last executing test programs:

6.700852057s ago: executing program 3 (id=12503):
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x18, 0x0, &(0x7f0000000080)='GPL\x00', 0x3, 0xffe, &(0x7f0000000cc0)=""/4094, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffb}, 0x94)

5.156342582s ago: executing program 3 (id=12515):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendto$inet6(r0, 0x0, 0x0, 0x800, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)
r1 = socket$isdn_base(0x22, 0x3, 0x0)
bind$isdn_base(r1, &(0x7f0000000200)={0x22, 0xc, 0xc, 0x3, 0xe}, 0x6)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r3 = openat$cgroup_freezer_state(r2, &(0x7f0000000140), 0x2, 0x0)
write$cgroup_freezer_state(r3, 0x0, 0x0)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x1f, 0x2, &(0x7f0000001c40)=ANY=[@ANYBLOB="85000000a800000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00')
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xa, 0x16, &(0x7f0000000f40)=ANY=[@ANYBLOB="611289000000000061134c0000000000bf2000000000000007000000080000002d0301"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94)
unshare(0x26020480)
sendmsg$kcm(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)}, 0x0)
r5 = socket$kcm(0x10, 0x400000002, 0x0)
write$cgroup_subtree(r5, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe000058"], 0xfe33)
mkdirat$cgroup(r2, &(0x7f00000000c0)='syz1\x00', 0x1ff)
mkdirat$cgroup(r2, &(0x7f0000000100)='syz0\x00', 0x1ff)
sendfile(r3, r3, 0x0, 0x9)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)

4.992880201s ago: executing program 1 (id=12517):
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000006, 0x31, 0xffffffffffffffff, 0xd0fb6000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000010c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000740)=0xffffffffffffffff, 0x4)
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000006c0)={r3}, 0x4)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x11, &(0x7f00000008c0)=ANY=[@ANYBLOB="18000000800000000000000001000000850000000f000000b7080000000000007b8af8ff00000000b7080000161300007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000000000085000000a500000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000003f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x15)
r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="1b00000000000000000000000e00000000000000", @ANYRES32=0x1, @ANYBLOB="0b000000000000000000000000000000000000009b109193b618984d9441f9974d39fd03bfd19b09c594892cd1a247cbd30a20bb348fef8a478537ffccd5d7b01c6b429df9b175835f2e24def123d4ea9714dad7053eca99f9a49f2ebe1261974c953a904d82873752a466c6a3aaabac41a981402c3d08ccddbb8713c920e0bf8a33a9088d03b6ec9593c73ec43947b8dde80c3b24f753149d63dad0c0b4632218343375efcc8ebeb0fd32619f44f85720305097", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="01000000ffffffff00"/28], 0x50)
getpeername$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000240)=0x14)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{0x1, <r7=>0xffffffffffffffff}, &(0x7f00000003c0), &(0x7f0000000400)}, 0x20)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000b40)=@bpf_tracing={0x1a, 0x1a, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x8}, [@map_idx={0x18, 0xb, 0x5, 0x0, 0x10}, @printk={@llx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r3}}, @generic={0x0, 0x9, 0xc, 0x3, 0x3}, @map_idx={0x18, 0xb, 0x5, 0x0, 0xe}, @map_idx_val={0x18, 0x3, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8000}, @call={0x85, 0x0, 0x0, 0x6}, @map_val={0x18, 0x7, 0x2, 0x0, r7, 0x0, 0x0, 0x0, 0x6}]}, &(0x7f0000000100)='GPL\x00', 0x9, 0x4f, &(0x7f0000000140)=""/79, 0x40f00, 0xc, '\x00', r6, 0x15, r2, 0x8, &(0x7f0000000800)={0x5, 0x5}, 0x8, 0x10, &(0x7f0000000840)={0x5, 0x2, 0x4, 0x400}, 0x10, 0x2734a, 0xffffffffffffffff, 0x2, &(0x7f0000000880)=[r7, 0xffffffffffffffff, r7], &(0x7f0000000b00)=[{0x3, 0x1, 0x4, 0x4}, {0x0, 0x3, 0xb, 0xb}], 0x10, 0x3}, 0x94)
r8 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000480)={0x0, 0x6, 0x18}, 0xc)
r9 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r9, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r9, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4)
setsockopt$sock_int(r9, 0x1, 0x8, &(0x7f0000000200), 0x4)
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
r11 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x64, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @empty}}}]}, @CTA_TIMEOUT={0x8}]}, 0x64}, 0x1, 0x0, 0x0, 0x40054}, 0x0)
sendmsg$IPCTNL_MSG_CT_DELETE(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x14, 0x2, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040)
r12 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x10000, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3, 0x3}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x2f, &(0x7f0000000980)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@exit, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0xa, 0x0, 0x0, 0x0, 0x4}, @printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}}, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0x3, 0x0, 0x0, 0x0, 0x5}, @cb_func={0x18, 0x6, 0x4, 0x0, 0xfffffffffffffff8}, @ringbuf_query], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000001c0)='syzkaller\x00', 0x80000000, 0xaf, &(0x7f00000002c0)=""/175, 0x0, 0x7a, '\x00', r6, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x5, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f00000004c0)=[r7, r8, r12], &(0x7f00000005c0)=[{0x3, 0x5, 0xc, 0x7}, {0x5, 0x1, 0x1, 0x1}, {0x1, 0x1, 0xa}, {0x0, 0x3, 0xf, 0x2}, {0x1, 0x2, 0x5, 0x9}, {0x4, 0x2, 0xb, 0x6}, {0x0, 0x4, 0x7, 0x1}, {0x4, 0x1, 0xa, 0x8}, {0x0, 0x2, 0x6}, {0x5, 0x1, 0x9, 0x7}], 0x10, 0x7455}, 0x94)
sendmsg$inet(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x22fe0}], 0x1}, 0x0)
recvfrom(r0, &(0x7f0000004000)=""/4112, 0xfffffffffffffedc, 0x2080, 0x0, 0x0)

4.838062138s ago: executing program 1 (id=12519):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000004980)=@newsa={0x138, 0x10, 0x1, 0x0, 0x0, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@remote, 0x0, 0x6c}, @in=@empty, {0x200000000, 0x0, 0x1000000000000007, 0x0, 0x3000000000, 0x0, 0x1000000000000000}, {0x0, 0x4}, {}, 0x70bd2a, 0x0, 0xa, 0x1, 0x6}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}}, 0x20000000)
r3 = accept4(r1, 0x0, 0x0, 0x80000)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r4)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB='ya\x00\x00\x00\x00\x00\x00\x00\x00~\x00', @ANYRES32=0x0, @ANYBLOB="a739df"], 0x1c}}, 0x4000054)
setsockopt(r4, 0x4, 0x4, &(0x7f0000000840)="680614969fcdd69ddb9ed12ead965fe29d151ccb3b45fd965523bf31fdf0912a0ef051af6e39d790de34ff3b8d6f318aa45ec6e604ff9941390bf9fd809134be39445f74474206717c7acc70099e3e4d5183605dd718dd", 0x57)
syz_genetlink_get_family_id$fou(&(0x7f0000000040), r3)
sendmsg$NL80211_CMD_DEL_PMKSA(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x400c1)
r6 = socket$l2tp(0x2, 0x2, 0x73)
bind$inet(r6, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x9, [@typedef={0x3}]}, {0x0, [0x5f, 0x2e, 0x5f, 0x61, 0x2e, 0x5f, 0x2e]}}, 0x0, 0x2d, 0x0, 0x1}, 0x28)
r7 = socket$l2tp(0x2, 0x2, 0x73)
bind$l2tp(r7, &(0x7f00000000c0), 0x10)
sendmsg$NL80211_CMD_SET_STATION(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="400425bd700000"], 0x14}, 0x1, 0x0, 0x0, 0xd0}, 0x4000000)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x4c, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x4c}}, 0x2)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)={0x5c, 0x9, 0x6, 0x801, 0x0, 0x0, {0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0xe1f}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x88}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90)
sendmsg$alg(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000000)="78d8f92dbf64605cdd118f48e23e98c60b7983beb3470e13d6338b8e1a1e", 0x1e}, {&(0x7f0000000080)}, {0x0}, {&(0x7f0000000540)}], 0x4, &(0x7f00000008c0)=[@op={0x9}, @assoc={0x18, 0x117, 0x4, 0x7}, @iv={0x110, 0x117, 0x2, 0xf9, "8b8110794bd4b0ded6bbc7b030ba6e449c2008795eb012745dd99a3e99df47aaeb30d5c1c56a64e6c9b3569ca5a8a3556ce0704724a6674f42e928ccf40dcaa16ee811417a2f66bb7a3a849c43d01a52245589eb5abee9581d2fa168199fcd4aebb081ce5e4a024a933531277f330ac6b7dc67cfedd23593e1195cb75cf877df04f669ad662fe429509ff49167666c20ffaef2027f771e7a580eeeac29911e05e20a7e5b1459c12e5cca1ca6910d5d2d87a05e4c89ebe466ee9c79d2eba559d92bb30d80690a6a062c1a758a520b5b2fcabcc8c7205e679e10e77588b5c1928abe86aee4177dacea28bc56a500d06e9ba3bf1bac50477e2326"}, @op={0x18, 0x117, 0x3, 0x1}], 0x158, 0x80}, 0x4004080)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFULNL_MSG_CONFIG(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000002300)={&(0x7f0000000540)=ANY=[@ANYRES64=r1], 0x40}, 0x1, 0x0, 0x0, 0x20000800}, 0x4000)
sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r9, &(0x7f0000000500)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0x14, 0x4, 0x1, 0x101, 0x0, 0x0, {0x1, 0x0, 0x8}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x44044000)
sendmsg$NL80211_CMD_NEW_KEY(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)={0x14, 0x0, 0x2, 0x70bd23, 0x25dfdbff, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x90)
sendmsg$nl_route_sched(r0, 0x0, 0x0)

4.187143762s ago: executing program 3 (id=12522):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x4, 0xc0000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x3, 0x3}, {0xa, 0xe}, {0x0, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_TUPDATE={0x8, 0x4, 0x1}, @TCA_FQ_PIE_TARGET={0x8, 0x3, 0x4}]}}]}, 0x44}}, 0x20004055)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22e8a65c15}, 0x4008840)
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x300000a, 0x12, r1, 0x852ac000)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x5, &(0x7f00000003c0)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x5, 0xfa, &(0x7f0000000f40)=""/250, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xa}, 0x94)
sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0)

3.847835712s ago: executing program 1 (id=12525):
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x18, 0x0, &(0x7f0000000080)='GPL\x00', 0x3, 0xffe, &(0x7f0000000cc0)=""/4094, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffb}, 0x94)

3.554587224s ago: executing program 0 (id=12526):
syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/ipc\x00')
ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454ca, &(0x7f0000000100)=ANY=[@ANYBLOB='..'])
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0)
syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/ipc\x00')
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f00000017c0)={0x0, 0x0, &(0x7f0000001780)={&(0x7f0000000040)=ANY=[@ANYBLOB="200000001e0001002dbd7000fcdbdf25070000fd"], 0x20}, 0x1, 0x0, 0x0, 0x20008000}, 0x18004)

3.553102991s ago: executing program 3 (id=12527):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$unix(0x1, 0x5, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
r5 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000580)=@base={0xf, 0x4, 0x8, 0x2}, 0x50)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)=ANY=[@ANYRES32=r5, @ANYRES32=r4, @ANYBLOB="070000000000080000000001", @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x10)
close(0x3)
close(r5)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x5, 0x7, 0xb3}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000884)
sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newqdisc={0x48, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r6, {0x10}, {}, {0xfff2, 0x1}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x2, '\x00', 0x9, 0xb9, 0x3, 0xfffffffd}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4040098}, 0x0)
sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0)

3.368557789s ago: executing program 0 (id=12528):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000240)=@o_path={&(0x7f0000000000)='./file0\x00'}, 0x18)
bpf$ITER_CREATE(0x21, &(0x7f0000000280), 0x8)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6b0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)=@o_path={&(0x7f0000000000)='./file0\x00', 0x0, 0x0, r1}, 0x18)
r2 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x8040044}, 0x810)
sendmsg$RDMA_NLDEV_CMD_DELLINK(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)=ANY=[@ANYBLOB="18000000041401002dbd7000fedbdf250800010000000000ba30b28e994c1a08d1ca4eb6b8b4889cdd4e786eb807e0"], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0)
sendmsg$nl_xfrm(r0, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="04010000160001042dbd700000000000ac1e0001000000000000000000000000200100000000000000000000000000010004fffe000000000a00802000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="e00000010000000000000000000000001ffffffe33000000ac14000400000010000000feffffffffffffff08000000000000000600000000000000000008000000000000000000060000000000000000000000000000000000000002000000000000000000080000000000000000000000000004000000000000001c0000000004000003000000feffffff0000000002000000d000000000000000080000008e0000000c008e0008000800010e0000"], 0x104}, 0x1, 0x0, 0x0, 0x8801}, 0x6484c)
r3 = socket$kcm(0x2, 0xa, 0x2)
ioctl$sock_TIOCOUTQ(r3, 0x5411, &(0x7f0000000580))

3.074134704s ago: executing program 0 (id=12529):
r0 = socket(0x2a, 0x2, 0x0)
getsockname$packet(r0, &(0x7f0000000080)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
r2 = socket(0x2a, 0x2, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
setsockopt$sock_int(r0, 0x1, 0x1e, &(0x7f0000000000)=0x1, 0x4)
socket$can_bcm(0x1d, 0x2, 0x2) (async)
r3 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r3, &(0x7f00000005c0), 0x10)
recvmmsg(r3, &(0x7f00000099c0)=[{{0x0, 0x0, 0x0}, 0x4251}, {{0x0, 0x0, &(0x7f0000007040)=[{&(0x7f0000006040)=""/4086, 0x1000}], 0x1}, 0x8000}], 0x3fffffffffffdfc, 0x10002, 0x0) (async)
recvmmsg(r3, &(0x7f00000099c0)=[{{0x0, 0x0, 0x0}, 0x4251}, {{0x0, 0x0, &(0x7f0000007040)=[{&(0x7f0000006040)=""/4086, 0x1000}], 0x1}, 0x8000}], 0x3fffffffffffdfc, 0x10002, 0x0)
sendmsg$can_bcm(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x0, @ANYRES64=0x2710], 0x48}}, 0x0) (async)
sendmsg$can_bcm(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x0, @ANYRES64=0x2710], 0x48}}, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) (async)
r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RELOAD(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYRES32=r4, @ANYRES16=r5, @ANYRES32=r5, @ANYRES32=r1, @ANYRES8=r4, @ANYRES16=r0], 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x20008021)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0xd, 0x20000000ec071, 0xffffffffffffffff, 0x0) (async)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0xd, 0x20000000ec071, 0xffffffffffffffff, 0x0)
getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) (async)
getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x29a83a768e447add) (async)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x29a83a768e447add)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd2d, 0x20000000, {0x0, 0x0, 0x0, r1, {0x5, 0x2}, {}, {0x5, 0xffe0}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_CLASSID={0x8, 0x1, {0x0, 0x1}}, @TCA_FLOWER_FLAGS={0x8, 0x16, 0x2}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x4000000)
r7 = socket$netlink(0x10, 0x3, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r8 = socket(0x10, 0x803, 0x0)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000100)=@req3={0x3, 0x4, 0x10000, 0x4}, 0x1c)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000100), 0x34)
sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async)
sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0)
r9 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x170, 0xffffffff, 0xffffffff, 0x170, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528)
listen(r8, 0xe)
syz_emit_ethernet(0x4e, &(0x7f0000000080)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x9, 0x6, "9e00", 0x18, 0x6, 0xfde3996dcd16970f, @dev={0xfe, 0x80, '\x00', 0x39}, @local, {[], {{0x4e22, 0x4e24, 0x41424344, 0x41424344, 0x1, 0x0, 0x6, 0xc2, 0xfffd, 0x0, 0x3, {[@sack_perm={0x4, 0x2}]}}}}}}}}, 0x0)
socket$inet6(0xa, 0x5, 0x3a) (async)
r10 = socket$inet6(0xa, 0x5, 0x3a)
bind$inet6(r10, &(0x7f0000000180)={0xa, 0x0, 0xfffffffc, @empty, 0xa}, 0x1c)
syz_emit_ethernet(0xae, &(0x7f0000000780)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "00cd04", 0x78, 0x3a, 0xff, @dev={0xfe, 0x80, '\x00', 0x27}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x5a, 0x1, 0x0, 0x2, [{0x3, 0xa, "a78c000005dc808005000000000000003b0c000000ff23732472eefa45ad12499269748e254c1e4a8a8b3f0ab0c430d3be52108ff87e25df3e34060600000000000000dae15084dbaf736bc1e5af0502"}, {0x0, 0x1, "000005000000000026000400"}, {0x5, 0x1, "06aa85616177"}]}}}}}}, 0x0)

2.992387041s ago: executing program 3 (id=12531):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="c40000001900674c2cbd70000000000000000000000000000000000000000000ac1eff0100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0100000000000000000000000000000000000020000000000000000000000000000000000000000000008000000000000000000000000000fcffffffffffffff0000000000000000b0ac00000000000000000000000000000000000000000000000400000000000000000002000000000a00100001"], 0xc4}}, 0x4c050) (async)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r2 = socket$nl_xfrm(0x10, 0x3, 0x6) (async)
pipe(&(0x7f0000000380)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
ppoll(&(0x7f0000000440)=[{r4, 0x40}], 0x1, 0x0, 0x0, 0x0)
write$cgroup_pid(r4, &(0x7f0000000000), 0xffffff98)
write(0xffffffffffffffff, 0x0, 0x0) (async)
r5 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r7=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)={0x28, r6, 0x5, 0x70bd29, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}]]}, 0x28}, 0x1, 0x0, 0x0, 0x200008d5}, 0x0)
close(r3) (async)
sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in=@local, @in6=@private0, 0x0, 0x0, 0x0, 0xffff, 0xa, 0x0, 0x80, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x7, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x407ffffffffffd, 0x800000000000000}}, [@tmpl={0x44, 0x5, [{{@in=@private=0xa010100, 0x800, 0x3c}, 0x0, @in=@broadcast, 0x80000000, 0x3, 0x3}]}]}, 0xfc}}, 0x20000088)
r8 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="034886dd010000000000140000006000000003082f00fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef) (async)
recvfrom$x25(r3, &(0x7f0000000080)=""/233, 0xe9, 0x20, &(0x7f00000003c0), 0x12) (async)
r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x3, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000055000000850000000700000095"], &(0x7f0000000200)='GPL\x00'}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r9, 0x27, 0xe, 0x0, &(0x7f0000000b00)="f8ad48a9cfb10bb2d305bdb462ad", 0x0, 0xfff, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50)

2.819873657s ago: executing program 0 (id=12533):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={<r0=>0xffffffffffffffff})
pselect6(0x40, &(0x7f0000000100), 0x0, &(0x7f0000000240)={0x1f}, 0x0, 0x0)
r1 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803002e000b12d25a80648c2594f90324fc60180c02400a000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmsg$unix(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000200)="e6", 0x1}], 0x1}, 0x2404c001)
recvmsg(r2, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x2)
close(r3)
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x34, 0x24, 0x300, 0xc0000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x3, 0x3}, {0xa, 0xe}, {0x11, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x4, 0x8002}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x20004055)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840)
r4 = socket$netlink(0x10, 0x3, 0x0)
socket$alg(0x26, 0x5, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=ANY=[@ANYBLOB="38000000180001002bbd700000000000020000040000fd0900110000060015000200000014001680100008800c000380"], 0x38}}, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x203, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}]}]}], {0x14}}, 0x68}}, 0x0)
sendmsg$NFT_BATCH(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000080c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELFLOWTABLE={0x2c, 0x18, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x54}}, 0x0)
sendmsg$NFT_MSG_GETRULE(r4, &(0x7f0000000540)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x20, 0x7, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x8}, [@NFTA_RULE_USERDATA={0xb, 0x7, 0x1, 0x0, "4cefbbdb60d91a"}]}, 0x20}, 0x1, 0x0, 0x0, 0x4004}, 0x20000800)
sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0)

2.633434194s ago: executing program 3 (id=12535):
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
writev(0xffffffffffffffff, &(0x7f0000003500)=[{0x0}], 0x1)
openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0xfeffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000080)="0666", 0x0, 0x2, 0x0, 0x80000000}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000001c0)=ANY=[@ANYRESOCT=r0, @ANYRES16=0x0], &(0x7f0000000340)='syzkaller\x00', 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
shutdown(r2, 0x1)
getsockopt$inet_sctp6_SCTP_STATUS(r2, 0x84, 0xe, &(0x7f0000000c80)={0x0, 0x6, 0x7, 0xff, 0x2, 0x7e38, 0x4, 0x88000000, {0x0, @in={{0x2, 0x4e20, @empty}}, 0x100, 0x7, 0x2, 0xb, 0x64c}}, &(0x7f0000000180)=0xb0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
close(0x4)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000580)=ANY=[@ANYBLOB="900100001000130700000000000000000a0101020900000000000000000000002001000000000000000008000000000200003100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac14142800000000000000000000000000000000330000002001000000000000000000000000000203000000000000000100000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600000000000000000000000000000000000000000000000000000000000000023500000a00040000000000000000000c001c00", @ANYRES32, @ANYBLOB="0600000092001400736861310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003002"], 0x190}}, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet6_int(r4, 0x29, 0x5, 0x0, &(0x7f0000000700))
syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00')
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newtaction={0x5c, 0x30, 0xb, 0x5, 0xfffffffe, {}, [{0x48, 0x1, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x5d9, 0x1, 0x20000000, 0x100004, 0x400}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0xf646d5f7286d7fdb}, 0x48000)
unshare(0x6a040000)
ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x6180, 0x0)
r6 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$inet6_udp_int(r6, 0x11, 0x67, &(0x7f0000000040)=0x91, 0x4)
setsockopt$sock_linger(r6, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8)
connect$inet6(r6, &(0x7f0000002140)={0xa, 0x4e25, 0x1, @mcast2, 0x7}, 0x1c)
sendmmsg$inet6(r6, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000)
sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="5800000003060141c914b38328f60c86d220e69c010000000000000000000000000007f480950000000000000073797a300000000005000700000005000100070000000900020069797a3200000000050001000700000009"], 0x58}, 0x1, 0x0, 0x0, 0x24000080}, 0x20000000)
sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a9c000000060a010400000000000000000a0000010900010073797a31000000005c000480580001800b0001007461726765740000480002802c0003009ac420002e2e00b9fdd672bad09dfb78c7699c74e891a0c70000000000000000000000000000000008000240000000000e00010049444c4554494d45520000000900020073797a32"], 0xb0}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040)

2.513348269s ago: executing program 1 (id=12536):
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000300)={@ifindex, 0xffffffffffffffff, 0x1, 0x8}, 0x20)
connect$can_bcm(r0, &(0x7f0000000040), 0x10)
sendmsg$netlink(r0, &(0x7f0000005d80)={&(0x7f0000000100)=@kern={0x1d, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000005cc0)=[{&(0x7f0000000180)=ANY=[], 0x28}, {&(0x7f00000002c0)=ANY=[], 0x10}], 0x2, 0x0, 0x0, 0x200008b0}, 0x40830)

2.40313759s ago: executing program 2 (id=12537):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={0x38, 0x0, 0x7, 0x101, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x5654}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0xa4d1}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x38}}, 0x24000854)

2.304560932s ago: executing program 1 (id=12538):
syz_init_net_socket$netrom(0x6, 0x5, 0x0)
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
r1 = socket(0x10, 0x80003, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'lo\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xb, "0000000b00020400000000000b00"}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x40000)
syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), r1)

2.271980382s ago: executing program 2 (id=12539):
syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
listen(0xffffffffffffffff, 0x9)
sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000"], 0x20, 0x6044}, 0x6)
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r0, 0x0, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000f40)={0x0, 0x0, &(0x7f0000000400)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x0)
r1 = socket(0x10, 0x803, 0x0)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000480)={'tunl0\x00', &(0x7f00000006c0)={'tunl0\x00', <r2=>0x0, 0x8, 0xf07, 0x3, 0x5, {{0xd, 0x4, 0x0, 0x1, 0x34, 0x64, 0x0, 0xb, 0x2f, 0x0, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@end, @noop, @timestamp_addr={0x44, 0x1c, 0xd0, 0x1, 0xe, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x9}, {@broadcast, 0xfd}, {@initdev={0xac, 0x1e, 0xc, 0x0}, 0x7}]}]}}}}})
ioctl$sock_inet6_SIOCDELRT(r1, 0x890c, &(0x7f0000000880)={@remote, @mcast1, @mcast2, 0xe61, 0x9, 0xb9, 0x100, 0x0, 0x0, r2})
sendto(r1, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet6_tcp_buf(r3, 0x6, 0x1c, 0x0, &(0x7f0000000100))
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB], 0x48}}, 0x0)
r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
ioctl$sock_netrom_SIOCADDRT(r4, 0x890b, &(0x7f0000000280)={0x1, @default, @bpq0, 0x1ffff, 'syz0\x00', @default, 0xfffffdba, 0x2, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @default, @default, @default, @bcast, @default]})
socketpair(0x2b, 0xa, 0xb282, &(0x7f0000000000)={<r5=>0xffffffffffffffff})
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r1)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r9=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r8, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
r10 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)={0x11c, 0x2e, 0x1, 0x0, 0x0, "", [@nested={0x4, 0x119}, @nested={0x108, 0x11, 0x0, 0x1, [@nested={0x101, 0xcf, 0x0, 0x1, [@generic="d478b585fcf4962925eb81095dd3d92e983e841d6ef7368187237f5e91a74d57e8aaee05ec6319", @generic="8f3bec68ef62803fe98daf2de4c76a713091d7d093f16995a391c42d5dfc312e9b67f3e831135df00a399b5234733f156436b0ed25721632972efdd7a775655ff99c2abdc650ece6458a5f9db07c36adc6ebcfe60b70e5a54a83041bc8e1c08dc0afd69868eddb1e9634f84ef01b3f9c31b8c76a0e2ac9dba5adc10a3c9a2360cb2fe6e11e9efcaff1b39dd49895a112f947e4923d9b5c428a37b673f33f3ed02d225807d47efe0a590665b49bf5eaa0890c512f2a01eb6713c6b3539790dca05a2632596c591745bbbf4953c0a783a881f8cf755e6c"]}]}]}, 0x11c}], 0x1, 0x0, 0x0, 0x84}, 0x300)
sendmmsg(r10, &(0x7f0000000ec0)=[{{&(0x7f0000000900)=@isdn={0x22, 0x5, 0x5, 0x6, 0x8}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000b40)="096c7d64c99ca66426e6adc1cf82965f3ed59fe43dbcc22934592a6c26c652a3c7e04e19c99864ff2290a63835eaf797e61c8ea745061dd29ef226ceaccbcfb6298f3670ac952ff8be26437b7f93a410302536104049070d074f00e6", 0x5c}, {&(0x7f0000000540)="baf67602da7cb7976d5fa3a811f4ec0152e269313f9f7d78a365bb8a343b652ad5c2ce0233cc52cd620b00271a1034b7f671d807b9873c020e78cd2c", 0x3c}, {&(0x7f0000000bc0)="04de3c43bce6771f729882cf8a24093813747200afc6ecd3b2d264af0afdf3daab3fb68065b0ae79cebd480d6551b4bd9609c76e43aa7bbf5516a43a3c928683d6", 0x41}], 0x3}}, {{&(0x7f0000000c40)=@l2tp={0x2, 0x0, @multicast2, 0x2}, 0x80, &(0x7f0000000d80)=[{&(0x7f0000001fc0)="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", 0x1000}, {&(0x7f0000000cc0)="25469d5b2eb60e5dc1d7cbdc27fdbb3197e3c5046b5515c03cc648e245007f1009e6114cb84f7807b77f7079ada25751cfd9cb7433b23722ba0af70d5b9233dd16d76bb330a677bbfb721bc125de8991f70492bf2a336306af99085bd26d0709eb20fc0d74f68c8345317fad", 0x6c}, {&(0x7f0000000d40)="213f9b66ddebadf0e8c77e5fd480b03e858d575d0ec5", 0x16}], 0x3, &(0x7f0000000dc0)=[{0xa0, 0x119, 0x200, "f132c4fe816d20c6bfa3c0f1e4afc352746099b97fdcfdbf14b7999a86913efb9177733711c6ab3949714fb009b5abaf84ff2de61a7c647dfe047cde0dd472bdaed101552c1770dc463232967b748c67b5ecdbe2d4b246de5fbc1704c72f54afe4cccbaa904fe0a86ed93af311cc97710f5bd04c5c181fc19d1c8745e41bec3d6cc9cb772f732419f6a520"}, {0x50, 0x10a, 0x7, "4b037a7105b962d1803f91da2c1597483bf39d9845a69e703dad3f0660a0e5901b498e6b38356bdf5329696e1551506c7438ad1f4a95b840465d2c8f"}], 0xf0}}], 0x2, 0x24008050)
sendmsg$NL80211_CMD_CONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r8, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
sendmsg$NL80211_CMD_NEW_INTERFACE(r5, &(0x7f0000000440)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000340)={&(0x7f0000000a00)={0x134, r6, 0x20, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @val={0x8, 0x3, r9}, @val={0xc, 0x99, {0xffffff7f, 0x23}}}}, [@mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "913b7e79c1a27e8964a27dac37a8c7189570478bbd3b4b29"}, @NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "2645ae1135aec2adb4e1cfb14278256df1854cf80eb76f3a"}, @NL80211_ATTR_MNTR_FLAGS={0x1c, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "7efd55d5fba44e794fa72263705815005a8841bfd5504134"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}], @NL80211_ATTR_4ADDR={0x5}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MNTR_FLAGS={0x10, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "8110b9ef9efe876c853da800b91e3a73950d3fa2f92854a9"}], @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xc}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_4ADDR={0x5}]}, 0x134}, 0x1, 0x0, 0x0, 0xc084}, 0x10)
recvmmsg(r1, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400})

2.209215089s ago: executing program 1 (id=12540):
socket$inet_icmp_raw(0x2, 0x3, 0x1) (async)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async, rerun: 32)
close(0x4) (async, rerun: 32)
syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00')
unshare(0x6a040000) (async)
r0 = socket$inet(0x2, 0x5, 0x0)
setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5)
setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(0xffffffffffffffff, 0x111, 0x2, 0x0, 0x4) (async, rerun: 32)
connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x3b}}, 0x10) (rerun: 32)

2.032897391s ago: executing program 4 (id=12541):
r0 = socket(0x8, 0x2, 0x2)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), r0)
sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x767734cdc7126e1}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x30, r2, 0x8, 0x70bd27, 0x25dfdbfd, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x80)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r0)

1.88308409s ago: executing program 0 (id=12542):
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (async)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0)
socket(0x11, 0xa, 0x8) (async)
r1 = socket(0x11, 0xa, 0x8)
r2 = socket$kcm(0x2, 0x3, 0x2)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), r1)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast})
recvmsg$can_raw(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000300)=""/4096, 0x1000}], 0x1}, 0x20)
write$tun(r0, &(0x7f0000001800)={@val={0x8, 0x800}, @val={0x3, 0x0, 0x0, 0x0, 0x14}, @ipv4=@generic={{0x5, 0x4, 0x1, 0x2b, 0x8016, 0x68, 0x0, 0x60, 0x67, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast}, "21f3305280f125e6e11a9314b296b53b5d25867c0a8c27b6478984da"}}, 0xfdef) (async)
write$tun(r0, &(0x7f0000001800)={@val={0x8, 0x800}, @val={0x3, 0x0, 0x0, 0x0, 0x14}, @ipv4=@generic={{0x5, 0x4, 0x1, 0x2b, 0x8016, 0x68, 0x0, 0x60, 0x67, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast}, "21f3305280f125e6e11a9314b296b53b5d25867c0a8c27b6478984da"}}, 0xfdef)

1.80044835s ago: executing program 4 (id=12543):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newsa={0x16c, 0x10, 0x713, 0x0, 0x25dfdbfc, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x4e21, 0x2, 0x2, 0x0, 0x0, 0x6c, 0x0, 0xee00}, {@in6=@private1, 0xfe, 0x32}, @in6=@ipv4={'\x00', '\xff\xff', @remote}, {0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x5, 0x543}, {0x7, 0x7fffffffffffffff}, {0x0, 0x0, 0x2000000}, 0x70bd2d, 0x3500, 0xa, 0x4, 0x0, 0x50}, [@algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x60, "210466d38547aa140db90100000000c54222cb7a"}}, @encap={0x1c, 0x4, {0x2, 0x4e24, 0x4e24, @in6=@dev={0xfe, 0x80, '\x00', 0x2e}}}]}, 0x16c}, 0x1, 0x0, 0x0, 0x880}, 0x0)
r2 = socket(0x10, 0x803, 0x0)
bind$netlink(r2, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) (async)
getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r3, 0x1}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x6}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x404c084}, 0x24000040)
r4 = socket$nl_route(0x10, 0x3, 0x0) (async)
r5 = socket(0x1, 0x803, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0) (async)
socket(0x1, 0x803, 0x0) (async)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800e0001006970366772657461700000001800028014000700ff01000000000000000000000000000108000a00", @ANYRES32=r7], 0x54}}, 0x0) (async)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x2, 0x19, &(0x7f0000000400)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x5}, [@tail_call, @cb_func={0x18, 0xb, 0x4, 0x0, 0xfffffffffffffffe}, @cb_func={0x18, 0x2, 0x4, 0x0, 0xffffffffffffffff}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}, @tail_call, @ringbuf_query, @btf_id={0x18, 0x0, 0x3, 0x0, 0x3}, @exit]}, &(0x7f00000000c0)='GPL\x00', 0x1ff, 0x90, &(0x7f0000000500)=""/144, 0x41000, 0x11, '\x00', r7, @fallback=0xd, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x5, 0x1}, 0x8, 0x10, &(0x7f0000000200)={0x5, 0x5, 0x9, 0x40}, 0x10, 0x0, 0xffffffffffffffff, 0x7, &(0x7f0000000300)=[0x1, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000640)=[{0x4, 0x4, 0x2, 0xc}, {0x0, 0x1, 0x7, 0x1}, {0x4, 0x2, 0xb, 0x8}, {0x0, 0x5, 0x0, 0x6}, {0x3, 0x5, 0xc, 0x8}, {0x1, 0x1, 0x6, 0xa}, {0x4, 0x3, 0x10, 0x4}], 0x10, 0x6}, 0x94)
setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f00000005c0)=r8, 0x4) (async)
sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)=@newlink={0x2c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x0, 0x1201}, [@IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x2c}}, 0x0)

1.736324941s ago: executing program 2 (id=12544):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendto$inet6(r0, 0x0, 0x0, 0x800, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)
r1 = socket$isdn_base(0x22, 0x3, 0x0)
bind$isdn_base(r1, &(0x7f0000000200)={0x22, 0xc, 0xc, 0x3, 0xe}, 0x6)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r3 = openat$cgroup_freezer_state(r2, &(0x7f0000000140), 0x2, 0x0)
write$cgroup_freezer_state(r3, 0x0, 0x0)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x1f, 0x2, &(0x7f0000001c40)=ANY=[@ANYBLOB="85000000a800000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00')
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xa, 0x16, &(0x7f0000000f40)=ANY=[@ANYBLOB="611289000000000061134c0000000000bf2000000000000007000000080000002d0301"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94)
unshare(0x26020480)
sendmsg$kcm(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)}, 0x0)
r5 = socket$kcm(0x10, 0x400000002, 0x0)
write$cgroup_subtree(r5, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe000058"], 0xfe33)
mkdirat$cgroup(r2, &(0x7f00000000c0)='syz1\x00', 0x1ff)
mkdirat$cgroup(r2, &(0x7f0000000100)='syz0\x00', 0x1ff)
sendfile(r3, r3, 0x0, 0x9)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)

1.556135201s ago: executing program 4 (id=12545):
r0 = socket$inet6(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'sit0\x00', <r1=>0x0})
ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000080)={@ipv4={'\x00', '\xff\xff', @broadcast}, 0x1f, r1})
r2 = socket$inet6(0xa, 0x5, 0x0)
connect$inet6(r2, &(0x7f0000000240)={0xa, 0x4e22, 0x0, @private1}, 0x1c)
r3 = socket$inet6(0xa, 0x5, 0x0)
bind$inet6(r3, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c)
r4 = socket(0x10, 0x3, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108)
socket$inet_udplite(0x2, 0x2, 0x88)
r5 = socket(0x80000000000000a, 0x2, 0x0)
r6 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$inet6(r3, &(0x7f0000000300)={0xa, 0x4e22, 0x2, @private1, 0x5}, 0x1c)
r7 = socket$inet6(0xa, 0x5, 0x0)
connect$inet6(r7, &(0x7f0000000300)={0xa, 0x4e22, 0x2, @private1, 0x5}, 0x1c)
r8 = socket$inet6(0xa, 0x1, 0x0)
bind$unix(r5, &(0x7f0000000380)=@file={0x1, './file0\x00'}, 0x6e)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r8, 0x29, 0x20, &(0x7f0000000040)={@local, 0x200800, 0x2, 0x2, 0x2, 0xd}, 0x20)
setsockopt$inet6_int(r2, 0x29, 0xb, &(0x7f0000000000)=0x10001, 0x4)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r8, 0x29, 0x20, 0x0, 0x0)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYRES32, @ANYRESDEC=r6, @ANYRES8=r8, @ANYBLOB="05ebf5d4197d178a31f7e0f5", @ANYRES64=0x0, @ANYRES16=r9], 0x7c}, 0x1, 0x0, 0x0, 0x4001}, 0x40080)
sendmsg$NFT_BATCH(r9, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYRESDEC=r5], 0xa0}}, 0x20008000)
recvmsg(r6, &(0x7f0000001900)={&(0x7f0000000780)=@pppol2tpv3in6, 0x80, &(0x7f0000001800), 0x0, &(0x7f00000004c0)=""/144, 0x90}, 0x40000000)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2a, 0x0, 0x0)
r10 = socket$can_j1939(0x1d, 0x2, 0x7)
bind$can_j1939(r10, 0x0, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x89e2, &(0x7f00000000c0)={<r11=>r3})
sendmsg$nl_route(r11, &(0x7f0000000340)={&(0x7f0000000100), 0xc, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="2400000019000801997f7000fbdbdf251c8000fffd025a0500050000fa1a1a00b5f44275f64e2802319605d53a5606000000"], 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x4004044)

1.495902468s ago: executing program 2 (id=12546):
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x18, 0x0, &(0x7f0000000080)='GPL\x00', 0x3, 0xffe, &(0x7f0000000cc0)=""/4094, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffb}, 0x94)

1.192679874s ago: executing program 0 (id=12547):
r0 = socket$netlink(0x10, 0x3, 0x10)
r1 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)={0x30, r3, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x28}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x30}}, 0x0)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4)
r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r4, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0)
r5 = socket$kcm(0x2, 0x200000000000001, 0x106)
sendmsg$inet(r5, &(0x7f0000000000)={&(0x7f0000000140)={0x2, 0x4001, @empty}, 0x10, 0x0}, 0x30006041)
close(r5)

589.069153ms ago: executing program 4 (id=12548):
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
r1 = socket$inet_icmp(0x2, 0x2, 0x1)
getsockopt$inet_mreqn(r1, 0x0, 0x62, 0x0, &(0x7f0000000780))
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x270, 0x0, 0x12, 0x60a, 0xd0, 0x202, 0x1a0, 0x2e8, 0x2e8, 0x1a0, 0x2c0, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0xffffffffffffffff, 0xfc}, {0xffffffffffffffff, 0xf9, 0x6}}}}, {{@ipv6={@private2, @local, [], [], 'vxcan1\x00', 'veth1_to_batadv\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00', 0x0, {0x4}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2d0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001700)={0x6, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000fcffffff850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x47, '\x00', 0x0, @fallback=0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002500)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
r5 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r5, &(0x7f0000000140), 0x10)
sendmsg$can_bcm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0)
sendmsg$can_bcm(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x5, 0x901, 0x0, {}, {0x0, 0x2710}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "d7c139a0d4fe372efa7e8cdba3417665ffb2b92af56c860b29402f8111302ae84c15b9dd43bda8847acbe40605b5ee1c8f0676814afc7e9f0413567e592c7c15"}}, 0x80}, 0x1, 0x0, 0x0, 0x44040}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0x18000000000002a0, 0x146, 0x60000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c)
sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0x1, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r2}]}, @IFLA_IFNAME={0x14, 0x3, 'veth0_to_batadv\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x4010800}, 0x8054)

224.714059ms ago: executing program 4 (id=12549):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r2, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x9, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0xb0260000)
mmap(&(0x7f0000691000/0x4000)=nil, 0x4000, 0x3, 0x28011, r1, 0xc6e9f000)
mmap(&(0x7f0000d8c000/0x1000)=nil, 0x1000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000867000/0x2000)=nil, 0x2000, 0x0, 0x11, r1, 0xffffe000)
mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x7000000, 0x6e073, r2, 0x2000)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000040)={0x0, <r3=>0x0}, 0x8)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xa, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYRES8=r0, @ANYRES16=r0], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c00000010000107fef20000090000000a0000000600010014090000"], 0x1c}}, 0x20008080)
r5 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x68, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xb}, @NFTA_SET_EXPRESSIONS={0x24, 0x12, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0x80}]}}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x130}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x90}, 0x1, 0x0, 0x0, 0x4044050}, 0x40)
r7 = socket(0x10, 0x3, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r7)
getsockname$packet(r7, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
accept$unix(r7, &(0x7f0000000080), 0x0)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0)
writev(r8, &(0x7f0000003b00)=[{&(0x7f0000000580)="c24e", 0x2}], 0x1)
mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x100000c, 0x11, r8, 0x0)
sendmsg$RDMA_NLDEV_CMD_SYS_SET(r7, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x900}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x24, 0x1407, 0x20, 0x70bd2a, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz1\x00'}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r8}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x2880)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000660000000000"], 0x0, 0x7ff}, 0x94)
socket$packet(0x11, 0x2, 0x300)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

222.092254ms ago: executing program 2 (id=12550):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000071000100000000000000000007000000", @ANYBLOB="0c000180080001000300010020"], 0x44}}, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(fcrypt)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="415b7ac700000000", 0x8)
r1 = accept(r0, 0x0, 0x0)
sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x20000004)
recvmsg(r1, &(0x7f000000b680)={0x0, 0x0, &(0x7f000000b600)=[{&(0x7f000000b4c0)=""/5, 0x5}], 0x1}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x50}}, 0x0)
r2 = socket(0x10, 0x3, 0x0)
sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0x0)

75.131092ms ago: executing program 2 (id=12551):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
setsockopt$netrom_NETROM_N2(r3, 0x103, 0x3, &(0x7f0000000540)=0x3, 0x4)
unshare(0x22020600)
r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x11, &(0x7f0000000980)=ANY=[@ANYRESDEC=r0, @ANYRES8, @ANYBLOB="0000000000000000b70500000800000085000000a70000009500000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000006c0)={r4, &(0x7f0000000580)="2a8517885cd3a11e3633cd5963562a8a372436e32c3d3e6a2c53ce22eb1f5a148efe0a87bd85bd2e3e553e5bb7a7a450370d88a212f195a19f3cbf218bd3a7fba36ce55a90a6867c1ddd98527db20c388156df38e4cda9559380a6af1bfc5028e80f63300e9098323e1366c0729837a92b8b630dd15ee808a2322869f8c478eff77f9b4de1a3cbb0657fa601f06e6abc2c5991b253984203280bdfdd0d054e0b0f88bb7f775ec3fec61d4e95d72c3989e2208ea6c3e7909aadd2c887ec2d63ca4e38b935db99ea1b4a277a882b9e7810717f9ec9e103c1d5b6160be9af1fade1516915162dc00ee542737e279c8a7b0b8336391dce27d3ec", &(0x7f0000000680)=@tcp}, 0x20)
r5 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4)
shutdown(r2, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={<r6=>0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10)
r7 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_int(r7, 0x29, 0x21, 0x0, 0x0)
connect$inet6(r7, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty, 0xc70}, 0x1c)
r8 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r8, 0x8933, &(0x7f0000000080)={'team0\x00', <r9=>0x0})
r10 = syz_genetlink_get_family_id$team(&(0x7f0000000100), 0xffffffffffffffff)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TEAM_CMD_OPTIONS_SET(r11, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010000000000fedbdf250100000008000100", @ANYRES32=r9, @ANYBLOB="4400028040000100240001007072696f726974790000000000000000000000006e0001000000000000000000050003000e"], 0x60}, 0x1, 0x0, 0x0, 0xc004}, 0x0)
sendmsg$sock(r7, &(0x7f0000000280)={&(0x7f0000000040)=@in6={0xa, 0x4e21, 0x0, @empty, 0x5}, 0x80, 0x0}, 0x8000)
getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f00000000c0)={r6, 0x9}, &(0x7f0000000100)=0x8)
bind$bt_l2cap(r1, &(0x7f00000007c0)={0x1f, 0x7b, @none, 0x2, 0x1}, 0xe)
r12 = socket$inet6_sctp(0xa, 0x801, 0x84)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r12, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x3}, 0x8)
sendmmsg$inet6(r12, &(0x7f0000001ac0)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x2e1, @private1, 0x7}, 0x1c, &(0x7f00000003c0)=[{&(0x7f0000000080)="f8", 0x1}], 0x1}}], 0x1, 0x8000)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r12, 0x84, 0x7c, &(0x7f0000000380)={0x0, 0x1}, 0x8)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2)
socket$nl_netfilter(0x10, 0x3, 0xc)

0s ago: executing program 4 (id=12552):
r0 = socket$l2tp(0x2, 0x2, 0x73)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vcan0\x00'})
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xf}, {0xe, 0xd}}, [@TCA_RATE={0x4, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x4000c00)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000b80)=ANY=[], 0x50)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="400000000203010100000000000000ffffff7f000800034000000000080004400000000008000540000000000900020000000000070000000800010001"], 0x40}}, 0x0)

kernel console output (not intermixed with test programs):

ing over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1713.089768][T26724] batman_adv: batadv0: Not using interface macvtap1 (retrying later): interface not active
[ 1713.101144][T26712] wg1 speed is unknown, defaulting to 1000
[ 1713.172100][T26712] lo speed is unknown, defaulting to 1000
[ 1713.401685][T26731] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.11438'.
[ 1713.448600][T26736] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11440'.
[ 1713.723365][T26744] netlink: 212336 bytes leftover after parsing attributes in process `syz.4.11444'.
[ 1713.767594][T26742] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1713.777312][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1713.807298][T26742] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1713.816119][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1713.825020][T26745] netlink: 67 bytes leftover after parsing attributes in process `syz.2.11443'.
[ 1713.957870][T26749] vlan2: entered allmulticast mode
[ 1713.967321][T26749] veth0_to_bond: entered allmulticast mode
[ 1714.023091][T26749] batman_adv: batadv0: Adding interface: vlan2
[ 1714.032448][T26749] batman_adv: batadv0: The MTU of interface vlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1714.086457][T26749] batman_adv: batadv0: Not using interface vlan2 (retrying later): interface not active
[ 1714.114843][T26752] tipc: Enabled bearer <eth:geneve1>, priority 10
[ 1714.605640][T26781] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11454'.
[ 1714.723780][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5780 ms
[ 1714.731849][    C1] lec:lec_tx_timeout: lec0
[ 1714.737383][    C1] lec:lec_start_xmit: lec0:No lecd attached
[ 1714.783143][T26789] netlink: 104 bytes leftover after parsing attributes in process `syz.1.11457'.
[ 1714.801378][T26789] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11457'.
[ 1714.925433][T26792] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11458'.
[ 1714.962952][T26799] netlink: 16 bytes leftover after parsing attributes in process `syz.0.11461'.
[ 1714.997133][T26799] bond0: entered promiscuous mode
[ 1715.015374][T26803] netlink: 16 bytes leftover after parsing attributes in process `syz.0.11461'.
[ 1715.048798][T26799] gretap0: entered promiscuous mode
[ 1715.071398][T26799] debugfs: 'hsr1' already exists in 'hsr'
[ 1715.099593][T26799] Cannot create hsr debugfs directory
[ 1715.111965][T26799] hsr1: entered promiscuous mode
[ 1715.319906][T26819] netlink: 'syz.1.11464': attribute type 1 has an invalid length.
[ 1715.461818][T26819] 8021q: adding VLAN 0 to HW filter on device bond5
[ 1715.543563][T26819] veth5: entered promiscuous mode
[ 1715.554083][T26819] bond5: (slave veth5): Enslaving as an active interface with a down link
[ 1715.568745][T26814] erspan0: entered allmulticast mode
[ 1715.592106][T26814] bond5: (slave erspan0): making interface the new active one
[ 1715.607286][T26814] erspan0: entered promiscuous mode
[ 1715.617274][T26814] bond5: (slave erspan0): Enslaving as an active interface with an up link
[ 1715.653229][T26819] bond5: (slave vlan3): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[ 1715.731446][T26833] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[ 1715.845865][T26845] netlink: 52 bytes leftover after parsing attributes in process `syz.1.11473'.
[ 1716.942816][T26880] netlink: 'syz.0.11482': attribute type 10 has an invalid length.
[ 1716.975274][T26880] team0: Failed to send options change via netlink (err -105)
[ 1716.994433][T26880] team0: Port device dummy0 added
[ 1717.005882][T26885] netlink: 'syz.0.11482': attribute type 10 has an invalid length.
[ 1717.011452][T26884] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1717.022729][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1717.039077][T26885] team0: Failed to send port change of device dummy0 via netlink (err -105)
[ 1717.106753][T26885] team0: Failed to send options change via netlink (err -105)
[ 1717.151529][T26885] team0: Failed to send port change of device dummy0 via netlink (err -105)
[ 1717.192876][T26885] team0: Port device dummy0 removed
[ 1717.238487][T26885] dummy0: entered promiscuous mode
[ 1717.258393][T26885] bond0: (slave dummy0): Enslaving as an active interface with an up link
[ 1717.816467][T26915] openvswitch: netlink: Either Ethernet header or EtherType is required.
[ 1717.881546][T26917] lo: Caught tx_queue_len zero misconfig
[ 1718.069242][T26923] syzkaller0: entered promiscuous mode
[ 1718.080485][T26927] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1718.089555][T26923] syzkaller0: entered allmulticast mode
[ 1718.117085][T26927] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1718.480598][T26941] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 1718.530523][T26941] __nla_validate_parse: 6 callbacks suppressed
[ 1718.530546][T26941] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11500'.
[ 1718.580000][T26945] netlink: 76 bytes leftover after parsing attributes in process `syz.1.11501'.
[ 1718.618015][T26941] syzkaller1: entered allmulticast mode
[ 1718.632666][T26949] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1718.672902][T26950] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11503'.
[ 1718.682970][T26947] netlink: 'syz.2.11502': attribute type 13 has an invalid length.
[ 1718.693674][T26947] gretap0: refused to change device tx_queue_len
[ 1718.702062][T26947] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[ 1718.896081][T26961] IPv6: NLM_F_CREATE should be specified when creating new route
[ 1718.954535][T26960] tc_dump_action: action bad kind
[ 1719.450887][T26975] netlink: 'syz.2.11508': attribute type 1 has an invalid length.
[ 1719.629483][T26982] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11511'.
[ 1719.738403][T26985] syzkaller0: entered promiscuous mode
[ 1719.762241][T26985] syzkaller0: entered allmulticast mode
[ 1719.775403][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5030 ms
[ 1719.783467][    C1] lec:lec_tx_timeout: lec0
[ 1719.788468][    C1] lec:lec_start_xmit: lec0:No lecd attached
[ 1719.889350][T26965] netlink: 16 bytes leftover after parsing attributes in process `syz.0.11504'.
[ 1719.924190][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1719.934664][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1720.240378][T26995] netlink: 'syz.1.11515': attribute type 8 has an invalid length.
[ 1720.253069][T27000] netlink: 24 bytes leftover after parsing attributes in process `syz.2.11514'.
[ 1720.272709][T26995] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11515'.
[ 1720.443540][T27011] netlink: 184 bytes leftover after parsing attributes in process `syz.2.11520'.
[ 1720.458657][T27005] netlink: 28 bytes leftover after parsing attributes in process `syz.3.11518'.
[ 1720.484280][T27011] netlink: 184 bytes leftover after parsing attributes in process `syz.2.11520'.
[ 1720.536253][T27018] netlink: 'syz.1.11522': attribute type 1 has an invalid length.
[ 1720.604730][T27018] netlink: 'syz.1.11522': attribute type 2 has an invalid length.
[ 1720.612700][T27018] netlink: 'syz.1.11522': attribute type 1 has an invalid length.
[ 1721.378504][T27058] netlink: 'syz.0.11535': attribute type 1 has an invalid length.
[ 1721.448349][T27063] netlink: 'syz.1.11536': attribute type 12 has an invalid length.
[ 1721.457836][T27064] netlink: 'syz.2.11537': attribute type 6 has an invalid length.
[ 1721.494294][T27067] netlink: 'syz.2.11537': attribute type 6 has an invalid length.
[ 1721.691622][T27076] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1721.700494][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1722.671406][T27119] xt_TPROXY: Can be used only with -p tcp or -p udp
[ 1722.759369][T27086] wg1 speed is unknown, defaulting to 1000
[ 1722.835654][T27086] lo speed is unknown, defaulting to 1000
[ 1723.324722][T27139] Set syz0 is full, maxelem 0 reached
[ 1723.460460][T27142] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1723.481102][T27142] syzkaller0: entered promiscuous mode
[ 1723.497969][T27142] syzkaller0: entered allmulticast mode
[ 1723.543181][T27142] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[ 1723.671599][T27142] tipc: Resetting bearer <eth:syzkaller0>
[ 1723.700920][T27141] tipc: Resetting bearer <eth:syzkaller0>
[ 1723.762285][T27141] tipc: Disabling bearer <eth:syzkaller0>
[ 1724.035936][T27153] __nla_validate_parse: 12 callbacks suppressed
[ 1724.035961][T27153] netlink: 32 bytes leftover after parsing attributes in process `syz.3.11556'.
[ 1724.326817][T27162] netlink: 40 bytes leftover after parsing attributes in process `syz.3.11560'.
[ 1724.805045][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[ 1724.813154][    C1] lec:lec_tx_timeout: lec0
[ 1724.817908][    C1] lec:lec_start_xmit: lec0:No lecd attached
[ 1724.935589][T27201] netlink: 165 bytes leftover after parsing attributes in process `syz.0.11572'.
[ 1725.129511][T27208] netlink: 44 bytes leftover after parsing attributes in process `syz.4.11573'.
[ 1725.157173][T27208] netlink: 35 bytes leftover after parsing attributes in process `syz.4.11573'.
[ 1725.179623][T27208] netlink: 'syz.4.11573': attribute type 6 has an invalid length.
[ 1725.203787][T27208] netlink: 'syz.4.11573': attribute type 5 has an invalid length.
[ 1725.262617][T27208] netlink: 35 bytes leftover after parsing attributes in process `syz.4.11573'.
[ 1725.295923][T27213] netlink: 32 bytes leftover after parsing attributes in process `syz.0.11576'.
[ 1725.307656][T27208] netlink: 'syz.4.11573': attribute type 4 has an invalid length.
[ 1725.644356][T27226] netlink: 16 bytes leftover after parsing attributes in process `syz.0.11579'.
[ 1726.523055][T27260] openvswitch: netlink: Unknown key attributes 2
[ 1726.786345][T27233] wg1 speed is unknown, defaulting to 1000
[ 1726.802847][T27233] lo speed is unknown, defaulting to 1000
[ 1726.879434][T27267] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11588'.
[ 1727.008493][T14028] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 1727.026065][T14028] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 1727.046768][T14028] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 1727.055284][T14028] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 1727.063120][T14028] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 1727.895951][T27297] netlink: 64 bytes leftover after parsing attributes in process `syz.0.11596'.
[ 1728.092777][T27271] wg1 speed is unknown, defaulting to 1000
[ 1728.154516][T27302] validate_nla: 1 callbacks suppressed
[ 1728.154537][T27302] netlink: 'syz.0.11597': attribute type 1 has an invalid length.
[ 1728.197777][T27271] lo speed is unknown, defaulting to 1000
[ 1728.199632][T28811] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 20000 - 0
[ 1728.408126][ T1990] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 20000 - 0
[ 1728.613050][ T7436] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 20000 - 0
[ 1728.722268][ T1990] netdevsim netdevsim3 eth4: set [1, 0] type 2 family 0 port 20000 - 0
[ 1728.822755][ T7418] batadv3: left allmulticast mode
[ 1728.834416][ T7418] batadv3: left promiscuous mode
[ 1728.845762][ T7418] bridge0: port 4(batadv3) entered disabled state
[ 1728.870035][ T7418] batadv2: left allmulticast mode
[ 1728.876515][ T7418] batadv2: left promiscuous mode
[ 1728.887448][ T7418] bridge0: port 3(batadv2) entered disabled state
[ 1728.905554][ T7418] batadv1: left allmulticast mode
[ 1728.945504][ T7418] batadv1: left promiscuous mode
[ 1728.950717][ T7418] bridge0: port 2(batadv1) entered disabled state
[ 1728.986653][ T7418] team0: left allmulticast mode
[ 1728.991667][ T7418] team_slave_1: left allmulticast mode
[ 1729.012380][ T7418] bridge6: left allmulticast mode
[ 1729.023464][ T7418] bridge7: left allmulticast mode
[ 1729.028917][ T7418] team0: left promiscuous mode
[ 1729.034390][ T7418] team_slave_1: left promiscuous mode
[ 1729.044077][ T7418] bridge6: left promiscuous mode
[ 1729.058866][ T7418] bridge7: left promiscuous mode
[ 1729.074804][ T7418] bridge0: port 1(team0) entered disabled state
[ 1729.125490][T14028] Bluetooth: hci0: command tx timeout
[ 1729.586832][ T7418] bond0 (unregistering): (slave gretap1): Releasing backup interface
[ 1729.780549][ T7418] bond3 (unregistering): (slave bridge1): Releasing backup interface
[ 1729.843840][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms
[ 1729.851951][    C1] lec:lec_tx_timeout: lec0
[ 1729.857161][    C1] lec:lec_start_xmit: lec0:No lecd attached
[ 1730.133374][ T7418] team0: Port device bridge6 removed
[ 1730.203064][ T7418] team0: Port device bridge7 removed
[ 1730.492546][ T7418] bond9 (unregistering): (slave bridge12): Releasing backup interface
[ 1730.501338][ T7418] bridge12 (unregistering): left promiscuous mode
[ 1730.807630][ T7418] bond1 (unregistering): (slave dummy0): Releasing active interface
[ 1730.822074][ T7418] bond1 (unregistering): Released all slaves
[ 1730.841988][ T7418] bond0 (unregistering): Released all slaves
[ 1730.860119][ T7418] bond2 (unregistering): Released all slaves
[ 1730.878601][ T7418] bond3 (unregistering): Released all slaves
[ 1731.085157][ T7418] bond4 (unregistering): Released all slaves
[ 1731.205605][T14028] Bluetooth: hci0: command tx timeout
[ 1731.295531][ T7418] bond5 (unregistering): Released all slaves
[ 1731.313709][ T7418] bond6 (unregistering): Released all slaves
[ 1731.332069][ T7418] bond7 (unregistering): Released all slaves
[ 1731.358353][ T7418] bond8 (unregistering): Released all slaves
[ 1731.550887][ T7418] bond9 (unregistering): Released all slaves
[ 1731.569867][ T7418] bond10 (unregistering): Released all slaves
[ 1731.616753][T27285] wg1 speed is unknown, defaulting to 1000
[ 1731.721437][T27285] lo speed is unknown, defaulting to 1000
[ 1732.024855][ T1990] erspan0: left promiscuous mode
[ 1732.202066][T27302] wg1 speed is unknown, defaulting to 1000
[ 1732.208967][T27271] chnl_net:caif_netlink_parms(): no params data found
[ 1732.237787][T27302] lo speed is unknown, defaulting to 1000
[ 1732.358916][T27325] __nla_validate_parse: 2 callbacks suppressed
[ 1732.358940][T27325] netlink: 20 bytes leftover after parsing attributes in process `syz.1.11601'.
[ 1732.562148][T27330] A link change request failed with some changes committed already. Interface ������ may have been left with an inconsistent configuration, please check.
[ 1732.924899][T27271] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1732.948514][T27271] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1732.966488][T27341] netlink: 16 bytes leftover after parsing attributes in process `syz.1.11603'.
[ 1732.976493][T27341] netlink: 108 bytes leftover after parsing attributes in process `syz.1.11603'.
[ 1732.986299][T27341] netlink: 16 bytes leftover after parsing attributes in process `syz.1.11603'.
[ 1732.990925][T27271] bridge_slave_0: entered allmulticast mode
[ 1733.022063][T27271] bridge_slave_0: entered promiscuous mode
[ 1733.052440][T27271] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1733.060072][T27271] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1733.071698][T27271] bridge_slave_1: entered allmulticast mode
[ 1733.089522][T27271] bridge_slave_1: entered promiscuous mode
[ 1733.285047][ T5829] Bluetooth: hci0: command tx timeout
[ 1733.301969][T27271] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1733.366118][T27271] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1733.452431][T27362] netlink: 14593 bytes leftover after parsing attributes in process `syz.4.11606'.
[ 1733.647168][ T7418] tipc: Disabling bearer <udp:syz2>
[ 1733.663158][ T7418] tipc: Left network mode
[ 1733.702868][T27271] team0: Port device team_slave_0 added
[ 1733.771260][T27271] team0: Port device team_slave_1 added
[ 1733.859891][T27369] netlink: 56 bytes leftover after parsing attributes in process `syz.2.11607'.
[ 1733.906033][T27271] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1733.913039][T27271] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1733.943257][T27271] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1734.098293][T27271] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1734.108448][T27271] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1734.143119][T27271] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1734.450279][T27271] hsr_slave_0: entered promiscuous mode
[ 1734.497107][T27271] hsr_slave_1: entered promiscuous mode
[ 1734.516150][T27271] debugfs: 'hsr0' already exists in 'hsr'
[ 1734.525087][T27271] Cannot create hsr debugfs directory
[ 1734.864029][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[ 1734.872123][    C1] lec:lec_tx_timeout: lec0
[ 1734.877945][    C1] lec:lec_start_xmit: lec0:No lecd attached
[ 1734.936623][T27410] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1734.945614][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1734.996038][T27413] netlink: 'syz.4.11617': attribute type 1 has an invalid length.
[ 1735.173568][T27413] bond2: entered promiscuous mode
[ 1735.201796][T27413] 8021q: adding VLAN 0 to HW filter on device bond2
[ 1735.284295][T27413] netlink: 32 bytes leftover after parsing attributes in process `syz.4.11617'.
[ 1735.336148][T27417] 8021q: adding VLAN 0 to HW filter on device bond2
[ 1735.363943][ T5829] Bluetooth: hci0: command 0x0419 tx timeout
[ 1735.375136][T27417] bond2: (slave wireguard0): The slave device specified does not support setting the MAC address
[ 1735.443511][T27417] bond2: (slave wireguard0): Setting fail_over_mac to active for active-backup mode
[ 1735.516601][T27417] bond2: (slave wireguard0): making interface the new active one
[ 1735.550090][T27417] wireguard0: entered promiscuous mode
[ 1735.573021][T27417] bond2: (slave wireguard0): Enslaving as an active interface with an up link
[ 1736.015721][ T7418] hsr_slave_0: left promiscuous mode
[ 1736.026751][ T7418] hsr_slave_1: left promiscuous mode
[ 1736.033142][ T7418] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1736.046359][ T7418] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1736.065564][T27444] netlink: set zone limit has 4 unknown bytes
[ 1736.680004][ T7418] team0 (unregistering): Port device team_slave_1 removed
[ 1737.444079][ T5829] Bluetooth: hci0: command 0x0419 tx timeout
[ 1737.498458][T27271] netdevsim netdevsim3 eth4 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[ 1737.660501][T27460] xt_CT: No such helper "snmp_trap"
[ 1737.667131][T27271] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[ 1737.821470][T27271] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[ 1737.912325][T27271] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[ 1738.073345][T27419] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[ 1738.385005][T27472] netlink: 'syz.0.11629': attribute type 4 has an invalid length.
[ 1738.395278][T27478] sctp: [Deprecated]: syz.1.11630 (pid 27478) Use of int in max_burst socket option.
[ 1738.395278][T27478] Use struct sctp_assoc_value instead
[ 1738.401313][T27271] netdevsim netdevsim3 netdevsim0: renamed from eth0
[ 1738.443110][T27474] netlink: 'syz.0.11629': attribute type 4 has an invalid length.
[ 1738.559746][T27271] netdevsim netdevsim3 netdevsim1: renamed from eth1
[ 1738.619991][T27489] netlink: 52 bytes leftover after parsing attributes in process `syz.4.11632'.
[ 1738.630152][T27271] netdevsim netdevsim3 netdevsim2: renamed from eth2
[ 1738.676409][T27478] netlink: 256 bytes leftover after parsing attributes in process `syz.1.11630'.
[ 1738.731008][T27489] bridge0: entered allmulticast mode
[ 1738.740016][T27494] batadv3: left allmulticast mode
[ 1738.758170][T27494] batadv3: left promiscuous mode
[ 1738.773497][T27494] bridge0: port 3(batadv3) entered disabled state
[ 1738.802595][T27494] bridge_slave_1: left promiscuous mode
[ 1738.811713][T27494] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1738.827018][T27494] bridge_slave_0: left allmulticast mode
[ 1738.835841][T27494] bridge_slave_0: left promiscuous mode
[ 1738.841825][T27494] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1738.924058][T27493] netlink: 'syz.2.11631': attribute type 29 has an invalid length.
[ 1738.934748][T27485] netlink: 'syz.2.11631': attribute type 29 has an invalid length.
[ 1738.953928][T27271] netdevsim netdevsim3 netdevsim3: renamed from eth3
[ 1739.165625][T27509] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11634'.
[ 1739.407117][T27518] syzkaller0: entered promiscuous mode
[ 1739.412650][T27518] syzkaller0: entered allmulticast mode
[ 1739.579749][T27523] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11636'.
[ 1739.616897][T27527] bond6: option ad_select: invalid value (34)
[ 1739.633401][T27527] bond6 (unregistering): Released all slaves
[ 1739.861363][T27490] wg1 speed is unknown, defaulting to 1000
[ 1739.882036][ T7418] IPVS: stop unused estimator thread 0...
[ 1739.897145][T27271] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1739.904271][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms
[ 1739.904330][    C1] lec:lec_tx_timeout: lec0
[ 1739.917258][    C1] lec:lec_start_xmit: lec0:No lecd attached
[ 1739.986468][T27490] lo speed is unknown, defaulting to 1000
[ 1740.081618][T27271] 8021q: adding VLAN 0 to HW filter on device team0
[ 1740.150025][T28792] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1740.157265][T28792] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1740.351162][T28792] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1740.358442][T28792] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1740.546013][T27553] mac80211_hwsim hwsim105 wlan1: left promiscuous mode
[ 1741.031397][T27573] netlink: 64 bytes leftover after parsing attributes in process `syz.1.11647'.
[ 1741.053194][T27577] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11646'.
[ 1741.120329][T27570] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11646'.
[ 1741.562885][T27594] bond6: option lacp_active: mode dependency failed, not supported in mode balance-rr(0)
[ 1741.580810][T27594] bond6 (unregistering): Released all slaves
[ 1741.726202][T27271] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1741.922457][T27271] veth0_vlan: entered promiscuous mode
[ 1741.982828][T27271] veth1_vlan: entered promiscuous mode
[ 1742.133109][T27271] veth0_macvtap: entered promiscuous mode
[ 1742.173599][T27271] veth1_macvtap: entered promiscuous mode
[ 1742.297395][T27271] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1742.348440][T27271] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1742.432007][ T7421] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1742.489247][ T7421] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1742.529540][ T7421] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1742.557311][ T7421] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1743.084154][T27661] netlink: 'syz.2.11660': attribute type 2 has an invalid length.
[ 1743.109837][T27661] hmac(sha224): entered promiscuous mode
[ 1744.243097][T27583] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[ 1744.510082][T28792] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1744.527205][T28792] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1744.636508][T27702] xt_ecn: cannot match TCP bits for non-tcp packets
[ 1744.653545][T27704] xt_ecn: cannot match TCP bits for non-tcp packets
[ 1744.933817][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms
[ 1744.941940][    C1] lec:lec_tx_timeout: lec0
[ 1744.947353][    C1] lec:lec_start_xmit: lec0:No lecd attached
[ 1744.955909][T27717] netlink: 'syz.1.11669': attribute type 1 has an invalid length.
[ 1745.243496][T27728] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11673'.
[ 1747.817190][ T7421] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1747.827950][T27717] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR
[ 1747.843937][ T7421] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1747.880952][T27728] gretap3: entered promiscuous mode
[ 1748.069738][T27737] xt_CHECKSUM: unsupported CHECKSUM operation 68
[ 1748.090718][T27737] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1748.100826][T27737] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1748.121724][T27737] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1748.142255][T27739] netlink: 'syz.4.11676': attribute type 6 has an invalid length.
[ 1748.155580][T27737] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1748.195251][T27737] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1748.220363][T27737] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1748.293141][T27747] netlink: 'syz.0.11677': attribute type 3 has an invalid length.
[ 1748.329010][T27737] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1748.350287][T27747] mac80211_hwsim hwsim108 wlan1: entered allmulticast mode
[ 1748.362279][T27752] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11679'.
[ 1748.407051][T27752] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1748.434252][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1748.524475][T27752] bridge_slave_0 (unregistering): left allmulticast mode
[ 1748.544187][T27752] bridge_slave_0 (unregistering): left promiscuous mode
[ 1748.553574][T27752] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1748.649778][T27746] mac80211_hwsim hwsim108 wlan1: left allmulticast mode
[ 1748.713994][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1748.722735][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1748.912447][T27768] netlink: 16 bytes leftover after parsing attributes in process `syz.3.11683'.
[ 1748.924457][T27767] netlink: 16 bytes leftover after parsing attributes in process `syz.3.11683'.
[ 1748.958007][T27764] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1749.051123][T27764] syzkaller0: entered promiscuous mode
[ 1749.060112][T27764] syzkaller0: entered allmulticast mode
[ 1749.067130][T27764] tipc: Resetting bearer <eth:syzkaller0>
[ 1749.085571][T27734] wg1 speed is unknown, defaulting to 1000
[ 1749.118839][T27734] lo speed is unknown, defaulting to 1000
[ 1749.144376][T27762] tipc: Resetting bearer <eth:syzkaller0>
[ 1750.726403][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5780 ms
[ 1750.734536][    C1] lec:lec_tx_timeout: lec0
[ 1750.739598][    C1] lec:lec_start_xmit: lec0:No lecd attached
[ 1751.915565][T27762] tipc: Disabling bearer <eth:syzkaller0>
[ 1751.946607][T27738] wg1 speed is unknown, defaulting to 1000
[ 1751.955797][ T1209] tipc: Node number set to 2692960287
[ 1752.027685][T27738] lo speed is unknown, defaulting to 1000
[ 1752.665911][T27769] wg1 speed is unknown, defaulting to 1000
[ 1752.670464][T27791] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11689'.
[ 1752.681846][T27790] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11689'.
[ 1752.725597][T27769] lo speed is unknown, defaulting to 1000
[ 1753.282653][T27799] dvmrp6: entered allmulticast mode
[ 1753.310487][T27788] wg1 speed is unknown, defaulting to 1000
[ 1753.410031][T27788] lo speed is unknown, defaulting to 1000
[ 1754.458190][T27813] syzkaller1: entered promiscuous mode
[ 1754.475578][T27813] syzkaller1: entered allmulticast mode
[ 1754.526429][T27823] can: request_module (can-proto-0) failed.
[ 1754.656886][T27804] wg1 speed is unknown, defaulting to 1000
[ 1754.741215][T27804] lo speed is unknown, defaulting to 1000
[ 1754.902338][T27834] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11698'.
[ 1754.960429][T27838] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11699'.
[ 1754.970629][T27838] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11699'.
[ 1755.107390][T27844] netlink: 20 bytes leftover after parsing attributes in process `syz.3.11699'.
[ 1755.122409][T27835] bridge3: port 1(ip6gretap1) entered blocking state
[ 1755.165161][T27835] bridge3: port 1(ip6gretap1) entered disabled state
[ 1755.183365][T27835] ip6gretap1: entered allmulticast mode
[ 1755.190753][T27840] netlink: 16 bytes leftover after parsing attributes in process `syz.2.11700'.
[ 1755.212222][T27835] ip6gretap1: entered promiscuous mode
[ 1755.621249][T27861] IPVS: set_ctl: invalid protocol: 103 255.255.255.255:20003
[ 1755.688419][T27862] xt_CHECKSUM: unsupported CHECKSUM operation 68
[ 1755.711802][T27862] net_ratelimit: 1 callbacks suppressed
[ 1755.711820][T27862] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1755.728692][T27864] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11702'.
[ 1755.747490][T27862] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1755.759296][T27864] openvswitch: netlink: Flow actions attr not present in new flow.
[ 1755.762943][T27862] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1755.779659][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5030 ms
[ 1755.787920][    C1] lec:lec_tx_timeout: lec0
[ 1755.794186][    C1] lec:lec_start_xmit: lec0:No lecd attached
[ 1755.935159][T27862] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1755.974037][T27862] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1756.001569][T27862] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1756.058803][T27862] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1756.113975][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1756.170756][T27872] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11707'.
[ 1756.241257][T27874] netlink: 'syz.4.11708': attribute type 13 has an invalid length.
[ 1756.359981][T27872] netlink: 176 bytes leftover after parsing attributes in process `syz.0.11707'.
[ 1756.369983][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1756.542605][T27860] wg1 speed is unknown, defaulting to 1000
[ 1756.550885][T27860] lo speed is unknown, defaulting to 1000
[ 1757.039453][T27905] netlink: 'syz.2.11716': attribute type 6 has an invalid length.
[ 1757.054422][T27905] IPv6: NLM_F_CREATE should be specified when creating new route
[ 1757.062485][T27908] netlink: 'syz.4.11717': attribute type 1 has an invalid length.
[ 1757.090173][T27908] netlink: 'syz.4.11717': attribute type 1 has an invalid length.
[ 1757.135672][T27908] netlink: 'syz.4.11717': attribute type 8 has an invalid length.
[ 1757.891677][T27933] __nla_validate_parse: 4 callbacks suppressed
[ 1757.891700][T27933] netlink: 24 bytes leftover after parsing attributes in process `syz.4.11722'.
[ 1757.995051][   T30] audit: type=1800 audit(1769950100.932:43): pid=27917 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.11719" name="memory.events" dev="tmpfs" ino=73 res=0 errno=0
[ 1758.279582][T27888] wg1 speed is unknown, defaulting to 1000
[ 1758.280437][T27943] pim6reg1: entered promiscuous mode
[ 1758.316174][T27949] netlink: 44 bytes leftover after parsing attributes in process `syz.4.11725'.
[ 1758.359758][T27943] pim6reg1: entered allmulticast mode
[ 1758.404417][T27888] lo speed is unknown, defaulting to 1000
[ 1758.715236][T27959] xt_CHECKSUM: unsupported CHECKSUM operation 68
[ 1758.987899][T27964] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1759.040941][T27967] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11729'.
[ 1759.266870][T27972] netlink: 'syz.4.11731': attribute type 13 has an invalid length.
[ 1759.309163][T27972] netlink: 'syz.4.11731': attribute type 17 has an invalid length.
[ 1759.321683][T27975] netlink: 16 bytes leftover after parsing attributes in process `syz.4.11731'.
[ 1759.372773][T27972] tipc: Resetting bearer <eth:gre0>
[ 1759.402657][T27972] tipc: Resetting bearer <eth:gre0>
[ 1759.451186][T27972] 8021q: adding VLAN 0 to HW filter on device team0
[ 1759.481124][T27957] wg1 speed is unknown, defaulting to 1000
[ 1759.540374][T27957] lo speed is unknown, defaulting to 1000
[ 1759.738254][T27985] netlink: 40 bytes leftover after parsing attributes in process `syz.0.11734'.
[ 1760.803855][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[ 1760.811948][    C1] lec:lec_tx_timeout: lec0
[ 1760.817019][    C1] lec:lec_start_xmit: lec0:No lecd attached
[ 1761.128854][T28011] netlink: 104 bytes leftover after parsing attributes in process `syz.3.11741'.
[ 1761.277134][T28016] x_tables: duplicate underflow at hook 1
[ 1761.639528][T28028] netlink: 'syz.1.11744': attribute type 1 has an invalid length.
[ 1761.825941][T28032] IPVS: set_ctl: invalid protocol: 103 10.1.1.0:20001
[ 1761.917356][T28036] netlink: 'syz.0.11747': attribute type 4 has an invalid length.
[ 1762.061069][T28021] wg1 speed is unknown, defaulting to 1000
[ 1762.097159][T28021] lo speed is unknown, defaulting to 1000
[ 1762.151717][T28043] netlink: 20 bytes leftover after parsing attributes in process `syz.0.11748'.
[ 1762.185543][T28043] netlink: 20 bytes leftover after parsing attributes in process `syz.0.11748'.
[ 1762.219988][T28043] netlink: 7 bytes leftover after parsing attributes in process `syz.0.11748'.
[ 1762.310714][T28048] netlink: 12 bytes leftover after parsing attributes in process `syz.4.11749'.
[ 1762.695483][T28066] netlink: 'syz.1.11753': attribute type 10 has an invalid length.
[ 1762.853190][T28070] netlink: 'syz.0.11754': attribute type 9 has an invalid length.
[ 1763.030389][T28072] __nla_validate_parse: 4 callbacks suppressed
[ 1763.030411][T28072] netlink: 104 bytes leftover after parsing attributes in process `syz.4.11755'.
[ 1763.253785][T28083] netlink: 64 bytes leftover after parsing attributes in process `syz.4.11760'.
[ 1763.284410][T28083] netlink: 32 bytes leftover after parsing attributes in process `syz.4.11760'.
[ 1763.318513][T28083] netlink: 64 bytes leftover after parsing attributes in process `syz.4.11760'.
[ 1763.352968][T28089] netlink: 'syz.1.11759': attribute type 1 has an invalid length.
[ 1763.361371][T28089] netlink: 224 bytes leftover after parsing attributes in process `syz.1.11759'.
[ 1763.435524][T28089] No such timeout policy "syz1"
[ 1763.628801][T28095] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1763.647725][T28095] syzkaller0: entered promiscuous mode
[ 1763.659226][T28095] syzkaller0: entered allmulticast mode
[ 1763.722941][T28100] netlink: 'syz.3.11762': attribute type 30 has an invalid length.
[ 1763.746365][T28095] tipc: Resetting bearer <eth:syzkaller0>
[ 1763.797162][T28095] netlink: 'syz.4.11761': attribute type 4 has an invalid length.
[ 1763.838538][T28094] tipc: Resetting bearer <eth:syzkaller0>
[ 1763.904955][T28094] tipc: Disabling bearer <eth:syzkaller0>
[ 1764.182689][T28106] netlink: 16 bytes leftover after parsing attributes in process `syz.4.11765'.
[ 1764.229426][T28107] net_ratelimit: 5 callbacks suppressed
[ 1764.229451][T28107] openvswitch: netlink: Key 6 has unexpected len 4 expected 2
[ 1764.417376][T28113] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11767'.
[ 1764.494941][T28115] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11769'.
[ 1765.011560][T28128] bond3: option primary_reselect: invalid value (4)
[ 1765.117775][T28128] bond3 (unregistering): Released all slaves
[ 1765.254535][T28113] wg1 speed is unknown, defaulting to 1000
[ 1765.306876][T28113] lo speed is unknown, defaulting to 1000
[ 1765.448867][T28139] netlink: 40 bytes leftover after parsing attributes in process `syz.4.11778'.
[ 1765.471881][T28137] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11777'.
[ 1765.745561][T28156] xt_hashlimit: max too large, truncated to 1048576
[ 1765.762788][T28156] xt_bpf: check failed: parse error
[ 1765.824406][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[ 1765.832477][    C1] lec:lec_tx_timeout: lec0
[ 1765.837701][    C1] lec:lec_start_xmit: lec0:No lecd attached
[ 1766.132309][T28170] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[ 1766.513411][T28155] netlink: 'syz.0.11777': attribute type 6 has an invalid length.
[ 1766.925269][T28137] wg1 speed is unknown, defaulting to 1000
[ 1766.988177][T28137] lo speed is unknown, defaulting to 1000
[ 1767.018790][T28197] netlink: 'syz.2.11792': attribute type 13 has an invalid length.
[ 1767.608730][T14028] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 1767.620570][T14028] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 1767.630580][T14028] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 1767.641664][T14028] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 1767.651029][T14028] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 1768.258933][T16646] syz_tun (unregistering): left allmulticast mode
[ 1768.304581][T28226] syzkaller1: entered promiscuous mode
[ 1768.310153][T28226] syzkaller1: entered allmulticast mode
[ 1768.689621][T28243] netlink: 'syz.1.11804': attribute type 49 has an invalid length.
[ 1768.752968][T28218] wg1 speed is unknown, defaulting to 1000
[ 1768.779072][T28218] lo speed is unknown, defaulting to 1000
[ 1768.786617][T28244] __nla_validate_parse: 2 callbacks suppressed
[ 1768.786639][T28244] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11804'.
[ 1769.099418][T28254] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1769.399250][T28264] tipc: Started in network mode
[ 1769.406297][T28264] tipc: Node identity a6c5093fe826, cluster identity 4711
[ 1769.423940][T28264] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1769.465145][T28268] syzkaller0: entered promiscuous mode
[ 1769.470855][T28268] syzkaller0: entered allmulticast mode
[ 1769.501836][T28264] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[ 1769.518759][T28270] netlink: 52 bytes leftover after parsing attributes in process `syz.1.11812'.
[ 1769.541199][T28218] chnl_net:caif_netlink_parms(): no params data found
[ 1769.569170][T28264] tipc: Resetting bearer <eth:syzkaller0>
[ 1769.642600][T28260] tipc: Resetting bearer <eth:syzkaller0>
[ 1769.678343][T28260] tipc: Disabling bearer <eth:syzkaller0>
[ 1769.686576][T14028] Bluetooth: hci2: command tx timeout
[ 1769.952063][T28279] netlink: 64 bytes leftover after parsing attributes in process `syz.3.11815'.
[ 1770.008577][T28218] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1770.038624][T28218] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1770.074681][T28218] bridge_slave_0: entered allmulticast mode
[ 1770.108072][T28218] bridge_slave_0: entered promiscuous mode
[ 1770.133296][T28218] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1770.152078][T28218] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1770.180568][T28218] bridge_slave_1: entered allmulticast mode
[ 1770.191098][T28218] bridge_slave_1: entered promiscuous mode
[ 1770.294735][T28285] syzkaller0: entered promiscuous mode
[ 1770.304423][T28285] syzkaller0: entered allmulticast mode
[ 1770.347317][T28218] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1770.387749][T28218] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1770.400790][T28296] netlink: 16 bytes leftover after parsing attributes in process `syz.0.11819'.
[ 1770.417053][T28292] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1770.484642][T28296] netlink: 16 bytes leftover after parsing attributes in process `syz.0.11819'.
[ 1770.619348][T28218] team0: Port device team_slave_0 added
[ 1770.843952][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[ 1770.852099][    C1] lec:lec_tx_timeout: lec0
[ 1770.856935][    C1] lec:lec_start_xmit: lec0:No lecd attached
[ 1770.954047][T28218] team0: Port device team_slave_1 added
[ 1771.459980][T28283] tipc: Resetting bearer <eth:syzkaller0>
[ 1771.512003][T28283] tipc: Disabling bearer <eth:syzkaller0>
[ 1771.649606][T28218] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1771.689023][T28218] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1771.767622][T14028] Bluetooth: hci2: command tx timeout
[ 1771.794581][T28218] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1771.816395][T28218] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1771.823407][T28218] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1771.894256][T28218] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1771.929155][T28325] netlink: 'syz.2.11825': attribute type 1 has an invalid length.
[ 1772.039279][T28218] hsr_slave_0: entered promiscuous mode
[ 1772.046422][T28218] hsr_slave_1: entered promiscuous mode
[ 1772.053043][T28218] debugfs: 'hsr0' already exists in 'hsr'
[ 1772.059734][T28218] Cannot create hsr debugfs directory
[ 1772.127187][T28322] netlink: 28 bytes leftover after parsing attributes in process `syz.2.11825'.
[ 1772.187039][T28322] 8021q: adding VLAN 0 to HW filter on device bond6
[ 1772.253866][T28322] netlink: 40 bytes leftover after parsing attributes in process `syz.2.11825'.
[ 1772.370795][T28340] xt_l2tp: v2 sid > 0xffff: 4294967293
[ 1772.488784][T28332] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11827'.
[ 1772.570001][T28351] netlink: 16 bytes leftover after parsing attributes in process `syz.3.11830'.
[ 1772.661107][T28356] siw: device registration error -23
[ 1772.681241][T28356] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11832'.
[ 1772.740238][T28346] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1772.889530][T28350] tipc: Disabling bearer <eth:syzkaller0>
[ 1773.846478][ T5829] Bluetooth: hci2: command tx timeout
[ 1775.863815][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[ 1775.871971][    C1] lec:lec_tx_timeout: lec0
[ 1775.877263][    C1] lec:lec_start_xmit: lec0:No lecd attached
[ 1775.924119][ T5829] Bluetooth: hci2: command tx timeout
[ 1776.218461][T28371] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[ 1776.252363][T28218] netdevsim netdevsim4 netdevsim0: renamed from eth0
[ 1776.309602][T28218] netdevsim netdevsim4 netdevsim1: renamed from eth1
[ 1776.399181][T28218] netdevsim netdevsim4 netdevsim2: renamed from eth2
[ 1776.486465][T28218] netdevsim netdevsim4 netdevsim3: renamed from eth3
[ 1776.769482][T28433] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1776.778607][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1776.951048][T28437] __nla_validate_parse: 1 callbacks suppressed
[ 1776.951069][T28437] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11844'.
[ 1777.093010][T28427] wg1 speed is unknown, defaulting to 1000
[ 1777.110643][T28440] netlink: 'syz.1.11845': attribute type 1 has an invalid length.
[ 1777.122826][T28427] lo speed is unknown, defaulting to 1000
[ 1777.208753][T28439] netlink: 20 bytes leftover after parsing attributes in process `syz.1.11845'.
[ 1777.319511][T28449] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11847'.
[ 1777.418966][T28449] veth9: entered allmulticast mode
[ 1777.440947][T28452] A link change request failed with some changes committed already. Interface team_slave_1 may have been left with an inconsistent configuration, please check.
[ 1777.599035][T28460] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11850'.
[ 1777.643622][T28460] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11850'.
[ 1777.686603][T28218] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1777.697714][T28462] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input8
[ 1777.782029][T28464] dvmrp0: entered allmulticast mode
[ 1777.811411][T28462] netlink: 24 bytes leftover after parsing attributes in process `syz.0.11851'.
[ 1777.833199][T28218] 8021q: adding VLAN 0 to HW filter on device team0
[ 1777.865737][T28792] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1777.872992][T28792] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1777.941226][T28792] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1777.948554][T28792] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1778.280543][T28218] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[ 1778.334438][T28218] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 1778.620500][T28492] netlink: 16 bytes leftover after parsing attributes in process `syz.1.11858'.
[ 1778.862705][T28499] netlink: 40 bytes leftover after parsing attributes in process `syz.3.11859'.
[ 1778.915249][T28499] netlink: 40 bytes leftover after parsing attributes in process `syz.3.11859'.
[ 1779.020359][T28507] netlink: 72 bytes leftover after parsing attributes in process `syz.2.11860'.
[ 1779.140493][T28218] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1779.249307][T28519] Bluetooth: MGMT ver 1.23
[ 1779.472812][T28523] netlink: 'syz.1.11864': attribute type 13 has an invalid length.
[ 1780.048706][T28536] netlink: 'syz.2.11868': attribute type 21 has an invalid length.
[ 1780.073024][T28536] netlink: 'syz.2.11868': attribute type 9 has an invalid length.
[ 1780.526932][T28218] veth0_vlan: entered promiscuous mode
[ 1780.572451][T28218] veth1_vlan: entered promiscuous mode
[ 1780.744075][T28218] veth0_macvtap: entered promiscuous mode
[ 1780.801901][T28218] veth1_macvtap: entered promiscuous mode
[ 1780.854963][T28566] netlink: 'syz.2.11875': attribute type 6 has an invalid length.
[ 1780.884606][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[ 1780.892741][    C1] lec:lec_tx_timeout: lec0
[ 1780.897514][    C1] lec:lec_start_xmit: lec0:No lecd attached
[ 1781.128074][T28218] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1781.181157][T28574] hsr0: entered promiscuous mode
[ 1781.187725][T28574] hsr0: entered allmulticast mode
[ 1781.209789][T28574] hsr_slave_0: entered allmulticast mode
[ 1781.216452][T28574] hsr_slave_1: entered allmulticast mode
[ 1781.232104][T28218] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1781.292367][T14028] Bluetooth: hci0: command 0x0419 tx timeout
[ 1781.295427][ T5829] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[ 1781.347101][T28796] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1781.425448][T28796] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1781.458117][T28796] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1781.490451][T28796] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1781.979445][ T7421] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1781.993803][ T7421] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1782.265034][T28572] wg1 speed is unknown, defaulting to 1000
[ 1782.307156][T28608] vti0: entered promiscuous mode
[ 1782.336453][T28572] lo speed is unknown, defaulting to 1000
[ 1782.347849][T28811] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1782.373392][T28811] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1783.054849][T28623] __nla_validate_parse: 4 callbacks suppressed
[ 1783.054871][T28623] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11887'.
[ 1783.114402][T28623] netlink: 20 bytes leftover after parsing attributes in process `syz.0.11887'.
[ 1783.428893][T28636] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11892'.
[ 1783.836864][T28619] wg1 speed is unknown, defaulting to 1000
[ 1783.873195][T28619] lo speed is unknown, defaulting to 1000
[ 1784.121723][T28650] netlink: 165 bytes leftover after parsing attributes in process `syz.3.11895'.
[ 1784.138858][T28650] netlink: 277 bytes leftover after parsing attributes in process `syz.3.11895'.
[ 1784.154478][T28651] netlink: 'syz.0.11897': attribute type 6 has an invalid length.
[ 1784.163205][T28651] sctp: [Deprecated]: syz.0.11897 (pid 28651) Use of struct sctp_assoc_value in delayed_ack socket option.
[ 1784.163205][T28651] Use struct sctp_sack_info instead
[ 1784.216056][T28651] netlink: 36 bytes leftover after parsing attributes in process `syz.0.11897'.
[ 1784.227020][T28650] netlink: 87 bytes leftover after parsing attributes in process `syz.3.11895'.
[ 1784.613505][T28658] netlink: 'syz.3.11899': attribute type 1 has an invalid length.
[ 1784.644507][T28658] netlink: 224 bytes leftover after parsing attributes in process `syz.3.11899'.
[ 1784.723415][T28658] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11899'.
[ 1784.854784][T28663] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.11900'.
[ 1784.955168][T28662] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1785.236634][T28662] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1785.333429][T28662] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1785.381242][T28676] syzkaller1: entered promiscuous mode
[ 1785.401045][T28676] syzkaller1: entered allmulticast mode
[ 1785.800471][T28662] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1785.903869][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[ 1785.911971][    C1] lec:lec_tx_timeout: lec0
[ 1785.916702][    C1] lec:lec_start_xmit: lec0:No lecd attached
[ 1785.955055][T28656] wg1 speed is unknown, defaulting to 1000
[ 1785.962758][T28656] lo speed is unknown, defaulting to 1000
[ 1786.209576][T28811] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0x1f
[ 1786.857266][ T7418] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1787.207251][ T7418] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1787.267921][T28796] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1787.359254][T28796] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1787.635938][T28727] netlink: 'syz.4.11917': attribute type 10 has an invalid length.
[ 1787.676096][T28727] atomic_op ffff888084df1198 conn xmit_atomic 0000000000000000
[ 1788.819493][T28761] __nla_validate_parse: 5 callbacks suppressed
[ 1788.819514][T28761] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11925'.
[ 1789.170847][T28771] atomic_op ffff888098272998 conn xmit_atomic 0000000000000000
[ 1790.134037][T28745] wg1 speed is unknown, defaulting to 1000
[ 1790.192303][T28745] lo speed is unknown, defaulting to 1000
[ 1790.351673][T28806] netlink: 'syz.1.11935': attribute type 32 has an invalid length.
[ 1790.362749][T28806] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11935'.
[ 1790.431016][T28806] bond6: Setting coupled_control to off (0)
[ 1790.696336][T28814] netlink: 'syz.1.11936': attribute type 21 has an invalid length.
[ 1790.728794][T28814] netlink: 128 bytes leftover after parsing attributes in process `syz.1.11936'.
[ 1790.759494][T28816] netlink: 'syz.1.11936': attribute type 11 has an invalid length.
[ 1790.779909][T28814] netlink: 'syz.1.11936': attribute type 5 has an invalid length.
[ 1790.834736][T28816] netlink: 'syz.1.11936': attribute type 23 has an invalid length.
[ 1790.835834][T28814] netlink: 'syz.1.11936': attribute type 6 has an invalid length.
[ 1790.853629][T28816] netlink: 224 bytes leftover after parsing attributes in process `syz.1.11936'.
[ 1790.913511][T28814] netlink: 3 bytes leftover after parsing attributes in process `syz.1.11936'.
[ 1790.933799][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms
[ 1790.941921][    C1] lec:lec_tx_timeout: lec0
[ 1790.946697][    C1] lec:lec_start_xmit: lec0:No lecd attached
[ 1790.955375][T28819] netlink: 876 bytes leftover after parsing attributes in process `syz.4.11937'.
[ 1790.974374][T28819] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11937'.
[ 1791.066118][T28803] wg1 speed is unknown, defaulting to 1000
[ 1791.259615][T28803] lo speed is unknown, defaulting to 1000
[ 1791.477812][T28829] netlink: 228 bytes leftover after parsing attributes in process `syz.4.11939'.
[ 1792.585998][T28857] netlink: 68 bytes leftover after parsing attributes in process `syz.3.11943'.
[ 1792.605750][T28857] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11943'.
[ 1793.044144][T28869] can: request_module (can-proto-0) failed.
[ 1793.262013][T28891] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 1793.821485][T28921] netlink: 'syz.3.11957': attribute type 1 has an invalid length.
[ 1793.843582][T28922] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1793.862233][T28921] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[ 1793.881632][T28922] syzkaller0: entered promiscuous mode
[ 1793.896879][T28922] syzkaller0: entered allmulticast mode
[ 1793.955389][T28920] tipc: Resetting bearer <eth:syzkaller0>
[ 1794.044648][T28920] tipc: Disabling bearer <eth:syzkaller0>
[ 1794.542624][T28943] __nla_validate_parse: 1 callbacks suppressed
[ 1794.542647][T28943] netlink: 176 bytes leftover after parsing attributes in process `syz.1.11964'.
[ 1794.664733][T28942] bond8: option lacp_rate: invalid value (192)
[ 1794.674655][T28942] bond8 (unregistering): Released all slaves
[ 1794.855944][T28957] netlink: 24 bytes leftover after parsing attributes in process `syz.2.11968'.
[ 1794.962132][T28960] delete_channel: no stack
[ 1794.991898][T28964] netlink: 36 bytes leftover after parsing attributes in process `syz.4.11969'.
[ 1795.029332][T28957] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11968'.
[ 1795.228893][T28976] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[ 1795.413288][T14028] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 1795.425091][T14028] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 1795.433585][T14028] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 1795.441710][T14028] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 1795.451539][T14028] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 1795.467705][T28987] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1796.303640][T29015] ip6tnl0: Caught tx_queue_len zero misconfig
[ 1796.498624][T29019] batman_adv: batadv0: Adding interface: wlan0
[ 1796.524520][T29019] batman_adv: batadv0: The MTU of interface wlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1796.587508][T29030] netlink: 152 bytes leftover after parsing attributes in process `syz.2.11986'.
[ 1796.599255][T29019] batman_adv: batadv0: Not using interface wlan0 (retrying later): interface not active
[ 1796.618433][T29027] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[ 1796.638729][T28982] wg1 speed is unknown, defaulting to 1000
[ 1796.690221][T29032] sit0: entered promiscuous mode
[ 1796.715349][T29032] netlink: 1 bytes leftover after parsing attributes in process `syz.4.11983'.
[ 1796.733806][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5790 ms
[ 1796.741916][    C1] lec:lec_tx_timeout: lec0
[ 1796.747746][    C1] lec:lec_start_xmit: lec0:No lecd attached
[ 1796.754476][T29030] netlink: 20 bytes leftover after parsing attributes in process `syz.2.11986'.
[ 1796.784233][T29031] 8021q: adding VLAN 0 to HW filter on device macvlan2
[ 1796.934168][T28982] lo speed is unknown, defaulting to 1000
[ 1796.950090][T29021] wg1 speed is unknown, defaulting to 1000
[ 1796.977483][T29035] netlink: 'syz.4.11987': attribute type 1 has an invalid length.
[ 1797.034947][T29021] lo speed is unknown, defaulting to 1000
[ 1797.069431][T29038] syzkaller0: entered promiscuous mode
[ 1797.079752][T29038] syzkaller0: entered allmulticast mode
[ 1797.104936][T29043] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR
[ 1797.197729][T29041] netlink: 72 bytes leftover after parsing attributes in process `syz.4.11990'.
[ 1797.524279][ T5829] Bluetooth: hci3: command tx timeout
[ 1797.776259][T29068] xt_CHECKSUM: unsupported CHECKSUM operation 68
[ 1797.800045][T29068] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1797.808695][T29068] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1797.821400][T29068] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1798.133974][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1798.142785][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1798.327232][T29080] netlink: 'syz.3.11996': attribute type 1 has an invalid length.
[ 1798.383083][T29081] netlink: 28 bytes leftover after parsing attributes in process `syz.3.11996'.
[ 1798.389885][T28982] chnl_net:caif_netlink_parms(): no params data found
[ 1798.447000][T29064] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1798.517989][T29080] bond1: entered promiscuous mode
[ 1798.523532][T29080] 8021q: adding VLAN 0 to HW filter on device bond1
[ 1798.604672][T29081] bond1: entered allmulticast mode
[ 1798.629335][T29089] xt_CHECKSUM: unsupported CHECKSUM operation 68
[ 1798.840906][T29062] wg1 speed is unknown, defaulting to 1000
[ 1798.891021][T29062] lo speed is unknown, defaulting to 1000
[ 1798.947333][T28982] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1798.955039][T28982] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1798.962522][T28982] bridge_slave_0: entered allmulticast mode
[ 1798.987125][T28982] bridge_slave_0: entered promiscuous mode
[ 1799.017581][T28982] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1799.025269][T28982] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1799.032702][T28982] bridge_slave_1: entered allmulticast mode
[ 1799.041845][T28982] bridge_slave_1: entered promiscuous mode
[ 1799.225874][T28982] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1799.251744][T28982] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1799.399522][T28982] team0: Port device team_slave_0 added
[ 1799.425801][T28982] team0: Port device team_slave_1 added
[ 1799.496743][T28982] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1799.516180][T28982] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1799.594084][T28982] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1799.605240][ T5829] Bluetooth: hci3: command tx timeout
[ 1799.687027][T28982] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1799.704505][T28982] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1799.737849][T28982] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1799.757379][T29070] wg1 speed is unknown, defaulting to 1000
[ 1799.804466][T29070] lo speed is unknown, defaulting to 1000
[ 1799.804488][T29087] wg1 speed is unknown, defaulting to 1000
[ 1799.911078][T29087] lo speed is unknown, defaulting to 1000
[ 1800.048295][T28982] hsr_slave_0: entered promiscuous mode
[ 1800.065304][T28982] hsr_slave_1: entered promiscuous mode
[ 1800.077425][T28982] debugfs: 'hsr0' already exists in 'hsr'
[ 1800.088397][T28982] Cannot create hsr debugfs directory
[ 1800.996345][T28982] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1801.033586][T28982] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1801.107128][T29118] netlink: 148 bytes leftover after parsing attributes in process `syz.3.12005'.
[ 1801.146028][T28982] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1801.158484][T28982] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1801.210737][T29125] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR
[ 1801.268732][T28982] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1801.353562][T28982] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1801.509608][T28982] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1801.529970][T28982] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1801.665041][T29143] tipc: Cannot configure node identity twice
[ 1801.698675][ T5829] Bluetooth: hci3: command tx timeout
[ 1801.773767][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms
[ 1801.781866][    C1] lec:lec_tx_timeout: lec0
[ 1801.788350][    C1] lec:lec_start_xmit: lec0:No lecd attached
[ 1801.981546][T29151] netlink: 68 bytes leftover after parsing attributes in process `syz.1.12012'.
[ 1802.069948][T29137] wg1 speed is unknown, defaulting to 1000
[ 1802.105179][T29137] lo speed is unknown, defaulting to 1000
[ 1802.228156][T29152] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12006'.
[ 1802.230648][T29155] syzkaller0: entered promiscuous mode
[ 1802.264452][T29155] syzkaller0: entered allmulticast mode
[ 1802.280217][T29161] x_tables: ip_tables: ah match: only valid for protocol 51
[ 1802.351185][T29162] netlink: 40 bytes leftover after parsing attributes in process `syz.1.12014'.
[ 1802.369435][T29162] netlink: 88 bytes leftover after parsing attributes in process `syz.1.12014'.
[ 1802.408681][T28982] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 1802.421748][T29166] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12014'.
[ 1802.635624][T28982] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 1802.668666][T28982] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 1802.756695][T28982] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 1802.883213][T29182] IPVS: sync thread started: state = MASTER, mcast_ifn = bridge0, syncid = 0, id = 0
[ 1803.099083][T29186] nbd: socks must be embedded in a SOCK_ITEM attr
[ 1803.110341][T29186] block nbd8: shutting down sockets
[ 1803.161722][T28982] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1803.191977][T28982] 8021q: adding VLAN 0 to HW filter on device team0
[ 1803.226531][T28796] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1803.233879][T28796] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1803.281240][T28796] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1803.288485][T28796] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1803.360006][T29190] netlink: 28 bytes leftover after parsing attributes in process `syz.1.12022'.
[ 1803.770359][ T5829] Bluetooth: hci3: command tx timeout
[ 1804.187290][T28982] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1804.329655][T29218] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1804.354939][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1804.366436][T28982] veth0_vlan: entered promiscuous mode
[ 1804.463594][T29218] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1804.492510][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1804.548267][T29221] netlink: 24 bytes leftover after parsing attributes in process `syz.2.12028'.
[ 1804.586276][T29218] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1804.595671][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1804.619034][T29218] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1804.628403][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1804.719070][T28811] tipc: Subscription rejected, illegal request
[ 1804.795349][T28982] veth1_vlan: entered promiscuous mode
[ 1804.806578][T29216] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1804.813345][T29223] netlink: 12 bytes leftover after parsing attributes in process `syz.4.12030'.
[ 1804.859992][T29216] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1804.929812][ T5829] block nbd8: Receive control failed (result -107)
[ 1805.020333][T29231] netlink: 28 bytes leftover after parsing attributes in process `syz.3.12032'.
[ 1805.105896][T28982] veth0_macvtap: entered promiscuous mode
[ 1805.152697][T28982] veth1_macvtap: entered promiscuous mode
[ 1805.260723][T28982] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1805.322113][T28982] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1805.647382][T28820] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1805.665928][ T7436] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1805.839107][T29250] netlink: 'syz.4.12036': attribute type 21 has an invalid length.
[ 1805.879816][ T7436] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1805.926135][ T7436] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1805.973519][T29250] netlink: 'syz.4.12036': attribute type 5 has an invalid length.
[ 1806.046491][T29250] netlink: 'syz.4.12036': attribute type 6 has an invalid length.
[ 1806.646183][T28820] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1806.694160][T28820] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1806.803978][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[ 1806.812105][    C1] lec:lec_tx_timeout: lec0
[ 1806.816789][    C1] lec:lec_start_xmit: lec0:No lecd attached
[ 1806.917233][T28796] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1806.938607][T28796] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1807.568622][T29310] delete_channel: no stack
[ 1807.808259][   T30] audit: type=1800 audit(1769950150.752:44): pid=29320 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.12052" name="blkio.bfq.time_recursive" dev="tmpfs" ino=28 res=0 errno=0
[ 1809.046069][T29359] syzkaller1: entered promiscuous mode
[ 1809.072171][T29359] syzkaller1: entered allmulticast mode
[ 1809.092759][T29362] __nla_validate_parse: 5 callbacks suppressed
[ 1809.092780][T29362] netlink: 12 bytes leftover after parsing attributes in process `syz.3.12062'.
[ 1809.936461][T29378] netlink: 14 bytes leftover after parsing attributes in process `syz.0.12066'.
[ 1810.238149][T29386] netlink: 124 bytes leftover after parsing attributes in process `syz.3.12069'.
[ 1810.262312][T29378] syzkaller0: entered promiscuous mode
[ 1810.272408][T29378] syzkaller0: entered allmulticast mode
[ 1811.306741][T29410] netlink: 24 bytes leftover after parsing attributes in process `syz.3.12077'.
[ 1811.356765][T29410] netlink: 11 bytes leftover after parsing attributes in process `syz.3.12077'.
[ 1811.722035][T29423] netlink: 'syz.0.12080': attribute type 83 has an invalid length.
[ 1811.746259][T29423] bond_slave_0: entered promiscuous mode
[ 1811.752009][T29423] bond_slave_1: entered promiscuous mode
[ 1811.767059][T29423] 8021q: adding VLAN 0 to HW filter on device macvlan2
[ 1811.808810][T29423] bond_slave_0: left promiscuous mode
[ 1811.814365][T29423] bond_slave_1: left promiscuous mode
[ 1811.824571][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[ 1811.832722][    C1] lec:lec_tx_timeout: lec0
[ 1811.837685][    C1] lec:lec_start_xmit: lec0:No lecd attached
[ 1811.877722][T29426] x_tables: ip_tables: RATEEST.0 target: invalid size 32 (kernel) != (user) 0
[ 1812.584672][T29433] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_tx_wq": -EINTR
[ 1812.754677][T29441] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12083'.
[ 1813.518449][T29474] netlink: 'syz.4.12093': attribute type 1 has an invalid length.
[ 1813.532153][T29473] netlink: 24 bytes leftover after parsing attributes in process `syz.3.12091'.
[ 1813.759731][T29468] netlink: 4076 bytes leftover after parsing attributes in process `syz.3.12091'.
[ 1814.243108][T29477] netlink: 12 bytes leftover after parsing attributes in process `syz.1.12094'.
[ 1814.284488][T29477] netlink: 'syz.1.12094': attribute type 1 has an invalid length.
[ 1814.653060][T29485] tipc: Started in network mode
[ 1814.670604][T29485] tipc: Node identity a27c66ac11db, cluster identity 4711
[ 1814.681459][T29485] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1814.691331][T29485] syzkaller0: entered promiscuous mode
[ 1814.697157][T29485] syzkaller0: entered allmulticast mode
[ 1814.716017][T29485] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[ 1814.802614][T29485] tipc: Resetting bearer <eth:syzkaller0>
[ 1814.840430][T29481] tipc: Resetting bearer <eth:syzkaller0>
[ 1814.975208][T29481] tipc: Disabling bearer <eth:syzkaller0>
[ 1815.050186][T29498] tipc: Started in network mode
[ 1815.070159][T29498] tipc: Node identity 6eded7be36b7, cluster identity 4711
[ 1815.082525][T29498] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1815.145081][T29502] syzkaller0: entered promiscuous mode
[ 1815.150716][T29502] syzkaller0: entered allmulticast mode
[ 1815.292642][T29498] tipc: Resetting bearer <eth:syzkaller0>
[ 1815.325137][T29496] tipc: Resetting bearer <eth:syzkaller0>
[ 1815.423502][T29496] tipc: Disabling bearer <eth:syzkaller0>
[ 1815.463230][T29521] nbd: must specify a device to reconfigure
[ 1816.132485][T29534] bond0: (slave sit0): Error: Device type is different from other slaves
[ 1816.320619][T29539] netlink: 'syz.3.12111': attribute type 29 has an invalid length.
[ 1816.385126][T29539] netlink: 'syz.3.12111': attribute type 29 has an invalid length.
[ 1816.480863][T29545] openvswitch: netlink: Unexpected mask (mask=200240, allowed=10048)
[ 1816.508838][T29549] x_tables: duplicate underflow at hook 2
[ 1816.555241][T29551] sysfs: cannot create duplicate filename '/class/ieee80211/

π�,���x���b�)%�	]�3D�L̥�!!b���.�>�nS��#^��'
[ 1816.596239][T29551] CPU: 1 UID: 0 PID: 29551 Comm: syz.2.12116 Not tainted syzkaller #0 PREEMPT(full) 
[ 1816.596279][T29551] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[ 1816.596293][T29551] Call Trace:
[ 1816.596302][T29551]  <TASK>
[ 1816.596312][T29551]  dump_stack_lvl+0xe8/0x150
[ 1816.596346][T29551]  sysfs_warn_dup+0x8e/0xa0
[ 1816.596376][T29551]  sysfs_do_create_link_sd+0xc0/0x110
[ 1816.596419][T29551]  device_add_class_symlinks+0x1cf/0x240
[ 1816.596458][T29551]  device_add+0x475/0xb70
[ 1816.596496][T29551]  wiphy_register+0x1d6c/0x2d50
[ 1816.596549][T29551]  ? __pfx_wiphy_register+0x10/0x10
[ 1816.596575][T29551]  ? __pfx_netdev_run_todo+0x10/0x10
[ 1816.596608][T29551]  ? minstrel_ht_alloc+0x6e0/0x7e0
[ 1816.596649][T29551]  ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0
[ 1816.596686][T29551]  ieee80211_register_hw+0x34d2/0x4150
[ 1816.596706][T29551]  ? __lock_acquire+0x6b5/0x2cf0
[ 1816.596750][T29551]  ? ieee80211_register_hw+0x1491/0x4150
[ 1816.596779][T29551]  ? __pfx_ieee80211_register_hw+0x10/0x10
[ 1816.596819][T29551]  ? __hrtimer_setup+0x181/0x200
[ 1816.596841][T29551]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[ 1816.596876][T29551]  mac80211_hwsim_new_radio+0x2f97/0x5330
[ 1816.596939][T29551]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[ 1816.596964][T29551]  ? kstrndup+0xbf/0x160
[ 1816.597001][T29551]  hwsim_new_radio_nl+0xf35/0x1bd0
[ 1816.597053][T29551]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[ 1816.597102][T29551]  ? rcu_is_watching+0x15/0xb0
[ 1816.597128][T29551]  ? __nla_parse+0x40/0x60
[ 1816.597162][T29551]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[ 1816.597205][T29551]  genl_family_rcv_msg_doit+0x22a/0x330
[ 1816.597244][T29551]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[ 1816.597291][T29551]  ? bpf_lsm_capable+0x9/0x20
[ 1816.597318][T29551]  ? security_capable+0x7e/0x2c0
[ 1816.597351][T29551]  genl_rcv_msg+0x61c/0x7a0
[ 1816.597391][T29551]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 1816.597421][T29551]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[ 1816.597467][T29551]  netlink_rcv_skb+0x232/0x4b0
[ 1816.597494][T29551]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 1816.597537][T29551]  ? __pfx_netlink_rcv_skb+0x10/0x10
[ 1816.597559][T29551]  ? genl_rcv+0x19/0x40
[ 1816.597606][T29551]  ? down_read+0x272/0x2e0
[ 1816.597639][T29551]  ? genl_rcv+0xd/0x40
[ 1816.597668][T29551]  genl_rcv+0x28/0x40
[ 1816.597695][T29551]  netlink_unicast+0x80f/0x9b0
[ 1816.597724][T29551]  ? __pfx_netlink_unicast+0x10/0x10
[ 1816.597745][T29551]  ? netlink_sendmsg+0x650/0xb40
[ 1816.597765][T29551]  ? skb_put+0x11b/0x210
[ 1816.597793][T29551]  netlink_sendmsg+0x813/0xb40
[ 1816.597825][T29551]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1816.597851][T29551]  ? aa_sock_msg_perm+0xf1/0x1b0
[ 1816.597875][T29551]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[ 1816.597896][T29551]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1816.597917][T29551]  ____sys_sendmsg+0xa68/0xad0
[ 1816.597943][T29551]  ? __might_fault+0xaf/0x130
[ 1816.597977][T29551]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1816.598012][T29551]  ? import_iovec+0x73/0xa0
[ 1816.598043][T29551]  ___sys_sendmsg+0x2a5/0x360
[ 1816.598067][T29551]  ? __lock_acquire+0x6b5/0x2cf0
[ 1816.598097][T29551]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1816.598130][T29551]  ? futex_wait+0x29a/0x380
[ 1816.598175][T29551]  ? __fget_files+0x2a/0x420
[ 1816.598195][T29551]  ? __fget_files+0x3a0/0x420
[ 1816.598226][T29551]  __x64_sys_sendmsg+0x1bd/0x2a0
[ 1816.598255][T29551]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[ 1816.598290][T29551]  ? rcu_is_watching+0x15/0xb0
[ 1816.598323][T29551]  do_syscall_64+0xe2/0xf80
[ 1816.598350][T29551]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1816.598369][T29551]  ? trace_irq_disable+0x37/0x100
[ 1816.598390][T29551]  ? clear_bhb_loop+0x60/0xb0
[ 1816.598414][T29551]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1816.598434][T29551] RIP: 0033:0x7f03ed79aeb9
[ 1816.598453][T29551] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1816.598472][T29551] RSP: 002b:00007f03ee59d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1816.598496][T29551] RAX: ffffffffffffffda RBX: 00007f03eda15fa0 RCX: 00007f03ed79aeb9
[ 1816.598519][T29551] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000006
[ 1816.598532][T29551] RBP: 00007f03ed808c1f R08: 0000000000000000 R09: 0000000000000000
[ 1816.598546][T29551] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1816.598558][T29551] R13: 00007f03eda16038 R14: 00007f03eda15fa0 R15: 00007fff8f66b658
[ 1816.598600][T29551]  </TASK>
[ 1817.033971][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5190 ms
[ 1817.042028][    C1] lec:lec_tx_timeout: lec0
[ 1817.058176][    C1] lec:lec_start_xmit: lec0:No lecd attached
[ 1817.296113][T29562] netlink: 38780 bytes leftover after parsing attributes in process `syz.1.12115'.
[ 1818.539713][T14028] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[ 1818.558504][T14028] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[ 1818.569913][T14028] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[ 1818.578125][T14028] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[ 1818.586316][T14028] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[ 1819.052910][T21918] IPVS: starting estimator thread 0...
[ 1819.204366][T29642] IPVS: using max 28 ests per chain, 67200 per kthread
[ 1819.351837][T29653] netlink: 36 bytes leftover after parsing attributes in process `syz.4.12137'.
[ 1819.633949][T29653] netlink: 12 bytes leftover after parsing attributes in process `syz.4.12137'.
[ 1819.728872][T29622] wg1 speed is unknown, defaulting to 1000
[ 1819.791985][T29669] : entered promiscuous mode
[ 1819.798854][T29622] lo speed is unknown, defaulting to 1000
[ 1820.235421][T29699] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12146'.
[ 1820.245944][T29699] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12146'.
[ 1820.273502][T29691] syzkaller0: entered promiscuous mode
[ 1820.288199][T29691] syzkaller0: entered allmulticast mode
[ 1820.644288][ T5829] Bluetooth: hci5: command tx timeout
[ 1820.663238][T29622] chnl_net:caif_netlink_parms(): no params data found
[ 1820.720792][T29713] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12149'.
[ 1821.117481][T29733] netlink: 27 bytes leftover after parsing attributes in process `syz.4.12154'.
[ 1821.241193][T29734] netlink: 'syz.4.12154': attribute type 13 has an invalid length.
[ 1822.733402][ T5829] Bluetooth: hci5: command tx timeout
[ 1822.974660][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5910 ms
[ 1822.982725][    C1] lec:lec_tx_timeout: lec0
[ 1824.376939][T29741] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12157'.
[ 1824.464906][T29742] netlink: 'syz.3.12157': attribute type 2 has an invalid length.
[ 1824.493618][T29734] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1824.501483][T29734] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1824.505838][T29742] netlink: 'syz.3.12157': attribute type 9 has an invalid length.
[ 1824.528688][T29742] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.12157'.
[ 1824.719395][T29734] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1824.741438][T29734] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1824.816399][ T5829] Bluetooth: hci5: command tx timeout
[ 1824.941728][T29737] vlan0: entered promiscuous mode
[ 1824.978435][T29622] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1824.993918][T29622] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1825.011596][T29622] bridge_slave_0: entered allmulticast mode
[ 1825.035455][T29622] bridge_slave_0: entered promiscuous mode
[ 1825.074074][T29747] netlink: 480 bytes leftover after parsing attributes in process `syz.4.12158'.
[ 1825.083455][T29747] netlink: 480 bytes leftover after parsing attributes in process `syz.4.12158'.
[ 1825.093299][ T7418] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1825.125059][ T7418] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1825.139675][T29622] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1825.164244][T29622] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1825.191807][T29622] bridge_slave_1: entered allmulticast mode
[ 1825.221198][T29754] netlink: 12 bytes leftover after parsing attributes in process `syz.2.12159'.
[ 1825.240884][T29622] bridge_slave_1: entered promiscuous mode
[ 1825.282884][ T7418] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1825.307692][ T7418] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1825.434375][T29622] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1825.493154][T29622] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1825.576814][T29622] team0: Port device team_slave_0 added
[ 1825.617255][T29767] xt_CHECKSUM: unsupported CHECKSUM operation 68
[ 1825.630400][T29768] netlink: 28 bytes leftover after parsing attributes in process `syz.4.12163'.
[ 1825.640071][T29767] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1825.640360][T29767] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1825.640577][T29767] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1825.692126][T29767] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1825.705147][T29767] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1825.721538][T29764] netlink: 48 bytes leftover after parsing attributes in process `syz.0.12164'.
[ 1825.732081][T29767] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1825.751612][T29771] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12165'.
[ 1825.764317][T29767] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1825.798240][T29622] team0: Port device team_slave_1 added
[ 1825.843933][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1825.854014][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1826.084075][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1826.178231][T29622] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1826.204310][T29622] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1826.274125][T29622] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1826.296825][T29761] wg1 speed is unknown, defaulting to 1000
[ 1826.306025][T29622] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1826.324613][T29622] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1826.418709][T29622] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1826.482572][T29761] lo speed is unknown, defaulting to 1000
[ 1826.698288][T29622] hsr_slave_0: entered promiscuous mode
[ 1826.726668][T29622] hsr_slave_1: entered promiscuous mode
[ 1826.742501][T29622] debugfs: 'hsr0' already exists in 'hsr'
[ 1826.758306][T29622] Cannot create hsr debugfs directory
[ 1826.850407][T29800] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12172'.
[ 1826.884131][ T5829] Bluetooth: hci5: command tx timeout
[ 1826.890156][T29796] netlink: 'syz.0.12171': attribute type 1 has an invalid length.
[ 1826.949802][T29796] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR
[ 1827.872450][T29825] netlink: 28 bytes leftover after parsing attributes in process `syz.0.12176'.
[ 1828.278496][T12766] IPVS: starting estimator thread 0...
[ 1828.404103][T29843] IPVS: using max 27 ests per chain, 64800 per kthread
[ 1828.452048][T29622] netdevsim netdevsim1 netdevsim0: renamed from eth0
[ 1828.498729][T29622] netdevsim netdevsim1 netdevsim1: renamed from eth1
[ 1828.533181][T29622] netdevsim netdevsim1 netdevsim2: renamed from eth2
[ 1828.552415][T29622] netdevsim netdevsim1 netdevsim3: renamed from eth3
[ 1828.802659][T29864] syzkaller1: entered promiscuous mode
[ 1828.812267][T29864] syzkaller1: entered allmulticast mode
[ 1828.828721][T29622] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1828.905374][T29622] 8021q: adding VLAN 0 to HW filter on device team0
[ 1828.950721][T28796] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1828.958004][T28796] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1829.002581][T28796] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1829.009852][T28796] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1829.129653][T29870] xt_CHECKSUM: unsupported CHECKSUM operation 68
[ 1829.467239][T29877] __nla_validate_parse: 5 callbacks suppressed
[ 1829.467261][T29877] netlink: 12 bytes leftover after parsing attributes in process `syz.2.12190'.
[ 1829.717520][T29622] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1829.746032][T29887] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12193'.
[ 1829.800712][T29892] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12195'.
[ 1829.851917][T29894] netlink: 'syz.2.12195': attribute type 22 has an invalid length.
[ 1829.872748][T29894] netlink: 24 bytes leftover after parsing attributes in process `syz.2.12195'.
[ 1829.972070][T29868] wg1 speed is unknown, defaulting to 1000
[ 1829.996855][T29868] lo speed is unknown, defaulting to 1000
[ 1830.200208][T29622] veth0_vlan: entered promiscuous mode
[ 1830.289533][T29622] veth1_vlan: entered promiscuous mode
[ 1830.687123][T29622] veth0_macvtap: entered promiscuous mode
[ 1830.737297][T29622] veth1_macvtap: entered promiscuous mode
[ 1830.797983][T29920] net_ratelimit: 11 callbacks suppressed
[ 1830.798006][T29920] openvswitch: netlink: Unexpected mask (mask=40040, allowed=10048)
[ 1830.873373][T29622] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1830.914364][T29622] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1830.962024][ T7436] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1831.028136][ T7436] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1831.081909][ T7436] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1831.105120][ T7436] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1831.284303][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1831.449974][T28796] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1831.451982][ T7418] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1831.487129][T28796] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1831.504530][ T7418] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1831.586055][T29948] netlink: 20 bytes leftover after parsing attributes in process `syz.2.12208'.
[ 1831.595682][T29946] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12209'.
[ 1831.637184][T29938] netlink: 20 bytes leftover after parsing attributes in process `syz.2.12208'.
[ 1832.095977][   T30] audit: type=1107 audit(1769950175.042:45): pid=29960 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='s�&���ޙ"�2!De��O�G�2�{�rv�KQ!*S�6�G9�ߑ�T��� �e��]�YD�[n�����r�Q�l�ϲ���ӵL��i'AQ@�E��������~NJ�5�6=�
��g�k
[ 1832.095977][   T30] y�s�؏�>?S���6����!�dc��vwZ�����ͪa�*�h������.KrE��FsL�:��(:,x������U�X�)�a;���N��;���Oo�	��r��H��X�c�2�����Y
[ 1832.095977][   T30] ��'
[ 1832.264151][   T30] audit: type=1107 audit(1769950175.082:46): pid=29960 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='s�&���ޙ"�2!De��O�G�2�{�rv�KQ!*S�6�G9�ߑ�T��� �e��]�YD�[n�����r�Q�l�ϲ���ӵL��i'AQ@�E��������~NJ�5�6=�
��g�k
[ 1832.264151][   T30] y�s�؏�>?S���6����!�dc��vwZ�����ͪa�*�h������.KrE��FsL�:��(:,x������U�X�)�a;���N��;���Oo�	��r��H��X�c�2�����Y
[ 1832.264151][   T30] ��'
[ 1832.303294][T29972] xt_CHECKSUM: unsupported CHECKSUM operation 68
[ 1832.307187][T29972] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1832.363964][   T30] audit: type=1107 audit(1769950175.082:47): pid=29960 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='s�&���ޙ"�2!De��O�G�2�{�rv�KQ!*S�6�G9�ߑ�T��� �e��]�YD�[n�����r�Q�l�ϲ���ӵL��i'AQ@�E��������~NJ�5�6=�
��g�k
[ 1832.363964][   T30] y�s�؏�>?S���6����!�dc��vwZ�����ͪa�*�h������.KrE��FsL�:��(:,x������U�X�)�a;���N��;���Oo�	��r��H��X�c�2�����Y
[ 1832.363964][   T30] ��'
[ 1832.404999][T29972] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1832.413556][T29972] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1832.448081][   T30] audit: type=1107 audit(1769950175.082:48): pid=29960 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='s�&���ޙ"�2!De��O�G�2�{�rv�KQ!*S�6�G9�ߑ�T��� �e��]�YD�[n�����r�Q�l�ϲ���ӵL��i'AQ@�E��������~NJ�5�6=�
��g�k
[ 1832.448081][   T30] y�s�؏�>?S���6����!�dc��vwZ�����ͪa�*�h������.KrE��FsL�:��(:,x������U�X�)�a;���N��;���Oo�	��r��H��X�c�2�����Y
[ 1832.448081][   T30] ��'
[ 1832.491400][T29972] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1832.500158][T29972] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1832.511903][T29972] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1832.530092][T29972] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1832.551964][   T30] audit: type=1107 audit(1769950175.082:49): pid=29960 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='s�&���ޙ"�2!De��O�G�2�{�rv�KQ!*S�6�G9�ߑ�T��� �e��]�YD�[n�����r�Q�l�ϲ���ӵL��i'AQ@�E��������~NJ�5�6=�
��g�k
[ 1832.551964][   T30] y�s�؏�>?S���6����!�dc��vwZ�����ͪa�*�h������.KrE��FsL�:��(:,x������U�X�)�a;���N��;���Oo�	��r��H��X�c�2�����Y
[ 1832.551964][   T30] ��'
[ 1832.612880][   T30] audit: type=1107 audit(1769950175.082:50): pid=29960 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='s�&���ޙ"�2!De��O�G�2�{�rv�KQ!*S�6�G9�ߑ�T��� �e��]�YD�[n�����r�Q�l�ϲ���ӵL��i'AQ@�E��������~NJ�5�6=�
��g�k
[ 1832.612880][   T30] y�s�؏�>?S���6����!�dc��vwZ�����ͪa�*�h������.KrE��FsL�:��(:,x������U�X�)�a;���N��;���Oo�	��r��H��X�c�2�����Y
[ 1832.612880][   T30] ��'
[ 1832.653079][   T30] audit: type=1107 audit(1769950175.082:51): pid=29960 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='s�&���ޙ"�2!De��O�G�2�{�rv�KQ!*S�6�G9�ߑ�T��� �e��]�YD�[n�����r�Q�l�ϲ���ӵL��i'AQ@�E��������~NJ�5�6=�
��g�k
[ 1832.653079][   T30] y�s�؏�>?S���6����!�dc��vwZ�����ͪa�*�h������.KrE��FsL�:��(:,x������U�X�)�a;���N��;���Oo�	��r��H��X�c�2�����Y
[ 1832.653079][   T30] ��'
[ 1832.748241][   T30] audit: type=1107 audit(1769950175.082:52): pid=29960 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='s�&���ޙ"�2!De��O�G�2�{�rv�KQ!*S�6�G9�ߑ�T��� �e��]�YD�[n�����r�Q�l�ϲ���ӵL��i'AQ@�E��������~NJ�5�6=�
��g�k
[ 1832.748241][   T30] y�s�؏�>?S���6����!�dc��vwZ�����ͪa�*�h������.KrE��FsL�:��(:,x������U�X�)�a;���N��;���Oo�	��r��H��X�c�2�����Y
[ 1832.748241][   T30] ��'
[ 1832.787848][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1832.987958][T29965] wg1 speed is unknown, defaulting to 1000
[ 1833.007458][T29965] lo speed is unknown, defaulting to 1000
[ 1833.018442][   T30] audit: type=1107 audit(1769950175.082:53): pid=29960 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='s�&���ޙ"�2!De��O�G�2�{�rv�KQ!*S�6�G9�ߑ�T��� �e��]�YD�[n�����r�Q�l�ϲ���ӵL��i'AQ@�E��������~NJ�5�6=�
��g�k
[ 1833.018442][   T30] y�s�؏�>?S���6����!�dc��vwZ�����ͪa�*�h������.KrE��FsL�:��(:,x������U�X�)�a;���N��;���Oo�	��r��H��X�c�2�����Y
[ 1833.018442][   T30] ��'
[ 1833.201408][   T30] audit: type=1107 audit(1769950175.082:54): pid=29960 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='s�&���ޙ"�2!De��O�G�2�{�rv�KQ!*S�6�G9�ߑ�T��� �e��]�YD�[n�����r�Q�l�ϲ���ӵL��i'AQ@�E��������~NJ�5�6=�
��g�k
[ 1833.201408][   T30] y�s�؏�>?S���6����!�dc��vwZ�����ͪa�*�h������.KrE��FsL�:��(:,x������U�X�)�a;���N��;���Oo�	��r��H��X�c�2�����Y
[ 1833.201408][   T30] ��'
[ 1833.849986][T30001] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12222'.
[ 1833.945290][T29998] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12221'.
[ 1834.121165][T29970] wg1 speed is unknown, defaulting to 1000
[ 1834.228680][T29970] lo speed is unknown, defaulting to 1000
[ 1834.228693][T29982] wg1 speed is unknown, defaulting to 1000
[ 1834.290703][T29982] lo speed is unknown, defaulting to 1000
[ 1834.645188][ T5829] Bluetooth: hci4: command 0x0405 tx timeout
[ 1835.028877][T30008] wg1 speed is unknown, defaulting to 1000
[ 1835.067888][T30002] wg1 speed is unknown, defaulting to 1000
[ 1835.100514][T30008] lo speed is unknown, defaulting to 1000
[ 1835.157668][T30013] netlink: 165 bytes leftover after parsing attributes in process `syz.1.12226'.
[ 1835.172483][T30002] lo speed is unknown, defaulting to 1000
[ 1835.212211][T30014] netlink: 277 bytes leftover after parsing attributes in process `syz.1.12226'.
[ 1835.615219][T30019] bridge0: port 3(syz_tun) entered blocking state
[ 1835.626759][T30019] bridge0: port 3(syz_tun) entered disabled state
[ 1835.633665][T30019] syz_tun: entered allmulticast mode
[ 1835.642140][T30019] syz_tun: entered promiscuous mode
[ 1835.666070][T30019] bridge0: port 3(syz_tun) entered blocking state
[ 1835.672676][T30019] bridge0: port 3(syz_tun) entered forwarding state
[ 1835.700496][T30017] netlink: 44 bytes leftover after parsing attributes in process `syz.1.12227'.
[ 1835.962964][T30024] netlink: 28 bytes leftover after parsing attributes in process `syz.1.12228'.
[ 1835.997810][T30024] netlink: 'syz.1.12228': attribute type 7 has an invalid length.
[ 1836.039236][T30024] netlink: 'syz.1.12228': attribute type 8 has an invalid length.
[ 1836.114900][T30024] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12228'.
[ 1836.200902][T30024] bridge0: entered promiscuous mode
[ 1836.217498][T30029] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12230'.
[ 1836.232237][T30024] bridge0: left promiscuous mode
[ 1836.281730][T30029] netdevsim netdevsim3 netdevsim0: entered allmulticast mode
[ 1836.320944][T30029] netlink: 32 bytes leftover after parsing attributes in process `syz.3.12230'.
[ 1836.545141][T30038] net_ratelimit: 3 callbacks suppressed
[ 1836.545161][T30038] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1836.559241][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1836.595437][T30041] netlink: 'syz.3.12233': attribute type 1 has an invalid length.
[ 1836.715321][T30041] bond2: entered promiscuous mode
[ 1836.734573][T30041] 8021q: adding VLAN 0 to HW filter on device bond2
[ 1837.059211][T30061] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1837.137085][T30068] xt_CHECKSUM: unsupported CHECKSUM operation 68
[ 1837.146805][T30061] tipc: Disabling bearer <eth:syzkaller0>
[ 1837.432772][T30077] netlink: 64 bytes leftover after parsing attributes in process `syz.2.12242'.
[ 1837.459526][T30077] netlink: 64 bytes leftover after parsing attributes in process `syz.2.12242'.
[ 1837.493073][T30080] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1837.501971][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1838.253463][T30047] wg1 speed is unknown, defaulting to 1000
[ 1838.350781][T30047] lo speed is unknown, defaulting to 1000
[ 1838.904859][T30125] openvswitch: netlink: Unexpected mask (mask=2200040, allowed=2010048)
[ 1839.075880][T30066] wg1 speed is unknown, defaulting to 1000
[ 1839.096752][T30134] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12255'.
[ 1839.435219][T30066] lo speed is unknown, defaulting to 1000
[ 1842.340530][T30173] syzkaller0: entered promiscuous mode
[ 1842.367000][T30173] syzkaller0: entered allmulticast mode
[ 1842.580642][T30178] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1842.590099][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1842.606229][T30178] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1842.615125][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1842.630299][T30178] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1842.639192][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1842.659506][T30178] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1842.668489][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1842.678794][T30178] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1842.687495][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1842.756096][T30180] IPVS: set_ctl: invalid protocol: 48 10.1.1.1:20000
[ 1843.778692][T30188] __nla_validate_parse: 2 callbacks suppressed
[ 1843.778715][T30188] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12269'.
[ 1843.946133][T30196] 8021q: adding VLAN 0 to HW filter on device bond1
[ 1843.987598][T30199] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link
[ 1844.045159][T30200] 8021q: VLANs not supported on gre0
[ 1844.060731][T30204] netlink: 'syz.4.12273': attribute type 39 has an invalid length.
[ 1844.297222][ T9474] lec:lec_start_xmit: lec0:No lecd attached
[ 1844.526808][T30226] netlink: 44 bytes leftover after parsing attributes in process `syz.4.12279'.
[ 1844.580100][T30228] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12279'.
[ 1844.835972][T30229] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1844.860289][T30245] xt_CHECKSUM: unsupported CHECKSUM operation 68
[ 1845.144811][T30229] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1845.214736][T30255] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1845.380711][T30229] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1845.476427][T30255] tipc: Disabling bearer <eth:syzkaller0>
[ 1845.782373][T30229] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1846.081482][T30280] netlink: 20 bytes leftover after parsing attributes in process `syz.0.12289'.
[ 1846.198461][T30237] wg1 speed is unknown, defaulting to 1000
[ 1846.213092][T30237] lo speed is unknown, defaulting to 1000
[ 1846.420796][ T7418] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1846.602594][ T7418] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1846.612489][ T7418] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1846.668744][ T7418] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1846.823557][T30298] delete_channel: no stack
[ 1846.849909][T30300] netlink: 'syz.4.12291': attribute type 1 has an invalid length.
[ 1846.858810][T30298] delete_channel: no stack
[ 1846.995714][T30305] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[ 1847.119300][T30311] netlink: 12 bytes leftover after parsing attributes in process `syz.0.12298'.
[ 1847.293635][T30318] netlink: 16 bytes leftover after parsing attributes in process `syz.0.12300'.
[ 1847.352614][T30318] netlink: 12 bytes leftover after parsing attributes in process `syz.0.12300'.
[ 1847.478317][T30324] netlink: 'syz.3.12302': attribute type 1 has an invalid length.
[ 1847.493159][T30322] netlink: 36 bytes leftover after parsing attributes in process `syz.4.12304'.
[ 1847.577804][T30326] netlink: 'syz.1.12303': attribute type 1 has an invalid length.
[ 1847.597502][T30329] netlink: 3 bytes leftover after parsing attributes in process `syz.3.12302'.
[ 1847.638059][T30326] netlink: 'syz.1.12303': attribute type 4 has an invalid length.
[ 1847.675771][T30329] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12302'.
[ 1847.749559][T30324] bond3: entered promiscuous mode
[ 1847.770849][T30333] sctp: [Deprecated]: syz.0.12305 (pid 30333) Use of int in maxseg socket option.
[ 1847.770849][T30333] Use struct sctp_assoc_value instead
[ 1847.799279][T30324] 8021q: adding VLAN 0 to HW filter on device bond3
[ 1847.988630][T30331] bond3: (slave bridge1): making interface the new active one
[ 1848.007637][T30331] bridge1: entered promiscuous mode
[ 1848.043640][T30331] bond3: (slave bridge1): Enslaving as an active interface with an up link
[ 1848.175329][T30324] caif0: Master is either lo or non-ether device
[ 1848.356908][T30309] wg1 speed is unknown, defaulting to 1000
[ 1848.384449][T30309] lo speed is unknown, defaulting to 1000
[ 1848.393138][T30353] siw: device registration error -23
[ 1848.401055][T30359] xt_TPROXY: Can be used only with -p tcp or -p udp
[ 1848.695174][T30372] xt_CHECKSUM: unsupported CHECKSUM operation 68
[ 1848.721325][T30363] net_ratelimit: 113 callbacks suppressed
[ 1848.721349][T30363] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[ 1848.888184][T30376] __nla_validate_parse: 71 callbacks suppressed
[ 1848.888206][T30376] netlink: 24 bytes leftover after parsing attributes in process `syz.4.12315'.
[ 1848.962398][T30380] netlink: 16 bytes leftover after parsing attributes in process `syz.3.12316'.
[ 1848.976247][T30380] workqueue: Failed to create a rescuer kthread for wq "nbd64-recv": -EINTR
[ 1848.976399][T30380] block (null): Could not allocate knbd recv work queue.
[ 1849.061127][T30380] nbd: failed to add new device
[ 1849.126120][T30388] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12315'.
[ 1849.186952][T30369] wg1 speed is unknown, defaulting to 1000
[ 1849.313558][T30369] lo speed is unknown, defaulting to 1000
[ 1849.763761][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5470 ms
[ 1849.771827][    C1] lec:lec_tx_timeout: lec0
[ 1849.917373][T30404] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[ 1849.992967][T30406] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12321'.
[ 1850.148962][T12766] IPVS: starting estimator thread 0...
[ 1850.255729][T30411] IPVS: using max 25 ests per chain, 60000 per kthread
[ 1850.692124][T30418] syzkaller0: entered promiscuous mode
[ 1850.719617][T30418] syzkaller0: entered allmulticast mode
[ 1850.763288][T30425] netlink: 28 bytes leftover after parsing attributes in process `syz.3.12320'.
[ 1850.900915][T30435] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1850.911175][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1851.516800][T30465] netlink: 'syz.3.12332': attribute type 1 has an invalid length.
[ 1853.060991][ T1300] lec:lec_start_xmit: lec0:No lecd attached
[ 1854.825348][T30484] sctp: [Deprecated]: syz.2.12335 (pid 30484) Use of int in max_burst socket option.
[ 1854.825348][T30484] Use struct sctp_assoc_value instead
[ 1854.885267][T30487] bond0: (slave rose0): Releasing backup interface
[ 1854.910928][T30488] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12337'.
[ 1855.194660][T30451] wg1 speed is unknown, defaulting to 1000
[ 1855.208111][T30451] lo speed is unknown, defaulting to 1000
[ 1855.305263][T30494] xt_CHECKSUM: unsupported CHECKSUM operation 68
[ 1855.342601][T30494] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1855.375038][T30494] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1855.383487][T30494] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1855.406690][T30495] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1855.416045][T30495] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1855.428277][T30495] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1855.498298][T30495] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1855.615708][T30495] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1855.624309][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1855.884556][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1855.901866][T30499] can: request_module (can-proto-0) failed.
[ 1855.944226][T30501] netlink: 68 bytes leftover after parsing attributes in process `syz.4.12341'.
[ 1856.098586][T30493] wg1 speed is unknown, defaulting to 1000
[ 1856.145084][T30493] lo speed is unknown, defaulting to 1000
[ 1856.868738][T30527] netlink: 36 bytes leftover after parsing attributes in process `syz.3.12346'.
[ 1857.194392][T30536] sctp: [Deprecated]: syz.0.12348 (pid 30536) Use of struct sctp_assoc_value in delayed_ack socket option.
[ 1857.194392][T30536] Use struct sctp_sack_info instead
[ 1857.707928][T30534] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1857.715709][T30534] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1858.309161][T30534] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1858.377064][T30534] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1858.723766][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5660 ms
[ 1858.731853][    C1] lec:lec_tx_timeout: lec0
[ 1859.233936][T30505] wg1 speed is unknown, defaulting to 1000
[ 1859.244073][ T7418] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1859.255787][T30505] lo speed is unknown, defaulting to 1000
[ 1859.439380][ T7418] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1859.471623][ T7418] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1859.531345][ T7418] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1860.306520][T30525] wg1 speed is unknown, defaulting to 1000
[ 1860.330735][T30525] lo speed is unknown, defaulting to 1000
[ 1860.630969][T30578] net_ratelimit: 2 callbacks suppressed
[ 1860.630990][T30578] openvswitch: netlink: Invalid VLAN frame
[ 1860.664980][T30578] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12357'.
[ 1860.895467][T30582] netlink: 'syz.0.12358': attribute type 13 has an invalid length.
[ 1861.361862][T30591] lo: Caught tx_queue_len zero misconfig
[ 1861.788766][T30589] syzkaller0: entered promiscuous mode
[ 1861.804218][T30589] syzkaller0: entered allmulticast mode
[ 1861.820363][T30603] pimreg: entered allmulticast mode
[ 1861.847710][T30604] pimreg: left allmulticast mode
[ 1865.599234][T30636] x_tables: duplicate underflow at hook 1
[ 1865.782876][T30653] netlink: 132 bytes leftover after parsing attributes in process `syz.4.12377'.
[ 1865.978717][T30647] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.12375'.
[ 1866.090973][T30667] sctp: [Deprecated]: syz.3.12380 (pid 30667) Use of int in max_burst socket option.
[ 1866.090973][T30667] Use struct sctp_assoc_value instead
[ 1866.346055][T30682] netlink: 'syz.2.12385': attribute type 6 has an invalid length.
[ 1866.476487][T30686] netlink: 312 bytes leftover after parsing attributes in process `syz.1.12386'.
[ 1866.942594][T30705] xt_bpf: check failed: parse error
[ 1867.139547][T30708] netlink: 16 bytes leftover after parsing attributes in process `syz.1.12390'.
[ 1867.227721][T30708] sctp: [Deprecated]: syz.1.12390 (pid 30708) Use of struct sctp_assoc_value in delayed_ack socket option.
[ 1867.227721][T30708] Use struct sctp_sack_info instead
[ 1867.405102][T30713] netem: change failed
[ 1867.455837][T30713] openvswitch: netlink: Message has 8 unknown bytes.
[ 1867.472940][T30666] wg1 speed is unknown, defaulting to 1000
[ 1867.513086][T30666] lo speed is unknown, defaulting to 1000
[ 1868.135096][T30685] wg1 speed is unknown, defaulting to 1000
[ 1868.195641][T30685] lo speed is unknown, defaulting to 1000
[ 1868.395609][T30726] netlink: 52 bytes leftover after parsing attributes in process `syz.4.12396'.
[ 1868.445678][T30727] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1868.482992][T30726] netlink: 52 bytes leftover after parsing attributes in process `syz.4.12396'.
[ 1868.526031][T30726] netlink: 52 bytes leftover after parsing attributes in process `syz.4.12396'.
[ 1868.668593][T30732] netlink: 16 bytes leftover after parsing attributes in process `syz.1.12398'.
[ 1868.786470][T30736] Bluetooth: MGMT ver 1.23
[ 1868.934332][T30738] netlink: 'syz.0.12400': attribute type 10 has an invalid length.
[ 1868.962705][T30738] netlink: 40 bytes leftover after parsing attributes in process `syz.0.12400'.
[ 1868.984619][T30739] netlink: 'syz.0.12400': attribute type 21 has an invalid length.
[ 1869.053420][T30738] team0: Port device geneve0 added
[ 1869.079126][ T7436] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1869.103971][ T7436] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1869.146088][T30739] netlink: 'syz.0.12400': attribute type 3 has an invalid length.
[ 1869.163615][T30739] netlink: 144 bytes leftover after parsing attributes in process `syz.0.12400'.
[ 1869.407545][T30721] wg1 speed is unknown, defaulting to 1000
[ 1869.413601][ T7436] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1869.465918][ T7436] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1869.730223][T30721] lo speed is unknown, defaulting to 1000
[ 1869.786751][ T7436] syzkaller0: tun_net_xmit 76
[ 1869.792304][ T7436] syzkaller0: tun_net_xmit 48
[ 1872.953064][T30775] netlink: 20 bytes leftover after parsing attributes in process `syz.1.12408'.
[ 1873.057212][T30794] netlink: 20 bytes leftover after parsing attributes in process `syz.1.12408'.
[ 1873.118191][T30794] nbd: device at index 64 is going down
[ 1873.348872][T30807] udevd[30807]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory
[ 1873.408162][T30807] udevd[30807]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory
[ 1873.454942][T30816] sock: sock_set_timeout: `syz.4.12413' (pid 30816) tries to set negative timeout
[ 1873.849256][T30827] x_tables: duplicate underflow at hook 1
[ 1873.866402][T30827] netlink: 'syz.4.12418': attribute type 10 has an invalid length.
[ 1873.951335][T30827] netlink: 55 bytes leftover after parsing attributes in process `syz.4.12418'.
[ 1873.974771][T30834] netlink: 96 bytes leftover after parsing attributes in process `syz.2.12416'.
[ 1874.326912][T30841] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12420'.
[ 1874.511718][T30849] netlink: 20 bytes leftover after parsing attributes in process `syz.3.12421'.
[ 1874.819106][T30865] syzkaller0: entered promiscuous mode
[ 1874.841608][T30865] syzkaller0: entered allmulticast mode
[ 1874.989917][T30875] netlink: 177296 bytes leftover after parsing attributes in process `syz.2.12431'.
[ 1875.160630][T30792] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[ 1875.181206][T30792] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[ 1875.216386][T30792] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[ 1875.255255][T30792] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[ 1875.384055][T30887] --map-set only usable from mangle table
[ 1875.713109][T30906] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12440'.
[ 1875.771667][T30898] netlink: 'syz.0.12435': attribute type 1 has an invalid length.
[ 1876.150034][T30927] netlink: 24 bytes leftover after parsing attributes in process `syz.3.12443'.
[ 1876.224865][T30927] netlink: 24 bytes leftover after parsing attributes in process `syz.3.12443'.
[ 1876.596826][T30939] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1876.845065][T30892] wg1 speed is unknown, defaulting to 1000
[ 1876.917014][T30892] lo speed is unknown, defaulting to 1000
[ 1877.014875][T30943] syzkaller0: entered promiscuous mode
[ 1877.020417][T30943] syzkaller0: entered allmulticast mode
[ 1877.079187][T30951] netlink: 'syz.3.12449': attribute type 1 has an invalid length.
[ 1877.480287][T30965] netlink: 'syz.2.12451': attribute type 3 has an invalid length.
[ 1877.535280][T30965] netlink: 'syz.2.12451': attribute type 39 has an invalid length.
[ 1881.139713][T30994] __nla_validate_parse: 4 callbacks suppressed
[ 1881.139734][T30994] netlink: 100 bytes leftover after parsing attributes in process `syz.2.12456'.
[ 1881.559392][T31000] netlink: 64 bytes leftover after parsing attributes in process `syz.1.12457'.
[ 1882.135841][T31027] netlink: 64 bytes leftover after parsing attributes in process `syz.3.12465'.
[ 1882.266816][T31027] vlan2: entered promiscuous mode
[ 1882.301806][T31027] geneve1: entered promiscuous mode
[ 1882.320297][T30996] wg1 speed is unknown, defaulting to 1000
[ 1882.339630][T30996] lo speed is unknown, defaulting to 1000
[ 1882.629804][T31041] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12467'.
[ 1882.791045][T31042] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1882.847653][T31034] tipc: Resetting bearer <eth:syzkaller0>
[ 1883.051662][T31044] syzkaller0: entered promiscuous mode
[ 1883.057412][T31044] syzkaller0: entered allmulticast mode
[ 1883.174864][T31031] tipc: Resetting bearer <eth:syzkaller0>
[ 1883.235044][T31031] tipc: Disabling bearer <eth:syzkaller0>
[ 1883.318563][T31059] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12474'.
[ 1883.551630][T31067] syzkaller0: entered promiscuous mode
[ 1883.557142][T31068] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12476'.
[ 1883.585634][T31067] syzkaller0: entered allmulticast mode
[ 1883.888962][T31079] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12480'.
[ 1883.922641][T31076] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12480'.
[ 1883.953934][T31076] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12480'.
[ 1884.164497][T14028] Bluetooth: hci5: command tx timeout
[ 1884.426486][T31092] netlink: 27 bytes leftover after parsing attributes in process `syz.3.12486'.
[ 1884.719060][T31097] wg1 speed is unknown, defaulting to 1000
[ 1884.727724][T31097] lo speed is unknown, defaulting to 1000
[ 1884.886928][T31114] bridge0: port 3(batadv1) entered blocking state
[ 1884.893796][T31114] bridge0: port 3(batadv1) entered disabled state
[ 1884.900564][T31114] batadv1: entered allmulticast mode
[ 1884.909037][T31114] batadv1: entered promiscuous mode
[ 1885.093135][T31125] netlink: 'syz.4.12495': attribute type 6 has an invalid length.
[ 1885.385173][T30793] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled
[ 1885.395192][T30793] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled
[ 1885.742027][T31133] bond2: Unable to set up delay as MII monitoring is disabled
[ 1885.808201][T31133] bond2 (unregistering): Released all slaves
[ 1885.846931][T31138] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[ 1886.193350][T31145] wg1 speed is unknown, defaulting to 1000
[ 1886.205425][T31145] lo speed is unknown, defaulting to 1000
[ 1886.508545][T31161] batadv0: entered promiscuous mode
[ 1886.526769][T31161] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check.
[ 1887.687310][T31199] syzkaller1: entered promiscuous mode
[ 1887.692859][T31199] syzkaller1: entered allmulticast mode
[ 1887.818079][T31176] wg1 speed is unknown, defaulting to 1000
[ 1888.082876][T31205] tipc: Resetting bearer <eth:geneve1>
[ 1888.091837][T31213] __nla_validate_parse: 2 callbacks suppressed
[ 1888.091858][T31213] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12519'.
[ 1888.150190][T31176] lo speed is unknown, defaulting to 1000
[ 1888.310085][T12766] lo speed is unknown, defaulting to 1000
[ 1888.396585][T31224] x_tables: duplicate underflow at hook 3
[ 1888.405643][T30778] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1888.537578][T30778] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1888.546439][T30778] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1888.567307][T31227] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0
[ 1888.599979][T30778] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1888.749688][T31229] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12522'.
[ 1888.793503][T31231] openvswitch: netlink: Actions may not be safe on all matching packets
[ 1888.829595][T31229] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12522'.
[ 1888.925709][T31233] netlink: 'syz.4.12523': attribute type 11 has an invalid length.
[ 1888.952606][T31233] netlink: 'syz.4.12523': attribute type 23 has an invalid length.
[ 1888.987942][T31233] netlink: 224 bytes leftover after parsing attributes in process `syz.4.12523'.
[ 1889.026230][T31229] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12522'.
[ 1889.043593][T31235] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1889.054358][T31229] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12522'.
[ 1889.063296][T30778] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[ 1889.063447][T30778] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[ 1889.099482][T30778] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[ 1889.109665][T30778] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[ 1889.565335][T31249] siw: device registration error -23
[ 1889.633268][T31249] netlink: 12 bytes leftover after parsing attributes in process `syz.0.12528'.
[ 1890.130866][T31269] netlink: 'syz.0.12533': attribute type 11 has an invalid length.
[ 1890.169498][T31269] netlink: 199828 bytes leftover after parsing attributes in process `syz.0.12533'.
[ 1890.435836][T31282] netlink: 68 bytes leftover after parsing attributes in process `syz.3.12535'.
[ 1890.506107][T31282] netlink: 20 bytes leftover after parsing attributes in process `syz.3.12535'.
[ 1891.189101][T31306] 8021q: adding VLAN 0 to HW filter on device bond2
[ 1891.218118][T31303] syzkaller1: entered promiscuous mode
[ 1891.224062][T31303] syzkaller1: entered allmulticast mode
[ 1891.289830][T31278] wg1 speed is unknown, defaulting to 1000
[ 1891.305655][T31278] lo speed is unknown, defaulting to 1000
[ 1891.888238][T31330] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1891.960231][T31291] wg1 speed is unknown, defaulting to 1000
[ 1891.983639][T31291] lo speed is unknown, defaulting to 1000
[ 1892.097537][T31330] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1892.351175][T31340] SET target dimension over the limit!
[ 1892.489031][T31330] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1892.735927][T31330] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1892.949208][T31351] netlink: 'syz.4.12552': attribute type 13 has an invalid length.
[ 1893.228423][T31365] __nla_validate_parse: 4 callbacks suppressed
[ 1893.228443][T31365] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12554'.
[ 1893.341034][T28811] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1893.372920][T28811] netdevsim netdevsim4 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[ 1893.401044][T28811] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1893.509261][T28811] netdevsim netdevsim4 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[ 1893.534658][T28811] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1893.648844][T28811] netdevsim netdevsim4 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[ 1893.674328][T28811] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1893.682784][T28811] netdevsim netdevsim4 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[ 1893.739310][T28811] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1893.769694][T28811] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1893.848790][T28811] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1893.874355][T28811] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1893.965125][T31389] xt_hashlimit: size too large, truncated to 1048576
[ 1893.987044][T31384] netlink: 28 bytes leftover after parsing attributes in process `syz.4.12557'.
[ 1894.047013][T31392] �x9�: renamed from bridge_slave_0
[ 1894.079273][T31392] openvswitch: netlink: Either Ethernet header or EtherType is required.
[ 1894.112946][T31389] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[ 1901.209103][T14028] Bluetooth: hci2: command 0x0406 tx timeout
[ 1907.970260][ T9474] lec:lec_start_xmit: lec0:No lecd attached
[ 1909.370580][T30778] batadv2: left allmulticast mode
[ 1909.375792][T30778] batadv2: left promiscuous mode
[ 1909.380916][T30778] bridge0: port 1(batadv2) entered disabled state
[ 1909.389925][T30778] batadv1: left allmulticast mode
[ 1909.395330][T30778] batadv1: left promiscuous mode
[ 1909.401658][T30778] bridge0: port 3(batadv1) entered disabled state
[ 1909.410104][T30778] bridge_slave_1: left allmulticast mode
[ 1909.415935][T30778] bridge_slave_1: left promiscuous mode
[ 1909.421675][T30778] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1909.436804][T30778] ip6gretap1: left allmulticast mode
[ 1909.442165][T30778] ip6gretap1: left promiscuous mode
[ 1909.448619][T30778] bridge3: port 1(ip6gretap1) entered disabled state
[ 1909.668042][T30778] bond5 (unregistering): (slave erspan0): Releasing active interface
[ 1909.722056][T30778] gretap0 (unregistering): left promiscuous mode
[ 1909.793070][T30778] dvmrp0 (unregistering): left allmulticast mode
[ 1909.988860][T30778] bond4 (unregistering): (slave bridge2): Releasing backup interface
[ 1909.998006][T30778] bridge2 (unregistering): left promiscuous mode
[ 1910.135783][T30778] bond0 (unregistering): left promiscuous mode
[ 1910.141992][T30778] bond_slave_0: left promiscuous mode
[ 1910.147800][T30778] bond_slave_1: left promiscuous mode
[ 1910.160855][T30778] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1910.171400][T30778] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1910.181414][T30778] bond0 (unregistering): Released all slaves
[ 1910.325393][T30778] bond1 (unregistering): Released all slaves
[ 1910.339970][T30778] bond2 (unregistering): Released all slaves
[ 1910.354265][T30778] bond3 (unregistering): Released all slaves
[ 1910.512942][T30778] bond4 (unregistering): Released all slaves
[ 1910.651435][T30778] bond5 (unregistering): (slave veth5): Releasing active interface
[ 1910.660750][T30778] bond5 (unregistering): Released all slaves
[ 1910.675924][T30778] bond6 (unregistering): Released all slaves
[ 1910.760183][T30778] ����: left promiscuous mode
[ 1910.835741][T30778] : left promiscuous mode
[ 1910.886163][T30778] tipc: Disabling bearer <eth:syzkaller0>
[ 1910.893353][T30778] tipc: Left network mode
[ 1911.645000][T30778] hsr_slave_0: left promiscuous mode
[ 1911.651759][T30778] hsr_slave_1: left promiscuous mode
[ 1911.659082][T30778] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1911.712717][T30778] pim6reg (unregistering): left allmulticast mode
[ 1911.742401][T30778] pimreg (unregistering): left allmulticast mode
[ 1912.886869][T30778] IPVS: stop unused estimator thread 0...
[ 1913.763905][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5790 ms
[ 1913.771965][    C1] lec:lec_tx_timeout: lec0
[ 1914.499831][ T1300] lec:lec_start_xmit: lec0:No lecd attached
[ 1919.773867][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5270 ms
[ 1919.782028][    C1] lec:lec_tx_timeout: lec0
[ 1921.693903][ T5829] Bluetooth: hci3: command 0x0406 tx timeout
[ 1971.361085][ T9474] lec:lec_start_xmit: lec0:No lecd attached
[ 1976.733864][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5370 ms
[ 1976.741926][    C1] lec:lec_tx_timeout: lec0
[ 1976.746977][    C1] lec:lec_start_xmit: lec0:No lecd attached
[ 1981.763769][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms
[ 1981.772718][    C1] lec:lec_tx_timeout: lec0
[ 2034.841462][ T9474] lec:lec_start_xmit: lec0:No lecd attached
[ 2039.863759][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms
[ 2039.871828][    C1] lec:lec_tx_timeout: lec0
[ 2039.876622][    C1] lec:lec_start_xmit: lec0:No lecd attached
[ 2044.564192][T31460] Bluetooth: hci5: command 0x0406 tx timeout
[ 2044.883831][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[ 2044.891975][    C1] lec:lec_tx_timeout: lec0
[ 2088.572774][T30778] batadv1: left allmulticast mode
[ 2088.578453][T30778] batadv1: left promiscuous mode
[ 2088.584596][T30778] bridge0: port 4(batadv1) entered disabled state
[ 2089.017503][T30778] gretap0 (unregistering): left promiscuous mode
[ 2089.042208][T30778] bond7 (unregistering): (slave gretap1): Releasing active interface
[ 2089.109894][T30778] dvmrp6 (unregistering): left allmulticast mode
[ 2089.310614][T30778] team0: Port device bridge1 removed
[ 2089.611259][T30778] bond0 (unregistering): left promiscuous mode
[ 2089.618874][T30778] dummy0: left promiscuous mode
[ 2089.629660][T30778] bond0 (unregistering): (slave dummy0): Releasing backup interface
[ 2089.640182][T30778] bond0 (unregistering): Released all slaves
[ 2089.651244][T30778] bond1 (unregistering): Released all slaves
[ 2089.874845][T30778] bond2 (unregistering): (slave veth3): Releasing active interface
[ 2089.889517][T30778] bond2 (unregistering): Released all slaves
[ 2089.905910][T30778] bond3 (unregistering): Released all slaves
[ 2090.119791][T30778] bond4 (unregistering): (slave veth5): Releasing active interface
[ 2090.130445][T30778] bond4 (unregistering): Released all slaves
[ 2090.279248][T30778] bond5 (unregistering): (slave veth7): Releasing backup interface
[ 2090.287344][T30778] veth7: left promiscuous mode
[ 2090.295104][T30778] bond5 (unregistering): Released all slaves
[ 2090.452909][T30778] bond6 (unregistering): Released all slaves
[ 2090.467346][T30778] bond7 (unregistering): Released all slaves
[ 2090.654949][T30778] tipc: Left network mode
[ 2091.110549][T30778] hsr_slave_0: left promiscuous mode
[ 2091.121684][T30778] hsr_slave_1: left promiscuous mode
[ 2091.128400][T30778] batman_adv: batadv0: Removing interface: macvtap1
[ 2091.140393][T30778] veth1_macvtap: left promiscuous mode
[ 2091.146717][T30778] veth0_macvtap: left promiscuous mode
[ 2091.152421][T30778] veth1_vlan: left promiscuous mode
[ 2091.157903][T30778] veth0_vlan: left promiscuous mode
[ 2092.917015][T30778] IPVS: stop unused estimator thread 0...
[ 2098.809983][ T1300] lec:lec_start_xmit: lec0:No lecd attached
[ 2103.833777][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms
[ 2103.841960][    C1] lec:lec_tx_timeout: lec0
[ 2103.846816][    C1] lec:lec_start_xmit: lec0:No lecd attached
[ 2108.853776][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[ 2108.861849][    C1] lec:lec_tx_timeout: lec0
[ 2144.884476][    C1] ==================================================================
[ 2144.892596][    C1] BUG: KASAN: slab-out-of-bounds in lec_arp_clear_vccs+0x6c/0x380
[ 2144.900435][    C1] Read of size 8 at addr ffff8880509a66d0 by task swapper/1/0
[ 2144.907922][    C1] 
[ 2144.910257][    C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) 
[ 2144.910274][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[ 2144.910285][    C1] Call Trace:
[ 2144.910293][    C1]  <IRQ>
[ 2144.910300][    C1]  dump_stack_lvl+0xe8/0x150
[ 2144.910322][    C1]  print_report+0xba/0x230
[ 2144.910339][    C1]  ? lec_arp_clear_vccs+0x6c/0x380
[ 2144.910358][    C1]  kasan_report+0x117/0x150
[ 2144.910377][    C1]  ? lec_arp_clear_vccs+0x6c/0x380
[ 2144.910400][    C1]  lec_arp_clear_vccs+0x6c/0x380
[ 2144.910423][    C1]  lec_arp_expire_vcc+0x17d/0x370
[ 2144.910452][    C1]  call_timer_fn+0x192/0x5a0
[ 2144.910474][    C1]  ? __pfx_lec_arp_expire_vcc+0x10/0x10
[ 2144.910494][    C1]  ? call_timer_fn+0xd4/0x5a0
[ 2144.910516][    C1]  ? __pfx_call_timer_fn+0x10/0x10
[ 2144.910542][    C1]  ? _raw_spin_unlock_irq+0x23/0x50
[ 2144.910559][    C1]  ? __pfx_lec_arp_expire_vcc+0x10/0x10
[ 2144.910585][    C1]  __run_timer_base+0x652/0x8b0
[ 2144.910605][    C1]  ? ktime_get+0x45/0x200
[ 2144.910628][    C1]  ? __pfx___run_timer_base+0x10/0x10
[ 2144.910650][    C1]  ? sched_clock_cpu+0x74/0x440
[ 2144.910675][    C1]  run_timer_softirq+0xb7/0x170
[ 2144.910696][    C1]  handle_softirqs+0x22a/0x7c0
[ 2144.910711][    C1]  ? __irq_exit_rcu+0x5f/0x150
[ 2144.910728][    C1]  __irq_exit_rcu+0x5f/0x150
[ 2144.910741][    C1]  irq_exit_rcu+0x9/0x30
[ 2144.910753][    C1]  sysvec_apic_timer_interrupt+0xa6/0xc0
[ 2144.910772][    C1]  </IRQ>
[ 2144.910777][    C1]  <TASK>
[ 2144.910784][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 2144.910801][    C1] RIP: 0010:pv_native_safe_halt+0xf/0x20
[ 2144.910820][    C1] Code: 38 5f 02 e9 53 e8 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d d3 b7 10 00 fb f4 <c3> cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90
[ 2144.910834][    C1] RSP: 0018:ffffc90000197e20 EFLAGS: 00000242
[ 2144.910849][    C1] RAX: 000000000079925d RBX: ffffffff8199370d RCX: 0000000080000001
[ 2144.910860][    C1] RDX: 0000000000000001 RSI: ffffffff8dccbb91 RDI: ffffffff8c073980
[ 2144.910870][    C1] RBP: ffffc90000197f10 R08: ffff8880b87336db R09: 1ffff110170e66db
[ 2144.910882][    C1] R10: dffffc0000000000 R11: ffffed10170e66dc R12: ffffffff8fef3470
[ 2144.910893][    C1] R13: 1ffff11003a5eb70 R14: 0000000000000001 R15: 0000000000000001
[ 2144.910905][    C1]  ? do_idle+0x1bd/0x500
[ 2144.910922][    C1]  default_idle+0x9/0x20
[ 2144.910942][    C1]  default_idle_call+0x72/0xb0
[ 2144.910963][    C1]  do_idle+0x1bd/0x500
[ 2144.910976][    C1]  ? lockdep_hardirqs_on+0x7a/0x110
[ 2144.910997][    C1]  ? __pfx_do_idle+0x10/0x10
[ 2144.911023][    C1]  cpu_startup_entry+0x43/0x60
[ 2144.911036][    C1]  start_secondary+0x101/0x110
[ 2144.911058][    C1]  common_startup_64+0x13e/0x147
[ 2144.911084][    C1]  </TASK>
[ 2144.911089][    C1] 
[ 2145.179588][    C1] Allocated by task 28982:
[ 2145.184001][    C1]  kasan_save_track+0x3e/0x80
[ 2145.188675][    C1]  __kasan_kmalloc+0x93/0xb0
[ 2145.193268][    C1]  __kmalloc_cache_noprof+0x3d1/0x6e0
[ 2145.198647][    C1]  rxrpc_alloc_peer+0x7d/0x330
[ 2145.203424][    C1]  rxrpc_service_prealloc_one+0x1f4/0xe00
[ 2145.209189][    C1]  afs_charge_preallocation+0x394/0x4e0
[ 2145.214771][    C1]  afs_open_socket+0x33c/0x3f0
[ 2145.219654][    C1]  afs_net_init+0x67d/0x880
[ 2145.224159][    C1]  ops_init+0x35c/0x5c0
[ 2145.228318][    C1]  setup_net+0x118/0x340
[ 2145.232592][    C1]  copy_net_ns+0x50e/0x730
[ 2145.237064][    C1]  create_new_namespaces+0x3e7/0x6a0
[ 2145.242371][    C1]  unshare_nsproxy_namespaces+0x11a/0x160
[ 2145.248147][    C1]  ksys_unshare+0x4f4/0x900
[ 2145.252663][    C1]  __x64_sys_unshare+0x38/0x50
[ 2145.257454][    C1]  do_syscall_64+0xe2/0xf80
[ 2145.261963][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2145.267872][    C1] 
[ 2145.270196][    C1] The buggy address belongs to the object at ffff8880509a6400
[ 2145.270196][    C1]  which belongs to the cache kmalloc-512 of size 512
[ 2145.284258][    C1] The buggy address is located 344 bytes to the right of
[ 2145.284258][    C1]  allocated 376-byte region [ffff8880509a6400, ffff8880509a6578)
[ 2145.298946][    C1] 
[ 2145.301274][    C1] The buggy address belongs to the physical page:
[ 2145.307693][    C1] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x509a4
[ 2145.316457][    C1] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[ 2145.325046][    C1] anon flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[ 2145.333031][    C1] page_type: f5(slab)
[ 2145.337012][    C1] raw: 00fff00000000040 ffff88813fe26c80 0000000000000000 dead000000000001
[ 2145.345622][    C1] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000
[ 2145.354227][    C1] head: 00fff00000000040 ffff88813fe26c80 0000000000000000 dead000000000001
[ 2145.362896][    C1] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000
[ 2145.371569][    C1] head: 00fff00000000002 ffffea0001426901 00000000ffffffff 00000000ffffffff
[ 2145.380295][    C1] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004
[ 2145.389144][    C1] page dumped because: kasan: bad access detected
[ 2145.396019][    C1] page_owner tracks the page as allocated
[ 2145.401755][    C1] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 28821, tgid 28821 (kworker/u8:39), ts 1392983733608, free_ts 1375474897251
[ 2145.423741][    C1]  post_alloc_hook+0x228/0x280
[ 2145.428530][    C1]  get_page_from_freelist+0x24dc/0x2580
[ 2145.434094][    C1]  __alloc_frozen_pages_noprof+0x18d/0x380
[ 2145.439907][    C1]  alloc_pages_mpol+0x232/0x4a0
[ 2145.444769][    C1]  allocate_slab+0x86/0x3a0
[ 2145.449302][    C1]  ___slab_alloc+0xd82/0x1760
[ 2145.453994][    C1]  __slab_alloc+0x65/0x100
[ 2145.458420][    C1]  __kmalloc_noprof+0x46c/0x7e0
[ 2145.463266][    C1]  fib6_info_alloc+0x30/0xf0
[ 2145.467854][    C1]  ip6_route_info_create+0x142/0x860
[ 2145.473152][    C1]  addrconf_f6i_alloc+0x38b/0x630
[ 2145.478192][    C1]  ipv6_add_addr+0x59c/0x1100
[ 2145.482880][    C1]  addrconf_add_linklocal+0x20c/0x460
[ 2145.488392][    C1]  addrconf_addr_gen+0x2f8/0x360
[ 2145.493340][    C1]  addrconf_notify+0xb1e/0x1050
[ 2145.498205][    C1]  notifier_call_chain+0x19d/0x3a0
[ 2145.503344][    C1] page last free pid 15083 tgid 15083 stack trace:
[ 2145.509933][    C1]  __free_frozen_pages+0xbf8/0xd70
[ 2145.515048][    C1]  device_release+0x9e/0x1d0
[ 2145.519648][    C1]  kobject_put+0x228/0x560
[ 2145.524073][    C1]  netdev_run_todo+0xc75/0xde0
[ 2145.528846][    C1]  tun_chr_close+0x13c/0x1c0
[ 2145.533436][    C1]  __fput+0x44f/0xa70
[ 2145.537420][    C1]  task_work_run+0x1d9/0x270
[ 2145.542014][    C1]  exit_to_user_mode_loop+0xed/0x480
[ 2145.547308][    C1]  do_syscall_64+0x2b7/0xf80
[ 2145.551934][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2145.558006][    C1] 
[ 2145.560334][    C1] Memory state around the buggy address:
[ 2145.565984][    C1]  ffff8880509a6580: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 2145.574043][    C1]  ffff8880509a6600: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 2145.582113][    C1] >ffff8880509a6680: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 2145.590331][    C1]                                                  ^
[ 2145.597043][    C1]  ffff8880509a6700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 2145.605106][    C1]  ffff8880509a6780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 2145.613160][    C1] ==================================================================
[ 2145.621303][    C1] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 2145.628619][    C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) 
[ 2145.637593][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[ 2145.647685][    C1] Call Trace:
[ 2145.650991][    C1]  <IRQ>
[ 2145.653957][    C1]  vpanic+0x1e0/0x670
[ 2145.657983][    C1]  panic+0xc5/0xd0
[ 2145.661745][    C1]  ? __pfx_panic+0x10/0x10
[ 2145.666193][    C1]  ? lockdep_hardirqs_on+0x7a/0x110
[ 2145.671404][    C1]  ? lec_arp_clear_vccs+0x6c/0x380
[ 2145.676531][    C1]  ? lec_arp_clear_vccs+0x6c/0x380
[ 2145.681915][    C1]  check_panic_on_warn+0x89/0xb0
[ 2145.686886][    C1]  ? lec_arp_clear_vccs+0x6c/0x380
[ 2145.692016][    C1]  end_report+0x6f/0x140
[ 2145.696264][    C1]  kasan_report+0x128/0x150
[ 2145.700795][    C1]  ? lec_arp_clear_vccs+0x6c/0x380
[ 2145.705917][    C1]  lec_arp_clear_vccs+0x6c/0x380
[ 2145.710862][    C1]  lec_arp_expire_vcc+0x17d/0x370
[ 2145.715893][    C1]  call_timer_fn+0x192/0x5a0
[ 2145.720498][    C1]  ? __pfx_lec_arp_expire_vcc+0x10/0x10
[ 2145.726242][    C1]  ? call_timer_fn+0xd4/0x5a0
[ 2145.730938][    C1]  ? __pfx_call_timer_fn+0x10/0x10
[ 2145.736061][    C1]  ? _raw_spin_unlock_irq+0x23/0x50
[ 2145.741263][    C1]  ? __pfx_lec_arp_expire_vcc+0x10/0x10
[ 2145.746813][    C1]  __run_timer_base+0x652/0x8b0
[ 2145.751675][    C1]  ? ktime_get+0x45/0x200
[ 2145.756099][    C1]  ? __pfx___run_timer_base+0x10/0x10
[ 2145.761499][    C1]  ? sched_clock_cpu+0x74/0x440
[ 2145.766372][    C1]  run_timer_softirq+0xb7/0x170
[ 2145.771231][    C1]  handle_softirqs+0x22a/0x7c0
[ 2145.776049][    C1]  ? __irq_exit_rcu+0x5f/0x150
[ 2145.780849][    C1]  __irq_exit_rcu+0x5f/0x150
[ 2145.785449][    C1]  irq_exit_rcu+0x9/0x30
[ 2145.789694][    C1]  sysvec_apic_timer_interrupt+0xa6/0xc0
[ 2145.795424][    C1]  </IRQ>
[ 2145.798383][    C1]  <TASK>
[ 2145.801488][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 2145.807583][    C1] RIP: 0010:pv_native_safe_halt+0xf/0x20
[ 2145.813240][    C1] Code: 38 5f 02 e9 53 e8 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d d3 b7 10 00 fb f4 <c3> cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90
[ 2145.832851][    C1] RSP: 0018:ffffc90000197e20 EFLAGS: 00000242
[ 2145.838927][    C1] RAX: 000000000079925d RBX: ffffffff8199370d RCX: 0000000080000001
[ 2145.846903][    C1] RDX: 0000000000000001 RSI: ffffffff8dccbb91 RDI: ffffffff8c073980
[ 2145.854895][    C1] RBP: ffffc90000197f10 R08: ffff8880b87336db R09: 1ffff110170e66db
[ 2145.862883][    C1] R10: dffffc0000000000 R11: ffffed10170e66dc R12: ffffffff8fef3470
[ 2145.870854][    C1] R13: 1ffff11003a5eb70 R14: 0000000000000001 R15: 0000000000000001
[ 2145.878833][    C1]  ? do_idle+0x1bd/0x500
[ 2145.883093][    C1]  default_idle+0x9/0x20
[ 2145.887355][    C1]  default_idle_call+0x72/0xb0
[ 2145.892144][    C1]  do_idle+0x1bd/0x500
[ 2145.896217][    C1]  ? lockdep_hardirqs_on+0x7a/0x110
[ 2145.901519][    C1]  ? __pfx_do_idle+0x10/0x10
[ 2145.906236][    C1]  cpu_startup_entry+0x43/0x60
[ 2145.911022][    C1]  start_secondary+0x101/0x110
[ 2145.915817][    C1]  common_startup_64+0x13e/0x147
[ 2145.920775][    C1]  </TASK>
[ 2145.924699][    C1] Kernel Offset: disabled
[ 2145.929030][    C1] Rebooting in 86400 seconds..