last executing test programs:

828.24679ms ago: executing program 1 (id=9774):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_ACCT_DEL(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000000)={&(0x7f00000000c0)={0x2c, 0x3, 0x7, 0x201, 0x0, 0x0, {0x5, 0x0, 0x6}, [@NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x9}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4840}, 0x10)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000190001002bbd7000fcdbdf251c2080070001fd000001000046fa0619255abfd29e9cd10298b77a61721943c949afc3fef80a51eb9e72fbae1cd6b426e7ca"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000004)
setsockopt$inet_tcp_int(r2, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000440)={'ip_vti0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x7c7, 0x3, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x86, 0x4, 0x0, @loopback, @local}}}})

708.624009ms ago: executing program 1 (id=9777):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
write$bt_hci(r0, &(0x7f0000000000)={0x1, @write_def_link_policy={{0x80f, 0x2}, {0x8}}}, 0x6) (async)
r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8)
getpeername$netrom(r1, &(0x7f0000000080)={{0x3, @netrom}, [@rose, @remote, @netrom, @null, @rose, @null, @null, @netrom]}, &(0x7f0000000100)=0x48) (async)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000440)={r1, 0xe0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, <r2=>0x0, 0x0, 0x0, 0x0, 0x1, 0xa, &(0x7f0000000180)=[0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xda, &(0x7f0000000200)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f0000000280), &(0x7f00000002c0), 0x8, 0x15, 0x8, 0x8, &(0x7f0000000300)}}, 0x10)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000500)={'syztnl0\x00', &(0x7f0000000480)={'ip6tnl0\x00', r2, 0x4, 0x5, 0xb, 0x5, 0x28, @mcast1, @private0, 0x20, 0x0, 0xf, 0x8}}) (async)
getsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000540)={<r3=>0x0, 0x0, 0x5, 0x40, 0x10000, 0x3f18}, &(0x7f0000000580)=0x14)
setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f00000005c0)={r3, 0x10, 0x10}, 0xc)
setsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000600)={r3, 0x0, 0xffff, 0xb}, 0x10) (async)
sendmsg$kcm(r1, &(0x7f0000002900)={&(0x7f0000000640)=@ax25={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x3}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @default, @bcast, @bcast, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}]}, 0x80, &(0x7f0000002800)=[{&(0x7f00000006c0)="e7873d9698633508f9f73af048128192bb32aaad8fcd2af34228215f42d6b023507919a34f487893558d7cb65036fd19bba65cf41c9573be77af883273cffd36764d6d898b8a66772355713423daeb8c8e568df80b3480a0d80f3a9c60db5c275702b21bda5847e067b99f8fea277c29ca0b9274729189417ffd387ca38fbb59e85e5361c55caabddadc", 0x8a}, {&(0x7f0000000780)="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", 0x1000}, {&(0x7f0000001780)="1b433c7a1f744692e7195915cddda10d17b8c6a0b4f0c6bbc419f4ea29f478ea11a9272edc2ad2b1ae930c845f354576a1e5f6e0919a140200654ba192ea09e12cc4957b5d0a5e7f15018a0cc80a0baa28718be8c2", 0x55}, {&(0x7f0000001800)="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", 0x1000}], 0x4, &(0x7f0000002840)=[{0x98, 0x10b, 0x64ac, "19a2c87b16d93de88712af122a8f6b94ec4697f9dbfb2205f74a2b3077fe39a8f317c9f1eb2f290ca2b698803d76f9c48f2d4102e4237711808a32a8604b7ee36528264f783c47023cf08e400416163dee5af2c70fe91001b0ac4857a43627ca49de5c44c091b757af31a6ef66a4dae5e9826078cf8c2bee4423ecd163df8d42a87f"}], 0x98}, 0x4008084) (async)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000002a00)={r1, &(0x7f0000002940)="e220973e8fdb10620f0b516aefdb06ecf3310ced984e3ef5d824663f80299ecc9c0835945c3199262322976c64ed85cd2d673ff3b8be92126a246eab4297a2fc0a1d36df8be177a6b455450439b5", &(0x7f00000029c0)=""/44}, 0x20) (async)
getsockopt(r0, 0x0, 0xfffffffb, &(0x7f0000002a40)=""/4096, &(0x7f0000003a40)=0x1000) (async)
socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$MRT6_TABLE(r1, 0x29, 0xcf, &(0x7f0000003a80)=0x1, 0x4) (async)
getsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000003ac0), &(0x7f0000003b00)=0x4) (async)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000003b80)={0x3, &(0x7f0000003b40)=[{0x1000, 0x7, 0x6}, {0x4, 0x1, 0x9, 0xfff}, {0x6, 0x4, 0x8}]}, 0x10) (async)
r4 = socket$rxrpc(0x21, 0x2, 0x2)
getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000003bc0), &(0x7f0000003c00)=0xc) (async)
setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000003c80)={0x6, &(0x7f0000003c40)=[{0x2, 0x3, 0x9, 0x6fb10460}, {0x9d79, 0x36, 0x3, 0x8}, {0x9, 0x5, 0x9, 0x1}, {0x5, 0x26, 0x3, 0x2}, {0x5, 0x4, 0x0, 0x6}, {0xa, 0x5, 0x42, 0x5}]}, 0x10) (async)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f0000004000)={&(0x7f0000003cc0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000003fc0)={&(0x7f0000003d00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x201, 0x0, 0x0, {0x3, 0x0, 0x2}, [@NFTA_SET_DATA_TYPE={0x8}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x3}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x3}, @NFTA_SET_FLAGS={0x8}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELSET={0x3c, 0xb, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x7}, [@NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x183}, @NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x3}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x0, 0x0, 0x6}, [@NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x100}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x39}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x3a}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x15}, @NFTA_SET_EXPR={0x10, 0x11, 0x0, 0x1, @limit={{0xa}, @void}}]}, @NFT_MSG_NEWCHAIN={0x20, 0x3, 0xa, 0x5, 0x0, 0x0, {0x3, 0x0, 0x9}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_DELOBJ={0x20, 0x14, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x44, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TYPE={0xa, 0x7, 'route\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffe}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0xf}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x5}]}, @NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x1}, @NFT_OBJECT_CONNLIMIT=@NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}}, @NFT_MSG_DELRULE={0xec, 0x8, 0xa, 0x3, 0x0, 0x0, {0x3, 0x0, 0x3}, [@NFTA_RULE_USERDATA={0x48, 0x7, 0x1, 0x0, "a84e44e823951bf0ee8c553ae908070a79016b76ff457be7356130c160814f8db9ebdb84d9e1712df03c4412d4b9dd755d40282c011005796237f46bd8f02d91636c6fd5"}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x1}, @NFTA_RULE_COMPAT={0x2c, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_FLAGS={0x8}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x8917}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x883e}]}, @NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @fwd={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_FWD_NFPROTO={0x8, 0x3, 0x1, 0x0, 0x2}]}}}, {0x10, 0x1, 0x0, 0x1, @counter={{0xc}, @void}}, {0x14, 0x1, 0x0, 0x1, @synproxy={{0xd}, @void}}]}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x3}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x2}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x284}, 0x1, 0x0, 0x0, 0x8000}, 0x40010)
r6 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$inet6_tcp_TCP_MD5SIG(r6, 0x6, 0xe, &(0x7f0000004040)={@in6={{0xa, 0x4e22, 0x7, @private0={0xfc, 0x0, '\x00', 0x1}, 0x9}}, 0x0, 0x0, 0x3, 0x0, "0fbcd1eb5f70daa84a72ea46427905da44fe430ad2c8264193f5d12852ffa4f64ddd182e63b200fb4c6c61b85ba2a5f603d10b76dd064048097e022225d7e4f3680f2d6e0c2bd06391fa0b1dd9dc1b60"}, 0xd8)
r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000004180), r1)
sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r1, &(0x7f0000004240)={&(0x7f0000004140)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000004200)={&(0x7f00000041c0)={0x1c, r7, 0x306, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x200408d6}, 0x20000040) (async)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000042c0)={'wlan1\x00', <r8=>0x0})
sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000004f40)={&(0x7f0000004280)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000004f00)={&(0x7f0000004300)={0xbcc, 0x0, 0x10, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x5}, @beacon=[@NL80211_ATTR_IE_PROBE_RESP={0x9, 0x7f, [@supported_rates, @challenge={0x10, 0x1, 0xd7}]}, @NL80211_ATTR_BEACON_TAIL={0x1b, 0xf, [@sec_chan_ofs={0x3e, 0x1, 0x3}, @link_id={0x65, 0x12, {@random="1a7a47dce4e1", @device_a, @broadcast}}]}, @NL80211_ATTR_BEACON_HEAD={0x209, 0xe, {{{0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1}, {0xa}, @device_a, @broadcast, @random="d77d43ddc147", {0x7}, @value=@ver_80211n={0x0, 0x5, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1}}, 0x9, @default, 0x8020, @void, @val={0x1, 0x8, [{0x18, 0x1}, {0x36}, {0x36}, {0x2}, {0x36}, {0x1, 0x1}, {0x60}, {0x12, 0x1}]}, @val={0x3, 0x1, 0xb6}, @val={0x4, 0x6, {0x5, 0x92, 0x3ff, 0x5c4}}, @val={0x6, 0x2, 0x9}, @void, @val={0x25, 0x3, {0x1, 0xb7, 0xf0}}, @void, @val={0x3c, 0x4, {0x1, 0x0, 0xb8, 0x7f}}, @val={0x2d, 0x1a, {0x10, 0x2, 0x6, 0x0, {0x5, 0x9, 0x0, 0x7d, 0x0, 0x1, 0x1, 0x1, 0x1}, 0x6, 0x9, 0x4}}, @void, @val={0x71, 0x7, {0x1, 0x0, 0x0, 0x0, 0x1, 0x6, 0x21}}, @val={0x76, 0x6, {0x6, 0xd, 0x39, 0x8001}}, [{0xdd, 0xd9, "6f6869d864c82c5ae03179a290b7f38a03d025f03c5d9a2de29090d7fa6e5c1b426632e986d7977af6a5ac343aa5a2d97cd36c1370e560ca25152bde2f951ab4528ee5e8dcfb23028ac85d7effe35d2d2990acaffed5743c46d3471097d1973c4b72da6a0c6f47f65f8282f2cf877c5f52b30cf8b72fc897c5b217815e42e653e50ad18fff6245d81497f39e9fb1e225ba3dda62ce4ddd5f213cd01f70baee49128b4b712db2b7c42f8eb483c9d86c216815c78970acf0783756cf3a9742f15d95d28ec6174282f9c85359a007d012baebd940a076b7b115ba"}, {0xdd, 0x41, "095a44cf6937491dcdf1661f13dd9292736f0d5cd58ee8cea97291659f59200cd0d2328d291f325941c7baff15149e934cc4f8977e426ebfa134e44fadb9633d86"}, {0xdd, 0x6c, "e014009b8c5402d61f879cbdc95eebd44c5973ddf69bcd43abf1bf37708d73ca0a2ea1c212280727eed3322a993b6d7eea896bcb215724d8ab0bf14c6300657b595d3014e0419b99e3026bcf76ff5afa54c5dfdf60097383b8384fb0cc0507b91eee07854c7bf3954c3f5705"}]}}, @NL80211_ATTR_PROBE_RESP={0x888, 0x91, "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"}, @NL80211_ATTR_IE_ASSOC_RESP={0x28, 0x80, [@prep={0x83, 0x1f, {{}, 0x9, 0x8, @broadcast, 0x80000000, @void, 0xfffffffa, 0x3, @device_b, 0x1}}, @sec_chan_ofs={0x3e, 0x1, 0x1}]}, @NL80211_ATTR_BEACON_TAIL={0x7f, 0xf, [@ssid={0x0, 0x1, @random='a'}, @gcr_ga={0xbd, 0x6, @device_b}, @rann={0x7e, 0x15, {{0x0, 0x5}, 0x81, 0xff, @device_b, 0x9, 0x9, 0x4}}, @preq={0x82, 0x57, {{0x1, 0x1, 0x0, 0x0, 0x1}, 0xe0, 0x0, 0x58288716, @device_b, 0xa3, @value, 0x8, 0x800, 0x5, [{{0x1}, @broadcast, 0xb3fa}, {}, {{0x1}, @device_a, 0x6}, {{}, @device_b, 0x81}, {{}, @broadcast, 0x5}]}}]}], @NL80211_ATTR_HE_OBSS_PD={0x34, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_BSS_COLOR_BITMAP={0xc, 0x4, "ed668f665ddb3bef"}, @NL80211_HE_OBSS_PD_ATTR_BSS_COLOR_BITMAP={0xc, 0x4, "8c58e286795609fe"}, @NL80211_HE_OBSS_PD_ATTR_BSS_COLOR_BITMAP={0xc, 0x4, "a54ec1cf1d07f169"}, @NL80211_HE_OBSS_PD_ATTR_BSS_COLOR_BITMAP={0xc, 0x4, "0611169993f552b2"}]}, @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0xef}, @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x4e}]}, 0xbcc}, 0x1, 0x0, 0x0, 0x8000080}, 0x40) (async)
setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r1, 0x84, 0x5, &(0x7f0000004f80)={r3, @in={{0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x40}}}}, 0x84) (async)
vmsplice(r1, &(0x7f00000062c0)=[{&(0x7f0000005040)="794c50de353c9a1f2622538e53191feb4933ed96a4f1731ccff0163167ec1e93e27549db52e9f4460f2e999dc42597fd6c3371c5a87ebe5caf23f53dfb9e7f49606d93137fc006036f8779b0b2c8d76288b2766fcc312120f23684ff9f59e345080b38b7804ad94eb49edb3bab694f691fa86653cd22b5aa35fde112dd2023f965d9023e9a1f71f6d48da6d8355ebdde460cab579639971ac56e0ecf047d970b716b20a54c0598f1317eb9db7580aa7a7394bfc69c1a10073648e4bc1b660f7743f463af0b84794a81c98269bf95c0c36c13a50e062588118ffa5c516d8a1e46a09734469bdebe81753b8d37edcec480ee8cee1caa4add911d395cba72c14089c34536c3c5189c418c445e7c24ab3d414eb9c0e6484f276b4f7715182cc9f12784fa81cb664b98a2cd4e8369651467acb6e0830dad5edb30e838517df57d1df6bcacd80a270a19187fb59536a7d9a2eddb8fd9b82d242deb9b43bcc36a5f8548717ee72536c067c633289d00eaffbbab6730ade916dc1f9c640cfbcd7cc5c40cd5a84737152fb28f6f57e2ce786d8681d5a0c8dd04d42ca4157019febbbcd714e8445b536dfa7f88506abdcf9f218489758e502ecdb5d15bf74395536f6ad35d8ec67f40af56ce8957718377807e9f16d49754b54929b19408cddb7849d55c8cec2a574900503332d1af1abc20667c4d3b9e173aacac68ec2c6629173f0959583d153d27c0b0c3b9bdef003a9db80c4e0f4ebd462dcf573763a3b4b62e647cea0fc431fd81832f271ce03a16d128b68bb43d8f07ba18f8984a48858bf12784c5cfa0481518c1d4ea3923d82aa2e63b6fed078c5daf16c7d5106058dc47dc5f1c392b6d0ef4c844530defd210dd894bcf7b5e158b17aadd37b64a5905ec08929e20b00cffd30b222fcbfdaac0f313c23040476ef0b5d48c61b26494de6df8b6e7ee69b4489e0bd79c2c8e21ccc6931e60c65eb427848f1b71bed46a5d2983678d95ad45d179a70486f9d27f40bcbfd4f306f4194c636401038638836198a47804efd7d5eed4ba1f8621aea611d706b4a3989781ee82976bf9a1e07f1f39b872eeb95c43633f449d9a6be6429e97ea84cdecfddbda42d0b8fa02a2ab1ba0ac30504272fdc9caa71ad900e60c734bef27e8fdb4d338220995bf227831a8a0f06e5622e9842be6799a6dd3d87f735ab5a77252bebdf25ff653f22396de4aebe370ffb424cb51754b5853196edd7c87841eaed5fa12b65e1b3393cb2207ffdaceb1cfc9fd297cd7af4caa8539b3be1953b5497ea3beb95dae3b0a681c7b9f3e110a7fdc195196faceec0c17479a3cb70fe59176c721e16dcbf672dfe9518c2c4cdb8fdfae84ebe8ec554e995cd4545ce42ecebe42975cad98436892f5a0fb0680cba99c4d2b2e7c15f3705b6906fcce1e254ea5b8b5dac2015f34f73bac61cdaf1b9ce8f3ebeee80120bb635eaf1e40be41e87d0a8b101910a095dd0139b1086b4712936c3e8b3010590f6b861a2b9a40c305e7972847f37c3b22a6db5e5649a87b141255fed488563c676e3d34520f1d3eaaf43a2331d74e66c6d4fdefbf7db40de5888fe57da323b010e124d17b02f831804e726af821cd82bbf7cd240ce1046f2e7306f793398e434f740639d9279059650d5904e494cf4797f30bc5a5e59d1885e9c7b9d77b3298752e40471e867a80f786697600adc2a4fd6c7024e119172c1fbde4d616aab11f0362b1f92e16771b57eef43a9b95c5230b99f361c15def834e7fca426a67d0c80f663cb6930fc9b10bf10a3de1020977a6d4f04774f4840514b7590053e59a9d8cc3180873f4ec0fe2fb9c1a707d0473de8fcebbd9a1a84bd695c3db04b71e969a675d41f571dd5e4d06acb9a1f03214e047efe8b2d01344b3dcbd85fd0213025dd14ded365dfd4b13ac9444806cf34fdd47ed5c6e0b820cf706389e627675e9d1ac169b87a90181fae26469274e5c1db2b28c3f7128334874f34c3c35a03ba683a204416ffb08ed6de2473f1a9dcf4d65c8a6afdac995e77c4f9284ea5e2f3d1b70737e205a8d106b43a6ba18cdce24bc0c0c8a3201f679351c51bbec4c0515bd6b4aecac6638c6011acf9a3532dd45ea2669b1d4fdc747e5541871114ae270a9454cb27b15123801f23e849f18a3da302be2dcf4a419488e2442a138afef158eed6e2dff83da167cdbd83b6e1fdc0d7d7514a534bfd07cee908087025cd2520d3a642317bdcf7609192d20899dfb86298f075947763c87fa9b32db36b7e4a26f494eebb6d0f561ea6b929748ff6148f9987eaebae5789a340797822d818cafb33bf70c9c2c4c6a89019248b873160ac7d2e6c8a4f2f114146720ef9a38a86b8939ccb8dab1eb38300b1b932fb1db5e4d5e005a8a17771dffc3e11bc771d937bca2fdf8bef8073fdbb672c35c39c4f512185f32fcd4687298fa29245d3c7ddf05e0dd888d2a3376c8a7874addb9cfc10d8b8f56cdb0d56639081163d4c4752db9f15f42d864562d543e58fc05e1927964b40bf298192e9722c8ab15ffd2b01909717200626e2511cff79b434efa54ec82fe12504616b0fad361b2eee51f3ee06f2f6f43bbacda276ae3cb1c1dc880deeb019c258007411ef6d45b978859650aed65469b691027487805d913dd3f2e8a765f91c2df3bd60918446ce57de29ced0b12a1f1a3a7f55a95d02107ff31f56b3e81f7d0ae447823004ddd9600d60ab0722414dc3982513e1bc120c2dfcd4c89b378217e88edf69e15ed91199643b3392f9a4b37b787638bc994076187bbc1b67fa9fe6b044004ff461355d539d12396a229b4e6dcfd566355fc645173ba59309292204eb1c173a76914e4bceb1960526311ccff52d69d434980472b00a411daf65fa03a0b6e4bd37ce6c2435a351faeead7332b4c252999dbc883c4e3cdf66c2616fca50158e85a2e21b2878f53101157ccebbeb67fdcb114a3fce820c3642906d8e0434182f3c07b8354dd66ff392a2438b3183a933f43103558fbb02c349636cf413a408259b56dbaa611c3cd54bd78e58c9046ba5252e5f17fda0459f01a6320b7d5b07324e3eb15582464d28302a6a2a40e8e7dbb823d2d6d6634fb5d34407a7e5c5276094cda4d9c567ac46fbbd20163d74f7e4fe00aa784da18f78badd2ad49061c2f219792611634e2136a74f276b69b9850ab8e00d85c0d494fdcea6988f159d9cd126bca75ecff891c26e2695e4afa009cfaa3b385a8146ec777adb1646b5617c9f39d062a9c0f9dd9dbce7cf3585f3213ae2789eea91f7d1f2b31c6490a2f00b598c29404ede00061adfc4d039e89d035cfb002b56c8f415f151d9de722b96f8ce516b92506d0ac96f11e1a661ab9a897af47ffd47f5abff9799dde2f2b4c31682b610bbc4b57cd61453d08a9d0a4a9669428ad08fef40b17b9d6bc8a36d3a7f6b426b498df65f943395f49d36472828b9b8ec7b63176ece5b16f0342c82516cf9cb25799c5f5bf9a064a9a8616e76d7abf8152b3617a96a84ee61b64c4431325876724768d02bdb5e596bf739fecae118ab768b3691665d87ea9f6e94664df1174abdcde6f5ce354004f0f7e652bdb2b0c2d2ceb38cbccd5a5d95b8addd3e8f63b1090459f3e572200a748fd9b23de7a55bc310d8b23cb5e905a787a5f5c9f3712f43bdec4e3f0a0b6cd5a7b30e62d5618edbef855609b5a913f8f6d524f4b43dc39c5e67257a8a1b2782e69e6758f0dcf2e9701510674bd70e77ebba02627f46a2b2ec218da8fdea76375115b77715b02062a8f802e25c4ce6b53044ed1fd91c0c24a60908e481c2911a2a749ed5284a7c8c9b08000285e6c40382a17a5f4754b17121c939876260fd5a8b75a03b95512ace7af947521f3303c1adbc0566ac6302c3cf9c42447ea66c6cca7f40afd65786d59a451925cadcf49b677494f60d2f575cdc1d8cde9e9da244c9bf8d5e29b94b2d94944a358418840c98ddab7a1e478e67bc941b28f3c9177dbbe622c5237d746b81520b836e2cfd2559103b853ff12e71e48416e3736d283d12e15f8ad4bc613cd98ec0e33cd8b1f564cd40ab33fc1e263aaf8df7cc13cfa9eda6752ec45e790bf6efae01e204f63dc9ac0fd3f82abd5593310efe0508ceddad61ad339d51bf41ad8e195faba106ead7f405c2d0a1d960b1770818fd3c11b6ff18e1f07cc42c378b6efd1ed5d39c6f9c561b87a389a61eecf802c961a7c87a653e3bf3ca4bd4aeb91765392efc3ed05d3038c6be4b71e69330762d7673039e6ea806abcffefdd353aeed03c01c12251027b9c00b18c2c0538094ad5950d191d1ae9cbdafb61bc2bff37c5b39a59de6714c10ea47e4eeb4b9e3f043d5f8c22c6df7547326165ca99dc44d75bde22acdc9f027652d99ffcbd4518dd6d1c788f46f47eb1c9ddb67a9b875fa746b6dfc96d1892f50922f6a3f13cf4cf62331c9a9dbb77af35bf6deecd9b76c5b5219b98857bad5049285578d65ead52021ec8986078bd9e78943fdde3e457db4d71ab04673a33ba0b4cca57d3dfbbd136b0886be9dd656eb245f7db8f61780bdb21125088c241d962e30607aaea0d98739fd66830e03af0c54a67326240d6f5ea0701fa4247790ab4a7d0eb0c046c06323a5338ff604b75e76eebe1ade9622d27a5d3843d35bc7dfb7dc1393dc6c836ec651364ca9af0cd20a87a55dc853932a942d6454334bfde41261273d9bf97adebc26f0295c2177a64b72b369be01461f76e9ba6fe8736df0e628da2c45e018cc2c1a5ef54d0a9ffdcca47f9a00ed7748b3d652f068f44de84bf52843c7354489021db2b6565ed74919ed4cfec35e04d11ea74e52878731993aea6e9b80f4d060146997656e8a8ff88216e0d8ef616e334d2f11d296430119e8a7c5d2524538e1120f47c327d32e105d25f97efbfedef9fc1d0dfb8bee719ad74285a868741f5cc181cb02af0142e1f4a74c576a5ca2bb9c203b202f0dd7973711fc065732fb74676f4dcd15c1bb3e0d09cebc4ee9a67c142a800b840bc787f0504f7f91d6af100e9c14275cc54c34a3d403aef2d97b694262b0c292b536a06bb0968255db1d04c25c97c9826f4fc82fe71fe054f132a9daeb075d5994f835f1bd59469a342ebc828a882917ef1f2defe40c3dcb22f3d8d83e4f7f2cf6caab168f74d32aa59ad0a9857824af05b1edae57c7e83733808e2eaff4240267492f3df89206e2c3a1eac9d0c3ac59ebfa57af97940c6fce7a9e524f27516595efad9281d2c53a6d48400ad613712a816f9ee550517e484cc9945f1e96294c5733c03fc7550d4e48f4f22bb5c6d9a306d1dd91b63f6f6fc4cf61767b0a12cd8415e5674c24b2423f7cd4a815a632bc08f560eb34e03a4bd4e7c28f17a5c1604172600aa276fca80bfd0174aae92de1dae6fbe76e093597228461313394904b7a5b7a75045eb24fdc60b556a8e5cec641c19b46ded6ca9fb539cd84d200cc41231a8a453ea7e0271564564f0e7b0d5210e37f14afd837ecbd06a919bace6b74dfced70a0377d89a5e91ba2a1e8af91e29d8d522bbdd4d26bdc02efe0de9ab70ace9c45ec58553e1a2124ca52ec950557a0d8491e162400838d318d48430ac2fb7dce08089c3d9ec788aa6a8a134746c0593ac52121be3a2b1a5fc265dd68c756879ab941d9418b39cd5cbb201c4ec7823a05dad8cc6286b532a03a96a185e50e4901cb7f041b0644034e3cb1de0789d4d8c97fc58250413b072c9f3c9f84c85bd12de08a117428f84b609c1d6dadda49e51cf85f41172fb86f5f92e7296650c5375ce4e7d1671a", 0x1000}, {&(0x7f0000006040)="5e2fc3643a19e5c5011c16bb90ef297fcd581d914ccade8f8ad42d53dfd8b29912cc2af169dfc61178403eae6c9dd818880df19ff0929a8d3cf542f7a0e8bdd15352de22b20b11462bb1da27ab215b7d42cead11dbe54da3485c94e331843c2928b85d77c1ab06519bb7eb5da55145bfd37bc7c22e54dafff41eb37fc8436f565a36cad589b4ed5ccc48cc78efcd04162e4f810616b36a0ba3bd6e536893d825f819e827582275617f35c05cb5c441b046ba635c753c142ee563f83a8ec0d4df3d46d16623a5b3c4fb45bfca18eeede8732f26f460e8cfb2f19df1d5f715c007d90174b22ddf55c082e5a2f5f9f4919051867f0273", 0xf5}, {&(0x7f0000006140)="186eb015fcbe08911aee55c496bee3107747dec76467907e5c0ed1f03d7b783c39c3673adf87bc730127bc4951db20ec43d8d8d2102e55db8b8d2941f68006c6bba0b0092e2c6ef062369fcfbd9f0259041d889b69c92ed0e58d9ce3da58c2b997719cff24712cb1e8d02b9a76f7fe021036c93dde8420147748c5218af254aba48535eecffb96a9afba2b9de33c8bcc4af1a2314b98ad00f2071c812385a15efd04c6561ed8e9a7b716fe13e9b340bd37609141bf4596c805d6b39f3127bfbb4ed78afe77d6e80c02334f68b415145d4cfb88f9be1cf2612781519461a074bbcd97825e91a1985872", 0xe9}, {&(0x7f0000006240)="b4b92395d3135b2c001274826db76a3b08b4790e015b272d2fc6514cb16ed54784ae5360c2e5d037cb2e5f4228bc733bd2e0c0af907c63e40c67b6cc2f3b155bc51644f702bc14a876e7b35bb0a1ac85a423090177544c00ca5c8ff1f8f93a038adc9dff26fcb7dfc19d8b00d8", 0x6d}], 0x4, 0x0)
setsockopt$CAN_RAW_JOIN_FILTERS(r1, 0x65, 0x6, &(0x7f0000006300)=0x7, 0x4)

702.874262ms ago: executing program 1 (id=9779):
r0 = socket$kcm(0x10, 0x2, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r1, 0x0, 0xd}, 0x18)
syz_genetlink_get_family_id$smc(&(0x7f00000003c0), 0xffffffffffffffff)
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000001c0), 0x4)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
pipe(&(0x7f00000000c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket$kcm(0x29, 0x2, 0x0)
sendmsg$inet(r4, 0x0, 0x8040)
close(r4)
getsockopt$llc_int(r3, 0x10c, 0x7, &(0x7f0000000000), &(0x7f0000000040)=0x4)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x16, 0x0, 0x8, 0x10002, 0x100, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffe}, 0x50)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=ANY=[], 0x110}}, 0x800)
sendmsg$NFT_BATCH(r5, 0x0, 0x0)
connect$bt_l2cap(r2, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe)
socket$inet_mptcp(0x2, 0x1, 0x106)
r7 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$sock_bt_hidp_HIDPCONNADD(r7, 0x400448c8, &(0x7f0000000100)={r2, r2, 0x8, 0x0, 0x0, 0x82, 0x4a, 0x15c2, 0x5886, 0x801, 0x0, 0x9, 'syz0\x00'})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
shutdown(r2, 0x1)
r8 = socket(0x15, 0x5, 0x0)
getsockopt(r8, 0x200000000114, 0x2717, 0x0, &(0x7f00000000c0))
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000040)="d8000000100081044e81f782db44b904021d006a0f000000e8fe55a1290015000600142603600e120900040044000000a80016000a00034002c3000000000000b94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a985162f7ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d3220a7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x60044884)

579.39376ms ago: executing program 2 (id=9781):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0)
r2 = gettid()
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={r2, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30)
write$cgroup_pid(r1, &(0x7f00000000c0)=r2, 0x12)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94)
socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_GET(r6, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40002000}, 0xc, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="a4000000010201010000000000000000030000070800044000000002080004400000000108000940000000e206000740000200005400010500000000000000003a0000002c000000000000000003001114000400ff0100000000000000000000000000010600034000000000060003400002000006000340000300000a000b005108000b00736970007e89ea9b4a96000786da6b0824fa153f829747d774fc82533343cd6b"], 0xa4}, 0x1, 0x0, 0x0, 0x4008801}, 0x8000)
sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r5, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
r8 = socket(0x1, 0x803, 0x0)
r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0)
ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r10 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r9, &(0x7f0000000680)={@val={0x0, 0x86dd}, @val={0x3, 0x0, 0xa, 0x0, 0x8d}, @mpls={[], @ipv6=@icmpv6={0xa, 0x6, "46d121", 0x168, 0x3a, 0xff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private2={0xfc, 0x2, '\x00', 0x1}, {[@fragment={0x3a, 0x0, 0x8, 0x1, 0x0, 0x14, 0x64}], @time_exceed={0x3, 0x0, 0x0, 0x8, '\x00', {0x8, 0x6, "8a8363", 0xab90, 0x32, 0xff, @dev={0xfe, 0x80, '\x00', 0x2d}, @ipv4={'\x00', '\xff\xff', @local}, [@hopopts={0x88, 0x0, '\x00', [@enc_lim={0x4, 0x1, 0x7}]}, @fragment={0x3b, 0x0, 0x6, 0x0, 0x0, 0x8, 0x67}, @srh={0x33, 0x2, 0x4, 0x1, 0xe, 0x20, 0x2, [@empty]}, @routing={0x5e, 0x12, 0x1, 0x3, 0x0, [@loopback, @dev={0xfe, 0x80, '\x00', 0xf}, @mcast2, @private1={0xfc, 0x1, '\x00', 0x1}, @local, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @dev={0xfe, 0x80, '\x00', 0xd}, @mcast1, @mcast2]}, @fragment={0x29, 0x0, 0x7, 0x0, 0x0, 0x10, 0x66}], "eb30e122cdf9f513d6b6dad3996e2163ba7b517e7fb5c9cc06a9de6eb7c4c47d9c2bb01ccfe1bb3cea7639885b41df5e26467708fe06df82fdf3e31f799d8fa838266a301abbc51d4c0d64585288050cdcdf0435826c057b6283ef19b7874175"}}}}}}, 0x19e)
getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, <r11=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800e0001006970366772657461700000001800028014000700fc00000000000000000000000000000008000a00", @ANYRES32=r11], 0x54}}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000440)={'wlan0\x00'})
r12 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$IP6T_SO_SET_REPLACE(r12, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @ipv4={'\x00', '\xff\xff', @loopback}, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff, 0x20, 0xf8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x401, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488)
r13 = socket$netlink(0x10, 0x3, 0x0)
r14 = socket$packet(0x11, 0x3, 0x300)
getsockname$packet(r14, &(0x7f0000000100)={0x11, 0x0, <r15=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200))
sendmsg$nl_route(r13, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="200000001000250800170000000000000a000000", @ANYRES32=r15, @ANYBLOB="0174dfdb0ddad488bc"], 0x20}}, 0x0)

578.6736ms ago: executing program 1 (id=9782):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x336, '\x00', 0x0, 0x0}, 0x50)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
ioctl$SIOCX25SFACILITIES(r2, 0x89e3, &(0x7f0000000000)={0x58, 0x800, 0xb, 0x9, 0x8000, 0x11})
r3 = socket$tipc(0x1e, 0x5, 0x0)
setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10)
bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'aead\x00', 0x0, 0x0, 'rfc7539esp(ctr-camellia-aesni,rmd256)\x00'}, 0x58)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="4c00000044000701fcffffff00000000017c00003800048031"], 0x4c}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000)
bind$tipc(r3, 0x0, 0x0)
r5 = socket$tipc(0x1e, 0x5, 0x0)
sendmsg$tipc(r5, &(0x7f0000000380)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10, 0x0}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1c, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x8}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x1, 0xb, 0x8, 0x9}, {0x4, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r0}, {}, {0x46, 0x0, 0x0, 0x76}}], {{}, {0x6, 0x0, 0x7, 0x8}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_LACP_RATE={0x5}, @IFLA_BOND_MODE={0x5, 0x1, 0x5}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8015}, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000700)=ANY=[@ANYBLOB="5c0000001800030727bd7000fddbdf2502142004fd02ff"], 0x5c}, 0x1, 0x0, 0x0, 0x4001}, 0x0)

522.29824ms ago: executing program 1 (id=9784):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r1)
sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x4004084)
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r2, 0x200, 0x70bd26, 0x25dfdbfc, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4080}, 0x40101)
r3 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000200)="cb000000150081054e81f782db44b904021f08010a000000040000a118000200ac141414ffff0d1208000f0100810401880016ea1f0006ea7f400303000803600cfab94dcf5c046181d67f6f94007134cf6ee080005c4ab0f45312b3429fa0e408f456211bef32d4760000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd60100730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee", 0xcb}], 0x1, 0x0, 0x0, 0x7400}, 0x44804)

443.782619ms ago: executing program 1 (id=9786):
pipe(&(0x7f0000000480)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000040)={0x7, 0x1, 0x98, 0x8}, &(0x7f00000001c0)=0x10) (async)
vmsplice(r1, &(0x7f00000000c0), 0x0, 0x9) (async)
close(r1)
socket$netlink(0x10, 0x3, 0x0) (async)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bond_slave_1\x00'})
syz_emit_ethernet(0x10b, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)={0x0, 0x1, [0x36b, 0x90f, 0xb3b, 0x726]}) (async)
r2 = socket$alg(0x26, 0x5, 0x0)
r3 = socket$nl_rdma(0x10, 0x3, 0x14)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="14000000380e00dbdf25040000002ee409915193cd35bc6bb85abb2f2ba4f3c231a255ec031ed356b32229fdb099ceb1fb4c4295b4bc2b36230da2d0f6959248e3fa3205b1469e2c522d7de5f4ac3f2047631cf28201851e4f7a1288cba94b"], 0x14}}, 0x40800)
r5 = socket$inet6_sctp(0xa, 0x1, 0x84)
bind$inet6(r5, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (async)
socket$inet6_tcp(0xa, 0x1, 0x0) (async)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f0000000980)={0x0, 0x2}, 0x9) (async)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=@newtaction={0xbc, 0x30, 0x100, 0x70bd29, 0x0, {}, [{0xa8, 0x1, [@m_mpls={0xa4, 0x1, 0x0, 0x0, {{0x9}, {0x50, 0x2, 0x0, 0x1, [@TCA_MPLS_TC={0x5, 0x6, 0x5}, @TCA_MPLS_TC={0x5, 0x6, 0x7}, @TCA_MPLS_PROTO={0x6, 0x4, 0x80f3}, @TCA_MPLS_TTL={0x5, 0x7, 0x10}, @TCA_MPLS_LABEL={0xffffffffffffff79, 0x5, 0xc0758}, @TCA_MPLS_TC={0x5, 0x6, 0x7}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x1ff, 0x9, 0x10000000, 0x9, 0x1}, 0x3}}]}, {0x2c, 0x4, "95c200f8e087e836867ec781d88e0d30e36319b22dacfa55d696b9e262d602eac2fcf85c599a9fa1"}, {0xc}, {0xc}}}]}]}, 0xbc}, 0x1, 0x0, 0x0, 0x20040000}, 0x488c1) (async)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000014001280090001007665746800000000040002800800200001"], 0x3c}}, 0x0)
connect$bt_rfcomm(0xffffffffffffffff, &(0x7f0000000040)={0x1f, @none, 0x1}, 0xa)
poll(&(0x7f0000002000)=[{0xffffffffffffffff, 0x93d4}], 0x1, 0x9)
sendto$inet6(r5, &(0x7f0000000380)="1a", 0x1, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (async)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="30000000111401000000000000000000080001020000009adea3a3a764588b0108004a000200000008004b0013000000"], 0x30}}, 0x0) (async)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5", 0x4)
pselect6(0xfffffffffffffe5b, &(0x7f00000003c0)={0x4, 0xe, 0x2, 0x7ff, 0x9, 0x8000, 0xfffffffffffffffe, 0x9}, &(0x7f0000000580)={0xbecf, 0x8000000000000000, 0xfffffffffff7fffc, 0x7, 0x38931948, 0x1, 0x10001}, &(0x7f0000000600)={0x2, 0xfffffffffffffffe, 0x5, 0x5, 0x9, 0x2, 0x5, 0x6}, &(0x7f0000000640), &(0x7f0000000080)={&(0x7f0000000680)={[0x9]}, 0x8})
r8 = accept4(r4, 0x0, 0x0, 0x80000)
sendmmsg$alg(r8, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0), 0x0, &(0x7f0000000080)}], 0x1, 0x20004090) (async)
syz_emit_ethernet(0x46, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaa380000000000019078ac1e0001ac1414aa030490780300fffe450000000000ffff002f0000ac14fee7b1d4e73c7331a86059adfb07140ae00000010000000000"], 0x0)
recvmsg(r8, &(0x7f00000005c0)={0x0, 0x10, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2, 0x0, 0x0, 0xf5000000}, 0x0) (async)
socket$nl_route(0x10, 0x3, 0x0)

441.326533ms ago: executing program 2 (id=9787):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x4e22, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, {0x0, 0x0, 0x200000000000000}}, [@mark={0xc, 0x15, {0x350759, 0x81}}]}, 0xc4}, 0x1, 0x0, 0x0, 0x4}, 0x2c000010)
r1 = socket(0x11, 0x800000002, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x7)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r2, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x8}, {0xfff1, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000980)=@delchain={0x34, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xfff3, 0xffff}, {0x0, 0x1b}}, [@filter_kind_options=@f_flower={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x20, &(0x7f00000001c0)={&(0x7f0000000000)=@delchain={0x24, 0x11, 0x1, 0x1f, 0x0, {0x0, 0x0, 0x0, r2}}, 0x24}, 0x1, 0x0, 0x0, 0x4008000}, 0x0)
getsockopt$inet6_mreq(r1, 0x29, 0xe, &(0x7f0000000140)={@private0, <r3=>0x0}, &(0x7f0000000240)=0x14)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000280)={'vxcan0\x00', <r4=>0x0})
r5 = socket$netlink(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r6, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r7, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000640)=ANY=[@ANYBLOB="5800000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000300012800b00010067656e657665000020000280140007000000000000000000000000ff0000000105000c000100000008000a00", @ANYRES32=r7, @ANYBLOB], 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f00000007c0)={'syztnl2\x00', &(0x7f0000000740)={'syztnl0\x00', <r8=>0x0, 0x29, 0x8, 0x9, 0x8, 0x0, @loopback, @private2, 0x7, 0x40, 0x80000001, 0x27e}})
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f00000008c0)={'gre0\x00', &(0x7f0000000800)={'sit0\x00', <r9=>0x0, 0x7, 0x8, 0x8, 0x549, {{0x23, 0x4, 0x3, 0x18, 0x8c, 0x64, 0x0, 0x86, 0x2f, 0x0, @private=0xa010101, @multicast2, {[@lsrr={0x83, 0xf, 0x7e, [@broadcast, @remote, @broadcast]}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x7, 0xc2, [@empty]}, @ra={0x94, 0x4}, @ssrr={0x89, 0xb, 0xcc, [@empty, @remote]}, @timestamp_addr={0x44, 0x44, 0xdd, 0x1, 0x9, [{@dev={0xac, 0x14, 0x14, 0x32}, 0x9}, {@multicast1}, {@multicast2, 0x1}, {@empty, 0x10001}, {@remote, 0x3}, {@rand_addr=0x64010100, 0x2}, {@private=0xa010100}, {@private=0xa010100, 0x5}]}, @generic={0x82, 0xa, "e5aff82d2ab6ca2b"}]}}}}})
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'lo\x00', <r10=>0x0})
r11 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r11, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000a40)=@newqdisc={0x178, 0x24, 0xd0f, 0x200000, 0x0, {0x60, 0x0, 0x0, 0x0, {}, {0xffff, 0xe}, {0x7, 0xfff3}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x148, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x100, 0x75de0fa8, 0x5, 0x9, 0x81, 0x101, 0x7, 0x2, 0x7fffffff, 0xfffffffd, 0xd, 0xb, 0x3, 0x7, 0xca11, 0xffff}}, @TCA_GRED_STAB={0x104, 0x2, "da8de478ebda05b730872f52ae68f14f07907a776278493e24c788b4b967338035dc0bc4e70e6b2d951eba456df861a2865ed8399c74a422b50d9e5f4a19d3d8296680acd68364ed9d521aa43ff7c4d336c127e0bbde540e2bb1a126384249debd2eca7e3d4f27841ce692ff2044c193bdf372d50eca80e3682973af13cac8773a4330ada37b4877912aebfc7fab50703da26e2156a1f2e9d5a7a2a0b4aa23ad53525ed9707721d639f8285412f1be711c38b05a6899d307c9871567839c4026217c17572227dbce5111baf9ef2cb2db3a8571da9198260b971a5186b298be17b703fdf9585036e12db2b86bd36162ed28bb9b159a5c039c4665208c272980ac"}, @TCA_GRED_LIMIT={0x8, 0x5, 0x9}]}}]}, 0x178}}, 0x0)
sendmsg$TEAM_CMD_PORT_LIST_GET(r1, &(0x7f0000000e00)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000940)={0x458, 0x0, 0x400, 0x70bd27, 0x25dfdbfe, {}, [{{0x8}, {0x1ec, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x7f}}, {0x8, 0x6, r3}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8, 0x6, r4}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7fffffff}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x101}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}]}}, {{0x8, 0x1, r7}, {0xf8, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7ff}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}]}}, {{0x8, 0x1, r9}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x5721}}}]}}, {{0x8}, {0x104, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r10}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x80}}}]}}]}, 0x458}, 0x1, 0x0, 0x0, 0x40000044}, 0x20004000)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000200)={'ipvlan0\x00', {0x2, 0x0, @loopback=0xac141437}})

368.988112ms ago: executing program 2 (id=9790):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
close(r0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x40)
sendmsg$NFT_BATCH(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x6}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x50}, 0x1, 0x0, 0x0, 0x8000}, 0x4000040)
r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000340)=ANY=[@ANYRES32=r4, @ANYRES32=r3, @ANYBLOB='&'], 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r4}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20)
sendmsg$inet(r1, &(0x7f0000000500)={0x0, 0x4003e80, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x20000281}], 0x1}, 0x0)

289.585327ms ago: executing program 0 (id=9792):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
listen(0xffffffffffffffff, 0xfffffffc)
r0 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x80000004, 0x4)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x33, &(0x7f0000000640)={0x1, &(0x7f0000000680)=[{0x6, 0x0, 0x0, 0x2}]}, 0x10)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x1, @empty, 0xfffffffc}, 0x1c)
listen(r0, 0xb)
r1 = socket$netlink(0x10, 0x3, 0xc)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="070000000400000008020000210000"], 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000001850000001b000000b70000000000070095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r3}, 0x18)
bind$netlink(r1, &(0x7f0000000040)={0x10, 0x0, 0x25dfdbfb, 0x20}, 0xc)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="a800000000010904000500000000000002000000240001801400018008000100e000000108000200ac1e01010c00028005000100000009002400028014000180080001000000010908000200ac1e00010c000280050001000000000044000f800800014000000006080003400000002b080003400000000808000240000000400800014000000000fb0001400000000708000140000044f10800034000000003080007"], 0xa8}}, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff)
sendmsg$WG_CMD_SET_DEVICE(r5, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000340)=ANY=[@ANYBLOB="30000000ba561323e1b92d66b6995bce3ca98e194f9ec38604a38769855b7089c3973c05a4edae84061b41d2dd28ebdaf9d736c87a8f6e8116dbfddf3e3faf4f1ec96c77eb66f3ca1c21feffe6a42cc1cf60cf5293050000009e2d4257738ccf82d2d152c196c97c810c09a467dd14d5fe92d0ccfd0e9e731d55dcbb948662ca824f425053995a9d5e6dfd", @ANYRES16=r6, @ANYBLOB="01002bbd7000ffdbdf250100000014000200776731000000000000000000000000000800070000000000"], 0x30}, 0x1, 0x0, 0x0, 0x4084}, 0x20000010)
r7 = socket$nl_route(0x10, 0x3, 0x0)
r8 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000c80)={'lo\x00', <r9=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pfifo={{0xa}, {0x4}}]}, 0x38}}, 0x0)
sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0x60, r6, 0x400, 0x70bd25, 0x25dfdbfd, {}, [@WGDEVICE_A_IFINDEX={0x8, 0x1, r9}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0xfffffffd}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e22}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @a}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000040}, 0x20040880)
r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r11 = socket$kcm(0x2, 0x3, 0x2)
ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast})
write$tun(r10, &(0x7f0000000240)={@val={0x8, 0x800}, @val={0x3, 0x0, 0x4, 0x1000, 0x14}, @ipv4=@tcp={{0x5, 0x4, 0x2, 0x3, 0x28, 0x65, 0x0, 0x52, 0x6, 0x0, @private=0xa010102, @broadcast}, {{0x4e23, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10, 0x10, 0x0, 0x1}}}}, 0x36)

286.767714ms ago: executing program 2 (id=9793):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010000104fcffffff8000000000000000", @ANYRES32=0x0, @ANYBLOB="0315000000000000140012800b0001006970766c616e00000400028008000500", @ANYBLOB='\b\x00\n'], 0x44}, 0x1, 0x0, 0x0, 0x4001}, 0x0)
sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=@updpolicy={0xc4, 0x19, 0xfd3649826d894c67, 0x0, 0x0, {{@in6=@empty, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0xfffffffffffffffc}, {0x0, 0xacb0, 0x400000000}, 0x400}, [@policy_type={0xa, 0x10, {0x1}}]}, 0xc4}}, 0x4c050)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0xfffffffe, 0x25dfdbfc, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x9, 0x0, 0x8000000, 0x0, 0xffffffffffffffff, 0x7}, {0x0, 0x0, 0x40000000000000}, 0x0, 0x0, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in=@empty, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3, 0x2}]}]}, 0xfc}}, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000340), 0xffffffffffffffff)
sendmsg$NLBL_UNLABEL_C_ACCEPT(r4, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000003c0)={&(0x7f00000006c0)={0x68, r5, 0x100, 0x70bd27, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @private=0xa010101}, @NLBL_UNLABEL_A_SECCTX={0x27, 0x7, 'system_u:object_r:apt_var_lib_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @broadcast}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast2}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000000}, 0x4044814)
r6 = socket$kcm(0x2, 0xa, 0x2)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r7, &(0x7f0000000140), &(0x7f0000000000)=""/6, 0x2}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r7}, &(0x7f0000000540), &(0x7f0000000580)}, 0x20)
ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0)
r8 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r8, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r9 = socket$xdp(0x2c, 0x3, 0x0)
r10 = accept4(r9, 0x0, 0x0, 0x800)
sendmmsg$alg(r10, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe1a}], 0x1, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x4924924924924b9, 0x0)
recvmsg(r10, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/73, 0x49}, {&(0x7f0000000200)=""/83, 0x53}], 0x3a}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r10)
sendmsg$alg(r10, &(0x7f0000000fc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4011}, 0x40)
mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x3000001, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0xec1b3000)
write$tun(r3, &(0x7f0000000080)=ANY=[@ANYRES32=0x0], 0xfdef)

230.268275ms ago: executing program 0 (id=9794):
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
preadv(r1, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/123, 0x7b}, {&(0x7f0000000100)=""/70, 0x46}, {&(0x7f0000000080)}, {&(0x7f0000000180)=""/16, 0x10}], 0x4, 0x2, 0x4ac)
ioctl$SIOCSIFHWADDR(r0, 0x8923, &(0x7f00000000c0)={'virt_wifi0\x00', @broadcast})

228.603058ms ago: executing program 0 (id=9795):
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYBLOB="600000000206010800000000000000000100000a11000300686173683a69702c6d61726b00000000050001000790116005000500020000000900020073797a300000000005000400000000001400078008000840000000d308000640"], 0x60}, 0x1, 0x0, 0x0, 0x2002c0c4}, 0x0) (async)
sendmsg$NL80211_CMD_SET_REG(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="30000000ff360bed6c637d2096c73fb969e2d692d71e4899558e217cb6caf5fe2e47be59e904dee28c9666436896ea06c894f83691c353844d647ecdf91210057a5bd19dbea1fa", @ANYRES16=r1, @ANYBLOB="010528bd7000fddbdf251a00000014002280040000800400008003000080040000800700210061610000"], 0x30}, 0x1, 0x0, 0x0, 0x20000054}, 0x0)
r3 = socket$inet6(0x2d, 0x2, 0x0)
recvmmsg(r3, &(0x7f0000000dc0)=[{{0x0, 0x0, 0x0}, 0xffff}], 0x1, 0x40, 0x0)

180.44058ms ago: executing program 2 (id=9796):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=@newtaction={0x5c, 0x30, 0x301, 0x0, 0x0, {}, [{0xfffffc95, 0x1, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_ZONE={0x0, 0x4, 0x5}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0x5c}}, 0x0)
r1 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0)
r2 = socket$packet(0x11, 0x2, 0x300)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180200000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7000001000000008500000006000000850000000500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r3, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000680)={'batadv0\x00', <r4=>0x0})
sendto$packet(r2, &(0x7f0000000640)="053c8100", 0x4, 0xb00, &(0x7f0000000080)={0x11, 0x8100, r4, 0x1, 0x0, 0x6, @local}, 0x14)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='$'], 0x24}}, 0x26008041)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000008000000000018000380140003801000018004000300080001"], 0x44}}, 0x0)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='\x00'/11, @ANYRES16=r6, @ANYBLOB="0700000000000000000005000000180001801400020073797a5f74756e0000000000000000000c0003800400038004000100"], 0x38}}, 0x0)
tee(r0, r1, 0x3, 0x5)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48)
r7 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000140)='devices.allow\x00', 0x2, 0x0)
ioctl$EXT4_IOC_CLEAR_ES_CACHE(r0, 0x6628)
sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0)
close(r7)
bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="020000000400000006000001aa0b00009004"], 0x48)
pipe(&(0x7f0000000000)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff})
r10 = socket$inet6_udplite(0xa, 0x2, 0x88)
epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r10, &(0x7f0000000040)={0x20000003})
socket$nl_netfilter(0x10, 0x3, 0xc)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x40, &(0x7f00000000c0)=[@in={0x2, 0x4e23, @broadcast}, @in={0x2, 0x4e24, @multicast2}, @in={0x2, 0x4e24, @private=0xa010102}, @in={0x2, 0x4e20, @empty}]}, &(0x7f0000000140)=0x10)
ioctl$AUTOFS_IOC_CATATONIC(r10, 0x9362, 0x0)

179.65628ms ago: executing program 0 (id=9797):
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r0, 0x942e, 0x0) (async)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) (async)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r3=>0xffffffffffffffff})
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async)
sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_NG_TYPE={0x8}, @NFTA_NG_DREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_NG_MODULUS={0x8}, @NFTA_NG_OFFSET={0x8, 0x4, 0x1, 0x0, 0xc}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x8c}}, 0x4) (async)
sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100feffffff0000000001000000100007800c00018008000100", @ANYRES32=r3, @ANYBLOB="0c00050073193c99a8772efb0c0002"], 0x3c}}, 0x20000000)

159.639708ms ago: executing program 2 (id=9798):
r0 = socket$netlink(0x10, 0x3, 0x10)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_IFLAGS={0x6, 0x2, 0x30}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x1}]}}}]}, 0x48}}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240"], 0x7c}, 0x1, 0x0, 0x0, 0x80}, 0x800)
r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r4, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x4}, 0x6)
write$bt_hci(r4, &(0x7f00000002c0)=ANY=[@ANYBLOB="0000023f3201"], 0x138)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x0)
sendmsg$NFT_BATCH(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a80)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @log={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_LOG_GROUP={0x6, 0x1, 0x1, 0x0, 0xfff3}, @NFTA_LOG_LEVEL={0x8, 0x5, 0x1, 0x0, 0xfffffffd}]}}}]}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x4}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0xa8, 0x6, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0xa}, [@NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x3}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x2}, @NFTA_RULE_COMPAT={0x3c, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x88}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x5c}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8}]}, @NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @cmp={{0x8}, @void}}, {0x14, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x4}}}, {0x10, 0x1, 0x0, 0x1, @tunnel={{0xb}, @void}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xe}}}, 0x120}, 0x1, 0x0, 0x0, 0x40050}, 0x0)
setsockopt$bt_l2cap_L2CAP_LM(r3, 0x6, 0x3, &(0x7f0000000880)=0x3f, 0x4)
ioctl$FICLONERANGE(r5, 0x4020940d, &(0x7f00000000c0)={{r0}, 0x0, 0x1, 0x2})
connect$bt_l2cap(r3, &(0x7f0000000040)={0x1f, 0x21, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe)
r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r2)
sendmsg$DEVLINK_CMD_RATE_NEW(r2, &(0x7f0000000540)={0x0, 0xa1ff, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r6, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0)
r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r7, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0)

159.157966ms ago: executing program 0 (id=9799):
socket$inet6_tcp(0xa, 0x1, 0x0) (async)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000580)="d8000000140081044e81f782db44b9040a1d08020a000000040000a118000200ff11000000000e1208000f0100810401a80016ea1f0008400304000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) (async)
sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000580)="d8000000140081044e81f782db44b9040a1d08020a000000040000a118000200ff11000000000e1208000f0100810401a80016ea1f0008400304000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0)
r2 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendmmsg$inet6(r2, &(0x7f0000003440)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x9, @dev={0xfe, 0x80, '\x00', 0xe}, 0x5}, 0x1c, &(0x7f0000000b40)=[{&(0x7f0000000000)="f2", 0x1}], 0x1}}, {{&(0x7f0000000840)={0xa, 0x4e24, 0x9, @remote, 0x8}, 0x1c, &(0x7f0000000d00)=[{&(0x7f0000000880)="127d", 0x2}], 0x1}}], 0x2, 0x0)
shutdown(r2, 0x1)
getsockopt$bt_hci(r2, 0x84, 0x85, &(0x7f0000002380)=""/4107, &(0x7f00000000c0)=0x1012) (async)
getsockopt$bt_hci(r2, 0x84, 0x85, &(0x7f0000002380)=""/4107, &(0x7f00000000c0)=0x1012)
setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='nv\x00', 0x4c) (async)
setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='nv\x00', 0x4c)
bind$inet6(r2, &(0x7f0000000500)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @loopback}, 0x5}, 0x1c) (async)
bind$inet6(r2, &(0x7f0000000500)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @loopback}, 0x5}, 0x1c)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c)
socket$nl_sock_diag(0x10, 0x3, 0x4)
r3 = socket$key(0xf, 0x3, 0x2)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="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"/454], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffd74}, 0x48)
sendmsg$key(r3, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)={0x2, 0x3, 0x0, 0x2, 0xc, 0x0, 0x0, 0x0, [@sadb_key={0x2, 0x8, 0x8, 0x0, "fd"}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @empty}}]}, 0x60}, 0x1, 0x7}, 0x0)
syz_emit_ethernet(0xfffffc69, &(0x7f0000000540)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaa2402544aadcccaba772be1cd1e6d43aa0308060000003c0000000003019078ac1e0001ac1e010144140a01ac1414f1cd8f7e620bb29b68cf5e1bf8bc5d0000000000e0000002000000000d00907800"/103], 0x0)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000005480)={&(0x7f0000000100)=ANY=[@ANYBLOB="340000000206010300000000000000000000000005000100070000000900020073797a3100000036056b9b2ab75d9100"], 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) (async)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000005480)={&(0x7f0000000100)=ANY=[@ANYBLOB="340000000206010300000000000000000000000005000100070000000900020073797a3100000036056b9b2ab75d9100"], 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x4000)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="300000003c000701fcffffff00000000017c0000100036800c00020008000000007000000c000180"], 0x30}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000)
r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x22}, 0x94)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x801, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2031}, [@IFLA_XDP={0x14, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r5}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x3}]}, @IFLA_GROUP={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000014}, 0x0) (async)
sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x801, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2031}, [@IFLA_XDP={0x14, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r5}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x3}]}, @IFLA_GROUP={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000014}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x7, 0x3, &(0x7f00000006c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x7, 0x3, &(0x7f00000006c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)
r7 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x0, 0x0, 0x40000, 0x0, 0x2, 0x1}})
socket$nl_sock_diag(0x10, 0x3, 0x4)
ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_rxfh_indir={0x39, 0x1, [0x1]}})
socket$inet6_sctp(0xa, 0x5, 0x84) (async)
r8 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r8, 0x84, 0x73, &(0x7f0000000480)={0x0, 0x9303, 0x30, 0x7, 0x4}, &(0x7f0000000500)=0x18)
socket$kcm(0xf, 0x0, 0x2) (async)
socket$kcm(0xf, 0x0, 0x2)
ioctl$BTRFS_IOC_TREE_SEARCH(r3, 0xd0009411, &(0x7f00000007c0)={{0x0, 0x2, 0x9, 0x4, 0x7, 0x4ae, 0x1, 0xf, 0x4, 0x6, 0xff, 0x7f, 0x7fffffffffffffff, 0xffffffffffff8001, 0x5}})

0s ago: executing program 0 (id=9800):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), r4)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x44, r5, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_LANES={0x8, 0x9, 0x1}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0xfc}, @ETHTOOL_A_LINKMODES_SPEED={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)='a', 0x34000}], 0xc, &(0x7f0000000000)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0xc}}], 0x30}], 0x1, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r6=>0xffffffffffffffff})
sendmmsg(r6, &(0x7f0000001c00), 0x400000000000159, 0x40840)
r7 = socket$nl_route(0x10, 0x3, 0x0)
r8 = socket(0x1, 0x803, 0x0)
sendmsg$RDMA_NLDEV_CMD_DELLINK(r2, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000180)={&(0x7f00000003c0)={0x60, 0x1404, 0x400, 0x70bd25, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x60}, 0x1, 0x0, 0x0, 0x4}, 0x4000)
getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x4b)
sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@newlink={0x3c, 0x10, 0x403, 0x70bd25, 0x4, {0x0, 0x0, 0x0, 0x0, 0x500, 0x8000}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24000804}, 0x8000)
r10 = socket(0x1, 0x803, 0x0)
getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, <r11=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="580000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="46060900000000802800128009000100766c616e00000000180002800c0002001f0000001f000000060001000100000008000500", @ANYRES32=r11, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r11], 0x58}, 0x1, 0x0, 0x0, 0x600}, 0x0)
r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r13 = syz_genetlink_get_family_id$nbd(&(0x7f00000007c0), 0xffffffffffffffff)
sendmsg$NBD_CMD_CONNECT(r12, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000140)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="010000000000ffdbdf25010000000c00040002000000000000000c00060001000000000000000c00020007000000000000000c00080001000000000000001c0007"], 0x60}}, 0x0)
syz_genetlink_get_family_id$nfc(&(0x7f0000000340), r12)

kernel console output (not intermixed with test programs):

739] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  540.287025][ T5739] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  540.693013][ T2025] netlink: 'syz.0.7932': attribute type 29 has an invalid length.
[  540.735698][ T2029] netlink: 'syz.1.7934': attribute type 2 has an invalid length.
[  540.889686][ T2051] 8021q: adding VLAN 0 to HW filter on device bond85
[  540.897691][ T2051] bond85: (slave geneve12): making interface the new active one
[  540.900867][ T2051] bond85: (slave geneve12): Enslaving as an active interface with an up link
[  540.904218][ T5739] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  540.907368][ T5739] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  540.910750][ T5739] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  540.915678][ T5739] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  540.945639][ T2042] C speed is unknown, defaulting to 1000
[  541.000640][ T2042] lo speed is unknown, defaulting to 1000
[  541.389299][ T2092] sctp: [Deprecated]: syz.0.7951 (pid 2092) Use of int in maxseg socket option.
[  541.389299][ T2092] Use struct sctp_assoc_value instead
[  541.465823][ T2101] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0)
[  541.589813][ T2116] mac80211_hwsim hwsim2 wlan0: left allmulticast mode
[  541.595240][ T2116] mac80211_hwsim hwsim2 wlan0: left promiscuous mode
[  541.597427][ T2116] bridge0: port 1(wlan0) entered disabled state
[  541.605375][ T2116] bond68: (slave geneve8): Releasing active interface
[  541.609477][ T2116] bond69: (slave geneve9): Releasing active interface
[  541.616165][ T2116] bond76: (slave geneve11): Releasing active interface
[  541.625501][ T2116] bond82: (slave gretap4): Releasing active interface
[  541.629555][ T2116] bond85: (slave geneve12): Releasing active interface
[  541.633578][T18163] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  541.636265][T18163] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  541.642458][T18163] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  541.645058][T18163] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  541.686020][ T2124] __nla_validate_parse: 21 callbacks suppressed
[  541.686033][ T2124] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7961'.
[  541.745294][ T2133] openvswitch: netlink: VXLAN extension 0 has unexpected len 4 expected 0
[  542.043513][ T2140] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7964'.
[  542.524784][ T2153] validate_nla: 6 callbacks suppressed
[  542.524826][ T2153] netlink: 'syz.0.7966': attribute type 1 has an invalid length.
[  542.545119][ T2153] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  542.644477][ T2158] netlink: 36 bytes leftover after parsing attributes in process `syz.0.7968'.
[  542.674425][ T2160] nbd: must specify at least one socket
[  542.759658][ T2163] 0{X: left allmulticast mode
[  542.761905][ T2163] erspan0: left allmulticast mode
[  542.765984][ T2163] tipc: Resetting bearer <ib:ip6gre0>
[  542.768064][ T2163] tipc: Resetting bearer <ib:ip6gre0>
[  542.771933][ T2163] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  542.776653][    T9] C speed is unknown, defaulting to 1000
[  542.779046][    T9] syz0: Port: 1 Link ACTIVE
[  542.780600][    T9] C speed is unknown, defaulting to 1000
[  542.946527][ T2172] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7973'.
[  542.973343][ T2174] Bluetooth: hci0: Opcode 0x080f failed: -22
[  543.054818][ T2178] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7975'.
[  543.140204][ T2181] C speed is unknown, defaulting to 1000
[  543.194544][ T2181] lo speed is unknown, defaulting to 1000
[  543.238243][ T2181] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7976'.
[  543.862993][ T2189] netlink: 76 bytes leftover after parsing attributes in process `syz.0.7978'.
[  543.866776][ T2189] netlink: 76 bytes leftover after parsing attributes in process `syz.0.7978'.
[  543.965748][ T2196] mac80211_hwsim hwsim2 syzkaller0: Caught tx_queue_len zero misconfig
[  543.972522][ T2196] batadv_slave_0: entered promiscuous mode
[  543.998464][ T2196] netlink: 'syz.0.7980': attribute type 1 has an invalid length.
[  544.000882][ T2196] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7980'.
[  544.068984][ T2204] tipc: Resetting bearer <ib:ip6gre0>
[  544.119531][ T2204] vlan0: entered promiscuous mode
[  544.121271][ T2204] syzkaller1: entered promiscuous mode
[  544.124482][ T2204] tipc: Enabling of bearer <eth:tem0> rejected, max 3 bearers permitted
[  544.195663][ T2211] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  544.361245][ T2228] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7988'.
[  544.975768][ T2243] netlink: 'syz.2.7992': attribute type 10 has an invalid length.
[  545.031190][   T54] Bluetooth: hci0: command tx timeout
[  545.246148][ T2286] vxcan1: entered allmulticast mode
[  545.248567][ T2286] vxcan1: left allmulticast mode
[  545.987034][ T2374] Unsupported ieee802154 address type: 0
[  546.059737][ T2378] 8021q: adding VLAN 0 to HW filter on device bond94
[  546.065680][ T2378] macvlan1: entered promiscuous mode
[  546.067570][ T2378] macvlan1: entered allmulticast mode
[  546.069954][ T2378] bond94: entered promiscuous mode
[  546.072186][ T2378] 8021q: adding VLAN 0 to HW filter on device macvlan1
[  546.074909][ T2378] bond94: left promiscuous mode
[  546.169426][ T2386] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  546.206665][ T2392] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR
[  546.504443][ T2421] netlink: 'syz.2.8044': attribute type 11 has an invalid length.
[  546.559180][ T2427] pim6reg1: entered promiscuous mode
[  546.563098][ T2427] pim6reg1: entered allmulticast mode
[  546.583001][ T2427] veth35: entered promiscuous mode
[  546.618672][ T2428] 8021q: VLANs not supported on vxcan1
[  546.709985][ T2433] __nla_validate_parse: 28 callbacks suppressed
[  546.709997][ T2433] netlink: 27 bytes leftover after parsing attributes in process `syz.2.8047'.
[  547.140308][ T2456] syzkaller1: entered allmulticast mode
[  547.159909][ T2458] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8054'.
[  547.164917][ T2458] netlink: 32 bytes leftover after parsing attributes in process `syz.0.8054'.
[  547.187885][ T2462] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  547.189834][ T2461] macsec0: entered promiscuous mode
[  547.193123][ T2461] mac80211_hwsim hwsim92 wlan0: entered promiscuous mode
[  547.195858][ T2461] macsec0: entered allmulticast mode
[  547.197756][ T2461] mac80211_hwsim hwsim92 wlan0: entered allmulticast mode
[  547.374786][ T2504] netlink: 'syz.0.8063': attribute type 1 has an invalid length.
[  547.376047][ T2506] netlink: 'syz.1.8065': attribute type 1 has an invalid length.
[  547.377775][ T2504] netlink: 144 bytes leftover after parsing attributes in process `syz.0.8063'.
[  547.384368][ T2504] netlink: 96 bytes leftover after parsing attributes in process `syz.0.8063'.
[  547.389850][ T2506] bond95: entered promiscuous mode
[  547.392486][ T2506] 8021q: adding VLAN 0 to HW filter on device bond95
[  547.401133][ T2506] 8021q: adding VLAN 0 to HW filter on device bond95
[  547.403596][ T2506] bond95: (slave wireguard8): The slave device specified does not support setting the MAC address
[  547.406928][ T2506] bond95: (slave wireguard8): Setting fail_over_mac to active for active-backup mode
[  547.413993][ T2506] bond95: (slave wireguard8): making interface the new active one
[  547.416548][ T2506] wireguard8: entered promiscuous mode
[  547.419388][ T2506] bond95: (slave wireguard8): Enslaving as an active interface with an up link
[  547.440895][ T2517] Unsupported ieee802154 address type: 0
[  547.443312][ T2517] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8067'.
[  547.451662][ T2517] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8067'.
[  547.454739][ T2517] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8067'.
[  547.478944][ T2524] netlink: 'syz.0.8069': attribute type 8 has an invalid length.
[  547.536549][ T2527] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8070'.
[  547.578687][ T2533] syzkaller1: left allmulticast mode
[  547.610862][ T2542] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  547.661199][ T2561] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8077'.
[  548.303204][ T2582] bond96: entered promiscuous mode
[  548.305524][ T2582] 8021q: adding VLAN 0 to HW filter on device bond96
[  548.313778][ T2582] bond96 (unregistering): Released all slaves
[  548.462736][ T2591] netlink: 'syz.1.8083': attribute type 1 has an invalid length.
[  548.472761][ T2591] 8021q: adding VLAN 0 to HW filter on device bond96
[  548.481340][ T2591] bond96: (slave geneve22): making interface the new active one
[  548.484781][ T2591] bond96: (slave geneve22): Enslaving as an active interface with an up link
[  548.538098][ T2601] netlink: 'syz.2.8086': attribute type 12 has an invalid length.
[  548.540635][ T2601] netlink: 'syz.2.8086': attribute type 11 has an invalid length.
[  548.654713][ T2616] tipc: Resetting bearer <ib:ip6gre0>
[  549.050047][ T2665] netlink: 'syz.2.8100': attribute type 4 has an invalid length.
[  549.054218][ T2665] netlink: 'syz.2.8100': attribute type 4 has an invalid length.
[  549.073240][   T24] lo speed is unknown, defaulting to 1000
[  549.075756][   T24] syz2: Port: 1 Link ACTIVE
[  549.539031][ T2693] wg1: entered promiscuous mode
[  549.543508][ T2693] wg1: entered allmulticast mode
[  549.558730][ T2697] netlink: 'syz.1.8108': attribute type 9 has an invalid length.
[  549.565814][ T2699] netlink: 'syz.1.8108': attribute type 5 has an invalid length.
[  549.568889][ T2699] netlink: 'syz.1.8108': attribute type 5 has an invalid length.
[  549.572093][ T2699] netlink: 'syz.1.8108': attribute type 5 has an invalid length.
[  549.575332][ T2699] netlink: 'syz.1.8108': attribute type 5 has an invalid length.
[  549.751442][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  549.760388][ T2713] 0: renamed from hsr0
[  549.771369][ T2713] 0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  549.776042][ T2713] A link change request failed with some changes committed already. Interface 70 may have been left with an inconsistent configuration, please check.
[  550.370641][ T2761] openvswitch: netlink: Message has 5 unknown bytes.
[  550.386052][ T2757] dvmrp1: left allmulticast mode
[  550.443258][ T2765] C speed is unknown, defaulting to 1000
[  550.443923][ T2767] openvswitch: netlink: Missing key (keys=44, expected=200000)
[  550.530258][ T2765] lo speed is unknown, defaulting to 1000
[  550.791272][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  550.821100][ T2785] mac80211_hwsim hwsim92 wlan0: left allmulticast mode
[  550.823369][ T2785] mac80211_hwsim hwsim92 wlan0: left promiscuous mode
[  550.855548][ T2791] bridge0: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  550.861552][   T13] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  550.865772][   T13] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  550.871395][   T13] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  550.881498][   T13] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  551.273844][ T2807] syzkaller1: entered allmulticast mode
[  551.341505][ T2821] syzkaller1: left allmulticast mode
[  551.573872][ T2838] tc_dump_action: action bad kind
[  551.652856][ T2851] bridge99: port 1(veth0_to_bond) entered blocking state
[  551.655525][ T2851] bridge99: port 1(veth0_to_bond) entered disabled state
[  551.658035][ T2851] veth0_to_bond: entered allmulticast mode
[  551.661518][ T2851] veth0_to_bond: entered promiscuous mode
[  551.680060][ T2844] smc: net device bond0 applied user defined pnetid SYZ2
[  551.784512][ T2861] __nla_validate_parse: 92 callbacks suppressed
[  551.784529][ T2861] netlink: 60 bytes leftover after parsing attributes in process `syz.1.8151'.
[  551.790360][ T2861] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8151'.
[  551.793704][ T2879] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8154'.
[  551.831319][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  552.022866][ T2911] can: request_module (can-proto-3) failed.
[  552.204957][ T2938] 8021q: adding VLAN 0 to HW filter on device bond85
[  552.220281][ T2938] bond85: (slave geneve20): making interface the new active one
[  552.226222][ T2938] bond85: (slave geneve20): Enslaving as an active interface with an up link
[  552.288711][ T2949] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8170'.
[  552.296615][ T2951] bond0: Caught tx_queue_len zero misconfig
[  552.374148][ T2960] sctp: [Deprecated]: syz.2.8173 (pid 2960) Use of int in maxseg socket option.
[  552.374148][ T2960] Use struct sctp_assoc_value instead
[  552.387009][ T2960] sctp: [Deprecated]: syz.2.8173 (pid 2960) Use of int in maxseg socket option.
[  552.387009][ T2960] Use struct sctp_assoc_value instead
[  552.416260][ T2963] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8174'.
[  552.564742][ T2981] netlink: 100 bytes leftover after parsing attributes in process `syz.2.8181'.
[  552.584370][ T2975] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8179'.
[  552.699656][ T2990] tipc: Resetting bearer <ib:ip6gre0>
[  552.718216][ T2990] batadv_slave_0: left promiscuous mode
[  552.722101][ T2999] netlink: 92 bytes leftover after parsing attributes in process `syz.2.8185'.
[  552.725101][ T2999] netlink: 1240 bytes leftover after parsing attributes in process `syz.2.8185'.
[  552.742707][ T2990] vlan0: left promiscuous mode
[  552.744596][ T2990] syzkaller1: left promiscuous mode
[  552.747623][ T2990] mac80211_hwsim hwsim2 syzkaller0: left promiscuous mode
[  552.750386][ T2990] mac80211_hwsim hwsim2 syzkaller0: left allmulticast mode
[  552.752304][ T3002] RDS: rds_bind could not find a transport for fe80::2c, load rds_tcp or rds_rdma?
[  552.760643][ T2990] 0: left allmulticast mode
[  552.763728][ T2990] hsr_slave_0: left allmulticast mode
[  552.766398][ T2990] macvlan4: left promiscuous mode
[  552.768570][ T2990] macvlan4: left allmulticast mode
[  552.773949][  T793] C speed is unknown, defaulting to 1000
[  552.776380][  T793] syz0: Port: 1 Link DOWN
[  552.782866][  T793] C speed is unknown, defaulting to 1000
[  552.860106][ T3008] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8188'.
[  552.871140][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  553.131439][ T3020] batadv_slave_0: entered promiscuous mode
[  553.248323][ T3027] 8021q: adding VLAN 0 to HW filter on device bond98
[  553.261699][ T3027] bond98: (slave geneve23): making interface the new active one
[  553.265692][ T3027] bond98: (slave geneve23): Enslaving as an active interface with an up link
[  553.268983][ T5871] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  553.274460][ T5871] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  553.278843][ T5871] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  553.282536][ T5871] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  553.405409][ T3034] C speed is unknown, defaulting to 1000
[  553.477536][ T3034] lo speed is unknown, defaulting to 1000
[  553.499987][ T3044] (unnamed net_device) (uninitialized): option arp_validate: mode dependency failed, not supported in mode 802.3ad(4)
[  553.805178][ T3057] validate_nla: 68 callbacks suppressed
[  553.805195][ T3057] netlink: 'syz.1.8203': attribute type 15 has an invalid length.
[  553.829080][ T3060] Unsupported ieee802154 address type: 0
[  553.911460][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  553.939501][ T3067] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  553.965875][ T3067] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  554.024475][ T3067] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  554.074787][ T3067] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  554.133574][ T5871] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  554.140683][ T5871] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  554.147471][ T5871] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  554.154371][ T5871] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  554.190027][ T3070] 8021q: adding VLAN 0 to HW filter on device macvlan1
[  554.194432][ T3070] bond48: (slave macvlan1): Enslaving as a backup interface with a down link
[  554.204419][ T3070] batadv1: left allmulticast mode
[  554.206105][ T3070] batadv1: left promiscuous mode
[  554.207757][ T3070] bridge0: port 1(batadv1) entered disabled state
[  554.213781][ T3070] bond78: (slave geneve16): Releasing active interface
[  554.218325][ T3070] bond79: (slave geneve17): Releasing active interface
[  554.222590][ T3070] bond80: (slave vxcan1): Releasing backup interface
[  554.224791][ T3070] vxcan1: left promiscuous mode
[  554.228593][ T3070] bond81: (slave geneve18): Releasing active interface
[  554.236581][ T3070] bond82: (slave geneve19): Releasing active interface
[  554.241573][ T3070] bond85: (slave geneve20): Releasing active interface
[  554.246451][ T3070] bond48: (slave macvlan1): Releasing backup interface
[  554.252519][ T5871] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  554.255470][ T5871] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  554.258278][ T5871] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  554.261422][ T5871] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  554.904148][ T3100] C speed is unknown, defaulting to 1000
[  554.951160][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  554.995569][ T3100] lo speed is unknown, defaulting to 1000
[  555.317497][ T3108] vxcan1: entered allmulticast mode
[  555.319691][ T3109] vxcan1: left allmulticast mode
[  555.691180][ T3130] netlink: 'syz.2.8222': attribute type 12 has an invalid length.
[  555.693978][ T3130] netlink: 'syz.2.8222': attribute type 12 has an invalid length.
[  555.746189][ T3132] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  555.844418][ T3134] netlink: 'syz.2.8224': attribute type 1 has an invalid length.
[  555.857441][ T3134] 8021q: adding VLAN 0 to HW filter on device bond86
[  555.869433][ T3134] bond86: (slave geneve21): making interface the new active one
[  555.873700][ T3134] bond86: (slave geneve21): Enslaving as an active interface with an up link
[  555.876568][ T5934] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  555.880491][ T5934] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  555.883968][ T5934] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  555.887443][ T5934] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  555.980001][ T3139] netlink: 'syz.2.8225': attribute type 21 has an invalid length.
[  555.991259][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  555.998253][ T3139] ipvlan0: entered promiscuous mode
[  556.001796][ T3139] bridge0: port 1(ipvlan0) entered blocking state
[  556.004528][ T3139] bridge0: port 1(ipvlan0) entered disabled state
[  556.007272][ T3139] ipvlan0: entered allmulticast mode
[  556.009500][ T3139] ipvlan0: left allmulticast mode
[  556.484845][ T3165] C speed is unknown, defaulting to 1000
[  556.649501][ T3165] lo speed is unknown, defaulting to 1000
[  556.730892][ T3174] (unnamed net_device) (uninitialized): option downdelay: invalid value (18446744073709551615)
[  556.738115][ T3174] (unnamed net_device) (uninitialized): option downdelay: allowed values 0 - 2147483647
[  556.743462][ T3176] (unnamed net_device) (uninitialized): option downdelay: invalid value (18446744073709551615)
[  556.748073][ T3176] (unnamed net_device) (uninitialized): option downdelay: allowed values 0 - 2147483647
[  556.842204][ T3185] C speed is unknown, defaulting to 1000
[  556.893406][ T3185] lo speed is unknown, defaulting to 1000
[  557.031115][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  557.074630][ T3194] netlink: 'syz.2.8238': attribute type 1 has an invalid length.
[  557.087104][ T3194] 8021q: adding VLAN 0 to HW filter on device bond87
[  557.155029][ T3202] netlink: 'syz.2.8240': attribute type 1 has an invalid length.
[  557.176418][ T3202] 8021q: adding VLAN 0 to HW filter on device bond88
[  557.194948][ T3199] netlink: 'syz.1.8239': attribute type 4 has an invalid length.
[  557.225690][ T3206] openvswitch: netlink: Unknown key attributes 2
[  557.338467][ T3216] bridge0: failed insert local address into bridge forwarding table
[  557.344424][ T5871] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  557.345518][ T3216] __nla_validate_parse: 11 callbacks suppressed
[  557.345532][ T3216] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8246'.
[  557.347367][ T5871] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  557.356860][ T3217] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8246'.
[  557.360628][ T3213] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8244'.
[  557.404435][ T5871] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  557.407747][ T5871] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  557.479823][ T3232] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8250'.
[  557.526203][ T3241] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8252'.
[  557.582857][ T3248] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8255'.
[  557.605705][ T3251] siw: device registration error -23
[  557.617598][ T3258] netlink: 40 bytes leftover after parsing attributes in process `syz.1.8257'.
[  557.654811][ T3263] netlink: 92 bytes leftover after parsing attributes in process `syz.0.8260'.
[  557.744183][ T3271] C speed is unknown, defaulting to 1000
[  557.803606][ T3271] lo speed is unknown, defaulting to 1000
[  558.071523][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  558.538305][ T3292] wg1: left promiscuous mode
[  558.540241][ T3292] wg1: left allmulticast mode
[  558.545145][ T3292] batadv_slave_0: left promiscuous mode
[  558.555163][ T3292] tipc: Resetting bearer <eth:syzkaller0>
[  558.557707][ T3292] syzkaller0: left promiscuous mode
[  558.559982][ T3292] syzkaller0: left allmulticast mode
[  558.577387][ T3292] bond80: left promiscuous mode
[  558.602607][  T793] lo speed is unknown, defaulting to 1000
[  558.604506][  T793] syz2: Port: 1 Link DOWN
[  558.607459][ T5934] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  558.613863][ T5934] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  558.622280][ T5934] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  558.630540][ T5934] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  558.817061][ T3303] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8269'.
[  559.027268][ T3321] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8273'.
[  559.090125][ T3325] netlink: 'syz.1.8275': attribute type 1 has an invalid length.
[  559.111131][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  559.130216][ T3327] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  559.138084][ T3327] mac80211_hwsim hwsim6 syzkaller0: Caught tx_queue_len zero misconfig
[  559.413066][ T3356] veth0_to_bond: left allmulticast mode
[  559.415336][ T3356] veth0_to_bond: left promiscuous mode
[  559.417327][ T3356] bridge99: port 1(veth0_to_bond) entered disabled state
[  559.423051][ T3356] bond88: (slave bridge94): Releasing active interface
[  559.427251][ T3356] bond92: (slave gretap4): Releasing active interface
[  559.431917][ T3356] bond31: (slave macvlan0): Releasing backup interface
[  559.435107][ T3356] bond93: (slave geneve21): Releasing active interface
[  559.438918][ T3356] bond95: (slave wireguard8): Releasing backup interface
[  559.441218][ T3356] wireguard8: left promiscuous mode
[  559.444273][ T3356] bond96: (slave geneve22): Releasing active interface
[  559.447953][ T3356] bond98: (slave geneve23): Releasing active interface
[  559.534646][ T3363] netlink: 'syz.2.8284': attribute type 4 has an invalid length.
[  559.586566][ T3365] : entered promiscuous mode
[  559.797245][ T3376] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  559.812855][ T3380] syzkaller0: entered promiscuous mode
[  559.815278][ T3380] syzkaller0: entered allmulticast mode
[  559.838150][ T3383] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  559.841682][ T3383] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  559.847695][ T3383] tipc: Resetting bearer <ib:ip6gre0>
[  559.924052][ T3391] bond86: (slave geneve21): Releasing active interface
[  560.102997][ T3396] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  560.106089][ T3397] mac80211_hwsim hwsim2 syzkaller0: entered promiscuous mode
[  560.109047][ T3397] mac80211_hwsim hwsim2 syzkaller0: entered allmulticast mode
[  560.151209][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  560.205023][ T3409] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  560.343022][ T3415] macvlan1: entered allmulticast mode
[  560.344975][ T3415] bond0: entered allmulticast mode
[  560.347678][ T3415] bond0: left allmulticast mode
[  560.592365][ T3426] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  560.597550][ T3426] tipc: Bearer <udp:syz0>: already 2 bearers with priority 10
[  560.600299][ T3426] tipc: Bearer <udp:syz0>: trying with adjusted priority
[  560.604563][ T3426] tipc: Enabling of bearer <udp:syz0> rejected, max 3 bearers permitted
[  560.641173][ T3424] bond89: entered promiscuous mode
[  560.643316][ T3424] 8021q: adding VLAN 0 to HW filter on device bond89
[  560.678973][ T3432] rdma_rxe: rxe_newlink: failed to add vxcan1
[  560.839045][ T3452] C speed is unknown, defaulting to 1000
[  560.904568][ T3452] lo speed is unknown, defaulting to 1000
[  561.049346][ T3475] sctp: [Deprecated]: syz.0.8317 (pid 3475) Use of struct sctp_assoc_value in delayed_ack socket option.
[  561.049346][ T3475] Use struct sctp_sack_info instead
[  561.191089][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  561.392150][ T3520] vlan4: entered allmulticast mode
[  561.394243][ T3520] bond0: entered allmulticast mode
[  561.497043][ T3527] netlink: 'syz.0.8330': attribute type 13 has an invalid length.
[  561.500160][ T3527] netlink: 'syz.0.8330': attribute type 17 has an invalid length.
[  561.517753][ T3527] tipc: Resetting bearer <ib:ip6gre0>
[  561.521900][ T3527] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  561.526535][   T24] C speed is unknown, defaulting to 1000
[  561.528777][   T24] syz0: Port: 1 Link ACTIVE
[  561.530423][   T24] C speed is unknown, defaulting to 1000
[  562.064691][ T3533] ip6_vti0: entered allmulticast mode
[  562.231520][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  562.287411][ T3538] netlink: 'syz.0.8334': attribute type 8 has an invalid length.
[  562.649176][ T3557] __nla_validate_parse: 15 callbacks suppressed
[  562.649193][ T3557] netlink: 148 bytes leftover after parsing attributes in process `syz.2.8341'.
[  562.737656][ T3575] netlink: 112 bytes leftover after parsing attributes in process `syz.0.8346'.
[  562.763705][ T3578] sctp: [Deprecated]: syz.0.8347 (pid 3578) Use of int in max_burst socket option.
[  562.763705][ T3578] Use struct sctp_assoc_value instead
[  562.906179][ T3596] netlink: 'syz.0.8351': attribute type 2 has an invalid length.
[  562.937356][ T3599] netlink: 'syz.0.8352': attribute type 1 has an invalid length.
[  562.940297][ T3599] netlink: 224 bytes leftover after parsing attributes in process `syz.0.8352'.
[  563.100221][ T3615] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8357'.
[  563.166516][ T3632] netlink: 40 bytes leftover after parsing attributes in process `syz.2.8358'.
[  563.217724][ T3634] siw: device registration error -23
[  563.256480][ T3636] netlink: 44 bytes leftover after parsing attributes in process `syz.0.8360'.
[  563.271073][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  563.282749][ T3644] syzkaller1: entered promiscuous mode
[  563.284586][ T3644] syzkaller1: entered allmulticast mode
[  563.353752][ T3646] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  563.398182][ T3652] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8365'.
[  563.410016][ T3652] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8365'.
[  563.880774][ T3690] netlink: 132 bytes leftover after parsing attributes in process `syz.1.8375'.
[  563.885570][ T3690] openvswitch: netlink: Flow actions attr not present in new flow.
[  563.927204][ T3693] netlink: 'syz.1.8376': attribute type 1 has an invalid length.
[  564.008735][ T3695] syzkaller1: entered promiscuous mode
[  564.020476][ T3695] syzkaller1: entered allmulticast mode
[  564.133189][ T3704] mac80211_hwsim hwsim6 syzkaller0: left promiscuous mode
[  564.135999][ T3704] mac80211_hwsim hwsim6 syzkaller0: left allmulticast mode
[  564.169461][ T3704] macsec0: left promiscuous mode
[  564.171468][ T3704] macsec0: left allmulticast mode
[  564.173507][ T3704] bond95: left promiscuous mode
[  564.311492][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  564.403759][ T3707] netlink: 40 bytes leftover after parsing attributes in process `syz.1.8379'.
[  564.508720][ T3724] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048)
[  564.539580][ T3732] C speed is unknown, defaulting to 1000
[  564.588443][ T3732] lo speed is unknown, defaulting to 1000
[  564.825886][ T3752] bridge102: entered promiscuous mode
[  564.828498][ T3752] bridge102: entered allmulticast mode
[  564.928766][ T3767] netlink: 'syz.2.8393': attribute type 4 has an invalid length.
[  564.961531][ T3773] netlink: 'syz.2.8395': attribute type 3 has an invalid length.
[  564.964771][ T3773] netlink: 'syz.2.8395': attribute type 3 has an invalid length.
[  564.997764][ T3780] netlink: 'syz.2.8396': attribute type 7 has an invalid length.
[  565.000332][ T3780] netlink: 'syz.2.8396': attribute type 8 has an invalid length.
[  565.004257][ T3780] netlink: 'syz.2.8396': attribute type 4 has an invalid length.
[  565.037106][ T3785] netlink: 'syz.1.8397': attribute type 12 has an invalid length.
[  565.064332][ T3783] netlink: 'syz.1.8397': attribute type 12 has an invalid length.
[  565.255126][ T3809] openvswitch: netlink: Flow actions attr not present in new flow.
[  565.351243][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  565.514662][ T3842] C speed is unknown, defaulting to 1000
[  565.617036][ T3842] lo speed is unknown, defaulting to 1000
[  565.872918][ T3869] ksmbd: Unknown IPC event: 3, ignore.
[  566.391537][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  566.937506][ T3927] xt_time: invalid argument - start or stop time greater than 23:59:59
[  567.130946][ T3935] IPv6: NLM_F_REPLACE set, but no existing node found!
[  567.431135][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  567.677041][ T3954] __nla_validate_parse: 14 callbacks suppressed
[  567.677054][ T3954] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8438'.
[  567.717445][ T3954] netlink: 'syz.1.8438': attribute type 10 has an invalid length.
[  567.834920][ T3969] bridge0: port 1(erspan0) entered blocking state
[  567.838215][ T3969] bridge0: port 1(erspan0) entered disabled state
[  567.840803][ T3969] erspan0: entered allmulticast mode
[  567.846809][ T3969] erspan0: entered promiscuous mode
[  567.852826][ T3969] erspan0: left allmulticast mode
[  567.854598][ T3969] erspan0: left promiscuous mode
[  567.856446][ T3969] bridge0: port 1(erspan0) entered disabled state
[  567.967476][ T3977] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8444'.
[  567.970538][ T3978] netlink: 'syz.1.8445': attribute type 1 has an invalid length.
[  567.975813][ T3978] netlink: 224 bytes leftover after parsing attributes in process `syz.1.8445'.
[  568.018827][ T3981] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8446'.
[  568.028046][ T3981] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.8446'.
[  568.058464][ T3984] macsec1: entered promiscuous mode
[  568.060596][ T3984] ip6gretap0: entered promiscuous mode
[  568.063008][ T3984] macsec1: entered allmulticast mode
[  568.065126][ T3984] ip6gretap0: entered allmulticast mode
[  568.125458][ T3993] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  568.243365][ T4013] tap0: tun_chr_ioctl cmd 1074025677
[  568.245609][ T4013] tap0: linktype set to 774
[  568.257270][ T4016] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  568.263843][ T4016] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8455'.
[  568.352413][ T4031] 8021q: adding VLAN 0 to HW filter on device bond90
[  568.366082][ T4031] 8021q: adding VLAN 0 to HW filter on device bond90
[  568.368567][ T4031] bond90: (slave vcan0): The slave device specified does not support setting the MAC address
[  568.372722][ T4031] bond90: (slave vcan0): Error -95 calling set_mac_address
[  568.416284][ T4031] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8459'.
[  568.431494][ T4041] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8461'.
[  568.438684][ T4041] syzkaller1: entered promiscuous mode
[  568.444568][ T4041] syzkaller1: entered allmulticast mode
[  568.471287][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  568.494762][ T4043] syzkaller1: entered promiscuous mode
[  568.496756][ T4043] syzkaller1: entered allmulticast mode
[  568.574047][ T4053] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8464'.
[  568.578136][ T4053] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8464'.
[  568.624738][ T4061] smc: net device bond0 applied user defined pnetid SYZ2
[  568.870858][ T4091] rdma_rxe: rxe_newlink: failed to add bond0
[  569.006553][ T4105] syzkaller1: entered promiscuous mode
[  569.009057][ T4105] syzkaller1: entered allmulticast mode
[  569.148087][ T4108] 8021q: adding VLAN 0 to HW filter on device ipvlan0
[  569.511142][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  569.542557][ T4143] macsec0: entered promiscuous mode
[  569.544798][ T4143] macsec0: entered allmulticast mode
[  569.996769][ T4174] validate_nla: 2 callbacks suppressed
[  569.996780][ T4174] netlink: 'syz.1.8497': attribute type 1 has an invalid length.
[  570.551308][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  570.757475][ T4186] mac80211_hwsim hwsim6 syzkaller0: entered promiscuous mode
[  570.763312][ T4186] mac80211_hwsim hwsim6 syzkaller0: entered allmulticast mode
[  570.934216][ T4196] netlink: 'syz.1.8501': attribute type 2 has an invalid length.
[  571.591089][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  572.631525][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  572.834732][ T4196] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check.
[  572.964483][ T4215] __nla_validate_parse: 23 callbacks suppressed
[  572.964500][ T4215] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8505'.
[  573.007902][ T4217] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  573.015081][ T4217] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8506'.
[  573.087033][ T4225] ip6gretap0 (unregistering): left allmulticast mode
[  573.089974][ T4225] ip6gretap0 (unregistering): left promiscuous mode
[  573.193127][ T4224] nbd0: detected capacity change from 0 to 127
[  573.203938][   T55] block nbd0: Receive control failed (result -104)
[  573.242003][ T4244] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8512'.
[  573.402096][ T4258] tipc: Resetting bearer <ib:ip6gre0>
[  573.409845][ T4258] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  573.554478][ T4263] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  573.597605][ T4266] tipc: Resetting bearer <ib:ip6gre0>
[  573.604776][ T4266] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  573.610216][ T4265] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  573.616922][   T24] C speed is unknown, defaulting to 1000
[  573.619104][   T24] syz0: Port: 1 Link DOWN
[  573.620543][   T24] C speed is unknown, defaulting to 1000
[  573.659436][ T4271] C speed is unknown, defaulting to 1000
[  573.671099][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  573.713650][ T4271] lo speed is unknown, defaulting to 1000
[  573.933322][ T4277] netlink: 'syz.0.8520': attribute type 8 has an invalid length.
[  573.937018][ T4277] netlink: 'syz.0.8520': attribute type 21 has an invalid length.
[  573.940155][ T4277] netlink: 132 bytes leftover after parsing attributes in process `syz.0.8520'.
[  573.965031][ T4279] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8521'.
[  574.149237][ T4299] netlink: 32 bytes leftover after parsing attributes in process `syz.0.8527'.
[  574.258378][ T4308] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8530'.
[  574.315975][ T4310] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8531'.
[  574.362875][ T4315] netlink: 'syz.2.8532': attribute type 15 has an invalid length.
[  574.366233][ T4315] netlink: 666 bytes leftover after parsing attributes in process `syz.2.8532'.
[  574.390162][ T4315] syz.2.8532 (4315) used obsolete PPPIOCDETACH ioctl
[  574.429382][ T4318] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8533'.
[  574.443968][ T4318] bridge42: entered promiscuous mode
[  574.446036][ T4318] bridge42: entered allmulticast mode
[  574.460418][ T4322] openvswitch: netlink: IPv4 tunnel dst address is zero
[  574.476306][ T4327] netlink: 'syz.0.8536': attribute type 1 has an invalid length.
[  574.487584][ T4326] netlink: 'syz.0.8536': attribute type 1 has an invalid length.
[  574.711318][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  574.878703][ T4381] netlink: 'syz.1.8549': attribute type 5 has an invalid length.
[  575.238360][ T4409] netlink: 'syz.1.8555': attribute type 10 has an invalid length.
[  575.311672][ T4421] netlink: 'syz.1.8557': attribute type 1 has an invalid length.
[  575.322853][ T4421] 8021q: adding VLAN 0 to HW filter on device bond99
[  575.369800][ T4424] netlink: 'syz.1.8558': attribute type 10 has an invalid length.
[  575.414942][ T4428] ip6tnl7: entered promiscuous mode
[  575.561992][ T4445] netlink: 'syz.1.8563': attribute type 1 has an invalid length.
[  575.751060][    C0] net_ratelimit: 1 callbacks suppressed
[  575.751073][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  576.801246][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  577.841093][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  578.549646][ T4482] __nla_validate_parse: 16 callbacks suppressed
[  578.549658][ T4482] netlink: 36 bytes leftover after parsing attributes in process `syz.0.8573'.
[  578.641888][ T4495] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8578'.
[  578.646613][ T4495] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8578'.
[  578.652373][ T4495] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8578'.
[  578.709333][ T4500] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8580'.
[  578.871431][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  579.526264][ T4521] C speed is unknown, defaulting to 1000
[  579.569180][ T4521] lo speed is unknown, defaulting to 1000
[  579.665258][ T4521] IPv6: sit1: Disabled Multicast RS
[  579.763747][ T4520] netlink: 156 bytes leftover after parsing attributes in process `syz.1.8584'.
[  579.860774][ T4532] pim6reg1: entered promiscuous mode
[  579.864744][ T4532] pim6reg1: entered allmulticast mode
[  579.911051][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  579.919360][ T4533] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8588'.
[  579.995929][ T4532] netlink: 32 bytes leftover after parsing attributes in process `syz.1.8589'.
[  580.002477][ T4532] mac80211_hwsim hwsim6 syzkaller0: left promiscuous mode
[  580.004811][ T4532] mac80211_hwsim hwsim6 syzkaller0: left allmulticast mode
[  580.022795][ T4532] bond101 (unregistering): Released all slaves
[  580.063759][ T4547] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8591'.
[  580.068173][ T4547] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8591'.
[  580.296844][ T4565] nbd: must specify an index to disconnect
[  580.334162][ T4568] netlink: 'syz.2.8597': attribute type 1 has an invalid length.
[  580.374234][ T4570] 8021q: VLANs not supported on gre0
[  580.961514][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  581.025891][ T4594] netlink: 'syz.0.8605': attribute type 1 has an invalid length.
[  581.029164][ T4594] netlink: 'syz.0.8605': attribute type 2 has an invalid length.
[  581.032812][ T4594] netlink: 'syz.0.8605': attribute type 1 has an invalid length.
[  581.093557][ T4599] netlink: 'syz.1.8606': attribute type 1 has an invalid length.
[  581.123536][ T4601] netlink: 'syz.0.8607': attribute type 10 has an invalid length.
[  581.265494][ T4626] lo: Caught tx_queue_len zero misconfig
[  581.335196][ T4634] netlink: 'syz.0.8618': attribute type 1 has an invalid length.
[  581.344727][ T4634] 8021q: adding VLAN 0 to HW filter on device bond87
[  581.358448][ T4634] bond87: (slave veth55): Enslaving as an active interface with a down link
[  581.368716][ T4634] 8021q: adding VLAN 0 to HW filter on device batadv0
[  581.373202][ T4634] bond87: (slave batadv0): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open
[  581.488426][ T4639] openvswitch: netlink: Tunnel attr 12 has unexpected len 0 expected 16
[  581.860722][ T4662] netlink: 'syz.0.8625': attribute type 1 has an invalid length.
[  581.872251][ T4662] 8021q: adding VLAN 0 to HW filter on device bond88
[  582.001071][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  582.287823][ T4680] tipc: Resetting bearer <eth:syzkaller0>
[  582.290386][ T4680] syzkaller0: left promiscuous mode
[  582.294431][ T4680] syzkaller0: left allmulticast mode
[  582.327574][ T4680] bond89: left promiscuous mode
[  582.330651][ T4680] macsec0: left promiscuous mode
[  582.335423][ T4680] macsec0: left allmulticast mode
[  582.440577][ T4692] netlink: 'syz.2.8635': attribute type 1 has an invalid length.
[  582.456884][ T4692] bond91: entered promiscuous mode
[  582.459249][ T4692] 8021q: adding VLAN 0 to HW filter on device bond91
[  582.473486][ T4692] bond91: (slave bridge0): making interface the new active one
[  582.476487][ T4692] bridge0: entered promiscuous mode
[  582.479360][ T4692] bond91: (slave bridge0): Enslaving as an active interface with an up link
[  582.575258][ T4702] pim6reg: entered allmulticast mode
[  582.808722][ T4708] openvswitch: netlink: IPv4 tun info is not correct
[  583.031725][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  583.425443][ T4734] veth0: entered promiscuous mode
[  583.428469][ T4734] veth0 (unregistering): left promiscuous mode
[  583.534193][ T4737] netlink: del zone limit has 4 unknown bytes
[  583.543500][ T4737] bond91: (slave bridge0): Releasing backup interface
[  583.546236][ T4737] bridge0: left promiscuous mode
[  583.556770][ T4737] __nla_validate_parse: 23 callbacks suppressed
[  583.556781][ T4737] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8646'.
[  583.588095][ T5934] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  583.593825][ T5934] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  583.603625][ T5934] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  583.607348][ T5934] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  583.629415][ T4748] netlink: 'syz.1.8651': attribute type 1 has an invalid length.
[  583.654005][ T4748] 8021q: adding VLAN 0 to HW filter on device bond101
[  583.671340][ T4748] bond101: (slave geneve24): making interface the new active one
[  583.676250][ T4748] bond101: (slave geneve24): Enslaving as an active interface with an up link
[  583.708999][ T4758] : entered promiscuous mode
[  583.717663][ T4760] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  583.720569][ T4760] syzkaller0: entered promiscuous mode
[  583.725819][ T4760] syzkaller0: entered allmulticast mode
[  583.734466][ T4762] netlink: 4356 bytes leftover after parsing attributes in process `syz.1.8655'.
[  583.794708][ T4776] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8658'.
[  583.797535][ T4776] openvswitch: netlink: Flow actions attr not present in new flow.
[  583.835075][ T4781] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  583.837802][ T4781] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8660'.
[  583.845221][ T4781] openvswitch: netlink: nsh attribute has 1 unknown bytes.
[  583.847414][ T4781] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  583.909600][ T4793] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8663'.
[  583.912996][ T4793] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8663'.
[  583.948387][ T4807] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8666'.
[  583.953080][ T4807] netlink: 36 bytes leftover after parsing attributes in process `syz.0.8666'.
[  584.018928][ T4815] C speed is unknown, defaulting to 1000
[  584.044358][ T4819] netlink: 56 bytes leftover after parsing attributes in process `syz.1.8669'.
[  584.051793][ T4819] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8669'.
[  584.071095][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  584.075627][ T4826] blkio.reset_stats is deprecated
[  584.092161][ T4815] lo speed is unknown, defaulting to 1000
[  584.249453][ T4845] sch_tbf: burst 19872 is lower than device lo mtu (11337746) !
[  585.111203][ T4877] nbd2: detected capacity change from 0 to 549764202496
[  585.115424][ T6616] block nbd2: Receive control failed (result -104)
[  585.239584][ T4901] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  585.245185][ T4901] mac80211_hwsim hwsim6 syzkaller0: entered promiscuous mode
[  585.248061][ T4901] mac80211_hwsim hwsim6 syzkaller0: entered allmulticast mode
[  585.377441][ T4916] validate_nla: 4 callbacks suppressed
[  585.377453][ T4916] netlink: 'syz.2.8694': attribute type 21 has an invalid length.
[  585.412812][ T4918] C speed is unknown, defaulting to 1000
[  585.456180][ T4925] netlink: 'syz.1.8698': attribute type 1 has an invalid length.
[  585.457282][ T4918] lo speed is unknown, defaulting to 1000
[  585.478117][ T4928] netlink: 'syz.1.8699': attribute type 2 has an invalid length.
[  585.884073][ T4956] netlink: 'syz.2.8707': attribute type 21 has an invalid length.
[  585.895851][ T4956] ipvlan0: entered promiscuous mode
[  585.898020][ T4956] bridge0: port 1(ipvlan0) entered blocking state
[  585.900524][ T4956] bridge0: port 1(ipvlan0) entered disabled state
[  585.903133][ T4956] ipvlan0: entered allmulticast mode
[  585.906036][ T4956] ipvlan0: left allmulticast mode
[  585.915864][ T4972] bridge0: port 1(macvlan5) entered blocking state
[  585.918098][ T4972] bridge0: port 1(macvlan5) entered disabled state
[  585.920315][ T4972] macvlan5: entered allmulticast mode
[  585.922422][ T4972] bridge0: entered allmulticast mode
[  585.925095][ T4972] macvlan5: left allmulticast mode
[  585.926832][ T4972] bridge0: left allmulticast mode
[  585.995748][ T4975] netlink: 'syz.2.8713': attribute type 1 has an invalid length.
[  585.999142][ T4975] netlink: 'syz.2.8713': attribute type 11 has an invalid length.
[  586.138629][ T5001] netlink: 'syz.2.8722': attribute type 3 has an invalid length.
[  586.142013][ T5001] rdma_rxe: rxe_newlink: failed to add lo
[  586.151180][    C0] net_ratelimit: 2 callbacks suppressed
[  586.151191][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  586.173780][ T5004] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  586.214156][ T5006] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  586.218975][   T24] lo speed is unknown, defaulting to 1000
[  586.220807][   T24] syz2: Port: 1 Link ACTIVE
[  586.472782][ T5029] netlink: 'syz.2.8730': attribute type 2 has an invalid length.
[  586.475547][ T5032] netlink: 'syz.2.8730': attribute type 2 has an invalid length.
[  586.492555][ T5034] netlink: 'syz.1.8732': attribute type 4 has an invalid length.
[  586.498610][ T5034] syzkaller1: entered allmulticast mode
[  586.503256][ T5034] syzkaller1: left allmulticast mode
[  586.656440][ T5039] netpci0: tun_chr_ioctl cmd 1074025681
[  586.658522][ T5039] netpci0: tun_chr_ioctl cmd 1074025676
[  586.660315][ T5039] netpci0: owner set to 0
[  586.763077][ T5041] bridge102: entered promiscuous mode
[  586.764843][ T5041] bridge102: entered allmulticast mode
[  587.036137][ T5063] ip6_vti0: left allmulticast mode
[  587.129176][ T5071] 8021q: adding VLAN 0 to HW filter on device bond90
[  587.133731][ T5071] bond89: (slave bond90): making interface the new active one
[  587.137213][ T5071] bond89: (slave bond90): Enslaving as an active interface with an up link
[  587.191380][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  587.355144][ T5095] 8021q: adding VLAN 0 to HW filter on device bond91
[  587.377852][ T5095] bond91: (slave geneve14): making interface the new active one
[  587.385400][ T5095] bond91: (slave geneve14): Enslaving as an active interface with an up link
[  587.391414][ T5739] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  587.395382][ T5739] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  587.405859][ T5739] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  587.411534][ T5739] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  587.670883][ T5139] !: entered promiscuous mode
[  587.674043][ T5139] macsec1: entered promiscuous mode
[  587.675714][ T5139] macsec1: entered allmulticast mode
[  587.677507][ T5139] !: entered allmulticast mode
[  587.680522][ T5139] !: left allmulticast mode
[  587.685043][ T5139] !: left promiscuous mode
[  587.690396][ T5142] ip6_vti0: entered allmulticast mode
[  587.697982][ T5142] dvmrp1: entered allmulticast mode
[  587.703475][ T5138] ip6_vti0: left allmulticast mode
[  587.729517][ T5149] nbd: must specify a device to reconfigure
[  587.736853][ T5150] openvswitch: netlink: Tunnel attr 227 out of range max 16
[  587.775745][ T5158] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  587.874812][ T5174] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  587.943786][ T5179] 8021q: adding VLAN 0 to HW filter on device bond92
[  587.959663][ T5179] bond92: (slave geneve15): making interface the new active one
[  587.964598][ T5179] bond92: (slave geneve15): Enslaving as an active interface with an up link
[  588.032988][ T5193] tipc: Resetting bearer <eth:gre0>
[  588.090954][ T5193] tipc: Resetting bearer <eth:syzkaller0>
[  588.131181][   T24] lo speed is unknown, defaulting to 1000
[  588.133234][   T24] syz2: Port: 1 Link DOWN
[  588.241120][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  588.281764][ T5220] 8021q: adding VLAN 0 to HW filter on device bond93
[  588.289505][ T5220] bond93: (slave geneve16): making interface the new active one
[  588.294088][ T5220] bond93: (slave geneve16): Enslaving as an active interface with an up link
[  588.435247][ T5250] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  588.488871][ T5250] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  588.514080][ T5250] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  588.574339][ T5250] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  588.625207][   T13] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  588.639596][ T5871] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  588.648283][ T5871] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  588.650895][ T5871] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  588.766234][ T5263] 8021q: adding VLAN 0 to HW filter on device bond94
[  588.780906][ T5263] bond94: (slave geneve17): making interface the new active one
[  588.784853][ T5263] bond94: (slave geneve17): Enslaving as an active interface with an up link
[  588.859945][ T5281] __nla_validate_parse: 44 callbacks suppressed
[  588.859956][ T5281] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8796'.
[  588.958163][ T5294] netlink: 72 bytes leftover after parsing attributes in process `syz.1.8800'.
[  588.974256][ T5296] C speed is unknown, defaulting to 1000
[  589.038011][ T5296] lo speed is unknown, defaulting to 1000
[  589.040196][ T5298] openvswitch: netlink: IP tunnel TTL not specified.
[  589.120106][ T5285] netlink: 156 bytes leftover after parsing attributes in process `syz.0.8797'.
[  589.281493][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  589.444768][ T5317] netlink: del zone limit has 4 unknown bytes
[  589.452576][ T5316] netlink: del zone limit has 4 unknown bytes
[  589.480280][ T5336] : entered promiscuous mode
[  589.540346][ T5356] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8814'.
[  589.586497][ T5361] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  589.623010][ T5366] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8819'.
[  589.633346][ T5366] bond0: option arp_interval: mode dependency failed, not supported in mode balance-alb(6)
[  589.640000][ T5363] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8818'.
[  589.684767][ T5374] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8821'.
[  589.733006][ T5374] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8821'.
[  589.857365][ T5384] netlink: 44 bytes leftover after parsing attributes in process `syz.2.8824'.
[  589.907999][ T5398] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8828'.
[  589.948683][ T5404] Unsupported ieee802154 address type: 0
[  590.037516][ T5412] IPVS: Unknown mcast interface: veth0_virt_wifi
[  590.198562][ T5424] macsec1: entered promiscuous mode
[  590.200338][ T5424] !: entered promiscuous mode
[  590.202151][ T5424] macsec1: entered allmulticast mode
[  590.203983][ T5424] !: entered allmulticast mode
[  590.206306][ T5424] !: left allmulticast mode
[  590.207902][ T5424] !: left promiscuous mode
[  590.311178][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  590.383662][ T5432] validate_nla: 15 callbacks suppressed
[  590.383675][ T5432] netlink: 'syz.2.8838': attribute type 10 has an invalid length.
[  590.524826][ T5450] netlink: 'syz.1.8843': attribute type 1 has an invalid length.
[  590.870076][ T5477] syzkaller1: left promiscuous mode
[  590.874435][ T5477] syzkaller1: left allmulticast mode
[  591.127766][ T5497] netlink: 'syz.0.8854': attribute type 6 has an invalid length.
[  591.351551][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  591.548445][ T5514] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes.
[  591.556182][ T5514] ip6_vti0: mtu less than device minimum
[  591.932734][ T5545] macsec1: entered promiscuous mode
[  591.934522][ T5545] macvlan1: entered promiscuous mode
[  591.938253][ T5545] macvlan1: left promiscuous mode
[  592.023617][ T5561] netlink: 'syz.2.8877': attribute type 1 has an invalid length.
[  592.036500][ T5561] bond92: entered promiscuous mode
[  592.038615][ T5561] 8021q: adding VLAN 0 to HW filter on device bond92
[  592.055903][ T5561] 8021q: adding VLAN 0 to HW filter on device bond92
[  592.058374][ T5561] bond92: (slave wireguard7): The slave device specified does not support setting the MAC address
[  592.064756][ T5561] bond92: (slave wireguard7): Setting fail_over_mac to active for active-backup mode
[  592.070738][ T5561] bond92: (slave wireguard7): making interface the new active one
[  592.073814][ T5561] wireguard7: entered promiscuous mode
[  592.076350][ T5561] bond92: (slave wireguard7): Enslaving as an active interface with an up link
[  592.148679][ T5569] block nbd2: NBD_DISCONNECT
[  592.150288][ T5569] block nbd2: Send disconnect failed -32
[  592.152716][ T5569] block nbd2: shutting down sockets
[  592.155188][    C1] blk_print_req_error: 138 callbacks suppressed
[  592.155198][    C1] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  592.160091][    C1] buffer_io_error: 138 callbacks suppressed
[  592.160099][    C1] Buffer I/O error on dev nbd2, logical block 0, async page read
[  592.164905][ T4294] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  592.168008][ T4294] Buffer I/O error on dev nbd2, logical block 0, async page read
[  592.170596][ T4294] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  592.174190][ T4294] Buffer I/O error on dev nbd2, logical block 0, async page read
[  592.176638][ T4294] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  592.179928][ T4294] Buffer I/O error on dev nbd2, logical block 0, async page read
[  592.182914][ T4294] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  592.186185][ T4294] Buffer I/O error on dev nbd2, logical block 0, async page read
[  592.189133][ T4294] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  592.192822][ T4294] Buffer I/O error on dev nbd2, logical block 0, async page read
[  592.195961][ T4294] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  592.199710][ T4294] Buffer I/O error on dev nbd2, logical block 0, async page read
[  592.203411][ T4294] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  592.207987][ T4294] Buffer I/O error on dev nbd2, logical block 0, async page read
[  592.211342][ T4294] ldm_validate_partition_table(): Disk read failed.
[  592.214099][ T4294] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  592.217738][ T4294] Buffer I/O error on dev nbd2, logical block 0, async page read
[  592.220913][ T4294] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  592.224774][ T4294] Buffer I/O error on dev nbd2, logical block 0, async page read
[  592.228709][ T4294] Dev nbd2: unable to read RDB block 0
[  592.231570][ T4294]  nbd2: unable to read partition table
[  592.245825][ T4294] ldm_validate_partition_table(): Disk read failed.
[  592.248908][ T4294] Dev nbd2: unable to read RDB block 0
[  592.252737][ T4294]  nbd2: unable to read partition table
[  592.297862][ T5581] netlink: 'syz.2.8883': attribute type 2 has an invalid length.
[  592.300811][ T5581] netlink: 'syz.2.8883': attribute type 1 has an invalid length.
[  592.306822][ T5581] netlink: 'syz.2.8883': attribute type 2 has an invalid length.
[  592.309378][ T5581] netlink: 'syz.2.8883': attribute type 1 has an invalid length.
[  592.391180][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  592.876629][ T5606] sch_tbf: burst 127 is lower than device syzkaller0 mtu (313) !
[  592.914943][ T5610] batadv0: entered promiscuous mode
[  592.917049][ T5610] batadv0: entered allmulticast mode
[  593.004095][ T5613] netlink: 'syz.1.8889': attribute type 13 has an invalid length.
[  593.013991][ T5613] gretap0: refused to change device tx_queue_len
[  593.016444][ T5613] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  593.072164][ T5615] netlink: 'syz.0.8891': attribute type 1 has an invalid length.
[  593.348285][ T5634] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  593.369081][ T5636] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  593.372900][ T5636] openvswitch: netlink: Port -8 exceeds max allowable 65535
[  593.431409][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  593.454317][ T5647] Bluetooth: hci0: Opcode 0x0c20 failed: -22
[  593.484457][   T55] block nbd2: Receive control failed (result -104)
[  593.630900][ T5664] bridge40: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  593.919804][ T5707] __nla_validate_parse: 55 callbacks suppressed
[  593.919823][ T5707] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8916'.
[  593.927629][ T5707] ip6_vti0: Master is either lo or non-ether device
[  593.980886][ T5713] C speed is unknown, defaulting to 1000
[  594.005560][ T5720] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8921'.
[  594.036756][ T5713] lo speed is unknown, defaulting to 1000
[  594.090480][ T5723] C speed is unknown, defaulting to 1000
[  594.144253][ T5723] lo speed is unknown, defaulting to 1000
[  594.228082][ T5736] netlink: 9 bytes leftover after parsing attributes in process `syz.2.8923'.
[  594.631304][    C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  594.865314][ T5747] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8925'.
[  594.939294][ T5745] netlink: 4404 bytes leftover after parsing attributes in process `syz.0.8926'.
[  594.991852][ T5761] bridge0: port 1(erspan0) entered blocking state
[  594.994140][ T5761] bridge0: port 1(erspan0) entered disabled state
[  594.996321][ T5761] erspan0: entered allmulticast mode
[  594.998911][ T5761] erspan0: left allmulticast mode
[  595.132843][ T5774] 8021q: adding VLAN 0 to HW filter on device bond95
[  595.148481][ T5774] bond95: (slave geneve18): making interface the new active one
[  595.153346][ T5774] bond95: (slave geneve18): Enslaving as an active interface with an up link
[  595.185880][ T5786] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  595.239255][ T5793] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  595.245939][ T5793] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  595.511166][   T54] Bluetooth: hci0: command tx timeout
[  595.671280][    C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  595.708936][ T5821] validate_nla: 22 callbacks suppressed
[  595.708956][ T5821] netlink: 'syz.1.8941': attribute type 1 has an invalid length.
[  595.727554][ T5821] 8021q: adding VLAN 0 to HW filter on device bond102
[  595.735046][ T5821] bond102: (slave geneve25): making interface the new active one
[  595.738670][ T5821] bond102: (slave geneve25): Enslaving as an active interface with an up link
[  595.809967][ T5828] (unnamed net_device) (uninitialized): option all_slaves_active: invalid value (7)
[  596.093683][ T5833] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8944'.
[  596.096915][ T5833] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8944'.
[  596.119887][ T5835] nbd: nbd2 already in use
[  596.124480][ T5835] block nbd2: NBD_DISCONNECT
[  596.126341][ T5835] block nbd2: Send disconnect failed -32
[  596.128022][ T5835] block nbd2: shutting down sockets
[  596.174352][ T5837] netlink: 72 bytes leftover after parsing attributes in process `syz.2.8946'.
[  596.213820][ T5839] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8947'.
[  596.216666][ T5839] sch_tbf: burst 6 is lower than device team_slave_0 mtu (1294) !
[  596.572219][ T5898] netlink: 'syz.0.8949': attribute type 1 has an invalid length.
[  596.663484][ T5903] netlink: 'syz.1.8950': attribute type 1 has an invalid length.
[  596.682744][ T5903] 8021q: adding VLAN 0 to HW filter on device bond103
[  596.686082][ T5909] erspan0: entered allmulticast mode
[  596.695889][ T5903] bond103: (slave geneve26): making interface the new active one
[  596.699214][ T5903] bond103: (slave geneve26): Enslaving as an active interface with an up link
[  596.706160][ T5909] dvmrp8: entered allmulticast mode
[  596.711215][    C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  596.721760][ T5910] C speed is unknown, defaulting to 1000
[  596.738152][ T5912] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8952'.
[  596.774452][ T5909] C speed is unknown, defaulting to 1000
[  596.781867][ T5910] lo speed is unknown, defaulting to 1000
[  596.844873][ T5915] C speed is unknown, defaulting to 1000
[  596.845149][ T5909] lo speed is unknown, defaulting to 1000
[  596.877131][ T5909] erspan0: left allmulticast mode
[  596.878923][ T5909] dvmrp8: left allmulticast mode
[  596.901774][ T5915] lo speed is unknown, defaulting to 1000
[  597.041807][   T33] audit: type=1800 audit(1756159175.523:12): pid=5922 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.8953" name="memory.events" dev="tmpfs" ino=14982 res=0 errno=0
[  597.345231][ T5959] netlink: 'syz.2.8963': attribute type 1 has an invalid length.
[  597.588346][ T5977] syzkaller1: entered promiscuous mode
[  597.590227][ T5977] syzkaller1: entered allmulticast mode
[  597.751199][    C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  597.853750][ T6006] netlink: 'syz.1.8980': attribute type 1 has an invalid length.
[  597.864568][ T6006] 8021q: adding VLAN 0 to HW filter on device bond104
[  597.874334][ T6006] bond104: (slave geneve27): making interface the new active one
[  597.877572][ T6006] bond104: (slave geneve27): Enslaving as an active interface with an up link
[  597.959603][ T6012] netlink: 'syz.1.8981': attribute type 1 has an invalid length.
[  598.067509][ T6018] openvswitch: netlink: Flow actions attr not present in new flow.
[  598.091415][ T6024] openvswitch: netlink: nsh attribute has unmatched MD type 0.
[  598.093853][ T6024] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  598.149947][ T6028] netlink: 'syz.1.8989': attribute type 12 has an invalid length.
[  598.230621][ T6031] C speed is unknown, defaulting to 1000
[  598.276595][ T6031] lo speed is unknown, defaulting to 1000
[  598.635102][ T6041] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  598.644271][  T794] lo speed is unknown, defaulting to 1000
[  598.651600][  T794] syz2: Port: 1 Link ACTIVE
[  598.791266][    C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  598.961524][ T6054] bond92: (slave wireguard7): Releasing backup interface
[  598.964226][ T6054] wireguard7: left promiscuous mode
[  598.966170][ T6057] netlink: 'syz.0.8997': attribute type 1 has an invalid length.
[  598.973313][ T6057] __nla_validate_parse: 21 callbacks suppressed
[  598.973330][ T6057] netlink: 52 bytes leftover after parsing attributes in process `syz.0.8997'.
[  598.983802][ T6057] netlink: 48 bytes leftover after parsing attributes in process `syz.0.8997'.
[  599.076188][ T6063] netlink: 'syz.0.8999': attribute type 1 has an invalid length.
[  599.086877][ T6063] 8021q: adding VLAN 0 to HW filter on device bond96
[  599.097552][ T6063] bond96: (slave geneve19): making interface the new active one
[  599.101868][ T6063] bond96: (slave geneve19): Enslaving as an active interface with an up link
[  599.226183][ T6085] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9004'.
[  599.230101][ T6085] netlink: 16 bytes leftover after parsing attributes in process `syz.2.9004'.
[  599.255381][ T6087] netlink: 9 bytes leftover after parsing attributes in process `syz.2.9005'.
[  599.272245][ T5889] page_pool_release_retry() stalled pool shutdown: id 134, 1 inflight 60 sec
[  599.276721][ T6088] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9003'.
[  599.325554][ T6090] netlink: 'syz.2.9006': attribute type 2 has an invalid length.
[  599.327977][ T6090] netlink: 224 bytes leftover after parsing attributes in process `syz.2.9006'.
[  599.333247][ T6090] netlink: 300 bytes leftover after parsing attributes in process `syz.2.9006'.
[  599.378902][ T6093] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9007'.
[  599.414267][ T6100] netlink: 48 bytes leftover after parsing attributes in process `syz.0.9010'.
[  599.463603][ T6097] 8021q: adding VLAN 0 to HW filter on device bond105
[  599.477069][ T6097] bond105: (slave geneve28): making interface the new active one
[  599.481347][ T6097] bond105: (slave geneve28): Enslaving as an active interface with an up link
[  599.636910][ T6126] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  599.639192][ T6117] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  599.750690][ T6134] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[  599.754397][ T6134] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  599.757778][ T6134] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  599.831288][    C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  599.854577][ T6143] bond97: entered promiscuous mode
[  599.856287][ T6143] bond97: entered allmulticast mode
[  599.858049][ T6143] 8021q: adding VLAN 0 to HW filter on device bond97
[  599.887275][ T6149] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  599.933393][ T6149] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  599.974548][ T6149] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  600.023843][ T6149] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  600.083417][T18163] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  600.089795][T18163] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  600.097420][T18163] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  600.104657][T18163] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  600.269259][ T6167] 8021q: adding VLAN 0 to HW filter on device bond93
[  600.280883][ T6167] bond93: (slave geneve22): making interface the new active one
[  600.284503][ T6167] bond93: (slave geneve22): Enslaving as an active interface with an up link
[  600.287823][ T5739] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  600.294656][ T5739] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  600.297842][ T5739] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  600.301579][ T5739] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  600.452759][ T6191] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  600.596507][ T6202] pim6reg1: entered promiscuous mode
[  600.600510][ T6202] pim6reg1: entered allmulticast mode
[  600.693815][ T6220] C speed is unknown, defaulting to 1000
[  600.734513][ T6227] validate_nla: 7 callbacks suppressed
[  600.734530][ T6227] netlink: 'syz.0.9044': attribute type 1 has an invalid length.
[  600.752965][ T6220] lo speed is unknown, defaulting to 1000
[  600.797349][ T6231] netlink: 'syz.1.9045': attribute type 1 has an invalid length.
[  600.865976][   T33] audit: type=1800 audit(1756159179.343:13): pid=6232 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.9044" name="memory.events" dev="tmpfs" ino=15159 res=0 errno=0
[  601.111564][ T6250] netlink: 'syz.0.9048': attribute type 4 has an invalid length.
[  601.113064][ T6249] netlink: 'syz.0.9048': attribute type 4 has an invalid length.
[  601.117296][ T6250] netlink: 'syz.0.9048': attribute type 4 has an invalid length.
[  601.122662][   T24] C speed is unknown, defaulting to 1000
[  601.124943][   T24] syz0: Port: 1 Link ACTIVE
[  601.126903][   T24] C speed is unknown, defaulting to 1000
[  601.192870][ T6256] tipc: Bearer <udp:syz0>: already 2 bearers with priority 10
[  601.195493][ T6256] tipc: Bearer <udp:syz0>: trying with adjusted priority
[  601.197963][ T6256] tipc: Enabling of bearer <udp:syz0> rejected, max 3 bearers permitted
[  601.544847][ T6289] netlink: 'syz.2.9058': attribute type 13 has an invalid length.
[  601.547260][ T6289] netlink: 'syz.2.9058': attribute type 17 has an invalid length.
[  601.594774][ T6289] C speed is unknown, defaulting to 1000
[  601.634386][ T6289] lo speed is unknown, defaulting to 1000
[  601.680221][ T6293] netlink: 'syz.1.9059': attribute type 1 has an invalid length.
[  601.707249][ T6293] 8021q: adding VLAN 0 to HW filter on device bond106
[  601.884512][ T6306] IPVS: set_ctl: invalid protocol: 115 224.0.0.2:20002
[  601.911237][    C1] net_ratelimit: 3 callbacks suppressed
[  601.911254][    C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  602.805197][ T6325] netlink: 'syz.1.9070': attribute type 1 has an invalid length.
[  602.817552][ T6325] 8021q: adding VLAN 0 to HW filter on device bond107
[  602.848231][ T6325] bond107: (slave geneve29): making interface the new active one
[  602.852046][ T6325] bond107: (slave geneve29): Enslaving as an active interface with an up link
[  602.961209][    C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  603.189848][ T6357] C speed is unknown, defaulting to 1000
[  603.255337][ T6357] lo speed is unknown, defaulting to 1000
[  603.452773][ T6378] syzkaller1: entered promiscuous mode
[  603.454588][ T6378] syzkaller1: entered allmulticast mode
[  603.593223][   T60] block nbd0: Possible stuck request ffff88803f8a8000: control (read@0,4096B). Runtime 30 seconds
[  603.683767][ T6391] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  603.757319][ T6402] syzkaller1: entered promiscuous mode
[  603.759102][ T6402] syzkaller1: entered allmulticast mode
[  603.940198][ T6423] netlink: 'syz.0.9096': attribute type 1 has an invalid length.
[  603.959009][ T6423] bond98: entered promiscuous mode
[  603.963555][ T6423] 8021q: adding VLAN 0 to HW filter on device bond98
[  603.976484][ T6423] bond98: (slave bridge44): making interface the new active one
[  603.979618][ T6423] bridge44: entered promiscuous mode
[  603.984687][ T6423] bond98: (slave bridge44): Enslaving as an active interface with an up link
[  603.991162][    C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  603.998673][ T6427] __nla_validate_parse: 58 callbacks suppressed
[  603.998685][ T6427] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9098'.
[  604.007609][ T6429] netlink: 36 bytes leftover after parsing attributes in process `syz.0.9099'.
[  604.109109][ T6438] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9101'.
[  604.198462][ T6455] netlink: 144 bytes leftover after parsing attributes in process `syz.2.9106'.
[  604.248786][ T6452] C speed is unknown, defaulting to 1000
[  604.313768][ T6467] C speed is unknown, defaulting to 1000
[  604.314085][ T6452] lo speed is unknown, defaulting to 1000
[  604.408045][ T6486] 8021q: adding VLAN 0 to HW filter on device bond94
[  604.428135][ T6486] bond94: (slave geneve23): making interface the new active one
[  604.437102][ T6486] bond94: (slave geneve23): Enslaving as an active interface with an up link
[  604.443604][ T6467] lo speed is unknown, defaulting to 1000
[  604.535987][ T6498] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9114'.
[  604.617640][ T6514] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9117'.
[  604.620894][ T6514] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048)
[  604.661755][ T6534] netlink: 64 bytes leftover after parsing attributes in process `syz.0.9121'.
[  604.665194][ T6530] netlink: 27 bytes leftover after parsing attributes in process `syz.0.9121'.
[  604.675101][ T6537] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9122'.
[  604.679063][ T6537] netlink: 68 bytes leftover after parsing attributes in process `syz.1.9122'.
[  604.764549][ T6544] C speed is unknown, defaulting to 1000
[  604.847009][ T6544] lo speed is unknown, defaulting to 1000
[  604.870494][ T6551] C speed is unknown, defaulting to 1000
[  604.955861][ T6551] lo speed is unknown, defaulting to 1000
[  604.980788][ T6557] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  605.031144][    C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  605.091488][ T6557] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  605.137693][ T6557] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  605.207079][ T6557] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  605.273164][T18163] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  605.299900][T18163] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  605.318266][T18163] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  605.351526][T18163] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  605.853867][ T6597] validate_nla: 3 callbacks suppressed
[  605.853882][ T6597] netlink: 'syz.1.9137': attribute type 5 has an invalid length.
[  605.938768][ T6604] netlink: 'syz.0.9139': attribute type 10 has an invalid length.
[  605.945018][ T6604] !: entered promiscuous mode
[  605.947137][ T6604] !: entered allmulticast mode
[  605.950098][ T6604] A link change request failed with some changes committed already. Interface 0! may have been left with an inconsistent configuration, please check.
[  606.027979][ T6608] xt_time: unknown flags 0xf4
[  606.030857][ T6608] netlink: 'syz.0.9140': attribute type 4 has an invalid length.
[  606.060756][ T6614] netlink: 'syz.0.9141': attribute type 1 has an invalid length.
[  606.071167][    C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  606.127409][ T6619] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0)
[  606.339010][ T6637] netlink: 'syz.1.9146': attribute type 2 has an invalid length.
[  606.368669][ T6640] netlink: 'syz.2.9147': attribute type 4 has an invalid length.
[  606.552030][ T6671] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  606.714992][ T6692] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  606.718680][ T6692] sch_tbf: burst 2 is lower than device syzkaller0 mtu (313) !
[  606.777178][ T6699] C speed is unknown, defaulting to 1000
[  606.842220][ T6699] lo speed is unknown, defaulting to 1000
[  607.111213][    C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  607.125617][ T6705] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  607.258303][ T6719] bond101: (slave geneve24): Releasing active interface
[  607.266985][ T6719] bond102: (slave geneve25): Releasing active interface
[  607.272184][ T6719] bond103: (slave geneve26): Releasing active interface
[  607.277262][ T6719] bond104: (slave geneve27): Releasing active interface
[  607.284330][ T6719] bond105: (slave geneve28): Releasing active interface
[  607.290080][ T6719] bond107: (slave geneve29): Releasing active interface
[  607.310616][ T6719] A link change request failed with some changes committed already. Interface bond4 may have been left with an inconsistent configuration, please check.
[  607.343935][ T5739] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  607.350859][ T5739] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  607.359818][ T5739] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  607.364297][ T5739] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  607.412412][ T6725] netlink: 'syz.1.9170': attribute type 1 has an invalid length.
[  607.458111][ T6741] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  607.558689][ T6766] C speed is unknown, defaulting to 1000
[  607.627598][ T6766] lo speed is unknown, defaulting to 1000
[  607.629094][ T6778] pim6reg1: entered promiscuous mode
[  607.632116][ T6778] pim6reg1: entered allmulticast mode
[  607.780019][ T6778] syzkaller0: left promiscuous mode
[  607.781867][ T6778] syzkaller0: left allmulticast mode
[  607.840916][ T6807] netlink: 'syz.0.9185': attribute type 1 has an invalid length.
[  608.151244][    C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  608.234622][ T6853] netlink: 'syz.1.9197': attribute type 83 has an invalid length.
[  608.284527][ T6865] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  608.479896][ T6883] macvlan4: entered allmulticast mode
[  608.482896][ T6883] bond0: entered allmulticast mode
[  608.485790][ T6883] 8021q: adding VLAN 0 to HW filter on device macvlan4
[  608.489954][ T6883] bond0: left allmulticast mode
[  608.497913][ T6887] netlink: 'syz.1.9206': attribute type 7 has an invalid length.
[  608.590538][ T6892] 8021q: adding VLAN 0 to HW filter on device bond95
[  608.605343][ T6892] bond95: (slave geneve24): making interface the new active one
[  608.610163][ T6892] bond95: (slave geneve24): Enslaving as an active interface with an up link
[  608.686312][ T6900] syzkaller1: entered promiscuous mode
[  608.688520][ T6900] syzkaller1: entered allmulticast mode
[  609.153816][ T6925] __nla_validate_parse: 35 callbacks suppressed
[  609.153833][ T6925] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9219'.
[  609.191198][    C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  609.256491][ T6927] 8021q: adding VLAN 0 to HW filter on device bond99
[  609.264183][ T6931] bond99: (slave geneve20): making interface the new active one
[  609.268251][ T6931] bond99: (slave geneve20): Enslaving as an active interface with an up link
[  609.609937][ T6949] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9223'.
[  609.734025][ T6955] tipc: Resetting bearer <ib:ip6gre0>
[  609.736606][ T6955] tipc: Resetting bearer <ib:ip6gre0>
[  609.737673][ T6953] IPVS: Scheduler module ip_vs_sip not found
[  609.739794][ T6955] !: left promiscuous mode
[  609.745473][ T6955] !: left allmulticast mode
[  609.750347][ T6955] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  609.789394][ T6951] C speed is unknown, defaulting to 1000
[  609.792531][ T6957] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9226'.
[  609.817551][ T6959] bond0: entered promiscuous mode
[  609.819382][ T6959] bond0: entered allmulticast mode
[  609.832967][ T6955] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9224'.
[  609.888453][ T6951] lo speed is unknown, defaulting to 1000
[  610.231233][    C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  610.776867][ T6987] Unsupported ieee802154 address type: 0
[  610.784020][ T6987] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9234'.
[  610.822356][ T6989] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9235'.
[  610.831718][ T6989] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  610.921388][ T6998] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9239'.
[  610.963875][ T7008] netlink: 20 bytes leftover after parsing attributes in process `syz.2.9242'.
[  610.967496][ T7008] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  610.972505][ T7008] netlink: 20 bytes leftover after parsing attributes in process `syz.2.9242'.
[  610.975618][ T7008] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  610.978981][ T7008] netlink: 20 bytes leftover after parsing attributes in process `syz.2.9242'.
[  610.983723][ T7008] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  610.986636][ T7008] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  610.989594][ T7007] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  610.995982][ T7007] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  611.000092][ T7007] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  611.004837][ T7007] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  611.010302][ T7007] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  611.021584][ T7007] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  611.026687][ T7007] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  611.030224][ T7007] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  611.034011][ T7007] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  611.047606][ T7007] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  611.051106][ T7007] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  611.054559][ T7007] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  611.058006][ T7007] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  611.061578][ T7007] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  611.065069][ T7007] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  611.072316][ T7007] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  611.075731][ T7007] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  611.079158][ T7007] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  611.082697][ T7007] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  611.086320][ T7007] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  611.089832][ T7007] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  611.094768][ T7007] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  611.098229][ T7007] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  611.102421][ T7007] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  611.106070][ T7007] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  611.109717][ T7007] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  611.113443][ T7007] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  611.116916][ T7007] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  611.120505][ T7007] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  611.126383][ T7007] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  611.130078][ T7007] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  611.140093][ T7007] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  611.143062][ T7007] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  611.178059][   T33] audit: type=1800 audit(1756159189.653:14): pid=7022 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.9246" name="blkio.bfq.time_recursive" dev="tmpfs" ino=15910 res=0 errno=0
[  611.294676][ T7040] validate_nla: 6 callbacks suppressed
[  611.294694][ T7040] netlink: 'syz.1.9252': attribute type 21 has an invalid length.
[  611.317165][ T7040] netlink: 'syz.1.9252': attribute type 1 has an invalid length.
[  611.373236][ T7050] ip6tnl0: Caught tx_queue_len zero misconfig
[  611.720200][ T7077] netlink: 'syz.2.9262': attribute type 26 has an invalid length.
[  611.903730][ T7095] 8021q: adding VLAN 0 to HW filter on device bond48
[  611.912891][ T7095] 8021q: adding VLAN 0 to HW filter on device macvlan4
[  611.916989][ T7095] bond48: (slave macvlan4): Enslaving as a backup interface with a down link
[  611.927641][ T7095] bond93: (slave geneve22): Releasing active interface
[  611.933423][ T7095] bond94: (slave geneve23): Releasing active interface
[  611.938771][ T7095] bond95: (slave geneve24): Releasing active interface
[  611.944353][ T7095] bond48: (slave macvlan4): Releasing backup interface
[  611.948956][ T5934] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  611.954852][ T5739] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  611.957697][ T5739] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  611.960553][ T5739] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  611.994500][ T7097] C speed is unknown, defaulting to 1000
[  612.054783][ T7097] lo speed is unknown, defaulting to 1000
[  612.311219][    C1] net_ratelimit: 30 callbacks suppressed
[  612.311240][    C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  612.694799][ T7129] sctp: [Deprecated]: syz.0.9278 (pid 7129) Use of int in max_burst socket option.
[  612.694799][ T7129] Use struct sctp_assoc_value instead
[  612.979724][ T7139] tipc: Resetting bearer <ib:ip6gre0>
[  613.020795][    T9] C speed is unknown, defaulting to 1000
[  613.020838][   T12] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  613.022898][    T9] syz0: Port: 1 Link DOWN
[  613.031420][    T9] C speed is unknown, defaulting to 1000
[  613.033588][   T12] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  613.037446][   T12] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  613.041488][   T12] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  613.351329][    C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  613.536365][ T7152] netlink: 'syz.2.9283': attribute type 13 has an invalid length.
[  613.547185][ T7152] bridge0: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  613.637976][ T7162] netlink: 'syz.2.9285': attribute type 9 has an invalid length.
[  613.690016][ T7171] netlink: 'syz.1.9288': attribute type 2 has an invalid length.
[  613.693469][ T7171] nbd: must specify at least one socket
[  613.760290][ T7184] netlink: 'syz.0.9292': attribute type 2 has an invalid length.
[  613.931485][ T7202] bpq0: entered promiscuous mode
[  614.107636][ T7215] netlink: 'syz.0.9303': attribute type 2 has an invalid length.
[  614.190342][ T7218] __nla_validate_parse: 57 callbacks suppressed
[  614.190354][ T7218] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9304'.
[  614.284555][ T7228] bond87: (slave veth55): Releasing active interface
[  614.289279][ T7228] bond89: (slave bond90): Releasing backup interface
[  614.295234][ T7228] bond91: (slave geneve14): Releasing active interface
[  614.299972][ T7228] bond92: (slave geneve15): Releasing active interface
[  614.304689][ T7228] bond93: (slave geneve16): Releasing active interface
[  614.308925][ T7228] bond94: (slave geneve17): Releasing active interface
[  614.316075][ T7228] bond95: (slave geneve18): Releasing active interface
[  614.320520][ T7228] bond96: (slave geneve19): Releasing active interface
[  614.326550][ T7228] bond98: (slave bridge44): Releasing backup interface
[  614.329180][ T7228] bridge44: left promiscuous mode
[  614.333242][ T7228] bond99: (slave geneve20): Releasing active interface
[  614.391168][    C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  614.547139][ T7236] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9308'.
[  614.568298][ T7236] bridge43: port 1(veth39) entered blocking state
[  614.570513][ T7236] bridge43: port 1(veth39) entered disabled state
[  614.574337][ T7236] veth39: entered allmulticast mode
[  614.577205][ T7236] veth39: entered promiscuous mode
[  614.585063][ T7238] netlink: 24 bytes leftover after parsing attributes in process `syz.1.9309'.
[  614.589235][ T7236] sctp: [Deprecated]: syz.2.9308 (pid 7236) Use of struct sctp_assoc_value in delayed_ack socket option.
[  614.589235][ T7236] Use struct sctp_sack_info instead
[  614.811966][ T7274] bridge0: port 1(erspan0) entered blocking state
[  614.814723][ T7274] bridge0: port 1(erspan0) entered disabled state
[  614.818048][ T7274] erspan0: entered allmulticast mode
[  614.820434][ T7274] erspan0: entered promiscuous mode
[  614.885674][ T7289] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9324'.
[  614.924054][ T7289] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9324'.
[  615.099315][ T7313] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9333'.
[  615.431150][    C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  615.955424][ T7324] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9337'.
[  615.964517][ T7326] netlink: 'syz.2.9338': attribute type 1 has an invalid length.
[  615.969296][ T7324] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9337'.
[  615.986149][ T7327] tap0: tun_chr_ioctl cmd 1074025677
[  615.988526][ T7327] tap0: linktype set to 804
[  615.990919][ T7326] tap0: tun_chr_ioctl cmd 26130
[  616.245550][ T7361] bond0: entered promiscuous mode
[  616.248597][ T7361] bond0: left promiscuous mode
[  616.320162][ T7365] netlink: 16 bytes leftover after parsing attributes in process `syz.1.9346'.
[  616.343733][ T7367] netlink: 'syz.2.9347': attribute type 1 has an invalid length.
[  616.354803][ T7367] 8021q: adding VLAN 0 to HW filter on device bond97
[  616.471157][    C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  617.405976][ T7408] C speed is unknown, defaulting to 1000
[  617.448347][ T7408] lo speed is unknown, defaulting to 1000
[  617.511183][    C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  617.683385][ T7418] netlink: 16 bytes leftover after parsing attributes in process `syz.1.9362'.
[  617.695050][ T7419] netlink: 'syz.2.9360': attribute type 12 has an invalid length.
[  617.768218][ T7430] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  617.773472][ T7430] tipc: Failed to remove unknown binding: 66,1,1/1672750282:1860795225/1860795227
[  617.778483][ T7430] tipc: Failed to remove unknown binding: 66,1,1/1672750282:1860795225/1860795227
[  617.782963][ T7430] tipc: Failed to remove unknown binding: 66,1,1/1672750282:1860795225/1860795227
[  617.867555][ T7434] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  618.115299][ T7468] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048)
[  618.173198][ T7478] netlink: 'syz.1.9379': attribute type 3 has an invalid length.
[  618.177258][ T7478] netlink: 'syz.1.9379': attribute type 1 has an invalid length.
[  618.203513][ T7482] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  618.206842][ T7482] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  618.266565][ T7486] C speed is unknown, defaulting to 1000
[  618.307944][ T7486] lo speed is unknown, defaulting to 1000
[  618.397481][ T7491] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  618.400173][ T7491] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  618.458556][ T7499] smc: ib device syz0 ibport 1 erased user defined pnetid SYZ2
[  618.504737][ T7499] smc: removing net device bond0 with user defined pnetid SYZ2
[  618.507622][ T7499] bond0 (unregistering): Released all slaves
[  618.552117][    C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  618.587009][ T7503] netlink: 'syz.0.9386': attribute type 12 has an invalid length.
[  619.453863][ T7527] __nla_validate_parse: 11 callbacks suppressed
[  619.453891][ T7527] netlink: 2748 bytes leftover after parsing attributes in process `syz.0.9395'.
[  619.460376][ T7527] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9395'.
[  619.469431][ T5934] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  619.476188][ T5934] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  619.478914][ T5934] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  619.482505][ T5934] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  619.486252][ T5934] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  619.489144][ T5934] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  619.512404][ T7533] netlink: 248 bytes leftover after parsing attributes in process `syz.0.9397'.
[  619.535016][ T5934] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  619.538266][ T5934] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  619.591198][    C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  619.703861][ T7546] erspan0: entered allmulticast mode
[  619.706085][ T7545] netlink: 'syz.0.9402': attribute type 1 has an invalid length.
[  619.708612][ T7545] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9402'.
[  619.718142][ T7546] dvmrp8: entered allmulticast mode
[  619.727074][ T7545] dvmrp8: left allmulticast mode
[  619.824702][ T7557] netlink: 830 bytes leftover after parsing attributes in process `syz.2.9405'.
[  619.917560][ T7559] netlink: 20 bytes leftover after parsing attributes in process `syz.0.9406'.
[  620.017037][ T7579] netlink: 36 bytes leftover after parsing attributes in process `syz.2.9411'.
[  620.023380][ T7579] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9411'.
[  620.028403][ T7580] netlink: 24 bytes leftover after parsing attributes in process `syz.2.9411'.
[  620.034558][ T7581] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9411'.
[  620.074433][ T7587] netlink: 'syz.0.9413': attribute type 11 has an invalid length.
[  620.077505][ T7587] netlink: 'syz.0.9413': attribute type 4 has an invalid length.
[  620.284472][ T7614] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  620.296842][ T7616] bond0: option arp_interval: mode dependency failed, not supported in mode balance-alb(6)
[  620.316739][ T7618] netlink: 'syz.0.9422': attribute type 6 has an invalid length.
[  620.628081][ T7630] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  620.631755][    C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  620.878672][ T7656] mac80211_hwsim hwsim6 syzkaller0: left promiscuous mode
[  620.882304][ T7656] mac80211_hwsim hwsim6 syzkaller0: left allmulticast mode
[  620.886912][ T7656] netlink: 'syz.1.9433': attribute type 10 has an invalid length.
[  620.977443][ T7667] netlink: 'syz.1.9437': attribute type 2 has an invalid length.
[  621.158595][ T7720] lo speed is unknown, defaulting to 1000
[  621.161303][   T24] lo speed is unknown, defaulting to 1000
[  621.392999][ T7694] validate_nla: 1 callbacks suppressed
[  621.393010][ T7694] netlink: 'syz.1.9444': attribute type 13 has an invalid length.
[  621.396936][ T7694] netlink: 'syz.1.9444': attribute type 17 has an invalid length.
[  621.421779][ T7693] block nbd2: server does not support multiple connections per device.
[  621.431281][ T7693] block nbd2: shutting down sockets
[  621.437277][ T7694] 8021q: adding VLAN 0 to HW filter on device 
[  621.471799][ T7689] C speed is unknown, defaulting to 1000
[  621.488902][ T7699] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  621.496546][ T7699] syzkaller0: entered promiscuous mode
[  621.498851][ T7699] syzkaller0: entered allmulticast mode
[  621.532973][ T7689] lo speed is unknown, defaulting to 1000
[  622.137004][ T7716] tipc: Failed to remove unknown binding: 66,1,1/3194577221:4148382406/4148382408
[  622.147482][ T7716] tipc: Failed to remove unknown binding: 66,1,1/3194577221:4148382406/4148382408
[  622.151398][ T7716] tipc: Failed to remove unknown binding: 66,1,1/3194577221:4148382406/4148382408
[  622.244955][ T7724] batadv_slave_0: entered promiscuous mode
[  622.253672][ T7723] batadv_slave_0: left promiscuous mode
[  622.354456][ T7739] mac80211_hwsim hwsim6 syzkaller0: entered promiscuous mode
[  622.356883][ T7739] mac80211_hwsim hwsim6 syzkaller0: entered allmulticast mode
[  622.435360][ T7744] netlink: 'syz.2.9460': attribute type 1 has an invalid length.
[  622.457320][ T7743] veth41: entered promiscuous mode
[  622.459822][ T7744] erspan0: left allmulticast mode
[  622.461965][ T7744] erspan0: left promiscuous mode
[  622.463739][ T7744] bridge0: port 1(erspan0) entered disabled state
[  622.470021][ T7744] veth39: left allmulticast mode
[  622.472000][ T7744] veth39: left promiscuous mode
[  622.474917][ T7744] bridge43: port 1(veth39) entered disabled state
[  622.515568][ T7749] netlink: 'syz.2.9461': attribute type 9 has an invalid length.
[  622.551636][    C0] net_ratelimit: 6 callbacks suppressed
[  622.551652][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  622.711165][    C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  622.727326][ T7769] openvswitch: netlink: Flow key attr not present in new flow.
[  622.887520][ T7787] netlink: 'syz.1.9474': attribute type 4 has an invalid length.
[  622.905450][ T7787] block nbd0: must specify backend
[  622.985273][ T7802] netlink: 'syz.0.9479': attribute type 5 has an invalid length.
[  622.994434][ T7804] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  623.052747][ T7811] netlink: 'syz.0.9482': attribute type 1 has an invalid length.
[  623.056763][ T7813] netlink: 'syz.2.9483': attribute type 6 has an invalid length.
[  623.395235][ T7859] Unsupported ieee802154 address type: 0
[  623.410560][ T7862] IPVS: length: 49 != 24
[  623.601145][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  623.699014][ T7892] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[  623.891806][ T7894] netlink: 'syz.1.9505': attribute type 13 has an invalid length.
[  623.895041][ T7894] netlink: 'syz.1.9505': attribute type 17 has an invalid length.
[  623.905505][ T7894] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check.
[  624.435898][ T7912] sctp: [Deprecated]: syz.2.9510 (pid 7912) Use of struct sctp_assoc_value in delayed_ack socket option.
[  624.435898][ T7912] Use struct sctp_sack_info instead
[  624.487721][ T7919] __nla_validate_parse: 42 callbacks suppressed
[  624.487739][ T7919] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9511'.
[  624.494826][ T7919] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9511'.
[  624.496917][ T7921] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9511'.
[  624.505505][ T7921] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9511'.
[  624.523524][ T7919] smc: adding net device bond0 with user defined pnetid SYZ2
[  624.529921][ T7919] 8021q: adding VLAN 0 to HW filter on device bond0
[  624.542856][ T7919] veth57: entered promiscuous mode
[  624.546918][ T7919] bond0: (slave veth57): Enslaving as a backup interface with a down link
[  624.556465][ T7919] bond0: (slave veth57): Releasing backup interface
[  624.631602][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  624.966273][ T7939] netlink: 200 bytes leftover after parsing attributes in process `syz.1.9518'.
[  625.274297][ T7965] netlink: 280 bytes leftover after parsing attributes in process `syz.1.9524'.
[  625.300616][ T7967] gre0: entered allmulticast mode
[  625.305732][ T7966] gre0: left allmulticast mode
[  625.356018][ T7969] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.9526'.
[  625.359909][ T7969] netlink: 556 bytes leftover after parsing attributes in process `syz.1.9526'.
[  625.430855][ T7971] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9527'.
[  625.459281][ T7971] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9527'.
[  625.671223][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  625.684250][ T8014] mac80211_hwsim hwsim2 syzkaller0: left promiscuous mode
[  625.687406][ T8014] mac80211_hwsim hwsim2 syzkaller0: left allmulticast mode
[  625.694104][ T8010] bond99: entered promiscuous mode
[  625.701294][ T8010] bond99: entered allmulticast mode
[  625.708927][ T8010] 8021q: adding VLAN 0 to HW filter on device bond99
[  625.719383][ T8014] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  625.724173][ T8010] bridge0: failed insert local address into bridge forwarding table
[  625.764613][ T8010] bridge44: entered promiscuous mode
[  625.766425][ T8010] bridge44: entered allmulticast mode
[  625.768825][ T8010] bond99: (slave bridge44): Enslaving as a backup interface with an up link
[  625.791452][T18163] bond99: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  625.798234][ T8022] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  625.959102][ T8047] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  626.085974][ T8063] nbd: device at index 1 is going down
[  626.188020][ T8085] netlink: 'syz.1.9556': attribute type 11 has an invalid length.
[  626.212802][ T8086] 8021q: adding VLAN 0 to HW filter on device bond100
[  626.235697][ T8086] veth45: entered promiscuous mode
[  626.241377][ T8086] bond100: (slave veth45): Enslaving as a backup interface with a down link
[  626.257138][ T8086] bond99: (slave bridge44): Removing an active aggregator
[  626.260674][ T8086] bond99: (slave bridge44): Releasing backup interface
[  626.264499][ T8086] bridge44: left promiscuous mode
[  626.266606][ T8086] bridge44: left allmulticast mode
[  626.272692][ T8086] bond100: (slave veth45): Releasing backup interface
[  626.330944][ T8089] veth59: entered promiscuous mode
[  626.335891][ T8089] bond109: (slave veth59): Enslaving as a backup interface with a down link
[  626.615418][ T8105] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  626.889295][ T8117] bridge42: left promiscuous mode
[  626.891338][ T8117] bridge42: left allmulticast mode
[  626.895166][ T8117] bond97: left promiscuous mode
[  626.897091][ T8117] bond97: left allmulticast mode
[  626.899083][ T8117] bond98: left promiscuous mode
[  626.909844][ T8117] veth57: left promiscuous mode
[  627.761175][    C0] net_ratelimit: 3 callbacks suppressed
[  627.761188][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  628.287539][ T8157] validate_nla: 5 callbacks suppressed
[  628.287556][ T8157] netlink: 'syz.0.9578': attribute type 10 has an invalid length.
[  628.536858][ T5739] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  628.540221][ T5739] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  628.543945][ T5739] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  628.547145][ T5739] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  628.801674][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  629.467854][ T8224] IPv6: sit6: Disabled Multicast RS
[  629.471653][ T8224] sit6: entered allmulticast mode
[  629.498941][ T8229] netlink: 'syz.0.9600': attribute type 10 has an invalid length.
[  629.534825][ T8231] __nla_validate_parse: 23 callbacks suppressed
[  629.534875][ T8231] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9601'.
[  629.606801][ T8243] netlink: 20 bytes leftover after parsing attributes in process `syz.0.9604'.
[  629.664370][ T8245] netlink: 'syz.0.9604': attribute type 10 has an invalid length.
[  629.831365][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  630.444704][ T8262] netlink: 120 bytes leftover after parsing attributes in process `syz.2.9608'.
[  630.452232][ T8262] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[  630.456270][ T8262] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  630.459306][ T8262] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  630.603029][ T8281] netlink: 36 bytes leftover after parsing attributes in process `syz.0.9613'.
[  630.674705][ T8285] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  630.678784][ T8285] mac80211_hwsim hwsim2 syzkaller0: entered promiscuous mode
[  630.681911][ T8285] mac80211_hwsim hwsim2 syzkaller0: entered allmulticast mode
[  630.685760][ T8285] netlink: 56 bytes leftover after parsing attributes in process `syz.0.9615'.
[  630.783794][ T8291] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9618'.
[  630.787372][ T8291] netlink: 68 bytes leftover after parsing attributes in process `syz.0.9618'.
[  630.791368][ T8291] netlink: 'syz.0.9618': attribute type 1 has an invalid length.
[  630.809159][ T8291] 8021q: adding VLAN 0 to HW filter on device bond100
[  630.881579][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  631.066885][ T8309] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  631.070704][ T8309] vlan0: entered promiscuous mode
[  631.074391][ T8309] syzkaller1: entered promiscuous mode
[  631.076620][ T8309] vlan0: entered allmulticast mode
[  631.078557][ T8309] syzkaller1: entered allmulticast mode
[  631.083142][ T8309] netlink: 1041 bytes leftover after parsing attributes in process `syz.0.9623'.
[  631.130291][ T8313] netlink: 'syz.0.9624': attribute type 1 has an invalid length.
[  631.139881][ T8313] 8021q: adding VLAN 0 to HW filter on device bond101
[  631.150121][ T8313] bond101: (slave geneve21): making interface the new active one
[  631.153606][ T8313] bond101: (slave geneve21): Enslaving as an active interface with an up link
[  631.158244][ T5934] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  631.160845][ T5934] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  631.164540][ T5934] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  631.167009][ T5934] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  631.283889][ T8327] netlink: 20 bytes leftover after parsing attributes in process `syz.2.9628'.
[  631.284469][ T8329] netlink: 72 bytes leftover after parsing attributes in process `syz.0.9629'.
[  631.911170][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  632.320706][ T8359] C speed is unknown, defaulting to 1000
[  632.371761][ T8361] 8021q: VLANs not supported on nlmon0
[  632.378723][ T8359] lo speed is unknown, defaulting to 1000
[  632.664817][ T8371] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check.
[  632.754788][ T8375] netlink: 'syz.2.9641': attribute type 10 has an invalid length.
[  632.923642][ T8382] C speed is unknown, defaulting to 1000
[  632.951698][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  632.969452][ T8382] lo speed is unknown, defaulting to 1000
[  633.374391][ T8398] netlink: 'syz.0.9646': attribute type 29 has an invalid length.
[  633.378475][ T8398] netlink: 'syz.0.9646': attribute type 29 has an invalid length.
[  633.449326][ T8402] netlink: 'syz.0.9648': attribute type 1 has an invalid length.
[  633.472768][ T8402] 8021q: adding VLAN 0 to HW filter on device bond102
[  633.484894][ T8402] bond102: (slave geneve22): making interface the new active one
[  633.488253][ T8402] bond102: (slave geneve22): Enslaving as an active interface with an up link
[  633.659756][ T8425]  (unregistering): left promiscuous mode
[  633.665749][ T8425]  (unregistering): Released all slaves
[  633.681170][   T60] block nbd0: Possible stuck request ffff88803f8a8000: control (read@0,4096B). Runtime 60 seconds
[  633.698195][ T8427] netlink: 'syz.2.9655': attribute type 7 has an invalid length.
[  633.700719][ T8427] netlink: 'syz.2.9655': attribute type 3 has an invalid length.
[  633.723982][ T8425] can: request_module (can-proto-0) failed.
[  633.807312][ T8436] IPVS: length: 49 != 24
[  633.819636][ T8438] netlink: 'syz.2.9658': attribute type 1 has an invalid length.
[  633.861817][ T8438] 8021q: adding VLAN 0 to HW filter on device bond101
[  633.874104][ T8438] bond101: (slave geneve25): making interface the new active one
[  633.877754][ T8438] bond101: (slave geneve25): Enslaving as an active interface with an up link
[  633.883225][ T5934] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  633.886616][ T5934] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  633.896449][ T5934] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  633.899437][ T5934] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  633.942454][ T8450] IPVS: Unknown mcast interface: vcan0
[  633.991277][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  634.096449][ T5934] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  634.106733][ T5934] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  634.110046][ T5934] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  634.115787][ T5934] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  634.204506][ T8472] netlink: 'syz.1.9668': attribute type 1 has an invalid length.
[  634.218196][ T8472] 8021q: adding VLAN 0 to HW filter on device bond110
[  634.228817][ T8472] bond110: (slave geneve30): making interface the new active one
[  634.234191][ T8472] bond110: (slave geneve30): Enslaving as an active interface with an up link
[  634.237461][ T5934] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  634.242819][ T5934] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  634.248616][ T5934] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  634.252669][ T5934] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  634.308114][ T8493] netlink: 'syz.1.9674': attribute type 1 has an invalid length.
[  634.319840][ T8493] 8021q: adding VLAN 0 to HW filter on device bond111
[  634.380942][ T8503] C speed is unknown, defaulting to 1000
[  634.418080][ T8506] bond109: (slave veth59): Releasing backup interface
[  634.423080][ T8506] bond110: (slave geneve30): Releasing active interface
[  634.432529][ T5934] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  634.432860][ T8501] rdma_op ffff88803f54f1f0 conn xmit_rdma 0000000000000000
[  634.435189][ T5934] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  634.448928][ T5934] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  634.453518][ T8503] lo speed is unknown, defaulting to 1000
[  634.458003][ T5934] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  634.462556][ T8506] netlink: 'syz.1.9677': attribute type 10 has an invalid length.
[  634.474056][ T8505] netlink: 'syz.0.9679': attribute type 1 has an invalid length.
[  634.494516][ T8505] 8021q: adding VLAN 0 to HW filter on device bond103
[  634.511099][ T8505] bond103: (slave geneve23): making interface the new active one
[  634.515033][ T8505] bond103: (slave geneve23): Enslaving as an active interface with an up link
[  634.749551][ T8526] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[  634.755733][ T8526] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  634.759796][ T8526] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  635.041882][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  635.427061][ T8550] __nla_validate_parse: 46 callbacks suppressed
[  635.427073][ T8550] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9688'.
[  635.482526][ T8554] 8021q: adding VLAN 0 to HW filter on device bond102
[  635.493004][ T8554] 8021q: adding VLAN 0 to HW filter on device bond102
[  635.495890][ T8554] bond102: (slave vxcan9): The slave device specified does not support setting the MAC address
[  635.499781][ T8554] bond102: (slave vxcan9): Error -95 calling set_mac_address
[  635.544753][ T8556] veth49: entered promiscuous mode
[  635.548482][ T8556] bond102: (slave veth49): Enslaving as an active interface with a down link
[  635.556085][ T8554] erspan0: entered allmulticast mode
[  635.560727][ T8554] bond102: (slave erspan0): making interface the new active one
[  635.566001][ T8554] bond102: (slave erspan0): Enslaving as an active interface with an up link
[  635.587172][ T8560] syzkaller0: left promiscuous mode
[  635.588920][ T8560] syzkaller0: left allmulticast mode
[  635.632411][ T8569] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9696'.
[  635.790680][ T8584] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9698'.
[  635.810689][ T8588] netlink: 72 bytes leftover after parsing attributes in process `syz.0.9700'.
[  635.850026][ T8588] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9700'.
[  635.943924][ T8594] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9702'.
[  635.965498][ T8594] macvlan5: entered promiscuous mode
[  635.967641][ T8594] macvlan5: entered allmulticast mode
[  635.970583][ T8594] bond104: (slave macvlan5): Opening slave failed
[  636.071277][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  636.096644][ T8597] netlink: 132 bytes leftover after parsing attributes in process `syz.0.9703'.
[  636.100512][ T8597] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9703'.
[  636.162897][ T8610] netlink: 224 bytes leftover after parsing attributes in process `syz.0.9706'.
[  636.168640][ T8603] 8021q: adding VLAN 0 to HW filter on device bond112
[  636.180955][ T8603] bond112: (slave geneve31): making interface the new active one
[  636.184445][ T8603] bond112: (slave geneve31): Enslaving as an active interface with an up link
[  636.187395][   T12] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  636.190518][   T12] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  636.193862][ T8612] netlink: 72 bytes leftover after parsing attributes in process `syz.0.9707'.
[  636.196635][   T12] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  636.199173][   T12] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  636.383718][ T8625] 8021q: VLANs not supported on nlmon0
[  637.113932][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  637.414253][ T8639] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[  637.528517][ T8664] 0X: renamed from caif0
[  637.539896][ T8664] 0X: entered allmulticast mode
[  637.543283][ T8664] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check.
[  637.579135][ T8666] 8021q: adding VLAN 0 to HW filter on device bond103
[  637.737306][ T8676] 8021q: adding VLAN 0 to HW filter on device bond113
[  637.750143][ T8676] bond113: (slave geneve32): making interface the new active one
[  637.754553][ T8676] bond113: (slave geneve32): Enslaving as an active interface with an up link
[  637.869367][ T8694] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check.
[  637.903722][ T8688] C speed is unknown, defaulting to 1000
[  637.994299][ T8688] lo speed is unknown, defaulting to 1000
[  638.146096][ T8717] C speed is unknown, defaulting to 1000
[  638.177983][ T8721] bridge0: port 1(macvlan1) entered blocking state
[  638.180726][ T8721] bridge0: port 1(macvlan1) entered disabled state
[  638.184037][ T8721] macvlan1: entered allmulticast mode
[  638.186343][ T8721] bridge0: entered allmulticast mode
[  638.189521][ T8721] macvlan1: left allmulticast mode
[  638.191886][ T8721] bridge0: left allmulticast mode
[  638.257873][ T8717] lo speed is unknown, defaulting to 1000
[  639.222644][ T8747] validate_nla: 8 callbacks suppressed
[  639.222658][ T8747] netlink: 'syz.2.9746': attribute type 1 has an invalid length.
[  639.272939][ T8751] netlink: 'syz.1.9748': attribute type 1 has an invalid length.
[  639.317626][ T8751] 8021q: adding VLAN 0 to HW filter on device bond114
[  639.328862][ T8751] veth61: entered promiscuous mode
[  639.335045][ T8751] bond114: (slave veth61): Enslaving as a backup interface with a down link
[  639.346361][ T8751] bond112: (slave geneve31): Releasing active interface
[  639.353782][ T8751] bond113: (slave geneve32): Releasing active interface
[  639.359084][ T8751] bond114: (slave veth61): Releasing backup interface
[  639.369179][   T12] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  639.373179][   T12] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  639.379074][   T12] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  639.387694][   T12] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  639.687776][ T8786] : left promiscuous mode
[  639.763610][ T8788] netlink: 'syz.0.9758': attribute type 1 has an invalid length.
[  639.774307][ T8788] 8021q: adding VLAN 0 to HW filter on device bond105
[  639.784399][ T8788] bond105: (slave geneve24): making interface the new active one
[  639.788004][ T8788] bond105: (slave geneve24): Enslaving as an active interface with an up link
[  640.080943][ T8813] C speed is unknown, defaulting to 1000
[  640.124995][ T8813] lo speed is unknown, defaulting to 1000
[  640.357771][ T8819] netlink: 'syz.1.9765': attribute type 2 has an invalid length.
[  640.360490][ T8819] netlink: 'syz.1.9765': attribute type 1 has an invalid length.
[  640.415373][ T8837] (unnamed net_device) (uninitialized): option lacp_rate: invalid value (144)
[  640.522886][ T8853] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  640.526886][ T8853] syzkaller0: entered promiscuous mode
[  640.529106][ T8853] syzkaller0: entered allmulticast mode
[  640.567357][ T8858] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  640.574135][ T8858] __nla_validate_parse: 24 callbacks suppressed
[  640.574150][ T8858] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9778'.
[  640.648297][ T8868] netlink: 'syz.1.9779': attribute type 4 has an invalid length.
[  640.658903][ T8868] netlink: 152 bytes leftover after parsing attributes in process `syz.1.9779'.
[  640.665525][ T8872] netlink: 28 bytes leftover after parsing attributes in process `syz.2.9780'.
[  640.670870][ T8872] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9780'.
[  640.700093][ T8876] netlink: 28 bytes leftover after parsing attributes in process `syz.2.9781'.
[  640.706180][ T8876] netlink: 'syz.2.9781': attribute type 1 has an invalid length.
[  640.739395][ T8880] (unnamed net_device) (uninitialized): option lacp_rate: mode dependency failed, not supported in mode balance-tlb(5)
[  640.748709][ T8876] 8021q: adding VLAN 0 to HW filter on device bond105
[  640.751641][ T8880] netlink: 64 bytes leftover after parsing attributes in process `syz.1.9782'.
[  640.758342][ T8882] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  640.769194][ T8882] netlink: 32 bytes leftover after parsing attributes in process `syz.0.9783'.
[  640.780656][ T8882] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes.
[  640.783610][ T8884] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  640.794631][ T8884] netlink: 'syz.1.9784': attribute type 2 has an invalid length.
[  640.800600][ T8884] netlink: 119 bytes leftover after parsing attributes in process `syz.1.9784'.
[  640.843566][ T8888] netlink: 'syz.2.9787': attribute type 1 has an invalid length.
[  640.857740][ T8888] 8021q: adding VLAN 0 to HW filter on device bond106
[  640.879904][ T8893] netlink: 24 bytes leftover after parsing attributes in process `syz.1.9786'.
[  640.905347][ T8900] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9789'.
[  640.908244][ T8900] netlink: 'syz.0.9789': attribute type 14 has an invalid length.
[  641.169587][ T8936] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  641.174015][ T8936] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  641.204534][ T8936] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  641.208493][ T8936] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  641.230491][ T8932] tipc: Resetting bearer <ib:ip6gre0>
[  641.232544][ T8932] tipc: Resetting bearer <ib:ip6gre0>
[  641.236499][ T8932] 0X: left allmulticast mode
[  641.238148][ T8932] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check.
[  641.243162][  T794] C speed is unknown, defaulting to 1000
[  641.244210][ T8934] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  641.244888][  T794] syz0: Port: 1 Link ACTIVE
[  641.256651][ T8936] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  641.260547][ T8936] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  641.270400][  T794] C speed is unknown, defaulting to 1000
[  641.290632][ T8940] 8021q: adding VLAN 0 to HW filter on device bond106
[  641.301166][ T8940] 8021q: adding VLAN 0 to HW filter on device bond106
[  641.303619][ T8940] bond106: (slave vxcan1): The slave device specified does not support setting the MAC address
[  641.307584][ T8940] bond106: (slave vxcan1): Error -95 calling set_mac_address
[  641.316687][ T8936] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  641.320367][ T8936] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  641.356671][ T8942] bond106: (slave bridge50): Enslaving as an active interface with a down link
[  641.380899][ T5871] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  641.385870][ T5871] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  641.393795][ T5934] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  641.397084][ T5934] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  641.405412][ T5934] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  641.408647][ T5934] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  641.417410][ T5934] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  641.420413][ T5934] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  641.426556][ T8937] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  641.429875][ T8937] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  641.443892][ T5934] ==================================================================
[  641.446415][ T5934] BUG: KASAN: slab-use-after-free in __mutex_lock+0x147/0x1350
[  641.448767][ T5934] Read of size 8 at addr ffff8880287b08b0 by task kworker/u8:4/5934
[  641.452925][ T5934] 
[  641.453676][ T5934] CPU: 0 UID: 0 PID: 5934 Comm: kworker/u8:4 Not tainted syzkaller #0 PREEMPT(full) 
[  641.453689][ T5934] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  641.453695][ T5934] Workqueue: udp_tunnel_nic udp_tunnel_nic_device_sync_work
[  641.453712][ T5934] Call Trace:
[  641.453739][ T5934]  <TASK>
[  641.453747][ T5934]  dump_stack_lvl+0x189/0x250
[  641.453764][ T5934]  ? __pfx_dump_stack_lvl+0x10/0x10
[  641.453778][ T5934]  ? lock_release+0x4b/0x3e0
[  641.453793][ T5934]  ? __virt_addr_valid+0x4a5/0x5c0
[  641.453804][ T5934]  print_report+0xca/0x240
[  641.453812][ T5934]  ? __mutex_lock+0x147/0x1350
[  641.453819][ T5934]  kasan_report+0x118/0x150
[  641.453830][ T5934]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  641.453842][ T5934]  ? __mutex_lock+0x147/0x1350
[  641.453850][ T5934]  __mutex_lock+0x147/0x1350
[  641.453858][ T5934]  ? __mutex_lock+0x5bb/0x1350
[  641.453865][ T5934]  ? udp_tunnel_nic_device_sync_work+0x39/0xa50
[  641.453877][ T5934]  ? __pfx___mutex_lock+0x10/0x10
[  641.453884][ T5934]  ? do_raw_spin_unlock+0x4d/0x240
[  641.453894][ T5934]  ? rcu_is_watching+0x15/0xb0
[  641.453904][ T5934]  udp_tunnel_nic_device_sync_work+0x39/0xa50
[  641.453917][ T5934]  ? process_scheduled_works+0x9ef/0x17b0
[  641.453925][ T5934]  ? process_scheduled_works+0x9ef/0x17b0
[  641.453932][ T5934]  process_scheduled_works+0xae1/0x17b0
[  641.453945][ T5934]  ? __pfx_process_scheduled_works+0x10/0x10
[  641.453956][ T5934]  worker_thread+0x8a0/0xda0
[  641.453969][ T5934]  kthread+0x711/0x8a0
[  641.453979][ T5934]  ? __pfx_worker_thread+0x10/0x10
[  641.453986][ T5934]  ? __pfx_kthread+0x10/0x10
[  641.453995][ T5934]  ? rcu_is_watching+0x15/0xb0
[  641.454003][ T5934]  ? __pfx_kthread+0x10/0x10
[  641.454011][ T5934]  ret_from_fork+0x3fc/0x770
[  641.454020][ T5934]  ? __pfx_ret_from_fork+0x10/0x10
[  641.454029][ T5934]  ? __switch_to_asm+0x39/0x70
[  641.454038][ T5934]  ? __switch_to_asm+0x33/0x70
[  641.454048][ T5934]  ? __pfx_kthread+0x10/0x10
[  641.454057][ T5934]  ret_from_fork_asm+0x1a/0x30
[  641.454069][ T5934]  </TASK>
[  641.454073][ T5934] 
[  641.528934][ T5934] Allocated by task 8936:
[  641.530556][ T5934]  kasan_save_track+0x3e/0x80
[  641.532288][ T5934]  __kasan_kmalloc+0x93/0xb0
[  641.534031][ T5934]  __kmalloc_noprof+0x27a/0x4f0
[  641.535843][ T5934]  udp_tunnel_nic_netdevice_event+0x854/0x19f0
[  641.538116][ T5934]  notifier_call_chain+0x1b6/0x3e0
[  641.540016][ T5934]  register_netdevice+0x1608/0x1ae0
[  641.542016][ T5934]  nsim_create+0xae8/0xf10
[  641.543739][ T5934]  __nsim_dev_port_add+0x6b6/0xb10
[  641.545684][ T5934]  nsim_dev_port_add_all+0x37/0xf0
[  641.547582][ T5934]  nsim_dev_reload_up+0x451/0x780
[  641.549498][ T5934]  devlink_reload+0x4ec/0x8d0
[  641.551280][ T5934]  devlink_nl_reload_doit+0xb35/0xd50
[  641.553336][ T5934]  genl_family_rcv_msg_doit+0x215/0x300
[  641.555463][ T5934]  genl_rcv_msg+0x60e/0x790
[  641.557209][ T5934]  netlink_rcv_skb+0x208/0x470
[  641.559039][ T5934]  genl_rcv+0x28/0x40
[  641.560566][ T5934]  netlink_unicast+0x82f/0x9e0
[  641.562378][ T5934]  netlink_sendmsg+0x805/0xb30
[  641.564215][ T5934]  __sock_sendmsg+0x21c/0x270
[  641.566001][ T5934]  ____sys_sendmsg+0x505/0x830
[  641.567805][ T5934]  ___sys_sendmsg+0x21f/0x2a0
[  641.569617][ T5934]  __x64_sys_sendmsg+0x19b/0x260
[  641.571523][ T5934]  do_syscall_64+0xfa/0x3b0
[  641.573247][ T5934]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  641.575472][ T5934] 
[  641.576370][ T5934] Freed by task 8937:
[  641.577879][ T5934]  kasan_save_track+0x3e/0x80
[  641.579658][ T5934]  kasan_save_free_info+0x46/0x50
[  641.581562][ T5934]  __kasan_slab_free+0x5b/0x80
[  641.583418][ T5934]  kfree+0x18e/0x440
[  641.584900][ T5934]  udp_tunnel_nic_netdevice_event+0x1332/0x19f0
[  641.587168][ T5934]  notifier_call_chain+0x1b6/0x3e0
[  641.589035][ T5934]  unregister_netdevice_many_notify+0x14d7/0x1ff0
[  641.591431][ T5934]  unregister_netdevice_queue+0x33c/0x380
[  641.593544][ T5934]  nsim_destroy+0x1dd/0x670
[  641.595231][ T5934]  __nsim_dev_port_del+0x14d/0x1b0
[  641.597109][ T5934]  nsim_dev_reload_destroy+0x288/0x490
[  641.599177][ T5934]  nsim_dev_reload_down+0x8a/0xc0
[  641.601107][ T5934]  devlink_reload+0x1b6/0x8d0
[  641.602873][ T5934]  devlink_nl_reload_doit+0xb35/0xd50
[  641.604987][ T5934]  genl_family_rcv_msg_doit+0x215/0x300
[  641.607158][ T5934]  genl_rcv_msg+0x60e/0x790
[  641.608890][ T5934]  netlink_rcv_skb+0x208/0x470
[  641.610698][ T5934]  genl_rcv+0x28/0x40
[  641.612219][ T5934]  netlink_unicast+0x82f/0x9e0
[  641.614064][ T5934]  netlink_sendmsg+0x805/0xb30
[  641.615901][ T5934]  __sock_sendmsg+0x21c/0x270
[  641.617694][ T5934]  ____sys_sendmsg+0x505/0x830
[  641.619475][ T5934]  ___sys_sendmsg+0x21f/0x2a0
[  641.621272][ T5934]  __x64_sys_sendmsg+0x19b/0x260
[  641.623163][ T5934]  do_syscall_64+0xfa/0x3b0
[  641.624904][ T5934]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  641.627192][ T5934] 
[  641.628118][ T5934] Last potentially related work creation:
[  641.630184][ T5934]  kasan_save_stack+0x3e/0x60
[  641.631653][ T5934]  kasan_record_aux_stack+0xbd/0xd0
[  641.633296][ T5934]  insert_work+0x3d/0x330
[  641.634647][ T5934]  __queue_work+0xbaf/0xfb0
[  641.636096][ T5934]  queue_work_on+0x181/0x270
[  641.637535][ T5934]  __udp_tunnel_nic_add_port+0xb71/0xd60
[  641.639248][ T5934]  udp_tunnel_push_rx_port+0x180/0x200
[  641.640920][ T5934]  geneve_offload_rx_ports+0xd7/0x160
[  641.642574][ T5934]  geneve_netdevice_event+0x6a/0x80
[  641.644202][ T5934]  notifier_call_chain+0x1b6/0x3e0
[  641.645814][ T5934]  call_netdevice_notifiers+0x88/0xc0
[  641.647489][ T5934]  udp_tunnel_nic_netdevice_event+0x134d/0x19f0
[  641.649439][ T5934]  notifier_call_chain+0x1b6/0x3e0
[  641.651128][ T5934]  register_netdevice+0x1608/0x1ae0
[  641.652925][ T5934]  nsim_create+0xae8/0xf10
[  641.654387][ T5934]  __nsim_dev_port_add+0x6b6/0xb10
[  641.656084][ T5934]  nsim_dev_port_add_all+0x37/0xf0
[  641.657736][ T5934]  nsim_dev_reload_up+0x451/0x780
[  641.659385][ T5934]  devlink_reload+0x4ec/0x8d0
[  641.660900][ T5934]  devlink_nl_reload_doit+0xb35/0xd50
[  641.662699][ T5934]  genl_family_rcv_msg_doit+0x215/0x300
[  641.664486][ T5934]  genl_rcv_msg+0x60e/0x790
[  641.665997][ T5934]  netlink_rcv_skb+0x208/0x470
[  641.667606][ T5934]  genl_rcv+0x28/0x40
[  641.668937][ T5934]  netlink_unicast+0x82f/0x9e0
[  641.670468][ T5934]  netlink_sendmsg+0x805/0xb30
[  641.672150][ T5934]  __sock_sendmsg+0x21c/0x270
[  641.673749][ T5934]  ____sys_sendmsg+0x505/0x830
[  641.675345][ T5934]  ___sys_sendmsg+0x21f/0x2a0
[  641.676898][ T5934]  __x64_sys_sendmsg+0x19b/0x260
[  641.678487][ T5934]  do_syscall_64+0xfa/0x3b0
[  641.680014][ T5934]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  641.681949][ T5934] 
[  641.682772][ T5934] Second to last potentially related work creation:
[  641.684983][ T5934]  kasan_save_stack+0x3e/0x60
[  641.686572][ T5934]  kasan_record_aux_stack+0xbd/0xd0
[  641.688248][ T5934]  insert_work+0x3d/0x330
[  641.689630][ T5934]  __queue_work+0xcd2/0xfb0
[  641.691136][ T5934]  queue_work_on+0x181/0x270
[  641.692778][ T5934]  __udp_tunnel_nic_add_port+0xb71/0xd60
[  641.694602][ T5934]  udp_tunnel_push_rx_port+0x180/0x200
[  641.696419][ T5934]  vxlan_offload_rx_ports+0x139/0x200
[  641.698178][ T5934]  vxlan_netdevice_event+0x111/0x470
[  641.699872][ T5934]  notifier_call_chain+0x1b6/0x3e0
[  641.701522][ T5934]  call_netdevice_notifiers+0x88/0xc0
[  641.703433][ T5934]  udp_tunnel_nic_netdevice_event+0x134d/0x19f0
[  641.705648][ T5934]  notifier_call_chain+0x1b6/0x3e0
[  641.707432][ T5934]  register_netdevice+0x1608/0x1ae0
[  641.709124][ T5934]  nsim_create+0xae8/0xf10
[  641.710720][ T5934]  __nsim_dev_port_add+0x6b6/0xb10
[  641.712338][ T5934]  nsim_dev_port_add_all+0x37/0xf0
[  641.713944][ T5934]  nsim_dev_reload_up+0x451/0x780
[  641.715752][ T5934]  devlink_reload+0x4ec/0x8d0
[  641.717358][ T5934]  devlink_nl_reload_doit+0xb35/0xd50
[  641.719028][ T5934]  genl_family_rcv_msg_doit+0x215/0x300
[  641.721160][ T5934]  genl_rcv_msg+0x60e/0x790
[  641.722921][ T5934]  netlink_rcv_skb+0x208/0x470
[  641.724753][ T5934]  genl_rcv+0x28/0x40
[  641.726229][ T5934]  netlink_unicast+0x82f/0x9e0
[  641.727994][ T5934]  netlink_sendmsg+0x805/0xb30
[  641.729818][ T5934]  __sock_sendmsg+0x21c/0x270
[  641.731572][ T5934]  ____sys_sendmsg+0x505/0x830
[  641.733497][ T5934]  ___sys_sendmsg+0x21f/0x2a0
[  641.735391][ T5934]  __x64_sys_sendmsg+0x19b/0x260
[  641.737359][ T5934]  do_syscall_64+0xfa/0x3b0
[  641.739179][ T5934]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  641.741471][ T5934] 
[  641.742407][ T5934] The buggy address belongs to the object at ffff8880287b0800
[  641.742407][ T5934]  which belongs to the cache kmalloc-256 of size 256
[  641.747577][ T5934] The buggy address is located 176 bytes inside of
[  641.747577][ T5934]  freed 256-byte region [ffff8880287b0800, ffff8880287b0900)
[  641.752695][ T5934] 
[  641.753638][ T5934] The buggy address belongs to the physical page:
[  641.756059][ T5934] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x287b0
[  641.759336][ T5934] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  641.762499][ T5934] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[  641.765331][ T5934] page_type: f5(slab)
[  641.766859][ T5934] raw: 00fff00000000040 ffff88801a441b40 ffffea0000849600 dead000000000004
[  641.770066][ T5934] raw: 0000000000000000 0000000080100010 00000000f5000000 0000000000000000
[  641.773262][ T5934] head: 00fff00000000040 ffff88801a441b40 ffffea0000849600 dead000000000004
[  641.776498][ T5934] head: 0000000000000000 0000000080100010 00000000f5000000 0000000000000000
[  641.779681][ T5934] head: 00fff00000000001 ffffea0000a1ec01 00000000ffffffff 00000000ffffffff
[  641.782990][ T5934] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002
[  641.785816][ T5934] page dumped because: kasan: bad access detected
[  641.787792][ T5934] page_owner tracks the page as allocated
[  641.789546][ T5934] page last allocated via order 1, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 5848, tgid 5848 (syz-executor), ts 46612846574, free_ts 46507464767
[  641.795787][ T5934]  post_alloc_hook+0x240/0x2a0
[  641.797483][ T5934]  get_page_from_freelist+0x21e4/0x22c0
[  641.799340][ T5934]  __alloc_frozen_pages_noprof+0x181/0x370
[  641.801305][ T5934]  alloc_pages_mpol+0x232/0x4a0
[  641.802987][ T5934]  allocate_slab+0x8a/0x370
[  641.804561][ T5934]  ___slab_alloc+0xbeb/0x1410
[  641.806379][ T5934]  __kmalloc_cache_noprof+0x296/0x3d0
[  641.808240][ T5934]  ____ip_mc_inc_group+0x528/0xde0
[  641.809947][ T5934]  br_multicast_join_snoopers+0xb2/0x1b0
[  641.811962][ T5934]  br_dev_open+0xfd/0x140
[  641.813436][ T5934]  __dev_open+0x470/0x880
[  641.815037][ T5934]  __dev_change_flags+0x1ea/0x6d0
[  641.816907][ T5934]  netif_change_flags+0x88/0x1a0
[  641.818665][ T5934]  do_setlink+0xc55/0x41c0
[  641.820253][ T5934]  rtnl_newlink+0x160b/0x1c70
[  641.821888][ T5934]  rtnetlink_rcv_msg+0x7cf/0xb70
[  641.823682][ T5934] page last free pid 5848 tgid 5848 stack trace:
[  641.825948][ T5934]  __free_frozen_pages+0xbc4/0xd30
[  641.827769][ T5934]  __slab_free+0x303/0x3c0
[  641.829391][ T5934]  qlist_free_all+0x97/0x140
[  641.831019][ T5934]  kasan_quarantine_reduce+0x148/0x160
[  641.832896][ T5934]  __kasan_slab_alloc+0x22/0x80
[  641.835006][ T5934]  __kmalloc_cache_noprof+0x1be/0x3d0
[  641.836947][ T5934]  register_netdevice+0x58b/0x1ae0
[  641.838542][ T5934]  nsim_create+0xae8/0xf10
[  641.840203][ T5934]  __nsim_dev_port_add+0x6b6/0xb10
[  641.841938][ T5934]  nsim_dev_port_add_all+0x37/0xf0
[  641.843600][ T5934]  nsim_drv_probe+0x88e/0xba0
[  641.845187][ T5934]  really_probe+0x26d/0x9e0
[  641.846785][ T5934]  __driver_probe_device+0x18c/0x2f0
[  641.848894][ T5934]  driver_probe_device+0x4f/0x430
[  641.851062][ T5934]  __device_attach_driver+0x2ce/0x530
[  641.853364][ T5934]  bus_for_each_drv+0x251/0x2e0
[  641.855472][ T5934] 
[  641.856471][ T5934] Memory state around the buggy address:
[  641.858425][ T5934]  ffff8880287b0780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  641.861225][ T5934]  ffff8880287b0800: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  641.863780][ T5934] >ffff8880287b0880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  641.866260][ T5934]                                      ^
[  641.868047][ T5934]  ffff8880287b0900: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  641.870588][ T5934]  ffff8880287b0980: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  641.873175][ T5934] ==================================================================
[  641.881209][ T5934] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  641.883618][ T5934] CPU: 0 UID: 0 PID: 5934 Comm: kworker/u8:4 Not tainted syzkaller #0 PREEMPT(full) 
[  641.886584][ T5934] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  641.889759][ T5934] Workqueue: udp_tunnel_nic udp_tunnel_nic_device_sync_work
[  641.892122][ T5934] Call Trace:
[  641.893194][ T5934]  <TASK>
[  641.894184][ T5934]  dump_stack_lvl+0x99/0x250
[  641.895651][ T5934]  ? __asan_memcpy+0x40/0x70
[  641.897246][ T5934]  ? __pfx_dump_stack_lvl+0x10/0x10
[  641.899124][ T5934]  ? __pfx__printk+0x10/0x10
[  641.900757][ T5934]  vpanic+0x281/0x750
[  641.902168][ T5934]  ? preempt_schedule+0xae/0xc0
[  641.903800][ T5934]  ? __pfx_vpanic+0x10/0x10
[  641.905463][ T5934]  ? preempt_schedule_common+0x83/0xd0
[  641.907291][ T5934]  ? preempt_schedule+0xae/0xc0
[  641.908922][ T5934]  ? __pfx_preempt_schedule+0x10/0x10
[  641.910678][ T5934]  panic+0xb9/0xc0
[  641.911994][ T5934]  ? __pfx_panic+0x10/0x10
[  641.913473][ T5934]  ? _raw_spin_unlock_irqrestore+0xfd/0x110
[  641.915431][ T5934]  ? __mutex_lock+0x147/0x1350
[  641.916995][ T5934]  check_panic_on_warn+0x89/0xb0
[  641.918674][ T5934]  ? __mutex_lock+0x147/0x1350
[  641.920268][ T5934]  end_report+0x78/0x160
[  641.921775][ T5934]  kasan_report+0x129/0x150
[  641.923256][ T5934]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  641.925319][ T5934]  ? __mutex_lock+0x147/0x1350
[  641.927057][ T5934]  __mutex_lock+0x147/0x1350
[  641.928504][ T5934]  ? __mutex_lock+0x5bb/0x1350
[  641.930190][ T5934]  ? udp_tunnel_nic_device_sync_work+0x39/0xa50
[  641.932305][ T5934]  ? __pfx___mutex_lock+0x10/0x10
[  641.933976][ T5934]  ? do_raw_spin_unlock+0x4d/0x240
[  641.935656][ T5934]  ? rcu_is_watching+0x15/0xb0
[  641.937259][ T5934]  udp_tunnel_nic_device_sync_work+0x39/0xa50
[  641.939265][ T5934]  ? process_scheduled_works+0x9ef/0x17b0
[  641.941433][ T5934]  ? process_scheduled_works+0x9ef/0x17b0
[  641.943320][ T5934]  process_scheduled_works+0xae1/0x17b0
[  641.945203][ T5934]  ? __pfx_process_scheduled_works+0x10/0x10
[  641.947212][ T5934]  worker_thread+0x8a0/0xda0
[  641.948781][ T5934]  kthread+0x711/0x8a0
[  641.950218][ T5934]  ? __pfx_worker_thread+0x10/0x10
[  641.951927][ T5934]  ? __pfx_kthread+0x10/0x10
[  641.953465][ T5934]  ? rcu_is_watching+0x15/0xb0
[  641.955094][ T5934]  ? __pfx_kthread+0x10/0x10
[  641.956626][ T5934]  ret_from_fork+0x3fc/0x770
[  641.958118][ T5934]  ? __pfx_ret_from_fork+0x10/0x10
[  641.959874][ T5934]  ? __switch_to_asm+0x39/0x70
[  641.961537][ T5934]  ? __switch_to_asm+0x33/0x70
[  641.963106][ T5934]  ? __pfx_kthread+0x10/0x10
[  641.964589][ T5934]  ret_from_fork_asm+0x1a/0x30
[  641.966222][ T5934]  </TASK>
[  641.967863][ T5934] Kernel Offset: disabled
[  641.969217][ T5934] Rebooting in 86400 seconds..

VM DIAGNOSIS:
22:00:20  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000061 RBX=0000000000000061 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc9000415f130
R8 =ffff888108ca8237 R9 =1ffff11021195046 R10=dffffc0000000000 R11=ffffffff854f2040
R12=dffffc0000000000 R13=ffffffff99afd904 R14=ffffffff99df23e0 R15=0000000000000000
RIP=ffffffff854f20bc RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b8618000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000200000002038 CR3=000000011fef4000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 00007f4624812e53
XMM06=0000000000000000 00007f4624812e4d XMM07=0000000000000000 00007f4624812e61
XMM08=0000000000000000 00007f4624812ee7 XMM09=0000000000000000 00007f4624812fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=ffffffff8b736a01 RBX=ffff88810b00e60c RCX=ffffffff8b736ac9 RDX=0000000000000001
RSI=0000000000000004 RDI=ffffffff9a015440 RBP=0000000000000001 RSP=ffffc9000a416510
R8 =0000000000000003 R9 =0000000000000004 R10=dffffc0000000000 R11=fffffbfff3402a88
R12=0000000000000003 R13=dffffc0000000000 R14=ffff88810b00ea1c R15=ffffc9000a416660
RIP=ffffffff8b736ad0 RFL=00000203 [------C] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c18000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f3034f2dba8 CR3=000000012c15a000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=ffffffffffff0000 0000000000000000
XMM02=ffff000000000000 ffffffffffffffff XMM03=ffffffffffffffff ffffffffffffffff
XMM04=0000000000000000 0000000000000000 XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
