last executing test programs:

2.334323287s ago: executing program 2 (id=4496):
socket$inet6_sctp(0xa, 0x5, 0x84) (async)
socket$inet6(0xa, 0x2, 0x0) (async)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000380)={0x29e9c931, 0x3, 0x0, 0x4}, 0x10) (async)
sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000010c0)=ANY=[@ANYBLOB="200000001600010a00000000000000000a0000000c0000800800", @ANYRES16=r0], 0x20}, 0x1, 0x0, 0x0, 0x200c0801}, 0x0) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000002000000851000000600000018020000", @ANYRES32, @ANYBLOB="00000000000000006600020000000000180000000000000000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1a00fe00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222}, 0x78) (async)
sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16, @ANYBLOB="01000000000000000000"], 0x6c}}, 0x0) (async)
r1 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r1, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) (async, rerun: 32)
setsockopt$RDS_GET_MR_FOR_DEST(r1, 0x114, 0x7, &(0x7f0000000280)={@rxrpc=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x4e20, 0x2, @empty, 0x3}}, {0x0}, 0x0, 0x1}, 0xa0) (rerun: 32)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r2, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={<r3=>0x0, 0x1c, &(0x7f0000000280)=[@in6={0xa, 0x4e21, 0x0, @private2={0xfc, 0x2, '\x00', 0xff}}]}, &(0x7f0000000180)=0x10)
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f0000000100)={r3, 0x9, 0x2}, &(0x7f0000000140)=0x8)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="14"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) (async, rerun: 64)
readv(r4, &(0x7f0000000040)=[{&(0x7f0000000540)=""/4114, 0x1012}], 0x1) (rerun: 64)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c0800002c0007012bbd700000000000097c00000c00018006000600843b000009000280040071008c0000000800e400", @ANYRES32, @ANYBLOB="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", @ANYRES32, @ANYBLOB="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"], 0x85c}, 0x1, 0x0, 0x0, 0x24048011}, 0xc000) (async)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0a00000004000000060000008000000042000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000e"], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000540), &(0x7f0000000080), 0x619, r5}, 0x38)
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000000c0)={'bridge0\x00', <r7=>0x0})
sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001580)=ANY=[@ANYBLOB="6000000010000104050000000300000000000000b95103183ab8d00cd90ca7768e117983139c7459dd51e4bff316a1c18e94df1136f4c2ffdca7d6fa2d15abe834798cc785f2e05621f7493b2d9ca40c882e5f5f9e7c4bae575a087aa7", @ANYRES32=0x0, @ANYBLOB="03050000000000003800128009000100766c616e000000002800028010000480c2fd0803050001000b00000006000100030000000c000200090000000c00000008000500", @ANYRES32=r7, @ANYBLOB], 0x60}, 0x1, 0x0, 0x0, 0x20004800}, 0x4000000)

1.468282898s ago: executing program 2 (id=4507):
r0 = socket$nl_route(0x10, 0x3, 0x0) (async)
pipe(&(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}) (async)
pipe(&(0x7f0000000000)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
write(r2, &(0x7f0000000240)="94", 0x1)
r5 = socket(0x2a, 0x2, 0x0)
getsockname$packet(r5, &(0x7f0000000200)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x78, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0x6}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x9, 0x2, 0xffffffff, 0x0, 0xfea}, 0x43e, 0x0, 0x8, 0x7, 0x200, 0x4, 0x2, 0x0, 0x8, 0x51, {0x8, 0x6, 0x3, 0x6, 0x4, 0xe}}}}]}, 0x78}}, 0x20008001) (async)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000740)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r6, {}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_CLASSID={0x8, 0x1, {0x10, 0x4}}]}}]}, 0x3c}}, 0x4000) (async)
r7 = socket$inet6(0xa, 0x3, 0x2f)
getsockopt$inet6_int(r7, 0x29, 0x24, 0x0, &(0x7f00000000c0)) (async)
r8 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r8, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async)
r9 = socket(0xa, 0x5, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x620, 0x2c8, 0x1d0, 0x468, 0x468, 0x1d0, 0x550, 0x550, 0x550, 0x550, 0x550, 0x6, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @private0, [], [0xffffff00, 0x0, 0x0, 0x1f9814788dbf7ab2], 'veth1\x00', 'syz_tun\x00'}, 0x11e, 0xa8, 0x1d0, 0x1f000000, {0x0, 0x7}}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x0, 'unconfined\x00'}}}, {{@ipv6={@loopback, @dev, [], [], 'batadv_slave_0\x00', 'macvlan1\x00', {}, {}, 0x2b}, 0x0, 0xd0, 0xf8, 0x7400, {}, [@inet=@rpfilter={{0x28}, {0x8}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00', 0x0, {0x68}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x1, @ipv6=@mcast2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x680) (async)
readv(r3, &(0x7f0000001680)=[{&(0x7f00000000c0)=""/135, 0x87}], 0x1) (async)
tee(r1, r4, 0x8f5, 0x100000000000000)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001200)={&(0x7f0000001040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x2, [@func_proto={0x0, 0x5, 0x0, 0xd, 0x0, [{0xd, 0x2}, {0x0, 0x1}, {0x6, 0x1}, {0xc, 0x3}, {0x4, 0x3}]}]}}, &(0x7f00000011c0)=""/62, 0x4e, 0x3e, 0x1, 0x8}, 0x28) (async)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newlink={0x4c, 0x10, 0x801, 0x70bd2c, 0xffffffff, {0x0, 0x0, 0x0, 0x0, 0x3feff, 0x20110}, [@IFLA_GROUP={0x8}, @IFLA_AF_SPEC={0x24, 0x1a, 0x0, 0x1, [@AF_INET6={0x20, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x3}]}]}]}, 0x4c}}, 0x0)

1.324450262s ago: executing program 2 (id=4508):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x300, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x74, 0x0, 0x1000, 0x1d007}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_HASH_ELASTICITY={0x8, 0x1a, 0x8}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x10)

1.260034106s ago: executing program 2 (id=4511):
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
ioctl$sock_TIOCINQ(r0, 0x541b, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$XFS_IOC_PATH_TO_FSHANDLE(r1, 0xc0385868, &(0x7f0000000280)={<r2=>r1, &(0x7f0000000140)='\x00', 0x0, &(0x7f00000001c0)={@align=0x6, {0x9, 0x7, 0x5, 0x44b}}, 0x7, &(0x7f0000000200), &(0x7f0000000240)=0xffff})
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'lo\x00', <r5=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x134, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xffe0}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x104, 0x2, {{0xfffffffe, 0x2, 0x40, 0xa, 0xe7, 0xcc36}, [@TCA_NETEM_LOSS={0xb8, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0x40, 0xf, 0xa, 0x4006559, 0x8}}, @NETEM_LOSS_GE={0x14, 0x2, {0x5, 0xfffffffa, 0x10000, 0x6}}, @NETEM_LOSS_GI={0x18, 0x1, {0xd82c, 0x8, 0x6, 0x0, 0xc5e0}}, @NETEM_LOSS_GI={0x18, 0x1, {0x1000, 0x2, 0x0, 0x8, 0x1}}, @NETEM_LOSS_GI={0x18, 0x1, {0x4, 0x4, 0x9de, 0x9, 0xb502}}, @NETEM_LOSS_GI={0x18, 0x1, {0x8, 0x0, 0xfffff001, 0xf6, 0x3}}, @NETEM_LOSS_GE={0x14, 0x2, {0x5b, 0x20000, 0x3, 0xa}}, @NETEM_LOSS_GE={0x14, 0x2, {0x2, 0x40003, 0x0, 0x6}}]}, @TCA_NETEM_JITTER64={0xc, 0xb, 0x6}, @TCA_NETEM_CORRUPT={0xc, 0x4, {0x40009, 0xae}}, @TCA_NETEM_LATENCY64={0xc, 0xa, 0x100020}, @TCA_NETEM_LATENCY64={0xc, 0xa, 0x1}]}}}]}, 0x134}, 0x1, 0x0, 0x0, 0x4546cfee17049510}, 0x0)
r6 = socket$packet(0x11, 0x3, 0x300)
r7 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000340)=ANY=[@ANYBLOB="2400000066001f03000000000000000008000000ffffffff"], 0x24}], 0x1}, 0x0)
getsockopt$sock_buf(r6, 0x1, 0x1c, 0x0, &(0x7f0000000700))
sendmsg$nl_route(r2, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)=@getneightbl={0x14, 0x42, 0x4, 0x70bd29, 0x25dfdbfd, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4004}, 0x0)
sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000002c00ef5f"], 0x14}, 0x1, 0x0, 0x0, 0x20008081}, 0x810)
sendmsg$AUDIT_USER_AVC(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="540026af37edf9797334bc35c100005304000828bd7000fddbdf25639aab75fdc19a0ef8fd789cc4838837301468dd80a5da984fe9566c1e37459c0800000000000000b5139f4431df4e6d1c0ead02386a8034def50a465662d4a3debd2d09"], 0x54}, 0x1, 0x0, 0x0, 0x40054}, 0x880)

1.259589017s ago: executing program 0 (id=4512):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00', <r1=>0x0})
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000040000701feffffff00000000017c0000040042800c00018006000600a00a0000100002800c001480070006"], 0x34}, 0x1, 0x0, 0x0, 0x48815}, 0xc000)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newtaction={0x68, 0x30, 0xcac229faa96ee7df, 0x0, 0x1, {}, [{0x54, 0x1, [@m_ife={0x50, 0x1, 0x0, 0x0, {{0x8}, {0x28, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x850, 0x10000000}, 0x1}}, @TCA_IFE_TYPE={0x6}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x68}, 0x1, 0x500}, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000380)=@newlink={0x50, 0x10, 0x503, 0x70bd2a, 0xc, {0x0, 0x0, 0x0, 0x0, 0x3a, 0x201a0}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x14}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x6249}, @IFLA_BROADCAST={0xa, 0x2, @remote}]}, 0x50}}, 0x800)

1.185819043s ago: executing program 1 (id=4514):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x1, 0x80000000, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x8, 0x3}, {0x0, 0xffe0}, {0xfff1, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_LIMIT={0x8, 0x1, 0xffffffff}]}}]}, 0x3c}}, 0x20004055) (async)
r1 = socket$nl_rdma(0x10, 0x3, 0x14) (async)
r2 = socket(0x1d, 0x3, 0x1)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x65, 0x64, 0x0, 0x0) (async)
ioctl$SIOCGETLINKNAME(r2, 0x89e0, &(0x7f0000000140)={0x3, 0x2}) (async)
sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x20, 0x1418, 0x1, 0x2, 0x3, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x9}, 0x0) (async)
sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840)

1.18167294s ago: executing program 2 (id=4515):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000))
syz_genetlink_get_family_id$batadv(&(0x7f0000000480), r0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="b7020000ff0d1400bfa30000000000000703000000feffff7a0af0fff8ffff1971a4f0ff00000000b7060000080000006f6400000000000045040400010000001704000001000a00b7040000ff0100006a0a00fe0000000085000000bd000000b70000000000000095000000000000009e17f199a68b06d83298a8cdc21ce784909b849d5550ad857d0454d8877a6db61d69f2ffcaa10350e11cb97c8adf1bc9a0c4eeceb9971e43405d621ffbc9ce000000d8ca56b50d0c010d631f6dde53a9a53608c10556e5734eb84049761451ce540c772e2d9f8004e26f7fcc059c062234d5595f6fbaa187b81d1106000000000fd60000fd9ac3d09e29a9d542ca9d85a5c9c88474895d679838def0a83a733dc6a39b63a5ed69d32394c53361d7e43c5cbd80450f859ce8122a79c3e40000b59b0fc46d6cec3c0802882add4e3179bd4a44f231b6d753a7be428ba953df4aece69311687f4122073a236c3a32efa04137d4524847d2638da3261c8162bb7c7824be6195a66d2e17e122040e1100000000928612a29fc691e4f1f7bd053abb885f39381f1759410b1059f05684261f332d606834669b49ec99320ca7712d7e79bd5bf5ed818ecc7640917f6a559a47db608fcf9f6c131b84e41c354c66838f72b9e12d36e996f316f0812ca83efb30c7f6c6d57c4a64590401eec22523dd712c680013e87f649a1ede7142ca9d5d8a8c9f9b440fe4331ad5532c74d9a31a5d737537f7a2caa30581253d14dd3e92af7dc836686365ae01bdec561c0402b67801267a8df97d2f85426a5963d4fa3e26cc05972c162f223f000000d999e80de00fcbcc02d0aed7bb8f7ba337d59c14f39dcd4aad4139ef6425a9367f1bd1467fc6b95a4df7669839771ce9d5788029901e5a79d8b9990ace8f74087f25ad50c46088000000008000"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42)
r2 = socket$rds(0x15, 0x5, 0x0)
setsockopt$RDS_GET_MR_FOR_DEST(r2, 0x114, 0x7, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r1, 0x2000012, 0xe, 0x41, &(0x7f0000000080)="257fd3cbb7ba7feb35295a62cd27", 0x0, 0xfffffffd, 0x3000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
syz_genetlink_get_family_id$devlink(0x0, r0)
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x24000840}, 0x700)

1.124691391s ago: executing program 1 (id=4516):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000040)={'dummy0\x00', &(0x7f0000000980)=@ethtool_coalesce={0xe, 0x2, 0x5a6, 0x400, 0x5, 0x10001, 0x2, 0x0, 0x8, 0x38, 0x1ff, 0x5, 0xfffffffd, 0x8, 0x2, 0xb, 0x81, 0x4, 0xfffff20f, 0x1, 0x3, 0x73, 0x9}})
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x64, 0x30, 0x871a15abc695fb3d, 0x0, 0x25dfdbfe, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x8a1, 0x2, 0x2, 0x4, 0x7}, 0x3}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000010}, 0x0)
r2 = socket$kcm(0x10, 0x2, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x94}, 0x24000000)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETSETELEM(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001040)={0x4c, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x20, 0x3, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "1e1c"}]}, @NFTA_SET_ELEM_KEY_END={0xc, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "57b8"}]}]}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x10, 0x4, 0x0, 0x0, 0x5, 0x0, 0x0, 0x41100, 0x66, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0xfe33)

1.122783492s ago: executing program 0 (id=4517):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFBRDADDR(r0, 0x891a, &(0x7f0000000080)={'team0\x00', {0x2, 0x4e21, @private=0xa010101}})
setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000900)=ANY=[], 0x190)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, 0x0, 0x0, 0x8}, 0x94)
r2 = socket(0x28, 0x5, 0x0)
bind$vsock_stream(r2, &(0x7f0000000040), 0x10)
listen(r2, 0x0)
r3 = socket(0x28, 0x5, 0x0)
connect$vsock_stream(r3, &(0x7f0000000080), 0x10)
r4 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_tx_ring(r4, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c)
mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r4, 0x0)
setsockopt$sock_linger(r3, 0x1, 0x3c, &(0x7f0000000180)={0x1, 0x5}, 0x8)
sendmmsg(r3, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x1, 0x24008094)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a31000000002c0003800800014000000000180003801400010076657468315f746f5f626f6e64000000080002"], 0x110}, 0x1, 0x0, 0x0, 0x4000081}, 0x0)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000640), 0xffffffffffffffff)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f0000000000)={'wpan0\x00', <r8=>0x0})
sendmsg$NL802154_CMD_NEW_SEC_DEV(r5, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000280)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010028bd7000fbdbdf251a00000004002e8008000300", @ANYRES32=r8, @ANYBLOB='4\x00.'], 0x6c}, 0x1, 0x0, 0x0, 0x20040040}, 0x20040)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001500)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x2000}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x2}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x0, 0x0, 0x2}]}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x20000000)

271.834596ms ago: executing program 1 (id=4518):
r0 = socket(0x10, 0x3, 0xc4b)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000c00)=@newqdisc={0x34, 0x24, 0x1, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0xe, 0xfff1}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x34}, 0x1, 0x0, 0x0, 0x20040000}, 0x40080b0)
r2 = socket$phonet(0x23, 0x2, 0x1)
ioctl$SIOCPNDELRESOURCE(r2, 0x89ee, &(0x7f0000000300))
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000c80)=ANY=[@ANYBLOB="30000000400007012bbd700000000000047c0000100042800c00070006002000004000000c0001800600060080"], 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc020)
r5 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_int(r5, 0x0, 0x33, &(0x7f0000000040)=0x80000001, 0x4)
listen(r5, 0x0)
r6 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_int(r6, 0x0, 0x33, &(0x7f0000000000)=0x80000000, 0x4)
bind$l2tp(r6, &(0x7f0000000080)={0x2, 0x0, @broadcast, 0x2}, 0x10)
sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="500000001a00010026bd7000fedbdf251c201406fe03fe09001100000800010000000000140012002900f2648c55aeec76c60a65a44f7ae608000400", @ANYRES32, @ANYBLOB="05001a0040000000080001000004c1"], 0x50}, 0x1, 0x0, 0x0, 0x4040000}, 0x0)

269.918868ms ago: executing program 0 (id=4519):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="100000002d000b02d25a806f8c6394f9101a04000a", 0x15}], 0x1}, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c0081044e81f782db44b9040a1d08030e000000e8fea4a1180015000600142603600e1208000f1000810401a80016000a0001", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x50)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0, 0x0, 0x0, 0x5c8}, 0x0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce620300fe"], 0xfe1b)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f00000000c0)={<r1=>r0, 0x200, 0x5, 0x10})
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{0xffffffffffffffff, <r2=>0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000140)}, 0x20)
getpeername$packet(0xffffffffffffffff, &(0x7f0000000400)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000440)=0x14)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_buf(r4, 0x29, 0x32, &(0x7f0000000880)="1cd16a1eb92bf4e8b8c961f49c5d5024d1c177cae0730d1a1eba20a588c6b4f28c3265e31533f5fbb724e4370cf3799adfe94e26b7306bb9c84b03f4491fb1", 0x3f)
r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f0000000480)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x7, [@struct={0x9, 0x1, 0x0, 0x4, 0x0, 0x8, [{0x1, 0x4}]}]}, {0x0, [0x2e, 0x61, 0x2e, 0x2e, 0x61]}}, &(0x7f00000004c0)=""/53, 0x37, 0x35, 0x0, 0x5, 0x10000}, 0x28)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x1, 0x10, &(0x7f0000000580)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x14f6, 0x0, 0x0, 0x0, 0x8}, {}, {}, [@alu={0x4, 0x0, 0x5, 0x2, 0x2, 0xfffffffffffffff4, 0x1}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000600)='GPL\x00', 0x5, 0x63, &(0x7f0000000640)=""/99, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x8, &(0x7f00000006c0)={0x2, 0x3}, 0x8, 0x10, &(0x7f0000000700)={0x0, 0x3, 0xb, 0xffff}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x2, &(0x7f0000000740)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0x1, 0xffffffffffffffff, 0x1], &(0x7f0000000780)=[{0x5, 0x2, 0x0, 0xc}, {0x4, 0x3, 0xf, 0x7}], 0x10, 0x200}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x17, 0x28, &(0x7f0000000200)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@initr0={0x18, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x2}, @initr0={0x18, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x16}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @initr0={0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x5}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xff}}, @kfunc], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000340)='syzkaller\x00', 0xd, 0x80, &(0x7f0000000380)=""/128, 0x41000, 0x21, '\x00', r3, @fallback=0x12, r5, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000540)={0x0, 0x6, 0x9, 0x9}, 0x10, 0xffffffffffffffff, r6, 0x0, &(0x7f0000000880), 0x0, 0x10, 0x6}, 0x94)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0eab070004000523"], 0xfe33)
r7 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r7, &(0x7f00000002c0)={0x26, 'hash\x00', 0x0, 0x0, 'xcbc(twofish-generic)\x00'}, 0x58)
mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0)
setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r8 = accept4(r7, 0x0, 0x0, 0x800)
sendmsg$NFT_BATCH(r8, &(0x7f0000007200)={0x0, 0x0, &(0x7f00000071c0)={&(0x7f000000e6c0)=ANY=[], 0x7470}, 0x1, 0x0, 0x0, 0x40001}, 0x95)
write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="563f000019"], 0xfe33)

269.153742ms ago: executing program 2 (id=4520):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021501700001e0a05010000000000000000070000000900020073797a31000000000900010073797a300000000024170380300000802c000180250001007bb0c03ce8ed22d039cce454fd98ae614b08a9f3d4ddf1f742d55995afac076948000000f01600800c00054000000000000000000c00054000000000000000000c00044000000000000000000c00044000000000000000000600064019d20000ac0201802800028008000340000000000900020073797a3100000000080003400000000008000180000000003800028008000340000000000800018000000000080003400000000008000340000000000900020073797a300000000008000340000000002c00028008000340000000000900020073797a31000000000900020073797a32000000000800034000000000d0000100b408b1e286b5c8f7"], 0x17d4}}, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x1, 0x803, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GTP_CREATE_SOCKETS={0x5, 0x5, 0x1}, @IFLA_GTP_PDP_HASHSIZE={0x8, 0x3, 0xffff}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x48}}, 0x40)
socket$igmp6(0xa, 0x3, 0x2)
r3 = socket$inet6_mptcp(0xa, 0x1, 0x106)
ioctl$XFS_IOC_FD_TO_HANDLE(0xffffffffffffffff, 0xc038586a, &(0x7f0000000180)={<r4=>r3, &(0x7f0000000080)='bridge0\x00', 0x501a00, &(0x7f00000000c0)={@_ha_fsid={[0x14b4, 0x400]}, {0x2, 0x9, 0x7fff, 0x5}}, 0xf6, &(0x7f0000000100)={@_ha_fsid}, &(0x7f0000000140)=0x1})
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f"], 0x48)
r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x0, 0x34}, 0x20)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="180000000000000000000000010001009500000000000000fea5e7a6fb506a02d4561acb7a72c749778457a4b9d7cb4d920f82d284b83be27b990b0bf45dbd0c483ef90068f066e0b24ca995bf988e429eb1d0915d802c96c03506a0db83a0bed70235f1f82a76deb497700aa34e2d4d9199b442cd398ce687cc5e9b29ce30eb4b3c1dd231f06e6b2ceba73a0879983f9799eb93259276369ecee98c94c05b543d5a0e8e4a35b9b2a6a0f44a83f80c75947d7dab1459c82361ddfa07ada3709b2b528e379105928b163bf24b0e20af0063bb517cdb61189708a72f89ed046c987897856c341e6a82c379543ad09b3c57bd75"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r6, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x2}, 0x94)
r7 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
close(0x4)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00')
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000)
getsockopt$sock_buf(r8, 0x1, 0x1c, 0x0, 0x0)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4028800)
sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0xf5, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0)
sendmsg$NFT_BATCH(r9, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000180a0500000000000000000002000000300003802c00038014000100776732000000000000000000000000001400010076657468315f746f5f627269646765000900020073797a30000000000900010073797a300000000014000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x54}, 0x20008000)
connect$bt_rfcomm(r7, &(0x7f0000000040)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3}, 0xa)
shutdown(r7, 0x1)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000240)={r4, <r10=>0xffffffffffffffff}, 0x4)
r11 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000440)=ANY=[@ANYBLOB="1b0014a1000000581b4214000020"], 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000000000000fdffffff18110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b702000014000000b7030083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000095000000b7000000000000009500000000000000"], &(0x7f0000000200)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41000}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000cc0)={0x6, 0x3a, &(0x7f0000000980)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xd}}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x5}, @alu={0x7, 0x0, 0xa, 0x7, 0x8, 0x18, 0xfffffffffffffffc}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r10}}, @printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x10}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @map_idx_val={0x18, 0x3, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x8}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000b80)='GPL\x00', 0x2, 0xd, &(0x7f0000000bc0)=""/13, 0x41000, 0x58, '\x00', 0x0, 0x25, r6, 0x8, &(0x7f0000000c00)={0x5, 0x1}, 0x8, 0x10, &(0x7f0000000c40)={0x2, 0x6, 0x0, 0x400}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000c80)=[r5, r11, r4], 0x0, 0x10, 0xffff0001}, 0x94)
setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f00000001c0)=0x1, 0x4)

261.190974ms ago: executing program 1 (id=4521):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
accept$packet(r1, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000240)=0x14)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
r3 = socket$inet_icmp(0x2, 0x2, 0x1)
setsockopt$ARPT_SO_SET_REPLACE(r3, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x104, 0x4, 0x408, 0x0, 0x0, 0x0, 0x320, 0x320, 0x320, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@broadcast, @mac=@random, @rand_addr, @rand_addr, 0x8}}}, {{@arp={@multicast1, @dev={0xac, 0x14, 0x14, 0x25}, 0xffffffff, 0xff000000, 0x3, 0x10, {@empty, {[0x0, 0xff, 0xff, 0x0, 0x0, 0xff]}}, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, {[0x0, 0x181, 0x0, 0x0, 0xff, 0xff]}}, 0x1, 0xc147, 0x8000, 0x8, 0x0, 0x7ff, 'veth1_macvtap\x00', 'caif0\x00', {0xff}, {}, 0x0, 0x348}, 0xc0, 0x100}, @unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "00fc6318467e3c83c37e66cec1e44eb18a67f9ab80f453c14b046598b980"}}, {{@arp={@remote, @private, 0x0, 0x0, 0x0, 0x0, {@empty, {[0x0, 0x0, 0x0, 0x0, 0x652b910927df25be]}}, {@empty, {[0x0, 0xff]}}, 0x0, 0x0, 0x0, 0xfffc, 0x0, 0x0, 'gre0\x00', 'pimreg\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@multicast, @mac=@random="0400", @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, 0x4}}}], {{'\x00', 0xc0, 0xe8}, {0x28, '\x00', 0x2}}}}, 0x458)
r4 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@ipv6_newnexthop={0x30, 0x68, 0x1, 0x0, 0x0, {}, [@NHA_GATEWAY={0x14, 0x6, @in6_addr=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @NHA_FDB={0x4}]}, 0x30}}, 0x0)
syz_emit_ethernet(0x86, &(0x7f00000000c0)={@link_local, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @local, @multicast1}, {0x0, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x0, "306720a65ecadd8f8d4096edd3a616a0c3491e3bea200200", "8e6dbc6bc4b02931a149e80581e14a2c", {"a65651e8000000000000007f96141e51", "dac60bebefc50000000000000200"}}}}}}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000009c0)=@newlink={0x74, 0x10, 0xffffff1f, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x10}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_GRE_OKEY={0x8, 0x5, 0x8}, @IFLA_GRE_ERSPAN_DIR={0x5}, @IFLA_GRE_PMTUDISC={0x5}, @IFLA_GRE_LOCAL={0x8, 0x6, @loopback}, @IFLA_GRE_ERSPAN_DIR={0x5}, @IFLA_GRE_IFLAGS={0x6, 0x2, 0x9}, @IFLA_GRE_REMOTE={0x8, 0x7, @multicast1}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x74}, 0x1, 0x0, 0x0, 0x40000}, 0x8000)

181.072484ms ago: executing program 0 (id=4522):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vxcan0\x00', <r2=>0x0})
bind$can_j1939(0xffffffffffffffff, &(0x7f0000000080)={0x1d, r2, 0x3, {0x1, 0x1, 0x3}, 0x1}, 0x18) (async)
r3 = socket$inet6(0xa, 0x3, 0x791d)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r3, 0x8982, &(0x7f00000000c0)={0x0, 'macvlan1\x00', {0x3}, 0x80}) (async)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), r4) (async)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14)
r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200), r4)
sendmsg$DEVLINK_CMD_RATE_SET(r4, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x98, r5, 0x108, 0x70bd2a, 0x25dfdbfb, {}, [@DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0x4}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x40}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @handle=@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xf, 0xa9, @name2}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xe}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x3}]}, 0x98}, 0x1, 0x0, 0x0, 0x20000000}, 0xc850) (async)
r6 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000380), 0x2, 0x0)
ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r3, 0x4048587b, &(0x7f0000000b40)={{<r7=>r6, &(0x7f00000003c0)='IPVS\x00', 0x4000, &(0x7f0000000400)={@_ha_fsid, {0x401, 0x1, 0x6, 0x7}}, 0x4, &(0x7f0000000440), &(0x7f0000000480)=0x1}, 0x6, &(0x7f0000000a80)=[{0x2, 0x9, &(0x7f00000004c0)='\x00', &(0x7f0000000500)="a20b31c7b5a6f50defb306d5b4451c1763e3aa8c716f67cb9b9ba4dab11e71688929911c688433fe14428c9592bd2136f88b12a2baea3f1241c16eeb2c1a355df72601e6e54876e86e11f221d03416421c7b3332fe26e7ab064b4bbe9aaf1828a1d240b321c7c648d05e1327d753f79e0d39a024fb785ba870e03ad2980afbe618e1579dbe3070eab200121fcdfddd238162c783b4dea6c07a226eb06a68bdfe0c7f1ad7835bbf8be08b36adf087df6d63833d12a4bb4537e901e13a637f14d7df", 0xc1, 0x8}, {0x91ce9ef04d1f81f4, 0x9, &(0x7f0000000600)='macvlan1\x00', &(0x7f0000000640)="2e8637a561825f75b1c2f6123ece767be2b80d1d75f951e1b355d3cdb4bd7cc2bd98270823cf35f9c4af93660e3b0813110db1fef0430fb729fa6393106208938d4cbeb1e7c3a3e1c3b315cf87028777303ea85ec8aca477393655b481d232227167a24d9809fd8c1e734f2a22b660a0b2bef9c3674f8175857356cbb9130ee488bc331545e4c64139bcf8abb91d2fdda85d407afd0d7ce57b623bff54faa1d3812d5e172830f165e1bf7f33c0c7a4d9e9e69af72a6066b364af472525f5d0aef411d0f444e3210360b96020cb44b2467647fb635d7701", 0xd7, 0x10}, {0x3, 0x8, &(0x7f0000000740)='\x00', &(0x7f0000000780)="91ed8ac99a31be61fb212989efaf82779d35b5f9da87ce72fd11399436f113d6e6f8ac0904454aa988ea17d04bad4f460695d3fc4ecf0b4284c8039eeb85a4e58d51891cd28b3699df91ed15686109cd0591bcaaee89936fe7c6f82d00502755e35589530e43846f38192f7a90db291e455266d884db0b7121f5ef3fc8e1421f80b84e81cbc6dbbd4435", 0x8a, 0x20}, {0x1, 0x4, &(0x7f0000000840)='\x00', &(0x7f0000000880)="f8d6eadbc48a7dc923c84cb97a8755d35c8f63a9a14d1028db16a1e82d03edcbc528e6160a57b52b725ab5c5842203f677bed26a5e", 0x35, 0x26}, {0x3, 0xffffff7f, &(0x7f00000008c0)='{#:)},(\'\',\x00', &(0x7f0000000900)="31128541f6da2e4135f3c194eb969a59f4d3732a4b7181720f30079214149438ad7c61e7ab05c4cbf69b823808ab5bc6216c57570e5aecceba75f425caf20868cb642ed718c2209ac0cb50947c39e9bc4de3e2925ca683a594a98d8ef1b5ebc4352cb7da45e9e5f2988fe13d87ed67ecbbce489092f8816a73d7a2959baff6ddfd7b0b19f3cfff8d792fa16d304dde8519096b64f4fcf87fc1f8202c3c1d465bdf7d6810492fb1e66c2e7d2e9c245a5e17dadadff56ef087bb19216459a14d985a088872", 0xc4, 0x20}, {0x1, 0x0, &(0x7f0000000a00)='IPVS\x00', &(0x7f0000000a40)="d1072365c5525a0b64732a803f23", 0xe, 0x3a}]})
r8 = openat$cgroup_int(r7, &(0x7f0000000bc0)='hugetlb.2MB.limit_in_bytes\x00', 0x2, 0x0)
write$cgroup_int(r8, &(0x7f0000000c00)=0x2, 0x12) (async)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f0000000c40)={0x4, [0x0, 0x0, <r9=>0x0, 0x0]}, &(0x7f0000000c80)=0x14)
setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r7, 0x84, 0x22, &(0x7f0000000cc0)={0xc, 0x8004, 0x3, 0x100000, r9}, 0x10)
sendmmsg(r4, &(0x7f0000003f00)=[{{&(0x7f0000000d00)=@pppol2tp={0x18, 0x1, {0x0, r7, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x34}}, 0x2, 0x1, 0x3, 0x2}}, 0x80, &(0x7f0000001180)=[{&(0x7f0000000d80)="019ce5328cac95b967cb16e6bf5857bb69adc4ef5fb5eb6690e676fae102a7792206e6dbd44f4db847fa5815dfcbc7bc3e0e8876b61b25f89fa2226ce75b3c1c3bb02e1e95e23d4d498cdd47ff93838cb219436c292f3788ef91f759929fc9e18de5adee5e62ebc023dcdcda93e82ebb0c64bfc6cd2565b8a69fda3cb6f27c1a5ce36de099327f3a46ec69874a08bd6fd0", 0x91}, {&(0x7f0000000e40)="61509be4bd0c7269084eadd0bad4feca390a0d557a5ccbe8edb3f83219b50778d6f63ac4bbf33485dea797b04dcbf2e57109dae240b3c5e6baf49337ff4961d225dc02e9ba676b8ca2e33ae794156a180f2b7289a336bf62378e1a42e908ac95f1665970276f5ccb23143c60bba0532356549c7b0a7968057ee9263f5636c99d0cd2957aab005af7234646bfa7257b0d80f2ae6cd003be198f7db29d", 0x9c}, {&(0x7f0000000f00)="f1f5c71f4c45c12af9821019a6425818f3dbab181d77619a4399247983771b2e972ede12ee33b5ba5a759cb8ddebc9f31d4b1e9e2810aaaa18bdec411679e8ed35605865af3c7b1ec1d2061647e92bd7dce38a12c6e4e0adac43da58426db6eed254c3b3be5e1365a7367b2b72089cba70ab0e298bf3e89b246724b3ac679edbac", 0x81}, {&(0x7f0000000fc0)="346cd1cdb02130018a8781c003e4b2e4405364dc8df5b9b85341776db96a6d499046d5c756a7ad297310eb3d547b08ea6626878e548fd65bdabbcb5fc2267d41c4511360588adce39e37dc9dacf587e017b1ebb918cb3909127f2de7118db7224010e9a1498320b1c224c875fa9a31c1064bb5693586af143bbc68dd98251dc72bb63f148142c9feefe6bd39d0884554ceddc04fc1fcf90e6c16831b10e8d20ffcddef5093b4edb67a1f5d4dba43c3977ab94a9b79b3cd57228bafb853d337842e0f87a58c1b6465631c5fc4c185ae10adaa94", 0xd3}, {&(0x7f00000010c0)="99c3545571a28df70882b169064d950780f694f29bd583b59110fc4b3b5a653ab908dd8b4c09e49fe297191ceb412ec331064191148d3a0e7548f61149ac60984feb0dee46488d28496a8adf2ea0937f72d41436ae5806ece9a7907db05c125f651cf95161889ea516eda77298f197a23da616aeba9698cc33d3bc201cfc4e0c830ffd533f5473a2304b9c0b", 0x8c}], 0x5, &(0x7f0000001200)=[{0x78, 0x10a, 0x6, "9963f4d5d05c3e1757b00b859b9bd69d1b7c6db7410b18c097a9512780edc398a76b6175a24b0f5c0ce7f792532a36e2b57c3d3a8b73d6385aca0c6aa77265854e197546f5ce7dda2d0cb1e8fa5a8dd83e437a1441bfbffa8cff4706bd394582a35532cda13409"}, {0x110, 0x29, 0x0, "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"}, {0xf8, 0x113, 0x9, "fe07bce879bd6edaffde72d816be968a0c1c125789c87e4d50480c03ea6398fed470fb23cbfddb76c7fa413a8e4e7e4a9d591422a35fd33d8c876c192f68531f647f6865dfee40d09ca422cf19022d98182a03ec46db531b349aec7955b822e265646ca6dda0a8353eda9cf341fe47914c956763719ff1711544e7beccd13c8189c1977b2242c575966797798a3a4e656d691afcddc7a16b82911150cda17bf2d7268cedda275218666df5769096cd8cdd2661dcc924e77e2c906976daf493ae0e888b490d0b48b6db3ec07e167b10dab037f04f831809e17afdb3064dd89012ba9737"}, {0xe0, 0x103, 0x159, "9046dfa7d670c1b931a8ca4c4139f06288077d8770e812627cfe780fcf38925f400aefb47bcce8a5bdb55ab013a2316cc367e71ec1313be3d39e61824adf3215d8017dad0cc658684f063dbb4ed00d3e442a585c29619918c02fdd9ee7d09d5ced673bec0331a9ca7498fa90a4a7153b3e592fb05aaa598c2b5b95007d9f9fdd6369d31bc710a40afcbe1f4ff8d8ce4984e3890ee3dcf4f4ae20ecab85d0d15786d241c1fa6d3158eabcec08a995b9b514043e54c201f2b9a692df7cdda785e9ca8c6757125ad41cb80f739859"}, {0x68, 0x10a, 0x5, "944dce71f984974d4e04f89540d4742b6857437e4e6be3998fe7bdce6f62c6512f67ea9cb3eec03ee28a71c30774788812fc95a42675614c7e351aae7bf0af87657b35eace494d0ad2d7235af2375a907d67d9f7f7d29e"}, {0x20, 0x1c, 0x40000000, "41df123e65646c98fc649ad9582144"}, {0xb0, 0xff, 0x2, "98987d127a73c081c844f0266d8972e537b49c64aa4fb5a9720ba9a8e771114f3a32215850b0b979d9f8a9d4385f7f63159d744d5f8c9f18a3876b043ef8ad9d77226ba299052c6db61a807b1b391b14d8f035d6ee3720b03b3dcefd0c8b060bd72dd2df18f08430161c2754930c3535008aeb4d373245f7ba9012f75502b596a17975f07e19bd96d90c6dd9358c3dcbc118d7109b74b88399e9c2d0eebd0989"}, {0xd0, 0x117, 0x40, "793b69546ab31608165e9d2fc791ef80f20b34bc42ed29a496f778a0d72eb4f5e4abc4c3dcfb195a626d67fd80116bbc28570e73e27815f2438ad2cb539b909770bd6a9b3879b47584388dea5fd60228585230370ea7e968241d29c296a98c8d817bd26e90fb20849001e4a9942ac0ee9f7c59aa7896f4a6535fcb829118c95f039784b380a6f6883f6f72eab4bdcb4735baa95f962b7675ca0c9965700cd77142fa477eabb66696fbf62f8d06cfdab059ba21ecb135dd9c12db3b515a06b166"}, {0xe0, 0x115, 0x3, "4b2f89a24783ea938ad5d5dded542152fa569cc58dd116a4fb8d65eafe59798cfc998acebb8dc5e0110d9c189ea9515d6f25b4f2d37ebcf7679e436f5d0a37567cad29bed966a0f61811da537ea26f6d71f803e449fef48a641ce59d03dff08ee013f76c7b8267dd305c102bff12f0a342db28e869ae3b77c3f10c7260d2c1b3ed981d82037b3324ac2ad91a0325398bad067372d297cc7ec792848cdc04179f0dd94afb24c17750c41f7962d344de82393f3912929ae6974ef70f33e930f506a985982bd5807cc63f"}, {0x60, 0x6, 0x1, "192964449a5583b7b870ecc91ce188c056c30602779ae01628c8e00abc78f7d2f6f6473acba058a04e9a88ecc784ae5d03ae98d709ec6ae1416bbcdcc842242832777fe269f7a073492a4de1c06b9d"}], 0x6a8}}, {{&(0x7f00000018c0)=@can, 0x80, &(0x7f0000003980)=[{&(0x7f0000001940)="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", 0x1000}, {&(0x7f0000002940)="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", 0x1000}, {&(0x7f0000003940)="086fa41b11702db2dd64ab", 0xb}], 0x3}}, {{&(0x7f00000039c0)=@nfc_llcp={0x27, 0x0, 0xffffffffffffffff, 0x2, 0x9b, 0x2, "c9a362215d8aafbd855c43a91645e0860cb07864f8b15f358201874eb96e5e13032af409ae212691d4995bef8d7da25ad3da4758969efb1c9a84c3108fa163", 0x6}, 0x80, &(0x7f0000003d80)=[{&(0x7f0000003a40)="37c6aa62c5423e8efaee5c8530016bcb9fff290bc1332f7cfa60cc392682374ce767b9b8ebfe0944ebac87b6af055a37e090c8fd73a87ddeb89f40ff957fe197866e2ba3c8af31e01f2f6e94ecb7f257a23ea9b99b2efd50d41cc6456c5dccd090677865800bfbb58aaa8dc9eeae4d65c418f0a0ded1025af6f21e2d802a4da9bf30d401e2f467fa911f496c8f5a1319839b6938db2b8312d1c6ac263718c08a1180f53955e03a984a", 0xa9}, {&(0x7f0000003b00)="1740e331a91c1cceced93e69965e76ee14aa17ce50f0ea7a432843c0804d326bba72b8b14a3da9994b2569b1588450b1377ca9c5d4f50168a15971511eaa46c653978d6aaecd9908f925f11cd50371d20f02ae195bdae8a3f735bb66fab73254f7a78f962015164533b6910c19", 0x6d}, {&(0x7f0000003b80)="341cef17c417d02b5d2784786a6d3c92e0f571248b0c6868c60ce968476b8db58204a943ee96bd252c85dfbaa74a2b277acfe18c1725c9d3330344017d802523bf9be8bdca434d5d11599e20add257318ff29a7eba8d285e6aed8a0984334a95bc170b74a86f8672f4f387d07b39a38e3a54ade36f9124bd54cff20df1ca64196e354988bc37b0dfb21d19064bfc9cc1c43dfad22a51eb5963bfc880198a0623593590e3872fa4d14d5a37", 0xab}, {&(0x7f0000003c40)="66e6932fbc87fb03cd4e2657b8a9f4112d340417a8880628ae9ed89dbc58442991c8e2d5855d5991a5de8ab9f7aaddbe867b4008f5ed40c332822acc8c691cc2552516ebc1a2939999b1475a5618f1aa74b7b13b51a6dc019b23f5ab1a89be794be8adbc6aa986222bd3555130339991fe112b3ce4ffa12d663b430d64800743872839451439e551c7c857e94e986b6327bd6e1e781853c2878f1672923fefd90556", 0xa2}, {&(0x7f0000003d00)="87bcf44f0e9041d599817a0b7db3c63f81e67346135c743176b60be9fa9a164feb05706df91a71d23f6fbc39390e1bec33519a34ec6c86af123c605f50d0618cebc665f14c0db06eed221141081e910d8a39a2b66b645f75522ba653f4d1a79b54fb77d083a3", 0x66}], 0x5, &(0x7f0000003e00)=[{0xd0, 0x115, 0xfbf7, "8e17312b236f608ac95baf8e1ef150c9e0a25f96de4fcafbbfc451418fca2b9dbc233a9f0a5d92015c693623c892b06ad02db911927e13dcda8a1ad66624152e2a69ec9be3859be6485f5d730e0e2a836556813f9f878acd2cc7a34fdee05751a9b9a693cc3b366061342939847915972be75f7014cef5befd135049509db81f65feb4992d6a07ba45a77fab5556853a7214422a9f8c1fac3515b94006be0dec7325ebca8e4edb0c1f46dc78e244c16cfe445a3e82c296997ffa2c7a"}], 0xd0}}], 0x3, 0x40090)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async)
r10 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_LEAVE(r10, 0x10f, 0x88)
setsockopt$inet6_buf(r3, 0x29, 0x2f, &(0x7f0000003fc0)="0bdc1c43c482eac5762a1f3067053f0a", 0x10)
sendfile(r7, r1, &(0x7f0000004000)=0x8000000000000000, 0xa)
getsockopt$inet_tcp_buf(r7, 0x6, 0xe, &(0x7f0000004040)=""/46, &(0x7f0000004080)=0x2e)
write(r0, &(0x7f00000040c0)="5fcc3a3492340ee793581a46d3f2f2c49223738405", 0x15) (async)
sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f00000041c0)={&(0x7f0000004100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000004180)={&(0x7f0000004140)={0x28, 0x0, 0x1, 0x801, 0x0, 0x0, {0x5}, [@CTA_SEQ_ADJ_REPLY={0x14, 0x10, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x74}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x3}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000040}, 0x0) (async)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, &(0x7f0000004300)={&(0x7f0000004200)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000042c0)={&(0x7f0000004240)={0x70, 0x0, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'vcan0\x00'}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x8}, @L2TP_ATTR_L2SPEC_LEN={0x5}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @private=0xa010102}]}, 0x70}, 0x1, 0x0, 0x0, 0x1}, 0x880)
openat$ppp(0xffffffffffffff9c, &(0x7f0000004340), 0x214080, 0x0)
ioctl$PPPIOCSCOMPRESS(r7, 0x4010744d)
ioctl$sock_netdev_private(r3, 0x89f5, &(0x7f0000004380)="004b390118ba953eb044e9011ac9631166d8ac446f583cfe1c711d8a5bc7332a926608f380d34752881536afd65cc3d33e4c4f23a489781c5d4fd7978c3ca1b52734285679f2cfeaf1c82e55ec5343be4c5dd10197e21183910f85088901d417e33596d0") (async)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000004400)={'veth0\x00'})

83.346258ms ago: executing program 0 (id=4523):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) (async)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ed5696c5820fae0000000000000080beef911d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x800)
sendmmsg$unix(r1, &(0x7f00000020c0)=[{{&(0x7f00000050c0)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x80}}, {{&(0x7f0000000540)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="24000000000000001701000002"], 0x28, 0x2000c000}}], 0x2, 0x88) (async)
socket$vsock_stream(0x28, 0x1, 0x0) (async)
socket$vsock_stream(0x28, 0x1, 0x0)
r2 = socket(0x28, 0x5, 0x0)
bind$vsock_stream(r2, &(0x7f0000000040), 0x10)
listen(r2, 0x0) (async)
r3 = socket(0x28, 0x5, 0x0)
connect$vsock_stream(r3, &(0x7f0000000080), 0x10)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400001d000000850000001500000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
ioctl$NILFS_IOCTL_SYNC(r4, 0x80086e8a, &(0x7f0000000000)) (async)
r5 = socket$inet6_sctp(0xa, 0x5, 0x84) (async)
r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'dummy0\x00', <r7=>0x0})
ioctl$sock_inet6_SIOCSIFADDR(r5, 0x8916, &(0x7f00000000c0)={@ipv4={'\x00', '\xff\xff', @empty}, 0x6e, r7}) (async)
r8 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000002c0)=@base={0xa, 0x16, 0xb3, 0x7f, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x100000}, 0x50)
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmmsg(r3, &(0x7f0000000800)=[{{&(0x7f00000001c0)=@qipcrtr={0x2a, 0x0, 0x7fff}, 0x80, &(0x7f0000000580)=[{&(0x7f0000002240)="681ba69bebde37015b1d0019922c88bbb6eb41bbc9538aa3e47c66309ed4c23b439557dccd4b28310cfad6c05bee182ca7616efb3c3d5de5a244f499fd85472409e84aa4035088ff0312c7d60e1227e2132482aefa36b47247d8d236d51a0acbb075d32fc4cfed8ae30f5ef57f7a00d078b4794d2c15901ccac97ca4501283c3aad659dd6d7d8f4cc4df708af6053e56311aa51839f6bd6366cdd637615d024f238a5dd5152a7d9d0519689f95d2", 0xae}, {&(0x7f0000000500)="6be33147aa422659e375a10562cb3205b36cdb7b3fe883b95437d4c16a8c453c9444f2cfd9745917b9b256b7021d0a14e87e6d5d7d47a4aefa5e53436ea99d18038c0047b0ac8275600be2e2af052815b6ae73022d76b5aedd39", 0x5a}], 0x2, &(0x7f0000002400)=ANY=[@ANYRES16], 0x58}}, {{&(0x7f0000000640)=@caif=@dbg={0x25, 0x4, 0x2b}, 0x80, &(0x7f00000007c0)=[{&(0x7f00000006c0)="97a9d7fb53675dd0d91d9adaf4ced628f5e008aaf32bc8b7a4b6f09d3b4f16d7308e450a28508eeb4e4f334daa036380a517993facebb64e784231151ea8e46818a2cba6ae1c32a986a0d0827c8c1498926ee10469515af57271db78e72bf9143eb321b50b02d179918977aaf34c0161e4448de9a41d2c790c413b83714e8bafb0c0e45385a30ddeb911e1bb5ad18e206dcd", 0x92}, {&(0x7f0000000780)="31c075be46c4b0f8fbc63ad29aa9a67f54244d3a4139a66946813181af1f2847db9c6072ffb174840ce90e14e5c22dd009", 0x31}], 0x2, &(0x7f0000000a40)=[{0xc8, 0x10b, 0x40, "9a9bf88174dbd1a2f34d29b3a1e44f57f60bb040f5a432772be5826202d6165d6b64c5426c8c0204555823bcde063e3565a6d7a6c47d879469946a21e46db66bde5e620f304fb4800c08cde55946d5802b8d26b9f4da7afa10644055cd945e73c8e66107bbaa9f30db4a0ec2cc707cb54ef11919ab47e481fa2324519b5b1fdd83dd9c35ccdd64c76f5bed0cec859bb7c0085c127d85c4f65589775ce2621b135e4640222fa27b36f493b10d67baedf48700db7e3557"}, {0xa0, 0x10f, 0x7, "fa5ae24134ca93c7a11f7e517078571781219df3a8b4bd77f20607dd4a27657fd0a5c4e104d2cd00893b55f874052ecf771f63c2af11a25817ee5efae17854959a4ef0db43c0227dceb67268bfa6a6488bf1c6179782f861da6acad2408e0cebe97b61a82a95972905c8193b5babddf18299cd1fda234dc2e05d430f285222afd24d1ee3849c6eaecef87508"}, {0xe0, 0x0, 0x7fff, "f278a9bc97e95ea22ab94e575d483d71ceab0b2b8d443555e442bf0b82755546b2ca3e070c4b378531d27a73f3ebcae6d40b6e8cbbcd2897ae873b54b7bacfa7d1339d9751cd149678c78077ad13031ac1140d2cb905a1ed8a6ba249958f567c4c7e9a7439c8a6a666d9abd5781db04b7599164e695bf10b1edebea3e18311b7471fdb3ab2ec3275e2a87176940ecf219ce8700744bbff003267514a364e59aec51902ea1f99855daa4cfbf02ca4fd3283f1e4c69e1fdf34fdf7a3780701bdfe1af40cef243f7a21d7d80800af0cdc47"}, {0x78, 0x10f, 0x9, "1037b6a3e1d0ffdeaa374ac85a83f3b98ee20bccd04fa859abee7228d255232b389bdef85c5db09d33d2299c9b19551ea538d85fcf0e72e5c6d26f38ceaefa21c4fe9753ed70e9fa918d8e901a4cb24fa7844def01584a082362c4ea5176ba9679"}, {0xc0, 0x3065c7184bd5ce2d, 0x0, "9f3bde028de59e63e8098327dd3c6a7cab14ea17a354a630a1ed7e15d1784e818699ff61535203515039f6ac27c8a8360639235cb4cbc4ef246594cd70bd3a9f05b611e8a1bc5bd8ae60767eb67bc8479f72ce2da2b1ce8911949418f172e764271d1a1391ae916d66f1d4e4b9adb3f886537352314cd76e61fcef6468439dec048fa1c1f85286b93ccc50c5bc148b4094b8d23958f9a6f358c099bf6ef92ff2888de066df06d519ba76afd18819"}, {0xb0, 0x102, 0x8, "bb4573a8c0480ae9e9424261e00f6b4f6fe2c86f4d50aba4afc7da9ae49c26a6a42812c6dd21724e809e7374258ce497359e6dd7e27f3dbee942e4d092a06a11ab94636be0b2b204b9fbfcd19ad36f442afba365fbb2ef6e13bc2920fd0692b7dc7e42205ed479a796ecc0eb2fd4f36e8b6bf6d627beafba0a39813cfd7908c79c0d7f24f57415a85531a91cfa1900"/158}], 0x430}}, {{0x0, 0x0, &(0x7f00000021c0)=[{&(0x7f0000000e80)="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", 0x1000}, {&(0x7f00000005c0)="9a33eef50eb1461a1cfccd402d70720e52b33d138c76037dff04d74661e1fd084b536b649a8a86bedd4c9bfb2993875375d1b1be3d53db359216b8497205b341ffa805f076bb198a2390f64f5447f3c0fa0b8e999759a1b41cf668c6676511c0cf101670e2fd209ff3605e020394", 0x6e}, {&(0x7f0000001f00)="8d3e8d6c56f2b23b4493d09ea19d03460b", 0x11}, {&(0x7f0000001f40)="ead286161ad8c080c72eb7175cd36d7d2e82a77800b2b17102d009012af866edb6f60d3189f07567e933ca83538724535599ad50dc3921bc067e5dbb8b7eb4667cffe44ec0d515957992523bae1f1c0102def8f327ab7dccd30f46f5ca90d50bf4697f3190cb1b83852ccaff39de330818e5d3da11d8b613df0e545be6529d73edec9a7e3cbb6efcbcbc837a98f5d781e91d63287814a357ee1c3e7ebd2409a5ca80570cc4704b7bf5ae3d70433f77fc5c725225e0009362c6010035fb729ff7ac07f1b70de35e3d256b4a5705e2db03d593ee4c61f2ee37b6007aa8959f5062afe6063d2f3323", 0xe7}, {&(0x7f0000002040)="387a7b629a755611648c9da7660b33ed2388ff1f3610", 0x16}, {&(0x7f0000002080)="a5a00f31409b46ee67f9a330649a0e2cc7", 0x11}, {&(0x7f00000020c0)="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", 0xff}], 0x7, &(0x7f0000002500)=[{0x68, 0x10d, 0x74, "784b887c0063f5837146fe0b7597fd6b9bd257dc278a2047828dda5b1c2c10e65e7f813c6f8b105581cce0245c7cd1ce9d19abf2a2b1117d164ccedfd9f0ac4f75f86670459523413af6197d228ad8c4237b39"}, {0xc8, 0x110, 0x80000001, "48d144fd3a91acfa3ebc0e13987d72e8a23101f50dcb2a42c0d00cb2a3014d363b156bc828f25eda7e89d4cc713cd63fdb53644db32407c1500297edbb15e3fb51d0c21a2b03e2aea87f6d3eafeac8057de3961d780e164fea430914c8ef1a8593e44f5894d1a1fbfafa27ec5d6b21f08f5a1a6a986f583ca521d7687982b42bda132950b876ed64c07864f045d8a142089bfa5ef7476e11e93acf89f76476ed8750c806d747467b78c82a2dd200b28ebe53f3f31d1c50"}, {0xe8, 0x101, 0x8000, "0970f1982287f248501f37856530b1c24d2d4d9db79b3f4bab4a2c71bfbbc1bd53bac8f15d4ece2bc11e7ed53001c329adaaac72afbc9613b98401c937999fedb20aea8715f948cbd6ab9fb5f41b104fb87335f6d3a20f1cf4ec50063613ed9f29e50f3051e10eae086b62c660ca3cf35a1be7a6c5ee232f0889938ef25005d08308bde176714c531c66270aebcd5c314b8613c6ae9bf09d121d69960ca209ff11df71ae81b29f644274310397c99b4eb92ccac79f44ac811349fef179011e1dc20423bf373197b1d17cbacf518a02627f69d3e2ffc23622"}, {0x18, 0x10d, 0x1000, "c9b117de780da729"}], 0x230}}], 0x3, 0x20004080) (async)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000340)={'batadv_slave_0\x00'}) (async)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x400c89c)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, &(0x7f00000023c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000002380)={&(0x7f0000000900)={0x8c, 0x14, 0x10, 0x70bd2d, 0x25dfdbff, {0xf, 0xc}, [@INET_DIAG_REQ_BYTECODE={0x78, 0x1, "eddeadc78e48d6a300d68034710d4a0fefb88074fbde8f3b15e49cd7c0ccab71fd08183e55375f6d0778950de2cf8994778b28ddf1ce0616281e0743a5d9fe29b113e311c182dcde7fa575b31a0a748175cbb7cca2d3ec050f6b3cb28fdb867ba9b765e3925453e8784e26354c69b19d9e215e22"}]}, 0x8c}, 0x1, 0x0, 0x0, 0x80000}, 0x40) (async)
sendmsg$nl_generic(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002b40)={0x18, 0x38, 0x119, 0xfffffffe, 0x0, {0x4, 0x7c}, [@nested={0x4, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x48814}, 0xc000)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x8, &(0x7f0000000080)=@framed={{0x18, 0x3}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r8}, @generic={0xc3}, @exit]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000001}, 0x94) (async)
r11 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$SOCK_DIAG_BY_FAMILY(r11, &(0x7f00000065c0)={0x0, 0x0, &(0x7f0000006580)={&(0x7f0000006080)={0x28, 0x14, 0x211, 0x0, 0x0, {0x28}, [@INET_DIAG_REQ_BYTECODE={0x11, 0xfa, "4ac2411e47060aefadfa617ab9"}]}, 0x28}}, 0x0)

81.970224ms ago: executing program 1 (id=4524):
r0 = socket$netlink(0x10, 0x3, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x5, &(0x7f0000000240)=ANY=[@ANYBLOB="180200000000000000000000000000008500000087000000850000000700000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r1 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="20000000171401"], 0x20}}, 0x0)
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) (async)
r2 = socket$netlink(0x10, 0x3, 0x0) (async)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r3 = socket$tipc(0x1e, 0x2, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00', <r5=>0x0})
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_CQM(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)={0x20, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_CQM={0x4}]}, 0x20}}, 0x0) (async, rerun: 32)
sendmsg$NL80211_CMD_SET_POWER_SAVE(r2, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x34, r6, 0x502, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x400c040) (rerun: 32)
r7 = syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0), r0)
sendmsg$TIPC_NL_NET_SET(r0, &(0x7f0000000800)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1000800}, 0xc, &(0x7f00000007c0)={&(0x7f0000000640)={0x158, r7, 0x200, 0x70bd27, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0xf0, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}]}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x401}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffff}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}]}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffff6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2222}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}]}]}, @TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_MON={0x44, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x92a5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}]}]}, 0x158}, 0x1, 0x0, 0x0, 0x800}, 0x4000) (async)
r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async)
r9 = socket(0x400000000010, 0x3, 0x0) (async)
r10 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r11=>0x0})
sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r11, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x3}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) (async)
socketpair$unix(0x1, 0x3, 0x0, 0x0) (async)
r12 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r13=>0x0})
sendmsg$nl_route_sched(r12, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, r13, {}, {}, {0xffe0, 0x5}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_HASH={0x8, 0x2, 0xffffffff}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20004000}, 0x20048850) (async)
r14 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r14, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d6574610000000014000280080001400000001208000240000000", @ANYRES16=r3], 0xc4}}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)

4.730291ms ago: executing program 0 (id=4525):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
r1 = socket$igmp(0x2, 0x3, 0x2)
getsockopt$MRT(r1, 0x0, 0xd1, 0x0, 0x0)
r2 = socket(0x10, 0x80003, 0x0)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000001, 0xc3072, 0xffffffffffffffff, 0x3000000)
r3 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
ioctl$sock_SIOCETHTOOL(r3, 0x8946, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'lo\x00', <r4=>0x0})
r5 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0)
write$cgroup_int(r5, &(0x7f0000001480)=0x80000000003, 0x12)
r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r2)
sendmsg$ETHTOOL_MSG_LINKINFO_SET(r2, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000180)={0x10c, r6, 0x400, 0x72, 0x25dfdbfd, {}, [@ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0x1}, @ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0xfb}, @ETHTOOL_A_LINKINFO_HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x8}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x3}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0xfb}, @ETHTOOL_A_LINKINFO_HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}]}]}, 0x10c}, 0x1, 0x0, 0x0, 0x40042}, 0x8000)
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newqdisc={0x64, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xff, 0x41e2d7cf, 0x4, 0x2, 0x3f, 0x8, 0x5, 0x0, 0xcb2}}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000}, 0x40000)

0s ago: executing program 1 (id=4526):
r0 = socket$netlink(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, 0x0, 0x0) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1, 0x4, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='GPL\x00'}, 0x94) (async)
clock_gettime(0x0, &(0x7f0000000000))
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48)
r1 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r1, 0x0, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=@newlink={0x28, 0x10, 0x801, 0xfffffffd, 0x8000000, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20421}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040000}, 0x8024)
socket(0x80000000000000a, 0x2, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xc3}, {}, {0xe, 0xd}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) (async)
setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000280)=0xc9, 0x4)
readv(r1, &(0x7f0000000200)=[{&(0x7f0000001b80)=""/4096, 0x1000}], 0x1)
sendmsg$can_bcm(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES64=0x0], 0x80}}, 0x0) (async)
socket(0x10, 0x2, 0x0) (async)
setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) (async)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="500000000206030000000000000000000d0000000c000300686173683a69700005000400000000000900020073797a31000000000c000780080008400000005d05000500020000000500010006"], 0x50}}, 0x0) (async)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
sendmsg$IPSET_CMD_ADD(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_LINENO={0x8}, @IPSET_ATTR_ADT={0x14, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAME={0x9, 0x12, 'syz2\x00'}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
recvmsg(r5, &(0x7f0000001700)={0x0, 0x0, 0x0}, 0x0) (async)
sendmsg$IPSET_CMD_LIST(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c0000000706010800000000000000000a0000040500010007000000925c9885fdb7f9fc5a2b3fd8de7cd7331a984e37747c3d3f6f086e6d0f68387d7739718ecfd79786e5fce277c58a3ff7f699de62b2a50f1a71c380ebb15f99858cc86045f5709929197c5728e865add3793ca27c70b34f1345de90a5cd34b4e7f764a010a001e69797ead703711817b0cf2fb1c6473d1cdf9ef8fc2fd8636ae63073a29c90b5f89ca0d76bc42c1573962787c5cbf3ee2ce8d48a9fe9ae8e4b7dfd7dfa696c320d85114cab1ad7689da12c9b73f28e218a7acb5d57b70af3d2b6b95f0633b269b0e6d64a4e16a6b295c96bdf493711c2d6eed50906f92504314b12b4719c24ff9c27e0a71232b51316ae4b9c97f78b0e244d6b63591fccb765a9"], 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80)
socket$inet6_tcp(0xa, 0x1, 0x0) (async)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x4d2f02, 0x0) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0xfffffffffffffdd4, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0xd, 0x7}, {0xffff, 0xffff}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x5}]}, 0x2c}}, 0x0) (async)
r6 = socket$kcm(0x2d, 0x2, 0x0)
sendmsg$IPSET_CMD_LIST(r6, &(0x7f00000000c0)={&(0x7f0000000000)={0x2d, 0xf00, 0x0, 0x80}, 0xc, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x48d0}, 0x44044)

kernel console output (not intermixed with test programs):

devsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  282.324195][ T5668] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  282.327885][   T10] syz1: Port: 1 Link ACTIVE
[  282.330516][ T5668] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  282.335268][ T5668] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  282.344798][ T5478] ip6_tunnel: syztnl0 xmit: Local address not yet configured!
[  282.351197][ T5668] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 20000 - 0
[  282.354139][ T5668] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 20000 - 0
[  282.361868][ T5668] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 20000 - 0
[  282.366779][ T5668] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 20000 - 0
[  282.372310][T16616] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2898'.
[  282.389444][ T5668] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  282.389508][T16616] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2898'.
[  282.395443][ T5668] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  282.402557][ T5668] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  282.408475][ T5668] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  282.416673][T16619] lo speed is unknown, defaulting to 1000
[  282.429463][T16618] lo speed is unknown, defaulting to 1000
[  282.508311][ T5611] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  282.681289][    C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  283.366459][T16635] bond31: entered promiscuous mode
[  283.369128][T16635] bond31: entered allmulticast mode
[  283.371642][T16635] 8021q: adding VLAN 0 to HW filter on device bond31
[  283.588035][T16640] xt_hashlimit: max too large, truncated to 1048576
[  283.602638][T16640] bridge22: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  283.618037][T16640] mac80211_hwsim hwsim7 syzkaller0: left allmulticast mode
[  283.708461][    C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  284.181085][T16646] validate_nla: 7 callbacks suppressed
[  284.181103][T16646] netlink: 'syz.1.2906': attribute type 2 has an invalid length.
[  284.267411][T16650] lo speed is unknown, defaulting to 1000
[  284.729172][T16657] netlink: 'syz.0.2909': attribute type 1 has an invalid length.
[  284.748393][    C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  285.788566][    C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  286.028469][    C0] ip6_tunnel: syztnl0 xmit: Local address not yet configured!
[  286.175282][T16665] bond28: (slave bridge18): Releasing backup interface
[  286.180586][T16665] bond29: (slave bridge21): Releasing backup interface
[  286.185701][T16665] bond30: (slave geneve4): Releasing active interface
[  286.354880][T16680] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  286.361675][T16680] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  286.629184][T16691] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2916'.
[  286.635999][T16691] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  286.828319][    C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  286.891179][T16703] netlink: 'syz.0.2920': attribute type 1 has an invalid length.
[  286.901194][T16703] dvmrp0: entered allmulticast mode
[  286.941829][T16705] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2921'.
[  287.108049][T16714] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2925'.
[  287.108053][T16715] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2925'.
[  287.108073][T16715] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2925'.
[  287.111859][T16714] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2925'.
[  287.163844][T16719] lo speed is unknown, defaulting to 1000
[  287.262051][T16725] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2928'.
[  287.324429][T16728] bond32: option ad_actor_sys_prio: mode dependency failed, not supported in mode broadcast(3)
[  287.330021][T16728] bond32 (unregistering): Released all slaves
[  287.398906][T16719] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2927'.
[  287.485309][T16740] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2932'.
[  287.495372][T16740] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2932'.
[  287.554152][T16742] netlink: 'syz.0.2933': attribute type 13 has an invalid length.
[  287.557293][T16742] netlink: 'syz.0.2933': attribute type 17 has an invalid length.
[  287.577450][T16742] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  287.739765][T16746] netlink: 'syz.2.2934': attribute type 1 has an invalid length.
[  287.763905][T16746] 8021q: adding VLAN 0 to HW filter on device bond32
[  287.868358][    C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  288.060344][T16753] syzkaller0: entered promiscuous mode
[  288.062151][T16753] syzkaller0: entered allmulticast mode
[  288.210833][T16761] netlink: 'syz.1.2938': attribute type 1 has an invalid length.
[  288.327695][T16767] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  288.454164][T16780] openvswitch: netlink: Invalid VLAN frame
[  288.456308][T16781] netlink: 'syz.2.2942': attribute type 4 has an invalid length.
[  288.462429][T16780] netlink: 'syz.0.2943': attribute type 62 has an invalid length.
[  288.645545][T16800] netlink: 'syz.0.2951': attribute type 7 has an invalid length.
[  288.717166][T16806] x_tables: duplicate underflow at hook 2
[  288.833411][T16813] vlan0: entered promiscuous mode
[  288.835654][T16813] bridge0: entered promiscuous mode
[  288.908431][    C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  288.930561][T16825] bond32: entered promiscuous mode
[  288.936264][T16825] bond32: entered allmulticast mode
[  288.939422][T16825] 8021q: adding VLAN 0 to HW filter on device bond32
[  289.023749][T16840] ipvlan1: entered promiscuous mode
[  289.028294][T16840] bridge0: port 1(ipvlan1) entered blocking state
[  289.031438][T16840] bridge0: port 1(ipvlan1) entered disabled state
[  289.034138][T16840] ipvlan1: entered allmulticast mode
[  289.035919][T16840] bridge0: entered allmulticast mode
[  289.038946][T16840] ipvlan1: left allmulticast mode
[  289.040614][T16840] bridge0: left allmulticast mode
[  289.284834][T16862] validate_nla: 2 callbacks suppressed
[  289.284845][T16862] netlink: 'syz.1.2966': attribute type 1 has an invalid length.
[  289.608915][T16901] lo speed is unknown, defaulting to 1000
[  289.684796][T16907] syzkaller0: entered promiscuous mode
[  289.686675][T16907] syzkaller0: entered allmulticast mode
[  289.762810][T16914] xt_CT: You must specify a L4 protocol and not use inversions on it
[  289.775814][T16913] xt_CT: You must specify a L4 protocol and not use inversions on it
[  289.778901][T16914] x_tables: ip6_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING
[  289.958358][    C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  290.046285][T16925] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode
[  290.258349][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  290.390828][T16956] bridge0: port 2(bridge_slave_1) entered disabled state
[  290.551068][T16956] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  290.804059][T16986] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[  290.806532][T16986] CPU: 1 UID: 0 PID: 16986 Comm: syz.2.2997 Not tainted syzkaller #0 PREEMPT(full) 
[  290.806544][T16986] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  290.806550][T16986] Call Trace:
[  290.806554][T16986]  <TASK>
[  290.806558][T16986]  dump_stack_lvl+0xe8/0x150
[  290.806572][T16986]  sysfs_warn_dup+0x8e/0xa0
[  290.806583][T16986]  sysfs_do_create_link_sd+0xc0/0x110
[  290.806594][T16986]  device_add_class_symlinks+0x1cf/0x240
[  290.806607][T16986]  device_add+0x475/0xbb0
[  290.806618][T16986]  wiphy_register+0x1dc5/0x2dc0
[  290.806637][T16986]  ? __pfx_wiphy_register+0x10/0x10
[  290.806649][T16986]  ? __pfx_netdev_run_todo+0x10/0x10
[  290.806662][T16986]  ? minstrel_ht_alloc+0x6e0/0x7e0
[  290.806674][T16986]  ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0
[  290.806687][T16986]  ieee80211_register_hw+0x3d82/0x4a70
[  290.806706][T16986]  ? ieee80211_register_hw+0x1931/0x4a70
[  290.806726][T16986]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  290.806738][T16986]  ? __asan_memset+0x22/0x50
[  290.806747][T16986]  ? __hrtimer_setup+0x1b7/0x260
[  290.806756][T16986]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  290.806767][T16986]  mac80211_hwsim_new_radio+0x3335/0x5aa0
[  290.806786][T16986]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  290.806793][T16986]  ? kstrndup+0xbf/0x160
[  290.806804][T16986]  hwsim_new_radio_nl+0xf6a/0x1c00
[  290.806820][T16986]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  290.806853][T16986]  ? rcu_is_watching+0x15/0xb0
[  290.806865][T16986]  ? trace_kmalloc+0x2a/0xf0
[  290.806879][T16986]  ? __nla_parse+0x40/0x60
[  290.806893][T16986]  ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0
[  290.806902][T16986]  ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0
[  290.806914][T16986]  genl_family_rcv_msg_doit+0x22a/0x330
[  290.806925][T16986]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  290.806938][T16986]  ? bpf_lsm_capable+0x9/0x20
[  290.806947][T16986]  ? security_capable+0x7e/0x2c0
[  290.806959][T16986]  genl_rcv_msg+0x61c/0x7a0
[  290.806969][T16986]  ? __pfx_genl_rcv_msg+0x10/0x10
[  290.806975][T16986]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  290.806989][T16986]  netlink_rcv_skb+0x232/0x4b0
[  290.806999][T16986]  ? __pfx_genl_rcv_msg+0x10/0x10
[  290.807006][T16986]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  290.807021][T16986]  ? down_read+0x270/0x2e0
[  290.807028][T16986]  ? genl_rcv+0xd/0x40
[  290.807035][T16986]  genl_rcv+0x28/0x40
[  290.807041][T16986]  netlink_unicast+0x75c/0x8e0
[  290.807053][T16986]  netlink_sendmsg+0x813/0xb40
[  290.807066][T16986]  ? __pfx_netlink_sendmsg+0x10/0x10
[  290.807076][T16986]  ? aa_sock_msg_perm+0xf1/0x1b0
[  290.807086][T16986]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  290.807096][T16986]  ____sys_sendmsg+0x972/0x9f0
[  290.807106][T16986]  ? __might_fault+0xaf/0x130
[  290.807117][T16986]  ? __pfx_____sys_sendmsg+0x10/0x10
[  290.807130][T16986]  ? import_iovec+0x73/0xa0
[  290.807142][T16986]  ___sys_sendmsg+0x2a5/0x360
[  290.807151][T16986]  ? __lock_acquire+0x6b5/0x2cf0
[  290.807160][T16986]  ? __pfx____sys_sendmsg+0x10/0x10
[  290.807173][T16986]  ? futex_wait+0x2a2/0x390
[  290.807193][T16986]  ? __fget_files+0x2a/0x420
[  290.807201][T16986]  ? __fget_files+0x3a0/0x420
[  290.807213][T16986]  __x64_sys_sendmsg+0x1bd/0x2a0
[  290.807223][T16986]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  290.807236][T16986]  ? rcu_is_watching+0x15/0xb0
[  290.807248][T16986]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  290.807255][T16986]  do_syscall_64+0x15f/0xf80
[  290.807264][T16986]  ? trace_irq_disable+0x3b/0x140
[  290.807277][T16986]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  290.807284][T16986] RIP: 0033:0x7fa2d559ce59
[  290.807292][T16986] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  290.807298][T16986] RSP: 002b:00007fa2d64d6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  290.807307][T16986] RAX: ffffffffffffffda RBX: 00007fa2d5815fa0 RCX: 00007fa2d559ce59
[  290.807312][T16986] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000004
[  290.807316][T16986] RBP: 00007fa2d5632d6f R08: 0000000000000000 R09: 0000000000000000
[  290.807320][T16986] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  290.807324][T16986] R13: 00007fa2d5816038 R14: 00007fa2d5815fa0 R15: 00007ffda69b0678
[  290.807336][T16986]  </TASK>
[  290.998383][    C0] net_ratelimit: 1 callbacks suppressed
[  290.998394][    C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  291.451937][T17033] netlink: 'syz.1.3008': attribute type 10 has an invalid length.
[  291.762188][T17056] __nla_validate_parse: 34 callbacks suppressed
[  291.762204][T17056] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3014'.
[  291.865236][T17067] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3018'.
[  291.885062][T17067] syzkaller1: entered promiscuous mode
[  291.887144][T17067] syzkaller1: entered allmulticast mode
[  291.940693][T17069] openvswitch: netlink: VXLAN extension 307 out of range max 1
[  292.013091][T17080] netlink: 'syz.0.3021': attribute type 21 has an invalid length.
[  292.038236][    C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  292.055086][T17085] ip6gre0: entered promiscuous mode
[  292.057029][T17085] ip6gre0: entered allmulticast mode
[  292.192695][T17100] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3028'.
[  292.196233][T17100] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3028'.
[  292.246326][T17105] bond23: option active_slave: mode dependency failed, not supported in mode balance-xor(2)
[  292.251456][T17105] bond23 (unregistering): Released all slaves
[  292.280397][T17104] lo speed is unknown, defaulting to 1000
[  292.912588][T17140] dvmrp6: entered allmulticast mode
[  292.937873][T17140] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  293.040760][T17151] netlink: 312 bytes leftover after parsing attributes in process `syz.1.3044'.
[  293.060700][T17151] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3044'.
[  293.076722][T17156] netem: change failed
[  293.078305][    C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  293.254965][T17186] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3051'.
[  293.295638][T17196] veth11: entered allmulticast mode
[  293.483567][T17216] netlink: 'syz.0.3062': attribute type 1 has an invalid length.
[  293.529603][T17220] pimreg: entered allmulticast mode
[  293.605670][T17229] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3066'.
[  293.606000][T17230] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3066'.
[  293.732643][T17236] netlink: 'syz.1.3067': attribute type 2 has an invalid length.
[  293.745726][T17236] tipc: Enabling of bearer <eth:gre0> rejected, max 3 bearers permitted
[  293.834223][T17241] openvswitch: netlink: IP tunnel TTL not specified.
[  293.840663][T17241] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3068'.
[  293.852172][T17241] netlink: 'syz.0.3068': attribute type 19 has an invalid length.
[  293.987239][T17264] x_tables: duplicate underflow at hook 1
[  294.108775][    C0] ip6_tunnel: syztnl0 xmit: Local address not yet configured!
[  294.111476][    C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  294.230315][T17292] IPVS: set_ctl: invalid protocol: 59 224.0.0.2:20004
[  294.240052][T17296] IPVS: set_ctl: invalid protocol: 59 224.0.0.2:20004
[  294.665893][T17341] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  294.890294][T17351] netlink: 'syz.0.3101': attribute type 41 has an invalid length.
[  295.013555][T17358] xt_TPROXY: Can be used only with -p tcp or -p udp
[  295.018303][T17358] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  295.148346][    C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  295.285381][T17378] netlink: 'syz.0.3110': attribute type 2 has an invalid length.
[  295.291711][T17378] netlink: 'syz.0.3110': attribute type 9 has an invalid length.
[  295.302820][T17378] syzkaller1: entered promiscuous mode
[  295.305165][T17378] syzkaller1: entered allmulticast mode
[  295.775387][T17389] bridge1: port 3(veth5) entered disabled state
[  295.778200][T17389] bridge1: port 1(veth3) entered disabled state
[  296.042130][T17389] bond0: left allmulticast mode
[  296.043850][T17389] syz_tun: left allmulticast mode
[  296.045449][T17389] bond0: left promiscuous mode
[  296.059749][T17396] netem: incorrect ge model size
[  296.067403][T17396] netem: change failed
[  296.080911][   T13] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  296.084156][   T13] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  296.086835][   T13] netdevsim netdevsim1 eth0: unset [1, 1] type 2 family 0 port 20000 - 0
[  296.092674][T17392] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  296.113884][   T13] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  296.116945][   T13] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  296.120535][   T13] netdevsim netdevsim1 eth1: unset [1, 1] type 2 family 0 port 20000 - 0
[  296.124122][   T13] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  296.127518][   T13] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  296.132200][   T13] netdevsim netdevsim1 eth2: unset [1, 1] type 2 family 0 port 20000 - 0
[  296.142964][   T13] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  296.146738][   T13] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  296.151133][   T13] netdevsim netdevsim1 eth3: unset [1, 1] type 2 family 0 port 20000 - 0
[  296.159594][T17392] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  296.188521][    C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  296.211959][T17392] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  296.281464][T17392] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  296.363703][ T5668] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  296.371638][ T5668] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  296.377906][ T5668] nci: nci_extract_activation_params_iso_dep: unsupported activation_rf_tech_and_mode 0x80
[  296.383323][   T13] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  296.392630][   T13] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  297.089353][T17415] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  297.228311][    C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  297.281489][T17448] vlan5: entered promiscuous mode
[  297.283230][T17448] bridge0: entered promiscuous mode
[  297.379488][T17452] __nla_validate_parse: 15 callbacks suppressed
[  297.379502][T17452] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3128'.
[  297.423343][T17452] xt_l2tp: invalid flags combination: 8
[  297.437654][T17452] netlink: 'syz.1.3128': attribute type 1 has an invalid length.
[  298.172565][T17463] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3131'.
[  298.255735][T17466] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3132'.
[  298.260123][T17466] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3132'.
[  298.264232][T17466] netlink: 100 bytes leftover after parsing attributes in process `syz.0.3132'.
[  298.268395][    C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  299.114865][T17476] netlink: 'syz.1.3137': attribute type 1 has an invalid length.
[  299.123970][T17475] netlink: 'syz.0.3136': attribute type 2 has an invalid length.
[  299.126598][T17475] netlink: 'syz.0.3136': attribute type 8 has an invalid length.
[  299.130417][T17475] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3136'.
[  299.149125][T17476] bond23: (slave vxcan1): The slave device specified does not support setting the MAC address
[  299.155768][T17476] bond23: (slave vxcan1): Error -95 calling set_mac_address
[  299.188654][T17479] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3138'.
[  299.189607][T17481] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3139'.
[  299.194553][T17479] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3138'.
[  299.203001][T17484] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3139'.
[  299.222399][T17476] bond23: (slave bridge17): Enslaving as an active interface with a down link
[  299.308354][    C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  299.632589][T17527] syzkaller0: entered promiscuous mode
[  299.634967][T17527] syzkaller0: entered allmulticast mode
[  300.267021][T17560] pimreg: entered allmulticast mode
[  300.319769][T17569] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  300.333264][T17569] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  300.348511][    C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  300.362145][T17577] netlink: 'syz.0.3163': attribute type 3 has an invalid length.
[  300.364959][T17576] netlink: 'syz.1.3164': attribute type 1 has an invalid length.
[  300.393573][T17576] bond24: (slave vxcan1): The slave device specified does not support setting the MAC address
[  300.398408][T17576] bond24: (slave vxcan1): Error -95 calling set_mac_address
[  300.515311][T17592] netlink: 'syz.0.3167': attribute type 1 has an invalid length.
[  300.595693][T17597] bond25: invalid ARP target 0.0.0.0 specified for addition
[  300.599027][T17597] bond25: option arp_ip_target: invalid value (0)
[  300.602643][T17597] bond25 (unregistering): Released all slaves
[  300.696141][T17606] netlink: 'syz.1.3170': attribute type 1 has an invalid length.
[  300.811698][T17617] lo speed is unknown, defaulting to 1000
[  301.388364][    C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  301.502883][T17650] netlink: 'syz.2.3181': attribute type 10 has an invalid length.
[  301.508737][T17654] netlink: 'syz.2.3181': attribute type 10 has an invalid length.
[  301.523846][   T33] audit: type=1800 audit(1778899483.371:12): pid=17656 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.3183" name="memory.events" dev="tmpfs" ino=5622 res=0 errno=0
[  301.581929][T17665] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256
[  301.638027][T17671] bond4: (slave lo): Releasing backup interface
[  301.644628][T17671] bond4: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed
[  301.648045][T17671] bond34: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  301.654440][T17671] bond34: (slave lo): Enslaving as an active interface with an up link
[  301.657767][T17671] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check.
[  301.754874][T17687] syz_tun: left promiscuous mode
[  301.764243][T17687] 8021q: adding VLAN 0 to HW filter on device team0
[  301.808743][T17687] 8021q: adding VLAN 0 to HW filter on device bond1
[  301.814773][T17687] 8021q: adding VLAN 0 to HW filter on device bond2
[  301.820593][T17687] 8021q: adding VLAN 0 to HW filter on device bond3
[  301.823544][T17687] 8021q: adding VLAN 0 to HW filter on device bond4
[  301.827220][T17687] 8021q: adding VLAN 0 to HW filter on device bond5
[  301.834581][T17687] 8021q: adding VLAN 0 to HW filter on device team1
[  301.838341][T17687] 8021q: adding VLAN 0 to HW filter on device bond6
[  301.843785][T17687] 8021q: adding VLAN 0 to HW filter on device bond7
[  301.851969][T17687] A link change request failed with some changes committed already. Interface syzkaller0 may have been left with an inconsistent configuration, please check.
[  301.858456][ T8014] syz_tun: entered promiscuous mode
[  301.893876][   T83] bridge1: port 1(veth3) entered blocking state
[  301.896634][   T83] bridge1: port 1(veth3) entered forwarding state
[  301.909654][   T83] bridge1: port 3(veth5) entered blocking state
[  301.912267][   T83] bridge1: port 3(veth5) entered forwarding state
[  301.915520][   T12] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  301.922307][   T12] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 20000 - 0
[  301.931772][   T12] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  301.939423][   T12] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 20000 - 0
[  301.948795][   T13] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  301.955887][   T12] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  301.959419][   T12] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 20000 - 0
[  301.962909][   T12] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  301.966231][   T12] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 20000 - 0
[  302.012637][   T13] ip6_tunnel: syztnl0 xmit: Local address not yet configured!
[  302.053886][T17705] netlink: 'syz.1.3195': attribute type 13 has an invalid length.
[  302.056484][T17705] netlink: 'syz.1.3195': attribute type 27 has an invalid length.
[  302.064550][T17705] IPVS: set_ctl: invalid protocol: 50 10.1.1.0:20004
[  302.086658][T17707] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR
[  302.092358][T17705] bond0: (slave syz_tun): Releasing backup interface
[  302.257670][T17728] Cannot find del_set index 3 as target
[  302.267380][T17728] netlink: 'syz.2.3202': attribute type 3 has an invalid length.
[  302.272503][T17728] netlink: 'syz.2.3202': attribute type 3 has an invalid length.
[  302.394442][T17734] __nla_validate_parse: 16 callbacks suppressed
[  302.394454][T17734] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3205'.
[  302.428412][    C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  302.653521][ T6705] syz1: Port: 1 Link DOWN
[  302.659177][   T12] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  302.661923][   T12] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  302.666134][   T12] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  302.672694][   T12] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  302.720733][T17755] lo speed is unknown, defaulting to 1000
[  302.737120][T17759] bond25: option min_links: invalid value (18446744073709551612)
[  302.740577][T17759] bond25: option min_links: allowed values 0 - 2147483647
[  302.744297][T17759] bond25 (unregistering): Released all slaves
[  302.796853][T17764] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3212'.
[  302.817981][T17759] bond25: option min_links: invalid value (18446744073709551612)
[  302.820644][T17759] bond25: option min_links: allowed values 0 - 2147483647
[  302.825543][T17759] bond25 (unregistering): Released all slaves
[  302.947566][T17759] bond25: option min_links: invalid value (18446744073709551612)
[  302.951112][T17759] bond25: option min_links: allowed values 0 - 2147483647
[  302.960936][T17759] bond25 (unregistering): Released all slaves
[  303.069600][T17759] bond25: option min_links: invalid value (18446744073709551612)
[  303.072137][T17759] bond25: option min_links: allowed values 0 - 2147483647
[  303.075202][T17759] bond25 (unregistering): Released all slaves
[  303.172555][T17759] bond25: option min_links: invalid value (18446744073709551612)
[  303.175947][T17759] bond25: option min_links: allowed values 0 - 2147483647
[  303.184355][T17759] bond25 (unregistering): Released all slaves
[  303.298069][T17759] bond25: option min_links: invalid value (18446744073709551612)
[  303.301840][T17759] bond25: option min_links: allowed values 0 - 2147483647
[  303.306611][T17759] bond25 (unregistering): Released all slaves
[  303.409213][T17759] bond25: option min_links: invalid value (18446744073709551612)
[  303.412748][T17759] bond25: option min_links: allowed values 0 - 2147483647
[  303.417424][T17759] bond25 (unregistering): Released all slaves
[  303.469847][    C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  303.488790][T17759] bond25: option min_links: invalid value (18446744073709551612)
[  303.491974][T17759] bond25: option min_links: allowed values 0 - 2147483647
[  303.496416][T17759] bond25 (unregistering): Released all slaves
[  303.567449][T17759] bond25: option min_links: invalid value (18446744073709551612)
[  303.571028][T17759] bond25: option min_links: allowed values 0 - 2147483647
[  303.578787][T17759] bond25 (unregistering): Released all slaves
[  303.612864][T17780] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3214'.
[  303.618437][T17780] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3214'.
[  303.713359][T17787] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3216'.
[  303.719378][T17787] SET target dimension over the limit!
[  303.741941][T17785] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3215'.
[  303.785204][T17790] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3217'.
[  303.798973][T17790] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3217'.
[  303.814938][T17794] netlink: 212328 bytes leftover after parsing attributes in process `syz.0.3218'.
[  303.819625][T17794] netlink: Unknown conntrack attr (type=2304, max=9)
[  303.863670][T17799] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3219'.
[  304.142709][T17827] bond36: option ad_actor_sys_prio: mode dependency failed, not supported in mode broadcast(3)
[  304.149040][T17827] bond36 (unregistering): Released all slaves
[  304.508333][    C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  304.576964][T17859] block nbd2: not configured, cannot reconfigure
[  304.597025][T17859] bond36: option arp_interval: invalid value (18446744073709551615)
[  304.601139][T17859] bond36: option arp_interval: allowed values 0 - 2147483647
[  304.605752][T17859] bond36 (unregistering): Released all slaves
[  304.814421][T17873] mac80211_hwsim hwsim5 wlan0: left promiscuous mode
[  304.824441][T17873] mac80211_hwsim hwsim7 syzkaller0: left promiscuous mode
[  304.827297][T17873] mac80211_hwsim hwsim7 syzkaller0: left allmulticast mode
[  304.833279][T17873] vlan0: left promiscuous mode
[  304.836539][T17873] bridge0: left promiscuous mode
[  304.840781][T17873] bond18: left promiscuous mode
[  304.843458][T17873] gtp2: left promiscuous mode
[  304.847266][T17873] gtp2: left allmulticast mode
[  304.849783][T17873] bond19: left promiscuous mode
[  304.851834][T17873] bond19: left allmulticast mode
[  304.854236][T17873] geneve3: left promiscuous mode
[  304.856349][T17873] geneve3: left allmulticast mode
[  304.859024][T17873] bond22: left promiscuous mode
[  304.861902][T17873] bond23: left promiscuous mode
[  304.864544][T17873] team0: left promiscuous mode
[  304.866526][T17873] team0: left allmulticast mode
[  304.869198][T17873] sit2: left promiscuous mode
[  304.873483][T17873] bond31: left promiscuous mode
[  304.875643][T17873] bond31: left allmulticast mode
[  304.878493][T17873] bond32: left promiscuous mode
[  304.880665][T17873] bond32: left allmulticast mode
[  304.920545][T17873] gretap5: entered allmulticast mode
[  304.928942][T17873] bond33: (slave gretap5): making interface the new active one
[  304.935540][T17873] bond33: (slave gretap5): Enslaving as an active interface with an up link
[  304.949931][T17874] lo speed is unknown, defaulting to 1000
[  304.953439][T17876] lo speed is unknown, defaulting to 1000
[  305.548393][    C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  305.628281][    C1] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  306.028651][    C1] ip6_tunnel: syztnl0 xmit: Local address not yet configured!
[  306.588433][    C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  307.628632][    C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  308.338418][T17900] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  308.423287][T17923] __nla_validate_parse: 8 callbacks suppressed
[  308.423303][T17923] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3248'.
[  308.456096][T17923] 8021q: adding VLAN 0 to HW filter on device bond25
[  308.497225][   T33] audit: type=1107 audit(1778899490.341:13): pid=17925 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=''
[  308.502415][T17927] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3249'.
[  308.565483][T17932] validate_nla: 8 callbacks suppressed
[  308.565498][T17932] netlink: 'syz.2.3251': attribute type 4 has an invalid length.
[  308.571335][T17932] netlink: 17 bytes leftover after parsing attributes in process `syz.2.3251'.
[  308.608431][T17935] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3252'.
[  308.663284][T17939] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3253'.
[  308.668474][    C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  308.836890][T17955] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  308.847307][T17955] tipc: Disabling bearer <eth:syzkaller0>
[  308.866033][T17950] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  308.869899][T17950] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  308.969370][T17959] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3259'.
[  308.973107][T17959] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3259'.
[  308.981964][T17959] batman_adv: batadv0: Removing interface: batadv_slave_1
[  309.121040][T17963] tipc: Resetting bearer <eth:syzkaller0>
[  309.137226][ T8014] lo speed is unknown, defaulting to 1000
[  309.193295][T17965] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3261'.
[  309.238076][T17967] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3262'.
[  309.441259][T17983] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3267'.
[  309.446847][T17983] netlink: 'syz.0.3267': attribute type 9 has an invalid length.
[  309.560726][T17990] bond34: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  309.568850][T17990] bond34: (slave lo): Enslaving as an active interface with an up link
[  309.573219][T17990] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check.
[  309.708365][    C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  309.734590][T18014] lo speed is unknown, defaulting to 1000
[  309.749521][T18008] lo speed is unknown, defaulting to 1000
[  309.788975][T18017] netlink: 'syz.1.3271': attribute type 1 has an invalid length.
[  309.826607][T18017] 8021q: adding VLAN 0 to HW filter on device bond26
[  309.830507][T18017] netlink: 'syz.1.3271': attribute type 10 has an invalid length.
[  309.833586][T18017] : entered promiscuous mode
[  310.539270][T18050] 8021q: adding VLAN 0 to HW filter on device bond37
[  310.615707][T18059] netlink: 'syz.2.3286': attribute type 2 has an invalid length.
[  310.621521][T18059] netlink: 'syz.2.3286': attribute type 2 has an invalid length.
[  310.626895][T18059] netlink: 'syz.2.3286': attribute type 2 has an invalid length.
[  310.632810][T18059] netlink: 'syz.2.3286': attribute type 2 has an invalid length.
[  310.636331][T18059] netlink: 'syz.2.3286': attribute type 2 has an invalid length.
[  310.640830][T18059] netlink: 'syz.2.3286': attribute type 2 has an invalid length.
[  310.748419][    C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  310.826678][T18076] tipc: Enabling of bearer <udp:syz0> rejected, max 3 bearers permitted
[  310.838646][T18076] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  310.901728][T18081] xt_hashlimit: size too large, truncated to 1048576
[  311.027729][T18087] syzkaller0: entered promiscuous mode
[  311.030140][T18087] syzkaller0: entered allmulticast mode
[  311.064486][T18087] lo speed is unknown, defaulting to 1000
[  311.375343][T18114] netem: change failed
[  311.384090][T18106] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 !
[  311.483421][T18117] bond38: entered promiscuous mode
[  311.485814][T18117] bond38: entered allmulticast mode
[  311.487742][T18117] 8021q: adding VLAN 0 to HW filter on device bond38
[  311.519523][T18117] macvlan0: entered promiscuous mode
[  311.523804][T18117] macvlan0: entered allmulticast mode
[  311.535824][T18117] 8021q: adding VLAN 0 to HW filter on device macvlan0
[  311.691122][T18130] nbd: nbd1 already in use
[  311.788323][    C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  311.793991][T18140] syzkaller1: entered promiscuous mode
[  311.796150][T18140] syzkaller1: entered allmulticast mode
[  311.806385][   T33] audit: type=1107 audit(1778899493.651:14): pid=18153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='*Vua85l`dٔRx
[  311.806385][   T33] N_0_uIM^,%'
[  312.097164][T18189] lo speed is unknown, defaulting to 1000
[  312.412425][T18220] openvswitch: netlink: ERSPAN option length err (len 256, max 255).
[  312.484139][T18228] tipc: New replicast peer: 255.255.255.255
[  312.486704][T18228] tipc: Enabled bearer <udp:syz2>, priority 10
[  312.828365][    C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  312.912100][T18261] batman_adv: batadv0: Adding interface: gretap3
[  312.914821][T18261] batman_adv: batadv0: The MTU of interface gretap3 is too small (1498) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1568 would solve the problem.
[  312.925437][T18261] batman_adv: batadv0: Interface activated: gretap3
[  313.082508][T18285] bridge0: port 1(erspan0) entered blocking state
[  313.084851][T18285] bridge0: port 1(erspan0) entered disabled state
[  313.087079][T18285] erspan0: entered allmulticast mode
[  313.215729][T18297] openvswitch: netlink: VXLAN extension 1 has unexpected len 8 expected 4
[  313.294219][T18302] bond27: (slave bond_slave_1): Device is not bonding slave
[  313.297408][T18302] bond27: option active_slave: invalid value (bond_slave_1)
[  313.302297][T18302] bond27 (unregistering): Released all slaves
[  313.309043][    C1] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  313.492140][T18326] __nla_validate_parse: 20 callbacks suppressed
[  313.492155][T18326] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3357'.
[  313.500064][T18326] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3357'.
[  313.503643][T18326] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3357'.
[  313.555553][T18332] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3360'.
[  313.570740][T18332] 8021q: adding VLAN 0 to HW filter on device bond36
[  313.599767][T18334] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3359'.
[  313.814233][T18348] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3364'.
[  313.825231][T18348] 8021q: adding VLAN 0 to HW filter on device bond0
[  313.868443][    C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  313.886199][T18350] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3365'.
[  313.890436][T18350] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3365'.
[  313.893734][T18350] validate_nla: 32 callbacks suppressed
[  313.893743][T18350] netlink: 'syz.2.3365': attribute type 4 has an invalid length.
[  314.092781][T18374] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3371'.
[  314.107723][T18374] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3371'.
[  314.501640][T18383] IPv6: sit3: Disabled Multicast RS
[  314.566230][T18389] mac80211_hwsim hwsim6 syzkaller0: entered promiscuous mode
[  314.569042][T18389] mac80211_hwsim hwsim6 syzkaller0: entered allmulticast mode
[  314.590794][    C1] ip6_tunnel: syztnl0 xmit: Local address not yet configured!
[  314.908342][    C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  314.923015][T18407] netlink: 'syz.0.3382': attribute type 13 has an invalid length.
[  314.933109][T18407] netlink: 'syz.0.3382': attribute type 17 has an invalid length.
[  314.958855][T18407] 8021q: adding VLAN 0 to HW filter on device bond0
[  314.963599][T18407] 8021q: adding VLAN 0 to HW filter on device batadv0
[  314.998714][T18407] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  315.009215][ T6220] syz1: Port: 1 Link ACTIVE
[  315.102489][T18415] xt_recent: hitcount (33554435) is larger than allowed maximum (65535)
[  315.273829][T18424] vlan1: left allmulticast mode
[  315.275876][T18424] bond19: left allmulticast mode
[  315.279773][T18424] bond22: left promiscuous mode
[  315.281848][T18424] bond22: left allmulticast mode
[  315.284135][T18424] bond23: left promiscuous mode
[  315.286169][T18424] bond23: left allmulticast mode
[  315.288941][T18424] bond29: left promiscuous mode
[  315.290953][T18424] ip6gre3: left promiscuous mode
[  315.293655][T18424] gtp1: left promiscuous mode
[  315.295752][T18424] gtp1: left allmulticast mode
[  315.310700][T18424] bond38: left promiscuous mode
[  315.314707][T18424] bond38: left allmulticast mode
[  315.318851][T18424] batman_adv: batadv0: Interface deactivated: gretap3
[  315.361046][T18427] netlink: 'syz.2.3389': attribute type 6 has an invalid length.
[  315.396657][T18432] xt_TPROXY: Can be used only with -p tcp or -p udp
[  315.544434][T18436] syzkaller0: entered promiscuous mode
[  315.546451][T18436] syzkaller0: entered allmulticast mode
[  315.813228][T18463] netlink: 'syz.1.3400': attribute type 21 has an invalid length.
[  315.948462][    C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  315.991442][T18485] netlink: 'syz.2.3407': attribute type 30 has an invalid length.
[  316.009053][T18485] bond40: option arp_missed_max: mode dependency failed, not supported in mode 802.3ad(4)
[  316.013261][T18485] bond40 (unregistering): Released all slaves
[  316.119091][T18493] xt_hashlimit: size too large, truncated to 1048576
[  316.352378][T18513] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  316.355682][T18513] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  316.715315][T18538] xt_time: invalid argument - start or stop time greater than 23:59:59
[  316.732369][T18538] bond0: entered promiscuous mode
[  316.734822][T18538] bond0: left promiscuous mode
[  316.988460][    C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  317.063835][T18551] bridge_slave_1: left allmulticast mode
[  317.073593][T18551] bridge_slave_1: left promiscuous mode
[  317.082674][T18551] bridge0: port 2(bridge_slave_1) entered disabled state
[  317.252875][T18557] veth19: entered allmulticast mode
[  317.272326][T18557] bond27: (slave veth19): Enslaving as an active interface with an up link
[  317.290082][T18557] bond27 (unregistering): (slave veth19): Releasing backup interface
[  317.296401][T18557] bond27 (unregistering): Released all slaves
[  317.501671][T18577] pimreg: left allmulticast mode
[  317.503782][T18577] bond11: left allmulticast mode
[  317.505918][T18577] wireguard0: left allmulticast mode
[  317.583953][T18582] xt_hashlimit: size too large, truncated to 1048576
[  317.770248][T18601] syzkaller1: entered promiscuous mode
[  317.772613][T18601] syzkaller1: entered allmulticast mode
[  317.814781][T18604] ip6gre1: entered promiscuous mode
[  317.816505][T18604] ip6gre1: entered allmulticast mode
[  317.895488][T18610] lo speed is unknown, defaulting to 1000
[  318.028420][    C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  318.240018][T18625] 8021q: adding VLAN 0 to HW filter on device bond40
[  318.357869][T18630] netlink: 'syz.1.3445': attribute type 12 has an invalid length.
[  318.474377][T18637] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  318.787126][T18666] __nla_validate_parse: 43 callbacks suppressed
[  318.787137][T18666] netlink: 72 bytes leftover after parsing attributes in process `syz.0.3455'.
[  318.795228][T18661] netlink: 'syz.2.3454': attribute type 1 has an invalid length.
[  318.802490][T18666] IPv6: sit3: Disabled Multicast RS
[  318.809332][T18661] netlink: 244 bytes leftover after parsing attributes in process `syz.2.3454'.
[  318.966251][T18675] netlink: 'syz.2.3458': attribute type 1 has an invalid length.
[  319.007216][T18675] bond41: entered promiscuous mode
[  319.010466][T18675] 8021q: adding VLAN 0 to HW filter on device bond41
[  319.055823][T18675] vlan6: entered allmulticast mode
[  319.058043][T18675] bond41: entered allmulticast mode
[  319.069081][    C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  319.076843][T18675] bond41: (slave bridge0): making interface the new active one
[  319.084358][T18675] bridge0: entered promiscuous mode
[  319.099005][T18675] bridge0: entered allmulticast mode
[  319.102590][T18675] bond41: (slave bridge0): Enslaving as an active interface with an up link
[  319.232619][T18695] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  319.328775][T18703] batadv_slave_1: entered promiscuous mode
[  319.336310][T18702] batadv_slave_1: left promiscuous mode
[  319.418034][T18709] netlink: 'syz.1.3468': attribute type 1 has an invalid length.
[  319.433425][T18709] 8021q: adding VLAN 0 to HW filter on device bond27
[  319.442314][T18709] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3468'.
[  319.454631][T18709] sctp: [Deprecated]: syz.1.3468 (pid 18709) Use of int in maxseg socket option.
[  319.454631][T18709] Use struct sctp_assoc_value instead
[  319.517294][T18713] lo speed is unknown, defaulting to 1000
[  319.846032][T18719] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold
[  319.984875][T18727] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3473'.
[  319.999396][T18725] bond28: (slave bond_slave_1): Device is not bonding slave
[  320.002184][T18725] bond28: option active_slave: invalid value (bond_slave_1)
[  320.008465][T18725] bond28 (unregistering): Released all slaves
[  320.108351][    C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  320.134903][T18732] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3476'.
[  320.138933][T18732] netlink: 'syz.1.3476': attribute type 5 has an invalid length.
[  320.142218][T18732] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3476'.
[  320.221692][T18744] netlink: 72 bytes leftover after parsing attributes in process `syz.0.3479'.
[  320.224948][T18744] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode
[  320.227343][T18744] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode
[  320.321784][T18754] netlink: 'syz.0.3483': attribute type 1 has an invalid length.
[  320.324358][T18754] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3483'.
[  320.328624][T18754] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3483'.
[  320.404259][T18761] workqueue: Failed to create a rescuer kthread for wq "bond38": -EINTR
[  320.484053][T18767] openvswitch: netlink: VXLAN extension 307 out of range max 1
[  320.499944][T18767] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[  320.505409][T18767] CPU: 1 UID: 0 PID: 18767 Comm: syz.1.3486 Not tainted syzkaller #0 PREEMPT(full) 
[  320.505429][T18767] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  320.505438][T18767] Call Trace:
[  320.505444][T18767]  <TASK>
[  320.505450][T18767]  dump_stack_lvl+0xe8/0x150
[  320.505473][T18767]  sysfs_warn_dup+0x8e/0xa0
[  320.505491][T18767]  sysfs_do_create_link_sd+0xc0/0x110
[  320.505540][T18767]  device_add_class_symlinks+0x1cf/0x240
[  320.505560][T18767]  device_add+0x475/0xbb0
[  320.505579][T18767]  wiphy_register+0x1dc5/0x2dc0
[  320.505632][T18767]  ? __pfx_wiphy_register+0x10/0x10
[  320.505653][T18767]  ? __pfx_netdev_run_todo+0x10/0x10
[  320.505674][T18767]  ? minstrel_ht_alloc+0x6e0/0x7e0
[  320.505696][T18767]  ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0
[  320.505717][T18767]  ieee80211_register_hw+0x3d82/0x4a70
[  320.505745][T18767]  ? ieee80211_register_hw+0x1931/0x4a70
[  320.505778][T18767]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  320.505800][T18767]  ? __asan_memset+0x22/0x50
[  320.505814][T18767]  ? __hrtimer_setup+0x1b7/0x260
[  320.505829][T18767]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  320.505846][T18767]  mac80211_hwsim_new_radio+0x3335/0x5aa0
[  320.505878][T18767]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  320.505890][T18767]  ? kstrndup+0xbf/0x160
[  320.505906][T18767]  hwsim_new_radio_nl+0xf6a/0x1c00
[  320.505935][T18767]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  320.505956][T18767]  ? rcu_is_watching+0x15/0xb0
[  320.505972][T18767]  ? trace_kmalloc+0x2a/0xf0
[  320.505993][T18767]  ? __nla_parse+0x40/0x60
[  320.506013][T18767]  ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0
[  320.506025][T18767]  ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0
[  320.506052][T18767]  genl_family_rcv_msg_doit+0x22a/0x330
[  320.506073][T18767]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  320.506097][T18767]  ? bpf_lsm_capable+0x9/0x20
[  320.506110][T18767]  ? security_capable+0x7e/0x2c0
[  320.506133][T18767]  genl_rcv_msg+0x61c/0x7a0
[  320.506153][T18767]  ? __pfx_genl_rcv_msg+0x10/0x10
[  320.506166][T18767]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  320.506193][T18767]  netlink_rcv_skb+0x232/0x4b0
[  320.506212][T18767]  ? __pfx_genl_rcv_msg+0x10/0x10
[  320.506226][T18767]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  320.506255][T18767]  ? down_read+0x270/0x2e0
[  320.506265][T18767]  ? genl_rcv+0xd/0x40
[  320.506279][T18767]  genl_rcv+0x28/0x40
[  320.506290][T18767]  netlink_unicast+0x75c/0x8e0
[  320.506318][T18767]  netlink_sendmsg+0x813/0xb40
[  320.506342][T18767]  ? __pfx_netlink_sendmsg+0x10/0x10
[  320.506361][T18767]  ? aa_sock_msg_perm+0xf1/0x1b0
[  320.506378][T18767]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  320.506397][T18767]  ____sys_sendmsg+0x972/0x9f0
[  320.506414][T18767]  ? __might_fault+0xaf/0x130
[  320.506434][T18767]  ? __pfx_____sys_sendmsg+0x10/0x10
[  320.506457][T18767]  ? import_iovec+0x73/0xa0
[  320.506476][T18767]  ___sys_sendmsg+0x2a5/0x360
[  320.506492][T18767]  ? __lock_acquire+0x6b5/0x2cf0
[  320.506534][T18767]  ? __pfx____sys_sendmsg+0x10/0x10
[  320.506557][T18767]  ? futex_wake+0x4ac/0x580
[  320.506595][T18767]  ? __fget_files+0x2a/0x420
[  320.506609][T18767]  ? __fget_files+0x3a0/0x420
[  320.506632][T18767]  __x64_sys_sendmsg+0x1bd/0x2a0
[  320.506652][T18767]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  320.506676][T18767]  ? rcu_is_watching+0x15/0xb0
[  320.506699][T18767]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  320.506712][T18767]  do_syscall_64+0x15f/0xf80
[  320.506729][T18767]  ? trace_irq_disable+0x3b/0x140
[  320.506752][T18767]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  320.506764][T18767] RIP: 0033:0x7faa3ff9ce59
[  320.506778][T18767] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  320.506789][T18767] RSP: 002b:00007faa40e12028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  320.506804][T18767] RAX: ffffffffffffffda RBX: 00007faa40215fa0 RCX: 00007faa3ff9ce59
[  320.506812][T18767] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000004
[  320.506820][T18767] RBP: 00007faa40032d6f R08: 0000000000000000 R09: 0000000000000000
[  320.506827][T18767] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  320.506834][T18767] R13: 00007faa40216038 R14: 00007faa40215fa0 R15: 00007ffd4c1fbe08
[  320.506857][T18767]  </TASK>
[  320.861988][T18784] netlink: 'syz.2.3490': attribute type 1 has an invalid length.
[  320.952668][T18779] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3489'.
[  321.084193][T18795] netlink: 'syz.1.3493': attribute type 4 has an invalid length.
[  321.143160][T18799] The dccp option matching is deprecated and scheduled to be removed in 2027.
[  321.143160][T18799] Please contact the netfilter-devel mailing list or update your nftables rules.
[  321.149027][    C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  321.185627][T18801] vlan5: entered allmulticast mode
[  321.187713][T18801] gretap0: entered allmulticast mode
[  321.886199][   T12] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0xd0
[  321.891777][   T12] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0xd0
[  322.163582][T18838] netlink: 'syz.1.3505': attribute type 21 has an invalid length.
[  322.188367][    C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  322.468088][T18860] xt_HMARK: spi-set and port-set can't be combined
[  322.656554][T18831] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  322.907942][T18889] bridge24: port 1(veth11) entered blocking state
[  322.913077][T18889] bridge24: port 1(veth11) entered disabled state
[  322.916032][T18889] veth11: entered allmulticast mode
[  322.920930][T18889] veth11: entered promiscuous mode
[  322.950808][T18888] bridge24: port 2(veth13) entered blocking state
[  322.953683][T18888] bridge24: port 2(veth13) entered disabled state
[  322.956414][T18888] veth13: entered allmulticast mode
[  322.960939][T18888] veth13: entered promiscuous mode
[  323.119946][T18913] netlink: 'syz.1.3523': attribute type 1 has an invalid length.
[  323.199383][T18923] syzkaller1: entered promiscuous mode
[  323.200148][T18925] netlink: 'syz.1.3526': attribute type 1 has an invalid length.
[  323.203835][T18923] syzkaller1: entered allmulticast mode
[  323.226691][T18925] 8021q: adding VLAN 0 to HW filter on device bond28
[  323.228328][    C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  323.267871][T18925] bond28: (slave geneve5): making interface the new active one
[  323.271291][T18925] bond28: (slave geneve5): Enslaving as an active interface with an up link
[  323.328598][T18932] netlink: 'syz.1.3528': attribute type 9 has an invalid length.
[  323.375729][T16603] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  323.380183][T16603] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  323.388318][T16603] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  323.393562][T16603] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  323.518424][T18952] syzkaller1: entered promiscuous mode
[  323.521081][T18952] syzkaller1: entered allmulticast mode
[  324.209086][T18983] pimreg: entered allmulticast mode
[  324.268559][    C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  324.622143][T18988] __nla_validate_parse: 23 callbacks suppressed
[  324.622156][T18988] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3543'.
[  324.637363][T18990] validate_nla: 2 callbacks suppressed
[  324.637377][T18990] netlink: 'syz.1.3544': attribute type 21 has an invalid length.
[  324.644294][T18990] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3544'.
[  324.820145][T19006] bond38: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  324.830787][T19008] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  324.835051][T19006] bond38 (unregistering): Released all slaves
[  324.955952][T19013] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3550'.
[  324.990660][T19017] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3551'.
[  325.134772][T19025] netlink: 4768 bytes leftover after parsing attributes in process `syz.2.3554'.
[  325.146506][T19025] netlink: 4768 bytes leftover after parsing attributes in process `syz.2.3554'.
[  325.204471][T19028] netlink: 'syz.0.3555': attribute type 1 has an invalid length.
[  325.207805][T19028] netlink: 96 bytes leftover after parsing attributes in process `syz.0.3555'.
[  325.212592][T19028] netlink: 658 bytes leftover after parsing attributes in process `syz.0.3555'.
[  325.216311][T19028] netlink: 1 bytes leftover after parsing attributes in process `syz.0.3555'.
[  325.257596][T19031] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3556'.
[  325.260536][T19030] xt_l2tp: invalid flags combination: 8
[  325.260908][T19030] netlink: 'syz.0.3556': attribute type 1 has an invalid length.
[  325.308387][    C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  325.409282][T19038] nbd: must specify at least one socket
[  325.415315][T19041] openvswitch: netlink: Missing key (keys=40, expected=2000)
[  325.471182][T19046] syzkaller0: entered promiscuous mode
[  325.474996][T19046] syzkaller0: entered allmulticast mode
[  325.687899][T19060] netlink: 'syz.2.3568': attribute type 10 has an invalid length.
[  325.766130][T19073] 8021q: adding VLAN 0 to HW filter on device macvlan3
[  325.774904][T19074] 8021q: adding VLAN 0 to HW filter on device macvlan4
[  326.348490][    C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  327.388404][    C1] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  327.389217][    C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  328.428367][    C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  328.671065][T19066] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  328.783734][T19093] openvswitch: netlink: VXLAN extension message has 3 unknown bytes.
[  328.979295][T19115] netlink: 'syz.0.3581': attribute type 1 has an invalid length.
[  329.011937][T19115] bond38: entered promiscuous mode
[  329.014738][T19115] 8021q: adding VLAN 0 to HW filter on device bond38
[  329.022923][T19116] bond38: (slave ipvlan1): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  329.028710][T19116] bond38: (slave ipvlan1): The slave device specified does not support setting the MAC address
[  329.032995][T19116] bond38: (slave ipvlan1): Setting fail_over_mac to active for active-backup mode
[  329.115920][T19111] lo speed is unknown, defaulting to 1000
[  329.468292][    C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  329.575189][T19143] sch_tbf: burst 255 is lower than device syzkaller0 mtu (313) !
[  329.676640][   T56] block nbd2: Receive control failed (result -32)
[  329.754235][T19152] __nla_validate_parse: 12 callbacks suppressed
[  329.754252][T19152] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3591'.
[  329.769988][T19152] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3591'.
[  329.822754][T19154] netlink: 'syz.2.3592': attribute type 1 has an invalid length.
[  329.827412][T19154] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3592'.
[  329.849427][T19155] netlink: 'syz.2.3592': attribute type 1 has an invalid length.
[  329.852179][T19155] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3592'.
[  329.949586][    C1] ip6_tunnel: syztnl0 xmit: Local address not yet configured!
[  330.001933][T19172] bond41: left promiscuous mode
[  330.010735][T19172] bridge0: left promiscuous mode
[  330.025789][T19172] vlan6: left allmulticast mode
[  330.040057][T19172] bond41: left allmulticast mode
[  330.043713][T19172] bridge0: left allmulticast mode
[  330.079288][T19173] netlink: 'syz.2.3596': attribute type 1 has an invalid length.
[  330.166488][T19175] 8021q: adding VLAN 0 to HW filter on device bond29
[  330.192775][T19172] gretap4: entered allmulticast mode
[  330.202270][T19172] bond42: (slave gretap4): making interface the new active one
[  330.209021][T19172] bond42: (slave gretap4): Enslaving as an active interface with an up link
[  330.417201][T19190] bond39: option lacp_active: invalid value (8)
[  330.422149][T19190] bond39 (unregistering): Released all slaves
[  330.424459][T19193] netlink: 'syz.2.3602': attribute type 21 has an invalid length.
[  330.508280][    C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  330.605448][T19201] netlink: 'syz.0.3605': attribute type 12 has an invalid length.
[  330.739629][T19216] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3605'.
[  330.760458][T19201] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3605'.
[  330.782820][T19220] netlink: 'syz.2.3608': attribute type 12 has an invalid length.
[  330.795920][T19223] sctp: [Deprecated]: syz.0.3609 (pid 19223) Use of int in max_burst socket option.
[  330.795920][T19223] Use struct sctp_assoc_value instead
[  330.804067][T19223] syz_tun: entered allmulticast mode
[  330.901529][T19231] netlink: 'syz.2.3612': attribute type 5 has an invalid length.
[  330.938875][T19237] netlink: 'syz.0.3614': attribute type 1 has an invalid length.
[  331.025007][T19248] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode
[  331.029737][T19248] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode
[  331.135187][T19256] netlink: 'syz.2.3619': attribute type 7 has an invalid length.
[  331.143564][T19251] tipc: Enabled bearer <udp:s>, priority 10
[  331.243680][T19267] RDS: rds_bind could not find a transport for ::ffff:100.1.1.0, load rds_tcp or rds_rdma?
[  331.305966][T19274] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3621'.
[  331.377755][T19279] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3624'.
[  331.386309][T19279] bond0: entered promiscuous mode
[  331.392785][T19279] bond0: left promiscuous mode
[  331.498249][T19279] pim6reg1: entered promiscuous mode
[  331.500426][T19279] pim6reg1: entered allmulticast mode
[  331.548323][    C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  331.568353][T19294] dvmrp6: entered allmulticast mode
[  331.573782][T19294] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3628'.
[  331.600804][T19294] 8021q: adding VLAN 0 to HW filter on device bond0
[  331.607423][T19294] 8021q: adding VLAN 0 to HW filter on device batadv0
[  331.615036][T19296] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3629'.
[  331.629637][T19294] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check.
[  331.711716][T19298] netlink: 'syz.0.3630': attribute type 30 has an invalid length.
[  331.785565][T19314] xt_NFQUEUE: number of total queues is 0
[  331.831482][T19319] 8021q: adding VLAN 0 to HW filter on device bond31
[  331.835801][T19322] tipc: Enabling of bearer <udp:s> rejected, already enabled
[  331.923703][T19331] netem: incorrect ge model size
[  331.927082][T19331] netem: change failed
[  331.954125][T19327] lo speed is unknown, defaulting to 1000
[  331.960411][T19328] lo speed is unknown, defaulting to 1000
[  332.230892][T19345] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  332.299225][T19352] RDS: rds_bind could not find a transport for ::ffff:172.20.20.60, load rds_tcp or rds_rdma?
[  332.589892][    C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  332.763899][T19363] 8021q: adding VLAN 0 to HW filter on device bond0
[  332.767637][T19363] 8021q: adding VLAN 0 to HW filter on device batadv0
[  332.786196][T19363] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  332.826342][T19378] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  333.447924][T19419] erspan0: left allmulticast mode
[  333.453937][T19419] bridge0: port 1(erspan0) entered disabled state
[  333.490734][T19420] ksmbd: Unknown IPC event: 0, ignore.
[  333.628259][    C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  333.761470][T19432] bond32 (unregistering): Released all slaves
[  334.161243][T19442] bond32: entered promiscuous mode
[  334.163196][T19442] 8021q: adding VLAN 0 to HW filter on device bond32
[  334.186445][T19444] bridge18: entered promiscuous mode
[  334.191053][T19444] bond32: (slave bridge18): Enslaving as an active interface with an up link
[  334.668463][    C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  334.924402][T19442] bond32 (unregistering): (slave bridge18): Releasing backup interface
[  334.928007][T19442] bridge18: left promiscuous mode
[  334.945019][T19442] bond32 (unregistering): Released all slaves
[  334.958929][T19452] syzkaller1: entered promiscuous mode
[  334.962107][T19452] syzkaller1: entered allmulticast mode
[  335.102959][T19476] validate_nla: 6 callbacks suppressed
[  335.102974][T19476] netlink: 'syz.0.3672': attribute type 30 has an invalid length.
[  335.123364][T19480] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks
[  335.208615][T19491] __nla_validate_parse: 21 callbacks suppressed
[  335.208633][T19491] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3676'.
[  335.219049][T19494] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3677'.
[  335.232979][T19496] netlink: 'syz.2.3678': attribute type 12 has an invalid length.
[  335.243664][T19496] netlink: 'syz.2.3678': attribute type 1 has an invalid length.
[  335.246783][T19496] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3678'.
[  335.264045][T19494] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3677'.
[  335.309660][T19501] netlink: 180 bytes leftover after parsing attributes in process `syz.1.3680'.
[  335.322645][T19503] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3679'.
[  335.375281][T19505] bond29: entered allmulticast mode
[  335.377596][T19505] ip6gre3: entered allmulticast mode
[  335.400713][T19510] xt_hl: Unknown TTL match mode: 237
[  335.497099][T19512] netlink: 296 bytes leftover after parsing attributes in process `syz.0.3683'.
[  335.547636][T19514] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3684'.
[  335.651771][T19526] openvswitch: netlink: Tunnel attr 333 out of range max 16
[  335.655849][T19522] netlink: 43 bytes leftover after parsing attributes in process `syz.0.3685'.
[  335.708385][    C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  335.730611][T19523] block nbd3: server does not support multiple connections per device.
[  335.730810][T19530] netlink: 'syz.2.3688': attribute type 30 has an invalid length.
[  335.737244][T19523] block nbd3: shutting down sockets
[  335.737378][T19530] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3688'.
[  335.764308][T19530] bond43: option arp_missed_max: mode dependency failed, not supported in mode 802.3ad(4)
[  335.769410][T19530] bond43 (unregistering): Released all slaves
[  336.202797][T19554] bridge19: entered promiscuous mode
[  336.204790][T19554] bridge19: entered allmulticast mode
[  336.561880][T19590] netlink: 'syz.2.3698': attribute type 12 has an invalid length.
[  336.682152][T19601] xt_hashlimit: size too large, truncated to 1048576
[  336.737055][T19606] veth1: entered promiscuous mode
[  336.748597][    C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  336.755435][T19606] veth1: entered allmulticast mode
[  337.035035][T19625] wg2: entered allmulticast mode
[  337.120741][T19630] netlink: 'syz.2.3709': attribute type 1 has an invalid length.
[  337.147358][T19630] 8021q: adding VLAN 0 to HW filter on device bond43
[  337.175503][T19630] bond43: (slave veth15): Enslaving as an active interface with a down link
[  337.181925][T19630] netlink: 'syz.2.3709': attribute type 10 has an invalid length.
[  337.621536][T19681] bond44: entered promiscuous mode
[  337.623654][T19681] bond44: entered allmulticast mode
[  337.632161][T19681] 8021q: adding VLAN 0 to HW filter on device bond44
[  337.680703][T19689] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  337.788434][    C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  338.066120][T19715] Cannot find del_set index 3 as target
[  338.272539][T19754] netlink: 'syz.0.3740': attribute type 1 has an invalid length.
[  338.286797][T19757] netlink: 'syz.2.3741': attribute type 1 has an invalid length.
[  338.294008][T19754] bond41: entered promiscuous mode
[  338.296412][T19754] 8021q: adding VLAN 0 to HW filter on device bond41
[  338.322357][T19757] bond45: entered promiscuous mode
[  338.324957][T19757] 8021q: adding VLAN 0 to HW filter on device bond45
[  338.339086][T19754] 8021q: adding VLAN 0 to HW filter on device bond41
[  338.341664][T19754] bond41: (slave vcan0): The slave device specified does not support setting the MAC address
[  338.345618][T19754] bond41: (slave vcan0): Setting fail_over_mac to active for active-backup mode
[  338.353522][T19754] bond41: (slave vcan0): making interface the new active one
[  338.356693][T19754] vcan0: entered promiscuous mode
[  338.360846][T19754] bond41: (slave vcan0): Enslaving as an active interface with an up link
[  338.384286][T19757] bond45: (slave bridge23): making interface the new active one
[  338.387063][T19757] bridge23: entered promiscuous mode
[  338.393647][T19757] bond45: (slave bridge23): Enslaving as an active interface with an up link
[  338.414997][T16603] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  338.582891][T19770] xt_hashlimit: size too large, truncated to 1048576
[  338.635765][T19772] veth1: entered promiscuous mode
[  338.637979][T19772] veth1: entered allmulticast mode
[  338.828401][    C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  338.858906][ T5668] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  339.205405][T19791] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only
[  339.730459][T19826] x_tables: duplicate underflow at hook 3
[  339.868536][    C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  339.913875][T19842] netlink: 'syz.0.3769': attribute type 1 has an invalid length.
[  339.935315][T19842] 8021q: adding VLAN 0 to HW filter on device bond42
[  340.332819][T19878] __nla_validate_parse: 21 callbacks suppressed
[  340.332834][T19878] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3776'.
[  340.403997][T19887] mac80211_hwsim hwsim7 syzkaller0: left promiscuous mode
[  340.409187][T19887] mac80211_hwsim hwsim7 syzkaller0: left allmulticast mode
[  340.528341][T19906] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3784'.
[  340.543760][T19909] netlink: 'syz.0.3785': attribute type 11 has an invalid length.
[  340.589952][T19911] netlink: 'syz.1.3786': attribute type 1 has an invalid length.
[  340.861337][T19933] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3792'.
[  340.867128][T19933] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3792'.
[  340.870832][T19933] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3792'.
[  340.908441][    C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  341.266842][T19942] geneve5: entered promiscuous mode
[  341.270561][T19942] geneve5: entered allmulticast mode
[  341.274845][   T12] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 20000 - 0
[  341.279615][   T12] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 20000 - 0
[  341.284945][   T12] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 20000 - 0
[  341.288646][   T12] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 20000 - 0
[  341.316896][T19959] netlink: 548 bytes leftover after parsing attributes in process `syz.2.3798'.
[  341.343841][T19962] nbd: must specify a device to reconfigure
[  341.441413][T19967] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3800'.
[  341.556642][T19972] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3802'.
[  341.631817][T19983] rdma_rxe: rxe_newlink: failed to add syzkaller0
[  341.680568][T19987] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3806'.
[  341.791650][T19998] netlink: 'syz.1.3808': attribute type 3 has an invalid length.
[  341.795843][T19998] netlink: 'syz.1.3808': attribute type 21 has an invalid length.
[  341.800836][T19998] IPv6: NLM_F_CREATE should be specified when creating new route
[  341.806629][T19998] netlink: 14 bytes leftover after parsing attributes in process `syz.1.3808'.
[  341.948377][    C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  341.957869][T20014] netlink: 'syz.0.3814': attribute type 16 has an invalid length.
[  342.235297][T20017] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode
[  342.238549][T20017] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode
[  342.376522][T20036] IPVS: stopping backup sync thread 9044 ...
[  342.744431][T20080] nbd: device at index 64 is going down
[  342.988488][    C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  343.066207][T20110] netlink: 'syz.0.3839': attribute type 1 has an invalid length.
[  343.107406][T20110] bond43: entered promiscuous mode
[  343.112688][T20110] 8021q: adding VLAN 0 to HW filter on device bond43
[  343.139071][T20110] 8021q: adding VLAN 0 to HW filter on device bond43
[  343.141451][T20110] bond43: (slave ip6gre2): The slave device specified does not support setting the MAC address
[  343.144839][T20110] bond43: (slave ip6gre2): Setting fail_over_mac to active for active-backup mode
[  343.153329][T20110] bond43: (slave ip6gre2): making interface the new active one
[  343.155752][T20110] ip6gre2: entered promiscuous mode
[  343.163583][T20110] bond43: (slave ip6gre2): Enslaving as an active interface with an up link
[  343.331127][T20149] netlink: 'syz.0.3849': attribute type 11 has an invalid length.
[  343.352689][T20149] bond44 (unregistering): Released all slaves
[  344.028736][    C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  344.209573][T20162] netlink: 'syz.2.3851': attribute type 9 has an invalid length.
[  344.213652][T20163] netlink: 'syz.1.3852': attribute type 1 has an invalid length.
[  344.622534][T20188] netlink: 'syz.0.3856': attribute type 1 has an invalid length.
[  344.670843][T20199] netlink: 'syz.2.3859': attribute type 19 has an invalid length.
[  345.007641][T20236] bridge_slave_1: entered allmulticast mode
[  345.068474][    C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  345.185064][T20251] lo speed is unknown, defaulting to 1000
[  345.305572][T20258] bond44: entered promiscuous mode
[  345.311428][T20258] 8021q: adding VLAN 0 to HW filter on device bond44
[  345.360582][T20266] IPv6: Can't replace route, no match found
[  345.362701][T20266] IPv6: Can't replace route, no match found
[  345.375584][T20266] __nla_validate_parse: 21 callbacks suppressed
[  345.375593][T20266] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3875'.
[  345.422614][T20271] netlink: 156 bytes leftover after parsing attributes in process `syz.2.3876'.
[  345.492403][T20282] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3880'.
[  345.534691][T20286] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  345.539839][T20286] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3881'.
[  345.568934][T20282] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3880'.
[  345.572615][T20282] validate_nla: 4 callbacks suppressed
[  345.572627][T20282] netlink: 'syz.1.3880': attribute type 30 has an invalid length.
[  345.789401][T20311] geneve6: entered promiscuous mode
[  345.796581][   T12] netdevsim netdevsim1 eth0: set [1, 2] type 2 family 0 port 35074 - 0
[  345.802893][   T12] netdevsim netdevsim1 eth1: set [1, 2] type 2 family 0 port 35074 - 0
[  345.816660][   T12] netdevsim netdevsim1 eth2: set [1, 2] type 2 family 0 port 35074 - 0
[  345.835566][   T12] netdevsim netdevsim1 eth3: set [1, 2] type 2 family 0 port 35074 - 0
[  345.890284][T20317] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3888'.
[  345.893995][T20317] netlink: 72 bytes leftover after parsing attributes in process `syz.1.3888'.
[  346.108497][    C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  346.146037][T20338] netlink: 'syz.1.3895': attribute type 2 has an invalid length.
[  346.380834][T20349] syzkaller1: entered promiscuous mode
[  346.383154][T20349] syzkaller1: entered allmulticast mode
[  346.411707][T20351] macvtap0: entered promiscuous mode
[  346.414082][T20351] macvtap0: entered allmulticast mode
[  346.416393][T20351] veth1_vlan: entered allmulticast mode
[  346.436526][T20351] macvtap1: entered promiscuous mode
[  346.438917][T20351] macvtap1: entered allmulticast mode
[  346.447703][T20352] "syz.1.3899" (20352) uses obsolete ecb(arc4) skcipher
[  346.691818][T20365] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate.
[  346.754447][T20366] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3904'.
[  346.999389][T20380] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3907'.
[  347.012322][T20380] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3907'.
[  347.049672][T20383] netlink: 'syz.2.3908': attribute type 1 has an invalid length.
[  347.074079][T20385] netlink: 'syz.0.3909': attribute type 21 has an invalid length.
[  347.105015][T20385] bond45: option arp_interval: invalid value (18446744073709551615)
[  347.109280][T20385] bond45: option arp_interval: allowed values 0 - 2147483647
[  347.148789][    C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  347.158827][T20385] bond45 (unregistering): Released all slaves
[  347.234157][T20391] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR
[  347.379246][T20405] netlink: 'syz.0.3912': attribute type 1 has an invalid length.
[  347.388593][T20405] netlink: 'syz.0.3912': attribute type 1 has an invalid length.
[  347.401128][T20396] lo speed is unknown, defaulting to 1000
[  347.552900][T20420] netlink: 'syz.1.3916': attribute type 13 has an invalid length.
[  348.188453][    C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  348.580695][T20437] bond45: up delay (2) is not a multiple of miimon (80), value rounded to 0 ms
[  348.585322][T20437] bond45: entered promiscuous mode
[  348.587390][T20437] 8021q: adding VLAN 0 to HW filter on device bond45
[  348.701506][T20443] tipc: Enabling of bearer <ib:ip6gre0> rejected, max 3 bearers permitted
[  348.841526][T20453] netlink: 'syz.0.3924': attribute type 1 has an invalid length.
[  349.175286][T20476] lo speed is unknown, defaulting to 1000
[  349.178404][T20473] lo speed is unknown, defaulting to 1000
[  349.228443][    C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  349.380373][T20488] netlink: 'syz.1.3935': attribute type 1 has an invalid length.
[  349.467005][T20488] netlink: 'syz.1.3935': attribute type 1 has an invalid length.
[  349.588650][T20502] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  349.789105][ T5611] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  349.863347][T20521] x_tables: duplicate underflow at hook 4
[  349.942810][T20529] wg2: Caught tx_queue_len zero misconfig
[  349.951419][ T5881] IPVS: ip_vs_send_async error -101
[  349.956500][T20527] lo speed is unknown, defaulting to 1000
[  350.268032][T20558] veth1: left promiscuous mode
[  350.268486][    C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  350.285543][T20558] veth1: left allmulticast mode
[  350.302930][T20558] bridge_slave_1: left allmulticast mode
[  350.336452][T20558] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  350.456322][T20580] 8021q: adding VLAN 0 to HW filter on device bond46
[  350.474321][T20581] veth17: entered allmulticast mode
[  350.479717][T20581] bond46: (slave veth17): Enslaving as an active interface with an up link
[  350.680777][T20595] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  350.892838][T20602] __nla_validate_parse: 7 callbacks suppressed
[  350.892860][T20602] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3966'.
[  350.965268][T20604] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3967'.
[  350.969849][T20604] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3967'.
[  351.022045][T20605] validate_nla: 70 callbacks suppressed
[  351.022064][T20605] netlink: 'syz.1.3967': attribute type 10 has an invalid length.
[  351.028080][T20605] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3967'.
[  351.090756][T20605] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3967'.
[  351.176266][T20616] vlan0: Caught tx_queue_len zero misconfig
[  351.188599][T20618] bond6: option mode: unable to set because the bond device has slaves
[  351.200348][T20618] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check.
[  351.308365][    C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  351.340040][T20632] netlink: 'syz.1.3975': attribute type 10 has an invalid length.
[  351.342920][T20632] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3975'.
[  351.355416][T20632] team0: Port device geneve1 added
[  351.598836][   T33] audit: type=1800 audit(1778899533.451:15): pid=20643 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.3978" name="memory.events" dev="tmpfs" ino=6940 res=0 errno=0
[  351.610540][   T33] audit: type=1804 audit(1778899533.461:16): pid=20643 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.3978" name="/newroot/1357/memory.events" dev="tmpfs" ino=6940 res=1 errno=0
[  351.641716][T20645] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3979'.
[  351.759690][T20653] xt_hashlimit: size too large, truncated to 1048576
[  351.760444][T20655] netlink: 16170 bytes leftover after parsing attributes in process `syz.0.3983'.
[  351.872368][T20653] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048)
[  351.963183][T20666] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3984'.
[  351.968244][T20666] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3984'.
[  352.013506][T20673] openvswitch: netlink: Missing key (keys=40, expected=2000)
[  352.024975][T20673] netlink: 'syz.0.3987': attribute type 8 has an invalid length.
[  352.034433][T20673] veth1_to_team: entered promiscuous mode
[  352.038656][T20673] veth1_to_team: left promiscuous mode
[  352.093842][T20679] netlink: 'syz.0.3990': attribute type 2 has an invalid length.
[  352.097080][T20679] netlink: 'syz.0.3990': attribute type 9 has an invalid length.
[  352.357770][T20722] sch_tbf: burst 0 is lower than device tunl0 mtu (32769) !
[  352.372394][T20722] xt_hl: Unknown TTL match mode: 237
[  352.674471][T20756] bond0: Caught tx_queue_len zero misconfig
[  352.805263][T20765] netlink: 'syz.0.4010': attribute type 10 has an invalid length.
[  352.848387][T20767] syzkaller1: entered allmulticast mode
[  353.010437][T20772] bridge0: entered allmulticast mode
[  353.019211][T20772] pim6reg: entered allmulticast mode
[  353.155031][T20781] netlink: 'syz.1.4018': attribute type 18 has an invalid length.
[  353.189251][T20781] netlink: 'syz.1.4018': attribute type 18 has an invalid length.
[  353.369532][T20791] mac80211_hwsim hwsim6 syzkaller0: Caught tx_queue_len zero misconfig
[  353.388427][    C0] net_ratelimit: 1 callbacks suppressed
[  353.388442][    C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  353.527428][T20806] netlink: 'syz.0.4023': attribute type 1 has an invalid length.
[  353.554603][T20806] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  353.562727][T20806] bond47: entered promiscuous mode
[  353.565035][T20806] bond47: entered allmulticast mode
[  353.567553][T20806] 8021q: adding VLAN 0 to HW filter on device bond47
[  353.579421][T20806] bridge25: entered promiscuous mode
[  353.581514][T20806] bridge25: entered allmulticast mode
[  353.583973][T20806] bond47: (slave bridge25): Enslaving as a backup interface with an up link
[  353.596926][T20806] bridge26: entered promiscuous mode
[  353.600040][T20806] bridge26: entered allmulticast mode
[  353.602696][T20806] bond47: (slave bridge26): Enslaving as a backup interface with a down link
[  353.624799][T20814] openvswitch: netlink: VXLAN extension 307 out of range max 1
[  353.640429][T20814] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[  353.645699][T20814] CPU: 0 UID: 0 PID: 20814 Comm: syz.1.4024 Not tainted syzkaller #0 PREEMPT(full) 
[  353.645711][T20814] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  353.645718][T20814] Call Trace:
[  353.645722][T20814]  <TASK>
[  353.645726][T20814]  dump_stack_lvl+0xe8/0x150
[  353.645742][T20814]  sysfs_warn_dup+0x8e/0xa0
[  353.645754][T20814]  sysfs_do_create_link_sd+0xc0/0x110
[  353.645784][T20814]  device_add_class_symlinks+0x1cf/0x240
[  353.645797][T20814]  device_add+0x475/0xbb0
[  353.645807][T20814]  wiphy_register+0x1dc5/0x2dc0
[  353.645829][T20814]  ? __pfx_wiphy_register+0x10/0x10
[  353.645840][T20814]  ? __pfx_netdev_run_todo+0x10/0x10
[  353.645851][T20814]  ? minstrel_ht_alloc+0x6e0/0x7e0
[  353.645863][T20814]  ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0
[  353.645875][T20814]  ieee80211_register_hw+0x3d82/0x4a70
[  353.645893][T20814]  ? ieee80211_register_hw+0x1931/0x4a70
[  353.645915][T20814]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  353.645927][T20814]  ? __asan_memset+0x22/0x50
[  353.645936][T20814]  ? __hrtimer_setup+0x1b7/0x260
[  353.645945][T20814]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  353.645955][T20814]  mac80211_hwsim_new_radio+0x3335/0x5aa0
[  353.645975][T20814]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  353.645982][T20814]  ? kstrndup+0xbf/0x160
[  353.645994][T20814]  hwsim_new_radio_nl+0xf6a/0x1c00
[  353.646010][T20814]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  353.646022][T20814]  ? rcu_is_watching+0x15/0xb0
[  353.646031][T20814]  ? trace_kmalloc+0x2a/0xf0
[  353.646043][T20814]  ? __nla_parse+0x40/0x60
[  353.646058][T20814]  ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0
[  353.646067][T20814]  ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0
[  353.646077][T20814]  genl_family_rcv_msg_doit+0x22a/0x330
[  353.646087][T20814]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  353.646100][T20814]  ? bpf_lsm_capable+0x9/0x20
[  353.646107][T20814]  ? security_capable+0x7e/0x2c0
[  353.646143][T20814]  genl_rcv_msg+0x61c/0x7a0
[  353.646154][T20814]  ? __pfx_genl_rcv_msg+0x10/0x10
[  353.646162][T20814]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  353.646178][T20814]  netlink_rcv_skb+0x232/0x4b0
[  353.646190][T20814]  ? __pfx_genl_rcv_msg+0x10/0x10
[  353.646199][T20814]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  353.646216][T20814]  ? down_read+0x270/0x2e0
[  353.646224][T20814]  ? genl_rcv+0xd/0x40
[  353.646232][T20814]  genl_rcv+0x28/0x40
[  353.646239][T20814]  netlink_unicast+0x75c/0x8e0
[  353.646259][T20814]  netlink_sendmsg+0x813/0xb40
[  353.646274][T20814]  ? __pfx_netlink_sendmsg+0x10/0x10
[  353.646287][T20814]  ? aa_sock_msg_perm+0xf1/0x1b0
[  353.646299][T20814]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  353.646313][T20814]  ____sys_sendmsg+0x972/0x9f0
[  353.646325][T20814]  ? __might_fault+0xaf/0x130
[  353.646338][T20814]  ? __pfx_____sys_sendmsg+0x10/0x10
[  353.646352][T20814]  ? import_iovec+0x73/0xa0
[  353.646364][T20814]  ___sys_sendmsg+0x2a5/0x360
[  353.646373][T20814]  ? __lock_acquire+0x6b5/0x2cf0
[  353.646382][T20814]  ? __pfx____sys_sendmsg+0x10/0x10
[  353.646394][T20814]  ? futex_wake+0x4ac/0x580
[  353.646416][T20814]  ? __fget_files+0x2a/0x420
[  353.646425][T20814]  ? __fget_files+0x3a0/0x420
[  353.646437][T20814]  __x64_sys_sendmsg+0x1bd/0x2a0
[  353.646447][T20814]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  353.646460][T20814]  ? rcu_is_watching+0x15/0xb0
[  353.646472][T20814]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  353.646480][T20814]  do_syscall_64+0x15f/0xf80
[  353.646489][T20814]  ? trace_irq_disable+0x3b/0x140
[  353.646502][T20814]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  353.646509][T20814] RIP: 0033:0x7faa3ff9ce59
[  353.646517][T20814] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  353.646524][T20814] RSP: 002b:00007faa40e12028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  353.646533][T20814] RAX: ffffffffffffffda RBX: 00007faa40215fa0 RCX: 00007faa3ff9ce59
[  353.646539][T20814] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000004
[  353.646544][T20814] RBP: 00007faa40032d6f R08: 0000000000000000 R09: 0000000000000000
[  353.646549][T20814] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  353.646554][T20814] R13: 00007faa40216038 R14: 00007faa40215fa0 R15: 00007ffd4c1fbe08
[  353.646568][T20814]  </TASK>
[  353.786462][T16603] bond47: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  353.898858][   T13] bond47: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  353.903739][T20825] tipc: Disabling bearer <udp:syz2>
[  354.428410][    C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  354.831218][T20845] 8021q: adding VLAN 0 to HW filter on device bond33
[  355.468335][    C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  355.558362][    C1] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  356.508456][    C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  356.884690][T20825] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  356.957954][T20862] dvmrp0: left allmulticast mode
[  356.961239][T20862] dvmrp6: left allmulticast mode
[  357.005110][T20861] __nla_validate_parse: 13 callbacks suppressed
[  357.005130][T20861] netlink: 56 bytes leftover after parsing attributes in process `syz.0.4034'.
[  357.014287][T20865] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4033'.
[  357.018717][T20863] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4033'.
[  357.091253][T20872] bond34: option arp_interval: invalid value (18446744073709551615)
[  357.094049][T20872] bond34: option arp_interval: allowed values 0 - 2147483647
[  357.097551][T20872] bond34 (unregistering): Released all slaves
[  357.215310][T20881] netlink: 'syz.1.4037': attribute type 1 has an invalid length.
[  357.231299][T20882] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4036'.
[  357.283525][T20884] veth23: entered promiscuous mode
[  357.314823][T20886] mac80211_hwsim hwsim7 syzkaller0: left promiscuous mode
[  357.317786][T20886] mac80211_hwsim hwsim7 syzkaller0: left allmulticast mode
[  357.341156][T20888] netlink: 'syz.1.4040': attribute type 1 has an invalid length.
[  357.363717][T20888] bond34: entered promiscuous mode
[  357.365831][T20888] 8021q: adding VLAN 0 to HW filter on device bond34
[  357.376012][T20886] batadv0: entered promiscuous mode
[  357.382717][T20886] batadv0: left promiscuous mode
[  357.434494][T20888] ipvlan0: entered allmulticast mode
[  357.436705][T20888] bond34: entered allmulticast mode
[  357.457928][T20888] bond34: (slave bridge20): making interface the new active one
[  357.460566][T20888] bridge20: entered promiscuous mode
[  357.462497][T20888] bridge20: entered allmulticast mode
[  357.467047][T20888] bond34: (slave bridge20): Enslaving as an active interface with an up link
[  357.548463][    C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  357.757409][T20907] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4042'.
[  357.761571][T20907] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4042'.
[  357.765330][T20907] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4042'.
[  358.588442][    C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  359.511477][T20915] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4047'.
[  359.628402][    C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  360.631343][T20903] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  360.668510][    C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  360.678825][    C1] ip6_tunnel: syztnl0 xmit: Local address not yet configured!
[  360.809303][T20932] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4051'.
[  360.821767][T20932] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4051'.
[  360.973940][T20944] bridge1: port 3(veth5) entered disabled state
[  360.976349][T20944] bridge1: port 1(veth3) entered disabled state
[  361.090634][T20947] netlink: 'syz.0.4056': attribute type 1 has an invalid length.
[  361.098265][T20947] netlink: 'syz.0.4056': attribute type 1 has an invalid length.
[  361.100776][T20947] netlink: 'syz.0.4056': attribute type 1 has an invalid length.
[  361.103664][T20947] netlink: 'syz.0.4056': attribute type 1 has an invalid length.
[  361.119832][ T6115] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  361.122731][ T6115] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  361.125441][ T6115] netdevsim netdevsim1 eth0: unset [1, 1] type 2 family 0 port 20000 - 0
[  361.128541][ T6115] netdevsim netdevsim1 eth0: unset [1, 2] type 2 family 0 port 35074 - 0
[  361.131361][ T6115] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  361.134151][ T6115] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  361.136786][ T6115] netdevsim netdevsim1 eth1: unset [1, 1] type 2 family 0 port 20000 - 0
[  361.142267][ T6115] netdevsim netdevsim1 eth1: unset [1, 2] type 2 family 0 port 35074 - 0
[  361.145595][ T6115] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  361.148451][ T6115] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  361.151189][ T6115] netdevsim netdevsim1 eth2: unset [1, 1] type 2 family 0 port 20000 - 0
[  361.153881][ T6115] netdevsim netdevsim1 eth2: unset [1, 2] type 2 family 0 port 35074 - 0
[  361.159223][ T6115] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  361.170498][ T6115] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  361.174409][ T6115] netdevsim netdevsim1 eth3: unset [1, 1] type 2 family 0 port 20000 - 0
[  361.180519][ T6115] netdevsim netdevsim1 eth3: unset [1, 2] type 2 family 0 port 35074 - 0
[  361.548744][T20961] veth1_vlan: left allmulticast mode
[  361.630191][   T31] syz1: Port: 1 Link DOWN
[  361.634185][ T6115] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 20000 - 0
[  361.658557][ T6115] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 20000 - 0
[  361.663566][ T6115] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 20000 - 0
[  361.676659][ T6115] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 20000 - 0
[  361.708459][    C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  361.726449][T20981] netlink: 'syz.2.4064': attribute type 1 has an invalid length.
[  361.736663][T20981] workqueue: Failed to create a rescuer kthread for wq "bond46": -EINTR
[  361.777874][T20990] SET target dimension over the limit!
[  361.789902][T20990] netlink: 'syz.2.4066': attribute type 1 has an invalid length.
[  361.827851][T20990] bond46: (slave vxcan1): The slave device specified does not support setting the MAC address
[  361.832187][T20990] bond46: (slave vxcan1): Error -95 calling set_mac_address
[  361.840678][T20993] tunl0: Caught tx_queue_len zero misconfig
[  361.877302][T20996] macvlan0: entered promiscuous mode
[  361.879495][T20996] macvlan0: entered allmulticast mode
[  361.881758][T20996] bond46: entered promiscuous mode
[  361.883958][T20996] 8021q: adding VLAN 0 to HW filter on device macvlan0
[  361.892457][T20996] bond46: left promiscuous mode
[  362.019538][T21006] tap0: tun_chr_ioctl cmd 1074025677
[  362.021929][T21006] tap0: linktype set to 773
[  362.245285][T21030] __nla_validate_parse: 3 callbacks suppressed
[  362.245298][T21030] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4076'.
[  362.253243][T21030] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4076'.
[  362.326164][T21035] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  362.336264][T21035] mac80211_hwsim hwsim3 syzkaller0: Caught tx_queue_len zero misconfig
[  362.342217][T21035] tipc: Resetting bearer <eth:syzkaller0>
[  362.378938][T21037] bond35: peer notification delay (9) is not a multiple of miimon (100), value rounded to 0 ms
[  362.720966][T21056] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  362.748442][    C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  362.859163][T21061] lo speed is unknown, defaulting to 1000
[  363.198349][T21066] IPVS: set_ctl: invalid protocol: 0 100.1.1.2:20000
[  363.325422][T21080] bridge0: port 1(vlan7) entered blocking state
[  363.327606][T21080] bridge0: port 1(vlan7) entered disabled state
[  363.329874][T21080] vlan7: entered allmulticast mode
[  363.331811][T21080] geneve0: entered allmulticast mode
[  363.334624][T21080] vlan7: entered promiscuous mode
[  363.336601][T21080] geneve0: entered promiscuous mode
[  363.368775][T21082] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4090'.
[  363.402742][T21084] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4091'.
[  363.407667][T21084] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4091'.
[  363.413873][T21084] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4091'.
[  363.466898][T21092] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4094'.
[  363.535692][T21096] netlink: 'syz.2.4095': attribute type 1 has an invalid length.
[  363.593856][T21096] bond47: (slave bridge25): making interface the new active one
[  363.600101][T21096] bond47: (slave bridge25): Enslaving as an active interface with an up link
[  363.788474][    C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  363.816867][T21122] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4101'.
[  363.935966][T21133] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  363.985912][T21135] xt_NFQUEUE: number of total queues is 0
[  364.143026][T21152] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4111'.
[  364.242535][T21156] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1536) !
[  364.806408][T21169] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4116'.
[  364.828459][    C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  365.170316][T21196] netlink: 'syz.0.4122': attribute type 2 has an invalid length.
[  365.173092][T21196] netlink: 'syz.0.4122': attribute type 2 has an invalid length.
[  365.203328][T21199] netlink: 'syz.0.4123': attribute type 14 has an invalid length.
[  365.205848][T21199] netlink: 'syz.0.4123': attribute type 13 has an invalid length.
[  365.276275][T21204] netlink: 'syz.0.4124': attribute type 1 has an invalid length.
[  365.868500][    C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  366.176996][T21210] netlink: 'syz.0.4126': attribute type 13 has an invalid length.
[  366.182536][T21210] netlink: 'syz.0.4126': attribute type 1 has an invalid length.
[  366.199459][T21210] 8021q: adding VLAN 0 to HW filter on device bond49
[  366.908309][    C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  367.210895][T21156] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  367.441391][T21248] __nla_validate_parse: 6 callbacks suppressed
[  367.441403][T21248] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4137'.
[  367.451669][T21248] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4137'.
[  367.510659][T21257] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4140'.
[  367.532130][T21257] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4140'.
[  367.674529][T21263] lo speed is unknown, defaulting to 1000
[  367.712308][T21266] sctp: [Deprecated]: syz.0.4143 (pid 21266) Use of int in max_burst socket option deprecated.
[  367.712308][T21266] Use struct sctp_assoc_value instead
[  367.749185][T21268] xt_hl: Unknown TTL match mode: 237
[  367.944898][T21280] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4148'.
[  367.948918][    C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  367.963977][T21280] netlink: 'syz.0.4148': attribute type 1 has an invalid length.
[  368.051170][T21285] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4149'.
[  368.085340][T21280] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4148'.
[  368.146861][T21282] xt_TCPMSS: Only works on TCP SYN packets
[  368.287365][T21302] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4155'.
[  368.296636][T21302] SET target dimension over the limit!
[  368.335015][T21299] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4154'.
[  368.392002][T21305] netlink: 104 bytes leftover after parsing attributes in process `syz.0.4156'.
[  368.473464][T21317] veth0_to_hsr: Caught tx_queue_len zero misconfig
[  368.988439][    C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  369.415419][T21358] lo speed is unknown, defaulting to 1000
[  370.028302][    C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  370.324835][T21418] 8021q: adding VLAN 0 to HW filter on device bond0
[  370.331512][T21418] 8021q: adding VLAN 0 to HW filter on device batadv0
[  370.355205][T21418] veth1_vlan: left promiscuous mode
[  370.359032][T21418] veth0_vlan: left promiscuous mode
[  370.362671][T21418] veth0_vlan: entered promiscuous mode
[  370.367819][T21418] veth1_vlan: entered promiscuous mode
[  370.415382][T21418] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  370.430725][ T5085] syz1: Port: 1 Link ACTIVE
[  370.459494][ T5478] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  370.464517][ T5478] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  370.480352][ T5478] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  370.486409][ T5478] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  370.582286][T21447] netlink: 'syz.2.4186': attribute type 7 has an invalid length.
[  370.590991][T21447] netlink: 'syz.2.4186': attribute type 8 has an invalid length.
[  370.734343][T21467] bond50 (unregistering): Released all slaves
[  370.966120][T21478] vlan7: entered allmulticast mode
[  371.068489][    C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  371.632414][T21515] sctp: [Deprecated]: syz.1.4202 (pid 21515) Use of int in maxseg socket option.
[  371.632414][T21515] Use struct sctp_assoc_value instead
[  371.776488][T21529] netlink: 'syz.0.4206': attribute type 10 has an invalid length.
[  371.885556][T21543] lo speed is unknown, defaulting to 1000
[  371.894633][T21545] sch_tbf: burst 0 is lower than device ip6gre0 mtu (32769) !
[  372.108277][    C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  372.165455][T21560] netlink: zone id is out of range
[  372.171877][T21560] netlink: zone id is out of range
[  372.178853][T21560] netlink: zone id is out of range
[  372.180952][T21560] netlink: zone id is out of range
[  372.182738][T21560] netlink: zone id is out of range
[  372.315235][T21565] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  372.355392][T21570] netlink: 'syz.2.4215': attribute type 2 has an invalid length.
[  372.388989][T21572] mac80211_hwsim hwsim3 syzkaller0: left promiscuous mode
[  372.392741][T21572] mac80211_hwsim hwsim3 syzkaller0: left allmulticast mode
[  372.414656][T21562] netlink: 'syz.1.4213': attribute type 1 has an invalid length.
[  372.440331][T21562] bond6: (slave lo): Releasing backup interface
[  372.444228][T21562] bond6: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed
[  372.453827][T21562] team0: Port device geneve1 removed
[  372.456602][T21562] veth3: left allmulticast mode
[  372.459493][T21562] veth3: left promiscuous mode
[  372.461665][T21562] bridge1: port 1(veth3) entered disabled state
[  372.471726][T21562] veth5: left allmulticast mode
[  372.474040][T21562] veth5: left promiscuous mode
[  372.476447][T21562] bridge1: port 3(veth5) entered disabled state
[  372.487375][T21562] bond1: (slave geneve2): Releasing active interface
[  372.498815][T21562] bond12: (slave vti0): Releasing backup interface
[  372.503511][T21562] bond14: (slave gretap1): Releasing active interface
[  372.513667][T21562] bond14: (slave bridge7): Releasing active interface
[  372.519344][T21562] bond15: (slave batadv1): Releasing active interface
[  372.524877][T21562] bond16: (slave geneve4): Releasing active interface
[  372.530198][T21562] bond17: (slave bridge13): Releasing active interface
[  372.534789][T21562] bond18: (slave bridge14): Releasing active interface
[  372.542078][T21562] bond23: (slave bridge17): Releasing active interface
[  372.550294][T21562] bond28: (slave geneve5): Releasing active interface
[  372.555834][T21562] bond34: (slave bridge20): Releasing backup interface
[  372.559099][T21562] bridge20: left promiscuous mode
[  372.561358][T21562] bridge20: left allmulticast mode
[  372.570019][ T5692] lo speed is unknown, defaulting to 1000
[  372.573586][ T5692] syz2: Port: 1 Link DOWN
[  372.585089][T21573] : entered promiscuous mode
[  372.786399][T21609] __nla_validate_parse: 23 callbacks suppressed
[  372.786416][T21609] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4226'.
[  372.806651][T21606] lo speed is unknown, defaulting to 1000
[  372.867245][T21609] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4226'.
[  372.931394][T21625] netlink: 'syz.2.4228': attribute type 4 has an invalid length.
[  372.936727][T21626] netlink: 'syz.2.4228': attribute type 4 has an invalid length.
[  372.952553][T21625] netlink: 'syz.2.4228': attribute type 4 has an invalid length.
[  372.952587][T21626] netlink: 'syz.2.4228': attribute type 4 has an invalid length.
[  373.260186][T21631] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4229'.
[  373.414494][T21639] lo speed is unknown, defaulting to 1000
[  374.188475][    C0] net_ratelimit: 104 callbacks suppressed
[  374.188494][    C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  374.225322][T21679] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4239'.
[  374.292032][T21684] netlink: 'syz.0.4238': attribute type 1 has an invalid length.
[  374.339274][T21684] 8021q: adding VLAN 0 to HW filter on device bond50
[  374.372979][T21689] vlan6: entered allmulticast mode
[  374.374811][T21689] bond50: entered allmulticast mode
[  374.376916][T21686] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4240'.
[  374.441118][T21686] gtp4: entered promiscuous mode
[  374.443123][T21686] gtp4: entered allmulticast mode
[  374.447160][T21690] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4241'.
[  374.451540][T21690] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4241'.
[  374.456728][T21690] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4241'.
[  374.461759][T21690] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4241'.
[  374.467185][T21690] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4241'.
[  374.651753][T21708] block nbd3: Unsupported socket: should be TCP or UNIX.
[  374.756282][T21723] sch_tbf: burst 255 is lower than device syzkaller0 mtu (313) !
[  374.770332][T21725] workqueue: Failed to create a rescuer kthread for wq "bond49": -EINTR
[  374.774669][T21723] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode
[  374.782182][T21723] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode
[  374.816785][T21731] xt_cgroup: invalid path, errno=-2
[  374.913427][T21734] lo speed is unknown, defaulting to 1000
[  374.941994][T21729] bond0: Error: Cannot enslave bond to itself.
[  375.228332][    C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  375.424511][T21772] dvmrp6: entered allmulticast mode
[  375.541805][T21776] bond49: option ad_actor_sys_prio: mode dependency failed, not supported in mode broadcast(3)
[  375.585951][T21776] bond49 (unregistering): Released all slaves
[  375.694125][T21796] validate_nla: 68 callbacks suppressed
[  375.694141][T21796] netlink: 'syz.2.4273': attribute type 1 has an invalid length.
[  375.732847][T21796] bond49: (slave vxcan1): The slave device specified does not support setting the MAC address
[  375.737317][T21796] bond49: (slave vxcan1): Error -95 calling set_mac_address
[  375.818563][T21801] bond49: (slave bridge27): Enslaving as an active interface with a down link
[  376.268431][    C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  376.754390][T21828] netlink: 'syz.2.4282': attribute type 15 has an invalid length.
[  377.097152][ T5690] syz1: Port: 1 Link DOWN
[  377.105310][T20855] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  377.118254][T20855] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  377.120837][T20855] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  377.124485][T20855] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  377.308449][    C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  377.596970][T21889] netlink: 'syz.0.4299': attribute type 1 has an invalid length.
[  377.804127][T21907] __nla_validate_parse: 87 callbacks suppressed
[  377.804139][T21907] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4303'.
[  377.813800][T21908] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4303'.
[  377.860426][T21910] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4304'.
[  377.864504][T21910] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4304'.
[  377.871864][T21914] sctp: [Deprecated]: syz.0.4305 (pid 21914) Use of struct sctp_assoc_value in delayed_ack socket option.
[  377.871864][T21914] Use struct sctp_sack_info instead
[  377.964212][T21924] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4308'.
[  378.123766][T21938] netlink: 17 bytes leftover after parsing attributes in process `syz.1.4311'.
[  378.173179][T21943] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4314'.
[  378.195695][T21943] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4314'.
[  378.317998][T21949] mac80211_hwsim hwsim7 syzkaller0: left promiscuous mode
[  378.321190][T21949] mac80211_hwsim hwsim7 syzkaller0: left allmulticast mode
[  378.329324][T21951] netlink: 84 bytes leftover after parsing attributes in process `syz.1.4317'.
[  378.332538][T21952] netlink: 224 bytes leftover after parsing attributes in process `syz.1.4317'.
[  378.348438][    C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  378.491166][T21965] bond0: Unable to set up delay as MII monitoring is disabled
[  378.516388][T21965] batadv_slave_0: Caught tx_queue_len zero misconfig
[  379.388440][    C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  379.666788][T22036] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode
[  379.671516][T22036] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode
[  379.726187][T22042] netlink: 'syz.1.4334': attribute type 5 has an invalid length.
[  379.860036][T22064] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode
[  379.870556][T22064] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode
[  379.879988][T22064] netlink: 'syz.2.4342': attribute type 1 has an invalid length.
[  379.882543][T22064] netlink: 'syz.2.4342': attribute type 1 has an invalid length.
[  379.884953][T22064] netlink: 'syz.2.4342': attribute type 6 has an invalid length.
[  379.887524][T22064] netlink: 'syz.2.4342': attribute type 3 has an invalid length.
[  379.980044][T22075] xt_cgroup: invalid path, errno=-2
[  380.143873][T22093] netlink: 'syz.2.4351': attribute type 1 has an invalid length.
[  380.185146][T22093] 8021q: adding VLAN 0 to HW filter on device bond50
[  380.428521][    C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  380.549663][T22132] netlink: 'syz.0.4364': attribute type 12 has an invalid length.
[  381.036383][T22174] Cannot find del_set index 3 as target
[  381.040242][T22173] xt_hashlimit: size too large, truncated to 1048576
[  381.042741][T22173] xt_hashlimit: invalid interval
[  381.047473][T22173] validate_nla: 2 callbacks suppressed
[  381.047482][T22173] netlink: 'syz.0.4374': attribute type 10 has an invalid length.
[  381.062277][T22173] tap0: tun_chr_ioctl cmd 1074025677
[  381.064447][T22173] tap0: linktype set to 773
[  381.424875][T22200] netlink: 'syz.0.4383': attribute type 9 has an invalid length.
[  381.468345][    C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  381.765748][T20855] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  381.775992][T20855] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  381.780973][T20855] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  381.785528][T20855] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  381.991665][T22224] nbd3: detected capacity change from 0 to 63
[  381.997356][   T56] block nbd3: Receive control failed (result -32)
[  382.000459][ T5834] block nbd3: Receive control failed (result -32)
[  382.013627][T22235] block nbd3: Dead connection, failed to find a fallback
[  382.017547][T22235] block nbd3: shutting down sockets
[  382.021903][T22235] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  382.033168][T22235] Buffer I/O error on dev nbd3, logical block 0, async page read
[  382.042086][T22235] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  382.051874][T22235] Buffer I/O error on dev nbd3, logical block 1, async page read
[  382.053249][T22239] openvswitch: netlink: Flow key attr not present in new flow.
[  382.055938][T22235] I/O error, dev nbd3, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  382.070922][T22235] Buffer I/O error on dev nbd3, logical block 2, async page read
[  382.076081][T22235] I/O error, dev nbd3, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  382.082010][T22235] Buffer I/O error on dev nbd3, logical block 3, async page read
[  382.094711][T22235] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  382.105214][T22235] Buffer I/O error on dev nbd3, logical block 0, async page read
[  382.122815][T22235] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  382.132162][T22235] Buffer I/O error on dev nbd3, logical block 1, async page read
[  382.136458][T22235] I/O error, dev nbd3, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  382.139568][T22235] Buffer I/O error on dev nbd3, logical block 2, async page read
[  382.142672][T22235] I/O error, dev nbd3, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  382.146416][T22235] Buffer I/O error on dev nbd3, logical block 3, async page read
[  382.149296][T22235] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  382.152171][T22235] Buffer I/O error on dev nbd3, logical block 0, async page read
[  382.155249][T22235] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  382.159247][T22235] Buffer I/O error on dev nbd3, logical block 1, async page read
[  382.162953][T22235] ldm_validate_partition_table(): Disk read failed.
[  382.173124][T22235] Dev nbd3: unable to read RDB block 0
[  382.175992][T22235]  nbd3: unable to read partition table
[  382.186060][T22235] ldm_validate_partition_table(): Disk read failed.
[  382.196589][T22241] netlink: 'syz.0.4397': attribute type 16 has an invalid length.
[  382.197051][T22235] Dev nbd3: unable to read RDB block 0
[  382.203457][T22241] netlink: 'syz.0.4397': attribute type 17 has an invalid length.
[  382.204571][T22235]  nbd3: unable to read partition table
[  382.233450][   T55] block nbd4: Receive control failed (result -32)
[  382.270852][T22241] 8021q: adding VLAN 0 to HW filter on device bond0
[  382.290562][T22241] 8021q: adding VLAN 0 to HW filter on device batadv0
[  382.302049][T22241] veth1: left promiscuous mode
[  382.306677][T22241] veth1: left allmulticast mode
[  382.317465][T22241] wg2: left allmulticast mode
[  382.345649][T22241] veth1_vlan: left promiscuous mode
[  382.351518][T22241] veth0_vlan: left promiscuous mode
[  382.357757][T22241] veth0_vlan: entered promiscuous mode
[  382.363969][T22241] veth1_vlan: entered promiscuous mode
[  382.381650][T22241] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  382.392299][T20975] syz1: Port: 1 Link ACTIVE
[  382.423237][ T6115] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  382.428938][ T6115] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  382.433725][ T6115] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  382.445274][ T6115] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  382.508275][    C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  382.792262][T22287] dvmrp0: entered allmulticast mode
[  382.953004][T22309] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate.
[  382.960884][T22307] bond52: entered allmulticast mode
[  382.969086][T22309] : entered promiscuous mode
[  383.003128][T22317] netlink: 'syz.1.4415': attribute type 10 has an invalid length.
[  383.007254][T22317] __nla_validate_parse: 40 callbacks suppressed
[  383.007263][T22317] netlink: 228 bytes leftover after parsing attributes in process `syz.1.4415'.
[  383.193977][T22337] lo: Caught tx_queue_len zero misconfig
[  383.200706][T22337] netem: unknown loss type 0
[  383.205960][T22337] netem: change failed
[  383.211537][T22341] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4420'.
[  383.215413][T22340] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4420'.
[  383.240663][T22339] netlink: 48 bytes leftover after parsing attributes in process `syz.2.4420'.
[  383.243857][T22346] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR
[  383.257333][T22339] bond53 (unregistering): Released all slaves
[  383.439043][T22364] mac80211_hwsim hwsim7 syzkaller0: left promiscuous mode
[  383.441592][T22364] mac80211_hwsim hwsim7 syzkaller0: left allmulticast mode
[  383.548451][    C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  383.559045][T22381] netlink: 224 bytes leftover after parsing attributes in process `syz.2.4429'.
[  383.575677][T22383] veth1_to_hsr: Caught tx_queue_len zero misconfig
[  383.579185][T22383] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4425'.
[  383.580576][T22385] netlink: 'syz.0.4430': attribute type 1 has an invalid length.
[  383.619581][T22385] bond51: (slave bridge27): making interface the new active one
[  383.623286][T22385] bond51: (slave bridge27): Enslaving as an active interface with an up link
[  383.632549][T22391] openvswitch: netlink: IPv4 tun info is not correct
[  383.704681][T22393] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[  383.712912][T22398] openvswitch: netlink: Multiple metadata blocks provided
[  383.771132][T22402] netlink: 'syz.2.4436': attribute type 1 has an invalid length.
[  383.787077][T22402] bond53 (unregistering): Released all slaves
[  383.832143][T22406] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4437'.
[  383.832906][T22407] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4437'.
[  383.896037][T22402] netlink: 'syz.2.4436': attribute type 5 has an invalid length.
[  383.954517][T22405] netlink: 'syz.2.4436': attribute type 3 has an invalid length.
[  383.960155][T22405] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4436'.
[  384.168992][T22423] bond53: Removing last ns target with arp_interval on
[  384.196749][T22425] bond54: Removing last ns target with arp_interval on
[  384.364801][T22441] netlink: 'syz.2.4445': attribute type 1 has an invalid length.
[  384.380188][T22444] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4446'.
[  384.397029][T22441] 8021q: adding VLAN 0 to HW filter on device bond55
[  384.407843][T22444] gtp5: entered promiscuous mode
[  384.411719][T22444] gtp5: entered allmulticast mode
[  384.426722][T22441] bond55: (slave veth17): Enslaving as an active interface with a down link
[  384.447293][T22441] bond55: (slave bridge29): Enslaving as an active interface with a down link
[  384.490417][T22446] vlan8: entered promiscuous mode
[  384.527115][T22448] lo speed is unknown, defaulting to 1000
[  384.588365][    C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  384.905031][T22465] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  385.150086][T22493] macsec0: entered promiscuous mode
[  385.218504][T22487] macsec0: left promiscuous mode
[  385.628328][    C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  386.202444][T22522] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  386.206567][T22522] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  386.249508][T22518] ip6tnl10: entered allmulticast mode
[  386.273614][T22522] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  386.280210][T22522] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  386.366160][T22522] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  386.370911][T22522] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  386.430186][T22522] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  386.434663][T22522] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  386.507621][ T5668] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  386.511702][ T5668] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  386.530204][ T6115] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  386.537578][ T6115] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  386.561474][ T6115] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  386.564936][ T6115] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  386.581078][ T6115] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  386.584899][ T6115] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  386.668414][    C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  386.946982][T22541] validate_nla: 4 callbacks suppressed
[  386.946997][T22541] netlink: 'syz.2.4471': attribute type 58 has an invalid length.
[  387.340686][T22573] netlink: 'syz.2.4477': attribute type 18 has an invalid length.
[  387.459977][T22576] bond_slave_0: mtu greater than device maximum
[  387.708431][    C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  388.748523][    C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  389.788408][    C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  390.193971][T22562] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  390.318810][T22604] __nla_validate_parse: 21 callbacks suppressed
[  390.318828][T22604] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4489'.
[  390.606374][T22623] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4494'.
[  390.651110][T22623] netlink: 64 bytes leftover after parsing attributes in process `syz.2.4494'.
[  390.664639][T22626] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  390.685050][   T33] audit: type=1804 audit(1778899572.531:17): pid=22626 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.4495" name="/newroot/1535/memory.events" dev="tmpfs" ino=7857 res=1 errno=0
[  390.694146][   T33] audit: type=1800 audit(1778899572.531:18): pid=22626 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.4495" name="memory.events" dev="tmpfs" ino=7857 res=0 errno=0
[  390.800659][T22628] netlink: 64 bytes leftover after parsing attributes in process `syz.2.4496'.
[  390.828412][    C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  390.832072][T22635] lo speed is unknown, defaulting to 1000
[  391.233087][T22640] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4499'.
[  391.236048][T22640] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4499'.
[  391.283153][T22644] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4501'.
[  391.286009][T22644] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4501'.
[  391.291366][T22644] netlink: 124 bytes leftover after parsing attributes in process `syz.1.4501'.
[  391.406189][T22654] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4504'.
[  391.419108][T22654] : left promiscuous mode
[  391.430186][T22654] mac80211_hwsim hwsim6 syzkaller0: left promiscuous mode
[  391.432480][T22654] mac80211_hwsim hwsim6 syzkaller0: left allmulticast mode
[  391.434846][T22654] bond20: left promiscuous mode
[  391.436767][T22654] bond22: left promiscuous mode
[  391.440004][T22654] ip6tnl8: left allmulticast mode
[  391.442134][T22654] macvtap0: left promiscuous mode
[  391.444578][T22654] ip6gre0: left promiscuous mode
[  391.446334][T22654] ip6gre0: left allmulticast mode
[  391.448842][T22654] veth19: left allmulticast mode
[  391.450583][T22654] ip6gre1: left promiscuous mode
[  391.452234][T22654] ip6gre1: left allmulticast mode
[  391.453912][T22654] vlan5: left allmulticast mode
[  391.455519][T22654] gretap0: left allmulticast mode
[  391.457382][T22654] bridge19: left promiscuous mode
[  391.459431][T22654] bridge19: left allmulticast mode
[  391.461467][T22654] geneve6: left promiscuous mode
[  391.463432][T22654] veth23: left promiscuous mode
[  391.465107][T22654] bond34: left promiscuous mode
[  391.466767][T22654] ipvlan0: left allmulticast mode
[  391.468900][T22654] bond34: left allmulticast mode
[  391.473529][T22654] vlan7: left allmulticast mode
[  391.475174][T22654] macvtap0: left allmulticast mode
[  391.478625][T22654] gtp4: left promiscuous mode
[  391.482298][T22654] gtp4: left allmulticast mode
[  391.497450][T22654] gtp5: left promiscuous mode
[  391.502194][T22654] gtp5: left allmulticast mode
[  391.506762][T11676] lo speed is unknown, defaulting to 1000
[  391.867961][T22700] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  391.868345][    C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  392.757903][T22710] openvswitch: netlink: Unexpected mask (mask=100000000, allowed=10048)
[  392.786406][T22712] netlink: 'syz.1.4521': attribute type 1 has an invalid length.
[  392.822615][T22712] 8021q: adding VLAN 0 to HW filter on device bond36
[  392.893591][T22712] bond36: (slave gretap3): making interface the new active one
[  392.908483][    C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  392.919412][T22712] bond36: (slave gretap3): Enslaving as an active interface with an up link
[  393.063336][T22738] 
[  393.064504][T22738] ======================================================
[  393.067457][T22738] WARNING: possible circular locking dependency detected
[  393.070261][T22738] syzkaller #0 Not tainted
[  393.072110][T22738] ------------------------------------------------------
[  393.074852][T22738] syz.0.4525/22738 is trying to acquire lock:
[  393.077942][T22738] ffff888173e690e0 (&resv_map->rw_sema){++++}-{4:4}, at: hugetlb_fault+0x4c2/0x1510
[  393.081568][T22738] 
[  393.081568][T22738] but task is already holding lock:
[  393.084492][T22738] ffff888103ada170 (&hugetlb_fault_mutex_table[i]){+.+.}-{4:4}, at: hugetlb_fault+0x3d8/0x1510
[  393.088506][T22738] 
[  393.088506][T22738] which lock already depends on the new lock.
[  393.088506][T22738] 
[  393.092234][T22738] 
[  393.092234][T22738] the existing dependency chain (in reverse order) is:
[  393.095861][T22738] 
[  393.095861][T22738] -> #9 (&hugetlb_fault_mutex_table[i]){+.+.}-{4:4}:
[  393.099387][T22738]        __mutex_lock+0x1a3/0x1550
[  393.101419][T22738]        hugetlb_fault+0x3d8/0x1510
[  393.103466][T22738]        handle_mm_fault+0x2009/0x3170
[  393.105653][T22738]        __get_user_pages+0x1683/0x2720
[  393.107912][T22738]        populate_vma_page_range+0x2be/0x3c0
[  393.110238][T22738]        __mm_populate+0x25f/0x390
[  393.112276][T22738]        vm_mmap_pgoff+0x3aa/0x4f0
[  393.114349][T22738]        ksys_mmap_pgoff+0x586/0x760
[  393.116512][T22738]        do_syscall_64+0x15f/0xf80
[  393.118686][T22738]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  393.121328][T22738] 
[  393.121328][T22738] -> #8 (&mm->mmap_lock){++++}-{4:4}:
[  393.124352][T22738]        __might_fault+0xcb/0x130
[  393.126402][T22738]        _copy_from_iter+0x100/0x1670
[  393.128509][T22738]        tcp_sendmsg_locked+0x2121/0x5360
[  393.130827][T22738]        tcp_sendmsg+0x2f/0x50
[  393.132716][T22738]        sock_write_iter+0x406/0x4f0
[  393.134796][T22738]        vfs_write+0x61d/0xb90
[  393.136760][T22738]        ksys_write+0x150/0x270
[  393.138609][T22738]        do_syscall_64+0x15f/0xf80
[  393.140692][T22738]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  393.143227][T22738] 
[  393.143227][T22738] -> #7 (sk_lock-AF_INET){+.+.}-{0:0}:
[  393.146286][T22738]        lock_sock_nested+0x41/0x100
[  393.148305][T22738]        inet_shutdown+0x6a/0x390
[  393.150374][T22738]        nbd_mark_nsock_dead+0x2e9/0x560
[  393.152653][T22738]        recv_work+0x1c2e/0x1d40
[  393.154711][T22738]        process_scheduled_works+0xb5d/0x1860
[  393.157114][T22738]        worker_thread+0xa53/0xfc0
[  393.159167][T22738]        kthread+0x389/0x470
[  393.161012][T22738]        ret_from_fork+0x514/0xb70
[  393.163062][T22738]        ret_from_fork_asm+0x1a/0x30
[  393.165235][T22738] 
[  393.165235][T22738] -> #6 (&nsock->tx_lock){+.+.}-{4:4}:
[  393.168322][T22738]        __mutex_lock+0x1a3/0x1550
[  393.170433][T22738]        nbd_queue_rq+0x37b/0x1100
[  393.172518][T22738]        blk_mq_dispatch_rq_list+0xa70/0x1910
[  393.174914][T22738]        __blk_mq_sched_dispatch_requests+0xdcc/0x1600
[  393.177677][T22738]        blk_mq_sched_dispatch_requests+0xd7/0x190
[  393.180334][T22738]        blk_mq_run_hw_queue+0x348/0x4f0
[  393.182626][T22738]        blk_mq_dispatch_list+0xd16/0xe10
[  393.184987][T22738]        blk_mq_flush_plug_list+0x48d/0x570
[  393.187394][T22738]        __blk_flush_plug+0x3ed/0x4d0
[  393.189551][T22738]        __submit_bio+0x28d/0x580
[  393.191611][T22738]        submit_bio_noacct_nocheck+0x2f4/0xa40
[  393.194124][T22738]        block_read_full_folio+0x599/0x830
[  393.196529][T22738]        filemap_read_folio+0x137/0x3b0
[  393.198811][T22738]        do_read_cache_folio+0x358/0x590
[  393.201097][T22738]        read_part_sector+0xb6/0x2b0
[  393.203271][T22738]        adfspart_check_ICS+0xb1/0x960
[  393.205433][T22738]        bdev_disk_changed+0x817/0x1770
[  393.207562][T22738]        blkdev_get_whole+0x380/0x510
[  393.209773][T22738]        bdev_open+0x31e/0xd30
[  393.211730][T22738]        blkdev_open+0x470/0x610
[  393.213740][T22738]        do_dentry_open+0x785/0x14e0
[  393.215895][T22738]        vfs_open+0x3b/0x340
[  393.217791][T22738]        path_openat+0x2e08/0x3860
[  393.219915][T22738]        do_file_open+0x23e/0x4a0
[  393.221913][T22738]        do_sys_openat2+0x113/0x200
[  393.223970][T22738]        __x64_sys_openat+0x138/0x170
[  393.226137][T22738]        do_syscall_64+0x15f/0xf80
[  393.227942][T22738]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  393.230038][T22738] 
[  393.230038][T22738] -> #5 (&cmd->lock){+.+.}-{4:4}:
[  393.232294][T22738]        __mutex_lock+0x1a3/0x1550
[  393.233884][T22738]        nbd_queue_rq+0xc6/0x1100
[  393.235856][T22738]        blk_mq_dispatch_rq_list+0xa70/0x1910
[  393.237833][T22738]        __blk_mq_sched_dispatch_requests+0xdcc/0x1600
[  393.240036][T22738]        blk_mq_sched_dispatch_requests+0xd7/0x190
[  393.242120][T22738]        blk_mq_run_hw_queue+0x348/0x4f0
[  393.244121][T22738]        blk_mq_dispatch_list+0xd16/0xe10
[  393.246372][T22738]        blk_mq_flush_plug_list+0x48d/0x570
[  393.248688][T22738]        __blk_flush_plug+0x3ed/0x4d0
[  393.250827][T22738]        __submit_bio+0x28d/0x580
[  393.252780][T22738]        submit_bio_noacct_nocheck+0x2f4/0xa40
[  393.255126][T22738]        block_read_full_folio+0x599/0x830
[  393.257487][T22738]        filemap_read_folio+0x137/0x3b0
[  393.259797][T22738]        do_read_cache_folio+0x358/0x590
[  393.262075][T22738]        read_part_sector+0xb6/0x2b0
[  393.264143][T22738]        adfspart_check_ICS+0xb1/0x960
[  393.266271][T22738]        bdev_disk_changed+0x817/0x1770
[  393.268180][T22738]        blkdev_get_whole+0x380/0x510
[  393.269929][T22738]        bdev_open+0x31e/0xd30
[  393.271482][T22738]        blkdev_open+0x470/0x610
[  393.273091][T22738]        do_dentry_open+0x785/0x14e0
[  393.274983][T22738]        vfs_open+0x3b/0x340
[  393.276881][T22738]        path_openat+0x2e08/0x3860
[  393.278985][T22738]        do_file_open+0x23e/0x4a0
[  393.281063][T22738]        do_sys_openat2+0x113/0x200
[  393.283148][T22738]        __x64_sys_openat+0x138/0x170
[  393.285328][T22738]        do_syscall_64+0x15f/0xf80
[  393.287396][T22738]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  393.289948][T22738] 
[  393.289948][T22738] -> #4 (set->srcu){.+.+}-{0:0}:
[  393.292860][T22738]        __synchronize_srcu+0xca/0x300
[  393.295074][T22738]        elevator_switch+0x1e8/0x7a0
[  393.297210][T22738]        elevator_change+0x2cc/0x450
[  393.299319][T22738]        elevator_set_default+0x36c/0x430
[  393.301551][T22738]        blk_register_queue+0x3e9/0x4e0
[  393.303703][T22738]        __add_disk+0x677/0xd50
[  393.305602][T22738]        add_disk_fwnode+0xfb/0x480
[  393.307738][T22738]        nbd_dev_add+0x72c/0xb50
[  393.309784][T22738]        nbd_init+0x168/0x1f0
[  393.311692][T22738]        do_one_initcall+0x250/0x870
[  393.313821][T22738]        do_initcall_level+0x104/0x190
[  393.316017][T22738]        do_initcalls+0x59/0xa0
[  393.317963][T22738]        kernel_init_freeable+0x2a6/0x3e0
[  393.320177][T22738]        kernel_init+0x1d/0x1d0
[  393.322115][T22738]        ret_from_fork+0x514/0xb70
[  393.324108][T22738]        ret_from_fork_asm+0x1a/0x30
[  393.326233][T22738] 
[  393.326233][T22738] -> #3 (&q->elevator_lock){+.+.}-{4:4}:
[  393.329405][T22738]        __mutex_lock+0x1a3/0x1550
[  393.331492][T22738]        elevator_change+0x1b3/0x450
[  393.333681][T22738]        elevator_set_none+0xb5/0x140
[  393.335843][T22738]        blk_mq_update_nr_hw_queues+0x5e7/0x1a60
[  393.338432][T22738]        nbd_start_device+0x17f/0xb10
[  393.340635][T22738]        nbd_genl_connect+0x165b/0x1cf0
[  393.342896][T22738]        genl_family_rcv_msg_doit+0x22a/0x330
[  393.345281][T22738]        genl_rcv_msg+0x61c/0x7a0
[  393.347286][T22738]        netlink_rcv_skb+0x232/0x4b0
[  393.349297][T22738]        genl_rcv+0x28/0x40
[  393.351123][T22738]        netlink_unicast+0x75c/0x8e0
[  393.353273][T22738]        netlink_sendmsg+0x813/0xb40
[  393.355424][T22738]        ____sys_sendmsg+0x972/0x9f0
[  393.357562][T22738]        ___sys_sendmsg+0x2a5/0x360
[  393.359699][T22738]        __x64_sys_sendmsg+0x1bd/0x2a0
[  393.361869][T22738]        do_syscall_64+0x15f/0xf80
[  393.363888][T22738]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  393.366476][T22738] 
[  393.366476][T22738] -> #2 (&q->q_usage_counter(io)#52){++++}-{0:0}:
[  393.369951][T22738]        blk_alloc_queue+0x546/0x680
[  393.372097][T22738]        __blk_mq_alloc_disk+0x197/0x390
[  393.374359][T22738]        nbd_dev_add+0x499/0xb50
[  393.376353][T22738]        nbd_init+0x168/0x1f0
[  393.378261][T22738]        do_one_initcall+0x250/0x870
[  393.380411][T22738]        do_initcall_level+0x104/0x190
[  393.382638][T22738]        do_initcalls+0x59/0xa0
[  393.384591][T22738]        kernel_init_freeable+0x2a6/0x3e0
[  393.386914][T22738]        kernel_init+0x1d/0x1d0
[  393.388909][T22738]        ret_from_fork+0x514/0xb70
[  393.391014][T22738]        ret_from_fork_asm+0x1a/0x30
[  393.393165][T22738] 
[  393.393165][T22738] -> #1 (fs_reclaim){+.+.}-{0:0}:
[  393.396068][T22738]        fs_reclaim_acquire+0x71/0x100
[  393.398291][T22738]        kmem_cache_alloc_noprof+0x40/0x650
[  393.400707][T22738]        __anon_vma_prepare+0xcb/0x4a0
[  393.403042][T22738]        __vmf_anon_prepare+0xe1/0x1b0
[  393.405151][T22738]        hugetlb_no_page+0x399/0x2100
[  393.407351][T22738]        hugetlb_fault+0x747/0x1510
[  393.409461][T22738]        handle_mm_fault+0x2009/0x3170
[  393.411703][T22738]        __get_user_pages+0x1683/0x2720
[  393.413957][T22738]        populate_vma_page_range+0x2be/0x3c0
[  393.416379][T22738]        __mm_populate+0x25f/0x390
[  393.418463][T22738]        vm_mmap_pgoff+0x3aa/0x4f0
[  393.420573][T22738]        ksys_mmap_pgoff+0x586/0x760
[  393.422757][T22738]        do_syscall_64+0x15f/0xf80
[  393.424824][T22738]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  393.427400][T22738] 
[  393.427400][T22738] -> #0 (&resv_map->rw_sema){++++}-{4:4}:
[  393.430565][T22738]        __lock_acquire+0x15a5/0x2cf0
[  393.432760][T22738]        lock_acquire+0x106/0x350
[  393.434795][T22738]        down_read+0x47/0x2e0
[  393.436687][T22738]        hugetlb_fault+0x4c2/0x1510
[  393.438771][T22738]        handle_mm_fault+0x2009/0x3170
[  393.440911][T22738]        do_user_addr_fault+0xa73/0x1340
[  393.443149][T22738]        exc_page_fault+0x6a/0xc0
[  393.445196][T22738]        asm_exc_page_fault+0x26/0x30
[  393.447384][T22738] 
[  393.447384][T22738] other info that might help us debug this:
[  393.447384][T22738] 
[  393.451384][T22738] Chain exists of:
[  393.451384][T22738]   &resv_map->rw_sema --> &mm->mmap_lock --> &hugetlb_fault_mutex_table[i]
[  393.451384][T22738] 
[  393.456923][T22738]  Possible unsafe locking scenario:
[  393.456923][T22738] 
[  393.459908][T22738]        CPU0                    CPU1
[  393.462079][T22738]        ----                    ----
[  393.464255][T22738]   lock(&hugetlb_fault_mutex_table[i]);
[  393.466511][T22738]                                lock(&mm->mmap_lock);
[  393.469401][T22738]                                lock(&hugetlb_fault_mutex_table[i]);
[  393.472692][T22738]   rlock(&resv_map->rw_sema);
[  393.474648][T22738] 
[  393.474648][T22738]  *** DEADLOCK ***
[  393.474648][T22738] 
[  393.477910][T22738] 2 locks held by syz.0.4525/22738:
[  393.480016][T22738]  #0: ffff88816e828388 (vm_lock){++++}-{0:0}, at: lock_vma_under_rcu+0x1d1/0x500
[  393.483260][T22738]  #1: ffff888103ada170 (&hugetlb_fault_mutex_table[i]){+.+.}-{4:4}, at: hugetlb_fault+0x3d8/0x1510
[  393.487087][T22738] 
[  393.487087][T22738] stack backtrace:
[  393.489061][T22738] CPU: 1 UID: 0 PID: 22738 Comm: syz.0.4525 Not tainted syzkaller #0 PREEMPT(full) 
[  393.489079][T22738] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  393.489088][T22738] Call Trace:
[  393.489096][T22738]  <TASK>
[  393.489104][T22738]  dump_stack_lvl+0xe8/0x150
[  393.489123][T22738]  print_circular_bug+0x2e1/0x300
[  393.489143][T22738]  check_noncircular+0x12e/0x150
[  393.489163][T22738]  __lock_acquire+0x15a5/0x2cf0
[  393.489179][T22738]  ? trace_contention_end+0x3d/0x140
[  393.489197][T22738]  ? __mutex_lock+0x319/0x1550
[  393.489218][T22738]  ? filemap_map_pages+0x1e6/0x2100
[  393.489237][T22738]  ? hugetlb_fault+0x4c2/0x1510
[  393.489248][T22738]  lock_acquire+0x106/0x350
[  393.489266][T22738]  ? hugetlb_fault+0x4c2/0x1510
[  393.489282][T22738]  down_read+0x47/0x2e0
[  393.489293][T22738]  ? hugetlb_fault+0x4c2/0x1510
[  393.489304][T22738]  ? hugetlb_fault+0x4b2/0x1510
[  393.489318][T22738]  hugetlb_fault+0x4c2/0x1510
[  393.489333][T22738]  ? __pfx_hugetlb_fault+0x10/0x10
[  393.489349][T22738]  ? lock_vma_under_rcu+0x1d1/0x500
[  393.489368][T22738]  handle_mm_fault+0x2009/0x3170
[  393.489386][T22738]  ? reacquire_held_locks+0x104/0x190
[  393.489404][T22738]  ? handle_mm_fault+0xee/0x3170
[  393.489420][T22738]  ? __pfx_handle_mm_fault+0x10/0x10
[  393.489435][T22738]  ? lock_vma_under_rcu+0x45a/0x500
[  393.489451][T22738]  ? __pfx_do_futex+0x10/0x10
[  393.489466][T22738]  ? __pfx_lock_vma_under_rcu+0x10/0x10
[  393.489489][T22738]  do_user_addr_fault+0xa73/0x1340
[  393.489505][T22738]  ? rcu_is_watching+0x15/0xb0
[  393.489520][T22738]  ? trace_page_fault_user+0x84/0x1e0
[  393.489532][T22738]  exc_page_fault+0x6a/0xc0
[  393.489549][T22738]  asm_exc_page_fault+0x26/0x30
[  393.489562][T22738] RIP: 0033:0x7f2b50d88240
[  393.489575][T22738] Code: 66 0f ef c0 66 0f ef c9 66 0f ef d2 66 0f ef db 48 89 f8 48 89 f9 48 81 e1 ff 0f 00 00 48 81 f9 cf 0f 00 00 77 74 48 83 e0 f0 <66> 0f 74 00 66 0f 74 48 10 66 0f 74 50 20 66 0f 74 58 30 66 0f d7
[  393.489586][T22738] RSP: 002b:00007f2b4eff4f48 EFLAGS: 00010202
[  393.489597][T22738] RAX: 0000200000000080 RBX: 00007f2b4eff5014 RCX: 0000000000000080
[  393.489606][T22738] RDX: 0000200000000080 RSI: 000020000000008f RDI: 0000200000000080
[  393.489614][T22738] RBP: 0000000000000005 R08: 0000000000000000 R09: 0000000000000000
[  393.489621][T22738] R10: 0000200000000080 R11: 000020000000008f R12: 0000200000000080
[  393.489629][T22738] R13: 00007f2b4eff4fb0 R14: 00007f2b51015fa0 R15: 0000000000000000
[  393.489643][T22738]  </TASK>
[  393.594334][ T5611] Bluetooth: hci2: link tx timeout
[  393.596569][ T5611] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa
[  393.609415][T22741] netlink: 'syz.1.4526': attribute type 13 has an invalid length.
[  393.612609][T22741] netlink: 'syz.1.4526': attribute type 17 has an invalid length.
[  393.675185][T22741] 8021q: adding VLAN 0 to HW filter on device bond1
[  393.678740][T22741] A link change request failed with some changes committed already. Interface geneve2 may have been left with an inconsistent configuration, please check.
[  393.690689][   T31] lo speed is unknown, defaulting to 1000
[  393.692891][   T31] syz2: Port: 1 Link ACTIVE
[  393.704925][ T5478] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  393.708953][ T5478] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  393.713744][ T5478] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  393.720753][ T5478] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  393.948340][    C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  394.988287][    C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  395.628256][T22743] Bluetooth: hci2: command 0x0405 tx timeout
[  396.028364][    C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  397.068337][    C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  398.108336][    C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  399.148449][    C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  400.188429][    C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  401.228372][    C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  402.268368][    C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available
