last executing test programs:

1.716073799s ago: executing program 1 (id=5639):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f00000004c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x80, 0x0, 0x1, 0x3, 0x0, 0x0, {0x3}, [@CTA_ID={0x8, 0xc, 0x1, 0x0, 0x3}, @CTA_HELP={0x14, 0x5, 0x0, 0x1, {0xe, 0x1, 'irc-20000\x00'}}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x6}, @CTA_TUPLE_MASTER={0x48, 0xe, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @local}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x5}, 0x1)
sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a20000000000a01040000000000000000070000000900010073797a300000000040000000030a01040000000000000000070000000900010073797a30000000000900030073797a300000000014000480080001400000000008000240ffffff3854000000060a01040000000000000000070000000900010073797a30000000000900020073797a30000000002800048024000180090001006d6574610000000014000280080003400000000108000240"], 0xdc}}, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0xc, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc}, [@ldst={0x1, 0x2, 0x4, 0x0, 0x1, 0x80}]}, &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
write$cgroup_subtree(r2, &(0x7f0000000140)=ANY=[@ANYRES64=r0], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0)
nanosleep(&(0x7f0000000180), 0x0)
r3 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)={0x2, 0x16, 0x5, 0x5, 0xa, 0x0, 0x70bd25, 0x25dfdbfd, [@sadb_x_policy={0x8, 0x12, 0x1, 0x4, 0x0, 0x0, 0x0, {0x6, 0x2b, 0x7, 0xf9, 0x0, 0x6, 0x0, @in6=@remote, @in=@private=0xa010102}}]}, 0x50}}, 0x4c040)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x80, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private}, {0x8, 0x2, @multicast2}}}]}, @CTA_TIMEOUT={0x8}, @CTA_SYNPROXY={0x1c, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ITS={0x8}, @CTA_SYNPROXY_ISN={0x8}, @CTA_SYNPROXY_TSOFF={0x4}]}]}, 0x80}}, 0x0)
r5 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff)
r6 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_DEL_MIF(r6, 0x29, 0xcb, &(0x7f0000000040)={0xfffc, 0x1, 0x3}, 0xc)
sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="63812bbd7000fcdbdf25030000000800010000000000280007800c000180080001"], 0x44}, 0x1, 0x0, 0x0, 0x440c0}, 0x40040)
sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, r5, 0x800, 0x70bd29, 0x25dfdbff, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x100000001}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x1ff}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40044}, 0x2c50ccb25c4a2d7b)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f00000004c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x80, 0x0, 0x1, 0x3, 0x0, 0x0, {0x3}, [@CTA_ID={0x8, 0xc, 0x1, 0x0, 0x3}, @CTA_HELP={0x14, 0x5, 0x0, 0x1, {0xe, 0x1, 'irc-20000\x00'}}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x6}, @CTA_TUPLE_MASTER={0x48, 0xe, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @local}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x5}, 0x1) (async)
sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a20000000000a01040000000000000000070000000900010073797a300000000040000000030a01040000000000000000070000000900010073797a30000000000900030073797a300000000014000480080001400000000008000240ffffff3854000000060a01040000000000000000070000000900010073797a30000000000900020073797a30000000002800048024000180090001006d6574610000000014000280080003400000000108000240"], 0xdc}}, 0x0) (async)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) (async)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0xc, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc}, [@ldst={0x1, 0x2, 0x4, 0x0, 0x1, 0x80}]}, &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
write$cgroup_subtree(r2, &(0x7f0000000140)=ANY=[@ANYRES64=r0], 0x32600) (async)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) (async)
nanosleep(&(0x7f0000000180), 0x0) (async)
socket$key(0xf, 0x3, 0x2) (async)
sendmsg$key(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)={0x2, 0x16, 0x5, 0x5, 0xa, 0x0, 0x70bd25, 0x25dfdbfd, [@sadb_x_policy={0x8, 0x12, 0x1, 0x4, 0x0, 0x0, 0x0, {0x6, 0x2b, 0x7, 0xf9, 0x0, 0x6, 0x0, @in6=@remote, @in=@private=0xa010102}}]}, 0x50}}, 0x4c040) (async)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x80, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private}, {0x8, 0x2, @multicast2}}}]}, @CTA_TIMEOUT={0x8}, @CTA_SYNPROXY={0x1c, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ITS={0x8}, @CTA_SYNPROXY_ISN={0x8}, @CTA_SYNPROXY_TSOFF={0x4}]}]}, 0x80}}, 0x0) (async)
syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) (async)
socket(0xa, 0x3, 0x3a) (async)
setsockopt$MRT6_DEL_MIF(r6, 0x29, 0xcb, &(0x7f0000000040)={0xfffc, 0x1, 0x3}, 0xc) (async)
sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="63812bbd7000fcdbdf25030000000800010000000000280007800c000180080001"], 0x44}, 0x1, 0x0, 0x0, 0x440c0}, 0x40040) (async)
sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, r5, 0x800, 0x70bd29, 0x25dfdbff, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x100000001}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x1ff}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40044}, 0x2c50ccb25c4a2d7b) (async)

1.05876426s ago: executing program 0 (id=5644):
socket$nl_xfrm(0x10, 0x3, 0x6)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_CTHELPER_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000000000000002000004000000000000000013a307d2a40209c6960dfd0e3b1249b8f72a1049da8be2433b74457659879b91c3131e5de7cab9a0f7b0d5b1cac6ae6f088d2acf30faf3f0a825945fb4da34c9045a1f22f54e06ecf3de060be079e9914d47f3aeb53b7711a76731e936069a152a60002d2b85abbe2c3f03000000b75d84f7ab4f96f5ef1ba66e85e770d5ba3200504d7f09aa217671430264bfe30f88a020e608a91cc7bc1bc1eca54fe6a67d7dc6c570506ddbfe821554923819c83eca54a2400e12728561b7f884d05cc5ab638a1929c2cedfcec31f3d85126cfb73967eb462b08db7d579f91f0000000000"], 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x4)
ioctl$OCFS2_IOC_REFLINK(r0, 0x40186f04, &(0x7f00000000c0)={&(0x7f0000000100)='\x84\xf1k\xe4+1\x00\x00\x00\x00\x05\x00\x00\x00\x00\x9f\xbe\"Jp\xeb\x9e\xce`\x85\xc1t\xe6\x9b\xc0F\x1a\xeeF\xd3\xab\xaf^\x99\xf8l\xb5\adNl\xfe\xc1\xea\xac\x1ay8\'\xb0H=UI\x80\xde\xbd\x15\xc0W\x14/\xca\x00\x91\xb7\xa4K8>\xd0\xd3\xeeui\xae[\xbd\xa7\xee8\x1e\x18T\xf3\xc8N\x90\xc9\x85K*-\x19\xd9\xe3\xe5\xaa\xd7\xa5L\x8e}\xf9\xba1\x90\xa8\xe9j-\x9a3\x86\xdb\x12\t\x8cJaQ\xf2m\x06Z\x02\xd7\xce\xcfn\xca\xa3\xd3\xb5=\x01H\xde\xe6*Me\xa0\xf8fH\x84\xdfV=\xa2)f\n\x02\x15\xe7\xfd\xe6jAK\xee\xe8=\xeaA\xe1\xb2\xf6\xa70\xcbAR\xa6\x8e\x024\x89\xa5n\n\xef\xa9\x9c5\x1a\xcaB.y\xb3\xc5MJm\xdb\xc6T\xd5\xda\x90\x978X5\xe3\xf4Y9\\qS\xf5-6\xdb\xdd55W\x12\x1az\xd2\x97\x02\xf3J\xbc\n;&\x8bZ-l(\x85\xa3\x17\xa8\x90br\xb2\x1b\xdc\xd6\xf9', &(0x7f0000000040)='{q\xa03\x818\xe1\\\xd9\xde\xd8\x00', 0xc}) (async)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB='\x00'/10, @ANYRES8, @ANYBLOB="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", @ANYBLOB="00000100"/28], 0x50) (async)
r1 = socket$netlink(0x10, 0x3, 0x4)
bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000010010000900000005"], 0x50) (async)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0xca02})
r4 = socket$netlink(0x10, 0x3, 0x0)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='GPL\x00', 0x7, 0xb7, &(0x7f00000003c0)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94)
ioctl$TUNSETFILTEREBPF(r3, 0x800454e1, &(0x7f0000001c00)=r5) (async)
r6 = socket$kcm(0x11, 0x3, 0x0) (async)
r7 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000480)={'syzkaller0\x00', <r8=>0x0}) (async)
setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000600), 0x56)
sendmsg$kcm(r6, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r8, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) (async)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000340), &(0x7f00000001c0), 0x20000402, r2}, 0x38) (async)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000000c0)={r2, &(0x7f0000000340), &(0x7f0000000000)=""/27}, 0x20) (async)
socket$inet_smc(0x2b, 0x1, 0x0) (async)
close(0xffffffffffffffff) (async)
sendmsg$NFNL_MSG_ACCT_NEW(0xffffffffffffffff, 0x0, 0x8010)
r9 = socket$inet_tcp(0x2, 0x1, 0x0)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r10 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r10, 0x8914, &(0x7f0000000280)={'lo\x00'})
socket$can_raw(0x1d, 0x3, 0x1) (async)
close(r9)

815.208909ms ago: executing program 1 (id=5645):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0)
close(r0)
socket$inet6(0xa, 0x80001, 0x0) (async)
r1 = socket$inet6(0xa, 0x80001, 0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r2)
socket$packet(0x11, 0x2, 0x300) (async)
r4 = socket$packet(0x11, 0x2, 0x300)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f00000001c0)={'vcan0\x00', <r6=>0x0})
sendto$packet(r4, &(0x7f0000000080)="18", 0x1, 0x4000, &(0x7f00000000c0)={0x11, 0xe, r6, 0x1, 0x0, 0x6, @random="0000001800"}, 0x14) (async)
sendto$packet(r4, &(0x7f0000000080)="18", 0x1, 0x4000, &(0x7f00000000c0)={0x11, 0xe, r6, 0x1, 0x0, 0x6, @random="0000001800"}, 0x14)
sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x28, r3, 0x60b, 0x70bd2d, 0x0, {}, [@IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x3}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x28}}, 0x10)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
getsockopt$bt_hci(r1, 0x0, 0x63, &(0x7f00001e3000)=""/30, &(0x7f0000d23000)=0x1e) (async)
getsockopt$bt_hci(r1, 0x0, 0x63, &(0x7f00001e3000)=""/30, &(0x7f0000d23000)=0x1e)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x9, 0x6, 0x201, 0x0, 0x0, {0x3, 0x0, 0x3}, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x10)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
ioctl$SIOCSIFHWADDR(r0, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="0100ffffffff"}) (async)
ioctl$SIOCSIFHWADDR(r0, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="0100ffffffff"})
ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x3d)
r10 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), r9)
connect$pppl2tp(r7, &(0x7f0000000300)=@pppol2tpv3in6={0x18, 0x1, {0x0, r8, 0x4, 0x4, 0x3, 0x1, {0xa, 0x4e22, 0xe, @empty, 0xc}}}, 0x3a)
sendmsg$MPTCP_PM_CMD_SET_FLAGS(r7, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r10, 0x2, 0x70bd2b, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x18}, 0x80) (async)
sendmsg$MPTCP_PM_CMD_SET_FLAGS(r7, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r10, 0x2, 0x70bd2b, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x18}, 0x80)

746.122944ms ago: executing program 0 (id=5647):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6) (async)
r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
bind$nfc_llcp(r1, &(0x7f0000000080)={0x27, 0x0, 0x0, 0x2, 0x0, 0x6, "bb2cd9893bc31f80718336d9bd3517076db9ad1f52120d8be6bbf81cd81ec27500d000", 0xd}, 0x60)
ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000040)={<r2=>r0, 0x9, 0xfffffffffffffffc, 0x1})
ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000080)={'lo\x00', @multicast}) (async, rerun: 32)
r3 = socket$can_bcm(0x1d, 0x2, 0x2) (rerun: 32)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x20000080)
sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x14}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x10}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x81}]}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}, @NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x4}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xcc}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000100)={'vxcan0\x00', <r5=>0x0})
connect$can_bcm(r3, &(0x7f00000000c0)={0x1d, r5}, 0x10) (async, rerun: 32)
sendmsg$can_bcm(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001bc0)=ANY=[@ANYBLOB="01000000000000000300000000000000", @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="0000000001"], 0x48}, 0x1, 0x0, 0x0, 0x48485}, 0x8890) (async, rerun: 32)
sendmsg$can_bcm(r3, &(0x7f0000001b00)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000022c0)=ANY=[@ANYBLOB="01000000670f00"/16, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="0000000001"], 0x80}, 0x1, 0x0, 0x0, 0xc080}, 0x11) (async)
sendmsg$can_bcm(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000007c0)=ANY=[@ANYBLOB="01000000e80000000800000000000000", @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="9900000001000000010000400100000056ebcd484d468fba0d0b102bda8f7d248764c8b30e8cfe731377ef0eab69f3b54151a89cf42e23f440aff7b226f6fbc7"], 0x48}}, 0x20000000) (async)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000600)={&(0x7f0000000180)="3629e9aba1704e28701116bc20be23948e27057117c894172f0486efd0ab66fc11a4c7f8e73ff4065ff2c7211f76c8974704328528372ba74cf9dd244e3d57becb6174b8946528e94e284ec3b36433f8ba822f7b874975cc45e82023c5cfff8f191ba564f5f8deb7e029f012e2f3ffc2e4795f3c89eb3342a9f4f2078aaf444002", &(0x7f00000003c0)=""/49, &(0x7f0000000480)="d10af5adaf030f84ae89f88c5749e2066ec8862fcae10daee251ca5120f8eafe792e873ed0fee48f48a6410b80ea2c337e8f4cac58c659463ad5cc62f3ff27175f695b2eb67f7f821678376623f47f20a8c50d27c48bf61cba0332de2579fdf45db4b07e3a0f09efcb0856b959eae81693b26b664706f2232d0f147eda1421463fb4f633cf821613d59de85dae2c0ede56948bc38bb9c5c3ebacf4551f8cebca67e3f11dc7088f29b1d3a28a4702b01633e767bb43e5bb7d71ff41b8df54b46090bf34366d7d41f52cf72c5c29ddc94a03f69114500bbaea2e1677435af47dea932618299fe093a81712723e08f5", &(0x7f0000000580)="6ef21654b77fb0f8af8a9f16bc697db71c5a7cfa634df21c00c44f24febd02f1868e4aa93046151d6c6369191467f6fcadd4e4f00efebdb91f48c0e1b1e35e2099ee88531c5de3f923", 0x4, r2}, 0x38)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b14, &(0x7f0000000000)={'ipvlan1\x00', @random="e900ffff00"})

595.111162ms ago: executing program 1 (id=5648):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="24000000200081dc2abd700003000000020000000000000339000000080017"], 0x24}, 0x1, 0x0, 0x0, 0x81}, 0x44004) (async)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0)
r2 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f00000000c0)=@req={0x8000, 0xb4f, 0x300, 0x1daf6}, 0x10) (async)
setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000040)=@req3={0x0, 0x0, 0x1, 0x0, 0x100}, 0x1c) (async)
sendmsg$RDMA_NLDEV_CMD_SET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x10, 0x1416, 0x1}, 0x10}}, 0x0)
close(r1)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={<r3=>0xffffffffffffffff}) (async, rerun: 64)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) (async, rerun: 64)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) (async)
ioctl$SIOCSIFHWADDR(r1, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="0100ffffffff"})
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) (async)
r4 = gettid() (async)
r5 = getuid()
sendmsg$nl_netfilter(r3, &(0x7f00000014c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80001000}, 0xc, &(0x7f0000001480)={&(0x7f0000000440)={0x1030, 0x10, 0x4, 0x401, 0x70bd28, 0x25dfdbfc, {0x5, 0x0, 0x2}, [@nested={0xc, 0x45, 0x0, 0x1, [@typed={0x8, 0x125, 0x0, 0x0, @pid=0xffffffffffffffff}]}, @typed={0x8, 0x11b, 0x0, 0x0, @pid=r4}, @generic="0df638b2717a15219ad47b216a35baa675ea86df37c78a80615fe8f8ef2787733897095fd4f86e2f7dbabc8680513759b2abec695db3124154dee03276474681eb01377bf8ce5b1f144fae0b4ac0b32f366c7b2302cb273293fe20b5a6661bffad6a835fcea85db177ddb878ddfdaf5584a9ad06a739c5ea705d53555361af046a1692cfa4816f4a2d51e0347a4533de07a87a16166cdacad09d12efe441f14f68dae51fdcb7c10f2daf7dd676979b76009b7ae6dd2893c03c13d0de879ee7954a9468464dceedf7736145d7534313e43e942df00a272d9f9aa5bb71179c04f47a03d2c7610b64e23afbe2418fe47bcf572b714b0254666f15d908eadf2080e99260270ae00794f49bd8dde6d198a20f63fa6f5f1c3e3890213c843043f0ed53dd02214fc91508189399567ee3395e9b15fe71b871ebf5e22d8eb3568d5a969b44a8aa541ab825d0b6c846f952eefb06a4e493780a73a04f86cf2bdd0e6bbf97f85019b6771daf75534b915380aeaf12404b6cb1c9de0b931db19bf76f3ed4ec60ff311d071bd5433bfba2b0f77db882326cf464618d617bd2009697633aae7283da3b3ab069fef96ab44b09e94857867b1abcf39e9f47f3003f6c551e99c5be5618b40afb615b9d415624ee0cd2f69e376cd42f27d247fe38ca3f6a918b7e55056734b1baab23f58248126b4625bfbdcb84d7f3d4af677bacb5892cbc75691cfea85480c47d49360619254baa0a85117c9912722ba9c846f26a08046728a746e5c3b1f155375ae441f425b593751d3b414588bfdcae1d6d719515e4cfc9adcd81279bda0828bac81cbece7c1f32f2cfca7a124ed9043953a409e170aea54508fddc9604f320943b2401f09613c81235827f2f517e029d10d53b44807a0722e7a94aaa40aa380e884dd9371c49a79887974c688ed1195c29221b2e18f83effa48469e8ed32bcad75ca800be158176ae5defefe3e05d89c92f78a6af16f044704f1ff798a9bfc51bfd1b8b84952ceef4967041e5c44c14bccfb95ac7750bcd660b4c93b79b0961c754f19febab0c56986fd7f7e4b1e9576f4939438f6ac38752797b1a3b4aa96be952b2a8c00c457eb6ab7788e31a8573d8549d7f8acea92a0cfa6e5df604019a13ca738415c477b0ce5da12b3bb1883d7f48afd663c529769983f130ce9ca4190576853d6a5c84b9804f9f2739d2f6f98cfa224a8ad9da01b8430f284f3566ef8d52b81f0b20850b5a8026d3cb2432cb0b677a8323486001bef37a3cff867871a30aa2bba28bad9a337e51a031b2c9f1b3b170030c576e042dc2f42a18346f6e913f268158007f344a48817e2f260d30c3445f65e1a4c18ae6235f8b5755bb44defdd89ddeb9f1f1688505db04369a68f6f706cb0278827ba4f4998222577190486c79e46a3f5093f08cda92d9d071112ee75e6b061f55f37ed6139ba2fb41c8ee0a9de9e213e03bef04254a44254f28abfd5977faa9a8a1542826c83899303f57edb6dc6047ee130d83b7b1406328817da06e7a3d3e7c6d0124d0ec36d673b78593d9c68ad621155351c1706e19832bc3d0df280931a326797ac4e72371a78a59fe8c76f53b822b1981d4265b09d1fb4ea3f348657dab0979a6bb45e92ea9d10f1aa9c5ec5a9a43c5c35bf62aca684f48bc6c00f89f167a6245f81f50b44e66837f9e67d50f868af0d5742907a87804a8e1cd3d8c3264cfb42811e1cd513f50e3035368c71e25e4d30e2654a3377f9c5222b220a58f3c106bfd3fa9e5b7c772fdd49a889f9cf20ae519cb227f33ed44327a2f6b73ee2f5adc372b596605ab486dd6f81c709785f4416eb5f77bf0750ae866a14cf0d258608b0efbcdf403ea5b25b778de0d27889d47d46a0c8c74adecff11487e516c05441e4a277f4c49d4ffe66f304a25398514ccd92cb59e203dd300cee759314e5d739ede6c0cbb17757c7e86799f345ea069c1e103a7f1b8f57fdee76e17359e659f1587dfda2a6c93f5b5c228190ced2e79571ad1f6f7615c2919bee11d9b05d123d7b7041a92ded37db5ddf9d66d8d48a6ba017d21e257adcb60a5ca2941af014eddfffdb36e7e9805575100c86e113dcf4feafbdd15f01c3ab86d9676a1372fe4e84d4b15eb1ba922a704ee64ac43197f9ecdad616cbfb97b347dd796e00d911fdde943d356dea28e8358fb776be32279936da54a8f73366e8cbd3ce9b142127c27a0fa0d5d37454408c0f48ff6f2c3b0e580ea00048e7cd1523c827b569f933d91d1568c640e04f65978f5a2bdb20ff5c0f8dd014fbd5af3e744da36698b2d03eae074cfa0efe91bdd9ea8c97d118a4c77c418b021fa402179d7fe7448dcf00481f8a93c4121e84d6d95c3ce5f13a16322dd39203d52ee0196244c5547894a3fae380718dd7b28e1bcf3856be3bc2b2485a9377234160aa75e94f6030800b3b2118ee8a0a399e207b9fd2cbf64d3ca2ac0b22648bd3069d6a94aa96646191aa7760b20e4fbcfd12b55622372c14b7ae5b8344375d0535af1ef0315e6f3c2bd8bb596ed0e15bb264cead2d5aca6769891e542025b8bdee34b70409687a9d0a2d691a55f62abbec42971e025f3f7e736f57a4e059d44dcc3a776caf19a0f33133fbe253adfc7cc017aa5ecc5121848aa88575cf3c5b05152476078d46990dd0cdc2cfc424306eaf5c8caef515addff7f7e72a0e7e0b015fad1828edba9abc582154b73921cc41c5565d8e2a60babd17a37d8fbf535a0ef1ee76eb614153a6467cfbd4a5c756a1252d470c67e719ecc9e1708caeda5390b4e29a0a44cb6ba312fba02e1a5e299b992892dd8342a51a87a85a31526da599909c0ef2804625dda62efb2a08c50b551262fa8d153a653749261c24802284657e8eaea467fce88927f52acbc5ed654a3d110cfd8d973743c69778d32b8cf55c37686f2a4fc175ba7b57681e2f560ca13d43aac8118f498e7aff2c19d827562c7e98c870856d72b17dc1f42c563e0a8fdff6aac652faded28a2b20d6b86a78f713745f88d83a52fb96878619b305aa462efd5906be0404cb3469049d236c1b64d598285f7c9129ce06ba72f7cbe3527f569f3a2870ed2ac7f8677a63583969b30fda7a25b6dfc9b3f1f0c192f786943b5e568506458d1c73a6a38b89a4bac32c5064a195b0ce7fccbd088f78d9a8e8512272bc8497db9d8347da78e1ba1d7ecd9db0c511c5c8d0741ad0c7e5c41680c41e66756b2e663760f3d95bcebc0c9b3a362bc53e536ab3f9da43099d950df937f39a5de7fa2537aa3c6f4fbd43e82fc5f5b3fa5b5ebe18427fe8af665d36c5937cb30741f6460eb15d28628b83bb2a133fa8d8545f76f1da38f160df2727e3533e34efeba8b2812a60d8453863b344403efde7dc24c23609aa46848ea69ac52b5be2218ce3a2a2bb84b4dba73e6bc3987ae502626e38a10ff99e8459944e2708a66cb62abfbc109c3d5d5f52509f301eb9ce0ce94211e15bfaf449cd1054b52acbba394677d864535c766591cf538ba95fd45e124cdf9bed41697250add5297389dc1297aa5dad77c3a4329ef6e5a948ff3a9baa3f3298f5a59c92b102865e4423fb3fef717f85e718985f86391f2572b39552d7ac820c7eddefad019613adc0677e382c256d567cdb4bd0b877e89dae198da5a2b266c94aa6dc9d691c6c84c9ed87907d9e03d8a0eada1a02d403d0562f8ba687871c23b5e058536b508e113d753936ed8fc4ad3a015515e001ac8d62e2edd856e7903ca81f8aa40a26c8fe82514afb74745c06fda12219b01b9cf6fd93ca0d704e585d1e12edd30bfe4a0d01dc24ad14f2b7c61b0f25b85c80ea7aa6a16fdd3c97326d8d5e318ab5915b2e101564945ee320e36b871bca0137894cc99e2a421181cad3fadae38f18967a99b9a7b8db1c1751aad056450696bdc939fe0bb13c8f28d32bb331359bfd81496400e739630b9769f9915d1fffeaea6c3a6e1e9d20f6cf3b3376d7d92b570ccd5a83c9399b9765c9f5b221697952bb5940fe250813e8fba53914846bc3aa60603abf21d6123d7e50ea11251ebe57879a39217ab29955456f78f370b1bfde1955c8efbda5f6d5eebf7c178e3c271078ecc847693b788a5842bd877e0bf2aaedfbe480fc40d4d37c1f3a79176e48e8f3568ef3354ca659328d9e85e5508977e6e03073b09b0c03b75d0aba46757856c6295d4caab4780d8ae491ff0d6f04e084643eb9db905a85ef195dce66a36aed69d69c6c0efc41b9201a2a8db10baa719bfdb4a7abbfb726b3238557afb68acd845a13149fa91b4a55b961a36edb9f9ae4e5d2e06bc2dcfc4b397069119088ec9cb2671ecef322a61c78c5f485a6ed103fa097052857e498ce348e8fec3d6afaab9877b958274ce77700b6371b94b92727e4ccc9db379fbd45a81cfcb8b609ba8f0aa839fabc80516f16468fadb7cfc1dee6df5d1cbaa20ad5cb56918ccf38f8fd3ec77b840f7da357fa3d5a063c3dbd2426ad30c5a1689ef7aebe99d34fc36a938aaafe0da2e387394669e055b5d86454771f7b7bc5ca455c0b2d8960ff535d7ab73660fe5723931fda12ea139ae0c9e5d866d386e0a208d1381f9354224f068c11c621a6b3e741152cc17d580bae90b66758edb70971b5152617ccb0cbbcc50e92fa4872b830057f1141984483c18918925bef384cbe0e011cd570c927381f855f8c734f48ff742eb9c7ce9b9b451a48cbc27d83635205c6ffe44c0f50a825998b6a352f6b696562a12e69737c56017545511e723444633921d10d7c222a76f061e3d87b18c6c891715b4d3254b48a03f30a90725dc718bb68a8a3aeada2ba2e1854fefb3db0724608422e6ab72645c657c290b51fa7e26c4dad5fc3808ef8176424d238d889634330c3430496f923cace4acbd41fdf61d724578fff140d5fff8e999a2e141b0fb4d5ff9d3a20de6cb243a6f306f52c11539cf1a1263aaa59b5ae1fcf0efe6afa4a8fc09d9e47cd3d017192c3617a86646050a5d9eca1f3a2e6445b8d3a5d62a443b4acfd1c3a42a2a63e06abe37ebce76289cb880dbdd988b276df05a4b15949f2931ce2dfcd07bc83c4186704a9ceee8d8c872e710588aef0e437d079c41d731ff18d9658bac244224e3316f5e6911c88e8f9de1ffd49da5b8959f0c88d7e991c9ac540e81cbc0f5cc3414e9b5814120101db6ddeba41503d6b12d9849503e490805c2d4a9cbde25bc51d7c56e0d67ea6d5982f6bd5b2d2dd3d111bb701071ee32384c9f37da7b5dde42eff09d896cf0b5f2c7bfa0d51882e7307448754714e781eb30447cfd5ec45deecb654d01ff0db0a668b6d7319dcaa7abe2a038498830b91f6f8dd63f8ce7f62dee571769c61a9092893ec61b161c8ab6f9f654402c0aaca31fb8fc405481906bfd75204a2bfaf703d0cfd6f97bd5add9f04020612dcc17574de22ee87bf60184a65e646b92b81122770042fd394ce4ae5bf1aebebe41b4f09e03920963f1648d2efdaeb7a329a37bd3e61147fd0d61c96a6cf26ec112dca803e61e187626db779913d869c80b6f10b8e67203b426fe83791979acc42cbc9cf760823d4891bffe8963cd69bcae475cd6c7df2c1576ec6fa4de8bf453820d53e0babc1d727172f5c834ffc644140b43001eb1ef49816c0bda917d0a1274167ad5fd0ae98547c39047aa24f6c2cb720c162b1ea8903049adce8f3044265f91d39d14394b9df346d0a7349aa6604d1b9f0b9786b5c0f33a33417befbdadf926c4c2c2ae6857c2f127643bf44a6d9e4015a30109d2405d7b3a0eeeb6e135795af0e782cdbdc4a", @typed={0x8, 0x97, 0x0, 0x0, @uid=r5}]}, 0x1030}, 0x1, 0x0, 0x0, 0x1}, 0x20)
ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x3d)

594.897469ms ago: executing program 2 (id=5649):
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000340)=ANY=[@ANYBLOB="400000000f1401002bbd7000fedbdf250a00450069706f69620000000800010000000000080003bbfc207297161c9b00010000001100450069625f6d756c7469"], 0x40}, 0x1, 0x4100000000000000}, 0x84)

594.278672ms ago: executing program 0 (id=5650):
r0 = socket$nl_audit(0x10, 0x3, 0x9)
sendmsg$AUDIT_TTY_SET(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x18, 0x3f9, 0x0, 0x70bd25, 0x25dfdbfe, {0x0, 0x1}, ["", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x8000}, 0xc000)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r2, 0x2, 0x70bd27, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @private=0xa010102}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000080}, 0x40000)
ioctl$XFS_IOC_PATH_TO_FSHANDLE(r0, 0xc0385868, &(0x7f0000000340)={<r3=>r0, &(0x7f0000000240)=':\\\x00', 0x500, &(0x7f0000000280)={@_ha_fsid={[0x4, 0x9]}, {0x1ff, 0x1000, 0xd, 0x3c}}, 0x6, &(0x7f00000002c0), &(0x7f0000000300)=0x8001})
ioctl$PPPIOCSMAXCID(r3, 0x40047451, &(0x7f0000000380)=0x1)
r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000400), r1)
ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000440)={'wpan1\x00', <r5=>0x0})
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'wpan4\x00', <r6=>0x0})
sendmsg$NL802154_CMD_GET_INTERFACE(r1, &(0x7f0000000580)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x5c, r4, 0x20, 0x70bd26, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20008840}, 0x4040004)
r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000600), r3)
sendmsg$IPVS_CMD_NEW_SERVICE(r3, &(0x7f0000000740)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000700)={&(0x7f0000000640)={0x8c, r7, 0x200, 0x70bd2a, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x5c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x1}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xaa22}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x5}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@empty}, @IPVS_DEST_ATTR_WEIGHT={0x8}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x3}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@multicast2}]}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x2, 0x20}}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x2, 0x18}}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x40001}, 0x20000811)
r8 = syz_genetlink_get_family_id$nfc(&(0x7f00000007c0), r1)
sendmsg$NFC_CMD_DEP_LINK_DOWN(r1, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x14, r8, 0x10, 0x70bd29, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0xe41b2ca79597e569)
r9 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000900), r1)
sendmsg$NLBL_MGMT_C_PROTOCOLS(r1, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x3c, r9, 0x200, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast2}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @remote}, @NLBL_MGMT_A_CV4DOI={0x8}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0x16}}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20040002)
r10 = accept4(r0, &(0x7f0000000a00)=@tipc=@id, &(0x7f0000000a80)=0x80, 0x81000)
r11 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000b00), r3)
sendmsg$TIPC_NL_PUBL_GET(r10, &(0x7f0000000dc0)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000d80)={&(0x7f0000000b40)={0x210, r11, 0x8, 0x70bd2b, 0x25dfdbfb, {}, [@TIPC_NLA_NET={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x5}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7}]}, @TIPC_NLA_LINK={0x10c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x386131}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xa}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x23f2}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5a0}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}]}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10000}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xe}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc910}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3ff}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xe913}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xc12}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_MEDIA={0xdc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fffffff}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x81}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x56}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}]}, 0x210}}, 0x400c041)
socket$unix(0x1, 0x1, 0x0)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(r3, &(0x7f0000000f00)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e40)={0x50, 0x1411, 0x0, 0x70bd29, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_STAT_MODE={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x4}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x5}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x40}, 0x810)
r12 = socket$nl_generic(0x10, 0x3, 0x10)
getsockopt(r0, 0x8, 0x80000000, &(0x7f0000000f40)=""/174, &(0x7f0000001000)=0xae)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001040)='./cgroup/syz0\x00', 0x1ff)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001280)={r3, 0x0, 0xd7, 0x2d, &(0x7f0000001080)="99cfb477120b129e3060f195f80bf07d3e0c2b9dc4d02e9e617aea226ba61a7b364da6aa1d2d19935808d95167b7a230ce3b82a6744aaacd021f3b4cd87d2fc752794d742040ef5d152a8cb39deaa827a979fb3fd3646678e1c1f46fefa16192651152d579345c11778cc40ebdbeeb7c72ba99e348ac44e7780b9935267471137445463458496cc921d41970c46cd86abbda2ba6c9f11a07c0e7ad3eb1ee9d6a06cd4057d332443ad615f2ce2ed663fa7e842c46e913948e17dcfbf719e43cdbdb956abba3f0816a238b0b79962a2d2b88aa15947ecf9b", &(0x7f0000001180)=""/45, 0x10000, 0x0, 0xb, 0x43, &(0x7f00000011c0)="e5f822a45d6d2c04f0eb5b", &(0x7f0000001200)="1a2e5f90ddf4b8adbb400599d44c812757770e5b71eed03f30267427f768fb3f5475086693ef71cc99effd0fa0b50b9bf9e95a8209d85ae514eef88f1e4f4503042187", 0x6, 0x0, 0xffffffff}, 0x50)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r13 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001340), r3)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000001400)={'syztnl1\x00', &(0x7f0000001380)={'ip6gre0\x00', <r14=>0x0, 0x0, 0x3, 0x7, 0x2, 0x7, @remote, @remote, 0x80, 0x7, 0x0, 0x9}})
sendmsg$ETHTOOL_MSG_TSINFO_GET(r12, &(0x7f0000001840)={&(0x7f0000001300)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001800)={&(0x7f0000001780)={0x50, r13, 0x4, 0x70bd2c, 0x25dfdbfc, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000090}, 0x0)

443.822332ms ago: executing program 2 (id=5651):
socket$nl_xfrm(0x10, 0x3, 0x6) (async)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x94)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000140)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @val={0x4}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, "0e"}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x7c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) (async)
sendmsg$NFT_BATCH(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000140)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @val={0x4}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, "0e"}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x7c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000)
ioctl$SIOCSIFHWADDR(r0, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="01008d00ffff"})

441.949556ms ago: executing program 0 (id=5652):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$inet(r0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0xfffffffffffffea6, &(0x7f00000005c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @remote, @dev={0xac, 0x14, 0x14, 0x17}}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x9}}], 0x38}, 0x40001)
sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0200001900010026bd7000fedbdf25e00000020000000000000000000000006401010000000000000000000000000000000006000000000a0000003c000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x23c}, 0x1, 0x0, 0x0, 0x24008004}, 0x40044)

336.63282ms ago: executing program 0 (id=5653):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0)
close(r0)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000040))
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000000000000000004b95fc8b8bcde58178d5844520911daf28fc5cc93c83d7136bf44852431d0967fe30096f3f86e0c62c5ed3950c06f41953eb38ba2f25b77edcecec4a20cd4c33a60e7484cc14864dc7206d2e10cadf1c0c374fb104840757cbe544c0a9bcdb429eb031"], 0x50)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r1, 0x0)
r2 = socket$inet6_mptcp(0xa, 0x1, 0x106)
listen(r2, 0xfffffffc)
r3 = socket$netlink(0x10, 0x3, 0x8000000004)
r4 = socket$inet6_mptcp(0xa, 0x1, 0x106)
listen(r4, 0x7d4165c9)
socketpair(0x3, 0x2, 0x8, &(0x7f0000000200))
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r5, 0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r7 = socket$inet6_mptcp(0xa, 0x1, 0x106)
listen(r7, 0x7d4165c9)
listen(r6, 0x0)
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r8, 0x0)
writev(r3, &(0x7f00000001c0)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd000000100001000a0c100000000000000fff00", 0x58}], 0x1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450)
sendmsg$NFT_BATCH(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000200000000000a4c000000060a010400000000000000000a0000090900010073797a310800000014000480100001800b000100736f636b657400000900020073797a320000000009000740920ed20f89000000140000001100010000000000000000000300000a"], 0x74}, 0x1, 0x0, 0x0, 0x40}, 0x24000840)
ioctl$SIOCSIFHWADDR(r0, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="0100ffffffff"})
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x3d)

335.286721ms ago: executing program 2 (id=5654):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c}, 0x94)

242.028837ms ago: executing program 1 (id=5655):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0)
close(r0)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff})
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50)
ioctl$XFS_IOC_FSGROWFSDATA(r1, 0x4010586e, &(0x7f00000000c0)={0x0, 0x2})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
ioctl$SIOCSIFHWADDR(r0, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="0100ffffffff"})
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x3d)

241.464546ms ago: executing program 2 (id=5656):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r2, &(0x7f0000000740)=@pppol2tp={0x18, 0x1, {0x0, r2, {0x2, 0x4e20, @multicast1}, 0x2, 0x4, 0x0, 0x2}}, 0x26)
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000005c0), 0xffffffffffffffff)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_DELETE(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000680)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000cbd70100400000005000000080009000200000008000c00a80a000008000b00000000000600010007"], 0x48}, 0x1, 0x0, 0x0, 0x40811}, 0x20)
r5 = syz_genetlink_get_family_id$l2tp(&(0x7f00000005c0), 0xffffffffffffffff)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000002140)={0xffffffffffffffff, 0x20, &(0x7f0000002100)={&(0x7f0000001080)=""/115, 0x73, 0x0, 0x0}}, 0x10)
r6 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendmmsg$inet6(r6, &(0x7f0000001f00)=[{{&(0x7f0000000240)={0xa, 0x4e23, 0x3fe, @private0, 0x2000003}, 0x1c, &(0x7f0000000180)=[{&(0x7f0000000440)="14", 0x1}], 0x1}}], 0x1, 0x931766f6319eed44)
shutdown(r6, 0x1)
getsockopt$bt_hci(r6, 0x84, 0x80, &(0x7f0000002100)=""/4127, &(0x7f0000000000)=0x101f)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_DELETE(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01000cbd70100400000005000000080009000200000008000c00a80a000008000b00000000000600010007"], 0x6c}, 0x1, 0x0, 0x0, 0x40811}, 0x20)
r8 = socket$unix(0x1, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', <r9=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xfff1, 0xffff}, {0x0, 0x8}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0)
r10 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r10, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="5800000010000d042abd7000fdffffff00000000", @ANYRES32=0x0, @ANYBLOB="0000040000000000000012800c0001006d616301000600020001000000140035006d6163766c616e300000000000000000000000000000000000000000000000ee7e98557a7dcf84f97a1c827bd319f7f771e65c372f0b93"], 0x58}, 0x1, 0x0, 0x0, 0x24004000}, 0x2000c000)
r11 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYBLOB="9feb010018000000000000003400000034000000060000000400000000000007000000000000000000000001050000018000000000000000010000851000000000000000020000000000000000000100da"], 0x0, 0x52}, 0x28)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000280)={r11, 0x20, &(0x7f0000000240)={&(0x7f0000001c40)=""/4072, 0xfe8, 0x0, 0x0}}, 0x10)
sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001880)=@newtfilter={0x40, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0xb, 0x7}, {0xfff1, 0xfffc}, {0x300}}, [@filter_kind_options=@f_route={{0xa}, {0x10, 0x2, [@TCA_ROUTE4_TO={0x8, 0x2, 0xa2}, @TCA_ROUTE4_ACT={0x4}]}}]}, 0x40}}, 0x0)
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r10, 0x8983, &(0x7f0000000180)={0x0, 'ip6gretap0\x00', {0x4}, 0xed})
socket$nl_xfrm(0x10, 0x3, 0x6)
r12 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt(r12, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8)
setsockopt$inet_sctp6_SCTP_AUTH_KEY(r12, 0x84, 0x17, &(0x7f00000003c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="021a3b3619672411f259fffb7f30d8520e635bf3e8aea3021470817d128a2789059b13b042fad97c203be52213ff65517513f9602862ea2fad955325065edf882c36c4cc901a64eed73f6490dd2d2ce11c55b3f006a6de3f314c426ebd11e846100d1c9f0808424a3bfeb606596ba2"], 0x9)

153.264269ms ago: executing program 1 (id=5657):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0e00000004"], 0x50)
ioctl$XFS_IOC_FD_TO_HANDLE(r0, 0xc038586a, &(0x7f0000000280)={<r1=>r0, &(0x7f0000000040)='\x00', 0x400002, &(0x7f0000000080)={@_ha_fsid={[0x3, 0xffffff80]}, {0xfffb, 0x7, 0x3, 0x6fffffffffffd}}, 0x9, &(0x7f0000000140)={@_ha_fsid}, &(0x7f0000000180)=0x7})
write$6lowpan_enable(r1, &(0x7f0000000200)='0', 0x1)
r2 = socket$kcm(0xa, 0x2, 0x0)
setsockopt$sock_attach_bpf(r2, 0x29, 0x14, &(0x7f0000000100), 0x120)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000600)=ANY=[@ANYBLOB="300000001800090000000000000000001c140000fe000001000000000a00120002"], 0x30}}, 0x0)
r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={0xffffffffffffffff, r1, 0x6, 0x0, @val=@netfilter={0x0, 0x0, 0x13, 0x1}}, 0x20)
bind$bt_hci(r4, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6)
r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_BT_POWER(r5, 0x112, 0x9, 0x0, 0x0)
r6 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020e0000150000000000000000000000030005000000000002004e24ac1e00010000000000000000030006003c000000020000fc34000000000000000000000001001800000000000800120000000a00fcffffff0000000006003300000000000000000000000000fe8000000000000000000000000000aa00000000000000000000000000000000040003"], 0xa8}}, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), 0xffffffffffffffff)
r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000003000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20000000}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x1, 0x0, &(0x7f00000000c0)="01", 0x0}, 0x50)
r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r11 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r10, &(0x7f0000000040)={@val={0x2000}, @void, @eth={@broadcast, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x4, 0x3c, 0xfffe, 0x0, 0x0, 0x29, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, {0x4e21, 0x600, 0x28, 0x0, @gue={{0x2, 0x0, 0x0, 0x0, 0x0, @val=0xe0000001}, "eda4fbd800e00600d6c979033cb81e823cdc6000000000d2"}}}}}}}, 0x4e)
sendmsg$TIPC_CMD_SET_LINK_WINDOW(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)={0x68, r8, 0x1, 0x0, 0x0, {{}, {}, {0x9, 0x18, {0x0, @link='broadcast-link\x00'}}}}, 0x68}}, 0x0)
write(r4, &(0x7f0000000240)="190000000800aaaaaa81db11010b", 0xe)
setsockopt$sock_attach_bpf(r2, 0x29, 0x15, &(0x7f00000000c0), 0xb9)
r12 = socket$nl_xfrm(0x10, 0x3, 0x6)
r13 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r13, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x54, 0x10, 0x1, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x2b28d, 0x11a21}, [@IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}, @IFLA_VFINFO_LIST={0x20, 0x16, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN_LIST={0x18, 0xc, 0x0, 0x1, [{0x14, 0x1, {0xfffff800, 0x861, 0x4, 0x8100}}]}]}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x8041}, 0x48880)
ioctl$SIOCSIFHWADDR(r12, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="ef00"})

152.640144ms ago: executing program 0 (id=5658):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0)
close(r0)
socketpair(0x23, 0x1, 0x0, &(0x7f0000000440)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={<r3=>0xffffffffffffffff})
bpf$MAP_CREATE(0x0, &(0x7f0000001d00)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRESDEC=0x0, @ANYRESDEC=r2, @ANYRES16, @ANYRES32=r0, @ANYBLOB='\x00'/28], 0x50)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000bc0)=[{{&(0x7f00000000c0)={0xa, 0x4e20, 0x1, @local, 0x7}, 0x1c, &(0x7f00000003c0)=[{&(0x7f0000002700)="89", 0x1}], 0x1}}, {{&(0x7f00000084c0)={0xa, 0x4e21, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000008500)="88", 0x1}], 0x1}}], 0x2, 0x24040040)
shutdown(0xffffffffffffffff, 0x1)
getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000340), &(0x7f0000000380)=0x8)
recvmsg$can_j1939(r3, &(0x7f0000001280)={&(0x7f00000000c0)=@generic, 0x80, &(0x7f0000001140)=[{&(0x7f0000000140)=""/4096, 0x1000}], 0x1, &(0x7f0000001180)=""/197, 0xc5}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x36)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000100)={'wlan0\x00'})
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f0000001300)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001a80)=ANY=[@ANYBLOB="4800000010000314000000000000007400", @ANYRES32=0x0, @ANYBLOB="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"], 0x48}, 0x1, 0x0, 0x0, 0x24000001}, 0x2400c000)
ioctl$SIOCSIFHWADDR(r0, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="0100ffffffff"})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000940)=ANY=[@ANYBLOB="200000004100070127bd7000fefdffff047c0000040042800800018004201d17"], 0x20}, 0x1, 0x0, 0x0, 0x4048011}, 0xc0d4)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
socket$nl_rdma(0x10, 0x3, 0x14)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_netfilter(0x10, 0x3, 0xc)
recvmsg$unix(r1, &(0x7f0000001a00)={&(0x7f0000001380)=@abs, 0x6e, &(0x7f0000001980)=[{&(0x7f0000001400)=""/106, 0x6a}, {&(0x7f0000001480)=""/195, 0xc3}, {&(0x7f0000001580)=""/201, 0xc9}, {&(0x7f0000001680)=""/47, 0x2f}, {&(0x7f00000016c0)=""/224, 0xe0}, {&(0x7f00000017c0)=""/120, 0x78}, {&(0x7f0000001840)=""/238, 0xee}, {&(0x7f0000001940)=""/18, 0x12}], 0x8}, 0x12101)
r7 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000040)={0x802, 0x0, 0x0, 0x7}, 0x10)
sendmsg$nl_generic(r7, &(0x7f0000000140)={0x0, 0xfffffffffffffdc1, &(0x7f00000000c0)={&(0x7f0000001300)=ANY=[], 0x20}}, 0x0)
ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f00000012c0)=0x3d)

143.282805ms ago: executing program 2 (id=5659):
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) (async)
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r2=>0x0}) (async)
r3 = socket$inet(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000100)={'wlan0\x00'}) (async)
sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)={0x30, r1, 0x100, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0xcc9, 0x3c}}}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x0) (async)
ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000200)={'wlan0\x00', 0x1})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000004400000008000300", @ANYRES32=r2, @ANYBLOB="0a001800037f030303ee"], 0x30}}, 0x0) (async)
r4 = syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/mnt\x00')
ioctl$NS_GET_OWNER_UID(r4, 0x8004b709, 0x0)
sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000540)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000001300000008000300", @ANYRES32=r2, @ANYBLOB="0a000600080211000000001004001300000000000000000000000000000000005a5da91db7d796659a2402d1fd3051ce8afde87a05e5dc2c394745326bf0b4e50d87da5116df63560c70751a0566a9879f6581d7607a9e5fafcb9bdd1b175cae82497c7b394dccade14f37dfbf1ca23280ea7baaa3641a82658c22d18a5adcd3f829d5c17648cb08e043ca7bcb208cdea4c2725c3b54e500a18e498b09414ac08f06533df4438fd2d1e05bba9f02000000000000e1a0b8f18b49442774a204ea68acdce5a4d2e31b579b2e315a74b71e5651748c8af1e9bd00000000"], 0x3c}}, 0x0) (async)
sendmsg$NL80211_CMD_NEW_MPATH(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)={0x34, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x34}}, 0x0) (async)
socket$packet(0x11, 0x3, 0x300) (async)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) (async)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) (async)
r5 = syz_init_net_socket$x25(0x9, 0x5, 0x0) (async)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
r7 = openat$cgroup_devices(r6, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0)
write$cgroup_devices(r7, &(0x7f0000000100)={'b', ' *:* ', 'rw\x00'}, 0x9)
ioctl(r5, 0x8914, &(0x7f0000000040)='dummy0\x00'/40) (async)
ioctl(r5, 0x8914, &(0x7f0000000080)="64756d6d7930000000000000000000000100"/40)
ioctl(r5, 0x8, &(0x7f0000000740)="6c6170623000000000000000000000000f0000000000000000000000000000000000000000000000f16c3d4432af1ae17091af06ac643efae2b0cdb4b1092656de2bd70700000000000000828e1921a815b0a969e9802f7dfd9e00514d558bbb5dd95cc10512a07aaab234a1b63d982714bcb7eac765c4419a697822c5483370ca39abfb3f16c226300462f63409cd8d2aab000e2ee67dd9fc28ae7203674bb621c8d1a3d1e4f618f331ef0f12146c83577e87")
ioctl(r5, 0x890b, &(0x7f0000000100)="000000010000000000000000020000000f0000006c6170623000000000000000000000000000000000000000000000000000000000000000e000000000000000")
r8 = socket$rds(0x15, 0x5, 0x0)
setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r8, 0x114, 0xa, &(0x7f0000000000), 0x1) (async)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000700)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000006c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="08002abd700000002000000000000057bda477f38143050c000000", @ANYRES32=0x0, @ANYBLOB="0400bf000a00180003030303030300001c0070000500060001000000050008005f00000005000200010000000a0018000303030303030000"], 0x54}, 0x1, 0x0, 0x0, 0x8000}, 0x40) (async)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000840)={r9}, 0xc)

471.574µs ago: executing program 2 (id=5660):
unshare(0x28000600)
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000d40)=ANY=[@ANYBLOB="2c0000000104010200000000000000000a000001080004400000000005000100010000000800034000000200"], 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x8080)
setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f00000000c0)=0x2, 0x4)
socket$unix(0x1, 0x1, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
pipe(&(0x7f00000004c0)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
splice(r3, 0x0, r4, 0x0, 0xf3a, 0x0)
write$cgroup_pid(r4, &(0x7f0000000000), 0xffffff98)
ioctl$sock_inet_tcp_SIOCINQ(r4, 0x541b, 0x0)
write(r2, 0x0, 0x0)
pipe(&(0x7f0000000500)={<r5=>0xffffffffffffffff})
r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
sendmsg$NL80211_CMD_SET_MPATH(0xffffffffffffffff, 0x0, 0x40050)
socket$kcm(0x2, 0xa, 0x2)
r7 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f0000000300)=@nat={'nat\x00', 0x670, 0x5, 0x498, 0x100, 0x328, 0xfeffffff, 0x328, 0x328, 0x400, 0x400, 0xffffffff, 0x400, 0x400, 0x5, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_bond\x00', 'caif0\x00', {}, {}, 0x6}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@unspec=@devgroup={{0x38}, {0x5, 0x0, 0x0, 0x5, 0x48}}, @common=@inet=@tcp={{0x30}, {[], [0x4e20], 0x0, 0x0, 0x2}}]}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0xf0, 0x128, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x300, 0x300]}}}, @common=@set={{0x40}, {{0x0, [0x5, 0x3, 0x1]}}}]}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @initdev={0xac, 0x1e, 0x3, 0x0}, @remote, @icmp_id}}}}, {{@uncond, 0x0, 0xc8, 0x100, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'veth0_to_team\x00', {0x44, 0xd6ff, 0x2, 0x8, 0x0, 0x28, 0x6, 0x40, 0x20}, {0x1}}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x10, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id}}}}, {{@ip={@remote, @broadcast, 0x0, 0x0, 'veth0\x00', 'wlan0\x00'}, 0x0, 0x90, 0xd8, 0x0, {}, [@common=@socket0={{0x20}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv6=@private2, @ipv4=@dev, @port, @gre_key}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4f8)
r8 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x0, 0x0, 0xf955, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3}]}]}, 0xfc}}, 0x0)
r9 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r9, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=ANY=[@ANYBLOB="18010000210001000400000000000000e0000002000000000000000000000000fc0200000000000000000000000000004e230000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000009c0011007f000001000000000000000000000000fe880000000000000000000000000101fc020000000000000000000000000000e00000010000000000000000000000006c0000000200000002000a007f0000010000000000000000000000007f00000100000000000000000000000064010102000000000000000000000000fc0200000000000000000000000000003c00000000000000020002002c00130000000000000000000000ffffffffffffffffffff0000f0ffffffffffff0000000000000002000000"], 0x118}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
setsockopt$inet_MCAST_LEAVE_GROUP(r5, 0x0, 0x2d, &(0x7f0000000280)={0x6, {{0x2, 0x4e22, @private=0xa010100}}}, 0x88)
r10 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route_sched(r10, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001f80)=@newtaction={0xf90, 0x30, 0x51b, 0x0, 0x0, {}, [{0xf7c, 0x1, [@m_pedit={0xf78, 0x5, 0x0, 0x0, {{0xa}, {0xe84, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe80, 0x2, {{{0x400, 0x5eac, 0x10000000, 0x3, 0x3a6}, 0x5, 0xff, [{0x1, 0x9, 0xfffffffd, 0xc, 0x4, 0x8}, {0x763553b1, 0x70, 0x2, 0x22, 0x8}, {0x4, 0x9, 0xffffffff, 0x1, 0x4, 0x7fff}, {0xc, 0xd90, 0x2, 0x3, 0x1, 0x400}]}, [{0x8, 0x7fffffff, 0x5, 0x10001, 0x49d7, 0x9981}, {0x7fffffff, 0xffff8001, 0x2, 0x58, 0x2, 0x123f}, {0x89, 0x9, 0x4, 0x4, 0x2, 0x7}, {0x3, 0x80000, 0xfffffe77, 0x3, 0x9, 0x1}, {0x2d, 0x6, 0x2, 0x9b, 0x92d, 0x7}, {0x26, 0x9, 0x6, 0x3, 0x2, 0x8}, {0x0, 0x0, 0x7, 0x9, 0x200, 0x9}, {0x8, 0xfffffffa, 0x1ff, 0x3, 0x2, 0x1}, {0x3, 0x5, 0x1, 0x80000000, 0x101, 0x8}, {0xfffffff8, 0x200, 0x9, 0x2, 0x5, 0xffff}, {0x80000, 0x10, 0x1, 0x5, 0xffff, 0x9}, {0xe7d5, 0x7fffffff, 0x40, 0xc, 0x3, 0xe20e}, {0x3, 0x1, 0x9, 0xfffffffd, 0x2, 0x80000001}, {0xeb, 0x15, 0x7fffffff, 0x10000, 0x9, 0x2}, {0xe9e, 0x6, 0x4, 0x2, 0x5, 0x8}, {0xd, 0x4, 0x8, 0xdd9, 0x1, 0xffffff81}, {0xfffffffa, 0x4, 0x0, 0x7, 0x2, 0x3}, {0x57, 0x2, 0x6, 0x3, 0x8, 0x9c}, {0x80000000, 0xdf5, 0x5, 0x6, 0xb3, 0x8}, {0x970, 0x200, 0x96, 0x298c, 0x3, 0x10001}, {0x80, 0x9cf1, 0xcf, 0x0, 0x2, 0x8}, {0x200, 0x3, 0x28f, 0x2, 0x7, 0x4}, {0x5, 0xfffffffb, 0x5, 0x0, 0x0, 0x4}, {0x9, 0x6, 0xd, 0xa, 0x5, 0x2}, {0x7, 0x200, 0x1, 0x4, 0x9, 0x2}, {0x1, 0x9, 0x1, 0x8, 0x100, 0x10000}, {0x4, 0xe, 0xd69, 0x1c, 0x5, 0x8}, {0x4, 0x8, 0x8, 0xb, 0x6, 0x5}, {0xfffffffb, 0xd, 0x0, 0xe, 0x100, 0x5}, {0x8, 0x80000001, 0x8, 0x1, 0x3d, 0xf}, {0x3, 0xffff, 0x3, 0x800, 0x6, 0x5}, {0x6b2, 0x1, 0x5, 0x2, 0x1000, 0x75}, {0x7, 0x80, 0x0, 0x9, 0x64f8e7cc, 0x5}, {0x9, 0x7, 0x0, 0xc9bb, 0x99, 0x1}, {0x4, 0x0, 0x6, 0x7, 0xfff, 0x54d}, {0x9, 0x172, 0x8000, 0x3, 0xc, 0x4aa}, {0x3, 0xc, 0xa, 0x7f, 0xe, 0x80000001}, {0x5eb, 0x9, 0x10000, 0xffffffff, 0xc6a, 0x3f}, {0x8, 0x81, 0xc, 0x0, 0x4, 0x8}, {0x5, 0x6, 0x8001, 0x74, 0x101, 0x1}, {0x5, 0x3, 0x38dd, 0x8000, 0x0, 0x54f4}, {0x7d000000, 0x3, 0x8, 0x6, 0x4, 0x4}, {0x80000001, 0x80, 0x9, 0x0, 0x6, 0x7}, {0x0, 0x6068, 0x6e, 0x694, 0x7, 0xe000000}, {0xfff, 0xfffffffb, 0x80000000, 0x1, 0x400, 0x200}, {0xfff, 0x2, 0x1a000000, 0x10, 0x6, 0xc0}, {0x1, 0x10000, 0xffff, 0x0, 0x0, 0x9}, {0x9b, 0xf78f, 0x62, 0xc, 0x0, 0x9}, {0xfffffff9, 0x4, 0x5, 0x67, 0x6, 0x7}, {0x10, 0xa, 0x18be, 0x80000001, 0x9, 0x3}, {0x3, 0x8, 0x0, 0x7, 0x5, 0xe3}, {0x7, 0x5, 0x1, 0xffff0001, 0xfffffff7, 0x5653}, {0x4, 0x7, 0x9, 0x1, 0x4, 0x8000}, {0x7, 0x0, 0x16b, 0x0, 0x401, 0x6}, {0x6, 0x100, 0x0, 0x3, 0x1, 0x6}, {0xce12, 0x739f, 0x401, 0x100, 0x4, 0x5}, {0xd, 0x3ff, 0x3, 0x7, 0x4, 0x6}, {0x3, 0x81, 0x25, 0x2, 0x2, 0x100}, {0xfffffff8, 0x1, 0x101, 0x2, 0x8, 0x7fffffff}, {0xa, 0x1, 0x7, 0x52, 0x8, 0x7}, {0x1, 0x8000, 0x7, 0x8, 0x608, 0x40}, {0x6, 0x0, 0x5, 0xc, 0x8, 0x7ff}, {0x28ff4eb9, 0x9, 0x1ff, 0x0, 0x8, 0x3}, {0x7, 0xc1ce, 0x17a, 0xd, 0x9, 0x5}, {0x80, 0x5, 0x7, 0x0, 0x4, 0x800}, {0x8000, 0xa, 0x101, 0x7, 0x605c, 0xffff}, {0x100, 0x2, 0x2, 0xa4f, 0x7ff, 0xf}, {0x3, 0x6, 0x3, 0x2, 0x34, 0xfffffff8}, {0x1ff, 0x80000000, 0xe8b4, 0x3ff, 0x101, 0x18}, {0x932e, 0xffff8000, 0x7f, 0xffffffff, 0x7, 0x8ea9}, {0x3bab, 0x6, 0x7, 0x9a0}, {0x1, 0x81, 0x871, 0x25a, 0x8, 0xf}, {0x3, 0x8001, 0x7, 0x1, 0x6}, {0x40, 0x9, 0xd696, 0x4, 0x2, 0x2}, {0x1, 0x3ff, 0x401, 0x6, 0x598348f2, 0xff}, {0x0, 0x5, 0x1, 0x8, 0x8bd2, 0xbb}, {0x9e, 0x7, 0x200, 0x40, 0x5, 0x5}, {0x2, 0xd, 0x18000000, 0xffff8001, 0x9, 0x4}, {0x8, 0x2, 0xadc6, 0x80000001, 0x6, 0x1}, {0x0, 0xe7b9b5f, 0x800, 0x3, 0x8, 0x1}, {0x0, 0x1000, 0x3, 0x7f0, 0x9, 0x4}, {0x0, 0x2, 0x0, 0x80, 0x0, 0x9}, {0x1, 0xbf7, 0x3d67, 0x2e, 0x7fffffff, 0x1a}, {0x2e, 0xe, 0x9, 0x4, 0x8, 0x1}, {0x84, 0xffff, 0x3, 0x1ff, 0x2ecf, 0xffffffff}, {0xa0, 0x5, 0x6810d5c, 0x5, 0x1, 0x5}, {0xe, 0x6, 0x1, 0x6, 0x7, 0x4}, {0x1, 0xff, 0x5, 0x6, 0xd, 0x2}, {0x5, 0x7, 0x6, 0x7ff, 0xc8f, 0x1}, {0xa79ee2e4, 0xffffffff, 0x5, 0x10, 0xfffff94d}, {0xfffffffe, 0x3ff, 0x2, 0x6, 0x3, 0x23a18014}, {0x3, 0xe00, 0x400, 0xfffffffb, 0x4, 0xe}, {0x3, 0x3, 0xd, 0x6, 0x6, 0x7}, {0x3, 0x3, 0x96, 0x81, 0x0, 0x9}, {0xdb, 0x3, 0x0, 0x5b3, 0x0, 0x8}, {0x8b, 0x0, 0xfffffff9, 0x1, 0x8, 0x5}, {0x0, 0x7, 0x206, 0x80000000, 0x1000, 0xdde}, {0x3, 0x0, 0x4, 0x5, 0xba0, 0x7fffffff}, {0xffffffff, 0xcf, 0x3, 0x6, 0x80000000, 0xb}, {0x2, 0x100, 0x4, 0x9, 0x0, 0x9f69}, {0x4, 0x8, 0x1, 0x6, 0xfffffc00, 0x40004}, {0x6a, 0x6, 0x3, 0x9, 0x6, 0x8}, {0x5, 0x0, 0x71c, 0xf7, 0xff, 0x2}, {0x8, 0x1a, 0x5, 0x3, 0xa59, 0x7ff}, {0x9, 0x3ff, 0x2, 0x0, 0x200, 0x1}, {0x3, 0x2, 0x1, 0xd8fa, 0x5, 0x7}, {0x29, 0x4, 0x0, 0x5, 0x4f5}, {0xb7, 0x2, 0x7, 0xe, 0x4, 0x401}, {0x8000, 0x5, 0xfffffa02, 0x5, 0xe, 0xfe75}, {0x0, 0x10, 0x8, 0xf8, 0x0, 0x3}, {0x81, 0x7, 0x81b4, 0x7, 0x9, 0x6}, {0x3, 0x8, 0x0, 0x3, 0x8000, 0x4dbe}, {0xbc, 0x1, 0x1, 0x2, 0xce7}, {0x3, 0x81, 0x3b8a, 0x6, 0x10001, 0x1}, {0x81, 0x7c7, 0x3, 0x3ff, 0x2, 0x4}, {0x5, 0x10000, 0xa, 0x1, 0x4, 0x3}, {0x0, 0xf, 0x5, 0xffff, 0x0, 0xb}, {0x0, 0xe, 0x7, 0xfffffeff, 0x5, 0x5}, {0x7, 0x9a, 0x8, 0x9, 0xffffff01, 0xff}, {0x7fffffff, 0x3, 0x10000, 0x5, 0x4, 0x8}, {0x0, 0xfff, 0xb3, 0x2, 0x1, 0xcb}, {0x0, 0x4, 0x8, 0x3e5924ab, 0x0, 0x3}, {0x5, 0x8, 0x26e7, 0x8, 0x1000, 0x9}, {0x10001, 0x1a62, 0x675e0ded, 0xb, 0x80, 0x80000001}, {0xff, 0x0, 0xb, 0x7f, 0x40}, {0xf044, 0xffff, 0xf50, 0x14, 0x9c, 0xfffffff7}, {0x5, 0x2, 0x0, 0x5, 0x3, 0x7f}, {0x7d, 0x1, 0x5, 0x2, 0x1, 0xffffffff}], [{0x2, 0x1}, {0x3}, {0x3}, {0x2, 0x1}, {0x3, 0x1}, {0x3}, {0x5}, {}, {0x2}, {0x5}, {0x4}, {0x0, 0x1}, {0x0, 0x1}, {0x1}, {0x5, 0x1}, {0x3}, {0x10eeaebdfd45ee6a}, {0x1}, {0x5}, {0x1, 0x1}, {0x3, 0x1}, {0x1}, {}, {0x5, 0x1}, {0x2, 0x1}, {0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x1}, {}, {0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x2}, {0x4}, {0x3}, {}, {0x5}, {0x5}, {0x5}, {0x3}, {0x4, 0x1}, {0x1, 0x1}, {0x4}, {0x2}, {0x3}, {0x4, 0x1}, {0x1, 0x1}, {0x2}, {}, {0x4, 0x1}, {}, {0x0, 0x1}, {0x3, 0x1}, {0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x3}, {0x6}, {0x1}, {0x5783f585e0569d00}, {0xd76b55381db620f2}, {0x4, 0x1}, {0x5}, {0x2, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {}, {0x5, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x4}, {}, {0x0, 0x1}, {0x0, 0x24e5743a4ff49bc3}, {0x2}, {0x4, 0x1}, {0x4, 0x1}, {0x2}, {0x2, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x5}, {0x5, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x2}, {0x1, 0x1}, {0x2}, {0x3}, {0x0, 0x1}, {0x2}, {0x5}, {0x3}, {0x1}, {}, {0xfc087c22b0dc0e54}, {0x5, 0x1}, {0x1}, {0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {}, {0x5}, {0x0, 0x1}, {0x3, 0x1}, {0x3}, {0x7, 0x1}, {}, {0x4}, {0x5, 0x1}, {0x3}, {0x0, 0x1}, {0x2, 0x1}, {0x4}, {0x4}, {0x4}, {0x5, 0x1}, {0x1}, {0x5, 0x1}, {}, {}, {}, {0x0, 0x1}], 0x1}}]}, {0xca, 0x6, "b4c83d5918fe2254224d4acb7e2c8ec818f267aca3e229f07da56cee8a566f45c0b1a41a150e9bdc1b3d098cc490a069b291797ffdbfb2207fe7e6cba463af3eaa47bf282d8f0569bc522c11e475ff3d4b41914776710571abcfd37f4edd125dccdd6b16c24db21879f7dea8f9680758e9e1bf4c797dc2a592069591dd44471ce288d73027a27a1aa20f629775199b451d233a8dd09b4a1ed3f23d1c7e8d12344a860aa9ecf332e8350e6cc0f7dd0987acee67085b4cd96208b77225a371d2551419facc5389"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0xf90}}, 0x0)
sendmsg$IPSET_CMD_ADD(r10, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000700)={0x14, 0x9, 0x6, 0x3, 0x0, 0x0, {0x0, 0x0, 0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x4040000}, 0x200080c4)
splice(r5, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffff8000, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
socket$nl_route(0x10, 0x3, 0x0)

0s ago: executing program 1 (id=5661):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10)
r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
connect$bt_l2cap(r2, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe)
r3 = socket$netlink(0x10, 0x3, 0x0)
listen(0xffffffffffffffff, 0x5)
socket$can_j1939(0x1d, 0x2, 0x7)
sendmsg(0xffffffffffffffff, 0x0, 0x0)
listen(0xffffffffffffffff, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
close(0x3)
r4 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10)
sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x71)
setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000540)='cdg', 0x3)
sendmmsg$inet(r4, &(0x7f0000001100)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000280)='R', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000580)='\b', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000005c0)="5976e0f0", 0x4}], 0x1}}], 0x3, 0x4000001)
sendmsg$MPTCP_PM_CMD_REMOVE(r3, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f0000000280)={0x14, 0x0, 0x300, 0x70bd2b, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x20000010)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={0x14, r6, 0x1}, 0x14}}, 0x4010)
ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f00000000c0)={r2, r2, 0x7, 0x0, 0x0, 0xe, 0x4, 0x8, 0x9, 0x3, 0x3, 0x2, 'syz1\x00'})
ioctl$sock_bt_hidp_HIDPCONNDEL(r1, 0x400448c9, &(0x7f0000000000)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}})
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002100)={0x18, 0x1, &(0x7f00000001c0)=ANY=[@ANYBLOB="b553e0ff08000008"], &(0x7f0000002040)='GPL\x00', 0x8, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000002080)={0x0, 0xc, 0x5, 0xffffff5f}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000020c0)=[0x1, 0x1, 0x1, 0x1, 0xffffffffffffffff]}, 0x94)
setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000380), 0x4)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@window={0x3, 0x0, 0xd46d}, @sack_perm, @window={0x3, 0x5}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x6)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='htcp', 0x4)

kernel console output (not intermixed with test programs):

crewing up backlog
[  397.884262][ T5650] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  397.886513][ T5650] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  398.004656][ T5337] 8021q: adding VLAN 0 to HW filter on device eth4
[  398.196773][ T5451] veth1_vlan: left promiscuous mode
[  398.196854][ T5451] veth0_vlan: left promiscuous mode
[  398.810810][T21439] bridge0: port 1(bridge_slave_0) entered blocking state
[  398.813426][T21439] bridge0: port 1(bridge_slave_0) entered disabled state
[  398.813485][T21439] bridge_slave_0: entered allmulticast mode
[  398.817245][T21439] bridge_slave_0: entered promiscuous mode
[  398.831119][ T8230] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  398.838816][T21439] bridge0: port 2(bridge_slave_1) entered blocking state
[  398.838899][T21439] bridge0: port 2(bridge_slave_1) entered disabled state
[  398.838990][T21439] bridge_slave_1: entered allmulticast mode
[  398.849423][T21439] bridge_slave_1: entered promiscuous mode
[  398.896735][T21439] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  398.901630][T21439] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  398.969058][T21439] team0: Port device team_slave_0 added
[  398.970454][T21439] team0: Port device team_slave_1 added
[  399.012426][T21439] batman_adv: batadv0: Adding interface: batadv_slave_0
[  399.012436][T21439] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  399.012447][T21439] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  399.013828][T21439] batman_adv: batadv0: Adding interface: batadv_slave_1
[  399.013834][T21439] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  399.013844][T21439] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  399.025285][ T5650] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  399.025402][ T5650] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  399.064832][ T5337] 8021q: adding VLAN 0 to HW filter on device eth5
[  399.128652][T21439] hsr_slave_0: entered promiscuous mode
[  399.129992][T21439] hsr_slave_1: entered promiscuous mode
[  399.130325][T21439] debugfs: 'hsr0' already exists in 'hsr'
[  399.130335][T21439] Cannot create hsr debugfs directory
[  399.217784][ T5451] IPVS: stop unused estimator thread 0...
[  399.311571][T21571] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check.
[  399.466085][ T8251] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  399.713025][ T5606] Bluetooth: hci1: command tx timeout
[  399.864293][ T8239] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  400.142199][ T5650] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  401.781978][ T5606] Bluetooth: hci1: command tx timeout
[  401.948178][T21559] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  401.965250][T21439] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  401.976036][T21439] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  401.976916][T21439] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  401.996717][T21439] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  401.998138][T21439] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  402.013816][T21439] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  402.016652][T21439] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  402.023846][T21439] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  402.066341][T21622] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3868'.
[  402.068851][T21622] netlink: 'syz.2.3868': attribute type 2 has an invalid length.
[  402.197214][T21439] 8021q: adding VLAN 0 to HW filter on device bond0
[  402.219040][T21439] 8021q: adding VLAN 0 to HW filter on device team0
[  402.227202][   T28] bridge0: port 1(bridge_slave_0) entered blocking state
[  402.227275][   T28] bridge0: port 1(bridge_slave_0) entered forwarding state
[  402.247195][   T28] bridge0: port 2(bridge_slave_1) entered blocking state
[  402.247271][   T28] bridge0: port 2(bridge_slave_1) entered forwarding state
[  402.529584][T21659] netlink: 'syz.1.3878': attribute type 2 has an invalid length.
[  402.543989][T21659] : entered promiscuous mode
[  402.680987][T21439] 8021q: adding VLAN 0 to HW filter on device batadv0
[  402.757191][T21439] veth0_vlan: entered promiscuous mode
[  402.765516][T21439] veth1_vlan: entered promiscuous mode
[  402.794488][T21439] veth0_macvtap: entered promiscuous mode
[  402.798664][T21439] veth1_macvtap: entered promiscuous mode
[  402.818260][T21439] batman_adv: batadv0: Interface activated: batadv_slave_0
[  402.835906][T21439] batman_adv: batadv0: Interface activated: batadv_slave_1
[  402.887440][ T5451] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  402.918971][ T5650] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  402.919306][ T5650] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  402.919351][ T5650] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  402.988176][T12600] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  402.988187][T12600] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  402.997987][ T8230] net_ratelimit: 10 callbacks suppressed
[  402.997996][ T8230] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  403.020984][   T28] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  403.020996][   T28] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  403.077566][T21691] IPVS: Unknown mcast interface: virt_wifi0
[  403.081485][T21693] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3849'.
[  403.081495][T21693] vxlan: RTM_NEWNEIGH with invalid state 0x9
[  403.200696][T21705] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3888'.
[  403.229274][T21709] nbd: must specify a size in bytes for the device
[  403.349803][T21726] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3890'.
[  403.349815][T21726] nbd: must specify an index to disconnect
[  403.431430][T21735] syzkaller0: entered promiscuous mode
[  403.431455][T21735] syzkaller0: entered allmulticast mode
[  403.468892][T21738] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3895'.
[  403.481955][   T12] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  403.482004][   T12] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  403.482018][   T12] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  403.482030][   T12] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  403.504221][ T5650] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  403.504478][ T5650] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  403.528005][T21744] netlink: 72 bytes leftover after parsing attributes in process `syz.0.3896'.
[  403.536466][T21744] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3896'.
[  403.537514][T21744] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3896'.
[  403.585731][T21751] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input5
[  403.597923][T21750] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3899'.
[  403.707246][T21763] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3901'.
[  403.707539][T21763] netdevsim netdevsim0 netdevsim0: entered allmulticast mode
[  403.707973][T21763] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  403.709482][T21763] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  403.709490][T21763] IPv6: NLM_F_CREATE should be set when creating new route
[  403.864679][ T5606] Bluetooth: hci1: command tx timeout
[  404.058941][ T8230] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  404.267520][T21804] Timeout policy `syz0' can only be used by L3 protocol number 8939
[  404.271193][T21804] netlink: 'syz.2.3915': attribute type 4 has an invalid length.
[  404.454484][T21815] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  404.631111][T21828] netlink: 'syz.1.3922': attribute type 83 has an invalid length.
[  404.634127][   T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  404.634315][   T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  404.748028][T21833] xt_hashlimit: overflow, try lower: 0/0
[  405.063718][ T8239] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  405.291310][T21848] xt_ecn: cannot match TCP bits for non-tcp packets
[  405.397512][T21852] netlink: zone id is out of range
[  405.889730][T21898] syzkaller0: left promiscuous mode
[  405.913158][T21898] bond4: left promiscuous mode
[  405.940038][T21898] bond6: left promiscuous mode
[  406.903923][ T1114] wlan1: Trigger new scan to find an IBSS to join
[  407.069883][T21942] Bluetooth: hci0: Invalid link address type 1 for 66:55:44:23:22:11
[  407.603386][T21980] __nla_validate_parse: 13 callbacks suppressed
[  407.603459][T21980] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3964'.
[  407.738040][T21989] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3967'.
[  407.738064][T21989] IPv6: NLM_F_CREATE should be specified when creating new route
[  408.029862][   T54] block nbd0: Possible stuck request ffff88810a9a0000: control (read@0,1024B). Runtime 30 seconds
[  408.030371][   T54] block nbd0: Possible stuck request ffff88810a9a0200: control (read@1024,1024B). Runtime 30 seconds
[  408.030391][   T54] block nbd0: Possible stuck request ffff88810a9a0400: control (read@2048,1024B). Runtime 30 seconds
[  408.030409][   T54] block nbd0: Possible stuck request ffff88810a9a0600: control (read@3072,1024B). Runtime 30 seconds
[  408.097346][T22013] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3973'.
[  408.098872][T22013] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3973'.
[  408.183835][ T8237] net_ratelimit: 91 callbacks suppressed
[  408.183851][ T8237] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  408.557063][T22029] xt_policy: output policy not valid in PREROUTING and INPUT
[  408.560414][T22029] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  408.560865][T22029] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3975'.
[  408.585492][    T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  408.613112][T22029] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3975'.
[  408.613345][T22029] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3975'.
[  408.715477][T22033] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3976'.
[  409.150630][T22033] tipc: Resetting bearer <eth:ipvlan1>
[  409.392234][   T13] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  409.392261][   T13] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 20000 - 0
[  409.392276][   T13] netdevsim netdevsim1 eth2: unset [1, 1] type 2 family 0 port 6081 - 0
[  409.392299][   T13] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  409.392313][   T13] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 20000 - 0
[  409.392326][   T13] netdevsim netdevsim1 eth3: unset [1, 1] type 2 family 0 port 6081 - 0
[  409.392353][   T13] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  409.392367][   T13] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 20000 - 0
[  409.392381][   T13] netdevsim netdevsim1 eth1: unset [1, 1] type 2 family 0 port 6081 - 0
[  409.392400][   T13] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  409.392414][   T13] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 20000 - 0
[  409.392428][   T13] netdevsim netdevsim1 eth0: unset [1, 1] type 2 family 0 port 6081 - 0
[  409.428881][T22046] netlink: 67 bytes leftover after parsing attributes in process `syz.2.3978'.
[  409.472709][    C0] TC_ACT_REPEAT abuse ?
[  409.518543][T22051] syzkaller0: entered promiscuous mode
[  409.559151][T22053] openvswitch: netlink: nsh attribute has 17 unknown bytes.
[  409.643628][    C0] TC_ACT_REPEAT abuse ?
[  409.687719][T22066] x_tables: duplicate underflow at hook 2
[  409.688592][T22066] batadv0: entered promiscuous mode
[  409.743572][T22068] 8021q: adding VLAN 0 to HW filter on device bond0
[  409.744402][T22068] 8021q: adding VLAN 0 to HW filter on device team0
[  409.747230][T22074] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3986'.
[  409.747908][T22068] 8021q: adding VLAN 0 to HW filter on device batadv0
[  409.769617][T12600] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  409.769753][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  409.772143][ T1108] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  409.773559][    T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  409.806023][T22068] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  409.806048][T22068] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  409.809857][T22068] veth1_vlan: left promiscuous mode
[  409.810835][T22068] veth0_vlan: left promiscuous mode
[  409.814347][T22068] veth0_vlan: entered promiscuous mode
[  409.816381][T22068] veth1_vlan: entered promiscuous mode
[  409.820081][T22068] tipc: Resetting bearer <eth:ipvlan1>
[  409.820150][T22068] tipc: Resetting bearer <eth:ipvlan1>
[  409.829285][T22068] 8021q: adding VLAN 0 to HW filter on device bond1
[  409.835085][T22068] 8021q: adding VLAN 0 to HW filter on device bond2
[  409.861473][T22068] 8021q: adding VLAN 0 to HW filter on device bond3
[  409.863718][   T28] wlan1: Trigger new scan to find an IBSS to join
[  409.868159][T22068] 8021q: adding VLAN 0 to HW filter on device bond4
[  409.875528][T22068] 8021q: adding VLAN 0 to HW filter on device bond5
[  409.992036][   T12] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  409.992067][   T12] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  410.023168][   T12] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 20000 - 0
[  410.037874][   T12] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  410.037901][   T12] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  410.037915][   T12] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 20000 - 0
[  410.037944][   T12] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  410.037959][   T12] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  410.037973][   T12] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 20000 - 0
[  410.037997][   T12] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  410.038012][   T12] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  410.038027][   T12] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 20000 - 0
[  410.351408][T22115] syzkaller0: entered promiscuous mode
[  410.351421][T22115] syzkaller0: entered allmulticast mode
[  410.479065][T22124] xt_IDLETIMER: timeout value is too big
[  410.704624][T22149] pimreg: tun_chr_ioctl cmd 1074025681
[  411.335264][T22197] netlink: 'syz.2.4021': attribute type 1 has an invalid length.
[  411.961722][T22211] netlink: 'syz.2.4024': attribute type 1 has an invalid length.
[  411.984915][T22211] 8021q: adding VLAN 0 to HW filter on device bond7
[  412.007350][T22217] sctp: [Deprecated]: syz.0.4025 (pid 22217) Use of struct sctp_assoc_value in delayed_ack socket option.
[  412.007350][T22217] Use struct sctp_sack_info instead
[  412.201290][T22224] : renamed from bond_slave_0 (while UP)
[  412.214031][T22224] netlink: 'syz.0.4028': attribute type 4 has an invalid length.
[  412.863966][T22251] __nla_validate_parse: 10 callbacks suppressed
[  412.863988][T22251] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4037'.
[  413.656252][T22268] netlink: 'syz.2.4043': attribute type 6 has an invalid length.
[  413.660427][T22268] netlink: 48 bytes leftover after parsing attributes in process `syz.2.4043'.
[  413.957580][ T8237] net_ratelimit: 164 callbacks suppressed
[  413.957601][ T8237] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  414.011335][T22301] syzkaller1: entered promiscuous mode
[  414.011356][T22301] syzkaller1: entered allmulticast mode
[  414.192850][   T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  414.193038][   T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  414.306040][T22322] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4058'.
[  414.369515][T22326] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4058'.
[  414.992197][ T1287] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  415.066705][ T1114] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  415.068499][ T8239] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  415.071639][ T8239] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  415.176011][T22339] netlink: NAT attribute has 4 unknown bytes
[  415.176042][T22339] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  415.289301][T22350] netlink: 92 bytes leftover after parsing attributes in process `syz.0.4062'.
[  415.289399][T22350] netlink: Conntrack attr has 4 unknown bytes
[  415.290988][T22350] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4062'.
[  415.419550][T22357] netlink: 'syz.2.4063': attribute type 15 has an invalid length.
[  415.437393][T22358] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4064'.
[  415.605563][T22360] batadv0: left promiscuous mode
[  415.615253][T22360] 8021q: adding VLAN 0 to HW filter on device batadv0
[  415.639731][T22360] syzkaller0: left promiscuous mode
[  415.865695][ T1114] wlan1: Trigger new scan to find an IBSS to join
[  415.998626][T22385] sctp: [Deprecated]: syz.1.4070 (pid 22385) Use of int in maxseg socket option.
[  415.998626][T22385] Use struct sctp_assoc_value instead
[  416.130878][T22387] sctp: [Deprecated]: syz.2.4071 (pid 22387) Use of int in maxseg socket option.
[  416.130878][T22387] Use struct sctp_assoc_value instead
[  416.250209][T22397] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4074'.
[  416.321428][T22406] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4075'.
[  416.836339][T22440] syzkaller1: entered promiscuous mode
[  416.836361][T22440] syzkaller1: entered allmulticast mode
[  417.518236][T22450] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4089'.
[  418.070400][T22474] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4095'.
[  418.233731][T22492] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  418.233883][T22493] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  418.405835][T22514] IPv6: NLM_F_REPLACE set, but no existing node found!
[  418.405965][T22514] IPv6: NLM_F_REPLACE set, but no existing node found!
[  418.474364][T22520] smc: net device lo applied user defined pnetid SYZ0
[  418.507529][T22524] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4113'.
[  418.510712][T22524] vlan3: entered allmulticast mode
[  418.538672][T22527] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4115'.
[  418.548643][T22527] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4115'.
[  418.558947][T22532] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4115'.
[  418.560232][T22532] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4115'.
[  418.652170][T22542] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4117'.
[  418.698543][T22547] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4118'.
[  418.700272][T22547] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4118'.
[  418.833594][T12599] wlan1: Trigger new scan to find an IBSS to join
[  418.932032][T22571] netlink: 712 bytes leftover after parsing attributes in process `syz.2.4122'.
[  419.099739][T22565] geneve1: left promiscuous mode
[  419.110278][T22565] net_ratelimit: 137 callbacks suppressed
[  419.110300][T22565] A link change request failed with some changes committed already. Interface vxlan0 may have been left with an inconsistent configuration, please check.
[  419.136495][    T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  419.136812][    T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  419.222866][ T1287] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  419.272455][    T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  419.423474][T22582] A link change request failed with some changes committed already. Interface vxlan0 may have been left with an inconsistent configuration, please check.
[  419.427319][T22582] openvswitch: netlink: Message has 8 unknown bytes.
[  419.445098][ T1287] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  419.445253][ T1287] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  419.766739][T22593] bridge0: port 2(bridge_slave_1) entered disabled state
[  419.766947][T22593] bridge0: port 1(bridge_slave_0) entered disabled state
[  419.782545][   T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  419.876089][T22599] bridge0: port 2(bridge_slave_1) entered blocking state
[  419.876144][T22599] bridge0: port 2(bridge_slave_1) entered listening state
[  419.876240][T22599] bridge0: port 1(bridge_slave_0) entered blocking state
[  419.876282][T22599] bridge0: port 1(bridge_slave_0) entered listening state
[  419.899883][T22599] syzkaller0: left promiscuous mode
[  420.113339][T22607] xt_MASQUERADE: bad MAP_IPS.
[  420.200935][T22619] ieee802154 phy0 wpan0: encryption failed: -22
[  420.201023][T22619] ieee802154 phy0 wpan0: encryption failed: -22
[  420.201111][T22619] ieee802154 phy0 wpan0: encryption failed: -22
[  420.201172][T22619] ieee802154 phy0 wpan0: encryption failed: -22
[  420.201230][T22619] ieee802154 phy0 wpan0: encryption failed: -22
[  420.201288][T22619] ieee802154 phy0 wpan0: encryption failed: -22
[  420.201347][T22619] ieee802154 phy0 wpan0: encryption failed: -22
[  420.201406][T22619] ieee802154 phy0 wpan0: encryption failed: -22
[  420.201471][T22619] ieee802154 phy0 wpan0: encryption failed: -22
[  420.201530][T22619] ieee802154 phy0 wpan0: encryption failed: -22
[  420.201588][T22619] ieee802154 phy0 wpan0: encryption failed: -22
[  420.201676][T22619] ieee802154 phy0 wpan0: encryption failed: -22
[  420.201828][T22619] ieee802154 phy0 wpan0: encryption failed: -22
[  420.237386][T22619] ieee802154 phy0 wpan0: encryption failed: -22
[  420.239183][T22619] ieee802154 phy0 wpan0: encryption failed: -22
[  420.239261][T22619] ieee802154 phy0 wpan0: encryption failed: -22
[  420.239324][T22619] ieee802154 phy0 wpan0: encryption failed: -22
[  420.239456][T22619] ieee802154 phy0 wpan0: encryption failed: -22
[  420.239518][T22619] ieee802154 phy0 wpan0: encryption failed: -22
[  420.239579][T22619] ieee802154 phy0 wpan0: encryption failed: -22
[  420.239662][T22619] ieee802154 phy0 wpan0: encryption failed: -22
[  420.239718][T22619] ieee802154 phy0 wpan0: encryption failed: -22
[  420.239774][T22619] ieee802154 phy0 wpan0: encryption failed: -22
[  420.239830][T22619] ieee802154 phy0 wpan0: encryption failed: -22
[  420.239883][T22619] ieee802154 phy0 wpan0: encryption failed: -22
[  420.239936][T22619] ieee802154 phy0 wpan0: encryption failed: -22
[  420.240001][T22619] ieee802154 phy0 wpan0: encryption failed: -22
[  420.240059][T22619] ieee802154 phy0 wpan0: encryption failed: -22
[  420.240115][T22619] ieee802154 phy0 wpan0: encryption failed: -22
[  420.240175][T22619] ieee802154 phy0 wpan0: encryption failed: -22
[  420.240234][T22619] ieee802154 phy0 wpan0: encryption failed: -22
[  420.240294][T22619] ieee802154 phy0 wpan0: encryption failed: -22
[  420.240353][T22619] ieee802154 phy0 wpan0: encryption failed: -22
[  420.240412][T22619] ieee802154 phy0 wpan0: encryption failed: -22
[  420.240472][T22619] ieee802154 phy0 wpan0: encryption failed: -22
[  420.240529][T22619] ieee802154 phy0 wpan0: encryption failed: -22
[  420.240651][T22619] ieee802154 phy0 wpan0: encryption failed: -22
[  420.240715][T22619] ieee802154 phy0 wpan0: encryption failed: -22
[  420.240773][T22619] ieee802154 phy0 wpan0: encryption failed: -22
[  420.240833][T22619] ieee802154 phy0 wpan0: encryption failed: -22
[  420.240890][T22619] ieee802154 phy0 wpan0: encryption failed: -22
[  420.240953][T22619] ieee802154 phy0 wpan0: encryption failed: -22
[  420.241016][T22619] ieee802154 phy0 wpan0: encryption failed: -22
[  420.241074][T22619] ieee802154 phy0 wpan0: encryption failed: -22
[  420.241129][T22619] ieee802154 phy0 wpan0: encryption failed: -22
[  420.241187][T22619] ieee802154 phy0 wpan0: encryption failed: -22
[  420.241244][T22619] ieee802154 phy0 wpan0: encryption failed: -22
[  420.241297][T22619] ieee802154 phy0 wpan0: encryption failed: -22
[  420.241347][T22619] ieee802154 phy0 wpan0: encryption failed: -22
[  420.241398][T22619] ieee802154 phy0 wpan0: encryption failed: -22
[  420.241450][T22619] ieee802154 phy0 wpan0: encryption failed: -22
[  420.241507][T22619] ieee802154 phy0 wpan0: encryption failed: -22
[  420.241560][T22619] ieee802154 phy0 wpan0: encryption failed: -22
[  420.241641][T22619] ieee802154 phy0 wpan0: encryption failed: -22
[  420.241698][T22619] ieee802154 phy0 wpan0: encryption failed: -22
[  420.302275][T22619] ieee802154 phy0 wpan0: encryption failed: -22
[  420.365372][T22632] pimreg: entered allmulticast mode
[  420.905665][T22668] syzkaller0: left allmulticast mode
[  421.028946][T12600] IPVS: starting estimator thread 0...
[  421.113063][T22692] IPVS: using max 48 ests per chain, 115200 per kthread
[  421.455010][T22728] xt_CT: You must specify a L4 protocol and not use inversions on it
[  421.551471][T22734] 8021q: adding VLAN 0 to HW filter on device bond13
[  421.559270][T22734] team0: Port device bond13 added
[  421.871234][T22764] nft_compat: unsupported protocol 1
[  421.941285][T22783] mac80211_hwsim hwsim17 ..c: renamed from wlan1 (while UP)
[  421.964054][T22782] sctp: [Deprecated]: syz.2.4183 (pid 22782) Use of int in max_burst socket option deprecated.
[  421.964054][T22782] Use struct sctp_assoc_value instead
[  422.270815][ T5606] Bluetooth: hci2: connection err: -111
[  422.286063][T22813] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[  422.286528][T22813] team0: Device ipvlan2 is already an upper device of the team interface
[  423.001627][T22850] netlink: 'syz.2.4196': attribute type 2 has an invalid length.
[  423.026465][T22850] : entered promiscuous mode
[  423.312704][T22860] __nla_validate_parse: 17 callbacks suppressed
[  423.312725][T22860] netlink: 80 bytes leftover after parsing attributes in process `syz.1.4200'.
[  423.764781][T22877] netlink: 'syz.0.4204': attribute type 2 has an invalid length.
[  423.766616][T22876] netlink: 'syz.0.4204': attribute type 2 has an invalid length.
[  423.787138][T22877] : entered promiscuous mode
[  423.823679][T22876] veth0_to_bridge: entered promiscuous mode
[  423.823978][T22876] macvtap0: entered allmulticast mode
[  423.823987][T22876] veth0_to_bridge: entered allmulticast mode
[  423.842581][T22876] veth0_to_bridge: left allmulticast mode
[  423.842599][T22876] veth0_to_bridge: left promiscuous mode
[  424.292686][T22908] netlink: 'syz.0.4212': attribute type 7 has an invalid length.
[  424.292702][T22908] netlink: 140 bytes leftover after parsing attributes in process `syz.0.4212'.
[  424.302675][T22911] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4212'.
[  424.515764][T22928] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4216'.
[  424.527788][T22937] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4218'.
[  424.579009][T22937] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4218'.
[  424.589440][T22937] macvtap0: entered allmulticast mode
[  424.589452][T22937] bond14: entered allmulticast mode
[  424.589664][T22937] 8021q: adding VLAN 0 to HW filter on device macvtap0
[  424.777014][T22954] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4222'.
[  424.780845][T22958] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4224'.
[  424.795475][T22958] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4224'.
[  424.802476][T22958] IPVS: set_ctl: invalid protocol: 43 172.20.20.187:20001
[  424.832210][T22958] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4224'.
[  424.867400][T22958] hsr_slave_1 (unregistering): left promiscuous mode
[  424.976830][T22971] net_ratelimit: 15 callbacks suppressed
[  424.976844][T22971] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  425.001489][T22970] netlink: 'syz.0.4227': attribute type 4 has an invalid length.
[  425.001509][T22970] netlink: 'syz.0.4227': attribute type 8 has an invalid length.
[  425.001517][T22970] netlink: 'syz.0.4227': attribute type 1 has an invalid length.
[  425.001554][T22970] NCSI netlink: No device for ifindex 48485
[  425.204925][T22990] syzkaller0: left allmulticast mode
[  425.264889][T22994] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  425.862904][ T8982] ..c: Trigger new scan to find an IBSS to join
[  425.863500][ T8982] wlan0: Trigger new scan to find an IBSS to join
[  426.143766][T23031] syzkaller0: entered promiscuous mode
[  426.143801][T23031] syzkaller0: entered allmulticast mode
[  426.215958][T23037] netlink: 'syz.0.4247': attribute type 1 has an invalid length.
[  426.628077][T23072] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  427.247694][T23131] netlink: 'syz.1.4266': attribute type 4 has an invalid length.
[  427.308877][T23136] netlink: 'syz.1.4269': attribute type 83 has an invalid length.
[  427.823471][T23174] netlink: zone id is out of range
[  427.823538][T23174] netlink: zone id is out of range
[  427.823623][T23174] netlink: zone id is out of range
[  427.823653][T23174] netlink: zone id is out of range
[  427.823659][T23174] netlink: zone id is out of range
[  427.823664][T23174] netlink: zone id is out of range
[  427.823670][T23174] netlink: zone id is out of range
[  427.823674][T23174] netlink: zone id is out of range
[  427.823678][T23174] netlink: zone id is out of range
[  428.826224][T12600] wlan0: Trigger new scan to find an IBSS to join
[  428.826305][T12600] ..c: Trigger new scan to find an IBSS to join
[  429.116598][   T28] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  429.116621][   T28] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  429.139826][T12599] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  429.139847][T12599] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  429.353633][T23289] __nla_validate_parse: 69 callbacks suppressed
[  429.353652][T23289] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4303'.
[  429.385020][T23291] xt_hashlimit: size too large, truncated to 1048576
[  429.385281][T23291] xt_hashlimit: max too large, truncated to 1048576
[  429.388778][T23291] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4305'.
[  429.518264][T23302] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4309'.
[  429.571686][T23302] 8021q: adding VLAN 0 to HW filter on device bond8
[  429.747481][   T65] ..c: Creating new IBSS network, BSSID ba:0d:d6:74:3e:de
[  429.907035][T23325] netlink: 'syz.1.4314': attribute type 3 has an invalid length.
[  430.253879][T23363] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4320'.
[  430.369895][T23365] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4322'.
[  430.468947][T23374] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4324'.
[  430.584184][T23384] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4325'.
[  430.715799][T23391] netlink: 'syz.1.4328': attribute type 1 has an invalid length.
[  430.788593][T23394] pim6reg: left allmulticast mode
[  431.047741][T23402] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4331'.
[  431.451102][T23425] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4337'.
[  431.451628][T23424] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4337'.
[  431.821026][T23448] x_tables: duplicate entry at hook 1
[  431.861959][T12599] wlan0: Trigger new scan to find an IBSS to join
[  432.792476][T12599] wlan0: Creating new IBSS network, BSSID c6:c7:5a:2f:78:37
[  434.505989][T23431] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  434.706395][T23481] syzkaller0: left promiscuous mode
[  434.706446][T23481] syzkaller0: left allmulticast mode
[  434.894689][    C0] net_ratelimit: 63 callbacks suppressed
[  434.894787][    C0] TC_ACT_REPEAT abuse ?
[  435.025547][T23520] __nla_validate_parse: 1 callbacks suppressed
[  435.025568][T23520] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4355'.
[  435.252243][    C0] TC_ACT_REPEAT abuse ?
[  435.418234][T23535] netlink: ct_mark mask cannot be 0
[  435.418263][T23535] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  435.495856][T23552] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4360'.
[  435.606022][T23546] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4360'.
[  435.950661][T23592] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4369'.
[  436.023952][T23597] netlink: Setting conntrack mark requires 'commit' flag.
[  436.023980][T23597] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  436.066423][T23603] xt_nfacct: accounting object `' does not exist
[  436.071496][T23603] netlink: 'syz.1.4371': attribute type 2 has an invalid length.
[  436.646108][T23634] netlink: 'syz.1.4381': attribute type 21 has an invalid length.
[  436.646122][T23634] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4381'.
[  436.648441][T23634] netlink: 'syz.1.4381': attribute type 21 has an invalid length.
[  436.648450][T23634] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4381'.
[  436.813014][    T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  436.983056][ T5591] Bluetooth: hci1: command 0x0405 tx timeout
[  437.396481][T23697] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4396'.
[  437.401724][T23697] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4396'.
[  437.402045][T23697] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4396'.
[  437.402137][T23697] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4396'.
[  437.542252][    T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  437.556862][ T5041] udevd[5041]: worker [20758] /devices/virtual/block/nbd0 is taking a long time
[  437.747878][T23725] syzkaller0: entered promiscuous mode
[  437.747901][T23725] syzkaller0: entered allmulticast mode
[  437.757770][T23725] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  437.784377][ T8237] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  438.104103][   T54] block nbd0: Possible stuck request ffff88810a9a0000: control (read@0,1024B). Runtime 60 seconds
[  438.104139][   T54] block nbd0: Possible stuck request ffff88810a9a0200: control (read@1024,1024B). Runtime 60 seconds
[  438.104155][   T54] block nbd0: Possible stuck request ffff88810a9a0400: control (read@2048,1024B). Runtime 60 seconds
[  438.104171][   T54] block nbd0: Possible stuck request ffff88810a9a0600: control (read@3072,1024B). Runtime 60 seconds
[  438.145835][T23761] syzkaller0: left promiscuous mode
[  438.145857][T23761] syzkaller0: left allmulticast mode
[  438.648824][T23809] netlink: 'syz.1.4415': attribute type 1 has an invalid length.
[  438.716788][T23811] ieee802154 phy0 wpan0: encryption failed: -90
[  439.690086][T23886] xt_NETMAP: bad rangesize 37.
[  439.994100][ T1111] wlan0: Selected IBSS BSSID c6:c7:5a:2f:78:37 based on configured SSID
[  440.029082][ T1378] ieee802154 phy0 wpan0: encryption failed: -22
[  440.045858][ T8239] net_ratelimit: 21 callbacks suppressed
[  440.045877][ T8239] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  440.184431][ T5601] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  440.217207][T23925] __nla_validate_parse: 63 callbacks suppressed
[  440.217227][T23925] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4434'.
[  440.217237][T23925] netlink: 14 bytes leftover after parsing attributes in process `syz.1.4434'.
[  440.606500][T23937] netlink: 52 bytes leftover after parsing attributes in process `syz.1.4439'.
[  440.606522][T23937] netlink: 'syz.1.4439': attribute type 1 has an invalid length.
[  440.755003][T23943] netlink: 'syz.2.4442': attribute type 27 has an invalid length.
[  440.902376][T23954] wlan0: Trigger new scan to find an IBSS to join
[  440.922436][T23975] netlink: 84 bytes leftover after parsing attributes in process `syz.2.4446'.
[  440.931182][T23976] netlink: 'syz.0.4448': attribute type 10 has an invalid length.
[  440.962312][T23976] 8021q: adding VLAN 0 to HW filter on device bond0
[  440.965389][T23976] team0: Port device bond0 added
[  440.995411][ T5663] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  440.995671][ T5663] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  441.063424][ T8237] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  441.192213][T12607] wlan0: Selected IBSS BSSID c6:c7:5a:2f:78:37 based on configured SSID
[  441.193684][T23990] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4453'.
[  441.193847][T23989] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4453'.
[  441.196921][T23990] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4453'.
[  441.329252][T23996] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4454'.
[  441.547164][T24017] netlink: 80 bytes leftover after parsing attributes in process `syz.0.4457'.
[  441.623626][ T1287] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  441.694345][T24025] bond0: up delay (5) is not a multiple of miimon (4), value rounded to 4 ms
[  441.797871][T24035] A link change request failed with some changes committed already. Interface vxlan0 may have been left with an inconsistent configuration, please check.
[  441.804312][ T1287] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  441.804587][ T1287] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  441.941979][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  442.506435][T24025] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  442.922160][T24083] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4470'.
[  443.862309][T12597] wlan0: Trigger new scan to find an IBSS to join
[  445.222489][ T8237] net_ratelimit: 18 callbacks suppressed
[  445.222513][ T8237] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  445.432322][ T5650] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  445.432580][ T5650] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  445.578280][T24067] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  445.685853][T24118] gtp0: entered promiscuous mode
[  445.685875][T24118] gtp0: entered allmulticast mode
[  445.689371][T24118] __nla_validate_parse: 2 callbacks suppressed
[  445.689388][T24118] netlink: 84 bytes leftover after parsing attributes in process `syz.0.4480'.
[  445.739018][T24125] netlink: 48 bytes leftover after parsing attributes in process `syz.2.4481'.
[  445.989256][T24143] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4486'.
[  445.990794][T24141] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4486'.
[  445.991100][T24139] A link change request failed with some changes committed already. Interface vxlan0 may have been left with an inconsistent configuration, please check.
[  446.025968][T24139] openvswitch: netlink: Message has 8 unknown bytes.
[  446.026445][ T8237] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  446.026690][ T8237] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  446.092779][ T8237] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  446.102682][ T8237] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  446.263008][ T5601] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  446.310082][T24152] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4488'.
[  446.322637][T24152] netlink: 'syz.0.4488': attribute type 1 has an invalid length.
[  446.397106][T24156] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4489'.
[  446.397134][T24156] netlink: 43 bytes leftover after parsing attributes in process `syz.0.4489'.
[  446.397144][T24156] netlink: 'syz.0.4489': attribute type 5 has an invalid length.
[  446.397154][T24156] netlink: 43 bytes leftover after parsing attributes in process `syz.0.4489'.
[  446.546743][T24160] xt_hashlimit: size too large, truncated to 1048576
[  446.628142][T24172] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4493'.
[  446.628167][T24172] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4493'.
[  446.902023][ T1111] wlan0: Trigger new scan to find an IBSS to join
[  448.168702][T24260] tipc: Disabling bearer <udp:syz2>
[  448.576554][T24292] ieee802154 phy0 wpan0: encryption failed: -22
[  448.579948][T24290] gtp0: left promiscuous mode
[  449.687773][T24351] syzkaller0: entered promiscuous mode
[  449.687799][T24351] syzkaller0: entered allmulticast mode
[  450.123873][T24384] syzkaller0: entered promiscuous mode
[  450.123893][T24384] syzkaller0: entered allmulticast mode
[  450.176911][T24386] syzkaller1: entered promiscuous mode
[  450.176928][T24386] syzkaller1: entered allmulticast mode
[  450.262719][    C0] bridge0: port 1(bridge_slave_0) entered learning state
[  450.263537][    C0] bridge0: port 2(bridge_slave_1) entered learning state
[  450.423789][ T8237] net_ratelimit: 19 callbacks suppressed
[  450.423812][ T8237] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  450.521177][T24415] bridge0: port 2(bridge_slave_1) entered disabled state
[  450.898080][T24433] netlink: 'syz.1.4551': attribute type 1 has an invalid length.
[  450.906160][T23954] wlan1: Trigger new scan to find an IBSS to join
[  450.906236][T23954] wlan0: Trigger new scan to find an IBSS to join
[  450.912153][T24433] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  450.915704][T24433] syzkaller0: entered promiscuous mode
[  450.915719][T24433] syzkaller0: entered allmulticast mode
[  450.922901][T24433] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1500) !
[  450.957506][T24431] tipc: Resetting bearer <eth:syzkaller0>
[  450.965055][ T5663] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  450.965308][ T5663] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  450.990192][T24431] tipc: Disabling bearer <eth:syzkaller0>
[  451.058072][T24443] __nla_validate_parse: 17 callbacks suppressed
[  451.058085][T24443] netlink: 1728 bytes leftover after parsing attributes in process `syz.0.4553'.
[  451.239193][T24465] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4555'.
[  451.474176][ T8237] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  451.842647][T12597] wlan0: Creating new IBSS network, BSSID 86:d6:00:18:2c:f6
[  452.072566][ T5663] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  452.072787][ T5663] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  452.153986][T24486] netlink: 'syz.2.4564': attribute type 12 has an invalid length.
[  452.154006][T24486] netlink: 'syz.2.4564': attribute type 5 has an invalid length.
[  452.300569][T23954] wlan0: Selected IBSS BSSID c6:c7:5a:2f:78:37 based on configured SSID
[  452.300817][T24505] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4569'.
[  452.304439][ T1111] bridge0: port 2(bridge_slave_1) entered blocking state
[  452.304522][ T1111] bridge0: port 2(bridge_slave_1) entered forwarding state
[  452.344030][ T5601] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  452.403363][T24512] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4570'.
[  452.434138][T24520] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4571'.
[  452.443259][T24520] ipvlan2: entered allmulticast mode
[  452.443369][T24520] syz_tun: entered allmulticast mode
[  452.512658][ T8239] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  452.612737][T24522] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  453.185046][   T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  454.372679][T24531] syzkaller0: entered promiscuous mode
[  454.372701][T24531] syzkaller0: entered allmulticast mode
[  454.441016][T24551] netlink: 516 bytes leftover after parsing attributes in process `syz.1.4578'.
[  454.474501][T24546] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4576'.
[  454.519364][T24557] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4579'.
[  454.538500][   T13] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  454.538857][   T13] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  454.823295][T24563] netlink: 'syz.1.4580': attribute type 1 has an invalid length.
[  454.881549][T24568] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4581'.
[  455.009070][T24571] netlink: 284 bytes leftover after parsing attributes in process `syz.0.4582'.
[  455.300481][ T8976] wlan0: Selected IBSS BSSID c6:c7:5a:2f:78:37 based on configured SSID
[  455.541122][T24604] Bluetooth: hci0: invalid length 0, exp 2 for type 2
[  455.632267][ T1287] net_ratelimit: 14 callbacks suppressed
[  455.632285][ T1287] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  456.024153][T24639] syzkaller0: left promiscuous mode
[  456.493012][   T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  456.495059][   T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  456.663338][ T8239] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  457.602651][ T5663] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  457.602805][ T5663] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  457.702460][ T8239] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  457.863073][T10904] wlan1: Trigger new scan to find an IBSS to join
[  457.978420][T24751] __nla_validate_parse: 1 callbacks suppressed
[  457.978434][T24751] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4622'.
[  458.123679][T24763] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4626'.
[  458.214333][T24775] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  458.250251][T24779] netlink: 43 bytes leftover after parsing attributes in process `syz.0.4631'.
[  458.250267][T24779] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4631'.
[  458.250276][T24779] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4631'.
[  458.347790][T24789] syzkaller1: entered promiscuous mode
[  458.347804][T24789] syzkaller1: entered allmulticast mode
[  458.410818][T24794] x_tables: ip_tables: icmp match: only valid for protocol 1
[  458.422614][ T8236] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  458.473058][T24797] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4636'.
[  458.662013][    C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  458.732216][ T5663] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  458.902236][    C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  459.116793][T24844] Bluetooth: MGMT ver 1.23
[  459.494158][T24876] netlink: 64 bytes leftover after parsing attributes in process `syz.1.4651'.
[  459.494375][T24873] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4650'.
[  459.599697][T24884] syzkaller0: left promiscuous mode
[  459.601401][T24884] syzkaller0: left allmulticast mode
[  459.795710][ T8976] ..c: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  459.828670][T24914] netlink: 56 bytes leftover after parsing attributes in process `syz.1.4658'.
[  459.828688][T24914] netlink: 'syz.1.4658': attribute type 2 has an invalid length.
[  459.828695][T24914] netlink: 'syz.1.4658': attribute type 1 has an invalid length.
[  459.828700][T24914] netlink: 116 bytes leftover after parsing attributes in process `syz.1.4658'.
[  459.971276][T24924] Unsupported ieee802154 address type: 0
[  460.682939][ T8251] net_ratelimit: 11 callbacks suppressed
[  460.682985][ T8251] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  460.694291][T24994] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  460.695056][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  460.822147][ T8239] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  460.992406][ T5451] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  460.992721][ T5451] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  461.083708][T25029] pimreg: entered allmulticast mode
[  461.087537][T25021] pimreg: left allmulticast mode
[  461.259483][T25038] netlink: 'syz.2.4678': attribute type 1 has an invalid length.
[  461.462453][ T8251] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  461.462898][ T8251] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  461.863204][ T1287] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  461.870885][T25086] netlink: 'syz.1.4685': attribute type 1 has an invalid length.
[  461.920133][T25086] 8021q: adding VLAN 0 to HW filter on device bond15
[  461.957805][T25087] bond15: (slave gretap3): Enslaving as an active interface with an up link
[  462.106821][T25101] netlink: 'syz.1.4688': attribute type 12 has an invalid length.
[  462.123064][ T5663] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  462.379047][T25125] ip6tnl1: entered allmulticast mode
[  462.486165][T25136] netlink: 'syz.0.4693': attribute type 83 has an invalid length.
[  462.701223][T12608] wlan0: Selected IBSS BSSID c6:c7:5a:2f:78:37 based on configured SSID
[  462.806165][T25175] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  462.903642][ T8978] wlan1: Trigger new scan to find an IBSS to join
[  463.327848][T25211] netlink: 'syz.1.4710': attribute type 153 has an invalid length.
[  463.328049][T25210] netlink: 'syz.1.4710': attribute type 153 has an invalid length.
[  463.427035][T25224] __nla_validate_parse: 14 callbacks suppressed
[  463.427055][T25224] netlink: 76 bytes leftover after parsing attributes in process `syz.1.4712'.
[  463.674770][T25241] syzkaller1: tun_chr_ioctl cmd 1074025672
[  463.674792][T25241] syzkaller1: ignored: set checksum enabled
[  463.731260][T25246] syzkaller1: tun_chr_ioctl cmd 1074025673
[  463.731389][T25248] syzkaller1: tun_chr_ioctl cmd 1074025672
[  463.731399][T25248] syzkaller1: ignored: set checksum enabled
[  463.810869][T25254] trusted_key: syz.1.4719 sent an empty control message without MSG_MORE.
[  463.843581][T25256] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4720'.
[  466.342461][ T8239] net_ratelimit: 49 callbacks suppressed
[  466.342485][ T8239] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  466.562188][   T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  466.562376][   T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  466.901903][    C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  467.136309][    C1] TC_ACT_REPEAT abuse ?
[  467.383328][ T8239] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  467.404268][T25300] IPVS: set_ctl: invalid protocol: 12 172.30.0.3:20004
[  467.546015][ T5601] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  467.614626][T25329] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  467.642760][    C1] TC_ACT_REPEAT abuse ?
[  467.693277][   T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  467.693416][   T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  467.788713][T25339] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4738'.
[  468.023702][T25347] netlink: 'syz.2.4740': attribute type 1 has an invalid length.
[  468.023716][T25347] netlink: 244 bytes leftover after parsing attributes in process `syz.2.4740'.
[  468.181920][    C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  468.189494][   T54] block nbd0: Possible stuck request ffff88810a9a0000: control (read@0,1024B). Runtime 90 seconds
[  468.189515][   T54] block nbd0: Possible stuck request ffff88810a9a0200: control (read@1024,1024B). Runtime 90 seconds
[  468.189525][   T54] block nbd0: Possible stuck request ffff88810a9a0400: control (read@2048,1024B). Runtime 90 seconds
[  468.189535][   T54] block nbd0: Possible stuck request ffff88810a9a0600: control (read@3072,1024B). Runtime 90 seconds
[  468.303883][T25368] netlink: 80 bytes leftover after parsing attributes in process `syz.0.4744'.
[  468.374584][T25374] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4747'.
[  468.375867][T25374] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4747'.
[  468.377316][T25375] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4747'.
[  468.634695][T25395] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4753'.
[  468.636955][T25395] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4753'.
[  468.637600][T25395] netlink: 84 bytes leftover after parsing attributes in process `syz.0.4753'.
[  468.706127][T25405] syzkaller0: left allmulticast mode
[  468.825118][T12597] wlan1: Creating new IBSS network, BSSID 8e:ad:5a:42:78:7f
[  468.865948][T25430] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4761'.
[  469.099792][T25447] xt_l2tp: v2 tid > 0xffff: 4294901760
[  469.926574][ T1113] wlan0: Selected IBSS BSSID 86:d6:00:18:2c:f6 based on configured SSID
[  470.047682][T25507] syzkaller0: entered promiscuous mode
[  470.047703][T25507] syzkaller0: entered allmulticast mode
[  470.218855][T25515] bridge0: entered allmulticast mode
[  470.307729][T25519] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4780'.
[  470.598233][T25542] netlink: 64 bytes leftover after parsing attributes in process `syz.1.4787'.
[  470.699151][T25552] bridge0: port 2(bridge_slave_1) entered disabled state
[  470.699483][T25552] bridge0: port 1(bridge_slave_0) entered disabled state
[  470.705108][T25550] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4788'.
[  470.886731][T25572] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4794'.
[  471.425581][T25761] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4800'.
[  471.538714][T25784] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4801'.
[  471.552344][ T8237] net_ratelimit: 24 callbacks suppressed
[  471.552361][ T8237] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  472.174356][   T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  472.174569][   T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  472.185629][T25839] block nbd1: server does not support multiple connections per device.
[  472.198742][T25839] block nbd1: shutting down sockets
[  472.586674][ T8237] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  472.700284][ T1287] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  473.238195][T25857] openvswitch: netlink: Message has 8 unknown bytes.
[  473.238311][T25854] openvswitch: netlink: Message has 8 unknown bytes.
[  473.269301][T25869] netlink: zone id is out of range
[  473.269312][T25869] netlink: zone id is out of range
[  473.269315][T25869] netlink: zone id is out of range
[  473.867772][T25911] syzkaller0: entered promiscuous mode
[  473.867788][T25911] syzkaller0: entered allmulticast mode
[  474.396380][T25945] __nla_validate_parse: 6 callbacks suppressed
[  474.396399][T25945] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4830'.
[  474.396413][T25945] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4830'.
[  474.396425][T25945] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4830'.
[  474.396608][T25945] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4830'.
[  474.396621][T25945] netlink: 'syz.1.4830': attribute type 6 has an invalid length.
[  474.828534][T25916] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  474.975288][T25957] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4832'.
[  475.001587][T25959] syzkaller0: entered promiscuous mode
[  475.001603][T25959] syzkaller0: entered allmulticast mode
[  475.287576][T25994] Bluetooth: hci0: unsupported parameter 5135
[  475.287591][T25994] Bluetooth: hci0: unsupported parameter 8192
[  475.287596][T25994] Bluetooth: hci0: unsupported parameter 5135
[  475.287601][T25994] Bluetooth: hci0: unsupported parameter 8192
[  475.325983][T25998] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4844'.
[  475.523390][T26016] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4848'.
[  475.576901][T26025] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4852'.
[  475.635189][T26030] netlink: 'syz.1.4853': attribute type 10 has an invalid length.
[  475.635576][T26034] netlink: 'syz.0.4854': attribute type 1 has an invalid length.
[  475.637541][T26031] netlink: 'syz.1.4853': attribute type 10 has an invalid length.
[  475.645890][T26034] bond1: entered promiscuous mode
[  475.646097][T26034] 8021q: adding VLAN 0 to HW filter on device bond1
[  475.663847][T26037] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4855'.
[  475.665581][T26037] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4855'.
[  475.740986][T26050] bridge0: port 2(bridge_slave_1) entered blocking state
[  475.741040][T26050] bridge0: port 2(bridge_slave_1) entered forwarding state
[  475.741175][T26050] bridge0: port 1(bridge_slave_0) entered blocking state
[  475.741219][T26050] bridge0: port 1(bridge_slave_0) entered forwarding state
[  475.776330][T26050] syzkaller0: left promiscuous mode
[  475.779653][T26050] bond1: left promiscuous mode
[  475.933014][T12597] wlan0: Selected IBSS BSSID 86:d6:00:18:2c:f6 based on configured SSID
[  476.592320][ T5663] net_ratelimit: 34 callbacks suppressed
[  476.592333][ T5663] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  476.592514][ T5663] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  476.676454][ T8236] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  476.834229][ T8237] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  476.961308][T26172] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[  476.968829][    C0] TC_ACT_REPEAT abuse ?
[  477.023932][    C0] TC_ACT_REPEAT abuse ?
[  477.149650][T26191] A link change request failed with some changes committed already. Interface vxlan0 may have been left with an inconsistent configuration, please check.
[  477.175380][ T8236] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  477.175549][ T8236] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  477.201581][T26113] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  477.326894][T26198] syzkaller0: entered promiscuous mode
[  477.344245][T26198] netlink: 'syz.0.4877': attribute type 1 has an invalid length.
[  477.462334][ T8236] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  477.688514][T26226] ovs-s!: entered promiscuous mode
[  477.898466][T26253] netlink: 'syz.1.4895': attribute type 1 has an invalid length.
[  477.913806][T26253] 8021q: adding VLAN 0 to HW filter on device bond16
[  478.007505][T26272] syzkaller0: left promiscuous mode
[  478.007521][T26272] syzkaller0: left allmulticast mode
[  478.277826][T26297] Cannot find del_set index 17 as target
[  478.848178][T26307] netlink: 'syz.1.4905': attribute type 1 has an invalid length.
[  479.215148][T26314] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  479.245879][ T8978] wlan1: Selected IBSS BSSID 8e:ad:5a:42:78:7f based on configured SSID
[  479.477219][T26335] netlink: 'syz.0.4914': attribute type 1 has an invalid length.
[  479.716319][T26353] x_tables: duplicate underflow at hook 2
[  480.161091][T24963] wlan0: Selected IBSS BSSID 86:d6:00:18:2c:f6 based on configured SSID
[  480.344093][    C0] bridge0: port 2(bridge_slave_1) entered forwarding state
[  480.345703][    C0] bridge0: port 1(bridge_slave_0) entered forwarding state
[  480.359733][T26372] __nla_validate_parse: 46 callbacks suppressed
[  480.359750][T26372] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4924'.
[  480.488965][T26376] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4926'.
[  480.753547][T26404] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4933'.
[  480.786924][T26406] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4932'.
[  480.787143][T26406] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4932'.
[  480.788379][T26404] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4933'.
[  480.982206][    C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  481.703373][ T8237] net_ratelimit: 25 callbacks suppressed
[  481.703397][ T8237] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  482.001567][T26424] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  482.005990][ T8239] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  482.023640][ T8239] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  482.143429][T24116] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  482.143726][T24116] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  482.356454][T26495] sctp: [Deprecated]: syz.1.4950 (pid 26495) Use of struct sctp_assoc_value in delayed_ack socket option.
[  482.356454][T26495] Use struct sctp_sack_info instead
[  482.357432][T26495] openvswitch: netlink: Missing key (keys=50, expected=80)
[  482.463102][T26498] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4954'.
[  482.680809][T26515] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  482.682037][T26511] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  482.742223][ T8251] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  482.902022][    C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  483.074748][ T8239] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  483.088237][T26532] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4960'.
[  483.125310][T26532] netlink: 'syz.0.4960': attribute type 1 has an invalid length.
[  483.125329][T26532] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4960'.
[  485.554604][T26505] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  485.643960][T26548] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4965'.
[  485.839638][T26568] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4968'.
[  485.887870][T24963] wlan1: Selected IBSS BSSID 8e:ad:5a:42:78:7f based on configured SSID
[  486.102309][    C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  486.276787][T26629] netlink: 'syz.0.4978': attribute type 1 has an invalid length.
[  486.301038][T26629] bond3: entered promiscuous mode
[  486.301224][T26629] 8021q: adding VLAN 0 to HW filter on device bond3
[  486.311415][T26629] 8021q: adding VLAN 0 to HW filter on device bond3
[  486.311587][T26629] bond3: (slave xfrm1): The slave device specified does not support setting the MAC address
[  486.311597][T26629] bond3: (slave xfrm1): Setting fail_over_mac to active for active-backup mode
[  486.315027][T26629] bond3: (slave xfrm1): making interface the new active one
[  486.315039][T26629] xfrm1: entered promiscuous mode
[  486.319261][T26629] bond3: (slave xfrm1): Enslaving as an active interface with an up link
[  486.413335][T26642] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4982'.
[  486.674223][T26662] netlink: 56 bytes leftover after parsing attributes in process `syz.1.4986'.
[  486.954248][ T8251] net_ratelimit: 17 callbacks suppressed
[  486.954263][ T8251] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  487.009989][T26700] ipip5: entered promiscuous mode
[  487.222824][ T8237] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  487.567212][T26764] openvswitch: netlink: nsh attribute has 1 unknown bytes.
[  487.605291][T26764] openvswitch: netlink: nsh attribute has 1 unknown bytes.
[  487.702968][ T8251] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  487.723878][   T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  487.724851][   T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  487.864089][T26794] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5005'.
[  487.908046][T26799] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5007'.
[  487.908073][T26799] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5007'.
[  487.970950][T26806] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5009'.
[  488.277117][ T8239] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  488.476896][T26846] openvswitch: netlink: IPv4 tun info is not correct
[  488.777951][T26867] A link change request failed with some changes committed already. Interface vxlan0 may have been left with an inconsistent configuration, please check.
[  488.778286][T26869] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5025'.
[  489.016311][T26884] syzkaller0: entered promiscuous mode
[  489.016325][T26884] syzkaller0: entered allmulticast mode
[  489.240196][T24963] wlan0: Selected IBSS BSSID c6:c7:5a:2f:78:37 based on configured SSID
[  489.241585][T26894] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5033'.
[  489.317715][T26900] xt_bpf: check failed: parse error
[  489.317936][T26900] xt_bpf: check failed: parse error
[  489.318112][T26900] xt_bpf: check failed: parse error
[  489.318284][T26900] xt_bpf: check failed: parse error
[  489.318461][T26900] xt_bpf: check failed: parse error
[  489.318670][T26900] xt_bpf: check failed: parse error
[  489.318853][T26900] xt_bpf: check failed: parse error
[  489.319069][T26900] xt_bpf: check failed: parse error
[  489.320951][T26900] xt_bpf: check failed: parse error
[  489.321151][T26900] xt_bpf: check failed: parse error
[  489.480678][T26913] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[  489.559338][T26919] netlink: 'syz.0.5039': attribute type 10 has an invalid length.
[  489.559757][T26919] syz_tun: entered promiscuous mode
[  489.601572][T26919] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[  489.643936][T24116] bond0: (slave syz_tun): link status definitely up, 10000 Mbps full duplex
[  489.836796][T26946] bond18 (unregistering): Released all slaves
[  490.020949][T26954] syz.0.5045: vmalloc error: size 8589938688, exceeds total pages, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  490.021148][T26954] CPU: 0 UID: 0 PID: 26954 Comm: syz.0.5045 Not tainted syzkaller #0 PREEMPT(full) 
[  490.021166][T26954] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  490.021174][T26954] Call Trace:
[  490.021181][T26954]  <TASK>
[  490.021189][T26954]  dump_stack_lvl+0xe8/0x150
[  490.021217][T26954]  warn_alloc+0x24d/0x270
[  490.021234][T26954]  ? kasan_save_track+0x4f/0x80
[  490.021249][T26954]  ? kasan_save_track+0x3e/0x80
[  490.021270][T26954]  ? __pfx_warn_alloc+0x10/0x10
[  490.021284][T26954]  ? __x64_sys_setsockopt+0x13d/0x1b0
[  490.021303][T26954]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  490.021330][T26954]  __vmalloc_node_range_noprof+0x127/0x1540
[  490.021368][T26954]  ? rcu_is_watching+0x16/0xb0
[  490.021387][T26954]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  490.021405][T26954]  ? __kmalloc_cache_noprof+0x321/0x600
[  490.021418][T26954]  ? __kmalloc_cache_noprof+0x14d/0x600
[  490.021432][T26954]  ? xskq_create+0x56/0x220
[  490.021452][T26954]  xskq_create+0x148/0x220
[  490.021470][T26954]  ? xsk_init_queue+0x8a/0xe0
[  490.021515][T26954]  xsk_init_queue+0x8a/0xe0
[  490.021535][T26954]  xsk_setsockopt+0x52a/0x960
[  490.021553][T26954]  ? __pfx_xsk_setsockopt+0x10/0x10
[  490.021570][T26954]  ? __pfx_aa_sk_perm+0x10/0x10
[  490.021594][T26954]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  490.021609][T26954]  ? __pfx_xsk_setsockopt+0x10/0x10
[  490.021627][T26954]  do_sock_setsockopt+0x17c/0x1b0
[  490.021646][T26954]  __x64_sys_setsockopt+0x13d/0x1b0
[  490.021666][T26954]  do_syscall_64+0x166/0x520
[  490.021686][T26954]  ? trace_irq_disable+0x3b/0x140
[  490.021698][T26954]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  490.021714][T26954]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  490.021728][T26954] RIP: 0033:0x7f3e9c19e199
[  490.021763][T26954] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  490.021775][T26954] RSP: 002b:00007f3e9d02a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  490.021791][T26954] RAX: ffffffffffffffda RBX: 00007f3e9c425fa0 RCX: 00007f3e9c19e199
[  490.021801][T26954] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000009
[  490.021810][T26954] RBP: 00007f3e9c2350b8 R08: 0000000000000004 R09: 0000000000000000
[  490.021820][T26954] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[  490.021829][T26954] R13: 00007f3e9c426038 R14: 00007f3e9c425fa0 R15: 00007fff4f34e198
[  490.021850][T26954]  </TASK>
[  490.022760][T26954] Mem-Info:
[  490.022771][T26954] active_anon:5468 inactive_anon:0 isolated_anon:0
[  490.022771][T26954]  active_file:0 inactive_file:53865 isolated_file:0
[  490.022771][T26954]  unevictable:1000 dirty:49 writeback:0
[  490.022771][T26954]  slab_reclaimable:10856 slab_unreclaimable:90319
[  490.022771][T26954]  mapped:18562 shmem:1582 pagetables:1123
[  490.022771][T26954]  sec_pagetables:0 bounce:0
[  490.022771][T26954]  kernel_misc_reclaimable:0
[  490.022771][T26954]  free:1120263 free_pcp:15311 free_cma:0
[  490.022809][T26954] Node 0 active_anon:10448kB inactive_anon:0kB active_file:0kB inactive_file:155096kB unevictable:2000kB isolated(anon):0kB isolated(file):0kB mapped:35892kB dirty:24kB writeback:0kB shmem:3072kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:10424kB pagetables:2224kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  490.022850][T26954] Node 1 active_anon:11424kB inactive_anon:0kB active_file:0kB inactive_file:60364kB unevictable:2000kB isolated(anon):0kB isolated(file):0kB mapped:38356kB dirty:172kB writeback:0kB shmem:3256kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:4092kB pagetables:2268kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  490.022885][T26954] Node 0 DMA free:15360kB boost:0kB min:240kB low:300kB high:360kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  490.022921][T26954] lowmem_reserve[]: 0 1581 2111 2111 2111
[  490.022946][T26954] Node 0 DMA32 free:1459692kB boost:0kB min:24948kB low:31184kB high:37420kB reserved_highatomic:0kB free_highatomic:0kB active_anon:100kB inactive_anon:0kB active_file:0kB inactive_file:56712kB unevictable:0kB writepending:20kB zspages:0kB present:2080636kB managed:1619836kB mlocked:0kB bounce:0kB free_pcp:13824kB local_pcp:13760kB free_cma:0kB
[  490.022983][T26954] lowmem_reserve[]: 0 0 529 529 529
[  490.023006][T26954] Node 0 Normal free:12380kB boost:0kB min:8512kB low:10640kB high:12768kB reserved_highatomic:0kB free_highatomic:0kB active_anon:10380kB inactive_anon:0kB active_file:0kB inactive_file:98384kB unevictable:2000kB writepending:4kB zspages:0kB present:1572868kB managed:542444kB mlocked:0kB bounce:0kB free_pcp:1028kB local_pcp:740kB free_cma:0kB
[  490.023040][T26954] lowmem_reserve[]: 0 0 0 0 0
[  490.023063][T26954] Node 1 Normal free:2993620kB boost:0kB min:56408kB low:70508kB high:84608kB reserved_highatomic:0kB free_highatomic:0kB active_anon:11424kB inactive_anon:0kB active_file:0kB inactive_file:60364kB unevictable:2000kB writepending:172kB zspages:0kB present:3670012kB managed:3594688kB mlocked:0kB bounce:0kB free_pcp:46392kB local_pcp:33152kB free_cma:0kB
[  490.023100][T26954] lowmem_reserve[]: 0 0 0 0 0
[  490.023122][T26954] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  490.023198][T26954] Node 0 DMA32: 137*4kB (UME) 91*8kB (UME) 91*16kB (UME) 178*32kB (UME) 92*64kB (UME) 84*128kB (UME) 54*256kB (UME) 37*512kB (UME) 27*1024kB (UME) 11*2048kB (UME) 330*4096kB (UM) = 1459692kB
[  490.024824][T26954] Node 0 Normal: 334*4kB (UME) 128*8kB (UME) 63*16kB (UME) 110*32kB (UME) 42*64kB (UME) 16*128kB (UE) 1*256kB (U) 1*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 12392kB
[  490.024924][T26954] Node 1 Normal: 27*4kB (ME) 40*8kB (UME) 379*16kB (UME) 647*32kB (UME) 401*64kB (UME) 120*128kB (UME) 37*256kB (UME) 11*512kB (UM) 12*1024kB (UME) 3*2048kB (UM) 706*4096kB (UM) = 2993532kB
[  490.025027][T26954] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  490.025038][T26954] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  490.025047][T26954] 55447 total pagecache pages
[  490.025053][T26954] 0 pages in swap cache
[  490.025057][T26954] Free swap  = 124996kB
[  490.025061][T26954] Total swap = 124996kB
[  490.025068][T26954] 1834877 pages RAM
[  490.025072][T26954] 0 pages HighMem/MovableOnly
[  490.025076][T26954] 391795 pages reserved
[  490.025080][T26954] 0 pages cma reserved
[  490.812380][T26954] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0
[  490.822833][ T1113] ..c: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  491.226671][T27012] __nla_validate_parse: 7 callbacks suppressed
[  491.226683][T27012] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5056'.
[  491.683317][T27026] syzkaller0: entered promiscuous mode
[  491.683500][T27026] syzkaller0: entered allmulticast mode
[  492.204826][T24116] net_ratelimit: 17 callbacks suppressed
[  492.204841][T24116] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  492.204981][T24116] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  492.264168][T27065] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  492.265197][T27065] syzkaller0: entered promiscuous mode
[  492.265473][T27065] syzkaller0: entered allmulticast mode
[  492.266341][T27067] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5064'.
[  492.269436][T27065] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) !
[  492.388994][T27080] syzkaller0: mtu less than device minimum
[  492.425493][T27064] tipc: Resetting bearer <eth:syzkaller0>
[  492.461515][ T8239] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  492.473669][T27064] tipc: Disabling bearer <eth:syzkaller0>
[  492.827945][T27111] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  493.066468][T27123] syzkaller1: entered promiscuous mode
[  493.066488][T27123] syzkaller1: entered allmulticast mode
[  493.213756][T27134] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5074'.
[  493.216541][T27131] bond4: option all_slaves_active: invalid value (255)
[  493.218865][T27131] bond4 (unregistering): Released all slaves
[  493.322544][   T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  493.322789][   T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  493.462597][ T8239] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  493.470478][T27160] netlink: 'syz.1.5078': attribute type 219 has an invalid length.
[  493.629361][T27171] block nbd0: Unsupported socket: should be TCP or UNIX.
[  493.634788][T27171] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  493.656676][T27171] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  494.099979][T27194] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5081'.
[  494.319759][T27205] 8021q: adding VLAN 0 to HW filter on device bond2
[  494.421317][T27218] netlink: 'syz.0.5085': attribute type 1 has an invalid length.
[  494.443541][T27218] 8021q: adding VLAN 0 to HW filter on device bond4
[  494.774880][T27271] Cannot find del_set index 4 as target
[  494.844691][T27290] Cannot find del_set index 4 as target
[  494.908501][T24961] wlan1: Trigger new scan to find an IBSS to join
[  494.954092][T27296] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5096'.
[  495.449389][T27336] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5103'.
[  495.773589][T27366] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5109'.
[  495.895944][T27371] ip6tnl5: entered allmulticast mode
[  495.899445][T24116] ip6_tunnel: ip6tnl5 xmit: Local address not yet configured!
[  495.899625][T24116] ip6_tunnel: ip6tnl5 xmit: Local address not yet configured!
[  495.922316][    T9] ip6_tunnel: ip6tnl5 xmit: Local address not yet configured!
[  496.031459][T27391] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5114'.
[  496.115952][T27396] syzkaller0: entered promiscuous mode
[  496.115975][T27396] syzkaller0: entered allmulticast mode
[  496.179291][ T8251] ip6_tunnel: ip6tnl5 xmit: Local address not yet configured!
[  496.242801][T27410] ipt_ECN: cannot use operation on non-tcp rule
[  496.583823][ T8251] ip6_tunnel: ip6tnl5 xmit: Local address not yet configured!
[  496.689168][T27457] syz_tun: left promiscuous mode
[  496.705672][T27457] syzkaller0: left promiscuous mode
[  496.708695][T27457] bond3: left promiscuous mode
[  496.708707][T27457] xfrm1: left promiscuous mode
[  497.632576][ T8237] net_ratelimit: 73 callbacks suppressed
[  497.632598][ T8237] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  497.832281][   T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  497.832650][   T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  497.942427][    T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  498.263317][   T54] block nbd0: Possible stuck request ffff88810a9a0000: control (read@0,1024B). Runtime 120 seconds
[  498.263573][   T54] block nbd0: Possible stuck request ffff88810a9a0200: control (read@1024,1024B). Runtime 120 seconds
[  498.263592][   T54] block nbd0: Possible stuck request ffff88810a9a0400: control (read@2048,1024B). Runtime 120 seconds
[  498.263608][   T54] block nbd0: Possible stuck request ffff88810a9a0600: control (read@3072,1024B). Runtime 120 seconds
[  498.425265][ T5591] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  498.662704][ T8237] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  498.942450][   T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  498.942740][   T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  499.702596][ T8239] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  499.862226][T26594] wlan1: Trigger new scan to find an IBSS to join
[  499.942069][    C0] ip6_tunnel: ip6tnl5 xmit: Local address not yet configured!
[  500.052284][   T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  500.052567][   T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  502.812527][ T1113] wlan1: Creating new IBSS network, BSSID da:ea:1a:7f:01:6b
[  502.832618][ T1287] net_ratelimit: 7 callbacks suppressed
[  502.832641][ T1287] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  503.402374][   T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  503.402635][   T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  503.862584][ T8237] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  504.022726][ T8236] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  504.503643][   T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  504.503995][   T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  504.902646][ T8237] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  505.612264][T24116] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  505.612517][T24116] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  507.842354][   T12] net_ratelimit: 5 callbacks suppressed
[  507.842378][   T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  507.842618][   T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  508.022812][ T1287] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  508.502031][    C0] ip6_tunnel: ip6tnl5 xmit: Local address not yet configured!
[  508.942291][   T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  508.942493][   T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  509.062643][ T8237] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  510.042248][ T5663] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  510.042474][ T5663] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  510.102381][ T8236] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  510.102583][ T1287] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  510.269984][T27480] netlink: 176 bytes leftover after parsing attributes in process `syz.2.5126'.
[  510.294243][T27482] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5126'.
[  510.608393][T27499] ip6erspan0: entered promiscuous mode
[  510.630581][T27502] netlink: 48 bytes leftover after parsing attributes in process `syz.2.5133'.
[  511.048278][T27525] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.5140'.
[  511.457909][ T1113] wlan0: Selected IBSS BSSID c6:c7:5a:2f:78:37 based on configured SSID
[  511.668071][T27571] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5149'.
[  512.181468][T27611] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5158'.
[  512.750522][T27666] block nbd0: reconnected socket
[  512.758062][   T57] block nbd0: Receive control failed (result -32)
[  513.142201][ T8236] net_ratelimit: 10 callbacks suppressed
[  513.142212][ T8236] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  513.234437][ T8237] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  513.372292][ T5663] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  513.372539][ T5663] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  514.200018][T27730] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5186'.
[  514.201548][T27731] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5186'.
[  514.262013][    C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  514.264280][ T1287] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  514.492227][ T5451] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  514.492462][ T5451] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  514.682945][T27776] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5196'.
[  514.778783][T27789] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  514.863743][T27803] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5203'.
[  514.870009][T27797] syzkaller0: left promiscuous mode
[  514.915423][    C0] TC_ACT_REPEAT abuse ?
[  514.940512][T27805] lo: entered promiscuous mode
[  514.940956][T27805] tunl0: entered promiscuous mode
[  514.941309][T27805] gre0: entered promiscuous mode
[  514.941569][T27805] gretap0: entered promiscuous mode
[  514.952624][T27805] erspan0: entered promiscuous mode
[  514.952920][T27805] ip_vti0: entered promiscuous mode
[  514.953312][T27805] ip6_vti0: entered promiscuous mode
[  514.956053][T27805] sit0: entered promiscuous mode
[  514.956349][T27805] ip6tnl0: entered promiscuous mode
[  514.956600][T27805] ip6gre0: entered promiscuous mode
[  514.956854][T27805] syz_tun: entered promiscuous mode
[  514.957173][T27805] ip6gretap0: entered promiscuous mode
[  514.961682][T27805] bridge0: entered promiscuous mode
[  514.966911][T27805] bond0: entered promiscuous mode
[  514.967383][T27805] team0: entered promiscuous mode
[  514.967394][T27805] bond13: entered promiscuous mode
[  514.972612][T27805] nlmon0: entered promiscuous mode
[  514.972922][T27805] batadv0: entered promiscuous mode
[  514.973348][T27805] vxcan0: entered promiscuous mode
[  514.973651][T27805] vxcan1: entered promiscuous mode
[  514.978168][T27805] veth0: entered promiscuous mode
[  514.978531][T27805] veth1: entered promiscuous mode
[  514.978839][T27805] wg0: entered promiscuous mode
[  514.979743][T27805] wg1: entered promiscuous mode
[  514.981462][T27805] wg2: entered promiscuous mode
[  514.983529][T27805] veth0_to_bridge: entered promiscuous mode
[  514.984396][T27805] bridge_slave_0: entered promiscuous mode
[  514.988628][T27805] veth1_to_bridge: entered promiscuous mode
[  514.988803][T27805] bridge_slave_1: entered promiscuous mode
[  514.993944][T27805] veth0_to_bond: entered promiscuous mode
[  514.994288][T27805] bond_slave_0: entered promiscuous mode
[  514.995881][T27805] veth1_to_bond: entered promiscuous mode
[  514.996209][T27805] bond_slave_1: entered promiscuous mode
[  514.996508][T27805] veth0_to_team: entered promiscuous mode
[  515.004246][T27805] team_slave_0: entered promiscuous mode
[  515.007334][T27805] veth1_to_team: entered promiscuous mode
[  515.007657][T27805] team_slave_1: entered promiscuous mode
[  515.008045][T27805] veth0_to_batadv: entered promiscuous mode
[  515.011594][T27805] batadv_slave_0: entered promiscuous mode
[  515.015986][T27805] veth1_to_batadv: entered promiscuous mode
[  515.016330][T27805] batadv_slave_1: entered promiscuous mode
[  515.016632][T27805] veth0_to_hsr: entered promiscuous mode
[  515.027022][T27805] veth1_to_hsr: entered promiscuous mode
[  515.029623][T27805] hsr0: entered promiscuous mode
[  515.030132][T27805] veth1_virt_wifi: entered promiscuous mode
[  515.030456][T27805] veth0_virt_wifi: entered promiscuous mode
[  515.035678][T27805] : entered promiscuous mode
[  515.041456][T27805] vlan0: entered promiscuous mode
[  515.044454][T27805] vlan1: entered promiscuous mode
[  515.045240][T27805] macvlan0: entered promiscuous mode
[  515.048048][T27805] macvlan1: entered promiscuous mode
[  515.050212][T27805] ipvlan0: entered promiscuous mode
[  515.050571][T27805] ipvlan1: entered promiscuous mode
[  515.058666][T27805] geneve0: entered promiscuous mode
[  515.059007][T27805] geneve1: entered promiscuous mode
[  515.059572][T27805] mac80211_hwsim hwsim3 wlan0: entered promiscuous mode
[  515.059924][T27805] tun0: entered promiscuous mode
[  515.064852][T27805] gtp0: entered promiscuous mode
[  515.065225][T27805] bond1: entered promiscuous mode
[  515.065236][T27805] gretap1: entered promiscuous mode
[  515.066138][T27805] : entered promiscuous mode
[  515.072277][T27805] ipip0: entered promiscuous mode
[  515.072611][T27805] mac80211_hwsim hwsim8 wlan2: entered promiscuous mode
[  515.073013][T27805] bond2: entered promiscuous mode
[  515.073024][T27805] geneve2: entered promiscuous mode
[  515.073589][T27805] vlan2: entered promiscuous mode
[  515.079197][T27805] gre1: entered promiscuous mode
[  515.084214][    C0] TC_ACT_REPEAT abuse ?
[  515.088514][T27805] bond3: entered promiscuous mode
[  515.088527][T27805] geneve3: entered promiscuous mode
[  515.089466][T27805] bridge1: entered promiscuous mode
[  515.089797][T27805] bond4: entered promiscuous mode
[  515.089807][T27805] ip6gre1: entered promiscuous mode
[  515.098106][T27805] ip6gretap1: entered promiscuous mode
[  515.098409][T27805] bridge2: entered promiscuous mode
[  515.098735][T27805] bridge3: entered promiscuous mode
[  515.104884][ T8251] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  515.108193][T27805] bond5: entered promiscuous mode
[  515.108205][T27805] veth3: entered promiscuous mode
[  515.109185][T27805] veth2: entered promiscuous mode
[  515.114741][T27805] : entered promiscuous mode
[  515.115012][T27805] ipip1: entered promiscuous mode
[  515.119210][T27805] vxlan0: entered promiscuous mode
[  515.243644][T27824] netlink: 'syz.0.5207': attribute type 32 has an invalid length.
[  515.350043][T27835] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5209'.
[  515.590047][T27851] netlink: 48 bytes leftover after parsing attributes in process `syz.2.5214'.
[  515.816910][T27879] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5221'.
[  515.896498][T27881] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5219'.
[  516.255985][T27913] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5228'.
[  516.261327][T27913] lo: left promiscuous mode
[  516.270274][T27913] tunl0: left promiscuous mode
[  516.270708][T27913] gre0: left promiscuous mode
[  516.271132][T27913] gretap0: left promiscuous mode
[  516.271433][T27913] erspan0: left promiscuous mode
[  516.271697][T27913] ip_vti0: left promiscuous mode
[  516.282459][T27913] ip6_vti0: left promiscuous mode
[  516.282719][T27913] sit0: left promiscuous mode
[  516.283587][T27913] ip6tnl0: left promiscuous mode
[  516.283817][T27913] ip6gre0: left promiscuous mode
[  516.284042][T27913] syz_tun: left promiscuous mode
[  516.287260][T27913] ip6gretap0: left promiscuous mode
[  516.288037][T27913] bridge0: left promiscuous mode
[  516.288537][T27913] bond0: left promiscuous mode
[  516.288903][T27913] team0: left promiscuous mode
[  516.288914][T27913] bond13: left promiscuous mode
[  516.290850][T27913] nlmon0: left promiscuous mode
[  516.291150][T27913] batadv0: left promiscuous mode
[  516.291516][T27913] vxcan0: left promiscuous mode
[  516.298320][T27913] vxcan1: left promiscuous mode
[  516.298528][T27913] veth0: left promiscuous mode
[  516.298725][T27913] veth1: left promiscuous mode
[  516.298906][T27913] wg0: left promiscuous mode
[  516.299200][T27913] wg1: left promiscuous mode
[  516.299379][T27913] wg2: left promiscuous mode
[  516.299554][T27913] veth0_to_bridge: left promiscuous mode
[  516.301645][T27913] bridge_slave_0: left promiscuous mode
[  516.302774][T27913] veth1_to_bridge: left promiscuous mode
[  516.302896][T27913] bridge_slave_1: left promiscuous mode
[  516.305226][T27913] veth0_to_bond: left promiscuous mode
[  516.305588][T27913] bond_slave_0: left promiscuous mode
[  516.306434][T27913] veth1_to_bond: left promiscuous mode
[  516.306736][T27913] bond_slave_1: left promiscuous mode
[  516.307023][T27913] veth0_to_team: left promiscuous mode
[  516.309418][T27913] team_slave_0: left promiscuous mode
[  516.309718][T27913] veth1_to_team: left promiscuous mode
[  516.310519][T27913] team_slave_1: left promiscuous mode
[  516.316127][T27913] veth0_to_batadv: left promiscuous mode
[  516.316329][T27913] batadv_slave_0: left promiscuous mode
[  516.317549][T27913] veth1_to_batadv: left promiscuous mode
[  516.317845][T27913] batadv_slave_1: left promiscuous mode
[  516.318050][T27913] veth0_to_hsr: left promiscuous mode
[  516.318450][T27913] veth1_to_hsr: left promiscuous mode
[  516.318818][T27913] hsr0: left promiscuous mode
[  516.320353][T27913] veth1_virt_wifi: left promiscuous mode
[  516.320554][T27913] veth0_virt_wifi: left promiscuous mode
[  516.320923][T27913] : left promiscuous mode
[  516.323507][T27913] vlan0: left promiscuous mode
[  516.323921][T27913] vlan1: left promiscuous mode
[  516.324249][T27913] macvlan0: left promiscuous mode
[  516.324519][T27913] macvlan1: left promiscuous mode
[  516.324934][T27913] ipvlan0: left promiscuous mode
[  516.325212][T27913] ipvlan1: left promiscuous mode
[  516.325477][T27913] geneve0: left promiscuous mode
[  516.325715][T27913] geneve1: left promiscuous mode
[  516.326128][T27913] mac80211_hwsim hwsim3 wlan0: left promiscuous mode
[  516.326339][T27913] tun0: left promiscuous mode
[  516.326522][T27913] gtp0: left promiscuous mode
[  516.326761][T27913] bond1: left promiscuous mode
[  516.328504][T27913] gretap1: left promiscuous mode
[  516.328723][T27913] : left promiscuous mode
[  516.328897][T27913] ipip0: left promiscuous mode
[  516.329957][T27913] mac80211_hwsim hwsim8 wlan2: left promiscuous mode
[  516.330467][T27913] vlan2: left promiscuous mode
[  516.330475][T27913] bond2: left promiscuous mode
[  516.330927][T27913] geneve2: left promiscuous mode
[  516.331170][T27913] gre1: left promiscuous mode
[  516.331482][T27913] bond3: left promiscuous mode
[  516.333811][T27913] geneve3: left promiscuous mode
[  516.335002][T27913] bridge1: left promiscuous mode
[  516.335234][T27913] bond4: left promiscuous mode
[  516.335502][T27913] ip6gre1: left promiscuous mode
[  516.336417][T27913] ip6gretap1: left promiscuous mode
[  516.336592][T27913] bridge2: left promiscuous mode
[  516.336907][T27913] bridge3: left promiscuous mode
[  516.337409][T27913] bond5: left promiscuous mode
[  516.337762][T27913] veth2: left promiscuous mode
[  516.338037][T27913] veth3: left promiscuous mode
[  516.338259][T27913] : left promiscuous mode
[  516.338505][T27913] ipip1: left promiscuous mode
[  516.338879][T27913] vxlan0: left promiscuous mode
[  516.341710][T27917] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5230'.
[  516.364214][T27917] bond5: option lacp_active: invalid value (5)
[  516.365755][T27917] bond5 (unregistering): Released all slaves
[  516.619031][T26587] wlan0: Selected IBSS BSSID c6:c7:5a:2f:78:37 based on configured SSID
[  516.662396][ T5591] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  516.818446][T27945] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5237'.
[  517.070829][T27964] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5242'.
[  517.315090][T24963] wlan0: Selected IBSS BSSID c6:c7:5a:2f:78:37 based on configured SSID
[  517.317140][T24963] wlan0: Selected IBSS BSSID c6:c7:5a:2f:78:37 based on configured SSID
[  517.453341][T27995] IPv6: NLM_F_CREATE should be specified when creating new route
[  517.453431][T27995] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  517.453439][T27995] IPv6: NLM_F_CREATE should be set when creating new route
[  517.454801][T27996] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  517.667929][T28019] netlink: 'syz.2.5255': attribute type 4 has an invalid length.
[  517.679102][T28019] netlink: 'syz.2.5255': attribute type 4 has an invalid length.
[  517.774017][T28022] netlink: 'syz.0.5256': attribute type 1 has an invalid length.
[  517.774061][T28022] netlink: 'syz.0.5256': attribute type 4 has an invalid length.
[  517.774074][T28022] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.5256'.
[  517.809286][T28022] can: request_module (can-proto-4) failed.
[  517.865584][T28028] netlink: 'syz.0.5256': attribute type 2 has an invalid length.
[  517.865601][T28028] netlink: 'syz.0.5256': attribute type 1 has an invalid length.
[  518.149901][T28041] netlink: 88 bytes leftover after parsing attributes in process `syz.0.5259'.
[  518.422448][ T1287] net_ratelimit: 22 callbacks suppressed
[  518.422472][ T1287] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  519.222452][    T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  519.472776][ T1287] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  520.503346][ T8237] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  520.522327][T28001] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  520.637731][T28055] netlink: 'syz.1.5261': attribute type 2 has an invalid length.
[  520.896343][T28079] A link change request failed with some changes committed already. Interface vxlan0 may have been left with an inconsistent configuration, please check.
[  520.915198][    T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  521.192496][    T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  521.205901][T28093] __nla_validate_parse: 1 callbacks suppressed
[  521.205917][T28093] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5273'.
[  521.249352][T28093] A link change request failed with some changes committed already. Interface vxlan0 may have been left with an inconsistent configuration, please check.
[  521.279811][    T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  521.304209][    C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  521.542595][ T1287] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  521.616669][T28111] batadv0: entered promiscuous mode
[  521.616781][T28111] vlan4: entered promiscuous mode
[  521.750842][T24961] ..c: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  521.787361][T28126] netlink: 'syz.1.5280': attribute type 11 has an invalid length.
[  521.889483][T28135] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5283'.
[  522.176183][T28162] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5288'.
[  522.324932][T28176] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5291'.
[  522.332665][T28176] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5291'.
[  522.332680][T28176] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5291'.
[  522.333566][T28176] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5291'.
[  522.333576][T28176] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5291'.
[  522.346308][T28176] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5291'.
[  522.346329][T28176] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5291'.
[  522.425953][T28176] bridge0: port 2(bridge_slave_1) entered disabled state
[  522.427456][T28176] bridge0: port 1(bridge_slave_0) entered disabled state
[  522.488047][T28176] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  522.490883][T28176] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  522.583461][ T5601] page_pool_release_retry() stalled pool shutdown: id 180, 1 inflight 60 sec
[  522.664944][   T12] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  522.664996][   T12] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  522.665064][   T12] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  522.665080][   T12] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  522.665101][   T12] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  522.665115][   T12] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  522.665137][   T12] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  522.665152][   T12] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  522.763901][T28199] netlink: 'syz.1.5295': attribute type 4 has an invalid length.
[  522.840184][T28194] IPVS: Scheduler module ip_vs_sip not found
[  523.013803][T28216] netlink: 'syz.0.5301': attribute type 1 has an invalid length.
[  523.043595][T28216] gretap1: entered allmulticast mode
[  523.045767][T28216] bond5: (slave gretap1): making interface the new active one
[  523.046559][T28216] bond5: (slave gretap1): Enslaving as an active interface with an up link
[  523.047470][T28216] netlink: 'syz.0.5301': attribute type 1 has an invalid length.
[  523.059336][T28217] syzkaller0: entered promiscuous mode
[  523.059349][T28217] syzkaller0: entered allmulticast mode
[  523.436242][T28253] Unsupported ieee802154 address type: 0
[  523.632481][ T8237] net_ratelimit: 15 callbacks suppressed
[  523.632498][ T8237] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  523.708677][T28273] 8021q: adding VLAN 0 to HW filter on device bond0
[  523.709718][T28273] 8021q: adding VLAN 0 to HW filter on device team0
[  523.713573][T28273] 8021q: adding VLAN 0 to HW filter on device batadv0
[  523.738021][T28273] batman_adv: batadv0: Interface activated: batadv_slave_0
[  523.738996][T28273] batman_adv: batadv0: Interface activated: batadv_slave_1
[  523.740858][T28273] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  523.743066][T28273] veth1_vlan: left promiscuous mode
[  523.743513][T28273] veth0_vlan: left promiscuous mode
[  523.744217][T28273] veth0_vlan: entered promiscuous mode
[  523.745416][T28273] veth1_vlan: entered promiscuous mode
[  523.750376][T28273] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  523.750873][T28273] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  523.751330][T28273] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  523.752132][T28273] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  523.752681][T24963] wlan0: Selected IBSS BSSID c6:c7:5a:2f:78:37 based on configured SSID
[  523.785889][T28273] 8021q: adding VLAN 0 to HW filter on device bond1
[  523.786463][T28273] 8021q: adding VLAN 0 to HW filter on device bond2
[  523.789223][T28273] 8021q: adding VLAN 0 to HW filter on device bond3
[  523.819426][T28273] 8021q: adding VLAN 0 to HW filter on device bond4
[  523.827861][T28273] 8021q: adding VLAN 0 to HW filter on device bond5
[  523.834097][ T1113] bridge0: port 1(bridge_slave_0) entered blocking state
[  523.834142][ T1113] bridge0: port 1(bridge_slave_0) entered forwarding state
[  523.836109][ T1113] bridge0: port 2(bridge_slave_1) entered blocking state
[  523.836153][ T1113] bridge0: port 2(bridge_slave_1) entered forwarding state
[  523.892121][T24116] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  523.892546][T24116] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  523.892600][T24116] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  523.892617][T24116] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  523.892640][T24116] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  523.892654][T24116] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  523.892677][T24116] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  523.892692][T24116] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  524.138419][   T12] tipc: Subscription rejected, illegal request
[  524.209646][T28294] netlink: 'syz.1.5314': attribute type 12 has an invalid length.
[  524.367483][T28312] sit0: entered promiscuous mode
[  524.542670][T28326] netlink: 'syz.1.5324': attribute type 1 has an invalid length.
[  524.542683][T28326] netlink: 'syz.1.5324': attribute type 4 has an invalid length.
[  524.672721][ T8237] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  524.719993][T28341] netlink: ct_mark mask cannot be 0
[  524.720024][T28341] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  525.141969][    C0] ip6_tunnel: ip6tnl5 xmit: Local address not yet configured!
[  525.303792][ T5601] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  525.702837][ T1287] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  525.861955][T24961] ..c: Trigger new scan to find an IBSS to join
[  526.423524][    C1] TC_ACT_REPEAT abuse ?
[  526.476442][    C0] TC_ACT_REPEAT abuse ?
[  526.513650][    C1] TC_ACT_REPEAT abuse ?
[  526.549773][    C1] TC_ACT_REPEAT abuse ?
[  526.603160][T28417] syzkaller1: entered promiscuous mode
[  526.603173][T28417] syzkaller1: entered allmulticast mode
[  526.816582][T28426] __nla_validate_parse: 178 callbacks suppressed
[  526.816594][T28426] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5347'.
[  527.317965][T28446] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5351'.
[  527.739619][T28462] netlink: 'syz.0.5354': attribute type 4 has an invalid length.
[  527.739631][T28462] netlink: 'syz.0.5354': attribute type 3 has an invalid length.
[  527.740535][T28462] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5354'.
[  527.784424][T28462] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5354'.
[  527.788815][T28462] bridge0: port 2(bridge_slave_1) entered disabled state
[  528.343208][   T54] block nbd0: Possible stuck request ffff88810a9a0000: control (read@0,1024B). Runtime 150 seconds
[  528.343819][   T54] block nbd0: Possible stuck request ffff88810a9a0200: control (read@1024,1024B). Runtime 150 seconds
[  528.343860][   T54] block nbd0: Possible stuck request ffff88810a9a0400: control (read@2048,1024B). Runtime 150 seconds
[  528.346260][   T54] block nbd0: Possible stuck request ffff88810a9a0600: control (read@3072,1024B). Runtime 150 seconds
[  528.346591][   T54] block nbd0: Dead connection, failed to find a fallback
[  528.346605][   T54] block nbd0: shutting down sockets
[  528.346614][   T54] blk_print_req_error: 82 callbacks suppressed
[  528.346622][   T54] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  528.346640][   T54] buffer_io_error: 138 callbacks suppressed
[  528.346648][   T54] Buffer I/O error on dev nbd0, logical block 3, async page read
[  528.346690][   T54] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  528.346704][   T54] Buffer I/O error on dev nbd0, logical block 2, async page read
[  528.348215][   T54] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  528.348233][   T54] Buffer I/O error on dev nbd0, logical block 1, async page read
[  528.348247][   T54] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  528.348261][   T54] Buffer I/O error on dev nbd0, logical block 0, async page read
[  528.357903][   T54] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2
[  528.357924][   T54] Buffer I/O error on dev nbd0, logical block 0, async page read
[  528.357936][   T54] Buffer I/O error on dev nbd0, logical block 1, async page read
[  528.357945][   T54] Buffer I/O error on dev nbd0, logical block 2, async page read
[  528.357955][   T54] Buffer I/O error on dev nbd0, logical block 3, async page read
[  528.362114][   T98] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2
[  528.362207][   T98] Buffer I/O error on dev nbd0, logical block 0, async page read
[  528.362220][   T98] Buffer I/O error on dev nbd0, logical block 1, async page read
[  528.362403][   T98] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  528.362541][   T98] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 3 prio class 2
[  528.363315][   T98] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2
[  528.363840][   T98] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2
[  528.364262][T20758] ldm_validate_partition_table(): Disk read failed.
[  528.365422][T20758] Dev nbd0: unable to read RDB block 0
[  528.366947][T20758]  nbd0: unable to read partition table
[  528.378911][T20758] ldm_validate_partition_table(): Disk read failed.
[  528.379938][T20758] Dev nbd0: unable to read RDB block 0
[  528.383984][T20758]  nbd0: unable to read partition table
[  528.467905][T28476] netlink: 44 bytes leftover after parsing attributes in process `syz.2.5358'.
[  528.670003][    C0] net_ratelimit: 12 callbacks suppressed
[  528.670021][    C0] TC_ACT_REPEAT abuse ?
[  528.713220][T28486] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5361'.
[  528.713924][T28486] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5361'.
[  528.713996][T28486] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5361'.
[  528.714062][T28486] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5361'.
[  528.714245][T28486] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5361'.
[  528.833330][ T8237] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  528.841430][T28492] bond6: option active_slave: mode dependency failed, not supported in mode broadcast(3)
[  528.850546][T28492] bond6 (unregistering): Released all slaves
[  528.904796][ T1113] ..c: Trigger new scan to find an IBSS to join
[  529.264080][    C0] TC_ACT_REPEAT abuse ?
[  529.465350][T28521] x_tables: duplicate underflow at hook 1
[  529.864679][ T8239] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  530.871344][T28603] netdevsim netdevsim2: Firmware load for '..' refused, path contains '..' component
[  530.903437][ T8237] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  531.282303][    C0] TC_ACT_REPEAT abuse ?
[  531.384270][ T5601] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  531.862450][T24961] ..c: Trigger new scan to find an IBSS to join
[  531.952600][ T8237] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  532.193415][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  532.263169][    C0] TC_ACT_REPEAT abuse ?
[  532.333608][T28660] __nla_validate_parse: 72 callbacks suppressed
[  532.333629][T28660] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5400'.
[  532.333640][T28660] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5400'.
[  532.333661][T28660] netlink: 'syz.0.5400': attribute type 15 has an invalid length.
[  532.366746][T28660] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5400'.
[  532.366767][T28660] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5400'.
[  532.366788][T28660] netlink: 'syz.0.5400': attribute type 15 has an invalid length.
[  532.382160][ T5451] netdevsim netdevsim0 netdevsim3: set [0, 1] type 1 family 0 port 256 - 0
[  532.382261][ T5451] netdevsim netdevsim0 netdevsim2: set [0, 1] type 1 family 0 port 256 - 0
[  532.382279][ T5451] netdevsim netdevsim0 netdevsim1: set [0, 1] type 1 family 0 port 256 - 0
[  532.382293][ T5451] netdevsim netdevsim0 netdevsim0: set [0, 1] type 1 family 0 port 256 - 0
[  532.445479][ T5601] hid-generic 0005:046D:0A0E.0003: unknown main item tag 0x0
[  532.458774][ T5601] hid-generic 0005:046D:0A0E.0003: hidraw0: BLUETOOTH HID v0.09 Device [syz1] on aa:aa:aa:aa:aa:aa
[  532.758019][ T1113] ..c: Creating new IBSS network, BSSID fa:49:bc:8a:de:4a
[  534.023962][ T8239] net_ratelimit: 3 callbacks suppressed
[  534.023985][ T8239] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  534.363957][T28638] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  534.423490][    T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  534.458337][T28716] ip_tables: iptables: counters copy to user failed while replacing table
[  534.511230][T28726] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5413'.
[  534.546485][T28729] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5413'.
[  534.573883][T28726] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5413'.
[  534.575946][T28729] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5413'.
[  534.688476][T28743] RDS: rds_bind could not find a transport for ::ffff:172.20.20.57, load rds_tcp or rds_rdma?
[  534.736090][T28749] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5423'.
[  534.766016][T28751] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5422'.
[  534.935934][T28770] netlink: zone id is out of range
[  534.935984][T28770] netlink: zone id is out of range
[  534.936067][T28770] netlink: zone id is out of range
[  534.936099][T28770] netlink: zone id is out of range
[  534.936103][T28770] netlink: zone id is out of range
[  534.936107][T28770] netlink: zone id is out of range
[  534.936111][T28770] netlink: zone id is out of range
[  535.372936][T28823] netlink: 'syz.1.5435': attribute type 1 has an invalid length.
[  535.419616][T28823] bond18: (slave veth0_to_bond): making interface the new active one
[  535.420222][T28823] bond18: (slave veth0_to_bond): Enslaving as an active interface with an up link
[  535.674522][T28840] syzkaller1: entered promiscuous mode
[  535.674538][T28840] syzkaller1: entered allmulticast mode
[  535.927705][T28857] netlink: 'syz.2.5444': attribute type 1 has an invalid length.
[  535.927723][T28857] netlink: 'syz.2.5444': attribute type 2 has an invalid length.
[  535.927729][T28857] netlink: 'syz.2.5444': attribute type 3 has an invalid length.
[  535.928792][T28857] netlink: 'syz.2.5444': attribute type 1 has an invalid length.
[  535.975901][T28857] 8021q: adding VLAN 0 to HW filter on device bond9
[  536.263020][   T12] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  536.263108][   T12] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  536.263130][   T12] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  536.263150][   T12] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  536.287708][T28870] syzkaller0: left allmulticast mode
[  536.305845][T10990] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  536.306348][T10990] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  536.306442][T10990] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  536.306464][T10990] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  536.363804][T28886] tipc: Can't bind to reserved service type 0
[  536.994016][T28944] netlink: 'syz.2.5460': attribute type 30 has an invalid length.
[  537.017306][T28944] bond10: option arp_missed_max: invalid value (0)
[  537.017328][T28944] bond10: option arp_missed_max: allowed values 1 - 255
[  537.019765][T28944] bond10 (unregistering): Released all slaves
[  537.337243][T28971] pim6reg: entered allmulticast mode
[  537.338635][T28971] syzkaller1: entered promiscuous mode
[  537.338645][T28971] syzkaller1: entered allmulticast mode
[  537.340481][T28970] pim6reg: left allmulticast mode
[  537.566942][T28985] __nla_validate_parse: 7 callbacks suppressed
[  537.566953][T28985] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5468'.
[  537.639299][T28989] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5469'.
[  537.656529][T28989] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5469'.
[  537.979910][T29032] sit0: left promiscuous mode
[  538.166160][T29047] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5482'.
[  538.166609][T29045] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5482'.
[  538.577408][T29067] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5489'.
[  539.224468][ T8237] net_ratelimit: 159 callbacks suppressed
[  539.224491][ T8237] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  539.726015][T29125] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  539.728012][T29125] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5504'.
[  539.849630][T29135] tap0: tun_chr_ioctl cmd 1074025677
[  539.849752][T29135] tap0: linktype set to 805
[  540.024575][T29149] A link change request failed with some changes committed already. Interface vxlan0 may have been left with an inconsistent configuration, please check.
[  540.025412][T24962] bridge0: port 2(bridge_slave_1) entered blocking state
[  540.025500][T24962] bridge0: port 2(bridge_slave_1) entered forwarding state
[  540.264320][ T1287] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  540.367612][T29170] tipc: Invalid UDP bearer configuration
[  540.367637][T29170] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  540.504991][    T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  540.749711][T29184] syzkaller0: entered promiscuous mode
[  540.749736][T29184] syzkaller0: entered allmulticast mode
[  540.891546][T29195] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5518'.
[  541.224687][T29221] batman_adv: batadv0: Adding interface: syzkaller0
[  541.224705][T29221] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  541.224928][T29221] batman_adv: batadv0: Interface activated: syzkaller0
[  541.268842][T29222] netlink: 'syz.2.5522': attribute type 16 has an invalid length.
[  541.268866][T29222] netlink: 'syz.2.5522': attribute type 17 has an invalid length.
[  541.369752][T29222] bond_slave_0: left allmulticast mode
[  541.383053][    C1] TC_ACT_REPEAT abuse ?
[  541.460490][T29222] netdevsim netdevsim2 netdevsim0: left allmulticast mode
[  541.468786][T29222] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  541.490405][T29222] syzkaller0: left allmulticast mode
[  541.500771][ T1287] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  541.515634][T29222] ip6erspan0: left allmulticast mode
[  541.537577][T29222] ipip8: left allmulticast mode
[  541.547603][T29222] vlan3: left allmulticast mode
[  541.562698][ T5451] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  541.562802][ T5451] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  541.592244][ T5601] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  541.687340][ T5451] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  541.687527][ T5451] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  541.712266][    T9] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  541.936328][ T5601] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  541.982405][T29208] batman_adv: batadv0: Interface deactivated: syzkaller0
[  542.006592][ T5601] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  542.030056][T29208] batman_adv: batadv0: Removing interface: syzkaller0
[  542.042311][ T5601] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  542.153538][    C1] TC_ACT_REPEAT abuse ?
[  542.164340][T29253] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5529'.
[  542.208759][T29258] dvmrp0: entered allmulticast mode
[  542.209032][T29259] dvmrp0: left allmulticast mode
[  542.426735][T24116] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  542.503415][ T1287] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  542.947773][T29270] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5531'.
[  542.967232][T29256] Bluetooth: hci0: Opcode 0x0c20 failed: -4
[  543.008546][T29264] A link change request failed with some changes committed already. Interface vxlan0 may have been left with an inconsistent configuration, please check.
[  543.271097][T29293] netlink: 'syz.2.5537': attribute type 39 has an invalid length.
[  543.272561][T29295] IPVS: set_ctl: invalid protocol: 44 224.0.0.2:20000
[  543.357740][T29298] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5539'.
[  543.358005][T29302] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5539'.
[  543.745605][T29329] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5547'.
[  544.186878][T29354] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5554'.
[  544.204609][T29354] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5554'.
[  544.435737][T29368] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5557'.
[  544.489662][T29376] netlink: 'syz.2.5559': attribute type 15 has an invalid length.
[  544.522727][ T8251] net_ratelimit: 7 callbacks suppressed
[  544.522747][ T8251] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  544.595097][ T8237] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  544.781230][T29401] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5568'.
[  544.781245][T29401] netlink: 14 bytes leftover after parsing attributes in process `syz.1.5568'.
[  544.874485][T29413] netlink: 67 bytes leftover after parsing attributes in process `syz.1.5569'.
[  544.900981][T29413] A link change request failed with some changes committed already. Interface vxlan0 may have been left with an inconsistent configuration, please check.
[  544.924798][ T5601] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  545.252925][T29430] netlink: 'syz.1.5575': attribute type 7 has an invalid length.
[  545.331360][T29434] policy can only be matched on NF_INET_PRE_ROUTING
[  545.331370][T29434] unable to load match
[  545.391892][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  545.416679][T29438] A link change request failed with some changes committed already. Interface vxlan0 may have been left with an inconsistent configuration, please check.
[  545.450643][ T8237] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  545.623857][ T8239] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  545.813977][T29468] syzkaller0: entered promiscuous mode
[  545.813994][T29468] syzkaller0: entered allmulticast mode
[  545.822705][ T8237] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  546.421982][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  546.822293][    C0] ip6_tnl_xmit_ctl: 7 callbacks suppressed
[  546.822315][    C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  546.837353][T26587] wlan1: Trigger new scan to find an IBSS to join
[  546.903774][ T5606] Bluetooth: hci1: command 0x0405 tx timeout
[  547.196847][T29555] smbdirect: ib_dev[syz0] renamed to [s]
[  547.415258][T29583] syzkaller0: entered promiscuous mode
[  547.415280][T29583] syzkaller0: entered allmulticast mode
[  548.648699][T29686] xt_TPROXY: Can be used only with -p tcp or -p udp
[  548.809595][ T8237] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  548.809731][ T8237] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  548.814696][ T8237] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  548.859266][T29699] netlink: 'syz.0.5631': attribute type 2 has an invalid length.
[  548.867558][T29699] : entered promiscuous mode
[  548.901664][T29703] pimreg: left allmulticast mode
[  548.993480][ T8237] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  549.035427][T29712] __nla_validate_parse: 7 callbacks suppressed
[  549.035441][T29712] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5634'.
[  549.060299][T29710] netlink: 'syz.2.5633': attribute type 1 has an invalid length.
[  549.099299][T29710] 8021q: adding VLAN 0 to HW filter on device bond10
[  549.117001][T29710] bond10: (slave gretap2): Enslaving as an active interface with an up link
[  549.156456][ T8237] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  549.172606][ T8237] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  549.537646][ T8239] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  549.573443][ T8239] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  549.573639][ T8239] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  549.622302][ T5601] net_ratelimit: 7 callbacks suppressed
[  549.622332][ T5601] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  549.782318][ T8239] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  549.873412][T29712] Bluetooth: hci0: Opcode 0x0401 failed: -4
[  549.873577][T29713] Bluetooth: hci0: Opcode 0x0401 failed: -4
[  549.944348][    C1] TC_ACT_REPEAT abuse ?
[  550.257227][T29779] RDS: rds_bind could not find a transport for fe80::28, load rds_tcp or rds_rdma?
[  550.819533][T29833] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5649'.
[  550.826843][ T8237] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  551.151020][T29856] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5656'.
[  551.156429][T29856] netlink: 56 bytes leftover after parsing attributes in process `syz.2.5656'.
[  551.157535][T29856] netlink: 56 bytes leftover after parsing attributes in process `syz.2.5656'.
[  551.205100][T29858] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5657'.
[  551.275327][T29867] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5658'.
[  551.281103][T29863] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5659'.
[  551.285973][T29863] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5659'.
[  551.334226][T29872] openvswitch: netlink: Message has 4 unknown bytes.
[  551.489774][T29882] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input6
[  551.862345][ T1113] wlan1: Creating new IBSS network, BSSID da:d5:16:16:d8:8f
[  551.864430][ T1113] ------------[ cut here ]------------
[  551.864441][ T1113] !bss
[  551.864446][ T1113] WARNING: net/wireless/ibss.c:72 at cfg80211_ibss_joined+0x3a7/0x5b0, CPU#0: kworker/u9:8/1113
[  551.873173][ T1287] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  551.880199][ T1113] Modules linked in:
[  551.881449][ T1113] CPU: 0 UID: 0 PID: 1113 Comm: kworker/u9:8 Not tainted syzkaller #0 PREEMPT(full) 
[  551.884761][ T1113] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  551.888013][ T1113] Workqueue: events_unbound cfg80211_wiphy_work
[  551.889778][ T1113] RIP: 0010:cfg80211_ibss_joined+0x3a7/0x5b0
[  551.891639][ T1113] Code: 48 89 da 48 83 c4 18 5b 41 5c 41 5d 41 5e 41 5f 5d e9 1d 31 51 f6 e8 18 e8 8a f6 90 0f 0b 90 e9 0b fd ff ff e8 0a e8 8a f6 90 <0f> 0b 90 eb 5c 44 89 fe 83 e6 01 31 ff e8 f7 ec 8a f6 44 89 f8 83
[  551.897820][ T1113] RSP: 0018:ffffc90007407570 EFLAGS: 00010293
[  551.900178][ T1113] RAX: ffffffff8b3d0606 RBX: 0000000000000001 RCX: ffff88810ba80000
[  551.903463][ T1113] RDX: 0000000000000000 RSI: ffffffff8c6dad60 RDI: ffffffff8c6dad20
[  551.906435][ T1113] RBP: ffff888118c24a08 R08: ffffffff9079a17f R09: 1ffffffff20f342f
[  551.909168][ T1113] R10: dffffc0000000000 R11: fffffbfff20f3430 R12: ffff88810eef0ed0
[  551.911846][ T1113] R13: 0000000000000000 R14: 1ffff11021dde1da R15: 0000000000000cc0
[  551.914543][ T1113] FS:  0000000000000000(0000) GS:ffff88818d6da000(0000) knlGS:0000000000000000
[  551.917656][ T1113] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  551.919739][ T1113] CR2: 00007f1636ff9440 CR3: 00000001a720e000 CR4: 00000000000006f0
[  551.922420][ T1113] Call Trace:
[  551.923656][ T1113]  <TASK>
[  551.924871][ T1113]  __ieee80211_sta_join_ibss+0xdd8/0x1660
[  551.926730][ T1113]  ? __pfx___ieee80211_sta_join_ibss+0x10/0x10
[  551.928667][ T1113]  ? vprintk_emit+0x4ee/0x560
[  551.930141][ T1113]  ? lockdep_hardirqs_on+0x7b/0x110
[  551.931916][ T1113]  ? __pfx_vprintk_emit+0x10/0x10
[  551.933618][ T1113]  ? _printk+0xdd/0x130
[  551.935097][ T1113]  ? __pfx__printk+0x10/0x10
[  551.936803][ T1113]  ? rcu_is_watching+0x16/0xb0
[  551.938695][ T1113]  ieee80211_sta_create_ibss+0x300/0x480
[  551.940898][ T1113]  ? __pfx_ieee80211_sta_create_ibss+0x10/0x10
[  551.943901][ T1113]  ieee80211_ibss_work+0xb85/0x1060
[  551.946051][ T1113]  ? __pfx_ieee80211_ibss_work+0x10/0x10
[  551.948270][ T1113]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  551.950606][ T1113]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  551.953117][ T1113]  ? skb_dequeue+0x124/0x160
[  551.954960][ T1113]  ? ieee80211_iface_work+0xca2/0xfa0
[  551.957661][ T1113]  ? ieee80211_iface_work+0xef1/0xfa0
[  551.960216][ T1113]  cfg80211_wiphy_work+0x29e/0x420
[  551.962476][ T1113]  ? process_scheduled_works+0x97a/0x1630
[  551.964910][ T1113]  process_scheduled_works+0xc3d/0x1630
[  551.967194][ T1113]  ? __pfx_process_scheduled_works+0x10/0x10
[  551.969631][ T1113]  ? assign_work+0x3cf/0x5d0
[  551.971544][ T1113]  worker_thread+0xa47/0xfb0
[  551.973532][ T1113]  kthread+0x38b/0x480
[  551.975114][ T1113]  ? __pfx_worker_thread+0x10/0x10
[  551.977257][ T1113]  ? __pfx_kthread+0x10/0x10
[  551.979114][ T1113]  ret_from_fork+0x514/0xb70
[  551.980949][ T1113]  ? __pfx_ret_from_fork+0x10/0x10
[  551.983184][ T1113]  ? __switch_to+0xc89/0x1420
[  551.985199][ T1113]  ? __pfx_kthread+0x10/0x10
[  551.987074][ T1113]  ret_from_fork_asm+0x1a/0x30
[  551.988953][ T1113]  </TASK>
[  551.990097][ T1113] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  551.992685][ T1113] CPU: 0 UID: 0 PID: 1113 Comm: kworker/u9:8 Not tainted syzkaller #0 PREEMPT(full) 
[  551.996273][ T1113] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  552.000203][ T1113] Workqueue: events_unbound cfg80211_wiphy_work
[  552.002717][ T1113] Call Trace:
[  552.004096][ T1113]  <TASK>
[  552.005313][ T1113]  vpanic+0x56d/0xa60
[  552.006970][ T1113]  ? __pfx__printk+0x10/0x10
[  552.008876][ T1113]  ? __pfx_vpanic+0x10/0x10
[  552.010737][ T1113]  ? is_bpf_text_address+0x292/0x2b0
[  552.012847][ T1113]  ? is_bpf_text_address+0x26/0x2b0
[  552.014958][ T1113]  panic+0xc5/0xd0
[  552.016566][ T1113]  ? __pfx_panic+0x10/0x10
[  552.018379][ T1113]  ? ret_from_fork_asm+0x1a/0x30
[  552.020385][ T1113]  __warn+0x315/0x4c0
[  552.021939][ T1113]  ? cfg80211_ibss_joined+0x3a7/0x5b0
[  552.024098][ T1113]  ? cfg80211_ibss_joined+0x3a7/0x5b0
[  552.026273][ T1113]  __report_bug+0x276/0x570
[  552.028141][ T1113]  ? cfg80211_ibss_joined+0x3a7/0x5b0
[  552.030319][ T1113]  ? __pfx___report_bug+0x10/0x10
[  552.032405][ T1113]  ? cfg80211_ibss_joined+0x3a7/0x5b0
[  552.034541][ T1113]  report_bug+0x16b/0x220
[  552.036259][ T1113]  ? cfg80211_ibss_joined+0x3a7/0x5b0
[  552.038508][ T1113]  ? cfg80211_ibss_joined+0x3a9/0x5b0
[  552.040622][ T1113]  handle_bug+0x9c/0x200
[  552.042302][ T1113]  exc_invalid_op+0x1a/0x50
[  552.044082][ T1113]  asm_exc_invalid_op+0x1a/0x20
[  552.045983][ T1113] RIP: 0010:cfg80211_ibss_joined+0x3a7/0x5b0
[  552.048352][ T1113] Code: 48 89 da 48 83 c4 18 5b 41 5c 41 5d 41 5e 41 5f 5d e9 1d 31 51 f6 e8 18 e8 8a f6 90 0f 0b 90 e9 0b fd ff ff e8 0a e8 8a f6 90 <0f> 0b 90 eb 5c 44 89 fe 83 e6 01 31 ff e8 f7 ec 8a f6 44 89 f8 83
[  552.055964][ T1113] RSP: 0018:ffffc90007407570 EFLAGS: 00010293
[  552.058404][ T1113] RAX: ffffffff8b3d0606 RBX: 0000000000000001 RCX: ffff88810ba80000
[  552.061408][ T1113] RDX: 0000000000000000 RSI: ffffffff8c6dad60 RDI: ffffffff8c6dad20
[  552.064601][ T1113] RBP: ffff888118c24a08 R08: ffffffff9079a17f R09: 1ffffffff20f342f
[  552.067821][ T1113] R10: dffffc0000000000 R11: fffffbfff20f3430 R12: ffff88810eef0ed0
[  552.070996][ T1113] R13: 0000000000000000 R14: 1ffff11021dde1da R15: 0000000000000cc0
[  552.074232][ T1113]  ? cfg80211_ibss_joined+0x3a6/0x5b0
[  552.076456][ T1113]  __ieee80211_sta_join_ibss+0xdd8/0x1660
[  552.078797][ T1113]  ? __pfx___ieee80211_sta_join_ibss+0x10/0x10
[  552.081271][ T1113]  ? vprintk_emit+0x4ee/0x560
[  552.083178][ T1113]  ? lockdep_hardirqs_on+0x7b/0x110
[  552.085297][ T1113]  ? __pfx_vprintk_emit+0x10/0x10
[  552.087332][ T1113]  ? _printk+0xdd/0x130
[  552.089064][ T1113]  ? __pfx__printk+0x10/0x10
[  552.090930][ T1113]  ? rcu_is_watching+0x16/0xb0
[  552.092835][ T1113]  ieee80211_sta_create_ibss+0x300/0x480
[  552.095113][ T1113]  ? __pfx_ieee80211_sta_create_ibss+0x10/0x10
[  552.097521][ T1113]  ieee80211_ibss_work+0xb85/0x1060
[  552.099639][ T1113]  ? __pfx_ieee80211_ibss_work+0x10/0x10
[  552.101934][ T1113]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  552.104251][ T1113]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  552.106617][ T1113]  ? skb_dequeue+0x124/0x160
[  552.108587][ T1113]  ? ieee80211_iface_work+0xca2/0xfa0
[  552.110741][ T1113]  ? ieee80211_iface_work+0xef1/0xfa0
[  552.112898][ T1113]  cfg80211_wiphy_work+0x29e/0x420
[  552.114904][ T1113]  ? process_scheduled_works+0x97a/0x1630
[  552.117222][ T1113]  process_scheduled_works+0xc3d/0x1630
[  552.119483][ T1113]  ? __pfx_process_scheduled_works+0x10/0x10
[  552.121965][ T1113]  ? assign_work+0x3cf/0x5d0
[  552.123883][ T1113]  worker_thread+0xa47/0xfb0
[  552.125837][ T1113]  kthread+0x38b/0x480
[  552.127520][ T1113]  ? __pfx_worker_thread+0x10/0x10
[  552.129592][ T1113]  ? __pfx_kthread+0x10/0x10
[  552.131466][ T1113]  ret_from_fork+0x514/0xb70
[  552.133389][ T1113]  ? __pfx_ret_from_fork+0x10/0x10
[  552.135523][ T1113]  ? __switch_to+0xc89/0x1420
[  552.137444][ T1113]  ? __pfx_kthread+0x10/0x10
[  552.139159][ T1113]  ret_from_fork_asm+0x1a/0x30
[  552.140718][ T1113]  </TASK>
[  552.142475][ T1113] Kernel Offset: disabled
[  552.143948][ T1113] Rebooting in 86400 seconds..
