last executing test programs:

2.479570973s ago: executing program 2 (id=6563):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
r2 = socket(0xa, 0x1, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffffff}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x74}}, 0x0)
setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, 0x0, 0x90)
r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000003040), 0xffffffffffffffff)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000003140)={&(0x7f0000003080)={0x28, r4, 0xe6e964277ae08d57, 0x70bd2d, 0x25dfdbfb, {0x2, 0x0, 0x1fff}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x8040000}, 0x40080)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="18020000000000020000000000000000850000001700000095"], &(0x7f00000005c0)='GPL\x00'}, 0x94)
r10 = socket(0x10, 0x802, 0x8)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000005c0)={0x6, 0x4, 0x8, 0x1, 0x80, 0x1, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x50)
sendmsg$IPVS_CMD_SET_INFO(r10, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x8801}, 0x8000)
r11 = socket$netlink(0x10, 0x3, 0x0)
getsockname$packet(r10, &(0x7f0000000600)={0x11, 0x0, <r12=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14)
sendmsg$nl_route(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r12, @ANYBLOB="00001000252155b21c0012000c000100626f6e64"], 0x3c}}, 0x40000)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000001c0)={r9, r8}, 0x14)
sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=r8, @ANYBLOB="46ff0f00000000001c00128009000100626f6e64000000000c000280050001"], 0x3c}, 0x1, 0x0, 0x0, 0x690}, 0x20048040)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'team0\x00', <r13=>0x0})
sendmsg$MPTCP_PM_CMD_GET_ADDR(r2, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x50, r4, 0x400, 0x70bd27, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x5}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x14, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r13}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x81}, 0x400c0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r14=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x2c, r1, 0x5, 0x0, 0x25dfdbff, {{}, {@val={0x8, 0x3, r14}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x0)

2.380966168s ago: executing program 2 (id=6565):
recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000840)=@filter={'filter\x00', 0xe, 0x4, 0x390, 0xffffffff, 0x120, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x318, 0x318, 0x318, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@eui64={{0x28}}, @common=@hl={{0x28}, {0x1, 0x9}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x8, 0x4}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3f0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_LIST(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000070601080000000000000000000000000500010006"], 0x1c}}, 0x4005)
recvmmsg(r2, &(0x7f0000003840)=[{{0x0, 0x0, &(0x7f0000002780)=[{&(0x7f00000002c0)=""/127, 0x7f}, {&(0x7f0000000700)=""/229, 0xe5}, {&(0x7f0000000440)=""/96, 0x60}, {&(0x7f00000004c0)=""/77, 0x4d}, {&(0x7f00000016c0)=""/4096, 0x1000}], 0x5}, 0x1}], 0x1, 0x20, 0x0)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_RELOAD_REGDB(r0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000000}, 0x20008004)
sendmsg$NL802154_CMD_SET_TX_POWER(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYRESOCT, @ANYRES16=0x0, @ANYRES32=0x0, @ANYRESOCT, @ANYRES8=r3, @ANYRES64=r2, @ANYRES16=r1], 0x60}, 0x1, 0x0, 0x0, 0x2000}, 0x0)
r4 = socket(0x8000000010, 0x2, 0x0)
write(r4, &(0x7f00000002c0)="fc0000001c000704ab5b2509b868030002ab087a0100000001481093210001c0f0030584050060100000000000039815fa2c53c28648000000b9d95662537a00bc000c00f0ff7f0000b400600033d44000040560916a0033f436313012dafd5a32e273fc83ab82d710f74cec184406f90d435ef8b29d3ef3d92c94170e5bba2e177312e081bea05d3a021e8ca062914a46ccfc510bb73c9455cdc8363ae4f5df77bc4cfd6239ec2a0f0d1bcae5fa0f5f9dcdd51af51af8502943283f4bb102b2b8f5566791cf190201ded815b2ccd243f395ed94e0ad91bd6433802e0784f2013cd1890058a1", 0xe6)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
sendto$inet(r6, &(0x7f0000000040)='\f\x00', 0xffeb, 0x0, &(0x7f0000000340), 0x10)
ioctl$sock_inet_SIOCSARP(r5, 0x8953, &(0x7f0000000180)={{0x2, 0x0, @empty}, {}, 0x0, {0x440, 0x0, @multicast1=0xe000cc02}})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@newqdisc={0x24, 0x24, 0x8, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x5}, {0xffff, 0xffff}, {0xfff3, 0x6}}}, 0x24}}, 0x8040)
r7 = socket$netlink(0x10, 0x3, 0x0)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r8)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r9, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000880)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a50000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0c000980080001400000000508000840000000011400000011000100"], 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_BATCH(r8, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x8040)
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETSETELEM(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x48080)
recvmmsg(r10, &(0x7f0000001f00)=[{{0x0, 0x0, 0x0}, 0x3}], 0x1, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="740000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b030040000000004c0012800b00010067656e65766500003c0002800800050001000000140007000000000000000005000000000000000108000f"], 0x74}}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0)
sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0)

1.501985916s ago: executing program 0 (id=6569):
socket$inet6_sctp(0xa, 0x5, 0x84) (async)
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) (async)
r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
socket$inet6_sctp(0xa, 0x801, 0x84) (async)
r2 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendto$inet6(r2, &(0x7f00000004c0)="cd6f286d97173e8efaaf8214f91ec1e0d1558a9b68cfbbdb53bdf600000000000000005d5d649638fbd5fa15ca63f62b05ce5189f3b7201f73510a941bed4ae202a0ffe0c694152620f8bd2fc2b9faa8742550c873c400fb865215135e38b88c76ebe83d91a3d3089a1d5a05a8c8d22730c116c56322437db813cb97a48a41b323454170733d53000000d47334223f4c00bd97d85ec6245e05bc25e7297c31e99526064b3b27b59038c65cd23a0ed2255f51be90afce1e1da47cd947bd9191115840069ac0", 0x11, 0x8801, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2}, 0x1c) (async)
sendto$inet6(r2, &(0x7f00000004c0)="cd6f286d97173e8efaaf8214f91ec1e0d1558a9b68cfbbdb53bdf600000000000000005d5d649638fbd5fa15ca63f62b05ce5189f3b7201f73510a941bed4ae202a0ffe0c694152620f8bd2fc2b9faa8742550c873c400fb865215135e38b88c76ebe83d91a3d3089a1d5a05a8c8d22730c116c56322437db813cb97a48a41b323454170733d53000000d47334223f4c00bd97d85ec6245e05bc25e7297c31e99526064b3b27b59038c65cd23a0ed2255f51be90afce1e1da47cd947bd9191115840069ac0", 0x11, 0x8801, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2}, 0x1c)
sendmmsg$inet6(r2, &(0x7f0000003400)=[{{&(0x7f0000000040)={0xa, 0x4e20, 0x8, @private0={0xfc, 0x0, '\x00', 0x1}, 0xff}, 0x1c, &(0x7f0000000400)=[{&(0x7f0000000080)="0f386bb8", 0x4}], 0x1}}], 0x1, 0x4000)
shutdown(r2, 0x1)
setsockopt$inet_sctp6_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0xfffffffe}, 0x14)
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f00000002c0)={"6b2f3b6aff9bc2f1af59106a2a1667f8", 0x0, 0x0, {0x9, 0x9d5f}, {0xd, 0x41}, 0xffff, [0xde99, 0x8e9, 0xc, 0xc4, 0x43, 0xfffffffffffffffb, 0x28, 0x1, 0x7fffffffffffffff, 0x7ffffffffffffffb, 0x9, 0x5, 0x6, 0x8, 0x7, 0x4]})
write$cgroup_subtree(r1, &(0x7f0000000280)=ANY=[], 0x10448)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
connect$bt_l2cap(r3, &(0x7f0000000080)={0x1f, 0x5dd7, @none, 0x7ff, 0x1467797353a10db9}, 0xe)
writev(r3, &(0x7f00000000c0), 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x11fe726f7e78fcf0}, 0x28) (async)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x11fe726f7e78fcf0}, 0x28)
close(0xffffffffffffffff)
write(0xffffffffffffffff, 0x0, 0x0) (async)
write(0xffffffffffffffff, 0x0, 0x0)
r4 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4)
ioctl$sock_bt_bnep_BNEPGETCONNLIST(r4, 0x800442d2, &(0x7f00000000c0)={0x0, 0x0}) (async)
ioctl$sock_bt_bnep_BNEPGETCONNLIST(r4, 0x800442d2, &(0x7f00000000c0)={0x0, 0x0})
setsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000040), 0x4)
sendto$inet6(r0, &(0x7f00000002c0)="03", 0x1, 0x20008840, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010104}, 0x9}, 0x1c)
socket$inet6(0xa, 0x3, 0x2f) (async)
r5 = socket$inet6(0xa, 0x3, 0x2f)
socket(0x10, 0x3, 0xde) (async)
socket(0x10, 0x3, 0xde)
r6 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r7=>0x0})
connect$phonet_pipe(r2, &(0x7f0000000140)={0x23, 0x4, 0x6, 0x1}, 0x10)
setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@loopback, 0x0, 0x0, 0xffff, 0xfffc, 0xa, 0x0, 0x0, 0x0, r7}, {0x0, 0x0, 0x101}, {0x0, 0x3, 0x42}, 0x0, 0x0, 0x2, 0x0, 0x3}, {{@in=@private=0xa010100, 0x0, 0x33}, 0xa, @in6=@empty, 0x34ff, 0x0, 0x0, 0x3, 0x5, 0x0, 0x2}}, 0xe8)
connect$inet6(r5, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) (async)
connect$inet6(r5, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$ipvs(&(0x7f0000007440), 0xffffffffffffffff)
sendmsg$IPVS_CMD_NEW_DAEMON(r8, &(0x7f0000007580)={0x0, 0xfffffffffffffc85, &(0x7f0000007540)={&(0x7f0000000600)=ANY=[@ANYBLOB="50ff12823a993a2ec600d0edb0362c8d0cad7742e94605793a1f642f9c2d943c0b15ce14a8d11402f704b527e68c1d01ec3770e4f310301eedd84b050ef950f2d2e3ea76372a19d93a4091eaa92647b93c82a9d21f910e08d561b374362311668a3ac957bab1e833b1c12d03ecf3b2c1c542a9ca6f3756545f1240593df49d4b6f3f52281249285d575f9d25769ea5e9ac4f470271d360bc0bc04e7e9355a9da97ef725e2e5c260f292d95ceab6df39df3109562acb520b7ba2b89d48535377e794d57d250174e918536514e139c9ab4214e9cec46a34c7be089c4", @ANYRES16=r9, @ANYBLOB="010028bd7000fddbdf25090000003c0003800800010001000000140002006272696467655f736c6176655f300000080003000000000014000600ff010000000000000000000000000001"], 0x50}}, 0x48040)

1.501447747s ago: executing program 2 (id=6570):
socket$inet6_sctp(0xa, 0x5, 0x84)
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000003c0)={0x0, 0xa0, &(0x7f0000000740)=[@in6={0xa, 0x4e22, 0x2, @private2}, @in6={0xa, 0x4e20, 0x3ac9, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7}, @in={0x2, 0x4e22, @broadcast}, @in={0x2, 0x4e24, @multicast2}, @in6={0xa, 0x4e24, 0x7ff, @dev={0xfe, 0x80, '\x00', 0x3a}, 0x3}, @in6={0xa, 0x4e25, 0x6, @private0, 0x6}, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x12}}]}, &(0x7f0000000240)=0x10)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x83, &(0x7f0000000000)=@assoc_value, &(0x7f00000004c0)=0x8)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x28, 0x1, 0x4, 0x101, 0x0, 0x0, {0x1}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_MODE={0xa, 0x2, {0x4, 0x3}}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000010}, 0x800)
socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58)
r3 = accept4(r2, 0x0, 0x0, 0x800)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x24, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x2c}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x4c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
close(0xffffffffffffffff)
r4 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, 0x0, 0x4)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0400001c008102e00f80ecdb4cb9f207c804a00d00000088081afb0a0002000a0ada1b40d80800c500c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000001c0)="00940a37", 0x4)
bpf$BPF_PROG_DETACH(0x9, &(0x7f00000002c0)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB, @ANYRES64=r0, @ANYBLOB, @ANYRES64=0x0], 0x20)
socket$packet(0x11, 0x2, 0x300)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
sendmsg$tipc(r5, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0)
write$cgroup_devices(r5, 0x0, 0x9)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0)
sendto$unix(r3, &(0x7f0000000440)="36d9a32e92c131d730b1abaedb51eb66fd2d5b1f7eda4f0e859fdaf294bad70673813533d8bf1c6a77b65a7afdc01b29e73571071a68d5def5d7df839810da130b9348f4d9d407eb478d5bfb298c552a498271af70914e14ba9476fd2a0e47984c25ea20afab3064a748add27a7149e9c4705475bda2ecec9ec30214f28c5e16fd3f50f604f20232c534409e52bff64fc6ca0f5e254083aec2794b7216e002e87caf3d0fa7d04ff9e3b03e81595a04979594ff6ea888bf13de8e8f74c6178e31e47593732ae1a501ad3641d423195a788efdb643f50a8c8b9794a62f7b8dfa0fa7da9d391b92ce2a7f9fe0f9d584a377", 0xf0, 0x800, 0x0, 0x0)
recvfrom(r3, &(0x7f00000030c0)=""/4117, 0xffffffffffffffbf, 0x1, 0x0, 0xffffffffffffffb5)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$IPVS_CMD_ZERO(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x14, r7, 0x1, 0x80000400, 0x4}, 0x14}}, 0x0)
ioctl$sock_bt_bnep_BNEPCONNADD(r3, 0x400442c8, &(0x7f0000000100)={r6, 0x400, 0x1})
setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xf, &(0x7f0000d10ffc)=0x200, 0x4)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000304000000000000000100000300", @ANYRES32=0x0, @ANYBLOB="680ab00000000000140012800a000100767863616e0000000400028004001a03bf4616a078103c4b1a6dff5b6edc439efd9c5cbf67e59a186fd6df59e056be2eeb052526a3f658dbde0934ca3e5ef97cde60a0dedb666eca6ee68e5e49e9127e10577b5d3138184d2d137a85534e18239e362e2541a5cf1994daa6e6ff131d920ff833a9ea5b9579f7e4cfe67cdf57fc938d710fd929a2c55f0d0cee0d8b6ecedb3dd445603ce616fa642e687a5220ec16690a7a1080541743321349d2cdfd8f54ee292d7c4382e2fb3497ea24e129e98f6d5f344ad6ca8b9c5021fae3"], 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)

1.501057424s ago: executing program 0 (id=6571):
socket$inet_udp(0x2, 0x2, 0x0)
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000001200)={'wlan1\x00', &(0x7f0000001100)=@ethtool_rxnfc={0x2a, 0x8, 0x7e1ab084, {0x3, @usr_ip4_spec={@multicast1, @multicast1, 0x53, 0x7f, 0x1, 0x9}, {0x0, @random="7729ba522e59", 0xa, 0x0, [0x10000, 0x3]}, @hdata="a86b57371eff451fd353517f755532b803741b5b2aade83e68f35d937d79d8993111b4ca75f0612da64df99e636e9cb7eb62b35f", {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 0x9, 0x6, [0x6]}, 0x3, 0x6}}})
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000040000"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x1b, 0x8, &(0x7f0000000040)=ANY=[@ANYRES8=r1, @ANYRES32], &(0x7f0000000700)='syzkaller\x00', 0x6, 0x0, 0x0, 0x40f00, 0x49, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000580)=ANY=[@ANYBLOB="9feb01001800f000000000000000000000000000c9f5cfc6a521d4090000000000005f0500616100552d9972920d989b4a1ef25ed7550c09dea80cd7d76bc4df5e645515559ae7749feccef9c2caf72457e769e8e0018ed5ff374ed5470a011ed529d53144b7b15f0b8cd324a83542e9357041898976bb814b7732f5a48eebb13f086d0be141656e66957998197cf18c99401ba448ace333f6df5c04dda8063ae3aaad5ea085e776700a8db1260b7971b781ccb9cac04b9b7354"], 0x0, 0x21}, 0x28)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r2}, 0xc)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r4 = openat$cgroup_ro(r3, &(0x7f00000002c0)='cgroup.stat\x00', 0x275a, 0xfffe)
preadv(r4, &(0x7f0000001440)=[{0x0}, {&(0x7f0000001480)=""/15, 0xf}], 0x2, 0x0, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="c000000040000701feffffff0000000003000000040042800c00018006000600894f0000970002809470c4b9d425894604f2ef9d2877c76e6cff2cc03746b35836c0acd8948b974978ed58bdf5911ccfaed74609301189929cf0be024fe625adfb8a2230958e80bbcd69193952aff71c16a71b319c97f68d31a04ce3e42faf6f9a9080bc71d6fc8e88a759a2622cf548697149accdc2c647d3d025be3f7e971d8dcc3968e0c25aee12f24713c04065f88e291eec1dc708de4772dc00040008"], 0xc0}, 0x1, 0x0, 0x0, 0x4060814}, 0xc000)
socket$netlink(0x10, 0x3, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
r6 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, 0x0, &(0x7f0000000180))
socket$alg(0x26, 0x5, 0x0)
socket$alg(0x26, 0x5, 0x0)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0)
r7 = socket$inet6_mptcp(0xa, 0x1, 0x106)
connect$inet6(r7, &(0x7f0000000000)={0xa, 0x4001, 0x1, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3d}, 0x1c)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000)
r8 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r8, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88)
setsockopt$inet_MCAST_MSFILTER(r8, 0x0, 0x30, &(0x7f0000000600)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000002000000ffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e20e0000001e6ff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e20e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e210a0101000000000000c300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e21e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e22ac14142000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e24e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e220000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e1f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x590)
close(r8)
close(r7)

1.269420155s ago: executing program 0 (id=6572):
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0) (async)

1.269049127s ago: executing program 0 (id=6573):
getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000100)={<r0=>0x0, 0x9, "43e5d66ce9cf33f142"}, 0x0)
syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f9078640101000000000024806558000000000000000010000800000086dd"], 0x0)
r1 = socket$kcm(0x10, 0x2, 0x10)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYRES64=r1, @ANYRES32=r1, @ANYRESHEX=r2, @ANYRES64=r2, @ANYRES32=r2, @ANYRES64=r1, @ANYRESDEC=r0, @ANYRESDEC=r1, @ANYRES32=r0, @ANYBLOB="7ea44f15c70ea37102cbfa"], 0xe4}}, 0x4044894)
r3 = socket$inet6_sctp(0xa, 0x4, 0x84)
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, &(0x7f00000000c0)={r0, 0x7, 0xfff8}, &(0x7f0000000180)=0x8)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$ARPT_SO_SET_REPLACE(r4, 0x0, 0x60, &(0x7f00000006c0)={'filter\x00', 0x7, 0x4, 0x3e0, 0x100, 0x0, 0x2f8, 0x2f8, 0x2f8, 0x2f8, 0x4, 0x0, {[{{@arp={@multicast1, @remote, 0xffffffff, 0x0, 0xd, 0x4, {@empty, {[0x0, 0x0, 0xff, 0xff, 0x0, 0xff]}}, {@mac, {[0xff, 0x0, 0xff, 0xff, 0x0, 0xff]}}, 0x5, 0xffff, 0x1512, 0x52, 0x1, 0x92f, 'veth1_virt_wifi\x00', 'sit0\x00', {0xff}, {0xff}, 0x0, 0x80}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x44, 0x2, {0xffffffffffffe8d8}}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x1, 0x1}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @broadcast, @loopback, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x430)
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0)

1.137822434s ago: executing program 0 (id=6575):
r0 = socket$inet6(0xa, 0x3, 0x38)
setsockopt$inet6_int(r0, 0x29, 0x7, &(0x7f0000000040)=0xefbe, 0x4)
connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4e24, 0x3, @dev={0xfe, 0x80, '\x00', 0xb}, 0xb}, 0x1c)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0xf338}], 0x1)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'ipvlan0\x00', <r2=>0x0})
r3 = socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x3, 0x0, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="180000002e0001ff070000000000000006"], 0x18}], 0x1, 0x0, 0x0, 0x84}, 0x300)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000000)=ANY=[@ANYBLOB="200000002e00010026bdf000fcdbdf2504"], 0x20}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000)
read(r4, &(0x7f0000000080)=""/38, 0x26)
r6 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000100)={0x20000014})
epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, 0xffffffffffffffff, &(0x7f0000000000)={0xa0000001})
ppoll(&(0x7f0000000980)=[{r6, 0x1}], 0x1, 0x0, 0x0, 0x0)
epoll_wait(r6, 0x0, 0x0, 0xffffffff)
bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6)
r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x2, &(0x7f0000000180)=[{0x1d, 0x5, 0xa, 0x5}, {0xd, 0x85, 0x7, 0x403}]})
bind$bt_hci(r7, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6)
write$bt_hci(r7, &(0x7f0000000040)=ANY=[], 0x6)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000500)=@newlink={0x3c, 0x10, 0x503, 0x70bd2a, 0xc, {0x0, 0x0, 0x0, 0x0, 0x3a, 0x201a8}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}}, 0x800)

580.762535ms ago: executing program 2 (id=6582):
r0 = socket$tipc(0x1e, 0x5, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x160b, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0xd}]}}}, {0x1c, 0x1, 0x0, 0x1, @masq={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_MASQ_REG_PROTO_MIN={0x8, 0x2, 0x1, 0x0, 0xe}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x8c}, 0x1, 0x0, 0x0, 0x850}, 0x0)
bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10)
r2 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(0xffffffffffffffff, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x2, {0x0, 0x1, 0x4}}, 0x10)
sendmsg$tipc(r2, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, &(0x7f0000000340)=[{&(0x7f00000002c0)='/', 0x1}], 0x1, 0x0, 0x0, 0x40}, 0x0)
r3 = accept4(r0, 0x0, 0x0, 0x0)
close(r3)

520.143312ms ago: executing program 2 (id=6584):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000003c0)={<r0=>0xffffffffffffffff})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0x151da000)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2, 0x3032, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0xd, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000041ffffff00000000080000189111ba000000000000000000"], &(0x7f0000000280)='syzkaller\x00', 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9}, 0x94)
r1 = socket(0x2c, 0x3, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="110000000400000004000000ff00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000002000000000000000000000000000000040000098e3a6f8277ca03a1d98aa9a1b07c7f8c201e5fd05e4482b935eece0fa1597e776883659f00fc8ca0211a6f87367128b061b9c4475e3f6ec782b590c989a0dfd71fb7b91d7de84de57b9dce171e5d1e6e352bb115b983456cda08fc884e3c9d1944353"], 0x17)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r2, &(0x7f0000000140), &(0x7f0000000080)=@udp6=r1}, 0x20)
r3 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_tx_ring(r3, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c)
mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r3, 0x0)
r4 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r4, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10)
sendmsg$rds(r4, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000a40)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f00000006c0), 0x0, 0x1000000000000}}, @rdma_dest={0x18, 0x114, 0x2, {0x0, 0x100}}], 0x60}, 0x0)
ioctl(r0, 0x4574f538, &(0x7f0000001640)="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")
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x90)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200))
r5 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r5, &(0x7f00000000c0), 0x10)
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYRES16=r5], 0x448}}, 0x0)
sendmsg$can_bcm(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="050000000808"], 0x80}}, 0x0)
sendmmsg$inet(r5, &(0x7f0000001b00)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)="050000007402b8f4191db62b", 0xc}, {&(0x7f0000000440)="9f336d70bf41f19e47e98b4015e3b0384d86a1ceb4e530554ebc8154bf392bcf9ce0b09f879bd7aaf9d086e3", 0x2c}], 0x2}}, {{0x0, 0x0, &(0x7f0000000100), 0x2}}], 0x40000000000003a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0x7000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
close(r1)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x3, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000002000000000000000008500000061000000850000007d00000095"], &(0x7f0000000200)='GPL\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r6, 0x27, 0x36, 0x0, &(0x7f0000000240)="f80204160000000000007f5386ddb44b501c817ea08344bd8700883df04a3be1e6c808b380f957d8f81905e3d0dd65598770cff05f58", 0x0, 0x4, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50)
mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a01030000000000000000010000000900010073797a3100000000080002400000000154000000030a010200000000000000000100ffff0900030073797a320000000028000480080002400000000008000140000000051400030076657468315f6d6163767461700000000900010073797a310020000038000000050a4f010000000000000000010020000c00024000000000000000010900010073797a31000000000c000480080001400000000514000000110001000000"], 0xdc}}, 0x0)
setsockopt$SO_TIMESTAMPING(r7, 0x1, 0x25, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)

320.437486ms ago: executing program 1 (id=6586):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0) (async)
r2 = socket$unix(0x1, 0x1, 0x0) (async)
unshare(0x20000400)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r3, &(0x7f0000000880)=ANY=[], 0x32600) (async)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) (async)
r4 = socket(0xa, 0x2, 0x0)
getsockopt$sock_buf(r4, 0x1, 0x19, 0x0, &(0x7f0000000280)) (async)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) (async)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020206b1af8ff00000000bfa100000000000007010000f8ffffffb7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0xe, 0xfffffff1, 0x3, 0x2, 0x20200, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x50)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000200)={0x0, r6}, 0x8) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x6, 0x18, &(0x7f0000000840)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x94) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000005"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1a, 0x6c, &(0x7f0000001880)=ANY=[@ANYBLOB="b70000008e000000bca31000000000002403000030feffff720af0ffa4ffffff91a4f0ff000000001f030000000000002e140200000000002604fdffa4ffffff14010000000300001d130000000000007a0a00fe0020001f0f14000000000000b503f7fff80000009500000000000000033bc065b78111c6dfa041b63af4a3912435f1a864a7aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb150c537bf2085651d6dd6ce9bc461e91a7168e5181554a090f300020000fe275daf51efd601b6bf0134c8e8b1b526375ee4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e65440000000000000000028610643a98d9ec21ead2ed51b104d4d91af25b845b9f7d08d123deda88c658d42ecbf28bf7076c15b463bebc72f526dd70252e79166d858fcd0e06dd31af9612fa402d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff61623604000000000000006a89adaf17b0a6041bdeebdfd1f5089048ddff6da40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10076443d643649393bf52d2105bd901128c7e0ec82701c8204a1deeed4136dc2869f478341d02d0f5ad94b081fcd507acb4b9c67382f13d000000225d85ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdbb9893a5de817101ab062cd54e67051d355d84ce97bb0c6b6a595e487a2cc47c0efbb2d71cde2c10f0bc6980fe78683ac5c0c31032599dd273863be9261eee52216d009f4c52048ef8c126aeef5f510a8f1aded94a129e4aec6e8d9ab06faffc3a15d91ff073e2e04cfe031b287539d0540059fe6c7fe7cd8697502c7596566d674e425da5e7f009602a9f61d3804b3e0a1053abdc31282dfb15eb6841bb64a1b3045024a982f3c48153baaa244e7bf573eac34b781337ad5905c6bbf1137548c7f1a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44022a579dfc0229cc0dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc48899b212c55318294270a1ad10c80fef7c24d47afcc829ba0f85da6d888f18ea40ab959f6074ab2a40d85d1501783a7ab51380d7b4ead35a385e0b4a26b7025488316241f64c851a7fe7396df7e0c1e02b88c114f244a9bf93f04bf072f0861f5c0b000000000000eedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba3401e6a52acb11883ad2a3b1832371fe5bc621426d1ed01b389708165b9cdbae2ed9dc7358f0ebadde0b727f27feeb7464dcd857ab15e355713767c536cbae2f5c7d951680f6f2f9a6a8346962a350845ffa0d82884f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010ae20e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa19faf67256b56a41fd355b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ced301efeb6dc5f6a9037d2283c42efc54fa84323afc4c10eff462c8843187f1dd48ef0900000000000000ff0f40b1888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538c6ee6ba65893ff1f908ba7554ba583ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738612e4fee18a22da19fc08001011e32f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e3f753b639a924599c1f69219927ea5301fff0a6063d427180d61542c2571f983e96635600000554f327a3535e7c7542799493c31ac05a7b57f03ca91a01ba2a30c1675767999d146aef7799738b292fd64bb25b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a794963342aece449a0d80010fcdb9913823333a70c2a4ab000000000000003f8dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d12096833d6864da40b54783a17aaeb6737c323f9f98e354cc090000000000000061563e69ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ecab5d232f89fe0120f64c62e8e3ed8bcb45202c204bbec8d722824c0ebca8db1ea4a05e41f6016ab5bbe4fe7ff5d785d0128171c90d9901010000b0f9d01c4b45294fbba468df3e1b393cb4e62e753b4172ba435926b61c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0aa81192292ffff5392ab3d1311b82432662806add87047f601fa888400000000000000000000000000006acc19808d7cf29bc974b0ea92499a41b9b9a7c2bca311a28ee4952f2d325a56397c78f12205db653a536f0100e0eda300a43a13bd1b9f3322405d1efd78e5789c6b3fb84f3738a4b6caa800000087efa51c5d95ecba4e50e529d1e8c89600e809dc3d0a2f65579e23457949a50f2d0455cf79a43746979f99f6a1527f004f1e37a3926937e84fb478199dc1020f4beb98b8074bf7df8b5e783637da740800000000000000c55a4385e9a617aa6c8e10d4202c5afeb06eef98aee88ea12f92d7ae633d44086b3f03b20d546fa66a72e38207c9d20035abc46271a30f1240de52536941242d23896ab74a3c6670fdc49c14f34fc4eadd6db8d80eba439772bf60a1db18c472dafc5569adc282928d2a1ffe29f1a57d3f18f4edaeb5d37918e6fddcd821da67a0785585a4443440dc65600e64a6a274000000000000000000000000000000000000000000000009dd14b38f2f4426d7cf5075047c31f6ce6adddfe3ac649c0643c8bfbeb14ba1fd7a485aa893915cf81e29aaf375e904bbe52691a4100260ffcd8f1d04166d291ebcef893e1b9ccb6797d0646fe0e7274434f28efb43e06ee0ff698caca42f4e6018a455736c482a017e2b13dac4a90faa109f0e87cc94e3efb649692456463ca74aa6ad4bf50c1acb3928143be1c1023a375e528285544d0064b98646f3109e9a4942ce42c6e7ec84b664f6c2770803f10baa804a707f0a1fcbfc309381aeba191950bae71f37f1eb7ceeffb3c0547ac6571603adbfde4c8b5f8d7f4b854441613633b48865b65bdc415e1e0dcf672d68cf4cebf04f4bc1eebf560a26d34d3757b1450fdb0a9a69f432e277f3a0386eb2bd3305c821c64757f786b79fef54dbe64c67d73934bc80b2133fb3c04cc7ea48bf97a6243c9f95dcbddecf45f008f1822c7868e1ff5a3cff5d6b6898335792749df7b1f51e913ac1c3b1b93b33aaa3fab69cef08a9f6f6cf39dea3d878b2ed42545421970cc426e644332bc956d1c6adefdf0ede2c5c94aa632646ae225accdf031f611d01622921f1b922a5ac887cca3136133dce8d9f5f4da7bed2ea5d94362200000000000000000000f296b0c1484e5f781ad26bff696b05ff0a5e2270e07618b04273bd4075ea38ab463bfa6a38e7c537498ba3e4df8dfc9e040000003c3ffad44d2a376def42e41e9fc31678257e040fa7cf32c221aaac08000000000000001a00000000000000000000173570f0c11ae694b0f7a4f9c2f6790044a357e785af6e153d5f1ea460af92c7cbbd6295afe740f5e154346d483e0d641ef02e495295d756e110522a7a945b93fb705b95b6aae27a8fb33732ce1da1c0b1af8eb9222a06e984ab1e6984c8bdc12360627137ab67b6b68ab08acb29a74dc36b51209cfbc87f61182bbeb2772e9d5a1ffc477179be481efe46a4ce86be0b1d8eee42a611a3d44ca450b14586ed63dd92005c79e4a8ab8a94f0c6cb4bed8594a39bd76d3ef8a7ab014e787596db796bd93a36c2880423291e3bccc86f66ba792ff4d87b3f80e5908779e51c5e9055fc5b23605cd000c723187ef09dcf4b07b06a9342f3f62ee7acddff292082c1f4d8eb9561f80873a09a1ae0c9af1121175e5600f43a1179484502009759264a5729f07c2b218fa36ba2316a99aaad0130df83d0bda1e711290f78c143ea143967b00adcd77e6ad5e48d839ea61aadb83e4d071c54691924a3830d3e7b5c198bb0ed623153590000060000000000004b985ea1702f34f2f85b168c083e810ed567e3f1979b9ed1a4bf6a10dac825c96a0828b335de445a4880bb6474157efd1a72ca46ae4cbe3ab648c9bc4867a5a4cb87d7d6d55475b34b3cb6aa9e2337d4e04a37e35109752522ac9b186ddd80c47da6a2f4ef7bb909c97552606ffff97e86dc995604346262a177b06c634969a31b5717c416f8224662f4dd46d6081cb96dd6"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x0, 0x3}, 0x8, 0x10, &(0x7f00000000c0)={0x4}, 0x10}, 0x94) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x15, 0x0, 0x0, 0x0, 0xc000, 0x0, 0x0, 0x0, 0x10048, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x43, @value=r3}, 0x94) (async)
syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0xa, 0x4, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0xb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xbab}, 0x94)
r8 = socket(0x11, 0x3, 0x0)
setsockopt$packet_tx_ring(r8, 0x107, 0xd, &(0x7f0000000000)=@req3={0x10000, 0x1, 0x100, 0x100, 0x100, 0x0, 0x4}, 0x1c) (async)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), 0xffffffffffffffff) (async)
unshare(0x400) (async)
socket$tipc(0x1e, 0x5, 0x0) (async)
r9 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000700)='syz1\x00', 0x200002, 0x0)
openat$cgroup_ro(r9, &(0x7f0000000740)='blkio.bfq.io_serviced\x00', 0x0, 0x0) (async)
r10 = socket(0x1d, 0x2, 0x6)
ioctl$ifreq_SIOCGIFINDEX_vcan(r10, 0x8933, &(0x7f0000000000)={'vxcan0\x00'})

319.780146ms ago: executing program 0 (id=6587):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, 0x0, &(0x7f0000000100))
r1 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r1, &(0x7f0000002c80)={0xa, 0x14e24}, 0x1c)
connect$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c)
recvmmsg(r1, &(0x7f0000005280)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000001d40)=""/61, 0x46}, {0x0, 0x20}], 0x2}, 0x10009}], 0x1, 0x10000, 0x0)
sendmmsg$inet6(r1, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000000)='3', 0x1}, {&(0x7f0000000100)="127d589163267e4b0eda2e4186729989fdd2e24baac09a37b374a16c27a136d37e08121d3864d6559759e5bfba0a1c8b2c7d20228827e09902302ddc29760ee3", 0x40}, {&(0x7f00000001c0)="a786019f", 0x4}], 0x3}}], 0x1, 0x20e8086)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000380)=@generic={&(0x7f0000000300)='./file0\x00', 0x0, 0x18}, 0x18)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x4e}]})
bind$bt_hci(r2, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6)
r3 = socket(0x40000000015, 0x5, 0x0)
connect$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10)
unshare(0x20000400)
bind$inet(r3, 0x0, 0x0)
sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x24008851}, 0x40040)
r4 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000f00)=ANY=[@ANYBLOB="300000001800dd8d0000000000000000020000000000000900000000060015000a0000000c00168008000100bc"], 0x30}}, 0x8041)
sendmmsg$alg(r4, &(0x7f0000000140), 0x4924b68, 0x0)
recvmmsg(r3, &(0x7f0000001740)=[{{0x0, 0x0, 0x0}}], 0x1, 0x10002, 0x0)
poll(&(0x7f00000002c0)=[{r3, 0x8504}], 0x1, 0xfffffffb)
write$bt_hci(r2, &(0x7f0000000000)=ANY=[], 0x6)
sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0x0)

212.261949ms ago: executing program 1 (id=6588):
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) (async)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async)
r1 = socket$unix(0x1, 0x1, 0x0) (async)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c000000020603000000000000000000000000001400078008001240000000000500150002000000050001000600000005000500020000000500040000000000090002"], 0x4c}}, 0x0) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44000}, 0x20040844) (async, rerun: 32)
bpf$PROG_LOAD(0x5, 0x0, 0x0) (async, rerun: 32)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000780)=ANY=[@ANYBLOB="1800000002000000000000000000000095f4c883c1075b9df5428e86dadf4ea731cfa2e6d26dace82e4c94bd235507f06fbd599dea882b205485b556c52890738f4437a8018fc22412816c29387e11084d74f7"], 0x0, 0x6, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) (async, rerun: 32)
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffff7fff}, 0x94) (rerun: 32)
syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) (async, rerun: 64)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) (async, rerun: 64)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a03000000000000000000050000000900010073797a30000000000900030073797a300000000008000c40000000032800048008000240000000120800014000000000140004"], 0xa4}, 0x1, 0x0, 0x0, 0x40}, 0x20000080) (async)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
r5 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt(r5, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8)
setsockopt$inet_sctp6_SCTP_AUTH_KEY(r5, 0x84, 0x17, &(0x7f0000000140)=ANY=[@ANYRES32=0x0, @ANYBLOB="a5b62501b4749071"], 0xc)
setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r5, 0x84, 0x18, &(0x7f0000000400), 0x8)
r6 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) (async)
r7 = socket(0x400000000010, 0x3, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffbffff, {0x0, 0x0, 0x0, r4, {0x0, 0x8}, {0xffff, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x28, 0x2, [@TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME={0xc, 0x8, 0x4}, @TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME_EXTENSION={0xc, 0x9, 0x5}, @TCA_TAPRIO_ATTR_SCHED_BASE_TIME={0xc, 0x3, 0x108}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40001}, 0x10) (async)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
getsockname$packet(r8, &(0x7f0000000000)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000340)=0x14)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r8, 0x89f0, &(0x7f0000000500)={'syztnl1\x00', &(0x7f0000000440)={'syztnl1\x00', r9, 0x80, 0x40, 0xffffffff, 0x7ff, {{0x22, 0x4, 0x2, 0x9, 0x88, 0x67, 0x0, 0xf6, 0x2f, 0x0, @multicast1, @multicast1, {[@cipso={0x86, 0x44, 0x2, [{0x0, 0xf, "a44ad9e563eff3c155df36a37c"}, {0x1, 0x11, "7a1afad85000ec3759ded5627a908f"}, {0x7, 0xf, "d590efb720b6d558d3e914f928"}, {0x1, 0x8, "c25585fe0e0a"}, {0x5, 0x7, "2204229b11"}]}, @timestamp_prespec={0x44, 0x24, 0x54, 0x3, 0x6, [{@multicast1, 0x6}, {@multicast2, 0x84000000}, {@loopback, 0xeb}, {@broadcast, 0x3}]}, @timestamp={0x44, 0xc, 0x8e, 0x0, 0x7, [0x71aa, 0x6]}]}}}}}) (async)
write$cgroup_int(r8, &(0x7f0000000200), 0xffffffc1) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r8, 0x0) (async)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r8, 0x0, 0xb3, 0xab, &(0x7f0000000080)="13a9c9b7aaa831f75db47ddadaf4dd4288a274f543a3f12e975916c795878baa70132b7b9e2a76bb795625936cbd03fb0b18157fe04c9ec203ae1efa7a2747574dfcd71824b5156579636789b59a26ed9fca575907f0315af09ba37bf6499b3c69f336c917708a835cfa5333b89ea81cfd72e52b7c9dce0c0199218ac82de9d59e77e674ea81bd445ce5b0b5d91e3fc8237be1f14d646e312da8fc87326246fdad85db8db3cf78d5e1d14f08dcae4636a94c14", &(0x7f0000000140)=""/171, 0x2, 0x0, 0xe0, 0x27, &(0x7f0000000200)="9924e98e24b291c44ad229d4c623a63388f4ee17cb37c6512c9eebdc33190501fe83bdbe74552940bfec4b207a7851e8befd951f14ea431998e76f4a7f3cf5190e05366b80eef17c5f6269ee08b24da4a965e04f627389342198081e846333c633a0099ca0ae4a804f5c960bb8cedb6a2a9f1ce6415853b9e691535c91a7b5bfe43644ac8dc03a480d43b540422f184c1de4d150422da7cef5daa460fb8786b24d0266d31bde23f6a6f996a159204ecd297900cdada7cb1e2acb1e9b2ee8c8fa12fef5b45ab2d5b3171e5504a097bd0fe551f21de64a5a4c0dfa440b814b9af8", &(0x7f0000000300)="b940e7a09764696841c8300c69e5df256994dd4bb1007fcc3386eff968b35102784d2f9acd6dd3", 0x4, 0x0, 0xf7}, 0x50) (async)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)

152.411274ms ago: executing program 1 (id=6589):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x13, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000000000000000400000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000089000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000f8ffff850000000400000095"], &(0x7f0000000100)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x11}, 0x94)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)='%-010d \x00'}, 0x20)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, <r1=>0xffffffffffffffff}, 0x4)
r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000180)={0x120, 0x1f, 0x1, 0x0, 0x0, "", [@nested={0x110, 0x0, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @u64=0x4}, @generic="0926b3eb9e87f8c8b3a6caa09a1a38d124a173def80bde05b592a5f49cb8056fef80a90fc8c487e1b6004db5feaf0d98b43fc34265f6f01ce7fed79fa135fe637b9fdc8c89e7777e70aecc0b9c372af84eb990d7d32d6c563a42d4889ed3925ac319f32db2703ff85c5b143715d335c94f3fd06ba27da8f5fe0788f669730c4358c2be63e25072bf", @typed={0x8, 0x96, 0x0, 0x0, @fd=r2}, @nested={0x65, 0xf1, 0x0, 0x1, [@typed={0x14, 0x64, 0x0, 0x0, @ipv6=@empty}, @generic="741194f25eec40f4e2ba2a00d51d6b66e9d985c86f6af8d238212a3fde4b46e23817e54664da29c4693e5eb2b5492c0a116d51211a8c40bf30dcd91e7d481e5a467f1ef9da", @typed={0x8, 0x108, 0x0, 0x0, @u32=0x180000}]}, @typed={0x8, 0xc3, 0x0, 0x0, @fd}]}]}, 0x120}], 0x1, 0x0, 0x0, 0x20000080}, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f00000008c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000d49d80007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000007c0)={r3}, 0xc)
r4 = socket$nl_route(0x10, 0x3, 0x0)
getsockopt$bt_l2cap_L2CAP_OPTIONS(r4, 0x6, 0x1, &(0x7f0000000000), &(0x7f0000000040)=0xc)
sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB="40000000100039042cfd7c00eaffffff000003e4", @ANYRES32=0x0, @ANYBLOB="03000000c31006002000128008000100736974001400028008000300ac14140006000e0040000000"], 0x40}}, 0x0)

55.006217ms ago: executing program 1 (id=6590):
r0 = socket(0x10, 0x3, 0x0)
bind$netlink(r0, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc)
write(r0, &(0x7f0000000140)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) (async)
connect$netlink(r0, &(0x7f00000005c0)=@proc={0x10, 0x0, 0x1}, 0xc) (async)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$ETHTOOL_MSG_LINKMODES_GET(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x2c, r1, 0x301, 0x70bd29, 0x25dfdbfc, {0x24}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8041}, 0x0)
setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f0000b4bffc)=0x208, 0x4) (async)
write(r0, &(0x7f0000000000)='\"', 0x1) (async)
r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x10, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@alu={0x7, 0x0, 0x0, 0x9, 0x0, 0x0, 0x10}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x1, 0xff3, &(0x7f0000001cc0)=""/4083, 0x41100, 0x5}, 0x94) (async)
recvmmsg(r0, &(0x7f0000000780), 0x3ffffffffffff81, 0x2, 0x0) (async)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r0)

53.455617ms ago: executing program 1 (id=6591):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, 0x0, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000)
sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xb}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}}, 0x40)
sendmsg$NFT_BATCH(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x94, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x6c, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x6}, @NFTA_XFRM_DIR={0x5}, @NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_XFRM_KEY={0x8}, @NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x3}]}}}, {0x2c, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_CMP_DATA={0xc, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, "ac"}]}, @NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_CMP_OP={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x108}, 0x1, 0x0, 0x0, 0x4}, 0x40050)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r1, <r6=>0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000300)=r2}, 0x20)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r6, &(0x7f0000000580), &(0x7f0000000080)=@udp6, 0x1}, 0x20)
sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003e40)=@newtaction={0x44, 0x32, 0xffff, 0x0, 0x0, {}, [{0x30, 0x1, [@m_ife={0x2c, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc, 0x7, {0x40000000}}, {0xc}}}]}]}, 0x44}}, 0x0)

53.041023ms ago: executing program 2 (id=6592):
r0 = socket$alg(0x26, 0x5, 0x0)
ioctl$AUTOFS_IOC_ASKUMOUNT(r0, 0x80049370, &(0x7f0000000300))
bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
r1 = accept4(r0, 0x0, 0x0, 0x80000)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0xffffffffffffff20}, 0x48)
sendmmsg$unix(r1, &(0x7f0000003dc0)=[{{&(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x9802}}, {{&(0x7f0000000280)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}], 0x299, 0xfdef)
r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
unshare(0x24020400)
ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0)
ioctl$OCFS2_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000340)={0x2, 0x1, 0x1, 0x8, 0x1})
r3 = socket$alg(0x26, 0x5, 0x0)
r4 = socket$inet_mptcp(0x2, 0x1, 0x106)
getsockopt$inet_tcp_buf(r4, 0x6, 0xd, 0x0, 0x0)
setsockopt$inet_int(r4, 0x0, 0x18, 0x0, 0x0)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r5)
sendmsg$IEEE802154_START_REQ(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)={0x14, r6, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x18005}, 0x0)
bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5)
r7 = accept4(r3, 0x0, 0x0, 0x800)
sendmmsg$alg(r7, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYRES64=r5, @ANYRESHEX=r0, @ANYRESOCT=r1], 0x28}, 0x1, 0x0, 0x0, 0x4008000}, 0x4800)

0s ago: executing program 1 (id=6593):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x83, 0x0, &(0x7f0000000300)) (async)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, 0x0, &(0x7f0000000100)) (async)
r2 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r2, &(0x7f0000002c80)={0xa, 0x14e24}, 0x1c)
connect$inet6(r2, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) (async)
recvmmsg(r2, &(0x7f0000005280)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000001d40)=""/61, 0x46}, {0x0, 0x20}], 0x2}, 0x10009}], 0x1, 0x10000, 0x0)
sendmmsg$inet6(r2, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000000)='3', 0x1}, {&(0x7f0000000100)="127d589163267e4b0eda2e4186729989fdd2e24baac09a37b374a16c27a136d37e08121d3864d6559759e5bfba0a1c8b2c7d20228827e09902302ddc29760ee3", 0x40}, {&(0x7f00000001c0)="a786019f", 0x4}], 0x3}}], 0x1, 0x20e8086)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000380)=@generic={&(0x7f0000000300)='./file0\x00', 0x0, 0x18}, 0x18) (async)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x4e}]}) (async)
bind$bt_hci(r3, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async)
r4 = socket(0x40000000015, 0x5, 0x0)
connect$inet(r4, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10)
unshare(0x20000400) (async)
r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r4) (async)
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000000c0)={<r6=>0x0, @empty, @empty}, &(0x7f00000003c0)=0xc)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x3, 0x3, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x69, 0x11, 0x73}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r6}, 0x94) (async)
r7 = socket(0x400000000010, 0x3, 0x0)
r8 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000640)=@newtfilter={0x3c, 0x2c, 0xd3f, 0x30bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0xb, 0xfff3}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0x6, 0x13}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0)
sendmsg$ETHTOOL_MSG_CHANNELS_GET(r4, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x68, r5, 0x200, 0x70bd25, 0x25dfdbfb, {}, [@HEADER={0x4}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x40804}, 0x4) (async)
bind$inet(r4, 0x0, 0x0)
recvmmsg(r4, &(0x7f0000001740)=[{{0x0, 0x0, 0x0}}], 0x1, 0x10002, 0x0)
poll(&(0x7f00000002c0)=[{r4, 0x8504}], 0x1, 0xfffffffb)
write$bt_hci(r3, &(0x7f0000000000)=ANY=[], 0x6)
sendmmsg(r2, &(0x7f00000092c0), 0x4ff, 0x0)

kernel console output (not intermixed with test programs):

'syz.1.5020': attribute type 1 has an invalid length.
[  533.223717][T25259] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  533.299472][T25266] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  533.303949][T25266] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  533.312608][T25266] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  533.330752][T25270] pimreg: entered allmulticast mode
[  534.032941][T25293] netlink: 'syz.0.5032': attribute type 11 has an invalid length.
[  534.178839][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  534.395974][T25314] netlink: 'syz.0.5037': attribute type 3 has an invalid length.
[  534.630271][T25328] Bluetooth: MGMT ver 1.23
[  534.845964][T25343] tipc: Enabling of bearer <udp:s> rejected, already enabled
[  534.956137][T25355] netlink: 'syz.1.5048': attribute type 1 has an invalid length.
[  535.221864][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  535.255684][T25354] veth41: entered promiscuous mode
[  535.327888][T25366] netlink: 'syz.0.5050': attribute type 13 has an invalid length.
[  535.332144][T25367] netlink: 'syz.0.5050': attribute type 13 has an invalid length.
[  535.486349][T25373] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode
[  535.489458][T25373] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode
[  535.523050][T25378] tc_dump_action: action bad kind
[  535.791317][T25381] aD: Caught tx_queue_len zero misconfig
[  536.248962][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  536.474381][T25396] __nla_validate_parse: 15 callbacks suppressed
[  536.474394][T25396] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5057'.
[  536.481186][T25396] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5057'.
[  536.484660][T25396] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5057'.
[  536.487517][T25396] unsupported nla_type 216
[  536.489507][T25397] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5056'.
[  536.497175][T25397] veth0_macvtap: left promiscuous mode
[  536.547488][T25403] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5056'.
[  536.650616][T25410] syzkaller0: entered promiscuous mode
[  536.652440][T25410] syzkaller0: entered allmulticast mode
[  536.752694][T25412] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5061'.
[  536.835357][T25417] syzkaller0: entered promiscuous mode
[  536.837379][T25417] syzkaller0: entered allmulticast mode
[  536.923210][T19036] Bluetooth: hci2: link tx timeout
[  536.925554][T19036] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa
[  537.010557][T25423] netlink: 'syz.2.5066': attribute type 10 has an invalid length.
[  537.298592][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  538.338658][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  538.535353][T25429] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5068'.
[  538.555921][T25429] netlink: 'syz.1.5068': attribute type 1 has an invalid length.
[  538.600253][T25429] bond57: entered promiscuous mode
[  538.601962][T25429] bond57: entered allmulticast mode
[  538.623493][T25429] 8021q: adding VLAN 0 to HW filter on device bond57
[  538.636100][T25432] netlink: 76 bytes leftover after parsing attributes in process `syz.2.5069'.
[  538.722137][T25438] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  538.738388][T25438] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  538.746722][T25438] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  538.753597][T25438] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  538.897749][T25446] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5074'.
[  538.939093][T25449] mac80211_hwsim hwsim3 syzkaller0: Caught tx_queue_len zero misconfig
[  538.979441][ T5612] Bluetooth: hci2: command 0x0405 tx timeout
[  539.012093][T25454] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5077'.
[  539.368931][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  539.535216][T25484] lo speed is unknown, defaulting to 1000
[  539.639539][T25484] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  540.408977][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  541.448567][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  542.488800][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  542.793428][T25502] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  542.850710][T25531] __nla_validate_parse: 65 callbacks suppressed
[  542.850724][T25531] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5097'.
[  542.882250][T25533] SET target dimension over the limit!
[  542.886925][T25533] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5096'.
[  542.890403][T25533] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5096'.
[  542.926262][T25540] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5099'.
[  542.940961][T25540] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5099'.
[  542.943699][T25540] netlink: 348 bytes leftover after parsing attributes in process `syz.1.5099'.
[  542.946468][T25540] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5099'.
[  542.959305][T25540] netlink: 348 bytes leftover after parsing attributes in process `syz.1.5099'.
[  542.962610][T25540] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5099'.
[  543.017653][T25555] netlink: 'syz.1.5102': attribute type 12 has an invalid length.
[  543.022053][T25557] netlink: 'syz.1.5102': attribute type 12 has an invalid length.
[  543.528664][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  543.711149][T25599] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported
[  543.828987][T25610] netlink: 'syz.2.5110': attribute type 3 has an invalid length.
[  543.831567][T25610] netlink: 224 bytes leftover after parsing attributes in process `syz.2.5110'.
[  544.115423][T25612] bridge27: entered promiscuous mode
[  544.117845][T25612] bridge27: entered allmulticast mode
[  544.201327][T25612] bridge27: entered promiscuous mode
[  544.203167][T25612] bridge27: entered allmulticast mode
[  544.254855][T25626] bridge0: entered allmulticast mode
[  544.568936][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  544.756639][T25655] netem: change failed
[  544.816662][T25661] bond0: option arp_all_targets: invalid value (8)
[  544.857857][T25663] netlink: 'syz.1.5123': attribute type 1 has an invalid length.
[  544.871710][T25663] 8021q: adding VLAN 0 to HW filter on device bond58
[  545.012405][T25680] x_tables: ip_tables: osf match: only valid for protocol 6
[  545.122363][T25687] bridge20: entered promiscuous mode
[  545.124165][T25687] bridge20: entered allmulticast mode
[  545.127552][T25687] team0: Port device bridge20 added
[  545.134859][T25691] bridge21: entered promiscuous mode
[  545.136663][T25691] bridge21: entered allmulticast mode
[  545.144366][T25691] team0: Port device bridge21 added
[  545.154161][T25687] bridge22: entered promiscuous mode
[  545.156160][T25687] bridge22: entered allmulticast mode
[  545.159964][T25687] team0: Port device bridge22 added
[  545.162637][T25687] bridge0: port 1(team0) entered blocking state
[  545.164854][T25687] bridge0: port 1(team0) entered disabled state
[  545.167011][T25687] team0: entered allmulticast mode
[  545.170191][T25687] team0: left allmulticast mode
[  545.172360][T25691] bridge0: port 1(team0) entered blocking state
[  545.175260][T25691] bridge0: port 1(team0) entered disabled state
[  545.177430][T25691] team0: entered allmulticast mode
[  545.181041][T25691] team0: left allmulticast mode
[  545.182998][T25692] syzkaller0: entered promiscuous mode
[  545.184956][T25692] syzkaller0: entered allmulticast mode
[  545.236151][T25694] syzkaller1: entered promiscuous mode
[  545.237973][T25694] syzkaller1: entered allmulticast mode
[  545.285388][T25696] netlink: 'syz.1.5134': attribute type 4 has an invalid length.
[  545.292245][T25696] netlink: 'syz.1.5134': attribute type 4 has an invalid length.
[  545.296414][T11938] lo speed is unknown, defaulting to 1000
[  545.298301][T11938] sy2: Port: 1 Link ACTIVE
[  545.376726][ T8004] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  545.380552][T11938] lo speed is unknown, defaulting to 1000
[  545.381445][ T8004] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  545.382862][T11938] sy2: Port: 1 Link DOWN
[  545.393964][ T8004] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  545.403164][ T8004] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  545.407768][T25699] openvswitch: netlink: Message has 4 unknown bytes.
[  545.423479][T25699] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  545.522513][T25715] bond49: (slave team_slave_1): Releasing backup interface
[  545.527202][T25715] team_slave_1: left allmulticast mode
[  545.532010][T25715] bond47: (slave batadv4): Releasing active interface
[  545.535496][T25715] bond50: (slave batadv5): Releasing active interface
[  545.541921][T25715] bond53: (slave vti1): Releasing backup interface
[  545.546278][T25715] vti1: left promiscuous mode
[  545.550530][T25715] bond54: (slave geneve8): Releasing active interface
[  545.556414][T25715] bond55: (slave bridge0): Releasing backup interface
[  545.559484][T25715] bridge0: left promiscuous mode
[  545.562155][T25715] bridge0: left allmulticast mode
[  545.618612][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  545.667674][T25733] netlink: 'syz.0.5145': attribute type 1 has an invalid length.
[  545.702794][T25733] 8021q: adding VLAN 0 to HW filter on device bond56
[  545.904551][T25756] netlink: 'syz.2.5152': attribute type 1 has an invalid length.
[  546.146626][T25775] syzkaller1: entered promiscuous mode
[  546.149129][T25775] syzkaller1: entered allmulticast mode
[  546.206955][T25775] 8021q: adding VLAN 0 to HW filter on device bond66
[  546.221370][T25775] bond66 (unregistering): Released all slaves
[  546.306611][T25775] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1806) !
[  546.649289][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  547.690416][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  548.738897][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  549.156693][T25777] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  549.160828][T25786] netlink: 'syz.0.5160': attribute type 1 has an invalid length.
[  549.263572][T25802] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold
[  549.314612][T25804] __nla_validate_parse: 12 callbacks suppressed
[  549.314630][T25804] netlink: 52 bytes leftover after parsing attributes in process `syz.2.5164'.
[  549.351757][T25806] netlink: 'syz.2.5165': attribute type 28 has an invalid length.
[  549.354185][T25806] netlink: 'syz.2.5165': attribute type 3 has an invalid length.
[  549.356778][T25806] netlink: 132 bytes leftover after parsing attributes in process `syz.2.5165'.
[  549.390528][T25808] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5166'.
[  549.461928][T25809] lo speed is unknown, defaulting to 1000
[  549.768749][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  550.114033][T25813] netlink: 876 bytes leftover after parsing attributes in process `syz.1.5167'.
[  550.129267][T25813] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5167'.
[  550.344560][T25828] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5172'.
[  550.351934][T25826] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5171'.
[  550.361446][T25826] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5171'.
[  550.366801][T25826] netlink: 348 bytes leftover after parsing attributes in process `syz.2.5171'.
[  550.370232][T25826] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5171'.
[  550.396062][T25828] syzkaller1: entered promiscuous mode
[  550.400286][T25828] syzkaller1: entered allmulticast mode
[  550.410288][T25830] syzkaller0: entered promiscuous mode
[  550.413551][T25830] syzkaller0: entered allmulticast mode
[  550.552101][T25841] netlink: 'syz.0.5177': attribute type 1 has an invalid length.
[  550.570037][T25841] 8021q: adding VLAN 0 to HW filter on device bond57
[  550.595144][T25841] bond57: (slave batadv6): Opening slave failed
[  550.622185][T25849] set match dimension is over the limit!
[  550.738832][   T34] audit: type=1804 audit(1780025201.201:15): pid=25861 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.5181" name="/newroot/1624/cgroup.controllers" dev="tmpfs" ino=8282 res=1 errno=0
[  550.756915][   T34] audit: type=1800 audit(1780025201.221:16): pid=25861 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.5181" name="cgroup.controllers" dev="tmpfs" ino=8282 res=0 errno=0
[  550.764265][   T34] audit: type=1800 audit(1780025201.221:17): pid=25861 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.5181" name="cgroup.controllers" dev="tmpfs" ino=8282 res=0 errno=0
[  550.817376][T25865] syzkaller0: entered promiscuous mode
[  550.819056][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  550.820404][T25865] syzkaller0: entered allmulticast mode
[  550.832323][T25867] netlink: 'syz.0.5184': attribute type 1 has an invalid length.
[  550.836749][T25865] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  550.891652][T25867] bond58: entered promiscuous mode
[  550.894199][T25867] 8021q: adding VLAN 0 to HW filter on device bond58
[  550.915475][T25868] bond58: (slave bridge0): making interface the new active one
[  550.918683][T25868] bridge0: entered promiscuous mode
[  550.921817][T25868] bond58: (slave bridge0): Enslaving as an active interface with an up link
[  550.944382][T25870] bond58: (slave bridge40): Enslaving as a backup interface with an up link
[  551.051899][T25874] nbd: must specify a size in bytes for the device
[  551.273876][T25885] bond59 (unregistering): Released all slaves
[  551.304545][T25889] ip6erspan0: entered allmulticast mode
[  551.306946][T25889] ip6erspan0: left allmulticast mode
[  551.386089][T25895] netlink: 'syz.0.5194': attribute type 4 has an invalid length.
[  551.848598][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  551.877283][T25928] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  551.929326][T25953] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[  552.143050][T25974] ip6tnl0: Caught tx_queue_len zero misconfig
[  552.278226][T25991] nbd: socks must be embedded in a SOCK_ITEM attr
[  552.432609][T26000] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  552.555879][T26018] netlink: 'syz.1.5219': attribute type 1 has an invalid length.
[  552.571358][T26020] Cannot find add_set index 1 as target
[  552.578852][T26020] netlink: 'syz.0.5218': attribute type 1 has an invalid length.
[  552.595039][T26018] 8021q: adding VLAN 0 to HW filter on device bond59
[  552.618886][T26020] 8021q: adding VLAN 0 to HW filter on device bond59
[  552.623610][T26018] 8021q: adding VLAN 0 to HW filter on device macvlan0
[  552.629798][T26018] bond59: (slave macvlan0): making interface the new active one
[  552.635379][T26018] bond59: (slave macvlan0): Enslaving as an active interface with an up link
[  552.696110][T26025] openvswitch: netlink: VXLAN extension 307 out of range max 1
[  552.732089][T19036] Bluetooth: hci2: command 0x0405 tx timeout
[  552.845879][T26040] ip6_vti0: left promiscuous mode
[  552.851682][T26040] mac80211_hwsim hwsim4 syzkaller0: left promiscuous mode
[  552.854587][T26040] mac80211_hwsim hwsim4 syzkaller0: left allmulticast mode
[  552.857888][T26040] mac80211_hwsim hwsim13 wlan0: left promiscuous mode
[  552.861880][T26040] mac80211_hwsim hwsim13 wlan0: left allmulticast mode
[  552.865358][T26040] vti2: left promiscuous mode
[  552.867325][T26040] vti2: left allmulticast mode
[  552.871064][T26040] bond38: left promiscuous mode
[  552.873383][T26040] vlan6: left allmulticast mode
[  552.875856][T26040] bond38: left allmulticast mode
[  552.879834][T26040] veth33: left promiscuous mode
[  552.882334][T26040] macsec2: left promiscuous mode
[  552.885485][T26040] macvlan5: left promiscuous mode
[  552.887764][T26040] macvlan5: left allmulticast mode
[  552.890536][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  552.899952][T26040] erspan2: left promiscuous mode
[  552.901623][T26040] erspan2: left allmulticast mode
[  552.903563][T26040] bond62: left promiscuous mode
[  552.905228][T26040] bond63: left promiscuous mode
[  552.907399][T26040] xfrm0: left allmulticast mode
[  552.910689][T26043] netlink: 'syz.2.5225': attribute type 1 has an invalid length.
[  552.914230][T26040] bridge20: left promiscuous mode
[  552.915971][T26040] bridge20: left allmulticast mode
[  552.920654][T26040] bridge21: left promiscuous mode
[  552.922801][T26040] bridge21: left allmulticast mode
[  552.926738][T26040] bridge22: left promiscuous mode
[  552.929219][T26040] bridge22: left allmulticast mode
[  552.973756][T26040] gretap4: entered allmulticast mode
[  552.986618][T26040] bond68: (slave gretap4): making interface the new active one
[  552.997431][T26040] bond68: (slave gretap4): Enslaving as an active interface with an up link
[  553.051136][T26052] batadv_slave_0: Caught tx_queue_len zero misconfig
[  553.056379][T26052] netlink: 'syz.0.5229': attribute type 1 has an invalid length.
[  553.928992][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  554.968747][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  555.368862][ T5612] Bluetooth: hci2: command 0x0405 tx timeout
[  556.008849][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  556.260615][T26074] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  556.382347][T26095] geneve6: entered promiscuous mode
[  556.385330][ T6295] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  556.388154][ T6295] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  556.391329][ T6295] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  556.394111][ T6295] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  556.438152][T26097] validate_nla: 3 callbacks suppressed
[  556.438170][T26097] netlink: 'syz.1.5242': attribute type 13 has an invalid length.
[  556.449376][T26097] netlink: 'syz.1.5242': attribute type 17 has an invalid length.
[  556.475287][T26097] 8021q: adding VLAN 0 to HW filter on device 
[  556.483307][T26097] 8021q: adding VLAN 0 to HW filter on device batadv0
[  556.491909][T26097] wireguard: wg0: Could not create IPv4 socket
[  556.500583][T19913] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  556.505400][T26097] A link change request failed with some changes committed already. Interface wg0 may have been left with an inconsistent configuration, please check.
[  556.517227][   T33] lo speed is unknown, defaulting to 1000
[  556.524553][   T33] sy2: Port: 1 Link ACTIVE
[  556.572692][T26105] __nla_validate_parse: 163 callbacks suppressed
[  556.572731][T26105] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5244'.
[  556.581512][T26105] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5244'.
[  556.631504][T26119] netlink: 'syz.0.5247': attribute type 2 has an invalid length.
[  556.680086][   T33] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  556.725405][T26129] netlink: 'syz.2.5248': attribute type 3 has an invalid length.
[  556.731379][T26129] netlink: 224 bytes leftover after parsing attributes in process `syz.2.5248'.
[  557.049854][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  557.130802][ T6295] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  557.134246][ T6295] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  557.264958][T26133] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5251'.
[  557.273103][T26133] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5251'.
[  557.329175][T11938] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  558.088740][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  558.728726][ T5612] Bluetooth: hci2: command 0x0405 tx timeout
[  559.128882][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  559.651312][T26129] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  559.881317][T26160] netlink: 'syz.2.5258': attribute type 2 has an invalid length.
[  559.885407][T26160] netlink: 'syz.2.5258': attribute type 2 has an invalid length.
[  560.168815][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  561.208666][    C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  561.218742][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  561.257404][T26212] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5270'.
[  561.264172][T26207] ip6tnl7: entered allmulticast mode
[  561.341295][T26216] netlink: 56 bytes leftover after parsing attributes in process `syz.0.5271'.
[  561.406735][T26224] hmac(sh: entered promiscuous mode
[  561.510989][   T56] block nbd0: Receive control failed (result -32)
[  561.516708][T26231] bond60: invalid ARP target 0.0.0.0 specified for addition
[  561.519221][T26231] bond60: option arp_ip_target: invalid value (0)
[  561.525123][T26231] bond60 (unregistering): Released all slaves
[  562.248734][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  562.369947][T26243] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  562.496708][T26271] tipc: Failed to remove unknown binding: 66,1,1/2679073657:3148940668/3148940670
[  562.556829][T26275] tipc: Failed to remove unknown binding: 66,1,1/2679073657:3148940668/3148940670
[  562.561288][T26275] tipc: Failed to remove unknown binding: 66,1,1/2679073657:3148940668/3148940670
[  562.567241][T26277] openvswitch: netlink: Unexpected mask (mask=100000000, allowed=10048)
[  562.587815][T26279] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5286'.
[  562.673909][T26286] mac80211_hwsim hwsim4 syzkaller0: entered promiscuous mode
[  562.676866][T26286] mac80211_hwsim hwsim4 syzkaller0: entered allmulticast mode
[  562.682731][T26285] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5289'.
[  562.754152][T26295] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5292'.
[  562.779480][T26295] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5292'.
[  562.840669][T26302] bond60: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0)
[  562.846174][T26302] bond60 (unregistering): Released all slaves
[  562.860715][T26299] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5294'.
[  562.864490][T26299] netlink: 'syz.2.5294': attribute type 1 has an invalid length.
[  562.926768][T26309] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5296'.
[  563.161255][T26323] netlink: 'syz.0.5299': attribute type 16 has an invalid length.
[  563.164106][T26323] netlink: 'syz.0.5299': attribute type 17 has an invalid length.
[  563.203391][T26323] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  563.288858][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  563.383025][T26329] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5302'.
[  563.609801][T26341] openvswitch: netlink: Unexpected mask (mask=201040, allowed=10048)
[  563.614507][T26341] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5305'.
[  563.837424][T26353] syzkaller1: entered promiscuous mode
[  563.839816][T26353] syzkaller1: entered allmulticast mode
[  563.846291][T26353] mac80211_hwsim hwsim4 syzkaller0: left promiscuous mode
[  563.850072][T26353] mac80211_hwsim hwsim4 syzkaller0: left allmulticast mode
[  563.870622][T26353] gretap4: left allmulticast mode
[  563.875386][T26353] geneve6: left promiscuous mode
[  563.878395][T26353] ip6tnl7: left allmulticast mode
[  563.886571][T26353] syzkaller1: left promiscuous mode
[  563.888299][T26353] syzkaller1: left allmulticast mode
[  563.893389][ T6295] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  563.896898][ T6295] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  563.900820][ T6295] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  563.904396][ T6295] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  563.907085][T26353] sch_tbf: burst 0 is lower than device ip6gre0 mtu (32769) !
[  564.094295][T26359] netlink: 'syz.2.5311': attribute type 4 has an invalid length.
[  564.121547][T26361] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5312'.
[  564.147411][T26363] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5313'.
[  564.151131][T26363] netlink: 'syz.2.5313': attribute type 15 has an invalid length.
[  564.192919][T26363] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks
[  564.196876][T26363] netlink: 'syz.2.5313': attribute type 58 has an invalid length.
[  564.328699][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  564.419880][T26377] nbd: device at index 64 is going down
[  564.533245][T26385] syzkaller1: entered promiscuous mode
[  564.535530][T26385] syzkaller1: entered allmulticast mode
[  565.365387][T26404] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  565.369186][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  565.456537][T26410] 8021q: adding VLAN 0 to HW filter on device bond60
[  565.760831][T26427] netlink: 'syz.1.5326': attribute type 1 has an invalid length.
[  565.770762][T26427] netlink: 'syz.1.5326': attribute type 1 has an invalid length.
[  566.033475][T26449] tipc: Failed to remove unknown binding: 66,0,0/1567522023:118915148/118915151
[  566.036965][T26449] tipc: Failed to remove unknown binding: 66,0,0/1567522023:118915148/118915150
[  566.040992][T26449] tipc: Failed to remove unknown binding: 66,0,0/1567522023:118915148/118915149
[  566.044495][T26448] tipc: Failed to remove unknown binding: 66,0,0/1567522023:118915148/118915151
[  566.048092][T26444] veth43: entered allmulticast mode
[  566.048755][T26448] tipc: Failed to remove unknown binding: 66,0,0/1567522023:118915148/118915150
[  566.052849][T26444] bond61: (slave veth43): Enslaving as an active interface with an up link
[  566.056325][T26448] tipc: Failed to remove unknown binding: 66,0,0/1567522023:118915148/118915149
[  566.179013][T26461] tap0: tun_chr_ioctl cmd 1074025677
[  566.187122][T26461] tap0: linktype set to 773
[  566.408898][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  566.443502][T26482] 8021q: adding VLAN 0 to HW filter on device bond62
[  566.511796][T26486] macvlan1: entered promiscuous mode
[  566.513556][T26486] bond62: entered promiscuous mode
[  566.515500][T26486] macvlan1: entered allmulticast mode
[  566.517568][T26486] bond62: entered allmulticast mode
[  566.520123][T26486] 8021q: adding VLAN 0 to HW filter on device macvlan1
[  567.353539][T26529] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  567.393603][T26529] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  567.438066][T26529] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  567.458844][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  567.473257][T26529] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  567.534956][   T13] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  567.550315][ T8004] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  567.560300][ T8004] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  567.567905][ T8004] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  567.720158][T26539] netlink: 'syz.0.5356': attribute type 13 has an invalid length.
[  567.723175][T26540] netlink: 'syz.0.5356': attribute type 13 has an invalid length.
[  567.769302][T26539] mac80211_hwsim hwsim3 syzkaller0: Caught tx_queue_len zero misconfig
[  567.961755][T26552] netlink: 'syz.1.5360': attribute type 1 has an invalid length.
[  567.967380][T26552] __nla_validate_parse: 17 callbacks suppressed
[  567.967390][T26552] netlink: 224 bytes leftover after parsing attributes in process `syz.1.5360'.
[  567.993804][T26552] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 !
[  568.030965][T26556] netlink: zone id is out of range
[  568.032558][T26556] netlink: zone id is out of range
[  568.034218][T26556] netlink: zone id is out of range
[  568.035813][T26556] netlink: zone id is out of range
[  568.037399][T26556] netlink: zone id is out of range
[  568.088609][T26560] netlink: 'syz.2.5364': attribute type 21 has an invalid length.
[  568.092980][T26560] IPv6: NLM_F_CREATE should be specified when creating new route
[  568.133067][T26564] netlink: 64 bytes leftover after parsing attributes in process `syz.2.5366'.
[  568.178178][T26570] mac80211_hwsim hwsim4 syzkaller0: entered promiscuous mode
[  568.184083][T26570] mac80211_hwsim hwsim4 syzkaller0: entered allmulticast mode
[  568.203880][T26565] netem: change failed
[  568.286240][T26578] netem: change failed
[  568.381931][T26581] syzkaller1: left promiscuous mode
[  568.383754][T26581] syzkaller1: left allmulticast mode
[  568.924697][T26583] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  568.929639][T26562] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  569.098377][T26585] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5372'.
[  569.101311][T26585] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5372'.
[  569.203423][T26588] netlink: 'syz.0.5373': attribute type 1 has an invalid length.
[  569.205965][T26589] netlink: 'syz.0.5373': attribute type 1 has an invalid length.
[  569.214073][T26591] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5374'.
[  569.221832][T26588] 8021q: adding VLAN 0 to HW filter on device bond60
[  569.225173][T26588] netlink: 14 bytes leftover after parsing attributes in process `syz.0.5373'.
[  569.321864][T26598] erspan0: left promiscuous mode
[  569.329616][T26598] 8021q: adding VLAN 0 to HW filter on device batadv0
[  569.450721][    C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  569.523440][T26612] x_tables: ip6_tables: mh match: only valid for protocol 135
[  569.543782][    C1] net_ratelimit: 50 callbacks suppressed
[  569.543795][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  569.844472][T26629] netlink: 120 bytes leftover after parsing attributes in process `syz.2.5379'.
[  570.130536][T26643] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT
[  570.147600][T26645] netlink: 44 bytes leftover after parsing attributes in process `syz.1.5386'.
[  570.301490][T26651] netlink: 'syz.1.5388': attribute type 1 has an invalid length.
[  570.301854][T26653] lo speed is unknown, defaulting to 1000
[  570.316258][T26651] 8021q: adding VLAN 0 to HW filter on device bond63
[  570.327062][T26651] bond63: (slave bridge28): making interface the new active one
[  570.331622][T26651] bond63: (slave bridge28): Enslaving as an active interface with an up link
[  570.568643][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  570.608340][T26663] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5391'.
[  570.778029][T26681] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5395'.
[  571.136717][T26694] xt_l2tp: unknown flags: 51
[  571.197059][T26697] netlink: 'syz.2.5397': attribute type 1 has an invalid length.
[  571.203788][T26697] netlink: 'syz.2.5397': attribute type 1 has an invalid length.
[  571.214942][T26697] sctp: [Deprecated]: syz.2.5397 (pid 26697) Use of struct sctp_assoc_value in delayed_ack socket option.
[  571.214942][T26697] Use struct sctp_sack_info instead
[  571.227182][T26698] vlan10: entered allmulticast mode
[  571.231269][T26698] bond0: entered allmulticast mode
[  571.232907][T26698] bridge31: entered allmulticast mode
[  571.331738][T26704] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  571.607145][T26731] openvswitch: netlink: ERSPAN option length err (len 256, max 255).
[  571.610066][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  571.775084][T26749] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  571.906298][T26758] xt_TPROXY: Can be used only with -p tcp or -p udp
[  572.035884][T26769] syzkaller0: entered promiscuous mode
[  572.037635][T26769] syzkaller0: entered allmulticast mode
[  572.658677][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  572.997079][T26781] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  573.690866][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  573.701094][T26779] __nla_validate_parse: 6 callbacks suppressed
[  573.701115][T26779] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5416'.
[  573.737824][T26787] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[  573.813582][T26794] netlink: 64 bytes leftover after parsing attributes in process `syz.2.5420'.
[  573.824095][T26794] netlink: 64 bytes leftover after parsing attributes in process `syz.2.5420'.
[  573.843740][T26798] tipc: Bearer <udp:syz0>: already 2 bearers with priority 5
[  573.847299][T26798] tipc: Bearer <udp:syz0>: trying with adjusted priority
[  573.851973][T26798] tipc: Enabling of bearer <udp:syz0> rejected, max 3 bearers permitted
[  573.863900][T26797] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5419'.
[  573.908900][T26803] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.5423'.
[  573.952775][T26807] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5424'.
[  573.959673][T26807] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5424'.
[  574.146188][T26794] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5420'.
[  574.728773][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  574.775021][T26816] netlink: 738 bytes leftover after parsing attributes in process `syz.2.5426'.
[  574.779771][T26820] netlink: 'syz.1.5427': attribute type 4 has an invalid length.
[  574.950388][T26831] bond61: (slave bond_slave_1): Device is not bonding slave
[  574.953084][T26831] bond61: option active_slave: invalid value (bond_slave_1)
[  574.960093][T26831] bond61 (unregistering): Released all slaves
[  575.072500][T26850] netlink: 76 bytes leftover after parsing attributes in process `syz.1.5432'.
[  575.225667][T26864] lo speed is unknown, defaulting to 1000
[  575.252347][T26869] tls_set_device_offload_rx: netdev not found
[  575.304976][T26864] netlink: 'syz.2.5435': attribute type 9 has an invalid length.
[  575.769041][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  576.096217][T26907] netlink: 'syz.2.5443': attribute type 29 has an invalid length.
[  576.808600][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  577.849143][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  578.748766][T26890] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  578.795028][T26911] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5444'.
[  578.827806][T26916] netlink: 14 bytes leftover after parsing attributes in process `syz.1.5445'.
[  578.866611][T26920] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5446'.
[  578.893149][T26930] netlink: 124 bytes leftover after parsing attributes in process `syz.0.5449'.
[  578.897238][T26930] netlink: 124 bytes leftover after parsing attributes in process `syz.0.5449'.
[  578.900872][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  578.926998][T26933] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5450'.
[  579.018681][T26944] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  579.018880][T26933] 8021q: adding VLAN 0 to HW filter on device batadv0
[  579.097998][T26950] netlink: 'syz.0.5454': attribute type 13 has an invalid length.
[  579.163450][T26955] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5454'.
[  579.809645][T26959] netlink: 76 bytes leftover after parsing attributes in process `syz.2.5455'.
[  579.812829][T26959] netlink: 76 bytes leftover after parsing attributes in process `syz.2.5455'.
[  579.818654][ T5722] syz0: Port: 1 Link DOWN
[  579.821382][   T13] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  579.826021][   T13] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  579.835558][   T13] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  579.842909][   T13] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  579.879876][T26966] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5457'.
[  579.928973][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  580.067459][T26989] team0: Port device bridge20 removed
[  580.071030][T26989] team0: Port device bridge21 removed
[  580.075108][T26989] team0: Port device bridge22 removed
[  580.078058][T26989] bond68: (slave gretap4): Releasing active interface
[  580.968748][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  581.102844][T27034] netlink: 'syz.2.5477': attribute type 1 has an invalid length.
[  581.106024][T27034] netlink: 'syz.2.5477': attribute type 4 has an invalid length.
[  581.231652][T27048] netlink: 'syz.1.5482': attribute type 21 has an invalid length.
[  581.233399][T27050] bond0: ARP target 170.170.170.170 is already present
[  581.237742][T27050] bond0: option arp_ip_target: invalid value (2863311530)
[  581.330280][T27056] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  581.385085][T27056] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  581.441168][T27056] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  581.446429][T27053] xt_HMARK: proto mask must be zero with L3 mode
[  582.008926][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  582.060266][T27091] netlink: 'syz.0.5494': attribute type 11 has an invalid length.
[  582.282299][T27105] m1Ie5n: entered promiscuous mode
[  582.440686][T27124] netlink: 'syz.0.5505': attribute type 8 has an invalid length.
[  583.048688][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  583.367946][T27138] netlink: 'syz.1.5510': attribute type 1 has an invalid length.
[  583.382257][T27138] 8021q: adding VLAN 0 to HW filter on device bond64
[  583.426946][T27138] veth45: entered allmulticast mode
[  583.468044][T27144] bond64 (unregistering): Released all slaves
[  583.702631][T27167] netlink: 'syz.0.5518': attribute type 1 has an invalid length.
[  583.740504][T27167] 8021q: adding VLAN 0 to HW filter on device bond61
[  583.814465][T27171] __nla_validate_parse: 32 callbacks suppressed
[  583.814476][T27171] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5520'.
[  583.833863][T27171] netlink: 148 bytes leftover after parsing attributes in process `syz.2.5520'.
[  583.877321][T27192] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5524'.
[  583.909066][T13112] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  584.068248][T27209] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT
[  584.098972][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  584.202022][T13112] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  584.244424][T27220] bond59: (slave macvlan0): Releasing active interface
[  584.249795][T27220] bond61: (slave veth43): Releasing backup interface
[  584.259466][T27220] bond63: (slave bridge28): Releasing active interface
[  584.269832][   T33] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  584.281449][T27225] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5531'.
[  584.285221][T27225] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5531'.
[  584.289522][T27225] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5531'.
[  584.361962][T27229] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5533'.
[  584.638085][T27233] netlink: 'syz.1.5534': attribute type 11 has an invalid length.
[  584.723782][T27235] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5535'.
[  584.727580][T27235] netlink: 'syz.0.5535': attribute type 1 has an invalid length.
[  584.731532][T27235] netlink: 224 bytes leftover after parsing attributes in process `syz.0.5535'.
[  584.888782][   T33] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  585.008241][T27244] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  585.128856][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  585.303869][T27271] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5541'.
[  585.339125][T27280] netlink: 'syz.1.5542': attribute type 4 has an invalid length.
[  585.392508][T13105] lo speed is unknown, defaulting to 1000
[  585.402120][T13105] sy2: Port: 1 Link DOWN
[  585.448705][    C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  585.455022][T27287] netem: change failed
[  585.460848][T27290] netlink: 'syz.0.5544': attribute type 1 has an invalid length.
[  585.465054][T27287] netem: change failed
[  585.473706][T27287] netem: change failed
[  585.477063][T27287] netem: change failed
[  585.483029][T27287] netem: change failed
[  585.486438][T27288] syzkaller0: entered promiscuous mode
[  585.492109][T27288] syzkaller0: entered allmulticast mode
[  585.498891][T27287] netem: change failed
[  585.502114][T27291] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  585.705148][T27301] bridge30: entered promiscuous mode
[  585.707076][T27301] bridge30: entered allmulticast mode
[  586.088202][T27339] netlink: 'syz.2.5555': attribute type 13 has an invalid length.
[  586.179915][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  586.224492][T27347] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  586.643158][T27354] x_tables: ip_tables: recent.0 match: invalid size 216 (kernel) != (user) 4096
[  587.092041][T27380] netlink: 'syz.0.5568': attribute type 1 has an invalid length.
[  587.208731][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  587.409401][T27431] netlink: 'syz.0.5580': attribute type 1 has an invalid length.
[  587.427650][T27431] 8021q: adding VLAN 0 to HW filter on device bond62
[  587.432051][T27429] netlink: 'syz.2.5579': attribute type 7 has an invalid length.
[  587.443099][T27431] bond62: (slave veth47): Enslaving as an active interface with a down link
[  587.446470][T27429] netlink: 'syz.2.5579': attribute type 7 has an invalid length.
[  587.450912][T27431] 8021q: adding VLAN 0 to HW filter on device batadv6
[  587.453162][T27431] bond62: (slave batadv6): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open
[  587.471064][T27432] 8021q: adding VLAN 0 to HW filter on device batadv6
[  587.473842][T27432] bond62: (slave batadv6): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open
[  587.713293][T27450] netlink: 'syz.2.5584': attribute type 21 has an invalid length.
[  587.717731][T27450] IPv6: NLM_F_CREATE should be specified when creating new route
[  587.760717][T27452] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  587.764174][T27452] sch_tbf: peakrate 11 is lower than or equals to rate 12695930359739709189 !
[  588.258703][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  588.515634][T27466] netlink: 'syz.0.5589': attribute type 159 has an invalid length.
[  588.678959][T27473] netlink: 'syz.0.5591': attribute type 1 has an invalid length.
[  588.740056][T27480] netlink: 'syz.2.5593': attribute type 1 has an invalid length.
[  588.757203][T27480] 8021q: adding VLAN 0 to HW filter on device bond71
[  588.760056][T27482] netlink: 'syz.0.5591': attribute type 3 has an invalid length.
[  588.778394][T27480] bond71: (slave geneve7): making interface the new active one
[  588.783694][T27480] bond71: (slave geneve7): Enslaving as an active interface with an up link
[  588.786729][ T6295] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  588.791505][ T6295] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  588.795272][ T6295] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  588.798102][ T6295] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  588.823428][T27485] __nla_validate_parse: 11 callbacks suppressed
[  588.823439][T27485] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5594'.
[  589.288742][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  590.338687][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  590.729058][ T5612] Bluetooth: hci2: command 0x0405 tx timeout
[  591.378699][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  591.665814][T27482] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  591.799556][T27501] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5595'.
[  591.805961][T27503] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5598'.
[  591.809645][T27503] openvswitch: netlink: Flow actions attr not present in new flow.
[  591.935320][T27517] bridge0: entered allmulticast mode
[  592.036050][T27525] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5604'.
[  592.382709][T27544] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5610'.
[  592.387706][T27544] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5610'.
[  592.408887][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  592.558220][T27552] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5612'.
[  592.602354][T27556] netlink: 112 bytes leftover after parsing attributes in process `syz.0.5613'.
[  592.697247][T27563] netlink: 'syz.2.5616': attribute type 1 has an invalid length.
[  592.732863][T27563] 8021q: adding VLAN 0 to HW filter on device bond73
[  592.738785][T27563] bond72: (slave bond73): making interface the new active one
[  592.741907][T27563] bond72: (slave bond73): Enslaving as an active interface with an up link
[  592.747479][T27563] netlink: 104 bytes leftover after parsing attributes in process `syz.2.5616'.
[  592.765543][T27569] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5618'.
[  592.795471][T27571] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  592.840873][T27571] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  592.903494][T27571] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  592.967849][T27571] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  593.042619][ T6295] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  593.055240][ T6295] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  593.073519][ T6295] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  593.085529][ T8004] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  593.373717][T27598] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  593.447557][T27600] IPVS: set_ctl: invalid protocol: 92 172.20.20.187:20003
[  593.450771][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  593.484000][T27600] syzkaller1: entered promiscuous mode
[  593.485922][T27600] syzkaller1: entered allmulticast mode
[  593.717449][T27630] xt_TPROXY: Can be used only with -p tcp or -p udp
[  593.721362][T27630] openvswitch: netlink: Geneve opt len 1 is not a multiple of 4.
[  593.751926][T27632] netlink: 'syz.0.5634': attribute type 1 has an invalid length.
[  593.816966][T27638] netlink: 'syz.2.5637': attribute type 62 has an invalid length.
[  593.849482][T27640] x_tables: unsorted underflow at hook 2
[  593.860894][T27640] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  593.860930][T27641] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  593.867732][T27640] __nla_validate_parse: 4 callbacks suppressed
[  593.867746][T27640] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5638'.
[  593.924766][T27641] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5638'.
[  594.035483][T27670] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5643'.
[  594.094071][T27674] lo speed is unknown, defaulting to 1000
[  594.137743][T27674] dvmrp0: entered allmulticast mode
[  594.246674][T27689] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5645'.
[  594.251107][T27689] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5645'.
[  594.256606][T27691] xt_hashlimit: size too large, truncated to 1048576
[  594.270459][ T8004] dvmrp0: left allmulticast mode
[  594.344167][T27691] netlink: 68 bytes leftover after parsing attributes in process `syz.2.5646'.
[  594.498837][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  594.862188][T27725] netlink: 'syz.2.5648': attribute type 1 has an invalid length.
[  594.865520][T27725] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5648'.
[  594.874431][T27725] netlink: 'syz.2.5648': attribute type 1 has an invalid length.
[  594.944191][T27727] netlink: 'syz.2.5649': attribute type 1 has an invalid length.
[  594.966069][T27727] 8021q: adding VLAN 0 to HW filter on device bond74
[  595.021839][T27735] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5650'.
[  595.203384][T27745] 8021q: adding VLAN 0 to HW filter on device batadv0
[  595.230032][T27745] 0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  595.233560][T27745] 0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  595.239982][T27745] veth1_vlan: left promiscuous mode
[  595.242556][T27745] veth0_vlan: left promiscuous mode
[  595.247711][T27745] veth0_vlan: entered promiscuous mode
[  595.252872][T27745] veth1_vlan: entered promiscuous mode
[  595.257120][T27745] veth1_macvtap: left promiscuous mode
[  595.261119][T27745] veth1_macvtap: entered promiscuous mode
[  595.288953][   T13] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  595.296297][ T5722] syz0: Port: 1 Link ACTIVE
[  595.300469][   T13] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  595.307557][   T13] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  595.312860][   T13] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  595.359559][T27753] netlink: 144 bytes leftover after parsing attributes in process `syz.0.5655'.
[  595.538757][    C1] net_ratelimit: 1 callbacks suppressed
[  595.538774][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  596.103922][T27776] xt_bpf: check failed: parse error
[  596.228021][T27783] bond75 (unregistering): Released all slaves
[  596.402801][T27799] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5668'.
[  596.533896][T27820] netlink: 'syz.1.5673': attribute type 30 has an invalid length.
[  596.558303][T27820] bond64: option arp_missed_max: invalid value (0)
[  596.563872][T27820] bond64: option arp_missed_max: allowed values 1 - 255
[  596.569663][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  596.575449][T27820] bond64 (unregistering): Released all slaves
[  597.050179][T27863] netlink: 'syz.2.5684': attribute type 1 has an invalid length.
[  597.056221][T27864] netlink: 'syz.0.5683': attribute type 1 has an invalid length.
[  597.092351][T27867] xt_TPROXY: Can be used only with -p tcp or -p udp
[  597.111489][T27864] 8021q: adding VLAN 0 to HW filter on device bond64
[  597.115670][T27864] bond63: (slave bond64): making interface the new active one
[  597.121729][T27864] bond63: (slave bond64): Enslaving as an active interface with an up link
[  597.140230][T27864] bond63: (slave gretap5): Enslaving as a backup interface with an up link
[  597.185231][T27870] netlink: 'syz.2.5686': attribute type 2 has an invalid length.
[  597.295744][T27876] veth0_macvtap: entered allmulticast mode
[  597.298703][T27876] A link change request failed with some changes committed already. Interface veth0_macvtap may have been left with an inconsistent configuration, please check.
[  597.377313][T27891] openvswitch: netlink: IPv4 frag type 127 is out of range max 2
[  597.432502][T27893] syzkaller1: left promiscuous mode
[  597.437873][T27893] syzkaller1: left allmulticast mode
[  597.618672][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  597.707124][T27919] lo speed is unknown, defaulting to 1000
[  598.139649][T27958] xt_socket: unknown flags 0x50
[  598.223139][T27973] validate_nla: 1 callbacks suppressed
[  598.223151][T27973] netlink: 'syz.1.5713': attribute type 1 has an invalid length.
[  598.253284][T27973] 8021q: adding VLAN 0 to HW filter on device bond64
[  598.304606][T27979] block nbd0: Unsupported socket: should be TCP or UNIX.
[  598.384343][T27994] netlink: 'syz.1.5721': attribute type 8 has an invalid length.
[  598.394058][T27994] bridge0: port 1(vlan8) entered blocking state
[  598.396585][T27994] bridge0: port 1(vlan8) entered disabled state
[  598.399723][T27994] vlan8: entered allmulticast mode
[  598.401500][T27994] geneve0: entered allmulticast mode
[  598.465592][T28001] netlink: 'syz.0.5723': attribute type 8 has an invalid length.
[  598.482451][T28001] batadv0: entered promiscuous mode
[  598.598737][T28010] lo speed is unknown, defaulting to 1000
[  598.604913][T28008] lo speed is unknown, defaulting to 1000
[  598.648921][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  599.028832][T28016] __nla_validate_parse: 31 callbacks suppressed
[  599.028844][T28016] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5727'.
[  599.246491][T28033] netlink: 'syz.2.5732': attribute type 1 has an invalid length.
[  599.265679][T28033] 8021q: adding VLAN 0 to HW filter on device bond75
[  599.285181][T28033] vlan8: entered promiscuous mode
[  599.287432][T28033] bond75: entered promiscuous mode
[  599.290098][T28033] vlan8: entered allmulticast mode
[  599.292401][T28033] bond75: entered allmulticast mode
[  599.299853][T28033] netlink: 44 bytes leftover after parsing attributes in process `syz.2.5732'.
[  599.423701][T28037] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5733'.
[  599.673287][T28056] netlink: 'syz.2.5737': attribute type 1 has an invalid length.
[  599.688700][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  599.761700][T28063] netlink: 'syz.2.5739': attribute type 1 has an invalid length.
[  599.774927][T28063] 8021q: adding VLAN 0 to HW filter on device bond76
[  599.836285][T28071] netlink: 'syz.2.5740': attribute type 1 has an invalid length.
[  599.850400][T28071] bond77: entered promiscuous mode
[  599.852532][T28071] 8021q: adding VLAN 0 to HW filter on device bond77
[  599.935439][T28077] netlink: 'syz.2.5741': attribute type 3 has an invalid length.
[  599.938021][T28077] netlink: 'syz.2.5741': attribute type 1 has an invalid length.
[  599.940590][T28077] netlink: 224 bytes leftover after parsing attributes in process `syz.2.5741'.
[  599.943422][T28077] NCSI netlink: No device for ifindex 0
[  599.960842][T28077] bond0: option arp_all_targets: invalid value (8)
[  600.037736][T28079] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5742'.
[  600.041237][T28086] netlink: 732 bytes leftover after parsing attributes in process `syz.2.5744'.
[  600.045112][T28086] netlink: 732 bytes leftover after parsing attributes in process `syz.2.5744'.
[  600.102034][T28086] netlink: 'syz.2.5744': attribute type 10 has an invalid length.
[  600.142466][T28088] lo speed is unknown, defaulting to 1000
[  600.280703][T28109] netlink: 84 bytes leftover after parsing attributes in process `syz.0.5752'.
[  600.318964][T28104] syzkaller0: entered promiscuous mode
[  600.320742][T28104] syzkaller0: entered allmulticast mode
[  600.461915][T28122] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5755'.
[  600.731224][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  601.768932][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  601.954307][T28125] syz.2.5757: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  601.966945][T28125] CPU: 1 UID: 0 PID: 28125 Comm: syz.2.5757 Not tainted syzkaller #0 PREEMPT(full) 
[  601.966965][T28125] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  601.966973][T28125] Call Trace:
[  601.966978][T28125]  <TASK>
[  601.966983][T28125]  dump_stack_lvl+0xe8/0x150
[  601.967003][T28125]  warn_alloc+0x249/0x340
[  601.967021][T28125]  ? stack_trace_save+0xa9/0x100
[  601.967040][T28125]  ? __pfx_warn_alloc+0x10/0x10
[  601.967061][T28125]  ? kasan_save_track+0x4f/0x80
[  601.967075][T28125]  ? kasan_save_track+0x3e/0x80
[  601.967087][T28125]  ? __kasan_kmalloc+0x93/0xb0
[  601.967101][T28125]  ? __kmalloc_cache_noprof+0x31c/0x660
[  601.967115][T28125]  ? xskq_create+0x56/0x170
[  601.967130][T28125]  ? xsk_setsockopt+0x54c/0x990
[  601.967142][T28125]  ? do_sock_setsockopt+0x17c/0x1b0
[  601.967157][T28125]  ? __x64_sys_setsockopt+0x13d/0x1b0
[  601.967171][T28125]  ? do_syscall_64+0x15f/0xf80
[  601.967184][T28125]  __vmalloc_node_range_noprof+0x132/0x1750
[  601.967247][T28125]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  601.967269][T28125]  ? __kasan_kmalloc+0x93/0xb0
[  601.967288][T28125]  vmalloc_user_noprof+0xad/0xe0
[  601.967304][T28125]  ? xskq_create+0xbf/0x170
[  601.967319][T28125]  xskq_create+0xbf/0x170
[  601.967336][T28125]  xsk_init_queue+0x8a/0xe0
[  601.967352][T28125]  xsk_setsockopt+0x54c/0x990
[  601.967367][T28125]  ? __pfx_xsk_setsockopt+0x10/0x10
[  601.967381][T28125]  ? __pfx_aa_sk_perm+0x10/0x10
[  601.967399][T28125]  ? aa_sock_opt_perm+0xff/0x1a0
[  601.967417][T28125]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  601.967433][T28125]  ? __pfx_xsk_setsockopt+0x10/0x10
[  601.967448][T28125]  do_sock_setsockopt+0x17c/0x1b0
[  601.967468][T28125]  __x64_sys_setsockopt+0x13d/0x1b0
[  601.967485][T28125]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  601.967497][T28125]  do_syscall_64+0x15f/0xf80
[  601.967507][T28125]  ? trace_irq_disable+0x3b/0x140
[  601.967528][T28125]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  601.967586][T28125] RIP: 0033:0x7f248c19ce59
[  601.967600][T28125] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  601.967609][T28125] RSP: 002b:00007f248cfa2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  601.967622][T28125] RAX: ffffffffffffffda RBX: 00007f248c415fa0 RCX: 00007f248c19ce59
[  601.967631][T28125] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000006
[  601.967637][T28125] RBP: 00007f248c232d6f R08: 0000000000000004 R09: 0000000000000000
[  601.967645][T28125] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[  601.967651][T28125] R13: 00007f248c416038 R14: 00007f248c415fa0 R15: 00007ffe860432d8
[  601.967672][T28125]  </TASK>
[  601.967718][T28125] Mem-Info:
[  602.068754][T28125] active_anon:5777 inactive_anon:0 isolated_anon:0
[  602.068754][T28125]  active_file:13314 inactive_file:38523 isolated_file:0
[  602.068754][T28125]  unevictable:1768 dirty:76 writeback:0
[  602.068754][T28125]  slab_reclaimable:13830 slab_unreclaimable:247011
[  602.068754][T28125]  mapped:18266 shmem:2373 pagetables:1116
[  602.068754][T28125]  sec_pagetables:0 bounce:0
[  602.068754][T28125]  kernel_misc_reclaimable:0
[  602.068754][T28125]  free:951568 free_pcp:24225 free_cma:0
[  602.086050][T28125] Node 0 active_anon:9000kB inactive_anon:0kB active_file:24612kB inactive_file:21296kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:39268kB dirty:52kB writeback:0kB shmem:4760kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:8928kB pagetables:2532kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  602.101672][T28125] Node 1 active_anon:14108kB inactive_anon:0kB active_file:28644kB inactive_file:132796kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:33696kB dirty:252kB writeback:0kB shmem:4732kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:10276kB pagetables:1932kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  602.134888][T28125] Node 0 DMA free:15360kB boost:0kB min:240kB low:300kB high:360kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  602.163588][T28125] lowmem_reserve[]: 0 1587 2117 2117 2117
[  602.165653][T28125] Node 0 DMA32 free:1208684kB boost:0kB min:25012kB low:31264kB high:37516kB reserved_highatomic:0KB free_highatomic:0KB active_anon:848kB inactive_anon:0kB active_file:18276kB inactive_file:72kB unevictable:0kB writepending:16kB zspages:0kB present:2080636kB managed:1625236kB mlocked:0kB bounce:0kB free_pcp:20928kB local_pcp:10928kB free_cma:0kB
[  602.182465][T28125] lowmem_reserve[]: 0 0 530 530 530
[  602.188223][T28125] Node 0 Normal free:10608kB boost:0kB min:8512kB low:10640kB high:12768kB reserved_highatomic:0KB free_highatomic:0KB active_anon:8152kB inactive_anon:0kB active_file:6336kB inactive_file:21224kB unevictable:3536kB writepending:36kB zspages:0kB present:1572868kB managed:543152kB mlocked:0kB bounce:0kB free_pcp:2832kB local_pcp:376kB free_cma:0kB
[  602.199120][T28125] lowmem_reserve[]: 0 0 0 0 0
[  602.200964][T28125] Node 1 Normal free:2579552kB boost:0kB min:56344kB low:70428kB high:84512kB reserved_highatomic:0KB free_highatomic:0KB active_anon:14208kB inactive_anon:0kB active_file:28644kB inactive_file:132796kB unevictable:3536kB writepending:252kB zspages:0kB present:3670012kB managed:3594684kB mlocked:0kB bounce:0kB free_pcp:72028kB local_pcp:39980kB free_cma:0kB
[  602.211761][T28125] lowmem_reserve[]: 0 0 0 0 0
[  602.213417][T28125] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  602.217738][T28125] Node 0 DMA32: 371*4kB (UM) 212*8kB (UM) 78*16kB (UME) 161*32kB (UME) 284*64kB (UME) 85*128kB (UME) 35*256kB (UM) 11*512kB (UME) 13*1024kB (UME) 31*2048kB (UME) 263*4096kB (UM) = 1207276kB
[  602.223666][T28125] Node 0 Normal: 426*4kB (UME) 59*8kB (M) 287*16kB (UM) 28*32kB (M) 22*64kB (M) 6*128kB (M) 3*256kB (M) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 10608kB
[  602.233641][T28125] Node 1 Normal: 1708*4kB (UME) 1636*8kB (UME) 2005*16kB (UME) 1096*32kB (UME) 781*64kB (UM) 270*128kB (UME) 122*256kB (UM) 34*512kB (UME) 54*1024kB (UM) 37*2048kB (UM) 544*4096kB (UM) = 2579552kB
[  602.243640][T28125] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  602.246709][T28125] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  602.249857][T28125] 54210 total pagecache pages
[  602.251376][T28125] 0 pages in swap cache
[  602.252715][T28125] Free swap  = 124996kB
[  602.254117][T28125] Total swap = 124996kB
[  602.255650][T28125] 1834877 pages RAM
[  602.256947][T28125] 0 pages HighMem/MovableOnly
[  602.258342][T28125] 390269 pages reserved
[  602.259754][T28125] 0 pages cma reserved
[  602.280753][T28144] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5761'.
[  602.307985][T28146] 8021q: adding VLAN 0 to HW filter on device bond78
[  602.345530][T28146] macvlan4: entered promiscuous mode
[  602.347798][T28146] macvlan4: entered allmulticast mode
[  602.668388][T28176] netlink: 'syz.1.5770': attribute type 11 has an invalid length.
[  602.808738][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  603.622362][T28249] syzkaller0: entered promiscuous mode
[  603.624494][T28249] syzkaller0: entered allmulticast mode
[  603.848782][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  604.219392][T28304] __nla_validate_parse: 13 callbacks suppressed
[  604.219403][T28304] netlink: 152 bytes leftover after parsing attributes in process `syz.2.5807'.
[  604.326951][T28319] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5812'.
[  604.421794][T28327] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5814'.
[  604.492677][T28332] netlink: 14 bytes leftover after parsing attributes in process `syz.0.5816'.
[  604.557806][T28334] lo speed is unknown, defaulting to 1000
[  604.709122][T28356] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5824'.
[  604.755801][T28364] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5825'.
[  604.828935][T28368] validate_nla: 3 callbacks suppressed
[  604.828946][T28368] netlink: 'syz.1.5825': attribute type 9 has an invalid length.
[  604.842118][T28368] netlink: 'syz.1.5825': attribute type 6 has an invalid length.
[  604.898726][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  605.123236][T28388] netlink: 'syz.2.5830': attribute type 6 has an invalid length.
[  605.167298][   T34] audit: type=1800 audit(1780025255.631:18): pid=28392 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.5831" name="blkio.bfq.time_recursive" dev="tmpfs" ino=9911 res=0 errno=0
[  605.174924][T28394] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  605.252984][T28392] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  605.545525][T28415] netlink: 'syz.2.5837': attribute type 3 has an invalid length.
[  605.587559][   T55] block nbd1: Receive control failed (result -32)
[  605.593481][T28384] block nbd1: Receive control failed (result -32)
[  605.633725][T28416] nbd: nbd2 already in use
[  605.662162][T28415] veth0_macvtap: left allmulticast mode
[  605.664416][T28415] veth1_macvtap: entered promiscuous mode
[  605.670187][T28415] A link change request failed with some changes committed already. Interface ; may have been left with an inconsistent configuration, please check.
[  605.864673][T28435] bridge26: entered promiscuous mode
[  605.868611][T28435] bridge26: entered allmulticast mode
[  605.928857][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  605.973606][T28447] netlink: 204 bytes leftover after parsing attributes in process `syz.2.5846'.
[  605.979613][T28447] netlink: 232 bytes leftover after parsing attributes in process `syz.2.5846'.
[  606.000897][T28444] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5845'.
[  606.025924][T28453] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  606.196365][   T56] block nbd2: Receive control failed (result -32)
[  606.258771][T28480] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5854'.
[  606.483032][T28500] bridge33: entered promiscuous mode
[  606.484821][T28500] bridge33: entered allmulticast mode
[  606.494200][T28500] openvswitch: netlink: IPv4 tun info is not correct
[  606.552207][T28512] netlink: 'syz.1.5866': attribute type 4 has an invalid length.
[  606.560051][ T5722] lo speed is unknown, defaulting to 1000
[  606.562993][ T5722] sy2: Port: 1 Link ACTIVE
[  606.565722][T28514] A link change request failed with some changes committed already. Interface 26aD may have been left with an inconsistent configuration, please check.
[  606.604519][T28519] netlink: 'syz.1.5870': attribute type 1 has an invalid length.
[  606.624907][T28519] bond65: entered promiscuous mode
[  606.627187][T28519] 8021q: adding VLAN 0 to HW filter on device bond65
[  606.655653][T28519] syzkaller0: entered promiscuous mode
[  606.658517][T28519] syzkaller0: entered allmulticast mode
[  606.691897][T28525] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  606.704023][T28527] bond79 (unregistering): Released all slaves
[  606.718349][T28519] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  606.793047][T28533] netlink: 'syz.0.5873': attribute type 4 has an invalid length.
[  606.832296][T28537] xt_l2tp: missing protocol rule (udp|l2tpip)
[  606.939699][T28550] batadv0: left promiscuous mode
[  606.950458][T28550] mac80211_hwsim hwsim3 syzkaller0: left promiscuous mode
[  606.953019][T28550] mac80211_hwsim hwsim3 syzkaller0: left allmulticast mode
[  606.956428][T28550] bond58: left promiscuous mode
[  606.964844][T28550] bridge0: left promiscuous mode
[  606.966931][T28550] vlan10: left allmulticast mode
[  606.972698][T28550] bond0: left allmulticast mode
[  606.974676][T28550] bridge31: left allmulticast mode
[  606.978915][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  607.006603][T28554] syzkaller1: entered promiscuous mode
[  607.010950][T28554] syzkaller1: entered allmulticast mode
[  607.275805][T28592] syzkaller0: entered promiscuous mode
[  607.282205][T28592] syzkaller0: entered allmulticast mode
[  607.606028][T28610] pim6reg1: entered promiscuous mode
[  607.608353][T28610] pim6reg1: entered allmulticast mode
[  607.757216][T28614] xt_hashlimit: size too large, truncated to 1048576
[  607.832032][T28620] : option downdelay: invalid value (18446744073709547007)
[  607.834680][T28620] : option downdelay: allowed values 0 - 2147483647
[  607.841297][T28620]  (unregistering): Released all slaves
[  607.893326][T28624] syzkaller1: tun_chr_ioctl cmd 1074025677
[  607.895652][T28624] syzkaller1: Linktype set failed because interface is up
[  607.899111][T13112] syzkaller1: tun_net_xmit 90
[  607.902948][T13112] syzkaller1: tun_net_xmit 90
[  607.998040][T28614] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  608.008662][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  608.013427][T28614] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  608.107928][   T34] audit: type=1804 audit(1780025258.571:19): pid=28660 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.5904" name="/newroot/2109/cgroup.controllers" dev="tmpfs" ino=10754 res=1 errno=0
[  608.124297][   T34] audit: type=1800 audit(1780025258.571:20): pid=28660 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.5904" name="cgroup.controllers" dev="tmpfs" ino=10754 res=0 errno=0
[  608.142087][T28657] netlink: 'syz.2.5903': attribute type 1 has an invalid length.
[  608.145575][T28663] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  608.172344][T28666] netlink: 'syz.1.5906': attribute type 32 has an invalid length.
[  608.200446][T28671] netlink: 'syz.2.5903': attribute type 10 has an invalid length.
[  608.375062][T28684] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  608.484046][T28698] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  608.517117][T28704] 8021q: VLANs not supported on ip6gre0
[  608.550166][T28705] lo speed is unknown, defaulting to 1000
[  608.783514][T28717] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  608.835023][T28725] syzkaller1: entered promiscuous mode
[  608.836844][T28725] syzkaller1: entered allmulticast mode
[  608.840385][T28725] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 324
[  609.049768][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  609.146746][T28756] bridge0: left allmulticast mode
[  609.227189][T28760] vlan9: entered allmulticast mode
[  609.229180][T28760] bond0: entered allmulticast mode
[  609.321762][T28770] lo speed is unknown, defaulting to 1000
[  609.344036][T28772] pimreg9: entered allmulticast mode
[  609.396600][T28778] __nla_validate_parse: 20 callbacks suppressed
[  609.396611][T28778] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5939'.
[  609.443906][T28781] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  609.492062][T28782] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5941'.
[  609.494908][T28782] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5941'.
[  609.527614][T28781] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  609.616482][T28781] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  609.674935][T28781] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  609.729266][   T12] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  609.741726][   T12] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  609.755577][ T5667] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  609.770222][   T13] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  609.847863][T28803] syzkaller0: entered promiscuous mode
[  609.850717][T28803] syzkaller0: entered allmulticast mode
[  609.930232][T28807] netlink: 6024 bytes leftover after parsing attributes in process `syz.0.5947'.
[  610.062144][T28815] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5949'.
[  610.098717][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  610.174206][T28826] validate_nla: 10 callbacks suppressed
[  610.174217][T28826] netlink: 'syz.1.5952': attribute type 2 has an invalid length.
[  610.299728][T28832] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5953'.
[  610.305264][T28832] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5953'.
[  610.307964][T28832] netlink: 348 bytes leftover after parsing attributes in process `syz.0.5953'.
[  610.310936][T28832] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5953'.
[  610.314131][T28832] netlink: 348 bytes leftover after parsing attributes in process `syz.0.5953'.
[  610.485188][T28853] netlink: 'syz.1.5959': attribute type 6 has an invalid length.
[  610.629139][T28869] lo: Caught tx_queue_len zero misconfig
[  611.129071][    C1] net_ratelimit: 1 callbacks suppressed
[  611.129092][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  611.577975][T28884] netlink: 'syz.2.5968': attribute type 1 has an invalid length.
[  611.734440][T28883] mac80211_hwsim hwsim4 syzkaller0: left promiscuous mode
[  611.742174][T28883] mac80211_hwsim hwsim4 syzkaller0: left allmulticast mode
[  611.802844][T28883] vlan8: left promiscuous mode
[  611.807227][T28883] bond75: left promiscuous mode
[  611.809874][T28883] vlan8: left allmulticast mode
[  611.811428][T28883] bond75: left allmulticast mode
[  611.816592][T28883] bond77: left promiscuous mode
[  611.822693][T28883] macvlan4: left promiscuous mode
[  611.826843][T28883] macvlan4: left allmulticast mode
[  611.851553][T28883] bridge26: left promiscuous mode
[  611.858845][T28883] bridge26: left allmulticast mode
[  611.926790][T28883] vlan9: left allmulticast mode
[  611.930859][T28883] bond0: left allmulticast mode
[  612.001730][   T12] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  612.004294][   T12] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  612.007122][   T12] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  612.017176][T28890] bond67: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  612.047593][T28890] bond67: (slave lo): Enslaving as an active interface with an up link
[  612.080416][T28890] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check.
[  612.092841][   T12] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  612.097026][   T31] lo speed is unknown, defaulting to 1000
[  612.099880][T13112] lo speed is unknown, defaulting to 1000
[  612.102195][   T33] lo speed is unknown, defaulting to 1000
[  612.157444][T28900] bond66 (unregistering): Released all slaves
[  612.169546][T28906] netlink: 'syz.2.5971': attribute type 1 has an invalid length.
[  612.178707][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  612.357713][T28930] netlink: 'syz.0.5974': attribute type 1 has an invalid length.
[  612.412299][T28930] 8021q: adding VLAN 0 to HW filter on device bond66
[  612.437394][T28936] vlan7: entered promiscuous mode
[  612.448905][T28936] bond66: entered promiscuous mode
[  612.454873][T28936] vlan7: entered allmulticast mode
[  612.459814][T28936] bond66: entered allmulticast mode
[  612.504529][T28930] bond66: (slave bridge47): making interface the new active one
[  612.507804][T28930] bridge47: entered promiscuous mode
[  612.510397][T28930] bridge47: entered allmulticast mode
[  612.515297][T28930] bond66: (slave bridge47): Enslaving as an active interface with an up link
[  612.616420][T28949] xt_hashlimit: size too large, truncated to 1048576
[  612.886841][T28971] sctp: [Deprecated]: syz.1.5982 (pid 28971) Use of struct sctp_assoc_value in delayed_ack socket option.
[  612.886841][T28971] Use struct sctp_sack_info instead
[  612.891055][T28965] netlink: 'syz.2.5981': attribute type 2 has an invalid length.
[  612.999139][T28981] netlink: 'syz.0.5984': attribute type 3 has an invalid length.
[  613.116156][T28994] netlink: 'syz.1.5989': attribute type 13 has an invalid length.
[  613.208968][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  613.250402][T29006] IPVS: set_ctl: invalid protocol: 46 127.0.0.1:20001
[  613.256969][T29007] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  613.379791][T29016] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode
[  613.382824][T29016] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode
[  613.816926][T29026] netlink: zone id is out of range
[  613.819313][T29026] netlink: zone id is out of range
[  613.821067][T29026] netlink: zone id is out of range
[  613.822836][T29026] netlink: zone id is out of range
[  613.824622][T29026] netlink: zone id is out of range
[  613.826487][T29026] netlink: zone id is out of range
[  613.983090][T29041] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0)
[  614.590671][T29041] mac80211_hwsim hwsim3 syzkaller0: left promiscuous mode
[  614.592967][T29041] mac80211_hwsim hwsim3 syzkaller0: left allmulticast mode
[  614.651688][T29041] vlan7: left promiscuous mode
[  614.656050][T29041] bond66: left promiscuous mode
[  614.660411][T29041] bridge47: left promiscuous mode
[  614.664022][T29041] vlan7: left allmulticast mode
[  614.665744][T29041] bond66: left allmulticast mode
[  614.667418][T29041] bridge47: left allmulticast mode
[  614.714879][T29070] bridge27: port 1(veth45) entered blocking state
[  614.717248][T29070] bridge27: port 1(veth45) entered disabled state
[  614.720602][T29070] veth45: entered allmulticast mode
[  614.723462][T29070] veth45: entered promiscuous mode
[  614.726311][T11938] syz0: Port: 1 Link DOWN
[  614.730561][   T13] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  614.748743][   T13] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  614.752024][   T13] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  614.775960][T29075] __nla_validate_parse: 16 callbacks suppressed
[  614.775977][T29075] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6008'.
[  614.801420][   T13] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  614.817293][T29079] netlink: 'syz.2.6009': attribute type 1 has an invalid length.
[  614.872692][T29079] bond80: entered promiscuous mode
[  614.874994][T29079] bond80: entered allmulticast mode
[  614.881129][T29079] 8021q: adding VLAN 0 to HW filter on device bond80
[  614.971657][T29080] macvlan6: entered promiscuous mode
[  614.975070][T29080] macvlan6: entered allmulticast mode
[  614.982557][T29080] 8021q: adding VLAN 0 to HW filter on device macvlan6
[  615.003385][T29088] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  615.007821][T29088] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6011'.
[  615.011191][T29088] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6011'.
[  615.095468][T29097] netlink: 88 bytes leftover after parsing attributes in process `syz.2.6013'.
[  615.099047][T29097] netlink: 88 bytes leftover after parsing attributes in process `syz.2.6013'.
[  615.104939][T29101] xt_hashlimit: size too large, truncated to 1048576
[  615.176786][T29116] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6016'.
[  615.236336][T29116] 0{X: entered promiscuous mode
[  615.238358][T29116] vlan9: entered promiscuous mode
[  615.263987][T29120] netlink: 'syz.2.6017': attribute type 4 has an invalid length.
[  615.268849][T29120] netlink: 'syz.2.6017': attribute type 4 has an invalid length.
[  615.396188][T29129] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6020'.
[  615.475785][T29142] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6023'.
[  615.611271][T29160] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6028'.
[  615.789831][T29176] lo speed is unknown, defaulting to 1000
[  615.841427][T29183] netlink: 108 bytes leftover after parsing attributes in process `syz.2.6035'.
[  615.852184][T29183] 8021q: adding VLAN 0 to HW filter on device batadv0
[  615.871576][T29183] veth1_macvtap: left promiscuous mode
[  616.177607][T29198] netlink: 'syz.2.6038': attribute type 1 has an invalid length.
[  616.194847][T29198] netlink: 'syz.2.6038': attribute type 4 has an invalid length.
[  616.209939][T29204] sctp: [Deprecated]: syz.1.6041 (pid 29204) Use of struct sctp_assoc_value in delayed_ack socket option.
[  616.209939][T29204] Use struct sctp_sack_info instead
[  616.215181][T29204] sctp: [Deprecated]: syz.1.6041 (pid 29204) Use of struct sctp_assoc_value in delayed_ack socket option.
[  616.215181][T29204] Use struct sctp_sack_info instead
[  616.338658][    C1] net_ratelimit: 4 callbacks suppressed
[  616.338670][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  616.397037][T29213] gtp6: entered promiscuous mode
[  616.401977][T29213] gtp6: entered allmulticast mode
[  616.808814][    C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  616.866208][T29235] netlink: 'syz.0.6048': attribute type 1 has an invalid length.
[  616.881437][T29235] netlink: 'syz.0.6048': attribute type 10 has an invalid length.
[  616.884204][T29235] netlink: 'syz.0.6048': attribute type 10 has an invalid length.
[  617.153039][T29277] veth0_vlan: entered allmulticast mode
[  617.368989][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  617.484472][T29301] netlink: 'syz.1.6067': attribute type 29 has an invalid length.
[  618.408703][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  619.449078][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  620.498637][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  620.648772][T13106] page_pool_release_retry() stalled pool shutdown: id 284, 1 inflight 60 sec
[  620.981010][T29331] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  621.056670][T29353] __nla_validate_parse: 19 callbacks suppressed
[  621.056680][T29353] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6079'.
[  621.080146][T29356] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6080'.
[  621.132981][T29367] netlink: 'syz.0.6082': attribute type 3 has an invalid length.
[  621.150526][T29374] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6084'.
[  621.153818][T29374] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6084'.
[  621.204763][T29385] netlink: 'syz.2.6086': attribute type 4 has an invalid length.
[  621.207268][T29385] netlink: 17 bytes leftover after parsing attributes in process `syz.2.6086'.
[  621.212399][T29385] openvswitch: netlink: IP tunnel attribute has 1181 unknown bytes.
[  621.261245][T29391] lo speed is unknown, defaulting to 1000
[  621.279133][T29367] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0
[  621.366726][T29403] netlink: 'syz.2.6088': attribute type 4 has an invalid length.
[  621.404798][T29394] netlink: 'syz.2.6088': attribute type 4 has an invalid length.
[  621.448172][T29410] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6092'.
[  621.457783][T29407] bridge0: port 1(erspan0) entered blocking state
[  621.461579][T29407] bridge0: port 1(erspan0) entered disabled state
[  621.463913][T29407] erspan0: entered allmulticast mode
[  621.467220][T29407] erspan0: left allmulticast mode
[  621.468725][T29410] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6092'.
[  621.537216][T29407] netlink: 68 bytes leftover after parsing attributes in process `syz.0.6091'.
[  621.538895][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  621.541146][T29407] netlink: 64 bytes leftover after parsing attributes in process `syz.0.6091'.
[  621.593998][T29423] netlink: 72 bytes leftover after parsing attributes in process `syz.0.6095'.
[  621.661233][T29426] netlink: 'syz.0.6095': attribute type 1 has an invalid length.
[  621.746100][T29424] lo speed is unknown, defaulting to 1000
[  621.846422][T29451] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  621.909801][T29457] netlink: 'syz.0.6101': attribute type 28 has an invalid length.
[  621.916028][T29457] netlink: 'syz.0.6101': attribute type 3 has an invalid length.
[  622.215306][T29471] netlink: 'syz.1.6104': attribute type 2 has an invalid length.
[  622.578906][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  622.669190][T29493] netlink: 'syz.2.6110': attribute type 3 has an invalid length.
[  622.740965][T29499] ipvlan0: left allmulticast mode
[  622.742846][T29499] bond55: left allmulticast mode
[  622.913102][T29504] hsr_slave_1 (unregistering): left promiscuous mode
[  622.984805][T29507] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode
[  622.987952][T29507] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode
[  623.609185][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  624.648706][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  625.635180][T29493] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  625.688888][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  625.867928][T29525] mac80211_hwsim hwsim4 syzkaller0: entered promiscuous mode
[  625.870843][T29525] mac80211_hwsim hwsim4 syzkaller0: entered allmulticast mode
[  626.076730][T29544] bond67: option arp_interval: invalid value (18446744073709551615)
[  626.082183][T29544] bond67: option arp_interval: allowed values 0 - 2147483647
[  626.087309][T29544] bond67 (unregistering): Released all slaves
[  626.200901][T29551] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR
[  626.396543][T29567] __nla_validate_parse: 15 callbacks suppressed
[  626.396556][T29567] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6128'.
[  626.594791][T29580] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6132'.
[  626.728597][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  626.738718][T29589] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6134'.
[  626.748013][T29533] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  626.753232][T29533] Bluetooth: hci1: Error when powering off device on rfkill (-4)
[  626.796510][T29533] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  626.798826][T29533] Bluetooth: hci2: Error when powering off device on rfkill (-4)
[  626.807188][T29593] netlink: 'syz.1.6135': attribute type 1 has an invalid length.
[  626.825926][T29593] 8021q: adding VLAN 0 to HW filter on device bond68
[  626.835674][T29593] netlink: 48 bytes leftover after parsing attributes in process `syz.1.6135'.
[  626.872730][T29593] lo speed is unknown, defaulting to 1000
[  626.974920][T29611] netlink: 56 bytes leftover after parsing attributes in process `syz.1.6140'.
[  626.980282][T29613] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6141'.
[  626.985352][T29614] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6141'.
[  627.060311][T29621] netlink: 'syz.2.6143': attribute type 1 has an invalid length.
[  627.091215][T29621] 8021q: adding VLAN 0 to HW filter on device bond81
[  627.154739][T29621] netlink: 56 bytes leftover after parsing attributes in process `syz.2.6143'.
[  627.245839][T29637] netlink: 180 bytes leftover after parsing attributes in process `syz.2.6147'.
[  627.373869][T29648] : entered promiscuous mode
[  627.768828][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  627.877772][T29669] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  627.979648][T29676] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6157'.
[  628.144856][T29691] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  628.148252][T29691] SET target dimension over the limit!
[  628.191817][T29696] netlink: 'syz.2.6163': attribute type 3 has an invalid length.
[  628.194300][T29696] netlink: 'syz.2.6163': attribute type 2 has an invalid length.
[  628.196717][T29696] netlink: 'syz.2.6163': attribute type 2 has an invalid length.
[  628.223734][T29698] bridge17: left allmulticast mode
[  628.226096][T29698] dvmrp8: left allmulticast mode
[  628.240086][T29702] bridge0: port 1(vlan10) entered blocking state
[  628.242187][T29702] bridge0: port 1(vlan10) entered disabled state
[  628.244326][T29702] vlan10: entered allmulticast mode
[  628.246431][T29702] geneve0: entered allmulticast mode
[  628.252848][T29702] vlan10: entered promiscuous mode
[  628.254542][T29702] geneve0: entered promiscuous mode
[  628.379829][T29715] x_tables: ip_tables: icmp match: only valid for protocol 1
[  628.720934][T29741] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  628.725058][T29741] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  628.808693][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  629.056290][T29764] netlink: 'syz.1.6181': attribute type 10 has an invalid length.
[  629.091305][T29764] netlink: 'syz.1.6181': attribute type 1 has an invalid length.
[  629.848995][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  630.113496][T29800] 8021q: VLANs not supported on ipvlan0
[  630.121596][T29800] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  630.634877][T29832] netlink: 'syz.0.6201': attribute type 10 has an invalid length.
[  630.741120][T29851] netlink: 'syz.1.6206': attribute type 1 has an invalid length.
[  630.847393][T29855] netlink: 'syz.1.6207': attribute type 13 has an invalid length.
[  630.898885][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  630.938186][T29854] bond62: left allmulticast mode
[  630.941994][T29854] bond62: left promiscuous mode
[  631.024365][T29855] 8021q: adding VLAN 0 to HW filter on device 
[  631.031862][T29855] 8021q: adding VLAN 0 to HW filter on device batadv0
[  631.036841][T29855] wireguard: wg0: Could not create IPv4 socket
[  631.039929][T29855] A link change request failed with some changes committed already. Interface wg0 may have been left with an inconsistent configuration, please check.
[  631.049029][    T9] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  631.054858][   T13] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  631.062219][   T13] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  631.075176][T29860] lo speed is unknown, defaulting to 1000
[  631.302297][T29870] lo speed is unknown, defaulting to 1000
[  631.405666][T29883] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  631.409267][T19913] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  631.441058][T29887] __nla_validate_parse: 20 callbacks suppressed
[  631.441069][T29887] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6211'.
[  631.578057][T29888] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6214'.
[  631.583412][T29888] netlink: 320 bytes leftover after parsing attributes in process `syz.2.6214'.
[  631.595653][T29896] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6216'.
[  631.669255][T29897] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6216'.
[  631.782731][T29901] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6218'.
[  631.822123][T29908] validate_nla: 2 callbacks suppressed
[  631.822138][T29908] netlink: 'syz.2.6219': attribute type 3 has an invalid length.
[  631.837805][T29908] nbd: nbd2 already in use
[  631.840143][T29908] block nbd2: NBD_DISCONNECT
[  631.842116][T29908] block nbd2: Send disconnect failed -32
[  631.844850][T29908] block nbd2: shutting down sockets
[  631.859619][T29907] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6220'.
[  631.883693][T29908] veth1_macvtap: entered promiscuous mode
[  631.889484][T29908] A link change request failed with some changes committed already. Interface ; may have been left with an inconsistent configuration, please check.
[  631.894234][ T5667] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  631.897266][ T5667] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  631.901804][T29910] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6221'.
[  631.905027][ T5667] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  631.910469][ T5667] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  631.928819][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  631.965697][T29913] lo speed is unknown, defaulting to 1000
[  632.009545][    T9] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  632.207059][T29935] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6229'.
[  632.219602][T29935] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6229'.
[  632.968657][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  633.007142][T30010] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  633.019672][T30010] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  633.218080][T30033] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  633.733688][T30067] netlink: 'syz.1.6262': attribute type 1 has an invalid length.
[  634.019004][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  634.130314][T30086] netlink: 'syz.2.6268': attribute type 27 has an invalid length.
[  634.345709][T30102] netlink: 'syz.0.6272': attribute type 1 has an invalid length.
[  634.360609][T30103] bond67: option lp_interval: invalid value (18446744073709551607)
[  634.363329][T30103] bond67: option lp_interval: allowed values 1 - 2147483647
[  634.366952][T30103] bond67 (unregistering): Released all slaves
[  634.397274][T30102] 8021q: adding VLAN 0 to HW filter on device bond67
[  634.974312][T30112] wireguard: wg0: Could not create IPv4 socket
[  634.976984][T30112] A link change request failed with some changes committed already. Interface wg0 may have been left with an inconsistent configuration, please check.
[  634.999290][    T9] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  635.048561][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  635.095402][T30120] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT
[  635.131636][T30130] netlink: 'syz.1.6278': attribute type 10 has an invalid length.
[  635.208648][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  635.413854][T30149] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  635.421281][T30149] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1806) !
[  635.450620][T30152] netlink: 'syz.0.6283': attribute type 4 has an invalid length.
[  635.451559][T30149] tipc: Resetting bearer <eth:syzkaller0>
[  635.488128][T30154] netlink: 'syz.0.6285': attribute type 1 has an invalid length.
[  635.555773][T30158] lo speed is unknown, defaulting to 1000
[  635.593694][T30167] netlink: 'syz.1.6288': attribute type 1 has an invalid length.
[  635.599045][    T9] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  635.713749][T30178] bond70: (slave gretap6): making interface the new active one
[  635.721213][T30178] bond70: (slave gretap6): Enslaving as an active interface with an up link
[  635.733764][T30178] bond70: (slave bridge35): Enslaving as an active interface with a down link
[  635.746776][T30178] syz.1.6288 (30178) used greatest stack depth: 19008 bytes left
[  636.088845][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  636.119581][    T9] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  636.422244][T30233] mac80211_hwsim hwsim4 syzkaller0: left promiscuous mode
[  636.424521][T30233] mac80211_hwsim hwsim4 syzkaller0: left allmulticast mode
[  636.453125][T30235] __nla_validate_parse: 103 callbacks suppressed
[  636.453136][T30235] netlink: 132 bytes leftover after parsing attributes in process `syz.2.6309'.
[  636.679054][T30243] bond80: left promiscuous mode
[  636.684882][T30243] bond80: left allmulticast mode
[  636.763027][   T12] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  636.768848][   T12] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  636.777523][   T12] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  636.784220][   T12] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  636.910191][T30260] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6314'.
[  636.913066][T30260] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6314'.
[  636.915983][T30260] netlink: 58 bytes leftover after parsing attributes in process `syz.2.6314'.
[  637.110698][T30278] netlink: 'syz.1.6316': attribute type 1 has an invalid length.
[  637.122890][T30278] bond71: entered promiscuous mode
[  637.124883][T30278] 8021q: adding VLAN 0 to HW filter on device bond71
[  637.128808][T13106] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  637.128845][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  637.146815][T30278] 8021q: adding VLAN 0 to HW filter on device bond71
[  637.149494][T30278] bond71: (slave ip6gre6): The slave device specified does not support setting the MAC address
[  637.152834][T30278] bond71: (slave ip6gre6): Setting fail_over_mac to active for active-backup mode
[  637.163857][T30278] bond71: (slave ip6gre6): making interface the new active one
[  637.166310][T30278] ip6gre6: entered promiscuous mode
[  637.170656][T30278] bond71: (slave ip6gre6): Enslaving as an active interface with an up link
[  637.338311][T30297] x_tables: duplicate entry at hook 2
[  637.341327][T30297] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6318'.
[  637.368033][T30302] batadv0: entered promiscuous mode
[  638.076099][ T5616] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0
[  638.082160][ T5616] CPU: 0 UID: 0 PID: 5616 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[  638.082206][ T5616] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  638.082214][ T5616] Call Trace:
[  638.082221][ T5616]  <TASK>
[  638.082227][ T5616]  dump_stack_lvl+0xe8/0x150
[  638.082247][ T5616]  dump_header+0xd3/0x4c0
[  638.082268][ T5616]  oom_kill_process+0x3ab/0x970
[  638.082288][ T5616]  out_of_memory+0x106c/0x1410
[  638.082303][ T5616]  ? try_charge_memcg+0xbb9/0x1570
[  638.082324][ T5616]  ? __pfx___mutex_lock+0x10/0x10
[  638.082341][ T5616]  ? __pfx_out_of_memory+0x10/0x10
[  638.082355][ T5616]  ? do_raw_spin_unlock+0x4d/0x210
[  638.082380][ T5616]  try_charge_memcg+0xc77/0x1570
[  638.082410][ T5616]  ? __pfx_try_charge_memcg+0x10/0x10
[  638.082454][ T5616]  ? percpu_ref_tryget+0x15/0x180
[  638.082486][ T5616]  ? charge_memcg+0x23/0x2b0
[  638.082505][ T5616]  charge_memcg+0x1a2/0x2b0
[  638.082524][ T5616]  ? mem_cgroup_swapin_charge_folio+0x33/0x390
[  638.082541][ T5616]  mem_cgroup_swapin_charge_folio+0x262/0x390
[  638.082560][ T5616]  __swap_cache_prepare_and_add+0xdc/0x700
[  638.082586][ T5616]  ? page_rmappable_folio+0x9a/0x170
[  638.082610][ T5616]  swap_cache_alloc_folio+0xf1/0x240
[  638.082628][ T5616]  swap_cluster_readahead+0x355/0x670
[  638.082648][ T5616]  ? __pfx_swap_cluster_readahead+0x10/0x10
[  638.082671][ T5616]  ? get_vma_policy+0x27b/0x3c0
[  638.082692][ T5616]  swapin_readahead+0x196/0xc50
[  638.082710][ T5616]  ? swap_table_get+0x1e/0x260
[  638.082728][ T5616]  ? __pfx_swapin_readahead+0x10/0x10
[  638.082744][ T5616]  ? swap_table_get+0x1e/0x260
[  638.082757][ T5616]  ? swap_table_get+0x1e/0x260
[  638.082769][ T5616]  ? swap_table_get+0x1e/0x260
[  638.082784][ T5616]  ? swap_table_get+0x216/0x260
[  638.082799][ T5616]  ? swap_cache_get_folio+0x2e4/0x2f0
[  638.082818][ T5616]  do_swap_page+0x555/0x5120
[  638.082837][ T5616]  ? __pte_offset_map+0x29/0x240
[  638.082854][ T5616]  ? __pte_offset_map+0x29/0x240
[  638.082875][ T5616]  ? do_swap_page+0x128/0x5120
[  638.082889][ T5616]  ? __pfx_do_swap_page+0x10/0x10
[  638.082902][ T5616]  ? __pte_offset_map+0x1ae/0x240
[  638.082919][ T5616]  ? pte_offset_map_rw_nolock+0xea/0x160
[  638.082937][ T5616]  handle_mm_fault+0x12d4/0x3170
[  638.082963][ T5616]  ? handle_mm_fault+0xee/0x3170
[  638.082983][ T5616]  ? __pfx_handle_mm_fault+0x10/0x10
[  638.082997][ T5616]  ? lock_vma_under_rcu+0x45a/0x500
[  638.083032][ T5616]  do_user_addr_fault+0xa73/0x1340
[  638.083052][ T5616]  ? rcu_is_watching+0x15/0xb0
[  638.083068][ T5616]  ? trace_page_fault_user+0x84/0x1e0
[  638.083083][ T5616]  exc_page_fault+0x6a/0xc0
[  638.083102][ T5616]  asm_exc_page_fault+0x26/0x30
[  638.083115][ T5616] RIP: 0033:0x7f248c15d68e
[  638.083129][ T5616] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  638.083140][ T5616] RSP: 002b:00007ffe860435b8 EFLAGS: 00010246
[  638.083152][ T5616] RAX: 0000000000000000 RBX: 000055557828f500 RCX: 00007f248c15d68e
[  638.083161][ T5616] RDX: 00007ffe86043610 RSI: 0000000000000000 RDI: 0000000000000000
[  638.083169][ T5616] RBP: 00007ffe8604367c R08: 0000000000000000 R09: 0000000000000000
[  638.083176][ T5616] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000001388
[  638.083184][ T5616] R13: 00000000000927c0 R14: 000000000009b941 R15: 00007ffe860436d0
[  638.083205][ T5616]  </TASK>
[  638.084337][ T5616] memory: usage 307200kB, limit 307200kB, failcnt 2255
[  638.178877][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  638.180729][ T5616] memory+swap: usage 307384kB, limit 9007199254740988kB, failcnt 0
[  638.238638][ T5616] kmem: usage 299328kB, limit 9007199254740988kB, failcnt 0
[  638.240976][ T5616] Memory cgroup stats for /syz2:
[  638.242247][ T5616] cache 0
[  638.245015][ T5616] rss 0
[  638.246187][ T5616] rss_huge 0
[  638.247495][ T5616] shmem 0
[  638.258697][ T5616] mapped_file 0
[  638.260034][ T5616] dirty 0
[  638.262656][ T5616] writeback 0
[  638.263960][ T5616] workingset_refault_anon 3
[  638.268567][ T5616] workingset_refault_file 0
[  638.279854][ T5616] swap 188416
[  638.282081][ T5616] swapcached 258048
[  638.283763][ T5616] pgpgin 273289
[  638.285007][ T5616] pgpgout 273281
[  638.286196][ T5616] pgfault 530001
[  638.287340][ T5616] pgmajfault 2
[  638.298842][ T5616] inactive_anon 0
[  638.300507][ T5616] active_anon 32768
[  638.302084][ T5616] inactive_file 0
[  638.303618][ T5616] active_file 0
[  638.305061][ T5616] unevictable 0
[  638.306515][ T5616] hierarchical_memory_limit 314572800
[  638.315221][T30305] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  638.318874][ T5616] hierarchical_memsw_limit 9223372036854771712
[  638.321504][ T5616] total_cache 0
[  638.322962][ T5616] total_rss 0
[  638.324368][ T5616] total_rss_huge 0
[  638.325953][ T5616] total_shmem 0
[  638.327406][ T5616] total_mapped_file 0
[  638.338921][ T5616] total_dirty 0
[  638.340716][ T5616] total_writeback 0
[  638.342370][ T5616] total_workingset_refault_anon 3
[  638.344362][ T5616] total_workingset_refault_file 0
[  638.345495][T30305] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  638.346200][ T5616] total_swap 188416
[  638.346209][ T5616] total_swapcached 258048
[  638.346215][ T5616] total_pgpgin 273292
[  638.346220][ T5616] total_pgpgout 273284
[  638.346225][ T5616] total_pgfault 530004
[  638.346231][ T5616] total_pgmajfault 2
[  638.346236][ T5616] total_inactive_anon 0
[  638.346241][ T5616] total_active_anon 32768
[  638.346246][ T5616] total_inactive_file 0
[  638.346253][ T5616] total_active_file 0
[  638.346258][ T5616] total_unevictable 0
[  638.380141][ T5616] anon_cost 0
[  638.381222][ T5616] file_cost 0
[  638.383929][ T5616] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.6318,pid=30285,uid=0
[  638.400930][ T5616] Memory cgroup out of memory: Killed process 30285 (syz.2.6318) total-vm:167960kB, anon-rss:1240kB, file-rss:23520kB, shmem-rss:0kB, UID:0 pgtables:140kB oom_score_adj:1000
[  638.539477][T30307] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6322'.
[  638.542323][T30307] bond0: ARP target 170.170.170.170 is already present
[  638.544511][T30307] bond0: option arp_ip_target: invalid value (2863311530)
[  638.777032][T30324] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6328'.
[  638.780201][T30324] netlink: 'syz.2.6328': attribute type 2 has an invalid length.
[  638.806707][T30328] netlink: 256 bytes leftover after parsing attributes in process `syz.2.6329'.
[  638.815023][T30329] netlink: 'syz.0.6327': attribute type 4 has an invalid length.
[  638.930540][T30336] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6332'.
[  638.940882][T30336] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6332'.
[  638.960912][T30337] netlink: 'syz.2.6333': attribute type 1 has an invalid length.
[  638.964377][T30337] netlink: 'syz.2.6333': attribute type 11 has an invalid length.
[  639.190876][T30346] batadv0: left promiscuous mode
[  639.203820][T30346] team_slave_1: left promiscuous mode
[  639.207326][T30346] bond49: left promiscuous mode
[  639.209190][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  639.214512][T30346] bond49: left allmulticast mode
[  639.216687][T30346] gre5: left promiscuous mode
[  639.218793][T30346] veth39: left allmulticast mode
[  639.221246][T30346] bond53: left promiscuous mode
[  639.223354][T30346] bond55: left promiscuous mode
[  639.225479][T30346] veth41: left promiscuous mode
[  639.227619][T30346] bond57: left promiscuous mode
[  639.230859][T30346] bond57: left allmulticast mode
[  639.232932][T30346] veth43: left allmulticast mode
[  639.234532][T30346] macvlan1: left promiscuous mode
[  639.236046][T30346] macvlan1: left allmulticast mode
[  639.238221][T30346] bridge30: left promiscuous mode
[  639.241480][T30346] bridge30: left allmulticast mode
[  639.243314][T30346] bridge33: left promiscuous mode
[  639.245036][T30346] bridge33: left allmulticast mode
[  639.246718][T30346] bond65: left promiscuous mode
[  639.262117][T30346] bond71: left promiscuous mode
[  639.266654][T30346] ip6gre6: left promiscuous mode
[  639.288317][T30353] syzkaller1: entered promiscuous mode
[  639.291341][T30353] syzkaller1: entered allmulticast mode
[  639.430737][T30367] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  639.438760][T30365] nbd: must specify at least one socket
[  639.495185][T30377] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  639.499438][T30377] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  639.502300][T30377] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  639.505144][T30377] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  639.515639][T30377] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  639.521685][T30377] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  639.526353][T30377] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  639.734577][T30401] netlink: 'syz.0.6351': attribute type 1 has an invalid length.
[  639.747247][T30401] bond68: entered promiscuous mode
[  639.749722][T30401] 8021q: adding VLAN 0 to HW filter on device bond68
[  639.787321][T30401] bond68: (slave bridge50): making interface the new active one
[  639.792638][T30401] bridge50: entered promiscuous mode
[  639.795151][T30401] bond68: (slave bridge50): Enslaving as an active interface with an up link
[  639.806697][T30406] netlink: 'syz.2.6352': attribute type 13 has an invalid length.
[  639.810268][T30406] netlink: 'syz.2.6352': attribute type 17 has an invalid length.
[  639.842329][T30406] 8021q: adding VLAN 0 to HW filter on device batadv0
[  639.891498][T30406] veth1_macvtap: left promiscuous mode
[  639.904152][T30406] veth1_macvtap: entered promiscuous mode
[  639.916584][ T5667] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  639.920190][ T5667] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  639.927077][ T5667] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  639.930519][ T5667] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  639.973315][T30412] lo speed is unknown, defaulting to 1000
[  640.142716][T30419] 8021q: adding VLAN 0 to HW filter on device bond82
[  640.513003][T30451] netlink: 'syz.2.6365': attribute type 3 has an invalid length.
[  640.537191][T30455] tipc: MTU too low for tipc bearer
[  640.730228][T30475] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  640.913706][T30485] tipc: MTU too low for tipc bearer
[  641.005526][T30495] ip6gretap4: entered promiscuous mode
[  641.157997][T30507] Bluetooth: hci1: expected 36 bytes, got 2 bytes
[  641.163282][T30509] Bluetooth: hci1: expected 36 bytes, got 2 bytes
[  642.328966][    C1] net_ratelimit: 29 callbacks suppressed
[  642.328987][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  643.368669][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  643.947870][T30526] openvswitch: netlink: IP tunnel dst address not specified
[  643.954504][T30526] netlink: 'syz.2.6377': attribute type 7 has an invalid length.
[  643.957212][T30526] netlink: 'syz.2.6377': attribute type 7 has an invalid length.
[  643.957442][T30523] __nla_validate_parse: 22 callbacks suppressed
[  643.957460][T30523] netlink: 88 bytes leftover after parsing attributes in process `syz.1.6376'.
[  643.974008][T30523] netlink: 76 bytes leftover after parsing attributes in process `syz.1.6376'.
[  643.983274][T30523] netlink: 88 bytes leftover after parsing attributes in process `syz.1.6376'.
[  643.988658][T30525] netlink: 'syz.1.6376': attribute type 1 has an invalid length.
[  643.991741][T30525] netlink: 224 bytes leftover after parsing attributes in process `syz.1.6376'.
[  643.994919][T30523] netlink: 'syz.1.6376': attribute type 1 has an invalid length.
[  643.997418][T30523] netlink: 224 bytes leftover after parsing attributes in process `syz.1.6376'.
[  644.033375][T30536] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6380'.
[  644.083196][T30542] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6382'.
[  644.093354][T30544] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.6383'.
[  644.181433][T30546] pimreg: left allmulticast mode
[  644.240726][T30561] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  644.244651][T30561] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  644.269781][T30563] lo speed is unknown, defaulting to 1000
[  644.341655][T30571] : renamed from bond0
[  644.349617][T30571] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6388'.
[  644.409326][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  644.821353][T30600] netlink: 'syz.2.6393': attribute type 1 has an invalid length.
[  644.869067][T30600] bond0: (slave veth57): Enslaving as an active interface with a down link
[  644.921728][T30600] bond0: (slave veth59): Enslaving as an active interface with a down link
[  644.931423][T30600] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6393'.
[  644.941670][T30600] 8021q: adding VLAN 0 to HW filter on device bond0
[  644.962078][T30617] netlink: 'syz.1.6394': attribute type 13 has an invalid length.
[  644.965129][T30617] netlink: 'syz.1.6394': attribute type 17 has an invalid length.
[  644.983559][T30617] 8021q: adding VLAN 0 to HW filter on device 
[  644.987826][T30617] 8021q: adding VLAN 0 to HW filter on device batadv0
[  644.993044][T30617] wireguard: wg0: Could not create IPv4 socket
[  644.995162][T30617] A link change request failed with some changes committed already. Interface wg0 may have been left with an inconsistent configuration, please check.
[  645.010227][T13105] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  645.199068][T13105] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  645.386613][T13112] syz0: Port: 1 Link ACTIVE
[  645.426285][T30645] wireguard: wg0: Could not create IPv4 socket
[  645.430155][T30645] A link change request failed with some changes committed already. Interface wg0 may have been left with an inconsistent configuration, please check.
[  645.439778][T13105] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  645.458726][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  645.689268][   T13] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  645.719073][T13105] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  645.930336][T30678] xt_hashlimit: size too large, truncated to 1048576
[  645.983687][T30681] netlink: 'syz.2.6408': attribute type 1 has an invalid length.
[  646.179631][T30698] IPVS: set_ctl: invalid protocol: 0 100.1.0.255:21
[  646.182226][T30698] xt_hashlimit: size too large, truncated to 1048576
[  646.235459][T30703] netlink: 'syz.1.6410': attribute type 1 has an invalid length.
[  646.499023][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  646.609218][T30746] netlink: 'syz.0.6422': attribute type 10 has an invalid length.
[  646.649137][T13105] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  646.734423][   T13] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  646.737993][   T13] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  646.870123][T30780] IPVS: set_ctl: invalid protocol: 4 172.20.20.187:0
[  647.069594][T13105] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  647.321998][T30839] xt_hashlimit: invalid rate
[  647.391536][T30839] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  647.462719][T30848] 8021q: adding VLAN 0 to HW filter on device bond83
[  647.486444][T30848] bond83 (unregistering): Released all slaves
[  647.531951][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  647.607358][T30853] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  647.747307][T30868] openvswitch: netlink: ct_state flags ffffffff unsupported
[  647.881346][T30871] A link change request failed with some changes committed already. Interface ; may have been left with an inconsistent configuration, please check.
[  647.919197][T30876] 8021q: adding VLAN 0 to HW filter on device bond72
[  647.972882][T30879] bond71: (slave geneve7): Releasing active interface
[  647.976714][T30879] bond72: (slave bond73): Releasing backup interface
[  647.981484][T30879] veth45: left allmulticast mode
[  647.983095][T30879] veth45: left promiscuous mode
[  647.985073][T30879] bridge27: port 1(veth45) entered disabled state
[  647.991647][T30879] vlan10: left allmulticast mode
[  647.994143][T30879] geneve0: left allmulticast mode
[  647.997978][T30879] vlan10: left promiscuous mode
[  648.001940][T30879] geneve0: left promiscuous mode
[  648.005525][T30879] bridge0: port 1(vlan10) entered disabled state
[  648.015148][T30879] bond0: (slave veth57): Releasing active interface
[  648.017309][T30879] bond0: (slave veth57): the permanent HWaddr of slave - d2:f4:51:0f:99:28 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  648.040846][T30879] bond0: (slave veth59): Releasing active interface
[  648.168313][T30896] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  648.173279][T30896] syzkaller0: entered allmulticast mode
[  648.219320][T30899] bridge0: port 1(erspan0) entered blocking state
[  648.221612][T30899] bridge0: port 1(erspan0) entered disabled state
[  648.223762][T30899] erspan0: entered allmulticast mode
[  648.232733][T30899] erspan0: left allmulticast mode
[  648.305837][T30904] openvswitch: netlink: VXLAN extension 51 out of range max 1
[  648.568941][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  648.742440][T30943] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  648.763030][T30943] syzkaller0: mtu less than device minimum
[  648.959566][T30962] __nla_validate_parse: 27 callbacks suppressed
[  648.959584][T30962] netlink: 4768 bytes leftover after parsing attributes in process `syz.0.6482'.
[  649.223285][T30983] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  649.238114][T30983] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  649.389069][T30991] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6489'.
[  649.393607][T30991] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6489'.
[  649.442785][T30996] bond85: option packets_per_slave: mode dependency failed, not supported in mode balance-tlb(5)
[  649.454780][T30996] bond85 (unregistering): Released all slaves
[  649.515923][T31001] validate_nla: 9 callbacks suppressed
[  649.515940][T31001] netlink: 'syz.1.6492': attribute type 13 has an invalid length.
[  649.559504][T13112] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  649.608749][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  649.693073][T31007] bond85: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0)
[  649.698187][T31007] bond85 (unregistering): Released all slaves
[  650.064516][T31044] vlan8: left allmulticast mode
[  650.066180][T31044] geneve0: left allmulticast mode
[  650.068223][T31044] bridge0: port 1(vlan8) entered disabled state
[  650.092848][T31048] netlink: 'syz.0.6502': attribute type 1 has an invalid length.
[  650.146724][T31048] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6502'.
[  650.150396][T31048] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6502'.
[  650.160232][T31048] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap6
[  650.164211][T31048] gretap6: entered allmulticast mode
[  650.266924][T13112] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  650.326240][T31065] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6509'.
[  650.335968][T31063] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6510'.
[  650.346043][T31065] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6509'.
[  650.458120][T31078] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6511'.
[  650.460141][T31073] nbd2: detected capacity change from 0 to 127
[  650.467717][   T56] block nbd2: Receive control failed (result -32)
[  650.491833][T30565] block nbd2: Dead connection, failed to find a fallback
[  650.494181][T31071] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  650.503631][T30565] block nbd2: shutting down sockets
[  650.506175][T31071] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  650.522919][T30565] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  650.534040][T30565] Buffer I/O error on dev nbd2, logical block 0, async page read
[  650.537057][T30565] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  650.542957][T30565] Buffer I/O error on dev nbd2, logical block 1, async page read
[  650.547598][T30565] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  650.550923][T30565] Buffer I/O error on dev nbd2, logical block 2, async page read
[  650.553612][T30565] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  650.556702][T30565] Buffer I/O error on dev nbd2, logical block 3, async page read
[  650.559735][T30565] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  650.562801][T30565] Buffer I/O error on dev nbd2, logical block 0, async page read
[  650.565726][T30565] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  650.569298][    C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  650.572239][T30565] Buffer I/O error on dev nbd2, logical block 1, async page read
[  650.576663][T30565] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  650.579985][T30565] Buffer I/O error on dev nbd2, logical block 2, async page read
[  650.582964][T30565] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  650.585948][T30565] Buffer I/O error on dev nbd2, logical block 3, async page read
[  650.590412][T30565] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  650.593255][T30565] Buffer I/O error on dev nbd2, logical block 0, async page read
[  650.596028][T30565] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  650.600816][T30565] Buffer I/O error on dev nbd2, logical block 1, async page read
[  650.606090][T30565] ldm_validate_partition_table(): Disk read failed.
[  650.612566][T30565] Dev nbd2: unable to read RDB block 0
[  650.618848][T30565]  nbd2: unable to read partition table
[  650.658252][T30565] ldm_validate_partition_table(): Disk read failed.
[  650.658999][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  650.662598][T30565] Dev nbd2: unable to read RDB block 0
[  650.670763][T30565]  nbd2: unable to read partition table
[  650.675214][T31088] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6516'.
[  651.299062][T13112] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  651.458284][T31103] openvswitch: netlink: Flow actions attr not present in new flow.
[  651.603598][T31111] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[  651.707608][T31117] netlink: 'syz.0.6525': attribute type 4 has an invalid length.
[  651.728910][T31117] netlink: 'syz.0.6525': attribute type 4 has an invalid length.
[  652.168926][   T31] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  652.277786][T31128] sctp: [Deprecated]: syz.1.6528 (pid 31128) Use of struct sctp_assoc_value in delayed_ack socket option.
[  652.277786][T31128] Use struct sctp_sack_info instead
[  652.426528][T31134] bond0: ARP target 170.170.170.170 is already present
[  652.429314][T31134] bond0: option arp_ip_target: invalid value (2863311530)
[  652.728983][    C1] net_ratelimit: 1 callbacks suppressed
[  652.729002][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  652.932820][T31177] bridge0: entered allmulticast mode
[  653.028164][T31183] bond85: option tlb_dynamic_lb: invalid value (5)
[  653.035622][T31183] bond85 (unregistering): Released all slaves
[  653.104110][T31186] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  653.427320][T31226] netlink: 'syz.2.6554': attribute type 1 has an invalid length.
[  653.452244][T31226] 8021q: adding VLAN 0 to HW filter on device bond85
[  653.466905][T31227] vlan11: entered allmulticast mode
[  653.468774][T31227] bond85: entered allmulticast mode
[  653.706492][T31249] netem: change failed
[  653.778649][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  654.535677][T31268] __nla_validate_parse: 11 callbacks suppressed
[  654.535695][T31268] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6563'.
[  654.689879][T31278] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6566'.
[  654.735305][T31285] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6567'.
[  654.808972][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  654.842471][T31288] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0)
[  655.465069][T31291] sctp: [Deprecated]: syz.0.6569 (pid 31291) Use of int in max_burst socket option deprecated.
[  655.465069][T31291] Use struct sctp_assoc_value instead
[  655.505190][T31294] netlink: 802 bytes leftover after parsing attributes in process `syz.2.6570'.
[  655.762071][T31303] x_tables: duplicate underflow at hook 1
[  655.766156][T31303] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.6573'.
[  655.818252][T31310] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6575'.
[  655.848711][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  655.931582][T31319] x_tables: duplicate underflow at hook 3
[  656.504332][T31344] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6583'.
[  656.540022][T31350] netlink: 56 bytes leftover after parsing attributes in process `syz.1.6585'.
[  656.589685][T31350] 8021q: adding VLAN 0 to HW filter on device macvlan1
[  656.850208][T31373] netlink: 'syz.1.6589': attribute type 1 has an invalid length.
[  656.853387][T31373] netlink: 256 bytes leftover after parsing attributes in process `syz.1.6589'.
[  656.891542][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  656.961084][T31380] tc_dump_action: action bad kind
[  657.089816][T31395] 
[  657.090645][T31395] ======================================================
[  657.092770][T31395] WARNING: possible circular locking dependency detected
[  657.094886][T31395] syzkaller #0 Not tainted
[  657.096363][T31395] ------------------------------------------------------
[  657.098496][T31395] syz.1.6595/31395 is trying to acquire lock:
[  657.100364][T31395] ffffffff8ea85420 (fs_reclaim){+.+.}-{0:0}, at: __kmalloc_cache_noprof+0x40/0x660
[  657.103180][T31395] 
[  657.103180][T31395] but task is already holding lock:
[  657.105444][T31395] ffffffff8e7eb650 (cpu_hotplug_lock){++++}-{0:0}, at: cgroup_procs_write_start+0x539/0x900
[  657.108523][T31395] 
[  657.108523][T31395] which lock already depends on the new lock.
[  657.108523][T31395] 
[  657.111646][T31395] 
[  657.111646][T31395] the existing dependency chain (in reverse order) is:
[  657.114651][T31395] 
[  657.114651][T31395] -> #7 (cpu_hotplug_lock){++++}-{0:0}:
[  657.117220][T31395]        cpus_read_lock+0x42/0x160
[  657.118841][T31395]        static_key_slow_inc+0x12/0x30
[  657.120804][T31395]        setup_udp_tunnel_sock+0x2fd/0x510
[  657.122967][T31395]        l2tp_tunnel_register+0xde2/0x1490
[  657.125128][T31395]        pppol2tp_connect+0x8b7/0x17c0
[  657.127267][T31395]        __sys_connect+0x312/0x450
[  657.129304][T31395]        __x64_sys_connect+0x7a/0x90
[  657.131391][T31395]        do_syscall_64+0x15f/0xf80
[  657.133390][T31395]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  657.135633][T31395] 
[  657.135633][T31395] -> #6 (sk_lock-AF_INET6){+.+.}-{0:0}:
[  657.138083][T31395]        lock_sock_nested+0x41/0x100
[  657.139706][T31395]        inet_shutdown+0x6a/0x390
[  657.141256][T31395]        nbd_mark_nsock_dead+0x2e9/0x560
[  657.142998][T31395]        recv_work+0x1c2e/0x1d40
[  657.144529][T31395]        process_scheduled_works+0xb5d/0x1860
[  657.146369][T31395]        worker_thread+0xa53/0xfc0
[  657.147950][T31395]        kthread+0x389/0x470
[  657.149390][T31395]        ret_from_fork+0x514/0xb70
[  657.150958][T31395]        ret_from_fork_asm+0x1a/0x30
[  657.152553][T31395] 
[  657.152553][T31395] -> #5 (&nsock->tx_lock){+.+.}-{4:4}:
[  657.154878][T31395]        __mutex_lock+0x1a3/0x1550
[  657.156474][T31395]        nbd_queue_rq+0x37b/0x1100
[  657.158041][T31395]        blk_mq_dispatch_rq_list+0xa70/0x1910
[  657.159899][T31395]        __blk_mq_sched_dispatch_requests+0xdcc/0x1600
[  657.161972][T31395]        blk_mq_sched_dispatch_requests+0xd7/0x190
[  657.163944][T31395]        blk_mq_run_hw_queue+0x348/0x4f0
[  657.165728][T31395]        blk_mq_dispatch_list+0xd16/0xe10
[  657.167657][T31395]        blk_mq_flush_plug_list+0x48d/0x570
[  657.169478][T31395]        __blk_flush_plug+0x3ed/0x4d0
[  657.171178][T31395]        __submit_bio+0x28d/0x580
[  657.172793][T31395]        submit_bio_noacct_nocheck+0x2f4/0xa40
[  657.174767][T31395]        block_read_full_folio+0x599/0x830
[  657.176847][T31395]        filemap_read_folio+0x137/0x3b0
[  657.178662][T31395]        do_read_cache_folio+0x358/0x590
[  657.180484][T31395]        read_part_sector+0xb6/0x2b0
[  657.182188][T31395]        adfspart_check_ICS+0xb1/0x960
[  657.183889][T31395]        bdev_disk_changed+0x817/0x1770
[  657.185691][T31395]        blkdev_get_whole+0x380/0x510
[  657.187476][T31395]        bdev_open+0x31e/0xd30
[  657.189031][T31395]        blkdev_open+0x470/0x610
[  657.190613][T31395]        do_dentry_open+0x785/0x14e0
[  657.192194][T31395]        vfs_open+0x3b/0x340
[  657.193694][T31395]        path_openat+0x2e08/0x3860
[  657.195322][T31395]        do_file_open+0x23e/0x4a0
[  657.197023][T31395]        do_sys_openat2+0x113/0x200
[  657.198720][T31395]        __x64_sys_openat+0x138/0x170
[  657.200374][T31395]        do_syscall_64+0x15f/0xf80
[  657.202014][T31395]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  657.204093][T31395] 
[  657.204093][T31395] -> #4 (&cmd->lock){+.+.}-{4:4}:
[  657.206497][T31395]        __mutex_lock+0x1a3/0x1550
[  657.208034][T31395]        nbd_queue_rq+0xc6/0x1100
[  657.209634][T31395]        blk_mq_dispatch_rq_list+0xa70/0x1910
[  657.211578][T31395]        __blk_mq_sched_dispatch_requests+0xdcc/0x1600
[  657.213744][T31395]        blk_mq_sched_dispatch_requests+0xd7/0x190
[  657.215911][T31395]        blk_mq_run_hw_queue+0x348/0x4f0
[  657.217796][T31395]        blk_mq_dispatch_list+0xd16/0xe10
[  657.219603][T31395]        blk_mq_flush_plug_list+0x48d/0x570
[  657.221496][T31395]        __blk_flush_plug+0x3ed/0x4d0
[  657.223198][T31395]        __submit_bio+0x28d/0x580
[  657.224829][T31395]        submit_bio_noacct_nocheck+0x2f4/0xa40
[  657.226958][T31395]        block_read_full_folio+0x599/0x830
[  657.228796][T31395]        filemap_read_folio+0x137/0x3b0
[  657.230573][T31395]        do_read_cache_folio+0x358/0x590
[  657.232376][T31395]        read_part_sector+0xb6/0x2b0
[  657.234008][T31395]        adfspart_check_ICS+0xb1/0x960
[  657.235759][T31395]        bdev_disk_changed+0x817/0x1770
[  657.237534][T31395]        blkdev_get_whole+0x380/0x510
[  657.239261][T31395]        bdev_open+0x31e/0xd30
[  657.240799][T31395]        blkdev_open+0x470/0x610
[  657.242432][T31395]        do_dentry_open+0x785/0x14e0
[  657.244221][T31395]        vfs_open+0x3b/0x340
[  657.245792][T31395]        path_openat+0x2e08/0x3860
[  657.247529][T31395]        do_file_open+0x23e/0x4a0
[  657.249129][T31395]        do_sys_openat2+0x113/0x200
[  657.250918][T31395]        __x64_sys_openat+0x138/0x170
[  657.252683][T31395]        do_syscall_64+0x15f/0xf80
[  657.254318][T31395]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  657.256334][T31395] 
[  657.256334][T31395] -> #3 (set->srcu){.+.+}-{0:0}:
[  657.258785][T31395]        __synchronize_srcu+0xca/0x300
[  657.260940][T31395]        elevator_switch+0x1e8/0x7a0
[  657.262999][T31395]        elevator_change+0x2cc/0x450
[  657.264883][T31395]        elevator_set_default+0x36c/0x430
[  657.266849][T31395]        blk_register_queue+0x3e9/0x4e0
[  657.268689][T31395]        __add_disk+0x677/0xd50
[  657.270224][T31395]        add_disk_fwnode+0xfb/0x480
[  657.271906][T31395]        nbd_dev_add+0x72c/0xb50
[  657.273457][T31395]        nbd_init+0x168/0x1f0
[  657.274904][T31395]        do_one_initcall+0x250/0x870
[  657.276708][T31395]        do_initcall_level+0x104/0x190
[  657.278467][T31395]        do_initcalls+0x59/0xa0
[  657.280020][T31395]        kernel_init_freeable+0x2a6/0x3e0
[  657.281735][T31395]        kernel_init+0x1d/0x1d0
[  657.283300][T31395]        ret_from_fork+0x514/0xb70
[  657.284933][T31395]        ret_from_fork_asm+0x1a/0x30
[  657.286742][T31395] 
[  657.286742][T31395] -> #2 (&q->elevator_lock){+.+.}-{4:4}:
[  657.289177][T31395]        __mutex_lock+0x1a3/0x1550
[  657.290801][T31395]        elevator_change+0x1b3/0x450
[  657.292512][T31395]        elevator_set_none+0xb5/0x140
[  657.294186][T31395]        blk_mq_update_nr_hw_queues+0x5e7/0x1a60
[  657.296226][T31395]        nbd_start_device+0x17f/0xb10
[  657.297974][T31395]        nbd_genl_connect+0x165b/0x1cf0
[  657.299717][T31395]        genl_family_rcv_msg_doit+0x22a/0x330
[  657.301642][T31395]        genl_rcv_msg+0x61c/0x7a0
[  657.303203][T31395]        netlink_rcv_skb+0x232/0x4b0
[  657.304863][T31395]        genl_rcv+0x28/0x40
[  657.306425][T31395]        netlink_unicast+0x75c/0x8e0
[  657.308106][T31395]        netlink_sendmsg+0x813/0xb40
[  657.309884][T31395]        ____sys_sendmsg+0x972/0x9f0
[  657.311664][T31395]        ___sys_sendmsg+0x2a5/0x360
[  657.313475][T31395]        __x64_sys_sendmsg+0x1bd/0x2a0
[  657.315255][T31395]        do_syscall_64+0x15f/0xf80
[  657.317035][T31395]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  657.319279][T31395] 
[  657.319279][T31395] -> #1 (&q->q_usage_counter(io)#50){++++}-{0:0}:
[  657.322541][T31395]        blk_alloc_queue+0x546/0x680
[  657.324675][T31395]        __blk_mq_alloc_disk+0x197/0x390
[  657.326977][T31395]        nbd_dev_add+0x499/0xb50
[  657.329007][T31395]        nbd_init+0x168/0x1f0
[  657.330930][T31395]        do_one_initcall+0x250/0x870
[  657.333090][T31395]        do_initcall_level+0x104/0x190
[  657.335199][T31395]        do_initcalls+0x59/0xa0
[  657.337179][T31395]        kernel_init_freeable+0x2a6/0x3e0
[  657.339509][T31395]        kernel_init+0x1d/0x1d0
[  657.341487][T31395]        ret_from_fork+0x514/0xb70
[  657.343584][T31395]        ret_from_fork_asm+0x1a/0x30
[  657.345713][T31395] 
[  657.345713][T31395] -> #0 (fs_reclaim){+.+.}-{0:0}:
[  657.348640][T31395]        __lock_acquire+0x15a5/0x2cf0
[  657.350783][T31395]        lock_acquire+0x106/0x350
[  657.352823][T31395]        fs_reclaim_acquire+0x71/0x100
[  657.355064][T31395]        __kmalloc_cache_noprof+0x40/0x660
[  657.357458][T31395]        find_css_set+0xb41/0x1b40
[  657.359571][T31395]        cgroup_migrate_prepare_dst+0x130/0x700
[  657.362137][T31395]        cgroup_attach_task+0x47c/0x840
[  657.364313][T31395]        __cgroup_procs_write+0x2a9/0x300
[  657.366639][T31395]        cgroup_threads_write+0x24/0x50
[  657.368922][T31395]        cgroup_file_write+0x331/0x8f0
[  657.371097][T31395]        kernfs_fop_write_iter+0x3af/0x540
[  657.373339][T31395]        vfs_write+0x61d/0xb90
[  657.375237][T31395]        ksys_write+0x150/0x270
[  657.377210][T31395]        do_syscall_64+0x15f/0xf80
[  657.379127][T31395]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  657.381761][T31395] 
[  657.381761][T31395] other info that might help us debug this:
[  657.381761][T31395] 
[  657.385885][T31395] Chain exists of:
[  657.385885][T31395]   fs_reclaim --> sk_lock-AF_INET6 --> cpu_hotplug_lock
[  657.385885][T31395] 
[  657.390953][T31395]  Possible unsafe locking scenario:
[  657.390953][T31395] 
[  657.393827][T31395]        CPU0                    CPU1
[  657.396018][T31395]        ----                    ----
[  657.398162][T31395]   rlock(cpu_hotplug_lock);
[  657.400083][T31395]                                lock(sk_lock-AF_INET6);
[  657.402894][T31395]                                lock(cpu_hotplug_lock);
[  657.405761][T31395]   lock(fs_reclaim);
[  657.407372][T31395] 
[  657.407372][T31395]  *** DEADLOCK ***
[  657.407372][T31395] 
[  657.410608][T31395] 5 locks held by syz.1.6595/31395:
[  657.412697][T31395]  #0: ffff88803bb1a0f0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320
[  657.416219][T31395]  #1: ffff8881b9b50410 (sb_writers#9){.+.+}-{0:0}, at: vfs_write+0x227/0xb90
[  657.419819][T31395]  #2: ffff88810c35c880 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1de/0x540
[  657.423772][T31395]  #3: ffffffff8e99c320 (cgroup_mutex){+.+.}-{4:4}, at: cgroup_kn_lock_live+0x13c/0x230
[  657.427601][T31395]  #4: ffffffff8e7eb650 (cpu_hotplug_lock){++++}-{0:0}, at: cgroup_procs_write_start+0x539/0x900
[  657.431774][T31395] 
[  657.431774][T31395] stack backtrace:
[  657.433843][T31395] CPU: 0 UID: 0 PID: 31395 Comm: syz.1.6595 Not tainted syzkaller #0 PREEMPT(full) 
[  657.433856][T31395] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  657.433862][T31395] Call Trace:
[  657.433868][T31395]  <TASK>
[  657.433874][T31395]  dump_stack_lvl+0xe8/0x150
[  657.433889][T31395]  print_circular_bug+0x2e1/0x300
[  657.433902][T31395]  check_noncircular+0x12e/0x150
[  657.433914][T31395]  __lock_acquire+0x15a5/0x2cf0
[  657.433924][T31395]  ? __lock_acquire+0x6b5/0x2cf0
[  657.433933][T31395]  ? __lock_acquire+0x6b5/0x2cf0
[  657.433941][T31395]  ? __kmalloc_cache_noprof+0x40/0x660
[  657.433953][T31395]  lock_acquire+0x106/0x350
[  657.433961][T31395]  ? __kmalloc_cache_noprof+0x40/0x660
[  657.433975][T31395]  fs_reclaim_acquire+0x71/0x100
[  657.433985][T31395]  ? __kmalloc_cache_noprof+0x40/0x660
[  657.433995][T31395]  __kmalloc_cache_noprof+0x40/0x660
[  657.434004][T31395]  ? find_css_set+0xb41/0x1b40
[  657.434015][T31395]  ? _raw_spin_unlock_irq+0x23/0x50
[  657.434027][T31395]  find_css_set+0xb41/0x1b40
[  657.434040][T31395]  ? __pfx_find_css_set+0x10/0x10
[  657.434054][T31395]  cgroup_migrate_prepare_dst+0x130/0x700
[  657.434067][T31395]  cgroup_attach_task+0x47c/0x840
[  657.434074][T31395]  ? __pfx_cgroup_attach_task+0x10/0x10
[  657.434080][T31395]  ? iput+0x47f/0xe80
[  657.434092][T31395]  ? cgroup_attach_permissions+0x33f/0x9e0
[  657.434106][T31395]  __cgroup_procs_write+0x2a9/0x300
[  657.434120][T31395]  cgroup_threads_write+0x24/0x50
[  657.434130][T31395]  ? __pfx_cgroup_threads_write+0x10/0x10
[  657.434140][T31395]  cgroup_file_write+0x331/0x8f0
[  657.434151][T31395]  ? __pfx_cgroup_file_write+0x10/0x10
[  657.434163][T31395]  ? __pfx_cgroup_file_write+0x10/0x10
[  657.434172][T31395]  kernfs_fop_write_iter+0x3af/0x540
[  657.434182][T31395]  vfs_write+0x61d/0xb90
[  657.434194][T31395]  ? __pfx_vfs_write+0x10/0x10
[  657.434205][T31395]  ? __fget_files+0x2a/0x420
[  657.434214][T31395]  ksys_write+0x150/0x270
[  657.434225][T31395]  ? __pfx_ksys_write+0x10/0x10
[  657.434235][T31395]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  657.434243][T31395]  do_syscall_64+0x15f/0xf80
[  657.434250][T31395]  ? trace_irq_disable+0x3b/0x140
[  657.434262][T31395]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  657.434270][T31395] RIP: 0033:0x7f99a1d9ce59
[  657.434279][T31395] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  657.434286][T31395] RSP: 002b:00007f99a2d18028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  657.434295][T31395] RAX: ffffffffffffffda RBX: 00007f99a2015fa0 RCX: 00007f99a1d9ce59
[  657.434301][T31395] RDX: 0000000000000012 RSI: 0000200000000c40 RDI: 0000000000000006
[  657.434306][T31395] RBP: 00007f99a1e32d6f R08: 0000000000000000 R09: 0000000000000000
[  657.434311][T31395] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  657.434318][T31395] R13: 00007f99a2016038 R14: 00007f99a2015fa0 R15: 00007ffd9f945f58
[  657.434327][T31395]  </TASK>
[  657.601799][T31398] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6595'.
[  657.928536][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  658.968845][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  659.048762][    C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  660.008554][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  661.058776][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  662.098531][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  663.128861][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  664.168660][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  665.208824][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  666.248653][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
