last executing test programs:

36.404306588s ago: executing program 3 (id=3006):
r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$sock_bt_hidp_HIDPCONNADD(r0, 0x400448c8, 0x0)
ioctl$sock_bt_hidp_HIDPCONNDEL(r0, 0x400448c9, &(0x7f0000000040)={@any, 0x3})
syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) (async)
ioctl$sock_bt_hidp_HIDPCONNADD(r0, 0x400448c8, 0x0) (async)
ioctl$sock_bt_hidp_HIDPCONNDEL(r0, 0x400448c9, &(0x7f0000000040)={@any, 0x3}) (async)

36.007374236s ago: executing program 3 (id=3008):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="500000000308010100000000000000000000000005000300ff0000000600024088ca00002c0004"], 0x50}}, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), r1)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000240)={'syztnl1\x00', &(0x7f00000001c0)={'syztnl1\x00', <r3=>0x0, 0x8, 0x20, 0x0, 0x8000, {{0x15, 0x4, 0x1, 0x33, 0x54, 0x66, 0x0, 0xb, 0x2f, 0x0, @loopback, @broadcast, {[@end, @timestamp={0x44, 0x8, 0x68, 0x0, 0x2, [0x80]}, @end, @ssrr={0x89, 0xb, 0x81, [@empty, @remote]}, @timestamp={0x44, 0x8, 0x1f, 0x0, 0x8, [0x3]}, @timestamp_addr={0x44, 0x1c, 0x1e, 0x1, 0x7, [{@multicast2, 0xfffffff8}, {@empty, 0x200}, {@loopback, 0x2}]}, @ra={0x94, 0x4, 0x1}]}}}}})
getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000280)=<r4=>0x0, &(0x7f00000002c0)=0x4)
sendmsg$ETHTOOL_MSG_CHANNELS_SET(r1, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x50, r2, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0x81}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x9}, @ETHTOOL_A_CHANNELS_HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x4}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0x8001}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x40)
sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="581400002d00010000000000ffdbdf25037c000008000180040004803c140280361402800c"], 0x1458}, 0x1, 0x0, 0x0, 0xc000}, 0xc010)
r5 = socket(0x10, 0x3, 0x0)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r5, 0x89f2, &(0x7f00000000c0)={'gre0\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x0, 0x7f81, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}}}}})

35.473116042s ago: executing program 3 (id=3012):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={0x40, 0x2, 0x6, 0x5, 0x0, 0x0, {0x7}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5}]}, 0x40}}, 0x0)
sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x38, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x10, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0xfffffffe}}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000050) (async)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x30, 0x41, 0x107, 0xfffffefe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x14, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}, @typed={0x8, 0x11, 0x0, 0x0, @uid}]}, @nested={0x4, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc000)

35.06503513s ago: executing program 3 (id=3015):
setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0)
r0 = syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff)
r1 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c)
syz_emit_ethernet(0x116, &(0x7f0000000340)={@remote, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x108, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0xf4, 0x0, @opaque="8c7c64fb5ad71d34f9967b554d0ec662b7d768dc67d4cfb7ded0780469ed58537f32b445156f7b0968418d1528ed42b826789e4f44bc3b8713137553f2d998cdd6829978ce6e522ae46586b6c1993877adf07f9efee1a1c1f986e462f892d9f444ec41b8b8995a864356adb3fc869bcdc9b212796118be6b3279df2620d582127af0f6ed63866d45077ad0d0fac96429a9662e2fe11656c64b630861d0e025ef9af1e508ccf08f7b153c36d2ac43f0451e9e4e1b0f9bacf6c8e52c67b49be0c231b8e383c7f09c5d154fafe2504b32ff812011e249da534f18f5b7310d92b04cccf5309b32b7d7f684daee26"}}}}}, 0x0)
syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000040), 0x52)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000600)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000005ec0), 0xffffffffffffffff)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000005f00)={'wlan0\x00', <r6=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f0000006000)={0x0, 0x0, &(0x7f0000005fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002dbd0600ffdbdb252100000008000300", @ANYRES32=r6, @ANYBLOB="0600eb00000800000400ec000a00060008021100000100000600f70000ff000008009e"], 0x44}}, 0x28000)
sendmsg$BATADV_CMD_SET_VLAN(r3, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x34, r0, 0x0, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x8}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x40d4}, 0x20000044)
recvmsg(r1, &(0x7f0000002700)={0x0, 0x0, 0x0}, 0x1)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x60ff78ce1cb3c070}, 0x94)
r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94)
getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f00000000c0)={0x0, 0x5}, &(0x7f0000000100)=0x8)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)

33.917381235s ago: executing program 3 (id=3022):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10) (async)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket(0x10, 0x803, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_route(0x10, 0x3, 0x0) (async)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0) (async)
socket$nl_route(0x10, 0x3, 0x0)
syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
socket$kcm(0xa, 0x2, 0x73)
socket$netlink(0x10, 0x3, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
socket$inet6_mptcp(0xa, 0x1, 0x106) (async)
socket$inet6_mptcp(0xa, 0x1, 0x106)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), r0) (async)
syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), r0)
connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e24, @loopback}, 0x10)
socket$igmp(0x2, 0x3, 0x2)
socket$packet(0x11, 0x2, 0x300)
socket$inet6(0xa, 0x3, 0x8000000003c) (async)
socket$inet6(0xa, 0x3, 0x8000000003c)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
openat$tcp_mem(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000001400000008000200fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r2], 0x5c}, 0x1, 0x0, 0x0, 0x40800}, 0x40090)

32.630301878s ago: executing program 3 (id=3029):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
shutdown(r0, 0x1) (async, rerun: 32)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) (async, rerun: 32)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x2, 0xc, 0x1400}, 0x48)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={r1, 0x68, &(0x7f0000000200)}, 0x10) (async)
bind$inet6(r0, &(0x7f0000000240)={0xa, 0x4e20, 0x9, @loopback, 0x5}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000000140)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x2, @empty, 0xfffffffe}, 0x1c, 0x0}}], 0x1, 0x20080058) (async)
recvmmsg(r0, &(0x7f0000001fc0)=[{{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}, 0x5}], 0x2, 0x40, 0x0) (async, rerun: 64)
r2 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64)
sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYRESOCT=r2, @ANYBLOB="9c2c00004400010029bd7000040000000300000004004880812c01", @ANYBLOB="03f8db540f92c8ea455361c7257ab7bc1b478d12da768435f6e6312c8a4781ee4cb01f0b6c44d2044ffabb096158c8bfc8fbf807051c4b4d2b4e3af73c1a80514ecfde613352a1f91bcc4a33317b0c65948083b8d04ee5278e75936e941af31c58eb70b37f8b8300935c7ff3bac702ba38c7b89a8c7607520bf6b8ce03100099930d5d126d7c99db93cabf5126318605290af64f1c1a93f9ea4e7e7c9e9063ccecb2b5a544fbd21c4be307e2c31004efd2a5707a6ac1be0a235cf9fda94732feb665ca170f7960a6e4edff8ce3e2144af11de721da2447a517b9fc2100c11b0401f6ce67", @ANYRES16=r2, @ANYRESOCT=0x0, @ANYBLOB="5615e0b28b6102a48c374ce854655fa2e6a4be2facef35ca488d3f3329f2ed989952139bfb2382aa63932b49abc44821e665cc689c22cf72a29376d8849faa84023e0ffa4d5d7916e61cdfef8e43ed9bf05b3fc310f4ed9695cf29bc4da2854bdb5054221fdddd3b3058c0860c1aac613ee6326d57b4f77165fecc5bd99a0a97d7655457bf61806aef6c52cf079ffa2bda8bd12715332d089b59174d2bcd0b07d0ed8a39b6c6d6fe01d803f844969362a9b6b09028ad723e", @ANYRES32=r2, @ANYRES8=r2], 0x2c9c}, 0x1, 0x0, 0x0, 0x200088d8}, 0x8051) (async, rerun: 32)
r3 = socket$inet6_udp(0xa, 0x2, 0x0) (rerun: 32)
bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e20, 0x2dc3, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x89bd}, 0x1c) (async)
r4 = socket(0x2, 0x80805, 0x0) (async)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
close(r5) (async)
setsockopt$EBT_SO_SET_ENTRIES(r4, 0x0, 0x80, 0xfffffffffffffffe, 0x78) (async)
getsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f0000000000), &(0x7f0000000080)=0x4)

3.449399548s ago: executing program 0 (id=3187):
r0 = socket$kcm(0x11, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'bond0\x00', <r1=>0x0})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000280)=@abs={0x1, 0x0, 0x4e21}, 0x6e)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001380)={0x10, 0x3, &(0x7f0000000080)=@framed, &(0x7f00000000c0)='GPL\x00', 0x3, 0x1000, &(0x7f0000000300)=""/4096}, 0x80)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001800)={@cgroup, r3, 0x7}, 0x14)
setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000600), 0x56)
sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000000580)=@xdp={0x2c, 0x8, r1, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600006fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0x26}], 0x1}, 0x0)

3.189008745s ago: executing program 0 (id=3189):
bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) (async)
r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
close(r0)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00')
r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa)
openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) (async)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x68, 0x0, 0x0)
r3 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r2, &(0x7f00000003c0)={@val={0xa, 0x806}, @void, @eth={@random="000000000400", @dev={'\xaa\xaa\xaa\xaa\xaa', 0x29}, @void, {@ipv6={0x86dd, @udp={0xd, 0x6, '\x00 \b', 0x10, 0x11, 0xff, @rand_addr=' \x01\x00', @private1, {[], {0x4f19, 0x4e20, 0x10, 0x0, @gue={{0x2, 0x0, 0x2, 0x8, 0x100, @val=0xd7a919ca9eb57b16}}}}}}}}}, 0x4a) (async)
write$tun(r2, &(0x7f00000003c0)={@val={0xa, 0x806}, @void, @eth={@random="000000000400", @dev={'\xaa\xaa\xaa\xaa\xaa', 0x29}, @void, {@ipv6={0x86dd, @udp={0xd, 0x6, '\x00 \b', 0x10, 0x11, 0xff, @rand_addr=' \x01\x00', @private1, {[], {0x4f19, 0x4e20, 0x10, 0x0, @gue={{0x2, 0x0, 0x2, 0x8, 0x100, @val=0xd7a919ca9eb57b16}}}}}}}}}, 0x4a)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x0, &(0x7f0000000000)=@framed={{0x62, 0xa, 0x0, 0xffc4, 0x1, 0x71, 0x10, 0x28}}, &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)

2.789266522s ago: executing program 4 (id=3191):
r0 = accept$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000040))
ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020662a, &(0x7f0000000080)={0x4, 0x8, 0x3, 0x9, 0x4, 0x0, [{0x18, 0xbc5a, 0x1, '\x00', 0x2b80}, {0x7, 0xffffffffffffffff, 0x1ff, '\x00', 0x1}, {0x7, 0x1, 0x6}, {0xffff, 0x8000104c9b1c, 0x4, '\x00', 0x208}]}) (async)
mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x1000001, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) (async, rerun: 32)
r1 = socket$l2tp6(0xa, 0x2, 0x73) (rerun: 32)
connect$l2tp6(r1, &(0x7f0000000000)={0xa, 0x0, 0x2, @dev={0xfe, 0x80, '\x00', 0x2f}, 0xd964, 0x2}, 0x20)

2.788753877s ago: executing program 1 (id=3192):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x8, &(0x7f0000000000)={&(0x7f0000000200)={{0x14, 0x10, 0xc00e}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x4000000, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWSETELEM={0x78, 0xc, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4c, 0x3, 0x0, 0x1, [{0x48, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0xb}, @NFTA_SET_ELEM_EXPRESSIONS={0x3c, 0xb, 0x0, 0x1, [{0x20, 0x7, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8}]}}}, {0xc, 0x1, 0x0, 0x1, @connlimit={{0x4, 0x2}, @val={0x4}}}]}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0xfc}}, 0x0)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xcc}, 0x8)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
sendmmsg$inet6(r1, &(0x7f00000003c0)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x4, @loopback, 0x280020}, 0x1c, &(0x7f00000000c0)=[{&(0x7f0000000400)="13", 0x1}], 0x1}}], 0x1, 0x20008050)
setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000140)=ANY=[], 0x10)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETSET(r2, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f00000001c0)={0x14, 0xa, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x24008800}, 0x4000004)

2.709621639s ago: executing program 2 (id=3193):
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETRULE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x7, 0xa, 0x101, 0x0, 0x0, {}, [@NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x10002000}, 0x800)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
syz_emit_ethernet(0x4a, &(0x7f00000001c0)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaabb080045000038fffd3d0000069078ac1e0101ac1414aa4e224001", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="a002000090780001221179c4fd826e79ceae3697e1c46f1327000000", @ANYRESHEX=r2, @ANYRES64=r2], 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffff}, {}, {0x8, 0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x4004000}, 0x0)
r3 = socket(0x2000000000000021, 0x2, 0x10000000000002)
connect$rxrpc(r3, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x400}}, 0x24)
sendmmsg(r3, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[{0x18, 0x110, 0x1, '$'}], 0x18, 0xe000}, 0x5}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[], 0x18, 0x500}}], 0x2, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000001000010700000000000000000a0000090600010015"], 0x1c}}, 0x0)
sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="48000000100001060100000000000000000000000000000000000000000000001000030073797a6b616c6c65723000001800128008000100767266000c0002"], 0x48}, 0x1, 0x0, 0x0, 0x4000052}, 0x0)

2.548560784s ago: executing program 0 (id=3194):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newqdisc={0x30, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_MATCH_INFO={0x14, 0x3, "f4f03b0200000000030007116b61979e"}, @NFTA_MATCH_NAME={0x9, 0x1, 'l2tp\x00'}, @NFTA_MATCH_REV={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x94}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=@newtfilter={0x34, 0x2c, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x1}, {0xfff1, 0xffff}, {0x3, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r4=>0x0})
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000003900000008000300", @ANYRES32=r4, @ANYBLOB="1c005a80180001801400030024000700080001000800050002dd0f"], 0x38}}, 0x0)
socketpair(0x2a, 0x5, 0xbb, &(0x7f0000000040)={<r5=>0xffffffffffffffff})
setsockopt$inet6_int(r5, 0x29, 0x13, &(0x7f0000000080)=0x8, 0x4)
r6 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r6, &(0x7f0000000640)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f00000002c0)="3c75fd4dc586f2ae9206277f0443ec773ee63a8c6df14fe0183749000000000000", 0x21)
sendmsg$nl_route_sched(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000800)=@deltfilter={0x24, 0x2d, 0x5, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {}, {0xfff1, 0xffff}, {0x1, 0x1}}}, 0x24}}, 0x0)

2.264256437s ago: executing program 1 (id=3195):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$packet(0x11, 0x2, 0x300)
r2 = socket$netlink(0x10, 0x3, 0x10)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
r3 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r3, &(0x7f00000000c0), 0x10)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={<r5=>0xffffffffffffffff})
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000000200), r6)
sendmsg$NBD_CMD_CONNECT(r6, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000006c0)={0x48, r7, 0x1, 0x70bd2c, 0x1000, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x2}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r5}}, {0x18, 0x1, 0x0, 0x1, {0x8, 0x1, r5}}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x128}]}, 0x48}}, 0x4)
r8 = accept4$inet(r5, &(0x7f0000000380)={0x2, 0x0, @loopback}, &(0x7f00000007c0)=0x10, 0x800)
setsockopt$IPT_SO_SET_REPLACE(r8, 0x0, 0x40, &(0x7f0000000500)=@raw={'raw\x00', 0x9, 0x3, 0x1e8, 0xb8, 0xffffffff, 0xffffffff, 0xb8, 0xffffffff, 0x150, 0xffffffff, 0xffffffff, 0x150, 0xffffffff, 0x3, &(0x7f00000004c0), {[{{@uncond, 0x0, 0x98, 0xb8, 0x0, {}, [@common=@inet=@socket1={{0x28}, 0x1}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x6, 0x24ee}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x248)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000100)={'batadv0\x00', <r9=>0x0})
r10 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)={0x1c, r10, 0x303, 0x70bd28, 0x0, {0xa}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r9}]}, 0x1c}}, 0x0)
sendmsg$BATADV_CMD_GET_DAT_CACHE(r2, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x48, r10, 0x400, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @remote}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x80000000}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xda}, @BATADV_ATTR_GW_MODE={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x880)
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYRES16=r3], 0x448}}, 0x0)
sendmsg$can_bcm(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="050000000808"], 0x80}}, 0x0)
r11 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f00000000c0)={'hsr0\x00', <r12=>0x0})
setsockopt$packet_int(r11, 0x107, 0xf, &(0x7f0000000140)=0x8, 0x4)
sendto$packet(r11, 0x0, 0x0, 0x0, &(0x7f0000000a80)={0x11, 0x88a8, r12, 0x1, 0x0, 0x6, @multicast}, 0x14)
sendmmsg$inet(r3, &(0x7f0000000180), 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000001c0)={'batadv0\x00', <r13=>0x0})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000080)=@framed={{0x72, 0xa, 0x0, 0xffc4, 0x1, 0x71, 0x10, 0x23}}, &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4d}, 0x94)
sendto$packet(r1, &(0x7f0000000000)="05000806", 0x5e0, 0x0, &(0x7f0000000080)={0x11, 0x8100, r13}, 0x14)

2.26363529s ago: executing program 2 (id=3196):
r0 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000000000)=@newtaction={0x60, 0x30, 0x53b, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_simple={0x48, 0x1, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x9f}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x4060040}, 0x0)
r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb4, 0x7f}, 0x48)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$OSF_MSG_ADD(r2, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001100)={&(0x7f00000002c0)={0x268, 0x0, 0x5, 0x401, 0x0, 0x0, {0x2, 0x0, 0x6}, [{{0x254, 0x1, {{0x28, 0x7}, 0x9, 0x9, 0x1, 0x7f, 0xd, 'syz1\x00', "6ecf9c9aaddd506228feca205ecc962aa12474f0f7b3253fdca1badf82c403c0", "045b8488ce9dca338fe33ae3c4aacdc6472390cd0ef665613adbd250dfbdc17e", [{0x187, 0xffff, {0x3, 0xfffffffe}}, {0x2, 0x3000, {0x2, 0x5}}, {0x81, 0x6, {0x2, 0x10001}}, {0x81, 0x2, {0x3, 0x3}}, {0xb, 0x9, {0x1, 0xcab}}, {0x9, 0x0, {0x2, 0x2}}, {0x5, 0x8, {0x3, 0x9}}, {0xfffe, 0xdff, {0x2, 0x7}}, {0x8, 0x3, {0x3, 0x4a5f76b2}}, {0x5, 0x7, {0x0, 0xfffff001}}, {0x5, 0x1, {0x1, 0x9}}, {0x2, 0xc, {0x2, 0x1}}, {0x8, 0x5, {0x0, 0xffffff0f}}, {0x1, 0x9, {0x1, 0x9}}, {0x401, 0x7, {0x0, 0x2}}, {0x8, 0x7fff, {0x1, 0x7ff}}, {0x0, 0x6, {0x1, 0x20000}}, {0x5c5d, 0x10, {0x0, 0x5}}, {0x6, 0x8, {0x0, 0x80000001}}, {0x5bcf, 0x9, {0x0, 0x1}}, {0x2, 0x101, {0x3, 0x6}}, {0x7, 0x2, {0x1, 0x7}}, {0x2, 0x58ad, {0x2, 0x4}}, {0x3ba, 0x4, {0x2, 0x4000000}}, {0x800, 0x5, {0x0, 0x6}}, {0x5, 0x1, {0x0, 0x6}}, {0x8, 0xb, {0x3, 0x3}}, {0x211, 0x2, {0x3, 0x73b0000}}, {0x4, 0x0, {0x2, 0x1}}, {0xb, 0x5, {0x3, 0x7}}, {0x8, 0x4, {0x3, 0x4}}, {0x400, 0x80, {0x1, 0x8}}, {0x6, 0xb, {0x2, 0x40}}, {0x66, 0x0, {0x2}}, {0x5, 0x5, {0x1, 0xffffffff}}, {0x8, 0x3, {0x2, 0x2}}, {0xfc0b, 0xe, {0x1, 0x1f}}, {0x79eb, 0x671b, {0x1, 0x100}}, {0x7f42, 0x2, {0x0, 0x3}}, {0x0, 0x17, {0x2, 0x401}}]}}}]}, 0x268}, 0x1, 0x0, 0x0, 0x4000000}, 0x8040)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r3)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xac}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "12ad"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f00000003c0)={&(0x7f0000000240)="97", 0x0, 0x0, 0x0, 0x8, r1}, 0x38)
r5 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r6, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4c840)
sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001a80)=@newtfilter={0x58, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x2, 0xfff3}, {0x0, 0xfff3}, {0xb, 0x10}}, [@filter_kind_options=@f_flower={{0xb}, {0x28, 0x2, [@TCA_FLOWER_KEY_ENC_IP_TTL_MASK={0x5, 0x53, 0x4c}, @TCA_FLOWER_KEY_ENC_IPV6_DST={0x14, 0x21, @remote}, @TCA_FLOWER_KEY_ENC_IP_TTL={0x5, 0x52, 0x1}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20041090}, 0x0)

2.20149561s ago: executing program 0 (id=3197):
r0 = socket$nl_route(0x10, 0x3, 0x0)
socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={<r1=>0xffffffffffffffff})
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="48000000100001060100000000000000000000000000000000000000000000001000030073797a6b616c6c65723000001800128008000100767266000c00028008000100e8030000"], 0x48}}, 0x0)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'syzkaller0\x00', <r4=>0x0})
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'veth0\x00', <r5=>0x0})
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=ANY=[@ANYBLOB="28000000130001000200"/20, @ANYRES32=r5, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r4], 0x28}}, 0x0)
sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000700)=ANY=[@ANYBLOB="20000000130001000300"/20, @ANYRES32=r4, @ANYBLOB="0100000001000000"], 0x20}}, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@getlink={0x28, 0x12, 0x20, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, 0x10820, 0x400}, [@IFLA_MTU={0x8, 0x4, 0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0xecaea6bc88bf4c19}, 0x44)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14)
sendmsg$nl_route_sched(r0, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000d40)=@newtaction={0xb8, 0x30, 0x30b, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0xa4, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x2}, 0x2, r6}}]}, {0x4, 0xa}, {0xc}, {0xc}}}, @m_mirred={0x50, 0x2, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x84, 0x8, 0xfffffffa, 0xffffffff}, 0x1, r6}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0xb8}}, 0x0)

1.806884289s ago: executing program 4 (id=3198):
r0 = socket(0x40000000015, 0x5, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10)
bind$inet(r0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10)
sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000003c0)="fe", 0x1}, {&(0x7f0000000000)="89d3c05e2f60dd8c0682db12", 0xc}, {&(0x7f0000001940)="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", 0xfec}], 0x3}, 0x0)

1.548832118s ago: executing program 1 (id=3199):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000040)={'team0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r2, {0xf, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x5, "bc59aace13347d868a0ffae44dd3f177"}}}]}, 0x48}}, 0x20000000)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r5=>0x0})
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r7 = openat$cgroup_ro(r6, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
pread64(r7, 0x0, 0x0, 0xcd32)
sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={0x30, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_IE={0x8, 0x2a, [@ibss={0x6, 0x2, 0x1000}]}]}, 0x30}}, 0x0)
sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x810}, 0x20004000)
socket(0x29, 0x80805, 0x0)
getsockopt$bt_hci(r0, 0x119, 0x2, 0x0, 0x0)
socket$inet_smc(0x2b, 0x1, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
socket$igmp6(0xa, 0x3, 0x2)
sendmsg$can_j1939(0xffffffffffffffff, 0x0, 0x10)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x4004)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0)
close(r8)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$SIOCSIFHWADDR(r8, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="0100008d8dff"})

1.411217265s ago: executing program 4 (id=3200):
socket$nl_generic(0x10, 0x3, 0x10) (async)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = socket(0x400000000010, 0x3, 0x0)
socket$unix(0x1, 0x1, 0x0) (async)
r3 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x8}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x4)
sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=@newtfilter={0x48, 0x2c, 0xd27, 0x70bd25, 0xa000, {0x0, 0x0, 0x0, r4, {0xe, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x806}, @TCA_FLOWER_KEY_ARP_SHA={0xa, 0x3f, @broadcast}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3800000041000701fefffffffeffffff017c0000040042800c00018006000600800a000014000280100014800c00", @ANYRES8=r0], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000)

1.368560186s ago: executing program 0 (id=3201):
syz_emit_ethernet(0x97, &(0x7f00000001c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @empty, @val={@val={0x88a8, 0x6}, {0x8100, 0x1, 0x0, 0x4}}, {@x25={0x805, {0x0, 0x5, 0x1f, "25e5b8b211e69926ca00e4b0cad7035f3a4a76fedeae8de8c162c4da2e8f8a08596f367bb9d916327d7125b1fe15d5ba205d7e9f55cf253260bfe9113e26878cd521159f63c5f9c52b1ad87fd1a53a6d3a75cfda407413f34b1e9e1122ee341bee82b29990227c127b94b40f0e2d7897c48354404c6735de35ff07f8a64e"}}}}, &(0x7f0000000280)={0x0, 0x1, [0x5cf, 0x980, 0x110, 0x9aa]})
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f00000003c0)={"eabb11ff2b9976618466e6256698a350", 0x0, 0x0, {0x5}})
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000005600010000000000000000000700c6c9", @ANYRES32=0x0, @ANYBLOB="200001"], 0x38}}, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r2 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000040)={@val={0x2000}, @void, @eth={@broadcast, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x4, 0x49, 0xfffe, 0x0, 0x0, 0x29, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, {0x4e21, 0x0, 0x35, 0x0, @gue={{0x2, 0x0, 0x0, 0x0, 0x0, @val=0xe0000001}, "eda4fbd800e00600d6c979033cb81e823cdc6000000000d21ccaeb89a1e0a90c4b38eb1152"}}}}}}}, 0x5b)

1.220792224s ago: executing program 2 (id=3202):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="000400200000a6d321b549fe2cb30200000002000000080040"], 0x20}, 0x1, 0x0, 0x0, 0x4000084}, 0x2000c000)
sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)={0x28, r1, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r3}, @void}}}, 0x28}, 0x1, 0x6c00}, 0x0)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan1\x00', <r6=>0x0})
sendmsg$NL80211_CMD_VENDOR(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x38, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x40}, @val={0x8, 0x3, r6}, @val={0xc}}}, [@NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x1374}]}, 0x38}}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan0\x00', <r7=>0x0})
sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x40, r4, 0x400, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0xb844, 0x75}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0xe}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x67}]}, 0x40}, 0x1, 0x0, 0x0, 0x4008040}, 0x0)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
r9 = socket(0x2d, 0x5, 0x0)
sendmsg$RDMA_NLDEV_CMD_DELLINK(r9, &(0x7f0000000100)={&(0x7f0000000000)={0x2d, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000003c0)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x0)
sendmsg$NFT_BATCH(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a48000000060a0b040000000000000000020000001c00048018000180080001006c6f67000c00028008000640000000210900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000a"], 0x70}}, 0x20000080)

906.337597ms ago: executing program 1 (id=3203):
r0 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000840)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0xd}}, [@qdisc_kind_options=@q_gred={{0x9}, {0xc, 0x2, [@TCA_GRED_LIMIT={0x8, 0x5, 0x9}]}}]}, 0x3c}}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x4c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x20, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}, {0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}, @NFT_MSG_DELSETELEM={0x2c, 0xe, 0xa, 0x201, 0x0, 0x0, {0xa}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xdc}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$TIPC_NL_PUBL_GET(r0, &(0x7f00000008c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000880)={&(0x7f0000000b40)={0x434, r3, 0x800, 0x70bd2b, 0x25dfdbff, {}, [@TIPC_NLA_NET={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x19a00}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xc00000}, @TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xfffffffffffffffa}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x81}]}, @TIPC_NLA_NODE={0x4c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x48, 0x4, {'gcm(aes)\x00', 0x20, "c62fb67380f9a8b812f4214451c3a089076210c45d4d71f3a5c5040e0fe40138"}}]}, @TIPC_NLA_BEARER={0x50}, @TIPC_NLA_NODE={0x2dc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0xde, 0x3, "2e8babfcbc52177c04dcf261a3bf1a25b89941f99df8359edc08e47ec15ad27278ca6de9b990ee667caa172f4efffd03e0e3fae7bb3f4ffe7015783565e7e3240eb8ba6f867465526e22d3da848fdf93477577cc4a9ae050ff2bb7edef4aaed70452719a66a3c84116144656e649b8a7c71e51974af21656b61600eec3ae4679aad92976e5baadf5bd8d1c59ca0f0b2e72522210fd24c40903545e86b52eeae9cfc6c9c990dc9c7de3740c427f0e4a0c2484e6f86a6ec2d111d32dc6b8a5617d60583d380f644b49044ef615e3c8e1b6e5d668063ddff64579e5"}, @TIPC_NLA_NODE_KEY={0x48, 0x4, {'gcm(aes)\x00', 0x20, "d253867e4685314f4c6f9792711743d06da644c61d0a3b5a9fa2f338882fc9df"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "d2a190b773fba3137809b2024b8ed08d22c665466e89820cd0ea5a23a5a42981b24ebd84"}}, @TIPC_NLA_NODE_KEY={0x0, 0x4, {'gcm(aes)\x00', 0x0, "2a1c2554878a9c2dacdf68b02c91e89d9de0a0e36039c74e"}}, @TIPC_NLA_NODE_ID={0x16, 0x3, "565ed8530292f2068d69d160fd60a4e11c82"}, @TIPC_NLA_NODE_KEY={0x3f, 0x4, {'gcm(aes)\x00', 0x17, "38f1866beadb05bb57edff09bc54189eb457276ae44f9c"}}, @TIPC_NLA_NODE_ID={0x103, 0x3, "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"}]}, @TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}]}, @TIPC_NLA_NET={0x58, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x8001}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x52c0}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xe0000000}, @TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xcc}, @TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x400}]}]}, 0x434}, 0x1, 0x0, 0x0, 0x4001004}, 0x80) (async, rerun: 64)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000b00)={&(0x7f0000000400)=ANY=[@ANYRESHEX=0x0], 0x0, 0x3a, 0x0, 0x6, 0xfffffffe}, 0x28) (rerun: 64)

811.491032ms ago: executing program 2 (id=3204):
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0x82, &(0x7f0000000180)={0x2}, &(0x7f0000000280)=0x20)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff)
r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000000), r5)
sendmsg$NFC_CMD_DISABLE_SE(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x24, r6, 0x201, 0x70bd28, 0x25dfdbfb, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x400c800)
sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x4c, r3, 0x1, 0x0, 0x0, {0x3d}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd, 0x82}, {0x5, 0x87}}]}, 0x4c}}, 0x0)
sendmsg$ETHTOOL_MSG_LINKMODES_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)={0x2c, r2, 0x301, 0x70bd28, 0x25dfdbfe, {0x1c}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}]}]}, 0x2c}}, 0x20000010)

793.533514ms ago: executing program 4 (id=3205):
syz_emit_ethernet(0x83, &(0x7f0000000000)=ANY=[@ANYBLOB="bbffffffff00000000aaaabb86dd60000610004d3af2fd8000000000110000000000000000bbff0200000000000000000000000000010400907800000000608bb91d00001100fe8000000000000000000000000000aa0000000000000000000000000000000000000000000000000401780000000000983864eee1fe71e030673c5d9fa51f1050378614e3874646d2fb13582dcc8ca5d3758e639dbfb28e"], 0x0)

452.081151ms ago: executing program 4 (id=3206):
r0 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)={0x94, 0x0, 0x1, 0x409, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x94}}, 0x0) (async, rerun: 32)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', <r1=>0x0}) (rerun: 32)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x144, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0xb, 0x7}, {0xfff1, 0xffff}, {0x300}}, [@filter_kind_options=@f_u32={{0x8}, {0x118, 0x2, [@TCA_U32_SEL={0x114, 0x5, {0xd, 0x8, 0x10, 0x4e, 0x6, 0x5, 0x7, 0x1, [{0x8000, 0xd4cb, 0x800000c3, 0x2}, {0xd617, 0x1, 0x3, 0x8}, {0x7, 0x104, 0x5, 0x2b1}, {0xb, 0x7, 0x7, 0x101}, {0xb944, 0x4, 0x2d, 0x9447}, {0x7ff, 0x5c, 0xff, 0x474}, {0x7, 0x1, 0x0, 0x1}, {0x5, 0x5, 0x5, 0x4}, {0xbe58, 0x7, 0x46, 0x3}, {0x5, 0x4, 0x5, 0x7}, {0x4, 0x0, 0x3, 0x7ffc}, {0x199b, 0x1, 0x0, 0x9}, {0xefffffff, 0x8, 0x5, 0x2}, {0x2, 0x2, 0x90de, 0x7}, {0x9, 0x4, 0x9, 0x9}, {0x4000, 0x1, 0x3, 0x9b1}]}}]}}]}, 0x144}}, 0x0)
getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000840)=<r2=>0x0, &(0x7f0000000880)=0x4) (async)
getsockname$packet(0xffffffffffffffff, &(0x7f00000008c0)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14) (async, rerun: 32)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000940)={'wg1\x00', <r4=>0x0}) (async, rerun: 32)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000980)={@empty, @rand_addr, <r5=>0x0}, &(0x7f00000009c0)=0xc) (async)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000a00)={'team0\x00', <r6=>0x0}) (async)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000a40)={'batadv0\x00', <r7=>0x0}) (async, rerun: 32)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000b80)={'tunl0\x00', &(0x7f0000000a80)={'syztnl2\x00', <r8=>0x0, 0x40, 0x10, 0x64497f, 0x3, {{0x2a, 0x4, 0x0, 0x37, 0xa8, 0x67, 0x0, 0xc0, 0x29, 0x0, @rand_addr=0x64010100, @rand_addr=0x64010100, {[@cipso={0x86, 0xc, 0x0, [{0x1, 0x6, "b1258f1c"}]}, @cipso={0x86, 0x30, 0x3, [{0x6, 0x9, "765038edd00f50"}, {0x6, 0xb, "1e83972ac3d43d2be8"}, {0x2, 0x6, "29890b90"}, {0x7, 0x10, "b24b58e14e0d79be37c2823931a6"}]}, @ra={0x94, 0x4, 0x1}, @timestamp_addr={0x44, 0x34, 0x39, 0x1, 0x8, [{@broadcast}, {@loopback, 0x8}, {@multicast1, 0x5}, {@multicast1}, {@loopback, 0x9d22}, {@remote, 0x8001}]}, @rr={0x7, 0x17, 0x73, [@loopback, @remote, @private=0xa010101, @dev={0xac, 0x14, 0x14, 0x2f}, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @ssrr={0x89, 0x7, 0xed, [@local]}]}}}}}) (async, rerun: 32)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000bc0)={'team0\x00', <r9=>0x0})
r10 = socket(0x10, 0x3, 0x0) (async, rerun: 32)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r11=>0xffffffffffffffff}) (rerun: 32)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000000)={'lo\x00', <r12=>0x0})
sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=@newqdisc={0x78, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r12, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0xcac, 0x0, 0x0, 0x9, 0xf407}, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x4, 0x0, 0x11, 0x8, 0x1ff, {0x0, 0x0, 0x0, 0x3}}}}]}, 0x78}}, 0x0) (async)
getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000c00)=<r13=>0x0, &(0x7f0000000c40)=0x4) (async)
r14 = socket(0x400000000010, 0x3, 0x0)
r15 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r15, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r16=>0x0})
sendmsg$nl_route_sched(r14, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r16, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x104, 0xe}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0) (async)
sendmsg$nl_route_sched(r14, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000c00)=@newtfilter={0x44, 0x2c, 0xd2f, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r16, {}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_u32={{0x8}, {0x18, 0x2, [@TCA_U32_SEL={0x14, 0x5, {0x4, 0x8, 0x4, 0x4, 0x2, 0x4, 0x6, 0x769}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x24048084}, 0x20000000) (async)
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000c80)={<r17=>0x0, @rand_addr, @remote}, &(0x7f0000000cc0)=0xc) (async)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000d00)={'wg0\x00', <r18=>0x0})
sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f0000001780)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001740)={&(0x7f0000000d40)={0x9c8, 0x0, 0x200, 0x70bd2b, 0x25dfdbff, {}, [{{0x8}, {0x1ec, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x885a}}, {0x8}}}, {0x74, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x44, 0x4, [{0x3fb, 0xb, 0x1, 0x3}, {0x2, 0x0, 0xa9, 0x5}, {0x0, 0x20, 0xdf, 0x1}, {0x9, 0x5, 0x80, 0x1}, {0x91, 0x52, 0x8, 0x2}, {0x4, 0x4, 0x8, 0x3}, {0xd, 0x8, 0xa7, 0xa}, {0x1ff, 0x10, 0x7f, 0x5}]}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0xfc, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xffffe55d}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x100}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}]}}, {{0x8}, {0x104, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x10001}}, {0x8}}}, {0x34, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x4}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}]}}, {{0x8}, {0x120, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7f}}}]}}, {{0x8}, {0xb4, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xb0}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x258d}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x400}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}]}}, {{0x8, 0x1, r1}, {0x104, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xffff486c}}, {0x8, 0x6, r2}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r3}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x400}}, {0x8, 0x6, r4}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xf}}, {0x8, 0x6, r5}}}]}}, {{0x8, 0x1, r6}, {0x7c, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r7}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xffffffff}}, {0x8, 0x6, r8}}}]}}, {{0x8, 0x1, r9}, {0x1e8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r12}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r13}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r16}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r17}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x806}}, {0x8, 0x6, r18}}}]}}]}, 0x9c8}, 0x1, 0x0, 0x0, 0x1}, 0x4004001)
r19 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route_sched(r19, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtaction={0x60, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x4c, 0x1, [@m_sample={0x48, 0x1, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x2, 0x5, 0xffffffffffffffff, 0x4, 0x2}}]}, {0x4}, {0xc}, {0xc, 0x4}}}]}]}, 0x60}}, 0x0) (async)
setsockopt$inet6_MCAST_LEAVE_GROUP(r19, 0x29, 0x2d, &(0x7f0000000100)={0x9, {{0xa, 0x4e24, 0x7, @remote, 0x8}}}, 0x88)

446.798547ms ago: executing program 2 (id=3207):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
r1 = socket$inet_sctp(0x2, 0x400000000001, 0x84)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x16, 0x9}]}, 0x10)
sendto$inet(r1, &(0x7f0000000800)='u', 0x1, 0x801, &(0x7f0000000040)={0x2, 0x4e23, @private=0xa010100}, 0x10) (async)
sendto$inet(r1, &(0x7f0000000800)='u', 0x1, 0x801, &(0x7f0000000040)={0x2, 0x4e23, @private=0xa010100}, 0x10)
r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r2, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="1401000020000101000000000000000001"], 0x114}], 0x1}, 0x0)
listen(r1, 0xa)
accept4(r1, 0x0, 0x0, 0x0)
socket$nl_sock_diag(0x10, 0x3, 0x4) (async)
r3 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$SOCK_DIAG_BY_FAMILY(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x14, 0x601, 0x0, 0x0, {0x2b, 0xfa}}, 0x14}}, 0x0) (async)
sendmsg$SOCK_DIAG_BY_FAMILY(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x14, 0x601, 0x0, 0x0, {0x2b, 0xfa}}, 0x14}}, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9b}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r4, 0xfffff000, 0xe, 0x0, &(0x7f0000001700)="61df7100c80400d5721ff59fe864", 0x0, 0x2, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x4c) (async)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r4, 0xfffff000, 0xe, 0x0, &(0x7f0000001700)="61df7100c80400d5721ff59fe864", 0x0, 0x2, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x4c)

446.17778ms ago: executing program 1 (id=3208):
pipe(&(0x7f00000001c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0)
splice(r2, &(0x7f0000000040)=0xfffffffffffffffc, r1, 0x0, 0x800000000ff, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'gre0\x00', <r4=>0x0})
writev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000000)="8724", 0x2}], 0x1)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r5)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f0000000300)=[@in6={0xa, 0x4e21, 0xe7b5, @local, 0x3}, @in6={0xa, 0x4e23, 0x9, @private1={0xfc, 0x1, '\x00', 0x1}, 0x4}], 0x38)
ioctl$BTRFS_IOC_SET_FEATURES(r2, 0x40309439, &(0x7f00000002c0)={0x2, 0x1})
r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x4, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x2}}, 0x0, 0x5}, 0x94)
ioctl$TUNSETOFFLOAD(r6, 0xc004743e, 0x110e22fff6)
ioctl$TUNGETVNETLE(r5, 0x4010744d, &(0x7f0000000180))
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x421, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gre={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_DPORT={0x6}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x856}]}}}]}, 0x40}}, 0x0)

217.81166ms ago: executing program 0 (id=3209):
r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
setsockopt$llc_int(r0, 0x10c, 0x3, &(0x7f0000000040), 0x4)
connect$llc(r0, &(0x7f0000000000)={0x1a, 0x0, 0x1, 0x1, 0x0, 0x0, @remote}, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$wireguard(&(0x7f00000001c0), r1)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_CTHELPER_NEW(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="1400001b00090104000000000053f63f0d843c74b9fca6000000000000"], 0x14}}, 0x0)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r6)
r7 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x88, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x5c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x1ffd, 0x2}}, @TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0x2}, @TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0x9}, @TCA_HTB_INIT={0x18, 0x2, {0x3, 0x3, 0x7}}, @TCA_HTB_INIT={0x18, 0x2, {0x3, 0x7, 0x4}}]}}]}, 0x88}, 0x1, 0x0, 0x0, 0x40004}, 0x0)
ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r9 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', <r10=>0x0})
sendmsg$nl_route_sched(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2c, 0x2, {0x0, 0x0, 0x0, r10, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29d}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0xa, 0x0, 0x8, 0x80000001, 0x7}, 0x3d}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x20000080}, 0xc042)
pipe(&(0x7f0000000040)={<r11=>0xffffffffffffffff})
ioctl$int_in(r11, 0x5421, &(0x7f00000003c0)=0x3d49)
read$alg(r11, &(0x7f0000000140)=""/116, 0x74)
bpf$ITER_CREATE(0x21, &(0x7f0000000000)={r11}, 0x8)
r12 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r12, 0x107, 0xf, &(0x7f0000000600), 0x56)
sendmsg$kcm(r12, &(0x7f0000000280)={&(0x7f0000000540)=@xdp={0x2c, 0x0, r10, 0x42}, 0x80, &(0x7f0000000440)=[{&(0x7f00000001c0)="27030200dc0f14000e000000002400240000ff1107c2fb7fe0406e52534b4f6b3d327db412f40000000000000000", 0x2e}], 0x1}, 0x4005)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x85, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e33, @multicast1}}, 0x10, 0x23}, 0x90)
sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="94010000", @ANYRES16=r2, @ANYBLOB="01002dbd7000fedbdf25010000001400020077673200000000000000000000000000240003000000000000000000000000000000000000000000000000000000000000000000480108805400008024000200935fcc0d76a5bcfce584052ea21b4b2622057154ff788c325f3b596e54307c08080003000300000024000100d1732899f611cd8994034d7f413dc957630e5493c285aca40065cb6311be696bf000008024000100f44da367a88ee6564f020211456727082f5cebee8b1bf5eb7337341b459b39222400020082a3fee8508b9dedc00d8ccb9cfa517d48a03e6112bfa9074c524b2a05708654a400098028000080060001000a00000014000200fe880000000000000000000000000101050003000300000040000080060001000a0000001400020000000000000000000000ffff7f00000105000300030000000600010002000000080002007f00000105000300010000000c000080060001"], 0x194}, 0x1, 0x0, 0x0, 0xc004}, 0x4000040)

157.754752ms ago: executing program 4 (id=3210):
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, 0x0, 0x0) (async)
setsockopt$inet6_udp_int(r0, 0x11, 0x68, 0x0, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2e01, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) (async)
socket$kcm(0x2, 0xa, 0x2) (async)
setsockopt$inet6_IPV6_DSTOPTS(0xffffffffffffffff, 0x29, 0x3b, &(0x7f0000000200)={0x62, 0x1c, '\x00', [@jumbo={0xc2, 0x4, 0xaab}, @hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @generic={0x3, 0xbe, "2153e3e8b8e2bf0dfdec580f61824e81456414fee0acbafdc29225b6ced6bd5b0ba6ee3e3dd667b78b9590e2b21636f2b12f43391c94bf973eadd958a3079fdbb06e81c7f2c0425075553f3c839e673ee50c8c85f0c30e8d3c8de384db054d7f27dad3c6d3c31afdf6bdca120a8f761e96d8bfc4b5aa3851254eaa7b448db3b734c14ac3af6754c39c4e1c7ae9329eaf38dc7b20201a1656b07c7d8f5caaf68a359dd38c8b923e060f936ae377ebd65f8c6dbc76d934dca3233b28fbcfbc"}, @ra={0x5, 0x2, 0xff7f}, @ra={0x5, 0x2, 0x579c}, @enc_lim={0x4, 0x1, 0xee}]}, 0xf0) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
socket$inet(0xa, 0x801, 0x84)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}}, 0x20040014) (async)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0x200, 0x0, 0x25dfdbfb, {{@in=@loopback, @in6=@local, 0x0, 0x4, 0x0, 0x0, 0xa, 0x60, 0x80, 0x3b, 0x0, 0xee01}, {0x0, 0x4, 0x0, 0x0, 0x40, 0xfffffffffffffffd, 0x2}, {0xfffffffffffffffe}, 0x9, 0x40000000, 0x0, 0x1, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50)
sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000020000000000fc000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80c0}, 0x0) (async)
r4 = socket$l2tp6(0xa, 0x2, 0x73)
getsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f0000000300), &(0x7f0000000380)=0x4)
sendmsg$nl_xfrm(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="b80000001300e9990500000000000000fc000000000000000000000000000000fc00000000000000000000000000000000000000000000000a0030"], 0xb8}}, 0x4000) (async)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a09000000000000000000020000000900020073797a310000000008000440000000000900010073797a300000000008000340000000011400000011"], 0x64}}, 0x0) (async)
r5 = socket$kcm(0x21, 0x2, 0xa)
sendmsg$kcm(r5, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev={0xfe, 0x80, '\x00', 0x22}, 0x8000000}}, 0x80, 0x0, 0x0, &(0x7f0000000500)=[{0x18, 0x110, 0xd, "aa"}, {0x18, 0x110, 0x1, '\x00'}], 0x30}, 0x0)

557.518µs ago: executing program 2 (id=3211):
r0 = socket$igmp6(0xa, 0x3, 0x2)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', <r2=>0x0})
r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000400000008000000000000000100"/48, @ANYRES32=r3, @ANYBLOB="0100000002"], 0x40)
r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYRESOCT=0x0, @ANYRES64=r0], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', r2, 0x1b, r3}, 0x94)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000001fc0)={<r7=>0x0}, &(0x7f0000002000)=0xc)
sendmmsg$unix(r5, &(0x7f0000001d40)=[{{0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000000240)="af", 0x1}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0)=[@cred={{0x1c, 0x1, 0x2, {r7}}}, @rights={{0x14, 0x1, 0x1, [r5]}}], 0x38}}], 0x2, 0x801)
syz_open_procfs$namespace(r7, &(0x7f0000000240)='ns/mnt\x00')
sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x34, 0x10, 0x801, 0x41, 0x25dfdbf7, {0x0, 0x0, 0x0, 0x0, 0x2202e}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r4}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20048050}, 0x40014)

0s ago: executing program 1 (id=3212):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, &(0x7f0000000040)={0xffffffffffffffff, 0x1, 0x4, 0x1, @vifc_lcl_addr=@loopback, @loopback}, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r4=>0x0})
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r6 = openat$cgroup_ro(r5, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
pread64(r6, 0x0, 0x0, 0xcd32)
sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={0x30, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_IE={0x8, 0x2a, [@ibss={0x6, 0x2, 0x1000}]}]}, 0x30}}, 0x0)
sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4810}, 0x20004000)
socket(0x29, 0x80805, 0x0)
getsockopt$bt_hci(r0, 0x119, 0x2, 0x0, 0x0)
socket$inet_smc(0x2b, 0x1, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
socket$igmp6(0xa, 0x3, 0x2)
sendmsg$can_j1939(0xffffffffffffffff, 0x0, 0x10)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x4004)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0)
close(r7)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$SIOCSIFHWADDR(r7, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="0100008d8dff"})

kernel console output (not intermixed with test programs):

.099115][T12727] syzkaller1: tun_net_xmit 70
[  404.128700][T12957] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1921'.
[  404.140354][T12950] syzkaller1: tun_chr_ioctl cmd 1074025677
[  404.149878][T12727] net_ratelimit: 19 callbacks suppressed
[  404.149898][T12727] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  404.164842][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  404.166037][T12950] syzkaller1: Linktype set failed because interface is up
[  404.317655][T11000] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  404.350518][T11000] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  404.391436][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  404.611817][T12974] netlink: 'syz.0.1925': attribute type 1 has an invalid length.
[  404.619909][T12974] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1925'.
[  404.645257][T12957] bond7: option xmit_hash_policy: invalid value (64)
[  404.674553][T12722] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  404.683164][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  404.723464][T12957] bond7 (unregistering): Released all slaves
[  404.822966][T12977] netlink: 'syz.2.1923': attribute type 11 has an invalid length.
[  405.272554][T12982] macvtap1: entered promiscuous mode
[  405.299244][T12982] macvtap1: entered allmulticast mode
[  405.312139][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  405.324702][T12982] veth1_vlan: entered allmulticast mode
[  405.353698][   T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  405.362355][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  405.511596][ T1002] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  405.527749][ T1002] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  405.592106][T12999] netlink: 'syz.4.1932': attribute type 4 has an invalid length.
[  405.631083][T12996] netlink: 'syz.2.1931': attribute type 2 has an invalid length.
[  405.662741][T12998] netlink: 'syz.4.1932': attribute type 4 has an invalid length.
[  405.799951][ T5345] lo speed is unknown, defaulting to 1000
[  405.833965][ T5345] syz0: Port: 1 Link ACTIVE
[  406.359623][T13032] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1937'.
[  406.401404][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  406.440631][T13032] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1937'.
[  406.515444][T13031] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1940'.
[  407.023615][T13040] netlink: 'syz.3.1941': attribute type 1 has an invalid length.
[  407.307869][T13052] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1941'.
[  407.446121][T13052] bridge4: entered promiscuous mode
[  407.502884][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  407.597242][T13024] erspan0: entered promiscuous mode
[  407.632594][T13024] erspan0: entered allmulticast mode
[  407.748466][T13056] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1946'.
[  407.829667][T13068] netlink: 'syz.1.1949': attribute type 1 has an invalid length.
[  408.283062][T13068] 8021q: adding VLAN 0 to HW filter on device bond8
[  408.501485][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  408.844975][T13101] netlink: 'syz.2.1956': attribute type 10 has an invalid length.
[  409.231595][T13113] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1958'.
[  409.281865][T13110] net_ratelimit: 46 callbacks suppressed
[  409.281884][T13110] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  409.296479][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  409.316086][ T1153] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  409.407345][T13118] syzkaller0: entered promiscuous mode
[  409.426951][T13118] syzkaller0: entered allmulticast mode
[  409.581599][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  409.702380][ T5750] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  409.751807][T13129] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1963'.
[  409.781289][T13129] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1963'.
[  409.907730][T11000] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  409.916330][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  409.962053][T12727] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  409.990483][T12727] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  410.084890][T13137] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  410.182325][ T5345] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  410.366945][T13144] netlink: 88 bytes leftover after parsing attributes in process `syz.0.1966'.
[  410.436465][T13145] bond8: Removing last arp target with arp_interval on
[  410.701424][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  411.039589][T13174] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1974'.
[  411.601431][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  411.868189][T13202] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR
[  411.913181][T13207] netlink: 'syz.1.1981': attribute type 3 has an invalid length.
[  411.984017][T13207] netlink: 'syz.1.1981': attribute type 1 has an invalid length.
[  412.016110][T13207] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1981'.
[  412.149487][T13214] netlink: 'syz.3.1982': attribute type 4 has an invalid length.
[  412.621450][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  412.946638][T13241] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1990'.
[  413.270434][T13251] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1993'.
[  413.307197][T13253] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1994'.
[  413.450483][T13253] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1994'.
[  413.486832][   T48] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  413.522915][   T48] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  413.557211][   T48] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  413.589160][   T48] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  413.604446][T13260] netlink: 'syz.3.1997': attribute type 1 has an invalid length.
[  413.651424][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  413.665472][   T48] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  413.860727][T13267] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1999'.
[  413.897165][T13260] 8021q: adding VLAN 0 to HW filter on device bond9
[  413.920826][T13275] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1999'.
[  413.956055][T12727] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  413.998876][T12727] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  414.051602][T12727] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  414.315108][T13285] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2005'.
[  414.339057][T13285] netlink: 84 bytes leftover after parsing attributes in process `syz.3.2005'.
[  414.361771][ T9737] net_ratelimit: 25 callbacks suppressed
[  414.361788][ T9737] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  414.484389][T11000] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  414.492905][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  414.609090][T11000] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  414.674495][T11000] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  414.769158][T13297] syzkaller0: entered promiscuous mode
[  414.781467][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  414.823302][ T5750] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  414.837474][T13297] syzkaller0: entered allmulticast mode
[  414.898712][T13297] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  414.974476][T13297] netlink: 116 bytes leftover after parsing attributes in process `syz.3.2008'.
[  415.032565][T13315] netlink: 256 bytes leftover after parsing attributes in process `syz.4.2011'.
[  415.057881][T13294] tipc: Resetting bearer <eth:syzkaller0>
[  415.064902][T11000] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  415.126474][T13319] netlink: 'syz.4.2011': attribute type 3 has an invalid length.
[  415.157939][T13319] netlink: 'syz.4.2011': attribute type 1 has an invalid length.
[  415.233956][T13294] tipc: Disabling bearer <eth:syzkaller0>
[  415.391751][ T9737] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  415.578218][T13330] netlink: 'syz.3.2014': attribute type 12 has an invalid length.
[  415.596188][T13318] syzkaller0: entered promiscuous mode
[  415.617936][T13318] syzkaller0: entered allmulticast mode
[  415.663606][   T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  415.672319][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  415.791504][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  416.845859][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  417.881570][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  418.560061][T13351] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  418.612257][T13355] netlink: 'syz.4.2020': attribute type 1 has an invalid length.
[  418.624707][T13358] __nla_validate_parse: 1 callbacks suppressed
[  418.624726][T13358] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2023'.
[  418.660235][T13357] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2019'.
[  418.671528][T13355] netlink: 232 bytes leftover after parsing attributes in process `syz.4.2020'.
[  418.710864][T13355] netlink: 'syz.4.2020': attribute type 1 has an invalid length.
[  418.711874][T13361] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2023'.
[  418.891480][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  419.513415][T12727] net_ratelimit: 27 callbacks suppressed
[  419.513435][T12727] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  419.546984][ T9762] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  419.787825][T13404] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2033'.
[  420.011529][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  420.026718][T13407] xt_nat: multiple ranges no longer supported
[  420.049602][T13409] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2035'.
[  420.121785][ T1153] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  420.130328][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  420.251849][   T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  420.298572][T10535] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  420.310645][   T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  420.584467][ T9762] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  420.686633][T13426] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  420.697149][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  420.746960][T13430] netlink: 296 bytes leftover after parsing attributes in process `syz.1.2041'.
[  420.761235][   T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  420.818453][T13430] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2041'.
[  420.941510][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  420.960724][T13430] netlink: 4228 bytes leftover after parsing attributes in process `syz.1.2041'.
[  421.117659][T13430] netlink: 11588 bytes leftover after parsing attributes in process `syz.1.2041'.
[  422.001426][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  422.818183][T13490] netlink: 'syz.2.2059': attribute type 1 has an invalid length.
[  423.046431][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  424.107269][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  424.640723][T12727] net_ratelimit: 29 callbacks suppressed
[  424.640745][T12727] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  424.655182][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  424.681281][T13500] netlink: 288 bytes leftover after parsing attributes in process `syz.2.2062'.
[  424.707287][T13502] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR
[  424.745250][ T9762] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  424.832537][T12722] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  424.885708][T12722] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  424.907554][ T5722] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  425.111442][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  425.275924][T13525] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2068'.
[  425.306038][T12722] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  425.410670][T13528] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2069'.
[  425.531062][T13532] ip6gre3: entered promiscuous mode
[  425.580569][T13532] ip6gre3: entered allmulticast mode
[  425.594695][T13535] ip6_tunnel: ip6gre3 xmit: Local address not yet configured!
[  425.661777][T12727] ip6_tunnel: ip6gre3 xmit: Local address not yet configured!
[  425.699786][T12727] ip6_tunnel: ip6gre3 xmit: Local address not yet configured!
[  425.711552][ T5750] ip6_tunnel: ip6gre3 xmit: Local address not yet configured!
[  425.797240][T13533] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2067'.
[  425.807700][ T9762] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  425.883635][T11000] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  425.892478][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  426.151642][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  426.663035][ T5722] ip6_tunnel: ip6gre3 xmit: Local address not yet configured!
[  426.744544][T13564] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2078'.
[  426.761699][ T5722] ip6_tunnel: ip6gre3 xmit: Local address not yet configured!
[  426.835770][T13573] vlan3: entered allmulticast mode
[  426.861381][T13573] bond0: entered allmulticast mode
[  426.874191][T13573] bond_slave_0: entered allmulticast mode
[  426.901974][T13573] bond_slave_1: entered allmulticast mode
[  427.637797][T13595] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2087'.
[  428.201556][    C1] ip6_tnl_xmit_ctl: 1 callbacks suppressed
[  428.201577][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  428.397167][T13618] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2095'.
[  428.750505][T13635] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2099'.
[  428.824410][T13638] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2100'.
[  428.872206][T13632] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2097'.
[  429.259554][T13655] netlink: 'syz.0.2104': attribute type 1 has an invalid length.
[  429.361523][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  429.390055][T13654] macvlan3: entered promiscuous mode
[  429.416694][T13654] macvlan3: entered allmulticast mode
[  429.436735][T13654] bond12: entered promiscuous mode
[  429.448664][T13654] 8021q: adding VLAN 0 to HW filter on device macvlan3
[  429.475165][T13654] bond12: left promiscuous mode
[  429.481081][T13661] netlink: 'syz.4.2105': attribute type 1 has an invalid length.
[  429.605635][T13661] 8021q: adding VLAN 0 to HW filter on device bond4
[  429.756993][T13666] __nla_validate_parse: 3 callbacks suppressed
[  429.757013][T13666] netlink: 4384 bytes leftover after parsing attributes in process `syz.1.2106'.
[  429.866541][   T12] net_ratelimit: 31 callbacks suppressed
[  429.866562][   T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  429.942368][ T9737] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  430.021392][    C0] ip6_tunnel: ip6gre3 xmit: Local address not yet configured!
[  430.032821][ T5722] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  430.262160][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  430.463746][T11000] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  430.472458][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  430.631959][   T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  430.798411][   T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  430.897903][T13702] netlink: 256 bytes leftover after parsing attributes in process `syz.0.2116'.
[  430.982745][ T9737] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  430.992028][ T5750] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  431.089440][T13708] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2118'.
[  431.121189][T13708] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2118'.
[  431.194350][T11000] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  431.331386][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  431.346605][T13715] tipc: Failed to remove unknown binding: 66,1,1/0:27377248/27377250
[  431.651557][T13730] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2126'.
[  431.807994][T13740] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2126'.
[  432.264309][T13730] syz.0.2126 (13730) used greatest stack depth: 18280 bytes left
[  432.389908][T13761] smc: net device lo applied user defined pnetid SYZ0
[  432.404736][T13761] smc: smcd device lo applied user defined pnetid SYZ0
[  432.481863][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  432.721173][T13766] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2134'.
[  432.996184][T13782] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2137'.
[  433.054967][T13782] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2137'.
[  433.379695][T13788] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2138'.
[  433.501459][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  434.028807][T13808] xt_CONNSECMARK: invalid mode: 0
[  434.064501][T13808] netlink: 'syz.2.2144': attribute type 1 has an invalid length.
[  434.457055][T13820] bond0: (slave bond_slave_1): Releasing backup interface
[  434.521546][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  434.540624][T13820] bond_slave_1: left allmulticast mode
[  434.886814][T13830] netlink: 244 bytes leftover after parsing attributes in process `syz.3.2150'.
[  434.996495][   T62] net_ratelimit: 25 callbacks suppressed
[  434.996515][   T62] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  435.010782][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  435.143657][ T9762] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  435.286336][T12722] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  435.327320][T12722] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  435.551405][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  435.585889][T13843] xt_TCPMSS: Only works on TCP SYN packets
[  435.742277][T12722] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  435.967663][T13858] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2162'.
[  436.022703][ T5722] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  436.073860][T13858] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2162'.
[  436.205410][T11000] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  436.213984][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  436.464135][T13873] ip6t_srh: unknown srh match flags  4000
[  436.472593][ T9762] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  436.512009][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  436.569938][T13875] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2167'.
[  436.948596][T13881] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  437.278328][T13890] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2170'.
[  437.309014][T13893] netlink: 'syz.2.2172': attribute type 3 has an invalid length.
[  437.464162][T13901] netlink: 'syz.2.2172': attribute type 3 has an invalid length.
[  437.691530][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  438.581413][    C0] ip6_tunnel: ip6gre3 xmit: Local address not yet configured!
[  438.627162][T13948] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2185'.
[  438.659045][T13950] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2185'.
[  438.681420][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  439.681389][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  439.864506][ T1299] ieee802154 phy1 wpan1: encryption failed: -22
[  439.872165][ T1299] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  440.103487][ T5750] net_ratelimit: 59 callbacks suppressed
[  440.103504][ T5750] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  440.262699][T11000] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  440.395164][T13899] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  440.503079][T11000] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  440.662532][ T9762] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  440.701780][T11000] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  440.710264][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  440.721640][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  440.804752][T13964] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  440.867311][T13967] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  440.876019][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  440.933408][T13967] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  441.275641][T13977] netlink: 'syz.2.2191': attribute type 2 has an invalid length.
[  441.477510][T13985] erspan0: entered promiscuous mode
[  441.500374][T13985] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2195'.
[  441.711832][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  441.764722][T13991] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[  441.872818][T13991] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  442.811863][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  443.193855][T14034] IPVS: ip_vs_add_dest(): server weight less than zero
[  443.330746][T14040] xt_hashlimit: size too large, truncated to 1048576
[  443.386821][T14041] –: renamed from vxcan1 (while UP)
[  443.891370][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  444.292978][T14056] xt_hl: Unknown TTL match mode: 255
[  444.327519][T14059] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2219'.
[  444.355713][T14060] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2220'.
[  444.376316][T14059] netlink: 13 bytes leftover after parsing attributes in process `syz.1.2219'.
[  444.489176][T14059] veth5: entered promiscuous mode
[  444.901465][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  444.956757][T14079] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2227'.
[  445.252463][ T1153] net_ratelimit: 28 callbacks suppressed
[  445.252483][ T1153] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  445.266841][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  445.332965][T14092] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2230'.
[  445.387925][T14095] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2233'.
[  445.434869][T14092] workqueue: Failed to create a rescuer kthread for wq "nbd64-recv": -EINTR
[  445.451956][T14092] block (null): Could not allocate knbd recv work queue.
[  445.478808][T14103] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2231'.
[  445.493828][T11000] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  445.549000][T11000] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  445.572618][T14092] nbd: failed to add new device
[  445.600751][T14086] block nbd0: not configured, cannot reconfigure
[  445.628369][ T5750] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  445.637203][ T5751] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  445.640541][T14089] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2230'.
[  445.656708][T14105] x_tables: duplicate entry at hook 3
[  445.738711][T14089] workqueue: Failed to create a rescuer kthread for wq "nbd64-recv": -EINTR
[  445.741024][T14089] block (null): Could not allocate knbd recv work queue.
[  445.843691][T14089] nbd: failed to add new device
[  445.855836][   T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  445.885629][ T9762] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  445.951406][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  446.128726][T14114] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2237'.
[  446.200774][ T5751] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  446.233414][T14119] netlink: 'syz.1.2240': attribute type 12 has an invalid length.
[  446.288667][   T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  446.524801][T14128] __nla_validate_parse: 1 callbacks suppressed
[  446.524822][T14128] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2243'.
[  446.627699][T14135] netlink: 88 bytes leftover after parsing attributes in process `syz.2.2243'.
[  446.961381][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  448.061400][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  448.565268][T14189] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2258'.
[  449.076274][T14209] SET target dimension over the limit!
[  449.097757][T14209] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2264'.
[  449.121560][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  449.139733][T14211] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  449.148118][T14211] IPv6: NLM_F_CREATE should be set when creating new route
[  449.155487][T14211] IPv6: NLM_F_CREATE should be set when creating new route
[  449.162821][T14211] IPv6: NLM_F_CREATE should be set when creating new route
[  449.191148][T14211] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  449.572179][T14224] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2266'.
[  449.662371][T14224] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2266'.
[  449.764909][T14224] netlink: 164 bytes leftover after parsing attributes in process `syz.2.2266'.
[  449.818748][T14233] netlink: 'syz.0.2269': attribute type 1 has an invalid length.
[  449.981640][T14233] 8021q: adding VLAN 0 to HW filter on device bond13
[  450.025788][T14238] bond6: (slave veth0_to_bond): Releasing active interface
[  450.091387][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  450.113889][T14238] bond13: (slave veth0_to_bond): making interface the new active one
[  450.133797][T14238] bond13: (slave veth0_to_bond): Enslaving as an active interface with an up link
[  450.195909][T14248] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  450.206579][T14233] macvlan3: entered promiscuous mode
[  450.218677][T14233] macvlan3: entered allmulticast mode
[  450.236680][T14248] netlink: 'syz.4.2272': attribute type 7 has an invalid length.
[  450.248106][T14233] bond13: entered promiscuous mode
[  450.262745][T14233] veth0_to_bond: entered promiscuous mode
[  450.274428][T14233] 8021q: adding VLAN 0 to HW filter on device macvlan3
[  450.284235][T14233] bond13: (slave macvlan3): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  450.303801][T14233] bond13: left promiscuous mode
[  450.308805][T14233] veth0_to_bond: left promiscuous mode
[  450.343432][T12726] net_ratelimit: 32 callbacks suppressed
[  450.343453][T12726] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  450.460217][T14251] netlink: 'syz.2.2273': attribute type 1 has an invalid length.
[  450.538082][T14254] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2274'.
[  450.547952][T14251] netlink: 'syz.2.2273': attribute type 3 has an invalid length.
[  450.547985][T14256] block nbd0: Unsupported socket: should be TCP or UNIX.
[  450.584224][T14251] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2273'.
[  450.596926][T14258] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2276'.
[  450.958341][T11000] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  450.967045][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  451.171970][T12726] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  451.191971][T12726] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  451.221624][ T9759] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  451.241759][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  451.521471][   T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  451.703161][ T5751] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  451.814541][T14292] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  452.027099][   T62] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  452.141852][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  452.252807][T14306] __nla_validate_parse: 3 callbacks suppressed
[  452.252827][T14306] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2290'.
[  452.386223][T14310] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2290'.
[  452.507229][T14313] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2291'.
[  452.584400][T14314] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2291'.
[  452.943238][T14326] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2295'.
[  453.201364][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  453.518455][T14336] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2299'.
[  453.669723][T14340] netlink: 112 bytes leftover after parsing attributes in process `syz.2.2301'.
[  453.891293][T14348] Bluetooth: hci0: invalid length 0, exp 2 for type 29
[  454.281794][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  454.777813][T14375] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2311'.
[  454.997371][T14396] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2314'.
[  455.142437][T14400] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap3
[  455.351408][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  455.409928][ T9759] net_ratelimit: 26 callbacks suppressed
[  455.409946][ T9759] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  455.497374][T14405] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2317'.
[  455.533158][T12722] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  455.541971][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  455.790806][T11000] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  455.843290][T11000] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  455.861370][    C0] ip6_tunnel: ip6gre3 xmit: Local address not yet configured!
[  456.042117][   T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  456.351403][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  456.431092][ T9759] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  456.714435][   T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  456.723240][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  457.012703][ T1006] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  457.099067][T14454] veth9: entered promiscuous mode
[  457.166795][T14454] veth9: entered allmulticast mode
[  457.302105][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  457.551644][ T5628] Bluetooth: hci4: command 0x0405 tx timeout
[  457.573657][T14470] veth1_macvtap: left promiscuous mode
[  457.723221][T14465] bond0: option miimon: invalid value (18446744071829782528)
[  457.751051][T14465] bond0: option miimon: allowed values 0 - 2147483647
[  457.795684][T14486] __nla_validate_parse: 9 callbacks suppressed
[  457.795704][T14486] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2340'.
[  458.391482][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  458.616157][T14511] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2347'.
[  458.699788][T14516] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2348'.
[  458.790300][T14519] netlink: 244 bytes leftover after parsing attributes in process `syz.3.2348'.
[  459.152171][T14536] netlink: 'syz.1.2356': attribute type 1 has an invalid length.
[  459.392123][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  459.618817][T14541] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  459.680960][T14541] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  459.735060][T14541] netdevsim netdevsim4 netdevsim3: unset [1, 1] type 2 family 0 port 256 - 0
[  459.876234][T14552] netlink: 'syz.1.2359': attribute type 1 has an invalid length.
[  459.891047][T14552] nbd: error processing sock list
[  460.451384][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  460.482099][ T1006] net_ratelimit: 22 callbacks suppressed
[  460.482119][ T1006] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  460.499720][T14565] openvswitch: netlink: IP tunnel attribute has 5413 unknown bytes.
[  460.584895][ T1006] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  460.647293][   T62] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  460.823362][ T5751] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  460.833534][ T9762] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  461.262327][T14598] netlink: 'syz.2.2372': attribute type 28 has an invalid length.
[  461.282434][T14596] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check.
[  461.315892][T14598] netlink: 'syz.2.2372': attribute type 3 has an invalid length.
[  461.345764][T14598] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2372'.
[  461.374477][T14602] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  461.384715][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  461.393192][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  461.571418][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  462.537252][T14626] netlink: 6 bytes leftover after parsing attributes in process `syz.4.2376'.
[  462.611353][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  462.818221][T14638] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2379'.
[  463.102299][ T5274] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  463.313305][T14653] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2384'.
[  463.342779][T14659] netlink: 116 bytes leftover after parsing attributes in process `syz.4.2385'.
[  463.514961][T14663] ipt_ECN: cannot use operation on non-tcp rule
[  463.536637][T14663] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2387'.
[  463.621375][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  464.031445][T14678] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  464.356513][T14698] xt_hashlimit: size too large, truncated to 1048576
[  464.397929][T14698] xt_hashlimit: max too large, truncated to 1048576
[  464.435715][T14698] xt_hashlimit: overflow, rate too high: 0
[  464.621373][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  464.701010][T14706] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2400'.
[  464.750353][T14711] ip6tnl0: Caught tx_queue_len zero misconfig
[  464.778203][T14711] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2402'.
[  464.849601][T14711] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2402'.
[  465.228502][T14725] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2407'.
[  465.300571][T14731] netlink: 27 bytes leftover after parsing attributes in process `syz.3.2408'.
[  465.327731][T14728] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2406'.
[  465.398310][T14731] ipt_rpfilter: unknown options
[  465.408630][T14732] --map-set only usable from mangle table
[  465.415275][T14723] netlink: 'syz.4.2406': attribute type 8 has an invalid length.
[  465.451500][T14723] bridge0: port 2(bridge_slave_1) entered disabled state
[  465.459958][T14723] bridge0: port 1(bridge_slave_0) entered disabled state
[  465.711762][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  465.943149][ T1153] net_ratelimit: 5964 callbacks suppressed
[  465.943170][ T1153] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  465.957613][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  466.241815][T11000] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  466.269950][T14760] netlink: 'syz.1.2417': attribute type 3 has an invalid length.
[  466.302802][T11000] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  466.394071][T14763] bond6: option xmit_hash_policy: invalid value (64)
[  466.427093][T14763] bond6 (unregistering): Released all slaves
[  466.661704][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  466.902390][ T5722] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  467.166308][   T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  467.175054][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  467.433081][   T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  467.485682][   T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  467.731368][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  467.740580][T14815] netlink: Invalid conntrack timeout
[  467.857065][T14822] __nla_validate_parse: 12 callbacks suppressed
[  467.857085][T14822] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2433'.
[  468.029077][T14817] bond10: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  468.137733][T14817] bond10 (unregistering): Released all slaves
[  468.862072][T14843] netlink: 'syz.1.2439': attribute type 18 has an invalid length.
[  468.872133][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  469.084658][T14855] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2443'.
[  469.340386][T14866] netlink: 'syz.0.2446': attribute type 1 has an invalid length.
[  469.358139][T14867] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2445'.
[  469.377715][T14866] netlink: 'syz.0.2446': attribute type 3 has an invalid length.
[  469.411814][T14866] netlink: 'syz.0.2446': attribute type 7 has an invalid length.
[  469.436294][T14870] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2447'.
[  469.447249][T14866] netlink: 'syz.0.2446': attribute type 8 has an invalid length.
[  469.482698][T14866] netlink: 184 bytes leftover after parsing attributes in process `syz.0.2446'.
[  469.534518][T14866] NCSI netlink: No device for ifindex 131092
[  469.728245][T14878] af_packet: tpacket_rcv: packet too big, clamped from 39 to 4294967272. macoff=96
[  469.791849][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  469.808842][ T5345] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  470.581580][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  470.822624][ T5345] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  470.911400][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  470.972254][T11000] net_ratelimit: 17 callbacks suppressed
[  470.972355][T11000] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  470.988789][T11000] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  471.762082][   T62] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  471.770594][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  472.031344][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  472.111537][ T1006] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  472.123074][ T1006] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  472.135702][T14860] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  472.399480][T14886] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2451'.
[  472.411555][T14887] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2452'.
[  472.550930][T14895] xt_hashlimit: size too large, truncated to 1048576
[  472.561773][T14887] netlink: 'syz.2.2452': attribute type 11 has an invalid length.
[  472.596941][T14896] xt_hashlimit: size too large, truncated to 1048576
[  472.916162][   T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  472.924707][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  472.946599][T14913] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2459'.
[  472.971359][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  472.982010][ T5751] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  473.252821][ T1153] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  473.364610][T14922] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2462'.
[  473.614208][T14928] IPv6: sit2: Disabled Multicast RS
[  473.789134][T14940] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2466'.
[  473.951406][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  474.247477][T14950] macvtap2: entered promiscuous mode
[  474.261543][T14950] macvtap2: entered allmulticast mode
[  475.061653][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  476.023616][ T5722] net_ratelimit: 10 callbacks suppressed
[  476.023632][ T5722] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  476.071614][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  476.253980][T14922] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  476.264643][T14937] netlink: 'syz.4.2467': attribute type 1 has an invalid length.
[  476.300414][T14937] netlink: 193500 bytes leftover after parsing attributes in process `syz.4.2467'.
[  476.313554][T14937] netlink: 2060 bytes leftover after parsing attributes in process `syz.4.2467'.
[  476.404266][ T1006] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  476.413116][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  476.588311][T14968] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2472'.
[  476.643143][ T1006] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  476.678018][T14973] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  476.690665][ T1006] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  476.850001][T14979] netlink: 168 bytes leftover after parsing attributes in process `syz.1.2477'.
[  476.882335][T14978] netlink: 168 bytes leftover after parsing attributes in process `syz.1.2477'.
[  477.052401][T14983] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2479'.
[  477.064448][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  477.127835][T14984] netlink: 144 bytes leftover after parsing attributes in process `syz.2.2478'.
[  477.225083][T14983] macsec2: entered promiscuous mode
[  477.241289][T14983] bridge0: entered promiscuous mode
[  477.260538][T14983] macsec2: entered allmulticast mode
[  477.273742][T14983] bridge0: entered allmulticast mode
[  477.296072][T14983] bridge0: port 1(macsec2) entered blocking state
[  477.312188][T14983] bridge0: port 1(macsec2) entered disabled state
[  477.362501][T14983] bridge0: left allmulticast mode
[  477.539886][T14992] bridge0: port 1(vlan3) entered blocking state
[  477.561870][T14992] bridge0: port 1(vlan3) entered disabled state
[  477.563266][   T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  477.576964][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  477.595286][T14992] vlan3: entered allmulticast mode
[  477.611295][T14992] geneve0: entered allmulticast mode
[  477.620327][T14992] vlan3: entered promiscuous mode
[  477.626579][T14992] geneve0: entered promiscuous mode
[  477.637283][ T5751] bridge0: left promiscuous mode
[  477.842936][   T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  477.888906][   T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  477.942707][T15010] netlink: 'syz.0.2486': attribute type 11 has an invalid length.
[  478.010030][T15010] __nla_validate_parse: 1 callbacks suppressed
[  478.010081][T15010] netlink: 4320 bytes leftover after parsing attributes in process `syz.0.2486'.
[  478.121935][T15017] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2489'.
[  478.151422][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  478.183016][T15010] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  478.210425][T15016] netlink: 'syz.4.2488': attribute type 19 has an invalid length.
[  478.622240][T15031] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2495'.
[  478.721524][T15025] sctp: [Deprecated]: syz.3.2491 (pid 15025) Use of struct sctp_assoc_value in delayed_ack socket option.
[  478.721524][T15025] Use struct sctp_sack_info instead
[  479.004764][T15048] raw_sendmsg: syz.1.2498 forgot to set AF_INET. Fix it!
[  479.221472][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  479.361543][T15062] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2502'.
[  479.573463][T15072] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2505'.
[  479.710317][T15072] bond15: entered promiscuous mode
[  479.716926][T15072] 8021q: adding VLAN 0 to HW filter on device bond15
[  479.755151][T15072] 8021q: adding VLAN 0 to HW filter on device bond15
[  479.797381][T15072] bond15: (slave sit3): The slave device specified does not support setting the MAC address
[  479.809814][T15072] bond15: (slave sit3): Error -95 calling set_mac_address
[  480.001455][T15091] netlink: 'syz.2.2510': attribute type 6 has an invalid length.
[  480.137278][T15096] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2512'.
[  480.221451][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  480.267509][T15100] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2514'.
[  480.408526][T15107] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2516'.
[  480.620709][T15112] netlink: 165 bytes leftover after parsing attributes in process `syz.1.2517'.
[  480.756294][T15118] netlink: 332 bytes leftover after parsing attributes in process `syz.0.2518'.
[  481.044524][T15124] net_ratelimit: 16 callbacks suppressed
[  481.044543][T15124] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  481.306633][ T1153] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  481.341411][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  481.361496][ T1153] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  481.437171][T15137] xt_CT: You must specify a L4 protocol and not use inversions on it
[  481.776707][T15147] Cannot find map_set index 135 as target
[  481.870003][T15154] openvswitch: netlink: VXLAN extension 317 out of range max 1
[  482.104638][ T1153] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  482.113212][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  482.127590][ T5722] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  482.179766][T15161] Bluetooth: ISO socket layer initialized
[  482.351499][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  482.562141][   T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  482.612373][   T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  482.634358][T15163] 8021q: adding VLAN 0 to HW filter on device bond10
[  482.837518][T15172] veth0: Caught tx_queue_len zero misconfig
[  482.862088][T15172] netlink: 'syz.0.2537': attribute type 3 has an invalid length.
[  483.229237][T15191] __nla_validate_parse: 10 callbacks suppressed
[  483.229258][T15191] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2542'.
[  483.252386][ T1153] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  483.341426][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  483.467143][T15195] block nbd0: not configured, cannot reconfigure
[  483.536271][T15198] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2544'.
[  483.601579][T15198] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2544'.
[  483.632134][T15198] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2544'.
[  483.960512][T15211] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2548'.
[  483.988702][T15211] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2548'.
[  484.064616][T15211] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains
[  484.127529][T15211] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2548'.
[  484.171659][T10535] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  484.351335][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  485.204852][T15248] bridge9: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  485.499307][T15252] bridge10: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms)
[  485.531368][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  485.967802][T15277] ip6erspan1: entered allmulticast mode
[  485.985842][T15277] 8021q: adding VLAN 0 to HW filter on device team0
[  486.029633][T15287] netlink: 'syz.4.2565': attribute type 4 has an invalid length.
[  486.074219][T15277] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode
[  486.100993][T15287] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2565'.
[  486.363559][T15277] 8021q: adding VLAN 0 to HW filter on device bond2
[  486.380798][T15277] 8021q: adding VLAN 0 to HW filter on device bond4
[  486.393954][T15277] 8021q: adding VLAN 0 to HW filter on device bond5
[  486.403109][ T9759] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  486.420399][T15277] 8021q: adding VLAN 0 to HW filter on device bond7
[  486.439630][T15277] 8021q: adding VLAN 0 to HW filter on device bond8
[  486.571365][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  486.594149][ T1153] net_ratelimit: 15 callbacks suppressed
[  486.594169][ T1153] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  486.608538][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  486.660724][T15287] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  486.679370][ T9762] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  487.122079][T12727] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  487.158543][T12727] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  487.209203][   T48] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  487.268193][   T48] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  487.278634][ T9759] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  487.410731][   T48] bond6: (slave veth7): link status definitely up, 10000 Mbps full duplex
[  487.478041][   T48] bond6: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  487.504313][   T48] bond6: active interface up!
[  487.561697][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  487.706622][T15338] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2573'.
[  487.746386][T15341] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2574'.
[  487.762795][   T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  487.771466][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  487.818881][T15343] xt_cluster: you have exceeded the maximum number of cluster nodes (2048 > 32)
[  487.949119][T15341] 8021q: adding VLAN 0 to HW filter on device team1
[  487.964422][T15346] ipt_REJECT: TCP_RESET invalid for non-tcp
[  488.024202][ T9759] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  488.058414][ T9759] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  488.176129][T15349] netlink: 'syz.2.2578': attribute type 1 has an invalid length.
[  488.322702][ T5751] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  488.515113][ T1002] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  488.821049][T15374] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2586'.
[  489.143438][T15381] tipc: Enabling of bearer <dth:sy> rejected, media not registered
[  489.374773][T15381] netlink: 288 bytes leftover after parsing attributes in process `syz.3.2587'.
[  489.804585][T15409] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2597'.
[  489.852021][T15403] lo speed is unknown, defaulting to 1000
[  489.882878][T15403] lo speed is unknown, defaulting to 1000
[  490.414538][T15424] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2602'.
[  490.460172][T15424] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2602'.
[  490.487239][T15428] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2603'.
[  490.508653][T15424] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2602'.
[  490.582207][    C1] ip6_tnl_xmit_ctl: 3 callbacks suppressed
[  490.582227][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  490.890243][T15444] netlink: 'syz.3.2605': attribute type 2 has an invalid length.
[  490.965942][T15448] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2607'.
[  490.981492][    C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  491.017188][T15444] : entered promiscuous mode
[  491.032848][T15448] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2607'.
[  491.304791][T15454] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2609'.
[  491.401159][T15459] netlink: 'syz.2.2609': attribute type 4 has an invalid length.
[  491.624082][ T5345] lo speed is unknown, defaulting to 1000
[  491.681383][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  491.690246][ T5345] syz1: Port: 1 Link DOWN
[  491.740090][ T9759] lo speed is unknown, defaulting to 1000
[  491.978760][ T1002] net_ratelimit: 16 callbacks suppressed
[  491.978781][ T1002] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  492.045970][ T1002] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  492.514355][   T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  492.523261][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  492.741431][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  493.196420][   T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  493.253803][   T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  493.691531][   T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  493.699946][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  493.801345][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  493.855556][T15535] wg1 speed is unknown, defaulting to 1000
[  493.880593][T15535] wg1 speed is unknown, defaulting to 1000
[  493.916581][T15535] wg1 speed is unknown, defaulting to 1000
[  494.159621][T15543] __nla_validate_parse: 12 callbacks suppressed
[  494.159644][T15543] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2637'.
[  494.242526][T15545] netlink: 252 bytes leftover after parsing attributes in process `syz.4.2637'.
[  494.354838][T15543] gre3: entered promiscuous mode
[  494.414708][   T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  494.423949][ T5751] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  494.831559][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  495.055953][T15535] infiniband syz2: set down
[  495.060851][ T9759] wg1 speed is unknown, defaulting to 1000
[  495.080257][T15535] infiniband syz2: added wg1
[  495.167217][T15535] smbdirect: ib_dev[syz2]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000
[  495.182972][T15535] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32
[  495.200888][T15535] smbdirect: ib_dev[syz2]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005
[  495.439295][T15535] RDS/IB: syz2: added
[  495.476034][T15535] smc: adding ib device syz2 with port count 1
[  495.518207][T15535] smc:    ib device syz2 port 1 has no pnetid
[  495.580807][ T9759] wg1 speed is unknown, defaulting to 1000
[  495.613495][T15535] wg1 speed is unknown, defaulting to 1000
[  495.787719][T15586] netlink: 'syz.2.2650': attribute type 29 has an invalid length.
[  495.821394][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  495.880623][T15586] netlink: 'syz.2.2650': attribute type 29 has an invalid length.
[  495.935666][T15586] netlink: 'syz.2.2650': attribute type 29 has an invalid length.
[  496.274417][T15593] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2651'.
[  496.893215][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  496.931942][T15535] wg1 speed is unknown, defaulting to 1000
[  497.093815][   T12] net_ratelimit: 14 callbacks suppressed
[  497.093835][   T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  497.108073][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  497.215337][T15610] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2655'.
[  497.244529][T15608] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2654'.
[  497.462462][ T5750] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  497.471030][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  497.825204][   T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  497.879625][   T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  497.901435][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  497.939747][T15626] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2661'.
[  498.101497][    C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  498.142221][T15535] wg1 speed is unknown, defaulting to 1000
[  498.272753][T12722] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  498.281437][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  498.398546][T15636] tc action pedit 'at' offset 5 out of bounds
[  498.413361][T15643] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2664'.
[  498.507997][T15645] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2667'.
[  498.866997][T15655] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2669'.
[  498.912721][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  499.041567][T12727] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  499.073799][T12727] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  500.061426][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  501.061635][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  501.297425][T15535] wg1 speed is unknown, defaulting to 1000
[  501.308875][ T1299] ieee802154 phy1 wpan1: encryption failed: -22
[  501.317247][ T1299] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  501.706011][T15700] sctp: [Deprecated]: syz.2.2674 (pid 15700) Use of struct sctp_assoc_value in delayed_ack socket option.
[  501.706011][T15700] Use struct sctp_sack_info instead
[  501.879766][T15712] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2675'.
[  502.129792][T15720] net_ratelimit: 15 callbacks suppressed
[  502.129811][T15720] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  502.145104][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  502.459288][T12722] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  502.509338][T12722] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  502.585640][T12727] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  502.594096][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  502.833752][   T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  502.842439][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  503.062407][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  503.084707][T15535] wg1 speed is unknown, defaulting to 1000
[  503.118447][T15746] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2686'.
[  503.269660][T15752] netlink: 'syz.3.2687': attribute type 21 has an invalid length.
[  503.352082][T15752] netlink: 'syz.3.2687': attribute type 22 has an invalid length.
[  503.411487][T15752] netlink: 'syz.3.2687': attribute type 23 has an invalid length.
[  503.519901][T15752] netlink: 'syz.3.2687': attribute type 25 has an invalid length.
[  503.542376][ T5750] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  503.550844][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  503.574828][T15752] netlink: 'syz.3.2687': attribute type 26 has an invalid length.
[  503.628892][T15752] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2687'.
[  503.695863][T12722] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  504.090202][T15769] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2690'.
[  504.161392][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  504.295699][T15771] netlink: 'syz.4.2691': attribute type 7 has an invalid length.
[  504.360220][T15771] netlink: 'syz.4.2691': attribute type 8 has an invalid length.
[  504.371714][T15775] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2691'.
[  504.456725][T15773] vlan3: entered promiscuous mode
[  504.478731][T15773] hsr0: entered promiscuous mode
[  504.497131][T15773] vlan3: entered allmulticast mode
[  504.531308][T15773] hsr0: entered allmulticast mode
[  504.548955][T15773] hsr_slave_0: entered allmulticast mode
[  504.582340][T15773] hsr_slave_1: entered allmulticast mode
[  504.681742][T15781] bond10: option arp_all_targets: invalid value (18446744073709551613)
[  504.717546][T15781] bond10 (unregistering): Released all slaves
[  504.905974][T15787] netlink: 108 bytes leftover after parsing attributes in process `syz.2.2695'.
[  504.953010][T15789] netlink: 'syz.4.2696': attribute type 13 has an invalid length.
[  504.983668][T15789] netlink: 'syz.4.2696': attribute type 58 has an invalid length.
[  505.030764][T15789] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2696'.
[  505.152859][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  505.161747][T15793] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2698'.
[  505.972060][T15815] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode
[  506.015550][T15815] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode
[  506.231381][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  506.700316][T15843] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2711'.
[  506.831772][T15841] veth11: entered allmulticast mode
[  506.857657][T15848] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2713'.
[  506.897062][T15848] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2713'.
[  507.025257][T15855] netlink: 'syz.4.2715': attribute type 29 has an invalid length.
[  507.051303][T15855] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2715'.
[  507.105056][T15855] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2715'.
[  507.242125][   T48] net_ratelimit: 15 callbacks suppressed
[  507.242144][   T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  507.301924][T15866] x_tables: unsorted entry at hook 3
[  507.312727][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  507.375445][   T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  507.515765][T12726] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  507.524776][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  507.678439][T15870] 8021q: adding VLAN 0 to HW filter on device bond16
[  507.704129][ T1006] wlan0: Trigger new scan to find an IBSS to join
[  507.719194][   T62] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  507.727859][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  507.766106][T15880] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2720'.
[  508.331390][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  508.516217][T15899] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2725'.
[  508.603018][ T1006] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  508.650375][ T1006] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  508.777177][   T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  508.786141][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  508.857963][T15905] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2727'.
[  508.888804][T15909] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2729'.
[  509.144573][T15919] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.2731'.
[  509.312270][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  510.268786][T15947] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2739'.
[  510.361353][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  510.743583][T12726] wlan0: Trigger new scan to find an IBSS to join
[  510.957124][T15959] Bluetooth: hci0: invalid length 0, exp 2 for type 11
[  511.158549][T15966] tunl0: entered promiscuous mode
[  511.251036][T15966] validate_nla: 2 callbacks suppressed
[  511.251137][T15966] netlink: 'syz.0.2747': attribute type 3 has an invalid length.
[  511.271525][T15966] netlink: 9 bytes leftover after parsing attributes in process `syz.0.2747'.
[  511.421806][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  511.980661][T15986] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2752'.
[  512.133949][T15990] syzkaller0: entered promiscuous mode
[  512.166243][T15990] syzkaller0: entered allmulticast mode
[  512.250203][T15992] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  512.263124][T12727] net_ratelimit: 14 callbacks suppressed
[  512.263145][T12727] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  512.277761][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  512.346783][T15990] Bluetooth: hci0: unsupported parameter 5134
[  512.376525][T15992] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  512.386770][T15990] Bluetooth: hci0: unsupported parameter 8192
[  512.432984][T15990] Bluetooth: hci0: unsupported parameter 5134
[  512.442144][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  512.467509][T15990] Bluetooth: hci0: unsupported parameter 8192
[  512.661745][ T5751] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  512.671511][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  512.821438][    C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  513.242492][T12722] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  513.275666][T12722] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  513.368063][T16024] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2765'.
[  513.464461][T12722] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  513.473162][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  513.485134][T12726] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  513.493814][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  513.507621][T16027] syzkaller0: entered promiscuous mode
[  513.534075][T16027] syzkaller0: entered allmulticast mode
[  513.621740][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  513.704481][ T1006] wlan0: Trigger new scan to find an IBSS to join
[  513.996247][T16039] netlink: 'syz.4.2770': attribute type 5 has an invalid length.
[  514.368936][T16052] af_packet: packet size is too long (35212 > 1484)
[  514.400594][T16052] xt_ecn: cannot match TCP bits for non-tcp packets
[  514.571327][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  514.648859][T12722] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  514.850880][T16066] netlink: 76 bytes leftover after parsing attributes in process `syz.4.2779'.
[  515.005779][T16072] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2781'.
[  515.053583][T16072] netlink: 6 bytes leftover after parsing attributes in process `syz.1.2781'.
[  515.391462][T16085] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2785'.
[  515.581357][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  515.804922][T16093] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2787'.
[  515.860606][T16105] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2791'.
[  515.866509][T16093] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2787'.
[  515.932519][T16109] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2791'.
[  516.424034][T16121] netlink: 'syz.3.2795': attribute type 15 has an invalid length.
[  516.528527][T16129] ieee802154 phy1 wpan1: encryption failed: -22
[  516.631860][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  517.185689][T16146] mac80211_hwsim hwsim24 wlan0: entered promiscuous mode
[  517.238992][T16148] __nla_validate_parse: 3 callbacks suppressed
[  517.239024][T16148] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2804'.
[  517.309646][   T48] net_ratelimit: 18 callbacks suppressed
[  517.309664][   T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  517.397398][T16148] ip6tnl1: entered allmulticast mode
[  517.669479][T16157] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2808'.
[  517.691344][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  517.803148][T12727] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  517.843836][T16164] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2812'.
[  517.862190][T12727] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  518.046086][   T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  518.055009][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  518.106670][T16170] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2813'.
[  518.427742][T16182] syzkaller1: entered promiscuous mode
[  518.465257][T16182] syzkaller1: entered allmulticast mode
[  518.495199][T16188] netlink: 'syz.3.2818': attribute type 1 has an invalid length.
[  518.748692][ T5722] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  518.757237][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  518.801367][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  518.806681][T16189] 8021q: adding VLAN 0 to HW filter on device bond0
[  518.833033][T16189] 8021q: adding VLAN 0 to HW filter on device batadv0
[  518.882651][T16197] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2819'.
[  518.946935][T16189] batman_adv: batadv0: Interface activated: batadv_slave_1
[  518.975988][T16189] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  518.987409][T16189] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  519.016808][T12727] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  519.030530][T16189] veth1_vlan: left promiscuous mode
[  519.036551][T12727] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  519.048490][T16189] veth0_vlan: left promiscuous mode
[  519.067884][T16189] veth0_vlan: entered promiscuous mode
[  519.094239][T16189] veth1_vlan: entered promiscuous mode
[  519.129101][T16189] veth1_macvtap: left promiscuous mode
[  519.164571][T16189] veth0_macvtap: left promiscuous mode
[  519.173054][T16189] veth0_macvtap: entered promiscuous mode
[  519.183492][T16189] veth1_macvtap: entered promiscuous mode
[  519.222187][T12726] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  519.237213][T16189] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  519.248517][T16189] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  519.259181][T16189] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  519.269987][T16189] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  519.294570][T16189] 8021q: adding VLAN 0 to HW filter on device bond1
[  519.309918][T16189] 8021q: adding VLAN 0 to HW filter on device bond2
[  519.339384][T16189] 8021q: adding VLAN 0 to HW filter on device bond3
[  519.358732][T16189] 8021q: adding VLAN 0 to HW filter on device bond4
[  519.383853][T16189] gretap2: left allmulticast mode
[  519.404845][T16189] vlan2: left allmulticast mode
[  519.409897][T16189] geneve1: left allmulticast mode
[  519.427047][T16189] 8021q: adding VLAN 0 to HW filter on device bond7
[  519.439247][T16189] 8021q: adding VLAN 0 to HW filter on device bond8
[  519.462635][T16189] 8021q: adding VLAN 0 to HW filter on device bond9
[  519.489539][T16189] 8021q: adding VLAN 0 to HW filter on device bond10
[  519.511764][T16189] vlan3: left allmulticast mode
[  519.516801][T16189] hsr0: left allmulticast mode
[  519.522868][T16189] hsr_slave_0: left allmulticast mode
[  519.528737][T16189] hsr_slave_1: left allmulticast mode
[  519.540932][T16189] syzkaller1: left allmulticast mode
[  519.549395][ T5750] lo speed is unknown, defaulting to 1000
[  519.563233][ T5750] syz1: Port: 1 Link ACTIVE
[  519.573286][T16188] workqueue: Failed to create a rescuer kthread for wq "bond10": -EINTR
[  519.578269][ T5750] lo speed is unknown, defaulting to 1000
[  519.798836][ T1006] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  519.820091][ T1006] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  519.831422][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  519.855878][T16201] vlan4: entered promiscuous mode
[  519.861021][T16201] hsr0: entered promiscuous mode
[  519.883849][T16201] vlan4: entered allmulticast mode
[  519.907042][T16201] hsr0: entered allmulticast mode
[  519.928493][T16201] hsr_slave_1: entered allmulticast mode
[  519.947670][T16216] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2824'.
[  519.969449][T16216] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2824'.
[  519.991992][T16219] netlink: 'syz.1.2825': attribute type 2 has an invalid length.
[  520.010437][   T48] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  520.027802][   T48] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  520.313926][T12722] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  520.337377][ T9762] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  520.346767][T12722] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  520.376029][T12722] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  520.443399][ T9762] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  520.546229][T12726] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  520.589101][T12726] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  520.711616][T12722] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  520.734271][T16233] netlink: 'syz.4.2830': attribute type 2 has an invalid length.
[  520.756147][ T9762] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  520.784972][T12722] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  521.094341][T16236] wg2: Caught tx_queue_len zero misconfig
[  521.615936][T16271] x_tables: duplicate entry at hook 2
[  521.685632][T16271] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2836'.
[  521.759552][T16271] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2836'.
[  521.811339][    C1] ip6_tnl_xmit_ctl: 1 callbacks suppressed
[  521.811357][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  521.838385][T16278] netlink: 'syz.1.2839': attribute type 16 has an invalid length.
[  521.878525][T16278] netlink: 'syz.1.2839': attribute type 3 has an invalid length.
[  521.900558][T16278] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2839'.
[  522.041028][T16283] geneve3: entered promiscuous mode
[  522.375624][T16300] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2842'.
[  522.389198][T12722] net_ratelimit: 14 callbacks suppressed
[  522.389219][T12722] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  522.475863][T16298] netlink: 'syz.2.2842': attribute type 12 has an invalid length.
[  522.494088][T12722] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  522.592566][T16310] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2845'.
[  522.647398][T16311] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  522.656035][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  522.665141][T12727] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  522.673658][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  522.690187][T16312] netlink: 'syz.4.2845': attribute type 16 has an invalid length.
[  522.725828][T16311] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  522.730199][T16312] netlink: 31522 bytes leftover after parsing attributes in process `syz.4.2845'.
[  522.735000][T16311] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  522.753866][T16311] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  522.852514][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  522.887994][T16316] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2846'.
[  522.901135][T16319] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2847'.
[  523.333607][T16309] lo speed is unknown, defaulting to 1000
[  523.506126][T16309] lo speed is unknown, defaulting to 1000
[  523.619387][T16337] 8021q: VLANs not supported on ipvlan0
[  523.644745][ T1006] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  524.001405][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  524.014367][T16352] netlink: 120 bytes leftover after parsing attributes in process `syz.2.2856'.
[  524.339680][T16360] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2859'.
[  524.588882][T16309] wg1 speed is unknown, defaulting to 1000
[  524.703004][T16369] macvlan0: entered promiscuous mode
[  524.741632][    C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  524.821407][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  524.901967][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  525.730637][T16383] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  525.740761][T16383] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  525.749892][T16383] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  525.761880][T16383] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  525.780793][T16383] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  525.981884][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  526.611091][T16397] netlink: 'syz.3.2869': attribute type 2 has an invalid length.
[  526.978124][T12722] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  527.007320][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  527.047541][T12722] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  527.290441][T16411] netlink: 'syz.3.2873': attribute type 1 has an invalid length.
[  527.604118][T16411] 8021q: adding VLAN 0 to HW filter on device bond10
[  527.836269][T12722] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  527.861223][T12722] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  527.864408][ T4929] Bluetooth: hci5: command tx timeout
[  528.028391][T16427] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2878'.
[  528.060917][T12722] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  528.096834][T16429] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2878'.
[  528.112392][T12722] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  528.131373][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  528.162833][T16429] net_ratelimit: 32 callbacks suppressed
[  528.162857][T16429] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  528.196973][ T1002] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  528.205252][ T1002] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  528.233143][ T1002] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  528.241470][ T1002] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  528.316021][ T1002] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  528.324334][ T1002] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  528.575237][T12722] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  528.638036][T12722] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  528.664922][T16437] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2880'.
[  528.717375][T16437] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2880'.
[  528.826096][T16380] lo speed is unknown, defaulting to 1000
[  528.907970][T16380] lo speed is unknown, defaulting to 1000
[  529.121341][T16435] syzkaller0: entered promiscuous mode
[  529.187603][T16435] syzkaller0: entered allmulticast mode
[  529.221427][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  529.425294][   T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  529.433576][   T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  529.472840][   T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  529.848129][T16463] x_tables: duplicate underflow at hook 3
[  529.941277][ T4929] Bluetooth: hci5: command tx timeout
[  530.111583][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  530.434924][T12722] vlan3: left allmulticast mode
[  530.467852][T12722] geneve0: left allmulticast mode
[  530.493466][T12722] vlan3: left promiscuous mode
[  530.512745][T12722] geneve0: left promiscuous mode
[  530.521103][T16480] Bluetooth: hci0: invalid length 0, exp 2 for type 18
[  530.538921][T12722] bridge0: port 1(vlan3) entered disabled state
[  530.590580][T12722] bridge_slave_1: left allmulticast mode
[  530.610892][T12722] bridge_slave_1: left promiscuous mode
[  530.632439][T12722] bridge0: port 2(bridge_slave_1) entered disabled state
[  530.763121][T12722] pimreg: left allmulticast mode
[  531.134622][T12722] bond2 (unregistering): (slave erspan1): Releasing active interface
[  531.197329][T12722] bond5 (unregistering): (slave gretap1): Releasing active interface
[  531.205820][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  531.239342][T12722] bond9 (unregistering): (slave gretap2): Releasing backup interface
[  531.374210][T12722] bond1 (unregistering): (slave geneve2): Releasing active interface
[  531.504892][T12722] .` (unregistering): (slave bond_slave_0): Releasing backup interface
[  531.519135][T12722] .` (unregistering): (slave bond_slave_1): Releasing backup interface
[  531.531823][T12722] .` (unregistering): Released all slaves
[  531.565334][T12722] bond1 (unregistering): Released all slaves
[  531.596056][T12722] bond2 (unregistering): Released all slaves
[  531.632787][T12722] bond3 (unregistering): Released all slaves
[  531.656759][T12722] bond4 (unregistering): Released all slaves
[  531.687051][T12722] bond5 (unregistering): Released all slaves
[  531.717960][T12722] bond6 (unregistering): Released all slaves
[  531.751769][T12722] bond7 (unregistering): Released all slaves
[  531.776691][T12722] bond8 (unregistering): Released all slaves
[  531.819751][T12722] bond0 (unregistering): (slave veth7): Releasing active interface
[  531.830842][T12722] bond0 (unregistering): Released all slaves
[  531.859045][T12722] bond9 (unregistering): (slave bond10): Releasing backup interface
[  531.875298][T12722] bond9 (unregistering): Released all slaves
[  531.897477][T12722] bond10 (unregistering): Released all slaves
[  531.923318][T12722] bond11 (unregistering): Released all slaves
[  531.960467][T12722] bond12 (unregistering): Released all slaves
[  531.987215][T12722] bond13 (unregistering): (slave veth0_to_bond): Releasing active interface
[  532.005372][T12722] bond13 (unregistering): Released all slaves
[  532.027731][T12722] bond14 (unregistering): Released all slaves
[  532.038187][ T4929] Bluetooth: hci5: command tx timeout
[  532.059965][T12722] bond15 (unregistering): Released all slaves
[  532.091287][T12722] bond16 (unregistering): Released all slaves
[  532.211310][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  532.302737][T16380] wg1 speed is unknown, defaulting to 1000
[  532.482643][T12722] : left promiscuous mode
[  532.707064][T16491] netlink: 'syz.3.2894': attribute type 1 has an invalid length.
[  532.782650][T16491] netlink: 'syz.3.2894': attribute type 1 has an invalid length.
[  533.281802][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  533.302470][    C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  533.408828][T16513] gre2: entered promiscuous mode
[  533.465207][T16513] gre2: entered allmulticast mode
[  533.945600][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  534.104141][ T4929] Bluetooth: hci5: command tx timeout
[  534.351672][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  535.050540][ T5274] 8021q: adding VLAN 0 to HW filter on device eth1
[  535.127559][T16551] net_ratelimit: 9 callbacks suppressed
[  535.127578][T16551] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  535.177996][T16556] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2906'.
[  535.301812][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  535.407601][T16559] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2907'.
[  535.885841][T16567] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2910'.
[  535.960673][T16568] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2910'.
[  536.471471][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  536.836369][T16594] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2915'.
[  537.411644][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  537.584713][T16617] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2918'.
[  537.879986][T16634] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2920'.
[  537.914320][T16626] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2920'.
[  538.344271][T16649] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2926'.
[  538.371337][T16649] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2926'.
[  538.452252][T16652] xt_hashlimit: size too large, truncated to 1048576
[  538.491299][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  538.507514][ T5274] 8021q: adding VLAN 0 to HW filter on device eth2
[  538.632846][T16380] bridge0: port 1(bridge_slave_0) entered blocking state
[  538.659743][T16380] bridge0: port 1(bridge_slave_0) entered disabled state
[  538.704086][T16380] bridge_slave_0: entered allmulticast mode
[  538.807687][T16380] bridge_slave_0: entered promiscuous mode
[  538.860953][T16380] bridge0: port 2(bridge_slave_1) entered blocking state
[  538.908309][T16380] bridge0: port 2(bridge_slave_1) entered disabled state
[  538.941986][T16380] bridge_slave_1: entered allmulticast mode
[  538.997881][T16380] bridge_slave_1: entered promiscuous mode
[  539.256564][T12722] hsr_slave_0: left promiscuous mode
[  539.292843][T12722] hsr_slave_1: left promiscuous mode
[  539.330837][T12722] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  539.344858][T12722] batman_adv: batadv0: Removing interface: batadv_slave_1
[  539.408127][T12722] veth1_vlan: left promiscuous mode
[  539.481916][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  540.393121][T16380] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  540.450459][T16380] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  540.561384][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  540.733184][T16380] team0: Port device team_slave_0 added
[  540.841664][T16703] netlink: 'syz.2.2935': attribute type 10 has an invalid length.
[  540.911143][T16380] team0: Port device team_slave_1 added
[  541.289713][T16380] batman_adv: batadv0: Adding interface: batadv_slave_0
[  541.315930][T16380] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  541.387963][T16716] __nla_validate_parse: 1 callbacks suppressed
[  541.387982][T16716] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2941'.
[  541.434622][T16380] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  541.587770][T16380] batman_adv: batadv0: Adding interface: batadv_slave_1
[  541.611663][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  541.621523][    C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  541.636678][T16380] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  541.827598][T16380] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  541.981946][T12722] IPVS: stop unused estimator thread 0...
[  542.190038][T16380] hsr_slave_0: entered promiscuous mode
[  542.229778][T16380] hsr_slave_1: entered promiscuous mode
[  542.271714][T16380] debugfs: 'hsr0' already exists in 'hsr'
[  542.299870][T16380] Cannot create hsr debugfs directory
[  542.582923][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  543.363625][T16773] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2953'.
[  543.651419][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  543.657914][T16780] openvswitch: netlink: Tunnel attr 0 has unexpected len 0 expected 8
[  543.705102][T16781] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  544.014511][T16793] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2958'.
[  544.048488][T16793] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2958'.
[  544.751760][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  545.009535][T16820] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2961'.
[  545.093878][T16813] macsec0: entered promiscuous mode
[  545.534521][T16833] can: request_module (can-proto-0) failed.
[  545.781418][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  546.052417][T16843] syzkaller0: entered promiscuous mode
[  546.109419][T16843] syzkaller0: entered allmulticast mode
[  546.412433][T16865] netlink: 'syz.3.2968': attribute type 83 has an invalid length.
[  546.741880][ T1160] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  546.801683][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  547.499781][T16853] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  547.941819][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  548.770158][T10535] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  548.841358][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  549.871702][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  549.905551][ T9762] lo speed is unknown, defaulting to 1000
[  549.931853][ T9762] syz1: Port: 1 Link DOWN
[  550.132110][ T1153] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  550.183251][ T1153] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  550.285376][ T5345] lo speed is unknown, defaulting to 1000
[  550.301271][T12722] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  550.320675][T12722] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  550.369816][T12722] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  550.426977][T12722] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  550.463239][T12722] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  550.488670][T16912] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2971'.
[  550.518971][T12722] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  550.640266][T16922] netlink: 'syz.1.2973': attribute type 11 has an invalid length.
[  550.692760][T16922] netlink: 'syz.1.2973': attribute type 4 has an invalid length.
[  550.747330][T16922] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2973'.
[  550.763959][T16925] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2974'.
[  550.971369][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  551.187949][T16940] netlink: 27 bytes leftover after parsing attributes in process `syz.1.2975'.
[  551.545258][T16947] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2976'.
[  551.596458][T16947] nbd: illegal input index -8454144
[  552.011390][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  553.044853][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  554.041295][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  555.101689][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  556.141618][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  556.402753][T16380] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  556.455243][T17028] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2978'.
[  556.476747][T16380] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  556.499837][T16380] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  556.536133][T16380] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  556.618560][T17033] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  556.745359][T16380] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  556.807617][T16380] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  556.856498][T16380] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  556.935183][T16380] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  557.161310][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  557.170945][T17057] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2983'.
[  557.237168][T17057] netlink: 112 bytes leftover after parsing attributes in process `syz.3.2983'.
[  557.427376][T17074] netlink: 'syz.1.2985': attribute type 1 has an invalid length.
[  557.621424][    C0] ip6_tunnel: ip6gre3 xmit: Local address not yet configured!
[  557.966955][T17074] bond11: entered promiscuous mode
[  557.991406][T17074] bond11: entered allmulticast mode
[  557.997377][T17074] 8021q: adding VLAN 0 to HW filter on device bond11
[  558.029239][T17078] erspan1: entered allmulticast mode
[  558.053682][T17078] bond11: (slave erspan1): making interface the new active one
[  558.061903][T17078] erspan1: entered promiscuous mode
[  558.078322][T17078] bond11: (slave erspan1): Enslaving as an active interface with an up link
[  558.100179][T17083] netlink: 'syz.4.2988': attribute type 8 has an invalid length.
[  558.122783][T17083] sch_fq: defrate 0 ignored.
[  558.130172][T17078] syz.1.2985 (17078) used greatest stack depth: 18144 bytes left
[  558.211377][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  558.564096][T17112] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2992'.
[  558.574616][T16380] 8021q: adding VLAN 0 to HW filter on device bond0
[  558.683151][T16380] 8021q: adding VLAN 0 to HW filter on device team0
[  558.699057][T17106] smbdirect: ib_dev[syz0] removed
[  558.729594][   T48] bridge0: port 1(bridge_slave_0) entered blocking state
[  558.736987][   T48] bridge0: port 1(bridge_slave_0) entered forwarding state
[  558.814650][   T48] bridge0: port 2(bridge_slave_1) entered blocking state
[  558.821887][   T48] bridge0: port 2(bridge_slave_1) entered forwarding state
[  559.159599][T17125] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2995'.
[  559.241352][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  559.798832][   T30] audit: type=1804 audit(1787158292.448:8): pid=17148 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.3002" name="/newroot/618/cgroup.controllers" dev="tmpfs" ino=3172 res=1 errno=0
[  559.850076][T17148] netlink: 'syz.4.3002': attribute type 11 has an invalid length.
[  559.880436][   T30] audit: type=1800 audit(1787158292.448:9): pid=17148 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.3002" name="cgroup.controllers" dev="tmpfs" ino=3172 res=0 errno=0
[  560.032910][T17157] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3003'.
[  560.331620][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  560.565404][T17173] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3004'.
[  560.897183][T17181] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3008'.
[  560.969675][T17181] netlink: 'syz.3.3008': attribute type 2 has an invalid length.
[  561.289218][T17201] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048)
[  561.401329][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  561.440254][T17205] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3013'.
[  561.529082][T16380] 8021q: adding VLAN 0 to HW filter on device batadv0
[  561.762675][T17213] Bluetooth: hci1: too big key_count value 32778
[  561.797529][T16380] veth0_vlan: entered promiscuous mode
[  561.817463][T17213] Bluetooth: hci1: too big key_count value 32778
[  561.829240][T16380] veth1_vlan: entered promiscuous mode
[  561.934800][T16380] veth0_macvtap: entered promiscuous mode
[  561.979444][T16380] veth1_macvtap: entered promiscuous mode
[  562.046074][T16380] batman_adv: batadv0: Interface activated: batadv_slave_0
[  562.076954][T17221] netlink: 'syz.2.3018': attribute type 16 has an invalid length.
[  562.093425][T16380] batman_adv: batadv0: Interface activated: batadv_slave_1
[  562.130970][T17221] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3018'.
[  562.212701][ T1153] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  562.237095][T17221] veth0_macvtap: entered allmulticast mode
[  562.404141][ T1160] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  562.522272][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  562.573363][T12722] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  562.685992][T17227] can: request_module (can-proto-0) failed.
[  562.742819][ T1299] ieee802154 phy1 wpan1: encryption failed: -22
[  562.749993][ T1299] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  562.787283][T12722] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  562.882909][T17237] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  562.921399][T17242] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3023'.
[  562.963299][T17237] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  562.985679][T17244] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3023'.
[  563.018166][T12722] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  563.062699][T17237] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  563.075552][T12722] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  563.145285][T17237] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  563.182293][T17237] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  563.224246][T17237] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  563.262517][T17237] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  563.307621][T17237] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  563.369234][T17237] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  563.430856][T17237] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  563.462065][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  563.547628][T17256] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3024'.
[  563.698876][T17251] netlink: 72 bytes leftover after parsing attributes in process `syz.1.3024'.
[  563.741922][T17251] netlink: 72 bytes leftover after parsing attributes in process `syz.1.3024'.
[  563.776857][T17253] netlink: 312 bytes leftover after parsing attributes in process `syz.2.3025'.
[  563.816179][ T1006] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  563.840553][ T1006] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  564.203232][T17270] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3028'.
[  564.309599][T17272] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2863'.
[  564.431617][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  564.520753][T17277] netlink: 'syz.4.3033': attribute type 1 has an invalid length.
[  564.626171][T17278] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3033'.
[  564.683890][T17277] 8021q: adding VLAN 0 to HW filter on device bond7
[  564.723539][T17274] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  564.751527][T17277] bond7: (slave geneve3): making interface the new active one
[  564.792774][T17277] bond7: (slave geneve3): Enslaving as an active interface with an up link
[  564.926744][T17288] netlink: 'syz.2.3035': attribute type 32 has an invalid length.
[  565.030540][T17288] bond11: option coupled_control: invalid value (192)
[  565.079429][T16383] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  565.100069][T17288] bond11 (unregistering): Released all slaves
[  565.115189][T16383] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  565.126240][T16383] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  565.136125][T16383] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  565.145268][T16383] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  565.511331][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  566.319902][   T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  566.641620][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  566.857922][   T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  567.224928][ T4929] Bluetooth: hci2: command tx timeout
[  567.424160][T17370] __nla_validate_parse: 8 callbacks suppressed
[  567.424182][T17370] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3054'.
[  567.553656][   T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  567.581490][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  567.645196][T17293] lo speed is unknown, defaulting to 1000
[  567.792906][   T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  567.980015][T17385] xt_CT: You must specify a L4 protocol and not use inversions on it
[  568.185046][T17390] netlink: 'syz.0.3059': attribute type 1 has an invalid length.
[  568.250675][T17390] netlink: 'syz.0.3059': attribute type 2 has an invalid length.
[  568.328360][T17392] netlink: 'syz.0.3059': attribute type 1 has an invalid length.
[  568.414946][T17392] netlink: 'syz.0.3059': attribute type 2 has an invalid length.
[  568.582779][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  569.301777][ T4929] Bluetooth: hci2: command tx timeout
[  569.344479][   T12] bridge_slave_1: left allmulticast mode
[  569.391097][   T12] bridge_slave_1: left promiscuous mode
[  569.415837][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  569.657844][T17426] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3070'.
[  569.744368][T17428] tipc: Failed to remove unknown binding: 66,0,0/2886997039:768761543/768761544
[  569.777560][T17428] tipc: Failed to remove unknown binding: 66,0,0/2886997039:768761543/768761544
[  569.909031][   T12] bond3 (unregistering): (slave ip6gre1): Releasing backup interface
[  569.918880][   T12] ip6gre1 (unregistering): left promiscuous mode
[  570.133940][T17430] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3071'.
[  570.910929][   T12] bond1 (unregistering): (slave vlan2): Releasing active interface
[  570.940161][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  570.958542][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  570.973756][   T12] bond0 (unregistering): (slave team0): Releasing backup interface
[  570.985805][   T12] bond0 (unregistering): Released all slaves
[  571.002964][   T12] bond1 (unregistering): Released all slaves
[  571.029646][   T12] bond2 (unregistering): Released all slaves
[  571.054444][   T12] bond3 (unregistering): Released all slaves
[  571.094577][   T12] bond4 (unregistering): Released all slaves
[  571.117687][   T12] bond5 (unregistering): Released all slaves
[  571.154040][   T12] bond6 (unregistering): (slave veth7): Removing an active aggregator
[  571.167998][   T12] bond6 (unregistering): (slave veth7): Releasing backup interface
[  571.179975][   T12] bond6 (unregistering): Released all slaves
[  571.212886][   T12] bond7 (unregistering): Released all slaves
[  571.240069][   T12] bond8 (unregistering): Released all slaves
[  571.288190][   T12] bond9 (unregistering): Released all slaves
[  571.313331][   T12] bond10 (unregistering): Released all slaves
[  571.350532][T17293] wg1 speed is unknown, defaulting to 1000
[  571.384673][ T4929] Bluetooth: hci2: command tx timeout
[  571.718836][T17438] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3073'.
[  571.779292][T17442] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3074'.
[  571.814455][T17436] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3072'.
[  572.235932][T17454] netlink: 'syz.0.3077': attribute type 2 has an invalid length.
[  572.310283][   T12] : left promiscuous mode
[  572.691727][T17454] : entered promiscuous mode
[  572.719873][   T12] tipc: Left network mode
[  572.803986][T17465] ip6tnl0: Caught tx_queue_len zero misconfig
[  572.879433][T17472] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3079'.
[  572.958901][T17469] sit0: Caught tx_queue_len zero misconfig
[  573.463981][ T4929] Bluetooth: hci2: command tx timeout
[  573.616252][ T5274] 8021q: adding VLAN 0 to HW filter on device eth1
[  574.069906][T17508] xt_hashlimit: size too large, truncated to 1048576
[  574.692522][T17527] net_ratelimit: 181 callbacks suppressed
[  574.692543][T17527] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  575.359260][T17544] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3096'.
[  576.022960][T17565] C: renamed from lo (while UP)
[  576.040695][T17565] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  576.061868][T17573] netlink: 'syz.1.3102': attribute type 3 has an invalid length.
[  576.390042][ T5274] 8021q: adding VLAN 0 to HW filter on device eth2
[  576.580396][T17293] bridge0: port 1(bridge_slave_0) entered blocking state
[  576.625540][T17293] bridge0: port 1(bridge_slave_0) entered disabled state
[  576.651765][T17293] bridge_slave_0: entered allmulticast mode
[  576.701855][T17293] bridge_slave_0: entered promiscuous mode
[  576.902684][T17293] bridge0: port 2(bridge_slave_1) entered blocking state
[  576.926066][T17293] bridge0: port 2(bridge_slave_1) entered disabled state
[  576.949188][T17293] bridge_slave_1: entered allmulticast mode
[  577.034280][T17293] bridge_slave_1: entered promiscuous mode
[  577.390177][T17293] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  577.439432][T17293] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  577.449487][T17587] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  577.578711][   T12] hsr_slave_0: left promiscuous mode
[  577.600267][T17604] netlink: 'syz.2.3107': attribute type 33 has an invalid length.
[  577.613302][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  577.659310][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  577.703652][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  577.724339][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  577.783083][   T12] veth1_macvtap: left promiscuous mode
[  577.800497][   T12] veth0_macvtap: left promiscuous mode
[  578.102743][ T1153] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  578.625364][   T12] team0 (unregistering): Port device team_slave_1 removed
[  578.698952][   T12] team0 (unregistering): Port device team_slave_0 removed
[  579.143031][T17604] workqueue: Failed to create a rescuer kthread for wq "bond11": -EINTR
[  579.368050][T17293] team0: Port device team_slave_0 added
[  579.445614][T17293] team0: Port device team_slave_1 added
[  579.543353][T17634] netlink: 228 bytes leftover after parsing attributes in process `syz.0.3115'.
[  579.574234][T17637] ip_tables: iptables: counters copy to user failed while replacing table
[  579.685128][T17293] batman_adv: batadv0: Adding interface: batadv_slave_0
[  579.710452][T17293] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  579.765705][T17293] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  579.785231][T17629] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3114'.
[  579.805159][T17293] batman_adv: batadv0: Adding interface: batadv_slave_1
[  579.822853][T17293] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  579.869981][T17293] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  580.020249][   T12] IPVS: stop unused estimator thread 0...
[  580.545461][T17293] hsr_slave_0: entered promiscuous mode
[  580.580413][T17293] hsr_slave_1: entered promiscuous mode
[  580.702520][T17662] ip6erspan1: entered allmulticast mode
[  580.818084][T17664] bridge0: port 2(bridge_slave_1) entered blocking state
[  580.825376][T17664] bridge0: port 2(bridge_slave_1) entered listening state
[  580.832900][T17664] bridge0: port 1(bridge_slave_0) entered blocking state
[  580.840112][T17664] bridge0: port 1(bridge_slave_0) entered listening state
[  580.975733][T17664] veth0_vlan: left promiscuous mode
[  581.046449][T17664] veth0_vlan: entered promiscuous mode
[  581.162814][T17664] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  581.240328][T17664] 8021q: adding VLAN 0 to HW filter on device batadv1
[  581.325828][T17664] veth0_macvtap: entered promiscuous mode
[  581.377847][T17664] veth1_vlan: entered promiscuous mode
[  581.489795][T17664] A link change request failed with some changes committed already. Interface syztnl2 may have been left with an inconsistent configuration, please check.
[  581.647472][T17678] macvtap1: entered promiscuous mode
[  581.653704][T17678] macvtap1: entered allmulticast mode
[  581.659140][T17678] veth1_vlan: entered allmulticast mode
[  581.676174][ T5274] 8021q: adding VLAN 0 to HW filter on device eth3
[  582.203123][T17702] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3127'.
[  582.317443][T17704] ip6erspan0: entered allmulticast mode
[  582.616753][T17702] bond12: option lacp_strict: mode dependency failed, not supported in mode balance-rr(0)
[  582.678084][T17725] netlink: 72 bytes leftover after parsing attributes in process `syz.2.3131'.
[  582.694895][T17726] netlink: 'syz.4.3130': attribute type 11 has an invalid length.
[  582.702843][T17702] bond12 (unregistering): Released all slaves
[  583.594368][T17751] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  584.092216][T17744] netlink: 256 bytes leftover after parsing attributes in process `syz.1.3135'.
[  585.105956][T17787] bond11: entered promiscuous mode
[  585.114241][T17794] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3143'.
[  585.178515][T17787] bond11: entered allmulticast mode
[  585.193101][T17794] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3143'.
[  585.205360][T17796] sctp: [Deprecated]: syz.2.3142 (pid 17796) Use of struct sctp_assoc_value in delayed_ack socket option.
[  585.205360][T17796] Use struct sctp_sack_info instead
[  585.303479][T17787] 8021q: adding VLAN 0 to HW filter on device bond11
[  585.359945][T17805] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3145'.
[  585.388957][T17802] xt_hashlimit: overflow, try lower: 3/0
[  585.393673][T17789] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[  585.474319][T17803] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3144'.
[  586.255344][T17825] netlink: 27 bytes leftover after parsing attributes in process `syz.2.3147'.
[  587.658242][T17871] syzkaller1: entered promiscuous mode
[  587.677097][T17871] syzkaller1: entered allmulticast mode
[  587.909135][T17867] veth3: entered allmulticast mode
[  587.983791][T17883] ip6erspan2: entered allmulticast mode
[  588.134163][T17893] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3162'.
[  588.152807][T17886] 8021q: adding VLAN 0 to HW filter on device bond0
[  588.187854][T17886] 8021q: adding VLAN 0 to HW filter on device batadv0
[  588.370869][T17886] batman_adv: batadv0: Interface activated: batadv_slave_1
[  588.388771][T17886] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  588.406579][T17886] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  588.436463][T17886] veth1_macvtap: left promiscuous mode
[  588.445975][T17886] veth0_macvtap: left promiscuous mode
[  588.454576][T17886] veth0_macvtap: entered promiscuous mode
[  588.463265][T17886] veth1_macvtap: entered promiscuous mode
[  588.479883][T17886] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  588.491998][T17886] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  588.505234][T17886] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  588.515171][T17886] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  588.537830][T17886] 8021q: adding VLAN 0 to HW filter on device bond1
[  588.555112][T17886] 8021q: adding VLAN 0 to HW filter on device bond2
[  588.577154][T17886] 8021q: adding VLAN 0 to HW filter on device bond3
[  588.591064][T17886] 8021q: adding VLAN 0 to HW filter on device bond4
[  588.620025][T17886] 8021q: adding VLAN 0 to HW filter on device bond5
[  588.638562][T17886] 8021q: adding VLAN 0 to HW filter on device bond6
[  588.683317][T17886] 8021q: adding VLAN 0 to HW filter on device bond7
[  588.697403][T17886] 8021q: adding VLAN 0 to HW filter on device bond8
[  588.710554][T17886] 8021q: adding VLAN 0 to HW filter on device bond9
[  588.731617][T17886] 8021q: adding VLAN 0 to HW filter on device bond10
[  588.766773][T17293] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  588.806976][T17293] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  588.839277][ T5345] lo speed is unknown, defaulting to 1000
[  588.853542][ T5345] syz1: Port: 1 Link ACTIVE
[  589.237022][ T1153] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  589.249580][ T1153] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  589.262723][T17293] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  589.288374][T17293] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  589.310155][ T5345] lo speed is unknown, defaulting to 1000
[  589.318913][ T1153] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  589.340810][ T1153] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  589.388695][T17293] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  589.458994][T17293] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  589.507397][T17293] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  589.655997][T17293] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  589.695605][T17933] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  589.897051][   T48] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  589.925250][ T9762] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  589.935753][   T48] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  589.977380][ T9762] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  590.023613][   T48] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  590.152072][ T1006] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  590.178008][ T1006] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  590.334341][T17953] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3170'.
[  590.392671][ T1006] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  590.459054][ T1006] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  590.460682][T17955] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3171'.
[  590.666414][ T9759] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  590.830749][T17969] Unsupported ieee802154 address type: 0
[  590.908476][T17971] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3174'.
[  591.089213][T17293] 8021q: adding VLAN 0 to HW filter on device bond0
[  591.200308][T17293] 8021q: adding VLAN 0 to HW filter on device team0
[  591.239947][T17974] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3175'.
[  591.328983][ T1153] bridge0: port 1(bridge_slave_0) entered blocking state
[  591.336227][ T1153] bridge0: port 1(bridge_slave_0) entered forwarding state
[  591.415499][ T1153] bridge0: port 2(bridge_slave_1) entered blocking state
[  591.422780][ T1153] bridge0: port 2(bridge_slave_1) entered forwarding state
[  592.114057][T17987] A link change request failed with some changes committed already. Interface syztnl2 may have been left with an inconsistent configuration, please check.
[  592.555296][T18015] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3181'.
[  592.974047][T18031] netlink: 'syz.0.3185': attribute type 2 has an invalid length.
[  593.011030][T18031] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3185'.
[  593.425588][T18044] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3188'.
[  593.941897][    C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  593.971494][T18060] netlink: 'syz.1.3192': attribute type 3 has an invalid length.
[  594.013121][T18060] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3192'.
[  594.032758][T18060] netlink: 'syz.1.3192': attribute type 3 has an invalid length.
[  594.116327][T18060] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3192'.
[  594.141797][T18060] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3192'.
[  594.223910][T18070] xt_l2tp: missing protocol rule (udp|l2tpip)
[  594.261920][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  594.881788][ T4929] block nbd0: Receive control failed (result -32)
[  595.519079][T18105] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  595.553337][T17293] 8021q: adding VLAN 0 to HW filter on device batadv0
[  595.580719][T18114] __nla_validate_parse: 1 callbacks suppressed
[  595.580739][T18114] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3202'.
[  595.938511][T17293] veth0_vlan: entered promiscuous mode
[  596.037059][    C1] bridge0: port 1(bridge_slave_0) entered learning state
[  596.046082][    C1] bridge0: port 2(bridge_slave_1) entered learning state
[  596.059938][T17293] veth1_vlan: entered promiscuous mode
[  596.328471][T18136] netlink: 256 bytes leftover after parsing attributes in process `syz.2.3207'.
[  596.535905][T17293] veth0_macvtap: entered promiscuous mode
[  596.652240][T17293] veth1_macvtap: entered promiscuous mode
[  596.727905][T18143] syzkaller0: entered promiscuous mode
[  596.759801][T18143] syzkaller0: entered allmulticast mode
[  597.004018][T18162] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3209'.
[  597.804006][T18147] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  597.952782][   T12] 
[  597.955177][   T12] ======================================================
[  597.962298][   T12] WARNING: possible circular locking dependency detected
[  597.969474][   T12] syzkaller #0 Not tainted
[  597.973914][   T12] ------------------------------------------------------
[  597.981009][   T12] kworker/u8:0/12 is trying to acquire lock:
[  597.987009][   T12] ffff8880774a9070 (&hsr->seqnr_lock){+.-.}-{3:3}, at: hsr_dev_xmit+0x237/0x360
[  597.996342][   T12] 
[  597.996342][   T12] but task is already holding lock:
[  598.003724][   T12] ffff88807b2b9d58 (&qdisc_xmit_lock_key#4){+.-.}-{3:3}, at: sch_direct_xmit+0x15f/0x4c0
[  598.013727][   T12] 
[  598.013727][   T12] which lock already depends on the new lock.
[  598.013727][   T12] 
[  598.024155][   T12] 
[  598.024155][   T12] the existing dependency chain (in reverse order) is:
[  598.033209][   T12] 
[  598.033209][   T12] -> #1 (&qdisc_xmit_lock_key#4){+.-.}-{3:3}:
[  598.041716][   T12]        _raw_spin_lock+0x2e/0x40
[  598.046874][   T12]        sch_direct_xmit+0x15f/0x4c0
[  598.052191][   T12]        __dev_queue_xmit+0x177f/0x3820
[  598.057878][   T12]        hsr_forward_skb+0x152a/0x28c0
[  598.063376][   T12]        send_hsr_supervision_frame+0x733/0xcf0
[  598.069678][   T12]        hsr_announce+0x1db/0x370
[  598.074749][   T12]        call_timer_fn+0x192/0x5e0
[  598.079980][   T12]        __run_timer_base+0x652/0x8b0
[  598.085377][   T12]        run_timer_softirq+0xb7/0x170
[  598.090802][   T12]        handle_softirqs+0x225/0x840
[  598.096193][   T12]        do_softirq+0x76/0xd0
[  598.100893][   T12]        __local_bh_enable_ip+0xf8/0x130
[  598.106550][   T12]        br_device_event+0x7a1/0x9c0
[  598.111957][   T12]        notifier_call_chain+0x1a5/0x3d0
[  598.117627][   T12]        __dev_notify_flags+0x16e/0x310
[  598.123285][   T12]        netif_change_flags+0xde/0x1b0
[  598.128761][   T12]        do_setlink+0xdd6/0x4670
[  598.133773][   T12]        rtnl_newlink+0x148e/0x1bd0
[  598.138980][   T12]        rtnetlink_rcv_msg+0x802/0xc00
[  598.144456][   T12]        netlink_rcv_skb+0x226/0x4a0
[  598.149822][   T12]        netlink_unicast+0x7bb/0x940
[  598.155121][   T12]        netlink_sendmsg+0x813/0xb40
[  598.160429][   T12]        sock_sendmsg_nosec+0x13a/0x180
[  598.166050][   T12]        ____sys_sendmsg+0x54e/0x850
[  598.171356][   T12]        ___sys_sendmsg+0x2a5/0x360
[  598.176570][   T12]        __x64_sys_sendmsg+0x1b1/0x290
[  598.182068][   T12]        do_syscall_64+0x174/0x580
[  598.187326][   T12]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  598.193816][   T12] 
[  598.193816][   T12] -> #0 (&hsr->seqnr_lock){+.-.}-{3:3}:
[  598.201591][   T12]        __lock_acquire+0x1520/0x2cf0
[  598.206997][   T12]        lock_acquire+0x106/0x350
[  598.212083][   T12]        _raw_spin_lock_bh+0x36/0x50
[  598.217388][   T12]        hsr_dev_xmit+0x237/0x360
[  598.222440][   T12]        dev_hard_start_xmit+0x2cd/0x830
[  598.228094][   T12]        __dev_queue_xmit+0x14c0/0x3820
[  598.233664][   T12]        NF_HOOK+0x33a/0x3c0
[  598.238374][   T12]        arp_xmit+0x16c/0x270
[  598.243080][   T12]        arp_solicit+0xbdc/0xe40
[  598.248042][   T12]        __neigh_event_send+0xf0c/0x1510
[  598.253760][   T12]        neigh_resolve_output+0x1a1/0x720
[  598.259508][   T12]        ip_finish_output2+0xc4b/0x10b0
[  598.265142][   T12]        ip_output+0x29f/0x450
[  598.269932][   T12]        iptunnel_xmit+0x626/0xd10
[  598.275144][   T12]        ip_tunnel_xmit+0x195b/0x2040
[  598.280560][   T12]        __gre_xmit+0x19e/0x240
[  598.285467][   T12]        erspan_xmit+0xad5/0x1590
[  598.290505][   T12]        dev_hard_start_xmit+0x2cd/0x830
[  598.296158][   T12]        sch_direct_xmit+0x257/0x4c0
[  598.301461][   T12]        __dev_queue_xmit+0x177f/0x3820
[  598.307028][   T12]        alb_send_lp_vid+0x348/0x550
[  598.312432][   T12]        alb_send_learning_packets+0x12c/0x300
[  598.318621][   T12]        bond_alb_monitor+0x3d0/0x1820
[  598.324118][   T12]        process_scheduled_works+0xa8e/0x14e0
[  598.330243][   T12]        worker_thread+0xa47/0xfb0
[  598.335390][   T12]        kthread+0x388/0x470
[  598.340010][   T12]        ret_from_fork+0x514/0xb70
[  598.345179][   T12]        ret_from_fork_asm+0x1a/0x30
[  598.350498][   T12] 
[  598.350498][   T12] other info that might help us debug this:
[  598.350498][   T12] 
[  598.360733][   T12]  Possible unsafe locking scenario:
[  598.360733][   T12] 
[  598.368289][   T12]        CPU0                    CPU1
[  598.373727][   T12]        ----                    ----
[  598.379117][   T12]   lock(&qdisc_xmit_lock_key#4);
[  598.384177][   T12]                                lock(&hsr->seqnr_lock);
[  598.391217][   T12]                                lock(&qdisc_xmit_lock_key#4);
[  598.398789][   T12]   lock(&hsr->seqnr_lock);
[  598.403310][   T12] 
[  598.403310][   T12]  *** DEADLOCK ***
[  598.403310][   T12] 
[  598.411536][   T12] 11 locks held by kworker/u8:0/12:
[  598.416749][   T12]  #0: ffff888057419140 ((wq_completion)bond1#2){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0
[  598.427906][   T12]  #1: ffffc90000117c40 ((work_completion)(&(&bond->alb_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0
[  598.440813][   T12]  #2: ffffffff8eb59c60 (rcu_read_lock){....}-{1:3}, at: bond_alb_monitor+0xf3/0x1820
[  598.450412][   T12]  #3: ffffffff8eb59cc0 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x29b/0x3820
[  598.460359][   T12]  #4: ffff888029720228 (dev->qdisc_tx_busylock ?: &qdisc_tx_busylock#5){+...}-{3:3}, at: __dev_queue_xmit+0x1143/0x3820
[  598.473003][   T12]  #5: ffff88807b2b9d58 (&qdisc_xmit_lock_key#4){+.-.}-{3:3}, at: sch_direct_xmit+0x15f/0x4c0
[  598.483305][   T12]  #6: ffffffff8eb59c60 (rcu_read_lock){....}-{1:3}, at: ip_output+0x5a/0x450
[  598.492210][   T12]  #7: ffffffff8eb59c60 (rcu_read_lock){....}-{1:3}, at: ip_finish_output2+0x3de/0x10b0
[  598.501976][   T12]  #8: ffffffff8eb59c60 (rcu_read_lock){....}-{1:3}, at: arp_xmit+0x23/0x270
[  598.510812][   T12]  #9: ffffffff8eb59cc0 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x29b/0x3820
[  598.520762][   T12]  #10: ffffffff8eb59c60 (rcu_read_lock){....}-{1:3}, at: hsr_dev_xmit+0x2d/0x360
[  598.530018][   T12] 
[  598.530018][   T12] stack backtrace:
[  598.535931][   T12] CPU: 0 UID: 0 PID: 12 Comm: kworker/u8:0 Not tainted syzkaller #0 PREEMPT(full) 
[  598.535954][   T12] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  598.535971][   T12] Workqueue: bond1 bond_alb_monitor
[  598.536017][   T12] Call Trace:
[  598.536024][   T12]  <TASK>
[  598.536137][   T12]  dump_stack_lvl+0xe8/0x150
[  598.536216][   T12]  print_circular_bug+0x2e1/0x300
[  598.536245][   T12]  check_noncircular+0x12e/0x150
[  598.536272][   T12]  __lock_acquire+0x1520/0x2cf0
[  598.536297][   T12]  ? __siphash_unaligned+0x28d/0x3e0
[  598.536354][   T12]  ? skb_network_protocol+0x23d/0x400
[  598.536375][   T12]  ? hsr_dev_xmit+0x237/0x360
[  598.536398][   T12]  lock_acquire+0x106/0x350
[  598.536417][   T12]  ? hsr_dev_xmit+0x237/0x360
[  598.536445][   T12]  ? hsr_dev_xmit+0x237/0x360
[  598.536466][   T12]  _raw_spin_lock_bh+0x36/0x50
[  598.536481][   T12]  ? hsr_dev_xmit+0x237/0x360
[  598.536504][   T12]  hsr_dev_xmit+0x237/0x360
[  598.536527][   T12]  ? hsr_dev_xmit+0x2d/0x360
[  598.536549][   T12]  dev_hard_start_xmit+0x2cd/0x830
[  598.536576][   T12]  __dev_queue_xmit+0x14c0/0x3820
[  598.536602][   T12]  ? __dev_queue_xmit+0x29b/0x3820
[  598.536622][   T12]  ? __lock_acquire+0x683/0x2cf0
[  598.536644][   T12]  ? arpt_do_table+0x25b/0x1f90
[  598.536687][   T12]  ? __pfx___dev_queue_xmit+0x10/0x10
[  598.536711][   T12]  ? __pfx_arpt_do_table+0x10/0x10
[  598.536734][   T12]  ? NF_HOOK+0xa2/0x3c0
[  598.536755][   T12]  NF_HOOK+0x33a/0x3c0
[  598.536773][   T12]  ? __pfx_arp_xmit_finish+0x10/0x10
[  598.536790][   T12]  ? NF_HOOK+0xa2/0x3c0
[  598.536806][   T12]  ? __pfx_NF_HOOK+0x10/0x10
[  598.536822][   T12]  ? lock_acquire+0x106/0x350
[  598.536842][   T12]  ? __pfx_arp_xmit_finish+0x10/0x10
[  598.536860][   T12]  ? inet_addr_type_dev_table+0x25/0x190
[  598.536881][   T12]  arp_xmit+0x16c/0x270
[  598.536897][   T12]  ? arp_xmit+0x23/0x270
[  598.536914][   T12]  arp_solicit+0xbdc/0xe40
[  598.536937][   T12]  ? __pfx_arp_solicit+0x10/0x10
[  598.536956][   T12]  ? __neigh_event_send+0xea4/0x1510
[  598.536984][   T12]  ? __pfx_arp_solicit+0x10/0x10
[  598.537001][   T12]  __neigh_event_send+0xf0c/0x1510
[  598.537031][   T12]  neigh_resolve_output+0x1a1/0x720
[  598.537057][   T12]  ? __pfx_ip_neigh_gw4+0x10/0x10
[  598.537081][   T12]  ? ip_finish_output2+0x3de/0x10b0
[  598.537100][   T12]  ip_finish_output2+0xc4b/0x10b0
[  598.537120][   T12]  ? ip_skb_dst_mtu+0x811/0xa50
[  598.537143][   T12]  ? ip_finish_output2+0x3de/0x10b0
[  598.537165][   T12]  ? ip_finish_output+0x40b/0x530
[  598.537184][   T12]  ip_output+0x29f/0x450
[  598.537202][   T12]  ? ip_output+0x5a/0x450
[  598.537219][   T12]  iptunnel_xmit+0x626/0xd10
[  598.537257][   T12]  ip_tunnel_xmit+0x195b/0x2040
[  598.537284][   T12]  ? __pfx_ip_tunnel_xmit+0x10/0x10
[  598.537303][   T12]  ? __pfx_gre_build_header+0x10/0x10
[  598.537319][   T12]  ? kfree+0x1c5/0x640
[  598.537380][   T12]  ? pskb_expand_head+0x469/0x13a0
[  598.537448][   T12]  __gre_xmit+0x19e/0x240
[  598.537464][   T12]  ? __pfx___gre_xmit+0x10/0x10
[  598.537483][   T12]  erspan_xmit+0xad5/0x1590
[  598.537504][   T12]  ? __pfx_erspan_xmit+0x10/0x10
[  598.537520][   T12]  ? __lock_acquire+0x683/0x2cf0
[  598.537543][   T12]  dev_hard_start_xmit+0x2cd/0x830
[  598.537568][   T12]  sch_direct_xmit+0x257/0x4c0
[  598.537587][   T12]  ? __pfx_sch_direct_xmit+0x10/0x10
[  598.537601][   T12]  ? __switch_to_asm+0x70/0x70
[  598.537628][   T12]  __dev_queue_xmit+0x177f/0x3820
[  598.537750][   T12]  ? __dev_queue_xmit+0x29b/0x3820
[  598.537775][   T12]  ? __pfx___dev_queue_xmit+0x10/0x10
[  598.537796][   T12]  ? rcu_is_watching+0x15/0xb0
[  598.537842][   T12]  ? kmem_cache_alloc_node_noprof+0x1f1/0x610
[  598.537861][   T12]  ? trace_kmem_cache_alloc+0x29/0xe0
[  598.537878][   T12]  ? kmem_cache_alloc_node_noprof+0x1f1/0x610
[  598.537898][   T12]  ? kmem_cache_alloc_node_noprof+0x3b8/0x610
[  598.537915][   T12]  ? local_lock_release+0x9c/0x160
[  598.537929][   T12]  ? kmem_cache_alloc_node_noprof+0x1f5/0x610
[  598.537953][   T12]  ? __alloc_skb+0x4cc/0x7a0
[  598.537970][   T12]  ? alb_send_lp_vid+0x14e/0x550
[  598.537996][   T12]  alb_send_lp_vid+0x348/0x550
[  598.538033][   T12]  ? __pfx_alb_send_lp_vid+0x10/0x10
[  598.538089][   T12]  alb_send_learning_packets+0x12c/0x300
[  598.538115][   T12]  ? __pfx_alb_send_learning_packets+0x10/0x10
[  598.538138][   T12]  ? bond_alb_monitor+0xf3/0x1820
[  598.538163][   T12]  ? netdev_lower_get_next_private_rcu+0x9f/0x100
[  598.538192][   T12]  bond_alb_monitor+0x3d0/0x1820
[  598.538217][   T12]  ? bond_alb_monitor+0xf3/0x1820
[  598.538239][   T12]  ? __pfx_bond_alb_monitor+0x10/0x10
[  598.538263][   T12]  ? rcu_is_watching+0x15/0xb0
[  598.538287][   T12]  ? process_scheduled_works+0xa20/0x14e0
[  598.538304][   T12]  process_scheduled_works+0xa8e/0x14e0
[  598.538334][   T12]  ? __pfx_process_scheduled_works+0x10/0x10
[  598.538353][   T12]  ? assign_work+0x3cf/0x5d0
[  598.538371][   T12]  worker_thread+0xa47/0xfb0
[  598.538400][   T12]  kthread+0x388/0x470
[  598.538422][   T12]  ? __pfx_worker_thread+0x10/0x10
[  598.538438][   T12]  ? __pfx_kthread+0x10/0x10
[  598.538460][   T12]  ret_from_fork+0x514/0xb70
[  598.538484][   T12]  ? __pfx_ret_from_fork+0x10/0x10
[  598.538505][   T12]  ? __switch_to+0xc89/0x1420
[  598.538525][   T12]  ? __pfx_kthread+0x10/0x10
[  598.538546][   T12]  ret_from_fork_asm+0x1a/0x30
[  598.538578][   T12]  </TASK>
[  599.103593][T18147] veth0_macvtap: left allmulticast mode
[  599.145636][T18147] macsec0: left promiscuous mode
[  599.644791][T18147] gretap2: left promiscuous mode
[  599.849571][T18147] vlan2: left promiscuous mode
[  599.855135][T18147] geneve1: left promiscuous mode
[  599.972558][T18147] mac80211_hwsim hwsim24 wlan0: left promiscuous mode
[  600.104075][T18147] vlan3: left promiscuous mode
[  600.108942][T18147] hsr0: left promiscuous mode
[  600.254628][T18147] bond11: left promiscuous mode
[  600.264536][T18147] bond11: left allmulticast mode
[  600.297516][T18147] ip6erspan2: left allmulticast mode
[  600.330525][ T5751] lo speed is unknown, defaulting to 1000
[  600.347011][ T5751] syz1: Port: 1 Link DOWN
[  600.406790][ T5750] lo speed is unknown, defaulting to 1000
[  600.428102][T17293] batman_adv: batadv0: Interface activated: batadv_slave_0
[  600.500214][T17293] batman_adv: batadv0: Interface activated: batadv_slave_1
[  600.631246][ T1160] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  600.656352][ T1160] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  600.681627][T17293] ieee80211 phy31: Selected rate control algorithm 'minstrel_ht'
[  600.745366][ T1006] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  600.757811][T17293] ieee80211 phy32: Selected rate control algorithm 'minstrel_ht'
[  600.770228][ T1006] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  600.812640][T12726] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  600.822827][ T1160] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  600.835469][ T1160] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  600.847849][T12726] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  600.860355][ T1160] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  600.881264][ T1160] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  600.911542][ T1006] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  600.936970][ T1006] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  600.982588][ T1006] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  600.991831][ T1006] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  601.023568][T12726] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  601.033422][T12726] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0