  296.256522][T11285] ip6t_REJECT: TCP_RESET illegal for non-tcp
[  296.919959][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  297.195436][T11323] netlink: 'syz.0.1215': attribute type 1 has an invalid length.
[  297.208250][T11327] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1217'.
[  297.226429][T11324] netlink: 'syz.0.1215': attribute type 1 has an invalid length.
[  297.335777][T11324] 8021q: adding VLAN 0 to HW filter on device bond10
[  297.356344][T11328] bond10: (slave geneve2): making interface the new active one
[  297.367778][T11328] bond10: (slave geneve2): Enslaving as an active interface with an up link
[  297.546522][  T396] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  297.554946][T11345] netlink: 'syz.0.1220': attribute type 8 has an invalid length.
[  297.696028][T11345] : entered promiscuous mode
[  297.746521][T11350] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  297.755204][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  297.785461][T11350] syzkaller1: entered promiscuous mode
[  297.791403][T11350] syzkaller1: entered allmulticast mode
[  298.295705][T11362] vlan6: entered promiscuous mode
[  298.481906][T11360] geneve3: entered promiscuous mode
[  298.566819][T11357] netlink: 'syz.0.1225': attribute type 10 has an invalid length.
[  298.712204][T11378] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  298.876867][T11382] netlink: 'syz.0.1232': attribute type 3 has an invalid length.
[  298.944621][T11383] nbd: nbd0 already in use
[  298.968243][T11382] nbd: nbd0 already in use
[  298.987909][T11383] block nbd0: NBD_DISCONNECT
[  299.003016][T11383] block nbd0: Send disconnect failed -32
[  299.027058][T11383] block nbd0: shutting down sockets
[  299.071708][    C0] blk_print_req_error: 138 callbacks suppressed
[  299.071734][    C0] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  299.088028][    C0] buffer_io_error: 138 callbacks suppressed
[  299.088047][    C0] Buffer I/O error on dev nbd0, logical block 0, async page read
[  299.124871][    C0] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  299.134171][    C0] Buffer I/O error on dev nbd0, logical block 1, async page read
[  299.142193][    C0] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  299.151338][    C0] Buffer I/O error on dev nbd0, logical block 2, async page read
[  299.159409][    C0] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  299.168896][    C0] Buffer I/O error on dev nbd0, logical block 3, async page read
[  299.177882][ T9946] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  299.218940][ T9946] Buffer I/O error on dev nbd0, logical block 0, async page read
[  299.233074][T11382] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  299.261884][ T9946] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  299.280638][ T9946] Buffer I/O error on dev nbd0, logical block 1, async page read
[  299.297250][ T9946] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  299.328298][ T9946] Buffer I/O error on dev nbd0, logical block 2, async page read
[  299.355370][ T9946] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  299.386675][ T9946] Buffer I/O error on dev nbd0, logical block 3, async page read
[  299.406895][ T9946] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  299.425995][ T9946] Buffer I/O error on dev nbd0, logical block 0, async page read
[  299.441356][ T9946] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  299.462299][ T9946] Buffer I/O error on dev nbd0, logical block 1, async page read
[  299.474614][ T6106] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  299.511075][ T9946] ldm_validate_partition_table(): Disk read failed.
[  299.532097][T11391] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  299.553283][ T9946] Dev nbd0: unable to read RDB block 0
[  299.575359][T11391] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  299.592973][ T9946]  nbd0: unable to read partition table
[  299.645475][ T9946] ldm_validate_partition_table(): Disk read failed.
[  299.696086][ T9946] Dev nbd0: unable to read RDB block 0
[  299.730445][ T9946]  nbd0: unable to read partition table
[  299.740450][T11395] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  299.860796][T11391] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  299.883829][T11401] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1239'.
[  299.906410][T11391] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  299.915835][T11403] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1238'.
[  299.945290][ T5956] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  300.016347][T11401] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  300.102831][T11391] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  300.131691][T11391] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  300.188534][T11401] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  300.417573][T11415] tipc: Failed to remove unknown binding: 66,0,0/2886997007:2161609782/2161609783
[  300.431189][T11415] tipc: Failed to remove unknown binding: 66,0,0/2886997007:2161609782/2161609783
[  300.501555][T11391] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  300.530151][T11391] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  300.561211][T11401] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  300.589765][T11416] syzkaller0: entered promiscuous mode
[  300.601166][T11416] syzkaller0: entered allmulticast mode
[  300.730466][T11401] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  300.799257][  T396] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  300.818554][  T396] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  300.885838][ T6106] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  300.919910][ T6106] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  301.038270][  T396] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  301.071252][  T396] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  301.172307][   T48] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  301.202486][   T48] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  301.223754][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms
[  301.233063][    C1] lec:lec_tx_timeout: lec0
[  301.238866][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  301.326179][  T396] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  301.385737][  T396] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  301.440284][ T6116] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  301.610471][   T48] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  301.650565][T11439] syzkaller1: tun_chr_ioctl cmd 1074025677
[  301.677070][T11439] syzkaller1: linktype set to 780
[  301.719512][T11442] IPv6: sit2: Disabled Multicast RS
[  301.864136][   T48] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  302.459260][T11462] netlink: 'syz.1.1254': attribute type 1 has an invalid length.
[  302.504259][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  302.515009][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  302.587790][T11467] netlink: zone id is out of range
[  302.593246][T11467] netlink: zone id is out of range
[  302.598944][T11467] netlink: zone id is out of range
[  302.604550][T11467] netlink: zone id is out of range
[  302.609876][T11467] netlink: zone id is out of range
[  302.615994][T11467] netlink: zone id is out of range
[  302.621537][T11467] netlink: zone id is out of range
[  302.627141][T11467] netlink: zone id is out of range
[  302.709439][T11470] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1256'.
[  302.810669][T11462] 8021q: adding VLAN 0 to HW filter on device bond0
[  302.927681][T11468] bond0: (slave geneve4): making interface the new active one
[  302.938372][T11468] bond0: (slave geneve4): Enslaving as an active interface with an up link
[  302.996271][   T48] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  303.025070][   T48] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  303.051028][   T48] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  303.097976][   T48] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  303.252074][T11480] ip6t_rpfilter: unknown options
[  303.432598][T11484] xt_time: invalid argument - start or stop time greater than 23:59:59
[  303.659783][T11489] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1261'.
[  303.716065][T11489] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1261'.
[  304.454159][T11504] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1264'.
[  306.108868][T11537] xt_hashlimit: max too large, truncated to 1048576
[  306.154192][T11537] xt_ecn: cannot match TCP bits for non-tcp packets
[  306.253851][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[  306.263232][    C1] lec:lec_tx_timeout: lec0
[  306.268965][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  307.196359][T11556] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1276'.
[  307.369050][T11560] trusted_key: syz.1.1277 sent an empty control message without MSG_MORE.
[  307.806477][T11569] sch_fq: defrate 4294967293 ignored.
[  307.916985][T11566] syzkaller0: entered promiscuous mode
[  307.929511][T11566] syzkaller0: entered allmulticast mode
[  307.937490][T11571] netlink: 88 bytes leftover after parsing attributes in process `syz.2.1281'.
[  308.447633][T11577] netlink: 'syz.2.1283': attribute type 7 has an invalid length.
[  309.065877][ T6119] net_ratelimit: 346 callbacks suppressed
[  309.065900][ T6119] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  310.024758][    T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  310.352773][   T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  310.445406][T11634] netlink: 4768 bytes leftover after parsing attributes in process `syz.0.1295'.
[  310.527454][T11636] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1294'.
[  310.604210][T11638] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1294'.
[  310.739404][T11642] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1296'.
[  310.987797][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  311.283762][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[  311.293107][    C1] lec:lec_tx_timeout: lec0
[  311.298414][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  311.300400][T11652] bond11: option lacp_rate: invalid value (128)
[  311.347010][T11652] bond11 (unregistering): Released all slaves
[  311.357486][ T5850] Bluetooth: hci4: link tx timeout
[  311.367716][ T5850] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[  311.690123][T11665] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1302'.
[  312.249321][T11676] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1305'.
[  312.266273][   T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  312.294725][T11675] netlink: 'syz.3.1306': attribute type 39 has an invalid length.
[  312.380999][T11676] 8021q: adding VLAN 0 to HW filter on device bond4
[  312.410822][T11678] bond4 (unregistering): Released all slaves
[  312.771991][T11692] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1308'.
[  313.218901][T11700] macsec1: entered promiscuous mode
[  313.467167][ T5850] Bluetooth: hci4: command 0x0406 tx timeout
[  314.033841][    T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  314.055156][T11730] x_tables: duplicate underflow at hook 1
[  314.087680][T11730] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1313'.
[  314.842151][  T396] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  314.930800][T11739] netlink: 'syz.0.1314': attribute type 29 has an invalid length.
[  314.994466][T11739] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1314'.
[  315.256322][T11755] netlink: 'syz.4.1317': attribute type 3 has an invalid length.
[  316.107104][  T396] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  316.258476][T11785] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1324'.
[  316.684562][T11791] SET target dimension over the limit!
[  317.064303][ T5844] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  317.383801][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 6080 ms
[  317.383918][    C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  317.392952][    C1] lec:lec_tx_timeout: lec0
[  317.406811][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  317.419061][ T6116] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  317.949529][T11826] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  318.007203][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  318.025241][ T5928] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  318.141822][T11826] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  318.151278][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  318.359973][T11835] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1334'.
[  318.595570][T11842] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  319.520990][T11792] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  320.091432][    C0] vcan0: j1939_tp_rxtimer: 0xffff88807f75f800: rx timeout, send abort
[  320.478608][T11884] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1339'.
[  320.597950][ T6116] net_ratelimit: 1 callbacks suppressed
[  320.597991][ T6116] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  320.601924][    C0] vcan0: j1939_tp_rxtimer: 0xffff88807f75f800: abort rx timeout. Force session deactivation
[  320.639409][T11884] bridge4: entered promiscuous mode
[  321.064794][ T5844] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  321.149158][T11897] netlink: 'syz.2.1341': attribute type 1 has an invalid length.
[  321.227447][  T196] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  321.490969][T11897] bond5: entered promiscuous mode
[  321.511154][T11897] 8021q: adding VLAN 0 to HW filter on device bond5
[  321.713967][T11911] bond5: (slave bridge5): making interface the new active one
[  321.753906][T11911] bridge5: entered promiscuous mode
[  321.786013][T11911] bond5: (slave bridge5): Enslaving as an active interface with an up link
[  321.853284][T11918] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1345'.
[  322.756790][T11936] geneve0: entered promiscuous mode
[  322.810928][ T6106] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  322.864659][ T6106] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  322.901928][ T6106] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  322.948023][ T6106] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  323.153804][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5740 ms
[  323.158704][ T6106] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  323.162945][    C1] lec:lec_tx_timeout: lec0
[  323.176847][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  323.243902][T11943] 8021q: VLANs not supported on lo
[  323.358947][T11946] netlink: 216 bytes leftover after parsing attributes in process `syz.1.1350'.
[  323.391652][T11946] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1350'.
[  323.442045][T11946] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1350'.
[  323.474920][T11947] netlink: 256 bytes leftover after parsing attributes in process `syz.1.1350'.
[  324.105515][ T5844] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  324.445058][T11965] netlink: 'syz.4.1352': attribute type 1 has an invalid length.
[  324.497322][T11965] sctp: [Deprecated]: syz.4.1352 (pid 11965) Use of struct sctp_assoc_value in delayed_ack socket option.
[  324.497322][T11965] Use struct sctp_sack_info instead
[  324.566512][T11968] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1352'.
[  325.075380][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  325.146554][T11981] netlink: 'syz.4.1355': attribute type 1 has an invalid length.
[  325.230863][T11981] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR
[  325.948151][T11995] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1358'.
[  326.345377][ T6106] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  327.001730][   T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  328.104695][ T5844] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  328.203693][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms
[  328.213136][    C1] lec:lec_tx_timeout: lec0
[  328.218901][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  328.459290][T12041] xt_hashlimit: size too large, truncated to 1048576
[  328.478980][T12045] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1366'.
[  328.905912][  T196] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  329.182131][T12054] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1367'.
[  329.869281][T12073] openvswitch: netlink: Unexpected mask (mask=200240, allowed=10048)
[  331.087673][T12110] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1382'.
[  331.144708][ T5844] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  331.170554][T12117] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1381'.
[  331.307466][T12120] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1384'.
[  331.404957][T12120] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1384'.
[  331.464763][ T6119] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  331.537196][T12123] netlink: 208 bytes leftover after parsing attributes in process `syz.0.1383'.
[  331.550456][T12130] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1386'.
[  331.561450][T12130] netlink: 43 bytes leftover after parsing attributes in process `syz.1.1386'.
[  331.571315][T12123] netlink: 208 bytes leftover after parsing attributes in process `syz.0.1383'.
[  331.582206][T12126] netlink: 'syz.2.1385': attribute type 10 has an invalid length.
[  331.586208][T12124] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1383'.
[  331.591409][T12130] netlink: 'syz.1.1386': attribute type 5 has an invalid length.
[  331.619427][T12130] netlink: 43 bytes leftover after parsing attributes in process `syz.1.1386'.
[  331.884617][T12133] macvtap1: entered promiscuous mode
[  331.907481][T12133] macvtap1: entered allmulticast mode
[  331.923220][T12133] veth1_vlan: entered allmulticast mode
[  331.955170][T12138] macvtap2: entered promiscuous mode
[  331.977001][T12138] macvtap2: entered allmulticast mode
[  332.104752][ T5928] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  332.762159][ T6116] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  333.233899][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[  333.243237][    C1] lec:lec_tx_timeout: lec0
[  333.248818][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  333.353570][T12156] netlink: 'syz.1.1393': attribute type 4 has an invalid length.
[  333.679756][T12164] netlink: 'syz.0.1395': attribute type 4 has an invalid length.
[  333.728798][T12164] .`: renamed from bond0 (while UP)
[  333.802482][T12162] syzkaller1: tun_chr_ioctl cmd 1074025677
[  333.827709][T12162] syzkaller1: Linktype set failed because interface is up
[  333.904219][    T9] syzkaller1: tun_net_xmit 90
[  334.025390][ T6116] syzkaller1: tun_net_xmit 86
[  334.665878][ T1301] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  334.775039][T12190] batadv_slave_1: entered promiscuous mode
[  334.818866][T12190] batadv_slave_1: left promiscuous mode
[  335.148493][    T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  336.584187][ T6119] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  337.042969][T12238] __nla_validate_parse: 7 callbacks suppressed
[  337.043032][T12238] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1414'.
[  337.166510][T12242] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  337.176844][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  337.712749][ T6116] nci: nci_rx_work: unknown MT 0x7
[  338.080111][T12270] netlink: 'syz.0.1420': attribute type 2 has an invalid length.
[  338.184372][ T5844] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  338.263823][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[  338.273233][    C1] lec:lec_tx_timeout: lec0
[  338.278624][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  338.381088][T12251] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  338.506922][ T6106] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  338.628537][T12275] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  339.148111][ T5928] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  339.285056][T12284] netlink: 'syz.2.1424': attribute type 4 has an invalid length.
[  339.549710][T12292] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1425'.
[  339.585995][T12298] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1427'.
[  339.619521][T12298] netlink: 'syz.0.1427': attribute type 1 has an invalid length.
[  339.655871][T12296] netlink: 144 bytes leftover after parsing attributes in process `syz.4.1425'.
[  339.785470][  T196] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  340.334685][T12318] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1434'.
[  340.523352][   T30] audit: type=1800 audit(1777234174.804:3): pid=12313 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1431" name=3A202E31323334352E2E2E2E2028313829207238203D2030783363333130303030300A202020202020323A202E31323334352E2E382E20283835292063616C6C2070632B360A202020202020333A202E2E2E2E2E2E2E2E382E2028313829207230203D203078313130303030303066666666666666660A202020202020353A202E2E2E2E2E2E2E2E382E202836362920696620773820733E2030783020676F746F2070632B300A202020202020363A202E2E2E2E2E2E2E2E2E2E20283138292072 dev="tmpfs" ino=1523 res=0 errno=0
[  340.546106][T12320] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  340.654990][T12323] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1436'.
[  340.668270][T12321] syzkaller0: entered promiscuous mode
[  340.693835][T12321] syzkaller0: entered allmulticast mode
[  340.826226][T12321] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1435'.
[  340.947879][T12320] tipc: Resetting bearer <eth:syzkaller0>
[  341.033326][T12320] tipc: Resetting bearer <eth:syzkaller0>
[  341.086093][T12332] netlink: 'syz.2.1438': attribute type 1 has an invalid length.
[  341.143492][T12336] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1438'.
[  341.178683][T12340] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1439'.
[  341.225961][T12320] tipc: Disabling bearer <eth:syzkaller0>
[  341.255359][T12332] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR
[  341.461319][T12349] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1442'.
[  341.595674][T12354] pim6reg1: entered promiscuous mode
[  341.601305][T12354] pim6reg1: entered allmulticast mode
[  341.708250][  T196] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  342.188731][    T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  342.233838][T12379] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1447'.
[  342.433321][T12385] netlink: 212348 bytes leftover after parsing attributes in process `syz.0.1451'.
[  342.474455][T12376] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  342.498663][T12385] netlink: ct family unspecified
[  342.986884][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  342.998782][ T5844] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  343.028761][T12417] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1453'.
[  343.267116][T12376] tipc: Disabling bearer <eth:syzkaller0>
[  343.428184][T12415] syzkaller1: entered promiscuous mode
[  343.460892][T12415] syzkaller1: entered allmulticast mode
[  343.938062][T12439] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[  343.984029][T12439] xt_CHECKSUM: unsupported CHECKSUM operation 68
[  344.051405][T12442] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1459'.
[  344.113636][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5820 ms
[  344.122879][    C1] lec:lec_tx_timeout: lec0
[  344.128487][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  344.265284][ T6120] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  344.430051][T12447] netlink: 'syz.3.1461': attribute type 1 has an invalid length.
[  345.545367][   T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  346.024751][ T5844] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  346.184571][ T5928] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  347.464344][ T6120] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  347.676664][T12514] netlink: 'syz.4.1477': attribute type 4 has an invalid length.
[  347.710783][T12514] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1477'.
[  347.748744][T12514] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1477'.
[  348.161262][T12533] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1482'.
[  348.446674][T12539] netlink: 'syz.4.1483': attribute type 2 has an invalid length.
[  348.916224][T12557] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1488'.
[  348.968385][T12554] xt_TCPMSS: Only works on TCP SYN packets
[  349.070457][T12562] netlink: 'syz.1.1491': attribute type 1 has an invalid length.
[  349.143667][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[  349.152387][    C1] lec:lec_tx_timeout: lec0
[  349.157555][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  349.234147][ T5844] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  349.250925][T12564] bond4: (slave bridge6): Enslaving as a backup interface with an up link
[  349.262275][T12562] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1491'.
[  349.405296][T12571] netlink: 4616 bytes leftover after parsing attributes in process `syz.3.1492'.
[  349.474708][T12571] netlink: 4616 bytes leftover after parsing attributes in process `syz.3.1492'.
[  349.546082][T12576] netlink: 211856 bytes leftover after parsing attributes in process `syz.1.1494'.
[  349.589286][T12576] netlink: 211856 bytes leftover after parsing attributes in process `syz.1.1494'.
[  349.975335][T12587] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  350.025140][   T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  350.529571][T12603] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1502'.
[  350.554636][T12602] syzkaller0: entered promiscuous mode
[  350.573914][T12602] syzkaller0: entered allmulticast mode
[  350.890336][T12614] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT
[  351.158474][T12617] IPVS: set_ctl: invalid protocol: 94 255.255.255.255:20004
[  351.318838][   T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  351.603134][T12624] netlink: Unknown conntrack attr (type=2304, max=9)
[  351.992483][T12634] netlink: 'syz.3.1510': attribute type 4 has an invalid length.
[  352.197195][T12637] netlink: 'syz.0.1511': attribute type 4 has an invalid length.
[  352.265792][    T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  352.425741][   T30] audit: type=1107 audit(1777234186.704:4): pid=12643 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
[  352.434009][T12639] openvswitch: netlink: Flow actions attr not present in new flow.
[  352.591284][   T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  353.064909][T12662] __nla_validate_parse: 6 callbacks suppressed
[  353.064969][T12662] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1517'.
[  353.089545][T12661] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1516'.
[  353.240968][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  353.946674][T12680] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  353.955331][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  354.139505][T12684] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  354.183736][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms
[  354.193639][    C1] lec:lec_tx_timeout: lec0
[  354.198370][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  354.956584][T12715] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1536'.
[  355.007650][T12713] netlink: 424 bytes leftover after parsing attributes in process `syz.1.1535'.
[  355.037499][T12713] netlink: 'syz.1.1535': attribute type 1 has an invalid length.
[  355.157983][T12722] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1538'.
[  355.650123][T12719] syzkaller0: entered promiscuous mode
[  355.676428][T12719] syzkaller0: entered allmulticast mode
[  355.761178][T12736] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1542'.
[  355.784717][ T6120] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  355.829653][T12735] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1544'.
[  355.930363][T12741] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1543'.
[  355.978185][T12743] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1545'.
[  356.264275][ T5898] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  357.065516][  T178] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  358.347182][  T396] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  359.223808][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[  359.232937][    C1] lec:lec_tx_timeout: lec0
[  359.238457][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  359.304492][ T5898] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  360.217204][T12735] bond0: entered promiscuous mode
[  360.222404][T12735] geneve4: entered promiscuous mode
[  360.233124][T12735] bond0: left promiscuous mode
[  360.243707][T12735] geneve4: left promiscuous mode
[  360.270809][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  360.297008][T12741] batman_adv: batadv0: Removing interface: batadv_slave_1
[  360.501480][T12773] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1554'.
[  360.530246][T12773] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  360.579467][T12774] netlink: 200 bytes leftover after parsing attributes in process `syz.4.1552'.
[  361.127432][T12795] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  361.545516][  T178] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  362.066914][T12838] netlink: 'syz.0.1568': attribute type 7 has an invalid length.
[  362.081535][T12838] netlink: 'syz.0.1568': attribute type 8 has an invalid length.
[  362.092667][T12838] netlink: 'syz.0.1568': attribute type 8 has an invalid length.
[  362.104358][  T178] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  362.115596][T12838] netlink: 'syz.0.1568': attribute type 4 has an invalid length.
[  362.193814][T12838] netlink: 'syz.0.1568': attribute type 7 has an invalid length.
[  362.205847][T12838] netlink: 207236 bytes leftover after parsing attributes in process `syz.0.1568'.
[  362.434306][T12817] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  362.896113][T12860] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1575'.
[  363.267289][T12876] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1578'.
[  363.306568][ T5844] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  363.352381][T12876] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1578'.
[  363.468449][  T396] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  363.579245][T12880] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1579'.
[  364.253652][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[  364.262948][    C1] lec:lec_tx_timeout: lec0
[  364.268222][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  364.472129][T12909] netlink: 'syz.3.1588': attribute type 1 has an invalid length.
[  364.654728][T12909] bond3: entered promiscuous mode
[  364.674922][T12909] 8021q: adding VLAN 0 to HW filter on device bond3
[  364.959711][T12930] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1595'.
[  365.048131][T12931] netlink: 'syz.1.1593': attribute type 1 has an invalid length.
[  365.082063][T12931] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1593'.
[  365.122383][T12931] netlink: 'syz.1.1593': attribute type 1 has an invalid length.
[  365.147343][T12939] netlink: 'syz.4.1597': attribute type 62 has an invalid length.
[  365.335865][T12944] netlink: 'syz.3.1598': attribute type 3 has an invalid length.
[  365.369706][T12944] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1598'.
[  365.737295][T12949] netlink: 66 bytes leftover after parsing attributes in process `syz.4.1599'.
[  365.748461][T12931] syzkaller1: entered promiscuous mode
[  365.756319][T12931] syzkaller1: entered allmulticast mode
[  366.086192][T12958] syzkaller0: entered promiscuous mode
[  366.100814][T12958] syzkaller0: entered allmulticast mode
[  366.183507][T12966] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  366.198010][T12966] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  366.207119][T12966] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  366.219629][T12966] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1604'.
[  366.240373][T12966] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1604'.
[  366.254087][T12966] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1604'.
[  366.267599][T12966] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1604'.
[  366.278180][T12966] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1604'.
[  366.295264][T12966] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1604'.
[  366.307228][T12966] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  366.315886][T12966] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  366.329150][T12966] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  366.348326][ T5898] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  366.388184][T12966] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  366.434818][T12975] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1604'.
[  366.447276][T12968] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  366.948643][T12982] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1608'.
[  367.337904][T12994] x_tables: duplicate underflow at hook 1
[  367.441114][T12999] syzkaller0: entered promiscuous mode
[  367.459369][T12999] syzkaller0: entered allmulticast mode
[  367.478856][T13001] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1613'.
[  368.500350][T13026] netlink: 'syz.3.1619': attribute type 3 has an invalid length.
[  368.576918][   T30] audit: type=1804 audit(1777234202.864:5): pid=13030 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.1619" name="/newroot/304/cgroup.controllers" dev="tmpfs" ino=1576 res=1 errno=0
[  368.610703][  T396] net_ratelimit: 6 callbacks suppressed
[  368.610723][  T396] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  368.634654][   T30] audit: type=1800 audit(1777234202.894:6): pid=13030 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1619" name="cgroup.controllers" dev="tmpfs" ino=1576 res=0 errno=0
[  368.729825][T13031] syzkaller0: entered promiscuous mode
[  368.743294][T13031] syzkaller0: entered allmulticast mode
[  368.952696][T13036] netlink: 'syz.1.1622': attribute type 3 has an invalid length.
[  369.152551][T13040] Bluetooth: hci0: Opcode 0x0401 failed: -22
[  369.252745][T13040] nbd: nbd1 already in use
[  369.293710][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms
[  369.303092][    C1] lec:lec_tx_timeout: lec0
[  369.307904][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  369.424142][    T9] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  369.844962][    T9] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  370.001993][T13061] netlink: 'syz.3.1627': attribute type 1 has an invalid length.
[  370.346694][    T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  370.650950][T13081] netlink: 'syz.4.1633': attribute type 1 has an invalid length.
[  370.783036][T13096] netlink: 'syz.4.1633': attribute type 1 has an invalid length.
[  370.857092][T13096] __nla_validate_parse: 5 callbacks suppressed
[  370.857153][T13096] netlink: 728 bytes leftover after parsing attributes in process `syz.4.1633'.
[  370.876911][T13081] 8021q: adding VLAN 0 to HW filter on device bond3
[  370.896313][T13089] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1634'.
[  371.159101][T13104] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1638'.
[  371.179874][T13105] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1638'.
[  371.216767][T13098] bond3: (slave veth3): Enslaving as an active interface with a down link
[  371.338393][T13081] 8021q: adding VLAN 0 to HW filter on device batadv1
[  371.389259][T13081] bond3: (slave batadv1): making interface the new active one
[  371.417719][T13081] batadv1: entered promiscuous mode
[  371.440151][T13081] bond3: (slave batadv1): Enslaving as an active interface with an up link
[  371.452850][T13107] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1639'.
[  371.648508][T13103] bond3 (unregistering): (slave veth3): Releasing active interface
[  371.691883][T13103] bond3 (unregistering): (slave batadv1): Releasing active interface
[  371.728047][T13103] bond3 (unregistering): Released all slaves
[  371.873286][T13111] gre0 speed is unknown, defaulting to 1000
[  372.019593][T13111] gre0 speed is unknown, defaulting to 1000
[  372.059877][T13111] gre0 speed is unknown, defaulting to 1000
[  372.192903][T13125] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1643'.
[  372.574143][T13140] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  373.065986][ T6118] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  373.140254][T13111] infiniband syz1: set active
[  373.180291][T13111] infiniband syz1: added gre0
[  373.198282][    T9] gre0 speed is unknown, defaulting to 1000
[  373.243286][T13111] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR
[  373.269539][T13111] infiniband syz1: Couldn't open port 1
[  373.329769][T13111] smbdirect: ib_dev[syz1]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000
[  373.332004][T13129] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1643'.
[  373.382046][T13111] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32
[  373.409251][    T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  373.442995][T13111] smbdirect: ib_dev[syz1]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005
[  373.463069][T13147] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1648'.
[  373.631050][T13111] RDS/IB: syz1: added
[  373.648741][T13111] smc: adding ib device syz1 with port count 1
[  373.673213][T13111] smc:    ib device syz1 port 1 has pnetid SYZ0 (user defined)
[  373.709203][ T6119] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  373.726491][    T9] gre0 speed is unknown, defaulting to 1000
[  373.765616][T13111] gre0 speed is unknown, defaulting to 1000
[  373.949621][T13162] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1651'.
[  374.158183][T13169] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1653'.
[  374.236927][T13172] netlink: 'syz.4.1651': attribute type 21 has an invalid length.
[  374.286965][T13166] macsec1: entered promiscuous mode
[  374.344696][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  374.834045][    T9] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  374.994409][    T9] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  375.508732][T13111] gre0 speed is unknown, defaulting to 1000
[  375.544581][ T6118] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  375.623634][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 6310 ms
[  375.632877][    C1] lec:lec_tx_timeout: lec0
[  375.921550][T13205] __nla_validate_parse: 6 callbacks suppressed
[  375.921574][T13205] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1664'.
[  375.972101][T13205] netlink: 'syz.1.1664': attribute type 1 has an invalid length.
[  376.016353][T13205] netlink: 'syz.1.1664': attribute type 1 has an invalid length.
[  376.376630][T13206] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1664'.
[  376.398448][T13111] gre0 speed is unknown, defaulting to 1000
[  376.584364][ T6118] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  376.610228][ T6118] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  376.673954][    T9] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  376.761874][T13222] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1670'.
[  377.385665][    T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  377.685542][T13111] gre0 speed is unknown, defaulting to 1000
[  378.054959][T13247] xt_TCPMSS: Only works on TCP SYN packets
[  378.591921][T13111] gre0 speed is unknown, defaulting to 1000
[  378.835607][ T6112] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  378.843222][ T1315] lec:lec_start_xmit: lec0:No lecd attached
[  378.844842][   T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  379.541689][T13111] gre0 speed is unknown, defaulting to 1000
[  379.666611][T13290] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1687'.
[  379.693872][T13290] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1687'.
[  379.999475][T13303] netlink: 'syz.1.1690': attribute type 6 has an invalid length.
[  380.426775][    T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  380.520314][T13314] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1693'.
[  380.584120][    C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  381.045671][T13332] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1696'.
[  381.384393][ T5928] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  381.405559][  T396] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  381.416340][ T5898] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  381.431243][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  382.308370][T13362] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1702'.
[  382.545437][T13361] PF_CAN: dropped non conform CAN XL skbuff: dev type 280, len 40
[  383.930178][T13399] IPVS: Unknown mcast interface: vcan0
[  384.103691][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5250 ms
[  384.113307][    C1] lec:lec_tx_timeout: lec0
[  384.121564][T13380] gre0 speed is unknown, defaulting to 1000
[  384.190943][T13401] sctp: [Deprecated]: syz.4.1712 (pid 13401) Use of int in maxseg socket option.
[  384.190943][T13401] Use struct sctp_assoc_value instead
[  384.504026][ T5898] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  384.585193][   T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  384.593490][   T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  384.807280][T13422] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  384.901952][T13424] netlink: 'syz.3.1717': attribute type 1 has an invalid length.
[  384.931295][T13425] netlink: 'syz.1.1718': attribute type 1 has an invalid length.
[  385.819010][T13438] xt_CT: No such helper "syz0"
[  385.845929][T13436] netlink: 'syz.4.1720': attribute type 3 has an invalid length.
[  386.062029][T13446] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1723'.
[  386.353855][T13454] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1727'.
[  386.614472][ T6119] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  386.627011][    T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  386.639852][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  389.064745][    C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  389.734763][ T5844] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  390.070787][T13462] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1728'.
[  390.089845][T13462] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1728'.
[  390.099428][T13462] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1728'.
[  390.114508][T13462] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1728'.
[  390.126664][T13462] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1728'.
[  390.152159][T13462] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1728'.
[  390.179918][T13462] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1728'.
[  390.292866][T13462] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1728'.
[  390.936602][T13462] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  390.990608][T13462] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  391.081957][T13462] __nla_validate_parse: 75 callbacks suppressed
[  391.081981][T13462] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1728'.
[  391.102461][T13462] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1728'.
[  391.119035][T13462] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1728'.
[  391.133097][T13462] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1728'.
[  391.150218][T13462] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1728'.
[  391.159930][T13462] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1728'.
[  391.181772][T13462] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1728'.
[  391.193321][T13462] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1728'.
[  391.207923][T13462] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1728'.
[  391.218137][T13462] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1728'.
[  391.366894][T13462] batman_adv: batadv0: Interface deactivated: gretap1
[  391.616453][  T178] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  391.633749][  T178] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  391.651962][  T178] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  391.684048][  T178] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  391.715296][  T178] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  391.734887][  T178] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  391.773076][   T12] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  391.808983][   T12] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  391.836392][T13491] openvswitch: netlink: Invalid VLAN frame
[  391.993473][   T30] audit: type=1107 audit(1777234226.274:7): pid=13495 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
[  392.590751][T13536] netlink: 'syz.3.1746': attribute type 23 has an invalid length.
[  392.693412][T13534] netlink: 'syz.0.1745': attribute type 1 has an invalid length.
[  392.794462][T13534] workqueue: Failed to create a rescuer kthread for wq "bond11": -EINTR
[  393.020891][T13556] pim6reg1: entered promiscuous mode
[  393.035696][T13556] pim6reg1: entered allmulticast mode
[  393.668434][T13565] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  393.687501][T13565] Bluetooth: hci1: Error when powering off device on rfkill (-4)
[  393.826570][T13565] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  393.852532][T13565] Bluetooth: hci2: Error when powering off device on rfkill (-4)
[  393.903490][T13603] sock: sock_timestamping_bind_phc: sock not bind to device
[  393.930255][T13565] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  393.954784][T13565] Bluetooth: hci3: Error when powering off device on rfkill (-4)
[  394.005521][T13606] netlink: 'syz.0.1761': attribute type 29 has an invalid length.
[  394.042542][T13565] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  394.062737][T13565] Bluetooth: hci4: Error when powering off device on rfkill (-4)
[  394.097623][T13600] netlink: 'syz.0.1761': attribute type 29 has an invalid length.
[  394.629402][T13633] syzkaller0: entered promiscuous mode
[  394.649522][T13633] syzkaller0: entered allmulticast mode
[  394.707845][T13638] netlink: 'syz.1.1769': attribute type 1 has an invalid length.
[  395.186297][T13638] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  395.596398][T13665] 8021q: adding VLAN 0 to HW filter on device team0
[  395.628929][T13665] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  395.821081][T13667] syzkaller0: entered promiscuous mode
[  395.835696][T13667] syzkaller0: entered allmulticast mode
[  395.859717][T13605] gre0 speed is unknown, defaulting to 1000
[  396.770386][T13702] __nla_validate_parse: 115 callbacks suppressed
[  396.770410][T13702] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1778'.
[  399.347584][T13702] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-™ú:‡/": -EINTR
[  399.746845][T13732] syzkaller0: entered promiscuous mode
[  399.785531][T13732] syzkaller0: entered allmulticast mode
[  399.909209][T13736] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1785'.
[  399.943350][ T7863] lec:lec_start_xmit: lec0:No lecd attached
[  399.982781][T13682] gre0 speed is unknown, defaulting to 1000
[  400.156317][T13744] netlink: 'syz.1.1789': attribute type 16 has an invalid length.
[  400.189352][T13744] syzkaller0: entered promiscuous mode
[  400.199571][T13743] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1788'.
[  400.209144][T13744] syzkaller0: entered allmulticast mode
[  400.517231][T13750] xt_hashlimit: size too large, truncated to 1048576
[  400.885172][T13764] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1793'.
[  400.984774][T13763] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1793'.
[  401.326850][T13775] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1797'.
[  401.594055][T13780] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1798'.
[  401.631261][T13779] ip6tnl3: entered allmulticast mode
[  401.976301][T13791] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1803'.
[  402.000747][T13792] xt_bpf: check failed: parse error
[  402.306280][T13802] netlink: 1744 bytes leftover after parsing attributes in process `syz.0.1806'.
[  402.320724][T13810] Cannot find del_set index 3 as target
[  402.596994][T13820] netlink: 'syz.1.1810': attribute type 10 has an invalid length.
[  402.616603][T13820] veth0_vlan: left promiscuous mode
[  402.633017][T13820] veth0_vlan: entered promiscuous mode
[  402.651839][T13820] team0: Device veth0_vlan failed to register rx_handler
[  402.667091][T13827] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1811'.
[  402.683928][T13820] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1810'.
[  402.848415][T13830] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  403.031509][T13847] netlink: 'syz.2.1819': attribute type 1 has an invalid length.
[  403.130175][T13849] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1820'.
[  403.309346][T13854] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1821'.
[  403.335562][T13854] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1821'.
[  403.365446][T13854] netlink: 'syz.2.1821': attribute type 12 has an invalid length.
[  403.374486][T13854] netlink: 'syz.2.1821': attribute type 11 has an invalid length.
[  403.987131][T13860] gre0 speed is unknown, defaulting to 1000
[  404.258031][T13893] 8021q: adding VLAN 0 to HW filter on device ipvlan3
[  404.281870][T13893] bond0: (slave ipvlan3): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  404.564992][T13901] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1831'.
[  404.619364][T13901] ip6tnl2: entered allmulticast mode
[  404.751920][T13863] gre0 speed is unknown, defaulting to 1000
[  405.064025][    C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  405.065706][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5120 ms
[  405.079896][    C1] lec:lec_tx_timeout: lec0
[  405.243251][T13914] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1834'.
[  405.254258][T13914] netlink: 'syz.4.1834': attribute type 7 has an invalid length.
[  405.262087][T13914] netlink: 'syz.4.1834': attribute type 8 has an invalid length.
[  405.277412][T13914] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1834'.
[  405.326677][T13914] ip6gretap0: entered promiscuous mode
[  405.363735][T13914] syz_tun: entered promiscuous mode
[  405.386082][T13914] ip6gretap0: left promiscuous mode
[  405.409146][T13914] syz_tun: left promiscuous mode
[  405.451000][T13876] gre0 speed is unknown, defaulting to 1000
[  407.712088][T13968] bond0: entered promiscuous mode
[  407.745454][T13968] bond0: left promiscuous mode
[  408.096436][T13981] syzkaller0: entered promiscuous mode
[  408.112229][T13981] syzkaller0: entered allmulticast mode
[  408.151232][T13981] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1854'.
[  408.272758][T13981] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  408.596454][T14012] netlink: 'syz.0.1861': attribute type 1 has an invalid length.
[  408.614888][T14012] netlink: 244 bytes leftover after parsing attributes in process `syz.0.1861'.
[  408.647988][T14007] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1862'.
[  408.662682][T14007] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1862'.
[  408.713522][T14007] virtio_net virtio1 eth0: entered promiscuous mode
[  408.725009][T14007] dummy0: entered promiscuous mode
[  408.735287][T14007] debugfs: 'hsr0' already exists in 'hsr'
[  408.741260][T14007] Cannot create hsr debugfs directory
[  408.829181][T13979] tipc: Resetting bearer <eth:syzkaller0>
[  408.927839][T13979] tipc: Disabling bearer <eth:syzkaller0>
[  409.038261][T14027] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1866'.
[  409.119562][T14027] openvswitch: netlink: Geneve option length err (len 256, max 255).
[  409.420828][T14039] netlink: 'syz.3.1870': attribute type 13 has an invalid length.
[  409.731384][T14055] netlink: 'syz.3.1870': attribute type 1 has an invalid length.
[  409.762534][T14055] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1870'.
[  409.796284][T14055] netlink: 1 bytes leftover after parsing attributes in process `syz.3.1870'.
[  409.839251][T14055] netlink: 'syz.3.1870': attribute type 1 has an invalid length.
[  409.861616][T14055] netlink: 'syz.3.1870': attribute type 8 has an invalid length.
[  409.875071][T14055] netlink: 606 bytes leftover after parsing attributes in process `syz.3.1870'.
[  410.237276][T14014] gre0 speed is unknown, defaulting to 1000
[  410.243511][  T178] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  410.262479][  T178] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  410.288206][  T178] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  410.307935][  T178] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  410.390140][  T178] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  410.422213][  T178] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  410.455839][  T178] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  410.479144][  T178] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  410.811173][T14079] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw
[  410.852973][T14084] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  410.904407][T14079] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1877'.
[  411.806520][T14116] netlink: 'syz.3.1883': attribute type 1 has an invalid length.
[  411.856736][T14115] xfrm0: entered promiscuous mode
[  411.885374][T14115] xfrm0: entered allmulticast mode
[  412.101858][T14094] gre0 speed is unknown, defaulting to 1000
[  412.901874][T14142] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  415.959614][T14160] netlink: 211856 bytes leftover after parsing attributes in process `syz.3.1892'.
[  415.971954][T14160] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1892'.
[  415.984827][T14160] netlink: 261 bytes leftover after parsing attributes in process `syz.3.1892'.
[  416.112816][T14166] netlink: 'syz.3.1892': attribute type 30 has an invalid length.
[  416.132710][T14166] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1892'.
[  416.378404][T14166] bond5: option arp_missed_max: mode dependency failed, not supported in mode 802.3ad(4)
[  416.435415][T14166] bond5 (unregistering): Released all slaves
[  416.562151][T14178] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1896'.
[  416.948813][T14184] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1897'.
[  416.968364][T14180] syzkaller1: entered promiscuous mode
[  416.996281][T14180] syzkaller1: entered allmulticast mode
[  417.527137][T14204] netlink: 'syz.1.1901': attribute type 5 has an invalid length.
[  417.610055][T14151] gre0 speed is unknown, defaulting to 1000
[  417.831072][T14214] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1905'.
[  417.891576][T14214] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  418.052414][T14218] bond5: entered allmulticast mode
[  418.061356][T14218] 8021q: adding VLAN 0 to HW filter on device bond5
[  418.089839][T14224] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1907'.
[  419.567215][T14267] netlink: 'syz.3.1912': attribute type 1 has an invalid length.
[  419.861515][T14279] sctp: [Deprecated]: syz.1.1915 (pid 14279) Use of struct sctp_assoc_value in delayed_ack socket option.
[  419.861515][T14279] Use struct sctp_sack_info instead
[  420.437843][T14290] netlink: 120 bytes leftover after parsing attributes in process `syz.4.1917'.
[  420.509808][T14294] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1918'.
[  420.990241][T14318] __nla_validate_parse: 2 callbacks suppressed
[  420.990273][T14318] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1922'.
[  421.051393][T14321] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  421.081738][T14318] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1922'.
[  421.102817][T14318] netlink: 348 bytes leftover after parsing attributes in process `syz.0.1922'.
[  421.151322][T14318] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1922'.
[  421.173222][T14318] netlink: 348 bytes leftover after parsing attributes in process `syz.0.1922'.
[  421.199634][T14318] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1922'.
[  421.689297][T14297] gre0 speed is unknown, defaulting to 1000
[  421.934405][T14338] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  422.019943][T14340] ip6gre1: entered promiscuous mode
[  422.044506][T14340] ip6gre1: entered allmulticast mode
[  422.966516][T14373] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1936'.
[  423.548559][T14389] netlink: 160 bytes leftover after parsing attributes in process `syz.4.1938'.
[  423.621219][T14394] netlink: 160 bytes leftover after parsing attributes in process `syz.4.1938'.
[  423.627198][T14392] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1939'.
[  424.490102][T14409] tc_dump_action: action bad kind
[  425.092244][T14420] delete_channel: no stack
[  426.623666][T14465] __nla_validate_parse: 2 callbacks suppressed
[  426.623704][T14465] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1958'.
[  426.682349][T14465] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1958'.
[  426.704003][T14465] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1958'.
[  426.720385][T14465] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1958'.
[  426.732613][T14424] gre0 speed is unknown, defaulting to 1000
[  426.953908][T14482] netlink: 'syz.0.1962': attribute type 1 has an invalid length.
[  427.097382][T14487] netlink: 'syz.3.1963': attribute type 1 has an invalid length.
[  427.151936][T14482] 8021q: adding VLAN 0 to HW filter on device bond11
[  427.217611][T14486] 8021q: adding VLAN 0 to HW filter on device bond11
[  427.240315][T14486] bond11: (slave vcan1): The slave device specified does not support setting the MAC address
[  427.275008][T14486] bond11: (slave vcan1): Error -95 calling set_mac_address
[  427.314537][T14494] netlink: 140 bytes leftover after parsing attributes in process `syz.1.1964'.
[  427.323950][T14494] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1964'.
[  427.355181][T14487] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR
[  427.633787][T14503] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1965'.
[  428.555383][T14511] IPv6: NLM_F_CREATE should be specified when creating new route
[  428.574030][T14511] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  428.581323][T14511] IPv6: NLM_F_CREATE should be set when creating new route
[  428.588720][T14511] IPv6: NLM_F_CREATE should be set when creating new route
[  428.596085][T14511] IPv6: NLM_F_CREATE should be set when creating new route
[  428.642148][T14512] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  428.662784][T14514] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1968'.
[  428.672494][T14514] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1968'.
[  428.682648][T14514] netlink: 58 bytes leftover after parsing attributes in process `syz.0.1968'.
[  428.935709][T14521] openvswitch: netlink: IP tunnel dst address not specified
[  428.945485][T14521] netlink: 'syz.3.1970': attribute type 13 has an invalid length.
[  428.955008][T14521] netlink: 'syz.3.1970': attribute type 17 has an invalid length.
[  429.267619][T14515] team0 (unregistering): Port device team_slave_0 removed
[  429.302651][T14515] team0 (unregistering): Port device team_slave_1 removed
[  429.451636][T14521] 8021q: adding VLAN 0 to HW filter on device bond0
[  429.475518][T14521] 8021q: adding VLAN 0 to HW filter on device team0
[  429.496458][T14521] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  429.574961][T13482] !yz!: Port: 1 Link DOWN
[  429.584645][T14531] syzkaller0: entered promiscuous mode
[  429.590504][T14531] syzkaller0: entered allmulticast mode
[  429.619007][T14533] nbd0: detected capacity change from 0 to 63
[  429.644275][T14535] block nbd0: NBD_DISCONNECT
[  429.656896][T14535] block nbd0: Disconnected due to user request.
[  429.670496][T14535] block nbd0: shutting down sockets
[  429.681015][    C1] blk_print_req_error: 138 callbacks suppressed
[  429.681038][    C1] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  429.696479][    C1] buffer_io_error: 138 callbacks suppressed
[  429.696505][    C1] Buffer I/O error on dev nbd0, logical block 0, async page read
[  429.714457][    C0] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  429.723802][    C0] Buffer I/O error on dev nbd0, logical block 1, async page read
[  429.731586][    C0] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  429.740690][    C0] Buffer I/O error on dev nbd0, logical block 2, async page read
[  429.748589][    C0] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  429.757792][    C0] Buffer I/O error on dev nbd0, logical block 3, async page read
[  429.766965][T13497] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  429.776211][T13497] Buffer I/O error on dev nbd0, logical block 0, async page read
[  429.787697][T13497] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  429.817427][T13497] Buffer I/O error on dev nbd0, logical block 1, async page read
[  429.843201][T13497] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  429.863238][T13497] Buffer I/O error on dev nbd0, logical block 2, async page read
[  429.874091][T13497] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  429.883305][T13497] Buffer I/O error on dev nbd0, logical block 3, async page read
[  429.899705][T13497] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  429.925685][T13497] Buffer I/O error on dev nbd0, logical block 0, async page read
[  429.954017][T13497] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  429.983530][T13497] Buffer I/O error on dev nbd0, logical block 1, async page read
[  430.023319][T13497] ldm_validate_partition_table(): Disk read failed.
[  430.032611][    C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  430.074811][T13497] Dev nbd0: unable to read RDB block 0
[  430.093147][T13497]  nbd0: unable to read partition table
[  430.117868][T14541] netlink: 'syz.0.1976': attribute type 1 has an invalid length.
[  430.156226][T13497] ldm_validate_partition_table(): Disk read failed.
[  430.190174][T13497] Dev nbd0: unable to read RDB block 0
[  430.214129][T13497]  nbd0: unable to read partition table
[  431.555102][T14594] IPVS: Scheduler module ip_vs_ not found
[  431.578819][T14598] IPVS: Unknown mcast interface: vcan0
[  431.804114][T14616] __nla_validate_parse: 5 callbacks suppressed
[  431.804136][T14616] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1996'.
[  431.894867][T14624] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1999'.
[  431.945537][T14622] bond3: option arp_interval: mode dependency failed, not supported in mode balance-tlb(5)
[  431.958469][T14622] bond3 (unregistering): Released all slaves
[  431.971743][T14628] xt_l2tp: invalid flags combination: 0
[  432.163051][T14633] netlink: 'syz.2.2001': attribute type 12 has an invalid length.
[  432.214914][T14633] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2001'.
[  432.229030][T14637] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2003'.
[  432.246324][T14637] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2003'.
[  432.246584][T14633] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2001'.
[  432.286457][T14633] netlink: 'syz.2.2001': attribute type 12 has an invalid length.
[  432.295822][T14633] netlink: 'syz.2.2001': attribute type 13 has an invalid length.
[  432.468073][T14642] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2004'.
[  432.729303][T14661] pimreg9: entered allmulticast mode
[  432.861429][T14668] netlink: 'syz.2.2011': attribute type 4 has an invalid length.
[  432.915049][T14671] netlink: 1100 bytes leftover after parsing attributes in process `syz.4.2012'.
[  432.946195][T14671] netlink: 1100 bytes leftover after parsing attributes in process `syz.4.2012'.
[  432.949571][T14675] netlink: 'syz.1.2014': attribute type 11 has an invalid length.
[  432.967262][T14675] netlink: 140 bytes leftover after parsing attributes in process `syz.1.2014'.
[  433.252323][T14697] netlink: 'syz.2.2019': attribute type 9 has an invalid length.
[  433.343294][T14702] netlink: 'syz.2.2019': attribute type 10 has an invalid length.
[  433.730675][T14717] can: request_module (can-proto-0) failed.
[  433.882521][T14723] bridge0: port 3(vlan2) entered blocking state
[  433.892323][T14723] bridge0: port 3(vlan2) entered disabled state
[  433.901535][T14723] vlan2: entered allmulticast mode
[  433.907190][T14723] geneve0: entered allmulticast mode
[  433.915495][T14723] vlan2: entered promiscuous mode
[  433.920661][T14723] geneve0: entered promiscuous mode
[  434.260693][T14746] netlink: 'syz.1.2030': attribute type 1 has an invalid length.
[  434.281398][T14746] netlink: 'syz.1.2030': attribute type 3 has an invalid length.
[  434.469983][T14748] netlink: 'syz.4.2031': attribute type 12 has an invalid length.
[  435.117463][T14779] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  435.165913][T14784] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  435.254851][T14781] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  435.774230][T14792] bridge0: port 2(bridge_slave_1) entered disabled state
[  435.781659][T14792] bridge0: port 1(bridge_slave_0) entered disabled state
[  436.057064][T14792] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  436.104842][T14792] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  436.423787][    C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  436.480487][T14792] ipvlan2: left promiscuous mode
[  436.490285][T14792] bond7: left promiscuous mode
[  436.497530][T14792] bond7: left allmulticast mode
[  436.555953][T14792] bond8: left promiscuous mode
[  436.572598][T14792] geneve3: left promiscuous mode
[  436.593232][T14792] ip6tnl2: left allmulticast mode
[  436.645350][ T5956] gre0 speed is unknown, defaulting to 1000
[  436.668787][ T5956] syz1: Port: 1 Link DOWN
[  436.758372][   T12] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  436.791923][   T12] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  436.835623][ T5844] gre0 speed is unknown, defaulting to 1000
[  436.848965][   T12] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  436.871149][   T12] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  436.900825][T14824] __nla_validate_parse: 32 callbacks suppressed
[  436.900845][T14824] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2050'.
[  437.070003][T14833] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2054'.
[  437.078412][T14835] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2055'.
[  437.296787][T14844] syzkaller0: entered promiscuous mode
[  437.334992][T14850] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2057'.
[  437.335606][T14844] syzkaller0: entered allmulticast mode
[  437.499615][T14854] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  437.577516][T14861] netlink: 88 bytes leftover after parsing attributes in process `syz.0.2058'.
[  437.638705][T14864] validate_nla: 3 callbacks suppressed
[  437.638726][T14864] netlink: 'syz.0.2058': attribute type 1 has an invalid length.
[  437.731294][T14864] netlink: 'syz.0.2058': attribute type 2 has an invalid length.
[  437.756354][T14874] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2063'.
[  437.768739][T14876] netlink: 'syz.0.2058': attribute type 1 has an invalid length.
[  437.788246][T14877] sctp: [Deprecated]: syz.3.2064 (pid 14877) Use of struct sctp_assoc_value in delayed_ack socket option.
[  437.788246][T14877] Use struct sctp_sack_info instead
[  437.815724][T14876] netlink: 'syz.0.2058': attribute type 2 has an invalid length.
[  437.828543][T14878] sctp: [Deprecated]: syz.3.2064 (pid 14878) Use of struct sctp_assoc_value in delayed_ack socket option.
[  437.828543][T14878] Use struct sctp_sack_info instead
[  438.389958][T14896] sctp: [Deprecated]: syz.2.2067 (pid 14896) Use of struct sctp_assoc_value in delayed_ack socket option.
[  438.389958][T14896] Use struct sctp_sack_info instead
[  438.624355][T14897] gre0 speed is unknown, defaulting to 1000
[  438.890492][T14891] gre0 speed is unknown, defaulting to 1000
[  440.264017][    C1] ------------[ cut here ]------------
[  440.269076][    C0] ==================================================================
[  440.269844][    C1] ODEBUG: free active (active state 0) object: ffff888031e91890 object type: timer_list hint: rose_t0timer_expiry+0x0/0x560
[  440.277894][    C0] BUG: KASAN: slab-use-after-free in kmemdup_noprof+0x55/0x70
[  440.277926][    C0] Read of size 66 at addr ffff8880310ac600 by task swapper/0/0
[  440.277942][    C0] 
[  440.277953][    C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) 
[  440.277969][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  440.277977][    C0] Call Trace:
[  440.277983][    C0]  <IRQ>
[  440.277990][    C0]  dump_stack_lvl+0xe8/0x150
[  440.278012][    C0]  print_address_description+0x55/0x1e0
[  440.278032][    C0]  ? kmemdup_noprof+0x55/0x70
[  440.278051][    C0]  print_report+0x58/0x70
[  440.278070][    C0]  kasan_report+0x117/0x150
[  440.278092][    C0]  ? kmemdup_noprof+0x55/0x70
[  440.278117][    C0]  kasan_check_range+0x264/0x2c0
[  440.278147][    C0]  ? kmemdup_noprof+0x55/0x70
[  440.278168][    C0]  __asan_memcpy+0x29/0x70
[  440.278185][    C0]  kmemdup_noprof+0x55/0x70
[  440.278206][    C0]  ax25_send_frame+0x693/0x9f0
[  440.278224][    C0]  ? ax25_send_frame+0x326/0x9f0
[  440.278244][    C0]  rose_t0timer_expiry+0x255/0x560
[  440.278268][    C0]  call_timer_fn+0x192/0x5e0
[  440.278283][    C0]  ? __pfx_rose_t0timer_expiry+0x10/0x10
[  440.278303][    C0]  ? call_timer_fn+0xd4/0x5e0
[  440.278317][    C0]  ? __pfx_call_timer_fn+0x10/0x10
[  440.278338][    C0]  ? _raw_spin_unlock_irq+0x23/0x50
[  440.278357][    C0]  ? __pfx_rose_t0timer_expiry+0x10/0x10
[  440.278380][    C0]  __run_timer_base+0x652/0x8b0
[  440.278402][    C0]  ? ktime_get+0x45/0x220
[  440.278427][    C0]  ? __pfx___run_timer_base+0x10/0x10
[  440.278457][    C0]  run_timer_softirq+0xb7/0x170
[  440.278478][    C0]  handle_softirqs+0x22a/0x840
[  440.278502][    C0]  ? __irq_exit_rcu+0xca/0x220
[  440.278528][    C0]  __irq_exit_rcu+0xca/0x220
[  440.278549][    C0]  irq_exit_rcu+0x9/0x30
[  440.278568][    C0]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  440.278589][    C0]  </IRQ>
[  440.278594][    C0]  <TASK>
[  440.278601][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  440.278618][    C0] RIP: 0010:pv_native_safe_halt+0xf/0x20
[  440.278639][    C0] Code: db 70 02 e9 53 f4 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 13 81 10 00 fb f4 <c3> cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90
[  440.278654][    C0] RSP: 0018:ffffffff8e607dc0 EFLAGS: 00000242
[  440.278671][    C0] RAX: 0000000000110dc7 RBX: ffffffff819aae9a RCX: 0000000080000001
[  440.278683][    C0] RDX: 0000000000000001 RSI: ffffffff8dfd8f45 RDI: ffffffff8c289f60
[  440.278694][    C0] RBP: ffffffff8e607eb0 R08: ffff8880b86339db R09: 1ffff110170c673b
[  440.278705][    C0] R10: dffffc0000000000 R11: ffffed10170c673c R12: 0000000000000000
[  440.278716][    C0] R13: 1ffffffff1cd25d8 R14: 0000000000000000 R15: 1ffffffff1cd25d8
[  440.278729][    C0]  ? do_idle+0x36a/0x5f0
[  440.278751][    C0]  default_idle+0x9/0x20
[  440.278764][    C0]  default_idle_call+0x72/0xb0
[  440.278777][    C0]  do_idle+0x36a/0x5f0
[  440.278791][    C0]  ? asm_sysvec_call_function_single+0x1a/0x20
[  440.278810][    C0]  ? __pfx_do_idle+0x10/0x10
[  440.278829][    C0]  cpu_startup_entry+0x43/0x60
[  440.278843][    C0]  rest_init+0x2de/0x300
[  440.278859][    C0]  start_kernel+0x38a/0x3e0
[  440.278880][    C0]  x86_64_start_reservations+0x24/0x30
[  440.278903][    C0]  x86_64_start_kernel+0x143/0x1c0
[  440.278925][    C0]  common_startup_64+0x13e/0x147
[  440.278951][    C0]  </TASK>
[  440.278957][    C0] 
[  440.278962][    C0] Allocated by task 10474:
[  440.278971][    C0]  kasan_save_track+0x3e/0x80
[  440.278989][    C0]  __kasan_kmalloc+0x93/0xb0
[  440.279006][    C0]  __kmalloc_cache_noprof+0x31c/0x660
[  440.279024][    C0]  rose_add_node+0x471/0xf00
[  440.279044][    C0]  rose_rt_ioctl+0xd35/0x12a0
[  440.279064][    C0]  rose_ioctl+0x3fb/0x8f0
[  440.279082][    C0]  sock_do_ioctl+0x101/0x320
[  440.279100][    C0]  sock_ioctl+0x5c6/0x7f0
[  440.279127][    C0]  __se_sys_ioctl+0xfc/0x170
[  440.279145][    C0]  do_syscall_64+0x15f/0xf80
[  440.279165][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  440.279180][    C0] 
[  440.279184][    C0] Freed by task 0:
[  440.279191][    C0]  kasan_save_track+0x3e/0x80
[  440.279207][    C0]  kasan_save_free_info+0x46/0x50
[  440.279222][    C0]  __kasan_slab_free+0x5c/0x80
[  440.292192][    C1] WARNING: lib/debugobjects.c:632 at debug_check_no_obj_freed+0x405/0x550, CPU#1: swapper/1/0
[  440.299636][    C0]  kfree+0x1c5/0x640
[  440.299656][    C0]  rose_timer_expiry+0x4c3/0x600
[  440.307224][    C1] Modules linked in:
[  440.309881][    C0]  call_timer_fn+0x192/0x5e0
[  440.319110][    C1] 
[  440.329206][    C0]  __run_timer_base+0x652/0x8b0
[  440.329234][    C0]  run_timer_softirq+0xb7/0x170
[  440.329254][    C0]  handle_softirqs+0x22a/0x840
[  440.329273][    C0]  __irq_exit_rcu+0xca/0x220
[  440.329291][    C0]  irq_exit_rcu+0x9/0x30
[  440.329308][    C0]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  440.329325][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  440.329340][    C0] 
[  440.329346][    C0] The buggy address belongs to the object at ffff8880310ac600
[  440.329346][    C0]  which belongs to the cache kmalloc-96 of size 96
[  440.329360][    C0] The buggy address is located 0 bytes inside of
[  440.329360][    C0]  freed 96-byte region [ffff8880310ac600, ffff8880310ac660)
[  440.329377][    C0] 
[  440.329383][    C0] The buggy address belongs to the physical page:
[  440.329392][    C0] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x310ac
[  440.329409][    C0] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[  440.329423][    C0] page_type: f5(slab)
[  440.329439][    C0] raw: 00fff00000000000 ffff88813fe2e280 dead000000000100 dead000000000122
[  440.329452][    C0] raw: 0000000000000000 0000000800200020 00000000f5000000 0000000000000000
[  440.329461][    C0] page dumped because: kasan: bad access detected
[  440.329470][    C0] page_owner tracks the page as allocated
[  440.329476][    C0] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xd2cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 22916083211, free_ts 22905974702
[  440.329504][    C0]  post_alloc_hook+0x231/0x280
[  440.329520][    C0]  get_page_from_freelist+0x24ba/0x2540
[  440.329539][    C0]  __alloc_frozen_pages_noprof+0x18d/0x380
[  440.329558][    C0]  allocate_slab+0x77/0x660
[  440.329579][    C0]  refill_objects+0x339/0x3d0
[  440.329598][    C0]  __pcs_replace_empty_main+0x321/0x720
[  440.329612][    C0]  __kmalloc_cache_noprof+0x392/0x660
[  440.329628][    C0]  lookup_or_create_module_kobject+0x75/0x170
[  440.329651][    C0]  module_add_driver+0x79/0x320
[  440.329665][    C0]  bus_add_driver+0x391/0x670
[  440.329682][    C0]  driver_register+0x23a/0x320
[  440.329697][    C0]  usb_register_driver+0x1e4/0x390
[  440.329716][    C0]  do_one_initcall+0x250/0x870
[  440.329730][    C0]  do_initcall_level+0x104/0x190
[  440.329748][    C0]  do_initcalls+0x59/0xa0
[  440.329764][    C0]  kernel_init_freeable+0x2a6/0x3e0
[  440.329781][    C0] page last free pid 1 tgid 1 stack trace:
[  440.329790][    C0]  __free_frozen_pages+0xbc7/0xd30
[  440.329807][    C0]  vfree+0x1d1/0x2f0
[  440.329821][    C0]  tpg_free+0x3aa/0x430
[  440.329838][    C0]  vivid_dev_release+0xc5/0x120
[  440.329857][    C0]  v4l2_device_put+0x81/0xd0
[  440.329874][    C0]  vivid_probe+0x4a4a/0x72b0
[  440.329892][    C0]  platform_probe+0xf9/0x190
[  440.329911][    C0]  really_probe+0x267/0xaf0
[  440.329924][    C0]  __driver_probe_device+0x1ef/0x380
[  440.329945][    C0]  driver_probe_device+0x4f/0x240
[  440.329958][    C0]  __driver_attach+0x34c/0x640
[  440.329978][    C0]  bus_for_each_dev+0x23b/0x2c0
[  440.329994][    C0]  bus_add_driver+0x345/0x670
[  440.330010][    C0]  driver_register+0x23a/0x320
[  440.330024][    C0]  vivid_init+0x561/0x5f0
[  440.330043][    C0]  do_one_initcall+0x250/0x870
[  440.330057][    C0] 
[  440.330061][    C0] Memory state around the buggy address:
[  440.330070][    C0]  ffff8880310ac500: 00 00 00 00 00 00 00 00 00 00 00 00 fc fc fc fc
[  440.330081][    C0]  ffff8880310ac580: 00 00 00 00 00 00 00 00 00 00 00 00 fc fc fc fc
[  440.330092][    C0] >ffff8880310ac600: fa fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc
[  440.330100][    C0]                    ^
[  440.330109][    C0]  ffff8880310ac680: 00 00 00 00 00 00 00 00 00 fc fc fc fc fc fc fc
[  440.330131][    C0]  ffff8880310ac700: 00 00 00 00 00 00 00 00 00 fc fc fc fc fc fc fc
[  440.330139][    C0] ==================================================================
[  440.330193][    C0] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  440.330207][    C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) 
[  440.330225][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  440.330235][    C0] Call Trace:
[  440.330244][    C0]  <IRQ>
[  440.330252][    C0]  vpanic+0x56c/0xa60
[  440.330269][    C0]  ? __pfx_vpanic+0x10/0x10
[  440.330288][    C0]  panic+0xc5/0xd0
[  440.330301][    C0]  ? __pfx_panic+0x10/0x10
[  440.330314][    C0]  ? lockdep_hardirqs_on+0x7a/0x110
[  440.330336][    C0]  ? kmemdup_noprof+0x55/0x70
[  440.330363][    C0]  ? kmemdup_noprof+0x55/0x70
[  440.330384][    C0]  check_panic_on_warn+0x89/0xb0
[  440.330403][    C0]  ? kmemdup_noprof+0x55/0x70
[  440.330424][    C0]  end_report+0x73/0x170
[  440.330444][    C0]  ? kmemdup_noprof+0x55/0x70
[  440.330463][    C0]  kasan_report+0x128/0x150
[  440.330485][    C0]  ? kmemdup_noprof+0x55/0x70
[  440.330509][    C0]  kasan_check_range+0x264/0x2c0
[  440.330529][    C0]  ? kmemdup_noprof+0x55/0x70
[  440.330549][    C0]  __asan_memcpy+0x29/0x70
[  440.330571][    C0]  kmemdup_noprof+0x55/0x70
[  440.330594][    C0]  ax25_send_frame+0x693/0x9f0
[  440.330616][    C0]  ? ax25_send_frame+0x326/0x9f0
[  440.330639][    C0]  rose_t0timer_expiry+0x255/0x560
[  440.330667][    C0]  call_timer_fn+0x192/0x5e0
[  440.330685][    C0]  ? __pfx_rose_t0timer_expiry+0x10/0x10
[  440.330708][    C0]  ? call_timer_fn+0xd4/0x5e0
[  440.330725][    C0]  ? __pfx_call_timer_fn+0x10/0x10
[  440.330747][    C0]  ? _raw_spin_unlock_irq+0x23/0x50
[  440.330768][    C0]  ? __pfx_rose_t0timer_expiry+0x10/0x10
[  440.330792][    C0]  __run_timer_base+0x652/0x8b0
[  440.330817][    C0]  ? ktime_get+0x45/0x220
[  440.330844][    C0]  ? __pfx___run_timer_base+0x10/0x10
[  440.330876][    C0]  run_timer_softirq+0xb7/0x170
[  440.330901][    C0]  handle_softirqs+0x22a/0x840
[  440.330926][    C0]  ? __irq_exit_rcu+0xca/0x220
[  440.330954][    C0]  __irq_exit_rcu+0xca/0x220
[  440.330978][    C0]  irq_exit_rcu+0x9/0x30
[  440.331000][    C0]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  440.331023][    C0]  </IRQ>
[  440.331029][    C0]  <TASK>
[  440.331037][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  440.331056][    C0] RIP: 0010:pv_native_safe_halt+0xf/0x20
[  440.331079][    C0] Code: db 70 02 e9 53 f4 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 13 81 10 00 fb f4 <c3> cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90
[  440.331095][    C0] RSP: 0018:ffffffff8e607dc0 EFLAGS: 00000242
[  440.331112][    C0] RAX: 0000000000110dc7 RBX: ffffffff819aae9a RCX: 0000000080000001
[  440.331133][    C0] RDX: 0000000000000001 RSI: ffffffff8dfd8f45 RDI: ffffffff8c289f60
[  440.331145][    C0] RBP: ffffffff8e607eb0 R08: ffff8880b86339db R09: 1ffff110170c673b
[  440.331158][    C0] R10: dffffc0000000000 R11: ffffed10170c673c R12: 0000000000000000
[  440.331170][    C0] R13: 1ffffffff1cd25d8 R14: 0000000000000000 R15: 1ffffffff1cd25d8
[  440.331186][    C0]  ? do_idle+0x36a/0x5f0
[  440.331208][    C0]  default_idle+0x9/0x20
[  440.331224][    C0]  default_idle_call+0x72/0xb0
[  440.331240][    C0]  do_idle+0x36a/0x5f0
[  440.331257][    C0]  ? asm_sysvec_call_function_single+0x1a/0x20
[  440.331278][    C0]  ? __pfx_do_idle+0x10/0x10
[  440.331299][    C0]  cpu_startup_entry+0x43/0x60
[  440.331317][    C0]  rest_init+0x2de/0x300
[  440.331335][    C0]  start_kernel+0x38a/0x3e0
[  440.331358][    C0]  x86_64_start_reservations+0x24/0x30
[  440.331384][    C0]  x86_64_start_kernel+0x143/0x1c0
[  440.331408][    C0]  common_startup_64+0x13e/0x147
[  440.331436][    C0]  </TASK>
[  440.334452][    C0] Kernel Offset: disabled