last executing test programs:

1.29937747s ago: executing program 0 (id=4067):
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x14, 0x3b, 0x301, 0x270bd24, 0x25dfdbfa, {0x1}}, 0x14}}, 0x4000000)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000140)=ANY=[], 0x20) (async)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4048b}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_ACTOR_SYS_PRIO={0x6, 0x18, 0x3}, @IFLA_BOND_MODE={0x5, 0x1, 0x3}]}}}]}, 0x44}}, 0x0) (async)
r1 = socket$nl_route(0x10, 0x3, 0x0)
socket$kcm(0xa, 0x3, 0x87)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async, rerun: 64)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (rerun: 64)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) (async, rerun: 64)
ioctl$TUNATTACHFILTER(r3, 0x401054d5, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x4, 0x7}]}) (async, rerun: 64)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xa8001, 0x0) (async)
ioctl$TUNSETQUEUE(r3, 0x400454d9, &(0x7f00000000c0)={'veth0_to_batadv\x00', 0x400}) (async)
ioctl$TUNSETQUEUE(r3, 0x400454d9, &(0x7f0000000140)={'veth0_macvtap\x00', 0x200}) (async, rerun: 64)
r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) (async, rerun: 64)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$ETHTOOL_MSG_CHANNELS_GET(r5, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="3ffb99b81d3a0378f44122"], 0x14}}, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000340)={'bond0\x00', <r7=>0x0}) (async)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22052, r8, 0x0)
r9 = socket$l2tp(0x2, 0x2, 0x73)
setsockopt$inet_opts(r9, 0x0, 0xc, &(0x7f0000001140)='Y', 0x1) (async)
sendmsg$nl_route(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@setlink={0x30, 0x13, 0x1, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r7, 0x100, 0x20040}, [@IFLA_AF_SPEC={0x10, 0x1a, 0x0, 0x1, [@AF_INET6={0xc, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x41}]}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x20008884}, 0x8800)
ioctl$sock_SIOCOUTQ(r8, 0x5411, &(0x7f0000000100)) (async, rerun: 64)
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000000)={"94e900000000000010000600", 0x0, 0x0, {0x3, 0x800}, {0x4, 0x1}, 0x5, [0x9, 0xfffffffffffffffe, 0x0, 0x9, 0x0, 0x4000200, 0x6, 0x5, 0x6, 0x4, 0x8e, 0xfff, 0x0, 0x1ff, 0xe2, 0x4]}) (rerun: 64)
r10 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async, rerun: 64)
write$tun(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="034886dd010040030000140000006000000003088700fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef) (async, rerun: 64)
sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@getnexthop={0x20, 0x76, 0x1, 0x0, 0x25dfdbff, {0x3}, [@NHA_ID={0x8, 0x1, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x0)

1.220023543s ago: executing program 1 (id=4068):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000a00)=@newtaction={0x14, 0x76, 0x1, 0x70bd2b, 0x25dfdbfc}, 0x14}}, 0x0)
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
bind$nfc_llcp(r0, &(0x7f0000000080)={0x27, 0x0, 0x1000000, 0x7, 0x0, 0x6, "750538d1ee602ec4802a04ea7cdcd151bb2cd9893bc31f80718336d9bd3517076db9ad1f6a120d8be6d7f81cd81ec275000386e7d95f0669b740a5418d69d0", 0x10000000400001}, 0x60)
r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
bind$nfc_llcp(r1, &(0x7f0000000080)={0x27, 0x0, 0x0, 0x7, 0x0, 0x6, "750538d1ee602ec4802a04ea7cdcd151bb2cd9893bc31f80718336d9bd3517076db9ad1f6a120d8be6d7f81cd81ec275000386e7d95f0669b740a5418d69d0", 0x1000000000003f}, 0x60)
r2 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800019f00000000000000000200000000000000080001000100000004"], 0x24}, 0x1, 0x0, 0x0, 0x4005}, 0x0)
r3 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000280)={0xffffffff}, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={0x28, 0x12, 0xa01, 0xfffffffc, 0x0, {0xa}, [@typed={0xc, 0x5e, 0x0, 0x0, @u64=0x15a2}, @typed={0x8, 0xf8, 0x0, 0x0, @str='}{+\x00'}]}, 0x28}}, 0x0)
sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0x0)

1.216982202s ago: executing program 2 (id=4069):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = syz_genetlink_get_family_id$netlbl_cipso(0x0, 0xffffffffffffffff)
sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x24, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}]}, 0x24}}, 0x0)
r2 = socket$kcm(0x2, 0x3, 0x106)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
r4 = socket(0x10, 0x803, 0x0)
r5 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
r7 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r7)
getsockname$packet(r7, &(0x7f0000000180)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14)
sendmsg$nl_route(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r8, 0x50483}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r8}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4, 0xc00}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=@newtfilter={0x58, 0x2c, 0xd27, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r6, {0xc, 0xfff1}, {}, {0x6, 0xf}}, [@filter_kind_options=@f_flow={{0x9}, {0x28, 0x2, [@TCA_FLOW_EMATCHES={0x24, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xfffb}}, @TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x7, 0x7, 0x8}, {{0x0, 0x1, 0x0, 0x1}, {0x0, 0x1, 0x1, 0x1}}}}]}]}]}}]}, 0x58}}, 0x20040054)
write$bt_hci(r4, &(0x7f00000000c0)={0x1, @le_create_conn={{0x200d, 0x19}, {0x100, 0xde, 0x4b, 0xdd, @none, 0x0, 0x0, 0xebd, 0x5, 0x3, 0x6, 0x9}}}, 0x1d)
ioctl$EXT4_IOC_GET_ES_CACHE(r2, 0xc020662a, &(0x7f0000000680)={0x800, 0x0, 0x5, 0x8, 0x4, 0x0, [{0x8, 0x6, 0x8, '\x00', 0xb82}, {0x28, 0x0, 0x8000, '\x00', 0x2000}, {0xffffffffffff3698, 0x8, 0x6, '\x00', 0x1}, {0xfffffffffffffffd, 0xc3, 0x8}]})
sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWRULE={0x70, 0x6, 0xa, 0x160b, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_RULE_EXPRESSIONS={0x44, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x4}]}}}, {0x28, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NAT_TYPE={0x8}, @NFTA_NAT_REG_ADDR_MIN={0x8, 0x3, 0x1, 0x0, 0x14}, @NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x98}, 0x1, 0x0, 0x0, 0x850}, 0x4040080)
sendmsg$inet(r2, &(0x7f0000000040)={&(0x7f0000000380)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000080)="fbd2b9ed29d8974a6ce75f08916ac3b4da11bc1a", 0x24}], 0x1}, 0x0)
getsockname(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="88000000680001002dbd7000fcdbdf2500000000000000000c0002000100000015000000060003000100000004000b0006000700040000000c000200020000000400000044000c80"], 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x0)

1.213649855s ago: executing program 1 (id=4070):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000002c0)={0x28, 0x2, 0x3, 0x301, 0x0, 0x0, {0xa}, [@NFQA_CFG_PARAMS={0x9, 0x2, {0xfffffff7, 0x2}}, @NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x29}}]}, 0x28}}, 0x0) (async)
r1 = socket$nl_route(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f00000003c0)='GPL\x00', 0x9, 0x0, 0x0, 0x41000, 0x20}, 0x4b)
sendmsg$nl_route(r1, 0x0, 0x800)
r2 = socket$nl_route(0x10, 0x3, 0x0)
mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000300)='syz1\x00', 0x1ff) (async)
sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@getnexthop={0x18, 0x6a, 0x501, 0xfffffdfe, 0x25dfdbff}, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x20008000) (async)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_int(r3, 0x0, 0xb, &(0x7f0000000000)=0x1ff, 0x4) (async)
sendto$inet(r3, 0x0, 0xffef, 0x20000000, &(0x7f0000000240)={0x2, 0x4e22, @remote}, 0x10)
r4 = socket$inet(0x2, 0x2, 0x1)
sendmsg$inet(r4, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10, &(0x7f0000000600)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f00000002c0)="96bced8af9c8", 0x6}], 0x2, &(0x7f0000000580)=[@ip_tos_u8={{0x11, 0x0, 0x34}}], 0x18}, 0x42090)
setsockopt$inet_int(r3, 0x0, 0xb, 0x0, 0x0)
r5 = socket(0x2b, 0x80801, 0x1)
setsockopt$inet6_int(r5, 0x29, 0x1e, &(0x7f0000000280)=0x100, 0x4) (async)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f00000000c0)=[{0x20, 0x0, 0x2, 0xfffff018}, {0x6}]}, 0x10) (async)
sendmsg$ETHTOOL_MSG_PAUSE_SET(r5, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f0000000240)={0x44, 0x0, 0x800, 0x70bd2d, 0x25dfdbff, {}, [@ETHTOOL_A_PAUSE_RX={0x5, 0x3, 0x1}, @ETHTOOL_A_PAUSE_TX={0x5, 0x4, 0x1}, @ETHTOOL_A_PAUSE_RX={0x5, 0x3, 0x4}, @ETHTOOL_A_PAUSE_AUTONEG={0x5, 0x2, 0x1}, @ETHTOOL_A_PAUSE_AUTONEG={0x5}, @ETHTOOL_A_PAUSE_RX={0x5, 0x3, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x8044}, 0x4000050)

1.130395877s ago: executing program 1 (id=4071):
r0 = socket$netlink(0x10, 0x3, 0x0) (async, rerun: 64)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="f00000001a00130400000000fbdbdf257f00f6000000000000000000000000007f00000100000000000000000000000000004be64e240000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac1414110000000000000000000000000000000f33000000fe8000000000000000000000000000140000000000000000010000000000000000000000000000000000000000000000fffffffffffffffffcffffffffffff07ff000000000000000000000000000000ffffffffffffffff0800000000000000cc000000000000000000000000000000f5000000000000000010000000000000040000000a0001010000000000000000"], 0xf0}, 0x1, 0x0, 0x0, 0x40080}, 0x4000) (async, rerun: 64)
r1 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r1, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000980)=ANY=[@ANYBLOB="38000000ac0d000000100008001500000059718500000000013c1c454f0d1a7e094aadeb99d0e66400"/56], 0x38}, 0x1, 0x0, 0x0, 0x40084}, 0x810)
sendmsg$netlink(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000780), 0x0, 0x0, 0x0, 0x10}, 0x4045) (async)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)={0x14, 0x3, 0x2, 0x0, 0x0, 0x0, {0xa}}, 0x14}}, 0x800) (async)
sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async, rerun: 32)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000640)=ANY=[@ANYBLOB="140000001000010002000000000000000000000a44000000060a010400000000000000000200000018000480140001800e000100636f6e6e6c696d69740000000900010073797a30000000000900020073797a3200000000140000001100010000000000000000000a00000a"], 0x6c}, 0x1, 0x0, 0x0, 0x84}, 0x20000000) (async, rerun: 32)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff}) (async)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv0\x00', <r5=>0x0})
sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000840)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="017000fbdbdf250f000000080003dcb86aea000000000000000000", @ANYRES32=r5, @ANYBLOB="08003c00018000000500370000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x20008040}, 0x4000) (async, rerun: 64)
sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r0, &(0x7f0000000800)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000740)={&(0x7f0000000580)=ANY=[@ANYBLOB="1000bf49eeb2e1663650c5499b0c8d97", @ANYRES16=0x0, @ANYBLOB="040029bd7000fedbdf2506000000"], 0x14}}, 0x4040010) (rerun: 64)
unshare(0x28000600)
setsockopt$sock_attach_bpf(r4, 0x1, 0x4c, &(0x7f0000000000), 0x4)
sendmsg$inet(r3, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)
recvmsg$unix(r3, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x4b, &(0x7f0000000780)=[@rights={{0x10}}], 0x10}, 0x40000142) (async)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x80087601, 0x0)
sendmsg$sock(r0, &(0x7f0000000400)={&(0x7f0000000080)=@phonet={0x23, 0x6, 0x6}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000100)="077eb76cc0d694bda136c745245d267e5823a7cba30931411b5dea377973d320510718c884f266191c1fc37a1117a606ef9fc080738a31233f7562dc896a8f793db434", 0x43}, {&(0x7f0000000180)="3cfd5847982545d066bc37bae8275b07ed09d7ae8bf47b07208beb", 0x1b}, {&(0x7f00000002c0)="070d7d7696c2005791ffd229136f0fdd89349fa9385954f1f7c4ffce166e5fc4f7270aa3e71f66a9764774e3e0a2455830bde13ec8380ed225c48cfa34c9a42b916aacf89cdb48a7979643320f91f1ee8111517a04919f71dcf7aa4f9538fab05760bc28d1568df5a1f5e1838e96c4e0aecbf25f99", 0x75}], 0x3, &(0x7f0000000380)=[@mark={{0x14, 0x1, 0x24, 0xdf}}, @txtime={{0x18}}, @timestamping={{0x14, 0x1, 0x25, 0xd}}], 0x48}, 0x400d0) (async)
r6 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r7 = syz_genetlink_get_family_id$gtp(&(0x7f0000000400), 0xffffffffffffffff)
r8 = syz_open_procfs$namespace(0x0, &(0x7f0000000600)='ns/pid\x00')
sendmsg$GTP_CMD_GETPDP(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000000200000023f202000000000008000700", @ANYRES32=r8, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB], 0x2c}}, 0x0)
syz_open_procfs$namespace(0x0, &(0x7f0000000480)='ns/ipc\x00') (async)
r9 = socket$inet6_sctp(0xa, 0x801, 0x84)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r9, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x2}, 0x8)
sendto$inet6(r9, &(0x7f00000005c0)="04", 0x1, 0x0, &(0x7f0000000240)={0xa, 0x4e20, 0xfffffff9, @rand_addr=' \x01\x00'}, 0x1c) (async, rerun: 32)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r9, 0x84, 0x7c, &(0x7f0000000040)={0x0, 0x1, 0x4}, 0x8) (rerun: 32)
sendmsg$GTP_CMD_ECHOREQ(r0, &(0x7f00000007c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x400022}, 0xc, &(0x7f0000000540)={&(0x7f00000008c0)=ANY=[@ANYBLOB="3700bc48dc6a95b768f415d8a2707db27d3565cf7597cf6fab4bf5a9a93e29c664490237b97480b5dad687a433676711c49f17fe936f98f100"/70, @ANYRES16=r7, @ANYBLOB="00022bbd7000ffdbdf2503000000"], 0x14}, 0x1, 0x0, 0x0, 0x24000041}, 0x20000044)

1.129490704s ago: executing program 2 (id=4072):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x1, 0x803, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x3c, 0x10, 0x403, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x500}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000804}, 0x8000)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000380)={{{@in6=@private1, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0}}, {{@in6=@private1}, 0x0, @in6=@private0}}, &(0x7f0000000180)=0xe8)
ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f0000000740)={0x0, @hci={0x1f, 0x3, 0x1}, @llc={0x1a, 0x336, 0xa, 0x1, 0x89, 0x0, @random="217ac3c46bc9"}, @phonet={0x23, 0x4, 0x5, 0xf0}, 0x8, 0x0, 0x0, 0x0, 0xfff, &(0x7f0000000600)='vcan0\x00', 0x8, 0x10001, 0x76})
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@updpolicy={0xf0, 0x19, 0x0, 0x70bd28, 0x25dfdbfb, {{@in6=@mcast1, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4e20, 0x7, 0x4e20, 0x0, 0xa, 0x20, 0x20, 0x84, r2, r3}, {0x8000000000000000, 0x7, 0x7ff, 0x8, 0x1000, 0x5, 0x4, 0x3}, {0x8, 0xb1, 0x6, 0x4}, 0x200, 0x6e6bbb, 0x1, 0x1, 0x7, 0x2}, [@srcaddr={0x14, 0xd, @in6=@empty}, @sec_ctx={0x1a, 0x8, {0x16, 0x8, 0x1, 0x0, 0xe, "d8bf9690f8ffdb0ea38d214dee99"}}, @proto={0x5, 0x19, 0xff}]}, 0xf0}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c0000001000010403000000fadbdf2500000000", @ANYRES32=0x0, @ANYBLOB="900100008b01569aa7dd0a17342592a5072f1c00128009000100626f6e64000000000c00"], 0x3c}, 0x1, 0x0, 0x0, 0x40010}, 0x240080c1)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000300)={'ipvlan0\x00', {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x30}}})
ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f0000000680)={r4, r1, 0xc34c, 0x78, &(0x7f0000000580)="9024c02286ea12426f6269cdd1ec01af9d5d0e7ad9386dc99bb21941d0fdef518a58c75b033717fa063273719931e88236c2aa9ffa78b0fc253a7901f4207a8d20173e5bfb0e3af286ec95fec2c04e52441b3036dc7bd6fbb5fec522aae8d90c3b25d6b54a58093222788554f8b7bd8225663eaf378adc8d", 0x1, 0x1, 0x1, 0x0, 0x6, 0x1, 0x81, 'syz1\x00'})
close(r1)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000cd03000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0xedf0e51957efc755, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r7, 0x18000000000002a0, 0x5ee, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
sendmsg$DEVLINK_CMD_PORT_SPLIT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)={0x40, r5, 0x1, 0x70bd25, 0x25dfdbfb, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0x9, 0x7}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRESDEC=r4, @ANYBLOB="0000000000008000280012800a00010076786c616e00000018"], 0x50}}, 0x0)
r8 = socket(0x2b, 0x1, 0x8)
r9 = socket(0x10, 0x3, 0x0)
r10 = syz_genetlink_get_family_id$nl80211(&(0x7f00000007c0), r9)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000800)={'wlan0\x00', <r11=>0x0})
sendmsg$NL80211_CMD_NOTIFY_RADAR(r6, &(0x7f0000000900)={0xfffffffffffffffe, 0x0, &(0x7f00000008c0)={&(0x7f0000000840)={0x68, r10, 0x100, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r11}, @val={0xc, 0x99, {0x4, 0x10}}}}, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xb}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xffffff7f}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000000}, 0x20004004)
r12 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r12, &(0x7f0000000040)={0x4000000, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="02070000020000000000000000000000c9bed6ed81a444a19f8705911452349cd6b3812f56ba415eece222167452e1403d369cec3cedbbe4250f9210facb2a2d7d02f4bb9ed8eacf61962f5ca9f6cbc7b39e5f90740e5b06a2654454656dce098dce"], 0x10}}, 0x0)
sendmmsg(r9, &(0x7f0000000000), 0x400000000000235, 0x0)

1.080193933s ago: executing program 1 (id=4073):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10)
connect$inet(r1, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10)
sendmmsg$inet(r1, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0)
sendto$inet6(r1, 0x0, 0x0, 0x80, &(0x7f0000000100)={0xa, 0x4e23, 0x80000001, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8000}, 0x1c)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000000900010073797a300000000040000000030a09020000000000000000020000000900010073797a30000000000900030073797a3200000000140004800800014000000000080002400000000014000000110001"], 0x88}}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB="1400000010000100000000001d096dece6f8c608000000000000000a30000000050a01010000000000000000020000080900010073797a30000000000900030073797a320000000004000480140000001100010000000000000000000000000a"], 0x58}, 0x1, 0x0, 0x0, 0x8001}, 0x0)
r4 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$NL802154_CMD_NEW_INTERFACE(r2, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x58, r4, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_EXTENDED_ADDR={0xc, 0x17, {0xaaaaaaaaaaaa0202}}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000880}, 0x4001)
r5 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f00000001c0)={0x5813}, 0x10)
sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002580)=ANY=[@ANYBLOB="300000001e008d2a00000000000000000a000400b8c217c6894b1b7898944f41ed25449e743e76773899399163a6d48cd89eb4b31fecb4a6f86083282a9f873de88e75856efd8a1030dfc31142f32f9c3276074593d82a3620fd112436ba36fe311630ae1bab212085fb174c0b5ab88445f29b023044c1e9e5b5103483b43e053d2eeeb6f02a81fa85dea331db6013e2", @ANYRES32=0x0, @ANYBLOB="0000000014000100fc0200"/24], 0x30}, 0x1, 0x0, 0x0, 0x10008000}, 0x14048010)
getpeername$inet6(r5, &(0x7f0000000300)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000280)=0x1c)
pwritev(r5, &(0x7f00000002c0)=[{&(0x7f0000000640)="f5b43dfa88011eeee417c3010aba722f92aee53a2ae5bb11f316f121b12d7e9ef36a3f08f17659967bc93833f6c57e39f13eb92c13d161954e2dd438ec6b01a53c9f06d402aeee833ba095beab13b59bd784f75b9867828969d4fab9288708ef5ed4649e8614bf8a50196e0bff43d265894bc3bdf9a89a8ac583ad334417884d1e8fb9da587f6ca0e1392edcb1dac1d9e7f444cce29fff9d04a0f07c67c1dc959faa2ef1d45151ea05219fb8157af9695a4785a2fa9a754ef4588fa6aeea1af3370d63f7860b3d750fbf1ffebb94071d1af2c7eb969204f465f8ddb887b4dab02e523d7d3771d64cd219e391cd4b", 0xee}], 0x1, 0xea49, 0x4)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x3, 0xc, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x4}, [@call={0x85, 0x0, 0x0, 0x9b}, @printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x400}, {0x85, 0x0, 0x0, 0x17}}]}, &(0x7f00000001c0)='GPL\x00'}, 0x94)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r8)
sendmsg$NLBL_MGMT_C_ADDDEF(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000000000000000400000014000500fc0100000000000000000000ad000001080002000500000014000600ff020000000000a30885621a982b3c0106000b0002"], 0x4c}}, 0x0)
sendmsg$NLBL_MGMT_C_ADD(r7, &(0x7f00000007c0)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000580)={&(0x7f0000000740)={0x48, r9, 0x200, 0x70bd2c, 0x25dfdbfb, {}, [@NLBL_MGMT_A_CV4DOI={0x8}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @dev={0xfe, 0x80, '\x00', 0x39}}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x6}]}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x8091)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={r6, 0x0, 0xe, 0x0, &(0x7f00000000c0)="e0b9545dd30a3731677b2d0bfa91", 0x0, 0x27cb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="24000000760009eeffffffffffffff0400000004", @ANYRES32=0x0, @ANYBLOB="04000d800800010002"], 0x24}, 0x1, 0x5502000000000000}, 0x0)

1.079671259s ago: executing program 0 (id=4074):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000001d71186e000000000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x625}, 0x94)
sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000b00)=ANY=[@ANYBLOB="0c010000", @ANYRES16=0x0, @ANYBLOB="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"], 0x10c}, 0x1, 0x0, 0x0, 0x44844}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000008c0)=ANY=[@ANYBLOB="380000001000cff5000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100687372000c00028008000100", @ANYRES32=0x0, @ANYBLOB="0900000000000000ee170e4cb1569fb12371d616d21c49ae4d37c6db3a43b89e3467d68431438acdb9bf53a508ada89f3238698fb37236a40d5ee07df0956633e42e37ca0dfb77f9e61e81f7717b2bd65e0b0c03fa103172f8666ea93bd5f8addb68b1ed7392e5d30d091943942bdd54ffe4a0e4d47347478d245582d95902669a28f34a56f96529c8c03fa9423904da5078da385910ca27af2a37ff10be5005dd204ced209b9e97b81afce9b4fb1cf71c60532741f51fd97dce12e9f5fd8c0d1eb5e7564c5b4fa662f68851fd059472858e3202925708877cfa22c738694beb64fc6e4c"], 0x38}}, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x28}, 0x1, 0x0, 0x0, 0x4881}, 0x8000)
r1 = socket$inet(0x2, 0x1, 0x8)
ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f0000000540)={{0x2, 0x4e23, @loopback}, {0x0, @random="e20b2e3cc763"}, 0x0, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x44}}, 'veth1_to_bond\x00'})
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58)
r3 = accept4(r2, 0x0, 0x0, 0x800)
sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x2, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)}, 0x20)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'bond0\x00', <r4=>0x0})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4000)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x0, 0xf}, {}, {0x7, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8035}, @TCA_FLOWER_KEY_ARP_SIP={0x8, 0x39, @broadcast}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x24000014}, 0x20084084)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f0000000e80)={'syztnl2\x00', &(0x7f0000000e00)={'sit0\x00', <r5=>0x0, 0x8, 0x10, 0x6, 0xffff, {{0x18, 0x4, 0x1, 0x4, 0x60, 0x66, 0x0, 0xf4, 0x4, 0x0, @broadcast, @loopback, {[@timestamp={0x44, 0x24, 0x9b, 0x0, 0x6, [0x3, 0xfffffffd, 0x7, 0x9, 0x6, 0x7, 0x9, 0x6]}, @end, @end, @lsrr={0x83, 0xb, 0xd4, [@local, @local]}, @end, @rr={0x7, 0x17, 0xdf, [@local, @multicast2, @private=0xa010100, @dev={0xac, 0x14, 0x14, 0x29}, @multicast2]}]}}}}})
sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r3, &(0x7f0000000fc0)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000ec0)={0x98, 0x0, 0x400, 0x70bd28, 0x7, {}, [@ETHTOOL_A_PRIVFLAGS_HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x10}, 0x4004804)
r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000600), r3)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f00000006c0)={'ip_vti0\x00', &(0x7f0000000a00)={'syztnl1\x00', <r7=>0x0, 0x46, 0x0, 0x6, 0x3, {{0xa, 0x4, 0x1, 0x7, 0x28, 0x8000, 0x0, 0xfd, 0x29, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty, {[@noop, @generic={0xc4, 0x7, "c38f2e4bac"}, @timestamp_prespec={0x44, 0xc, 0xd9, 0x3, 0x4, [{@rand_addr=0x64010102, 0x80000000}]}]}}}}})
sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r3, &(0x7f0000000640)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000700)={&(0x7f0000000c40)=ANY=[@ANYBLOB="a8000000", @ANYRES16=r6, @ANYRESDEC=r0, @ANYRES32=r7, @ANYBLOB="080002000100000008000400070000001c00018008000700", @ANYRESHEX=r2, @ANYBLOB="160005144e05812a408f4217188659d90f3d7a9475c84eb1f0b0c2879ff7f824b389b0caeed550f16be00c968dbd3c0515834ff5c35c8a6edbf0cc0fa58ffaaaae1affa78dc7edc66131cb3610a52f5d7b33f17530be4911d56019747b9e5c8a178e53ad39f56d6e3b034cec5850c66ce17da904d3ec6bccd2b715c52ae3c6af186e5b", @ANYRES64=r7, @ANYBLOB], 0xa8}, 0x1, 0x0, 0x0, 0xd4}, 0x4000000)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c0000001ac2692500000000000000000a0000040900010073797a3100000000080005400000002b0900020073797a310000000008000a40ffff"], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002800500190084"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x8, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xfff2}, {0xffe0, 0xffff}, {0x5, 0xfff5}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x40)
r8 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r8, &(0x7f00000002c0), 0x40000000000009f, 0x0)
r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000240), r9)
ioctl$sock_SIOCGIFINDEX_802154(r9, 0x8933, &(0x7f0000000340)={'wpan0\x00'})

859.734658ms ago: executing program 1 (id=4075):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x34, 0x2, 0x3, 0x201, 0x0, 0x0, {0x5, 0x0, 0x5}, [@NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x101}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x7}, @NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x3}}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x8}]}, 0x34}}, 0x60)
ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r0, 0x8010671f, &(0x7f0000000200)={&(0x7f0000000440)=""/215, 0xd7})
r1 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20)
socket$inet_sctp(0x2, 0x5, 0x84)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e20, @private=0xa010100}]}, &(0x7f00000002c0)=0x10)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={<r4=>0x0}, &(0x7f00000004c0)=0x8)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000140)={r4, 0x4, 0x20}, 0xc)
connect$llc(0xffffffffffffffff, &(0x7f0000000240)={0x1a, 0x303, 0x0, 0xb9, 0x4, 0x80, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x43}}, 0x10)
setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000180)=0x1010810, 0x4)
r5 = socket$inet6_udplite(0xa, 0x2, 0x88)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000300)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000380)=0x14)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r5, 0x89f2, &(0x7f0000000740)={'syztnl1\x00', &(0x7f0000000540)={'syztnl0\x00', r6, 0x4, 0x1, 0x2, 0x9, 0x40, @private0, @private2, 0x8000, 0x8, 0xc835, 0x7}})
r7 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000040)=0x20000, 0x4)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000400)={'dummy0\x00', <r8=>0x0})
setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4)
bind$xdp(r1, &(0x7f0000000100)={0x2c, 0x0, r8}, 0x10)
r9 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000340)={'dummy0\x00', <r10=>0x0})
r11 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000005c0)=@newtaction={0x160, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x14c, 0x1, [@m_tunnel_key={0x148, 0x13, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x7, 0x6, 0x8, 0xfffff001, 0x2}, 0x2}}]}, {0xf9, 0x6, "184acb0c0f23b7fd6ae887c2d7792dcb1bd4722d80b2215d013f21e6a7f28acb725504c8d38d8badee3b2a443fcb7042a17bc6977a458cfcc1478ffa6e812ba814b3e17c1bbb2f741d1404f85f078a76cffbb37bcc63021ed0ddc08e2d0b8dc456db6dd8b7299e72807f226a295a48f515cdecfbd56f8aa611a0775beb85365c0744899aa5539c8cbd49bf52eb73d225498e07ff3978e1f0787b4844f9f49cab88ac99b2c1c1d796a6bb0efd72a82fe86ea7394000188741039a54db286a78cce7300aeb7ea76fa3da7b43d6a7afaabdb4dac1acf22f87123020a6b453ad80142bef45744191c7f4520605a4ed827c638157fa4959"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x160}, 0x1, 0x0, 0x0, 0x4040111}, 0x8001)
r12 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r12, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r10}}, 0x24}, 0x1, 0x0, 0x0, 0x4000091}, 0x0)

789.920889ms ago: executing program 0 (id=4076):
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0)
setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x1, 0x0, 0x0)
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000004880)=[{{0x0, 0x0, 0x0}}], 0x1, 0x1)
close(r2)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r3)
sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="9feb0100180000000000000038000000380000000c0000000a0000000000001104000000ffffffff000000000000000200000000000000000000000a02000000020000000000000e0300000000000000000061000000000000002e"], 0x0, 0x5c}, 0x20)
ioctl$FITHAW(r2, 0xc0045878)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
sendmmsg$inet(r5, &(0x7f0000003640)=[{{&(0x7f0000000000)={0x2, 0x4e22, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="3400000000000000000000000700000094040020070f6e0a0101010a010102ac14141988040c08440c9eb00000000000000003000000000018000000000000000000000002"], 0x50}}], 0x1, 0x0)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x305200, 0x0)
close(r6)
r7 = socket$unix(0x1, 0x1, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0xfffffffd, 0xc5, 0xe23, 0x1, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x80000, {0x0, 0x0, 0x0, r9, {}, {0xffe6, 0xb}, {0x7, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_ECN={0x8}, @TCA_FQ_CODEL_TARGET={0x8, 0x1, 0x1}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2000c0e1}, 0x4008050)
ioctl$SIOCSIFHWADDR(r6, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'macvlan0\x00'})

653.878485ms ago: executing program 0 (id=4077):
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000011c0)={&(0x7f0000000ec0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x9, [@func={0x6, 0x0, 0x0, 0xc, 0x3}, @var={0x7, 0x0, 0x0, 0xe, 0x3}, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x0, 0x2}]}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x5f, 0x61]}}, 0x0, 0x51}, 0x28)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000240)={0x34, r1, 0x1, 0x70bd24, 0x25dfdbfc, {{}, {}, {0x18, 0x17, {0xe, 0x6, @l2={'ib', 0x3a, 'caif0\x00'}}}}}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
syz_emit_ethernet(0x148, &(0x7f00000005c0)={@broadcast, @empty, @void, {@ipv4={0x800, @udp={{0x17, 0x4, 0x0, 0x3e, 0x13a, 0x67, 0x0, 0xf7, 0x11, 0x0, @private=0xa010100, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@end, @timestamp={0x44, 0x44, 0x7f, 0x0, 0x9, [0x4, 0xe, 0x200, 0x3, 0x4, 0x8000, 0x10000, 0x8, 0x0, 0x6, 0x3, 0x6f, 0xffff, 0xb6, 0x2, 0x7]}]}}, {0x4e20, 0x4e21, 0xde, 0x0, @gue={{0x2, 0x0, 0x2, 0xc, 0x100}, "ff9accdd2bdcd88f815f76afe1a777164ad42ad631fb7b9308a237fe029f1657b22ffe39f521f600364bac8ae7097872280392ac0440f4c2316e80c84360ffc1a0692c212af61fb9d4e592d300dab3e83a75bc245c8901a9656f1f17851237421a6e3ccf50115cfb891cee2599cad5ce978a4c08f780b146f8209c7a0c2b4101c90caf725f27dde1f9a5efac30785256c27380f8602dd173294651e66ea5c8afe98d4a1d569a3e7cd6fef58bac47e02f60b7735a8ee3c9bf13773b41364695ebf397cfacfefb1fc8e14d86cc867a"}}}}}}, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)=@getnexthop={0x20, 0x6a, 0x1, 0x70bd28, 0x25dfdbff, {}, [@NHA_ID={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x84}, 0x24000010)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)

646.970549ms ago: executing program 0 (id=4078):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r1)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x1c, r2, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}]}, 0x1c}}, 0x40)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000006b00)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
sendmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [r4]}}], 0x18, 0x4060019}, 0x20000041)
r5 = socket(0x2, 0x803, 0x1)
ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_channels={0x2b, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2}})
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x40, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x7}]}, 0x40}}, 0x0)

510.299593ms ago: executing program 0 (id=4079):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0xc4d4}, 0x8)
sendto$inet6(r0, &(0x7f0000000580)="81", 0x1, 0x80, &(0x7f0000000040)={0xa, 0x4000, 0x0, @private2, 0x3}, 0x1c)
setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, 0x0, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f00000046c0)={0x0, 0x0, &(0x7f0000004680)={&(0x7f0000004640)=ANY=[@ANYBLOB="200000006a0001002abd7000000000000200000000000000040001"], 0x20}}, 0x0)

240.053984ms ago: executing program 2 (id=4080):
socket$netlink(0x10, 0x3, 0xc)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, 0x0, &(0x7f00000001c0)='GPL\x00'}, 0x94)
syz_genetlink_get_family_id$l2tp(0x0, r0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000080)=ANY=[@ANYBLOB="48efbc73628ebc343ba87a00"/31, @ANYRES32=0x0, @ANYBLOB="80420000000000001000128008000100687372000400028008003a00", @ANYRES32=0x0, @ANYBLOB="0800280001000000"], 0x40}}, 0x0)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, 0x0, 0x24008045)
epoll_create1(0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000280)=ANY=[@ANYBLOB="7912b8000000000061138c0000000000bf2000000000000015000000080063033d030100000000009500003a000000006916000000000000bf6700000000000066060500fcff03006706000002000000760300000ee60060bf050000000000003c6500bf000000006507f9ff01000000070700004cdfffff1e75040000000000bf54000000000000070400000400f9ffad43010000000000d5000000000000000500000000000000950000000000000032410000000000000054bb12dc8c27df8ecfc7bdd2d17f2f1754558f22dd399703d6c4f6f3be0b369289aa6812b8e007e733a9a4f16d0a3e1282ee45a010fb94fe9de56c9d8a814261bdb94a05000000c6c60bf7a13ba1fcf1111ce4fc0d742a81762bab8395fa64810b5b40d893ea8fe0ffffff7f1b546cad3f1d5af65706fd4f68795cce6cf16ab689b555202da2e0ec2871a51445dc8da39e5b0ab71ca9b901627b562ed84b026002d4519af619e3cca4d69e0dee080006774a8f3e691700ec88158f02001b0000c81c8b297dff0445a13d0045fb3cda32a673a6bb55d8c80800dce431e56723888fb126a1403d2b63f16fb2ad9bc117aba7cbebe174aba210d739a018f9bbec63222d20cedbc4d03723f1c932b3a6aa57f1ad2e99e0e67a993716d20000009f0f53acbb40b401e3738270b3156268784f2af9e4bcf8b07a10d6735154be1602f9dd1d7d4301e00000000000460bcc5989ec85e3cbcb6bcfaf0000000000000000bc00f674629709e7e78f4ddc211bc3ebf0bd9d42ca019dd5d0861cd64722cf74686ebfbe2562671cd47840f81d2a8f8f9be3bcd19dc6840aa7afaab43176e65ec1118d50d1e827f3472f4445d253887a5ad103649afa17690884f800031e03a651bb96589a7eab049b1bd47287cd31cc43ea0ffb567b40407d000000000000000000000000005f37d83f84e98a523d80bd0d0d703f37ca363f601ae899a56715a0a62a26a0f6a5480a55c22fe394ae0000000000000000000000000000437d57defb79ea000500000000000000000000f014a4a318ba48d35ae9f438000000000000db894b62a614cb1fdd46619c5d2200000000000700000000000000000000006dcd2f421400f69947e4f26e099c9e8369080663c909b7e7c87e3b5e8e5a6df77c8f7338cd5a85f211a41b5d529d4243e47d7ab0d5991756b59d363ba30b18fc2ff189a4e8db38ab97c6a125e2785619e84c6a2b50f0e3ff83ef5149aff43dc899fdebdc2c496e6bdd4dd4d21f06fe133f4444272c5f0839ad663100452a6c6b6421f7e89a33b339401eee2cd466ab2a93a1ee7fb8a9e455ba1c6e17b02a1cd7bf35d36cf5b2a0f063469ae0d0b9fc042b48e98626eb0f9754d8cbbefa3079fe63063047baff09e9aaf7600000fba9a88db9ebef86f7cb522a784bb6"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94)
r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff)
r3 = socket(0xa, 0x5, 0x0)
listen(r3, 0x100)
sendmsg$inet_sctp(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000008400000001"], 0x18, 0x48d1}, 0x41)
r4 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={<r5=>0x0}, &(0x7f0000000000)=0x8)
setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r4, 0x84, 0x71, &(0x7f0000000580)={r5, 0x1}, 0x8)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x12, 0x4, &(0x7f0000000780)=ANY=[@ANYBLOB="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"/442], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x23, '\x00', 0x0, @cgroup_sock_addr=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x57, 0x0, 0x0, 0x0}, 0x94)
r6 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
getsockopt$llc_int(r6, 0x10c, 0x8, &(0x7f0000000040), &(0x7f0000001880)=0x4)
sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000017000000540006803c00040067636d286165732900000000000000000000000000000000000000000000000014000000e3de3d7b4cd07ec3ee777de774fc7987cca41989140003"], 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x4008014)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="2c00000068009753d74093eaf656df2500000000000000000c00020001000000060000000800010001"], 0x2c}}, 0x4000)

239.386222ms ago: executing program 2 (id=4081):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x3c, 0x2, 0x3, 0x101, 0x0, 0x0, {0x0, 0x0, 0xa}, [@NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x6}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x10}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x6}, @NFQA_CFG_CMD={0x8, 0x1, {0x2, 0x0, 0x2c}}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x7}]}, 0x3c}, 0x1, 0x0, 0x0, 0x14000040}, 0x4000000)
sendmsg$NFQNL_MSG_VERDICT(r0, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0xc0, 0x1, 0x3, 0x5, 0x0, 0x0, {0xa, 0x0, 0x2}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffb, 0xc}}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x8000}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffb, 0x5}}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0xfffffffa}, @NFQA_VLAN={0x2c, 0x13, 0x0, 0x1, [@NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0x800}, @NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0x3}, @NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0x38}, @NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x88a8}, @NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0x1}]}, @NFQA_VLAN={0x2c, 0x13, 0x0, 0x1, [@NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x8100}, @NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x88a8}, @NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0x3ff}, @NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0x40}, @NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0x7}]}, @NFQA_PAYLOAD={0x2c, 0xa, "58ced7cc79401af02f39b3e8e883f024fc0a830293003d6dd13a74c99fc6dde2412df22594c43e5d"}]}, 0xc0}, 0x1, 0x0, 0x0, 0x24040881}, 0x0)
pipe(&(0x7f0000000280)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}) (async)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{0x1, <r3=>0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000300)}, 0x20) (async)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{0xffffffffffffffff, <r4=>0xffffffffffffffff}, &(0x7f0000000380), &(0x7f00000003c0)}, 0x20) (async)
r5 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000440)={0xffffffffffffffff, 0x5e95, 0x10}, 0xc) (async)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000009c0)={0xffffffffffffffff, 0xe0, &(0x7f00000008c0)={0x0, <r6=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000700)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, <r7=>0x0, 0x0, 0x0, 0x0, 0x5, 0x1, &(0x7f0000000740)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000780)=[0x0], 0x0, 0x3c, &(0x7f00000007c0)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f0000000800), &(0x7f0000000840), 0x8, 0x44, 0x8, 0x8, &(0x7f0000000880)}}, 0x10)
r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000a00), 0x4)
r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=@base={0x19, 0x6, 0x4, 0x6e88d0b2, 0x400, 0xffffffffffffffff, 0xaa, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x2}, 0x50) (async)
r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000b40)=@base={0x1, 0xff, 0x6, 0x7, 0x8000, 0x1, 0xc4, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x5}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000c80)={0x9, 0x21, &(0x7f0000000480)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xe1d, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @generic={0xf4, 0xc, 0x6, 0x0, 0x3}, @tail_call={{0x18, 0x2, 0x1, 0x0, r3}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r4}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r5}}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x2}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000005c0)='GPL\x00', 0x5, 0xdc, &(0x7f0000000600)=""/220, 0x41000, 0x32, '\x00', r7, 0x0, r8, 0x8, &(0x7f0000000a40)={0x8, 0x3}, 0x8, 0x10, &(0x7f0000000a80)={0x2, 0x3, 0x5}, 0x10, 0x0, 0x0, 0x8, &(0x7f0000000bc0)=[0xffffffffffffffff, r9, r10, 0xffffffffffffffff, 0x1], &(0x7f0000000c00)=[{0x3, 0x5, 0xd, 0x7}, {0x2, 0x2, 0x10}, {0x4, 0x4, 0xf, 0x3}, {0x4, 0x5, 0x9, 0xa}, {0x4, 0x5, 0x7, 0xb}, {0x2, 0x1, 0x0, 0x6}, {0x4, 0x1, 0x8, 0x2}, {0x0, 0x1, 0xa, 0x5}], 0x10, 0x40}, 0x94) (async)
r11 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000d80), r0)
sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000f40)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000f00)={&(0x7f0000000dc0)={0x12c, r11, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@TIPC_NLA_SOCK={0x84, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3ff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_NODE={0x8}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1f}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}]}, @TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x40}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfffffff8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9e}]}, @TIPC_NLA_MEDIA={0x70, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xef1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xa7}]}]}]}, 0x12c}, 0x1, 0x0, 0x0, 0x4881}, 0x40) (async)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000001080)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001040)={&(0x7f0000000fc0)={0x5c, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x5}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x40, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010100}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r7}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x80}, 0x48000)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f00000010c0)={0x9, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {<r12=>0x0}], 0x2, "e036317fcb46f6"})
ioctl$BTRFS_IOC_TREE_SEARCH(r5, 0xd0009411, &(0x7f00000020c0)={{r12, 0x7ff, 0x3, 0xf, 0x0, 0x4, 0x9, 0x4, 0xe, 0x7, 0x6, 0x5, 0x5, 0x5771dbee, 0x100000000}}) (async)
setsockopt$inet_sctp_SCTP_HMAC_IDENT(r1, 0x84, 0x16, &(0x7f00000030c0)={0x3, [0x53, 0x400, 0x400]}, 0xa)
r13 = bpf$ITER_CREATE(0x21, &(0x7f0000003100)={r1}, 0x8)
ioctl$NS_GET_OWNER_UID(r13, 0xb704, &(0x7f0000003140))
bind$alg(r13, &(0x7f0000003180)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(serpent)\x00'}, 0x58) (async)
r14 = socket$inet(0x2, 0xa, 0x5)
sendmsg$inet_sctp(r14, &(0x7f0000003380)={&(0x7f0000003200)=@in={0x2, 0x4e23, @empty}, 0x10, &(0x7f00000032c0)=[{&(0x7f0000003240)="2154fdbb985d805dcd3f38067c56b3957535f77b8f6882c8f13deadb31e56a0f1f", 0x21}, {&(0x7f0000003280)}], 0x2, &(0x7f0000003300)=[@dstaddrv6={0x20, 0x84, 0x8, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @authinfo={0x18, 0x84, 0x6, {0x6}}, @sndrcv={0x30, 0x84, 0x1, {0x3, 0x9, 0x9, 0xd, 0x89fd, 0x6, 0x8}}], 0x68, 0x4004800}, 0x40)
ioctl$PPPIOCSDEBUG(r2, 0x40047440, &(0x7f00000033c0)=0x1af) (async)
recvfrom$inet(r13, &(0x7f0000003400)=""/4096, 0x1000, 0x40000000, &(0x7f0000004400)={0x2, 0x4e23, @broadcast}, 0x10) (async)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000004540)={@fallback=<r15=>r0, 0x2b, 0x1, 0x5, &(0x7f0000004440)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x0, &(0x7f0000004480)=[0x0, 0x0], &(0x7f00000044c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000004500)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], <r16=>0x0}, 0x40)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000004580)={@cgroup, r13, 0x8, 0x28, 0x0, @void, @void, @void, @value=r6, r16}, 0x20) (async)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000045c0))
ioctl$FS_IOC_GETVERSION(r8, 0x80087601, &(0x7f0000004600))
bind$packet(r15, &(0x7f0000004640)={0x11, 0xd, r7, 0x1, 0x4}, 0x14)

170.231109ms ago: executing program 2 (id=4082):
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffe04, 0x0, &(0x7f00000008c0)="89", 0x0}, 0x32)
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYRES8=r0, @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e00142002800800010008000000062102000100000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00]'], 0x54}, 0x1, 0x0, 0x0, 0x280608c0}, 0x0)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000280), 0x43a740, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c00000015000100000000000000000005000000080001"], 0x1c}, 0x1, 0x0, 0x0, 0x48001}, 0x4000000)
ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000080)=0x40000)
r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r0)
sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000400)={0x19c, r3, 0x510, 0x70bd26, 0x25dfdbfc, {}, [@TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xfffffff9}]}, @TIPC_NLA_MEDIA={0x38, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_BEARER={0x7c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0xef6, @mcast1, 0xde}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x22772b8e, @local, 0x5}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @remote}}, {0x14, 0x2, @in={0x2, 0x4e24, @empty}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_NET={0x50, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x126}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xb}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x2}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x6}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x2}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}]}, @TIPC_NLA_MEDIA={0x58, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x529633c4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd2e}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}]}]}]}, 0x19c}, 0x1, 0x0, 0x0, 0x8000}, 0x10000004)
ioctl$PPPIOCSMAXCID(r1, 0x40047451, &(0x7f0000000000)=0x31)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f00000009c0)={0x0, ""/256, 0x0, 0x0, <r4=>0x0})
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r1, 0xc0c89425, &(0x7f00000007c0)={"2c17983fcf52d89930709ca087969d7e", 0x0, r4, {0xf, 0x8}, {0x3, 0x200}, 0xf0c, [0x3, 0xffffffff80000001, 0x88000, 0xc9, 0xfff, 0xad6c, 0xfffffffffffffffd, 0x3, 0xfffffffffffffff7, 0x2, 0x100000001, 0x8000, 0x8, 0xe6b, 0x8, 0x92]})
r5 = socket(0x10, 0x3, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f0000000000)=@newtaction={0x68, 0x30, 0x1, 0x0, 0x0, {}, [{0x54, 0x1, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x0, 0x0, 0xe4}}, @TCA_SKBEDIT_PRIORITY={0x8}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0)
r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$PPPIOCNEWUNIT(r7, 0xc004743e, &(0x7f0000000080)=0x40000)
ioctl$PPPIOCSMAXCID(r7, 0x40047451, &(0x7f0000000000)=0x31)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r7, 0x81f8943c, &(0x7f00000009c0)={0x0, ""/256, 0x0, 0x0, <r8=>0x0})
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r7, 0xc0c89425, &(0x7f00000007c0)={"2c17983fcf52d89930709ca087969d7e", 0x0, r8, {0xf, 0x8}, {0x3, 0x200}, 0xf0c, [0x3, 0xffffffff80000001, 0x8000, 0xc9, 0x7, 0xad6c, 0xfffffffffffffffd, 0x3, 0xfffffffffffffff7, 0x3, 0x100000001, 0x8000, 0x8, 0xe6b, 0x8, 0x9]})
ioctl$BTRFS_IOC_SCRUB(r5, 0xc400941b, &(0x7f0000000740)={<r9=>0x0, 0x9, 0x2})
ioctl$BTRFS_IOC_SNAP_CREATE_V2(r6, 0x50009417, &(0x7f0000001180)={{r5}, r8, 0x34, @unused=[0x10000, 0x8001, 0x9, 0x6329], @devid=r9})
r10 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$inet(r10, &(0x7f0000002780)={0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @multicast2, @empty}}}, @ip_retopts={{0x18, 0x110, 0xc, {[@timestamp_addr={0x44, 0x4}]}}}], 0x38}, 0x0)
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000300)={"5b04ce8645c1052dd3ee619ed917e17f", r4, r8, {0x9, 0x2}, {0x6, 0x3}, 0x0, [0x86, 0x7ff, 0x2, 0x1, 0x7d, 0x5, 0x1, 0xffffffff, 0xd, 0x0, 0x9, 0x4, 0x2, 0x7fff, 0x2, 0x5]})

96.84963ms ago: executing program 2 (id=4083):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$FAT_IOCTL_GET_VOLUME_ID(r0, 0x80047213, &(0x7f0000000000))
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r0, 0xf503, 0x0)
ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000000040)={'veth0\x00'})
r1 = socket(0xa, 0x4, 0x80000000)
r2 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r1, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0xf0, r2, 0x300, 0x70bd29, 0x25dfdbfd, {}, [{@pci={{0x8}, {0x11}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}]}, 0xf0}, 0x1, 0x0, 0x0, 0x4080}, 0x801)
setsockopt$inet_opts(r1, 0x0, 0x9, &(0x7f0000000280)="980da8c4cddee2d703c2df812922789e34fac57198cf419c739987e27e307e97436b7d4221a01904c25ce580dccffe245d82ef13a25bfcfd14405870df0bbbad1b519e46176237114e7e1245b799b717f358f12a570897f4f02fe5beb4565481c4179940812a2d41c1ff325bebbe6b06524c5af698e6a659f5662644afc9a0e5b5c2e39779a97218e5cce4062a6f86d0a122", 0x92)
ioctl$sock_ipv6_tunnel_SIOCDELPRL(r1, 0x89f6, &(0x7f00000003c0)={'sit0\x00', &(0x7f0000000340)={@dev={0xac, 0x14, 0x14, 0x39}, 0x1, 0x0, 0x60, 0x0, [{@empty}, {@private}, {@local}, {@local}, {@dev}, {}]}})
r3 = accept4$unix(r1, &(0x7f0000000400), &(0x7f0000000480)=0x6e, 0x800)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000004c0)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f0000000540)={r3, r5, 0x0, 0x1e, &(0x7f0000000500)="11901208cf6e13699b45db3188c4aae2c51c207e23b6d1c633b1a037d080", 0x6, 0x4, 0x1, 0x1, 0x6, 0x0, 0x2, 'syz0\x00'})
syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), r1)
setsockopt$packet_rx_ring(r4, 0x107, 0x5, &(0x7f0000000640)=@req3={0xffffffff, 0x200, 0x0, 0x100, 0x2, 0x4, 0x3}, 0x1c)
bind$ax25(r1, &(0x7f0000000680)={{0x3, @default, 0x1}, [@bcast, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}, 0x48)
sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x28, 0x7, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x8008}, 0x45)
setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000800)=0x4790, 0x4)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000880), r1)
sendmsg$NL80211_CMD_GET_INTERFACE(r1, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x20, r6, 0x300, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x9d, 0x4b}}}}, ["", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x24040043)
sendmsg$NFNL_MSG_CTHELPER_GET(r1, &(0x7f0000000a40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x2c, 0x1, 0x9, 0x401, 0x0, 0x0, {0x5, 0x0, 0x5}, [@NFCTH_STATUS={0x8, 0x6, 0x1, 0x0, 0x1}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x5}, @NFCTH_STATUS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000a80), 0x0, 0x0)
ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000ac0)={'veth1_to_bridge\x00', 0x400})
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000b80)={{r3, <r8=>0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f0000000b40)}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000c40)={{r8}, &(0x7f0000000bc0), &(0x7f0000000c00)}, 0x20)
sendmsg(r1, &(0x7f0000000ec0)={&(0x7f0000000c80)=@nl=@unspec, 0x80, &(0x7f0000000e80)=[{&(0x7f0000000d00)="9269ec3f6a7057f2d92cf56a995ace2491dee4469ee5d72c9491b4ae6ec4fa0adbe91c515ac45c58c9cef4071be559cd666e84d9d241d01672ae7aa4d2f372ea04cdfa6f46222a94842f7fd973b928b1cfb4adc54aac7d996e1912fb381352419cd2e9b355c7b0218d3db0f5f17e716376b589617971f58ee29e02e06404141b895a0bc7ac7567c0a830ae1ca9474ed6e9eedd942c5087310e9e27b150cd3bd25dd510a62662f288bd4e789ac053f1006238b608dab938f0436ab254e42c9443406a88ca60e7c8b4a3fd4041e6327a2561b290", 0xd3}, {&(0x7f0000000e00)="4ccd5d440a44c0c20c3670894defbaf2c6ce0b9a880c7da3b059010f01f4ea693c4b9d5bc0e3fab1501f92afe5db093a1777bcbd7d0ccceba080851cd175e6c084cc93e1e2d59cb22608294e7cc5bc1385a0d5d682a90dd8", 0x58}], 0x2}, 0x4)
getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r1, 0x12, 0x2, &(0x7f0000000f00)=""/250, &(0x7f0000001000)=0xfa)
ioctl$SIOCX25CALLACCPTAPPRV(r1, 0x89e8)
r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$nbd(&(0x7f0000001080), 0xffffffffffffffff)
sendmsg$NBD_CMD_CONNECT(r9, &(0x7f00000011c0)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001180)={&(0x7f00000010c0)={0x98, r10, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x9}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x5}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_SOCKETS={0x34, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r4}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r4}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r4}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r4}}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x10b}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x5}, @NBD_ATTR_BACKEND_IDENTIFIER={0x12, 0xa, ':[%\xdb#@\\!%:].]#'}]}, 0x98}, 0x1, 0x0, 0x0, 0x800}, 0x4040840)

0s ago: executing program 1 (id=4084):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="240000006800b5610000000000000000020000000000000004000b00080010"], 0x24}}, 0x800)
r1 = socket$inet_sctp(0x2, 0x5, 0x84)
r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000080), 0xc)
r3 = socket(0x10, 0x803, 0x0)
r4 = socket(0x400000000010, 0x3, 0x0)
r5 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffff, 0xf}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x6}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@newtfilter={0x104, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0xe, 0x7}, {}, {0x7}}, [@filter_kind_options=@f_u32={{0x8}, {0xd8, 0x2, [@TCA_U32_SEL={0x94, 0x5, {0x7, 0xef, 0x8, 0x8, 0x5, 0x9, 0x7, 0x0, [{0x1000, 0x4, 0x401, 0x6}, {0x6, 0x7, 0x1008, 0x5}, {0xfffffff9, 0x43, 0x7ffd, 0x6}, {0x7fde, 0x40, 0x51, 0x3ff}, {0x5, 0xb, 0x8, 0x42}, {0x6, 0x4, 0x8, 0x8}, {0x8001, 0x0, 0x0, 0x8001}, {0x1, 0x1800004, 0xa525}]}}, @TCA_U32_POLICE={0x40, 0x6, [@TCA_POLICE_TBF={0x3c, 0x1, {0x28bf, 0x20000000, 0xebb, 0x1, 0x2, {0x3, 0x2, 0x3, 0x2, 0x6}, {0xf3, 0x1, 0xfffb, 0x6f4, 0x6, 0x6}, 0x6, 0x0, 0xfafd}}]}]}}]}, 0x104}, 0x1, 0x0, 0x0, 0x80}, 0xc040)
r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x3c, 0x3c, 0x9, [@func={0x2, 0x0, 0x0, 0xc, 0x3}, @enum={0x1, 0x3, 0x0, 0x6, 0x4, [{0x3}, {0x8, 0x6}, {0x1, 0xd}]}, @restrict={0x9, 0x0, 0x0, 0xb, 0x4}]}, {0x0, [0x5f, 0x30, 0x5f, 0x2e, 0x61, 0x30, 0x2e]}}, &(0x7f0000000480)=""/246, 0x5d, 0xf6, 0x1, 0x81}, 0x28)
r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r9 = openat$cgroup_ro(r8, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
preadv(r9, &(0x7f00000013c0)=[{&(0x7f0000000040)=""/20, 0x14}], 0x1, 0x1000000, 0x0)
r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000005c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x4, 0x3}, 0x50)
r11 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0)
openat$cgroup(r11, &(0x7f0000000340)='syz1\x00', 0x200002, 0x0)
r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x1000, 0x4, 0x6, 0x30a22, 0x1, 0x80000001, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2}, 0x50)
r13 = socket$packet(0x11, 0x2, 0x300)
r14 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1f, 0x0, 0x0, 0x1000, 0x0, 0x1}, 0x48)
r15 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r15, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x24, 0x3e, 0x107, 0xfffffffc, 0x25dfdbfd, {0x2, 0x7c}, [@nested={0x4, 0x136}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x8e\n'}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x488c0}, 0xc050)
poll(&(0x7f0000000000)=[{r13, 0xa404}, {r14, 0x21}], 0x2, 0xfffffffe)
r16 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@base={0x1, 0x8, 0xf, 0x3, 0x808, 0x1, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x2, 0x2}, 0x50)
r17 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000740)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x2, 0x4}, 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000007c0)={0x1, <r18=>0xffffffffffffffff}, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0xa, 0x1c, &(0x7f0000000980)=ANY=[@ANYBLOB="1800000000000000693800db69741b5c790813054f658a3979f4baa8d9a86096e3dc75989b5037bb2671ce35c89c8f90491125af9d23320000000000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095000000000000009cb7ffff0100000018360000010000000000000000000000185b00000d0000000000000000000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000030000008500000006000000bf91000000000000b7020000020000008500000084000000b7000000000000009500000000000000"], &(0x7f00000000c0)='GPL\x00', 0x5c881644, 0xa3, &(0x7f00000003c0)=""/163, 0x41000, 0x8, '\x00', r6, @fallback=0x1f, r7, 0x8, &(0x7f0000000240)={0x8, 0x2}, 0x8, 0x10, &(0x7f0000000580)={0x1, 0x8, 0x5, 0x1}, 0x10, 0xffffffffffffffff, r9, 0x5, &(0x7f0000000800)=[0x1, r1, r10, r12, r14, 0x1, r16, r17, r18], &(0x7f0000000840)=[{0x3, 0x2, 0xe, 0xc}, {0x2, 0x2, 0xb, 0x9}, {0x1, 0x1, 0x9, 0x1}, {0x2, 0x3, 0x7, 0x5}, {0x2, 0x1, 0xa, 0x4}], 0x10, 0xffff0000}, 0x94)
setsockopt$ARPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x61, &(0x7f0000000000)={'filter\x00', 0x4}, 0x68)

kernel console output (not intermixed with test programs):

1.2654'.
[  288.947879][T15663] 8021q: adding VLAN 0 to HW filter on device bond21
[  288.956287][T15663] bridge0: port 1(bond21) entered blocking state
[  288.959063][T15663] bridge0: port 1(bond21) entered disabled state
[  288.965793][T15663] bond21: entered allmulticast mode
[  288.970230][T15663] bond21: entered promiscuous mode
[  289.232384][T15669] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2660'.
[  289.255030][T15669] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2660'.
[  289.263153][T15669] mac80211_hwsim hwsim21 syzkaller0: left promiscuous mode
[  289.266250][T15669] mac80211_hwsim hwsim21 syzkaller0: left allmulticast mode
[  289.269524][T15669] bridge12: left allmulticast mode
[  289.296380][T15669] veth1: left promiscuous mode
[  289.315863][T15669] batadv2: left allmulticast mode
[  289.321380][   T12] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 20004 - 0
[  289.326182][   T12] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 20004 - 0
[  289.334791][   T12] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 20004 - 0
[  289.342321][   T12] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 20004 - 0
[  289.351595][T15669] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2660'.
[  289.777733][T15680] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2663'.
[  289.965107][T15698] lo speed is unknown, defaulting to 1000
[  290.175474][T15720] (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode balance-rr(0)
[  290.223815][T15714] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2669'.
[  290.262088][T15727] lo speed is unknown, defaulting to 1000
[  290.264535][T15723] netlink: 'syz.0.2670': attribute type 10 has an invalid length.
[  290.290021][T15723] macvlan0: entered allmulticast mode
[  290.383825][T15735] lo speed is unknown, defaulting to 1000
[  290.487125][T15744] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  290.494555][T15743] IPVS: stopping backup sync thread 15744 ...
[  290.506604][T15727] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2672'.
[  290.617335][T15753] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  290.620236][T15751] IPVS: stopping backup sync thread 15753 ...
[  290.654299][T15754] bridge14: entered allmulticast mode
[  290.681088][  T128] block nbd2: Possible stuck request ffff8880201f0000: control (read@0,1024B). Runtime 210 seconds
[  290.684619][  T128] block nbd2: Possible stuck request ffff8880201f0200: control (read@1024,1024B). Runtime 210 seconds
[  290.693877][ T7345] block nbd1: Possible stuck request ffff8880201d8000: control (read@0,1024B). Runtime 210 seconds
[  290.697284][ T7345] block nbd1: Possible stuck request ffff8880201d8200: control (read@1024,1024B). Runtime 210 seconds
[  290.701012][  T128] block nbd2: Possible stuck request ffff8880201f0400: control (read@2048,1024B). Runtime 210 seconds
[  290.704865][ T7345] block nbd1: Possible stuck request ffff8880201d8400: control (read@2048,1024B). Runtime 210 seconds
[  290.708975][ T7345] block nbd1: Possible stuck request ffff8880201d8600: control (read@3072,1024B). Runtime 210 seconds
[  290.712509][  T128] block nbd2: Possible stuck request ffff8880201f0600: control (read@3072,1024B). Runtime 210 seconds
[  290.930716][T15768] netlink: 'syz.0.2682': attribute type 39 has an invalid length.
[  290.934788][T15768] netlink: 'syz.0.2682': attribute type 5 has an invalid length.
[  290.952292][T15768] vlan5: entered allmulticast mode
[  291.042488][T15772] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  291.424121][T15793] IPVS: stopping backup sync thread 15772 ...
[  291.490937][T15799] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  291.494068][T15799] IPv6: NLM_F_CREATE should be set when creating new route
[  291.496835][T15799] IPv6: NLM_F_CREATE should be set when creating new route
[  291.503153][T15801] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  291.631261][T15814] IPVS: stopping backup sync thread 15815 ...
[  291.633962][T15815] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  291.644431][T15810] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  291.647848][T15810] tipc: Can't add remote ip to TIPC UDP multicast bearer
[  291.701006][T15820] netlink: 'syz.2.2695': attribute type 9 has an invalid length.
[  291.707356][T15816] veth1_to_team: entered promiscuous mode
[  291.710138][T15816] bond0: entered promiscuous mode
[  291.712505][T15816] hsr0: Slave A (veth1_to_team) is not up; please bring it up to get a fully working HSR network
[  291.716787][T15816] hsr0: Slave B (bond0) is not up; please bring it up to get a fully working HSR network
[  291.724390][T15816] hsr0: entered allmulticast mode
[  291.726588][T15816] veth1_to_team: entered allmulticast mode
[  291.729918][T15816] bond0: entered allmulticast mode
[  292.007072][T15826] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  292.163204][T15839] nbd: nbd0 already in use
[  292.228966][T15834] lo speed is unknown, defaulting to 1000
[  292.473797][T15852] bridge12: entered allmulticast mode
[  292.630424][ T2303] hid-generic 0005:0007:0008.0007: unknown main item tag 0x0
[  292.637014][ T2303] hid-generic 0005:0007:0008.0007: hidraw0: BLUETOOTH HID v0.08 Device [syz0] on aa:aa:aa:aa:aa:aa
[  293.517281][T15928] netlink: 'syz.1.2729': attribute type 5 has an invalid length.
[  293.521221][T15928] netlink: 'syz.1.2729': attribute type 5 has an invalid length.
[  293.525493][T15928] netlink: 'syz.1.2729': attribute type 11 has an invalid length.
[  293.529433][T15928] netlink: 'syz.1.2729': attribute type 11 has an invalid length.
[  293.735921][T15936] lo speed is unknown, defaulting to 1000
[  293.737412][T15945] __nla_validate_parse: 32 callbacks suppressed
[  293.737427][T15945] netlink: 176 bytes leftover after parsing attributes in process `syz.0.2735'.
[  294.076608][T15953] netlink: 13 bytes leftover after parsing attributes in process `syz.2.2733'.
[  294.593019][T15963] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  294.593047][T15962] IPVS: stopping backup sync thread 15963 ...
[  294.623164][T15959] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  294.626787][T15959] syzkaller0: entered promiscuous mode
[  294.629241][T15959] syzkaller0: entered allmulticast mode
[  294.676577][T15958] tipc: Resetting bearer <eth:syzkaller0>
[  294.698878][T15958] tipc: Disabling bearer <eth:syzkaller0>
[  294.752723][T15969] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  294.932851][T15991] netlink: 'syz.0.2748': attribute type 1 has an invalid length.
[  294.965072][T15991] 8021q: adding VLAN 0 to HW filter on device bond16
[  295.039528][T15994] lo speed is unknown, defaulting to 1000
[  295.075505][T15996] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2749'.
[  295.079873][T15993] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2749'.
[  295.115871][T16006] : renamed from ip6tnl0
[  295.142625][T16004] tipc: New replicast peer: 0.0.0.0
[  295.144789][T16004] tipc: Enabled bearer <udp:syz2>, priority 10
[  295.147207][T16004] tipc: New replicast peer: 255.255.255.255
[  295.264249][T16018] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  295.268522][T16016] IPVS: stopping backup sync thread 16018 ...
[  295.375471][T16029] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  295.381444][T16028] IPVS: stopping backup sync thread 16029 ...
[  295.466310][T16037] bond14: option lacp_rate: mode dependency failed, not supported in mode active-backup(1)
[  295.505994][T16043] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2762'.
[  295.509135][T16043] netlink: 'syz.1.2762': attribute type 5 has an invalid length.
[  295.512545][T16043] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2762'.
[  295.515261][   T33] audit: type=1800 audit(1758477195.525:4): pid=16042 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2764" name="x000000000000000800000000000000000000010" dev="tmpfs" ino=4640 res=0 errno=0
[  295.519499][T16043] geneve3: entered promiscuous mode
[  295.531949][   T33] audit: type=1804 audit(1758477195.525:5): pid=16042 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.2764" name="x000000000000000800000000000000000000010" dev="tmpfs" ino=4640 res=1 errno=0
[  295.546431][T16043] geneve3: entered allmulticast mode
[  295.550820][T10819] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 256 - 0
[  295.564618][T10819] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 256 - 0
[  295.609259][T16052] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2766'.
[  295.715801][T16056] lo speed is unknown, defaulting to 1000
[  295.849084][T16066] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2769'.
[  295.873577][T16066] workqueue: Failed to create a rescuer kthread for wq "bond17": -EINTR
[  295.962742][T16073] syzkaller1: entered promiscuous mode
[  295.975035][T16073] syzkaller1: entered allmulticast mode
[  296.001381][T16073] lo speed is unknown, defaulting to 1000
[  296.144791][T16080] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2772'.
[  296.189268][ T6154] Bluetooth: hci2: link tx timeout
[  296.192328][ T6154] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  296.250014][T16089] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  296.358297][T16096] IPVS: stopping backup sync thread 16089 ...
[  296.449033][T16098] netlink: 'syz.0.2779': attribute type 5 has an invalid length.
[  296.452654][T16098] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2779'.
[  296.925045][T16035] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  296.975946][T16035] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  297.052521][T16035] Failed to register nexthop notifier
[  297.119069][T16104] 8021q: adding VLAN 0 to HW filter on device bond0
[  297.124815][T16104] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check.
[  297.161070][   T10] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  297.275332][T16114] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  297.275480][T16113] IPVS: stopping backup sync thread 16114 ...
[  297.368628][T16121] netlink: 'syz.2.2787': attribute type 1 has an invalid length.
[  297.373311][T10819] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  297.463154][T16129] lo speed is unknown, defaulting to 1000
[  298.200136][ T5845] Bluetooth: hci2: command 0x0405 tx timeout
[  298.204563][   T10] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  298.469133][   T12] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  298.473856][   T12] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  298.481829][T16146] lo speed is unknown, defaulting to 1000
[  298.874083][T16174] lo speed is unknown, defaulting to 1000
[  298.910041][ T5317] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  298.995072][T16193] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR
[  299.134586][T16210] __nla_validate_parse: 3 callbacks suppressed
[  299.134599][T16210] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2802'.
[  299.252218][T16213] netlink: 'syz.2.2796': attribute type 6 has an invalid length.
[  299.256216][T16219] netlink: 'syz.1.2805': attribute type 10 has an invalid length.
[  299.259384][T16219] macvlan0: entered allmulticast mode
[  299.305040][T16221] pim6reg1: entered promiscuous mode
[  299.307422][T16221] pim6reg1: entered allmulticast mode
[  299.573496][T16244] netlink: 'syz.0.2813': attribute type 13 has an invalid length.
[  299.576027][T16244] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2813'.
[  299.746737][T16257] netlink: 'syz.0.2817': attribute type 1 has an invalid length.
[  299.828139][T16264] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2820'.
[  299.832144][T16264] netlink: 'syz.0.2820': attribute type 7 has an invalid length.
[  299.835556][T16264] netlink: 'syz.0.2820': attribute type 8 has an invalid length.
[  299.838820][T16264] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2820'.
[  300.107676][T16287] lo speed is unknown, defaulting to 1000
[  300.126853][T16268] netlink: 'syz.1.2819': attribute type 1 has an invalid length.
[  300.161665][T16268] 8021q: adding VLAN 0 to HW filter on device bond22
[  300.173880][T16268] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2819'.
[  300.291792][T16298] lo speed is unknown, defaulting to 1000
[  300.672366][T16305] trusted_key: syz.1.2829 sent an empty control message without MSG_MORE.
[  300.959582][T16312] lo speed is unknown, defaulting to 1000
[  301.002902][T16313] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2831'.
[  301.272994][T16327] netlink: 'syz.0.2836': attribute type 4 has an invalid length.
[  301.311090][T16329] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2837'.
[  301.466861][T16333] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2839'.
[  301.610923][T16340] lo speed is unknown, defaulting to 1000
[  301.686932][T16348] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  301.696931][T16348] syzkaller0: entered promiscuous mode
[  301.699334][T16348] syzkaller0: entered allmulticast mode
[  301.720562][T16348] tipc: Resetting bearer <eth:syzkaller0>
[  301.883992][T16347] tipc: Resetting bearer <eth:syzkaller0>
[  301.898093][T16347] tipc: Disabling bearer <eth:syzkaller0>
[  302.014249][T16354] netlink: 'syz.0.2842': attribute type 6 has an invalid length.
[  302.157044][T16357] lo speed is unknown, defaulting to 1000
[  302.165150][T16360] netlink: 'syz.1.2848': attribute type 1 has an invalid length.
[  302.171753][T16360] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2848'.
[  302.398712][T16357] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2847'.
[  302.573236][T16375] lo speed is unknown, defaulting to 1000
[  302.607972][T16377] warn_alloc: 1 callbacks suppressed
[  302.607983][T16377] syz.0.2853: vmalloc error: size 33558528, failed to allocated page array size 65544, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  302.614590][T16383] IPVS: stopping backup sync thread 16384 ...
[  302.616818][T16377] CPU: 1 UID: 0 PID: 16377 Comm: syz.0.2853 Not tainted syzkaller #0 PREEMPT(full) 
[  302.616834][T16377] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  302.616842][T16377] Call Trace:
[  302.616847][T16377]  <TASK>
[  302.616853][T16377]  dump_stack_lvl+0x189/0x250
[  302.616870][T16377]  ? __pfx_dump_stack_lvl+0x10/0x10
[  302.616879][T16377]  ? __pfx__printk+0x10/0x10
[  302.616890][T16377]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  302.616901][T16377]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  302.616916][T16377]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  302.616931][T16377]  warn_alloc+0x214/0x310
[  302.616952][T16377]  ? __pfx_warn_alloc+0x10/0x10
[  302.616974][T16377]  ? __get_vm_area_node+0x28f/0x300
[  302.616985][T16377]  ? xskq_create+0xbf/0x170
[  302.616993][T16377]  __vmalloc_node_range_noprof+0x67e/0x12f0
[  302.617026][T16377]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  302.617045][T16377]  ? __kasan_kmalloc+0x93/0xb0
[  302.617063][T16377]  vmalloc_user_noprof+0xad/0xf0
[  302.617079][T16377]  ? xskq_create+0xbf/0x170
[  302.617090][T16377]  xskq_create+0xbf/0x170
[  302.617103][T16377]  xsk_init_queue+0xb0/0x110
[  302.617116][T16377]  xsk_setsockopt+0x57b/0x8d0
[  302.617134][T16377]  ? __pfx_xsk_setsockopt+0x10/0x10
[  302.617149][T16377]  ? __pfx_aa_sk_perm+0x10/0x10
[  302.617167][T16377]  ? __fget_files+0x2a/0x420
[  302.617176][T16377]  ? aa_sock_opt_perm+0xff/0x1b0
[  302.617190][T16377]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  302.617202][T16377]  ? __pfx_xsk_setsockopt+0x10/0x10
[  302.617219][T16377]  do_sock_setsockopt+0x17c/0x1b0
[  302.617237][T16377]  __x64_sys_setsockopt+0x13f/0x1b0
[  302.617250][T16377]  do_syscall_64+0xfa/0x3b0
[  302.617259][T16377]  ? lockdep_hardirqs_on+0x9c/0x150
[  302.617270][T16377]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  302.617280][T16377]  ? exc_page_fault+0x9f/0xf0
[  302.617320][T16377]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  302.617337][T16377] RIP: 0033:0x7f931fd8eba9
[  302.617347][T16377] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  302.617357][T16377] RSP: 002b:00007f931dff6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  302.617370][T16377] RAX: ffffffffffffffda RBX: 00007f931ffd5fa0 RCX: 00007f931fd8eba9
[  302.617378][T16377] RDX: 0000000000000003 RSI: 000000000000011b RDI: 0000000000000003
[  302.617385][T16377] RBP: 00007f931fe11e19 R08: 0000000000000004 R09: 0000000000000000
[  302.617391][T16377] R10: 00002000000001c0 R11: 0000000000000246 R12: 0000000000000000
[  302.617398][T16377] R13: 00007f931ffd6038 R14: 00007f931ffd5fa0 R15: 00007ffe0d240cc8
[  302.617418][T16377]  </TASK>
[  302.617422][T16377] Mem-Info:
[  302.728083][T16377] active_anon:14301 inactive_anon:0 isolated_anon:0
[  302.728083][T16377]  active_file:1395 inactive_file:38320 isolated_file:0
[  302.728083][T16377]  unevictable:1768 dirty:70 writeback:0
[  302.728083][T16377]  slab_reclaimable:11320 slab_unreclaimable:155528
[  302.728083][T16377]  mapped:18459 shmem:2567 pagetables:1161
[  302.728083][T16377]  sec_pagetables:0 bounce:0
[  302.728083][T16377]  kernel_misc_reclaimable:0
[  302.728083][T16377]  free:180586 free_pcp:20855 free_cma:0
[  302.749603][T16377] Node 0 active_anon:35036kB inactive_anon:0kB active_file:4016kB inactive_file:26704kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:44408kB dirty:224kB writeback:0kB shmem:5436kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:5124kB pagetables:2508kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  302.762990][T16377] Node 1 active_anon:22032kB inactive_anon:0kB active_file:1564kB inactive_file:126576kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:29428kB dirty:56kB writeback:0kB shmem:4832kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:9184kB pagetables:2136kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  302.774693][T16377] Node 0 DMA free:7168kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  302.809767][T16377] lowmem_reserve[]: 0 811 811 811 811
[  302.815279][T16377] Node 0 DMA32 free:108548kB boost:0kB min:33660kB low:42072kB high:50484kB reserved_highatomic:0KB free_highatomic:0KB active_anon:35036kB inactive_anon:0kB active_file:4016kB inactive_file:26704kB unevictable:3536kB writepending:224kB present:1556484kB managed:830892kB mlocked:0kB bounce:0kB free_pcp:37600kB local_pcp:16420kB free_cma:0kB
[  302.829117][T16377] lowmem_reserve[]: 0 0 0 0 0
[  302.832193][T16377] Node 1 DMA32 free:458492kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:116kB local_pcp:0kB free_cma:0kB
[  302.843268][    C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  302.846989][T16377] lowmem_reserve[]: 0 0 854 854 854
[  302.848879][T16377] Node 1 Normal free:148136kB boost:0kB min:36612kB low:45764kB high:54916kB reserved_highatomic:0KB free_highatomic:0KB active_anon:22100kB inactive_anon:0kB active_file:1564kB inactive_file:126576kB unevictable:3536kB writepending:56kB present:1048576kB managed:874952kB mlocked:0kB bounce:0kB free_pcp:45656kB local_pcp:20964kB free_cma:0kB
[  302.870258][T16377] lowmem_reserve[]: 0 0 0 0 0
[  302.872417][T16377] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 1*4096kB (M) = 7168kB
[  302.876693][T16377] Node 0 DMA32: 1489*4kB (UME) 868*8kB (UME) 772*16kB (UM) 125*32kB (UME) 87*64kB (UME) 68*128kB (UM) 50*256kB (UME) 8*512kB (U) 19*1024kB (UM) 12*2048kB (UME) 1*4096kB (M) = 108548kB
[  302.891416][T16377] Node 1 DMA32: 3*4kB (UM) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 2*128kB (UM) 3*256kB (UM) 3*512kB (UM) 3*1024kB (UM) 3*2048kB (UM) 109*4096kB (M) = 458492kB
[  302.907199][T16377] Node 1 Normal: 662*4kB (UME) 904*8kB (UME) 789*16kB (UME) 100*32kB (UM) 143*64kB (UME) 49*128kB (UM) 46*256kB (UME) 26*512kB (UME) 22*1024kB (UME) 11*2048kB (UME) 9*4096kB (UM) = 148136kB
[  302.917012][T16377] Node 0 hugepages_total=6 hugepages_free=0 hugepages_surp=4 hugepages_size=2048kB
[  302.921452][T16377] Node 1 hugepages_total=2 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[  302.925322][T16377] 42282 total pagecache pages
[  302.927342][T16377] 0 pages in swap cache
[  302.929065][T16377] Free swap  = 124996kB
[  302.931140][T16377] Total swap = 124996kB
[  302.932929][T16377] 786301 pages RAM
[  302.934542][T16377] 0 pages HighMem/MovableOnly
[  302.936560][T16377] 241346 pages reserved
[  302.938344][T16377] 0 pages cma reserved
[  303.256621][   T33] audit: type=1800 audit(1758477203.275:6): pid=16420 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2866" name="memory.events" dev="tmpfs" ino=4837 res=0 errno=0
[  303.262695][T16420] bridge0: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms)
[  303.342229][T16435] workqueue: Failed to create a rescuer kthread for wq "bond23": -EINTR
[  303.399149][T16445] sctp: [Deprecated]: syz.1.2872 (pid 16445) Use of int in maxseg socket option.
[  303.399149][T16445] Use struct sctp_assoc_value instead
[  303.703210][T16466] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048)
[  303.949837][T16478] xfrm1: entered promiscuous mode
[  303.951849][T16478] xfrm1: entered allmulticast mode
[  304.133918][T16488] bridge0: the hash_elasticity option has been deprecated and is always 16
[  304.138191][T16488] bridge0: entered allmulticast mode
[  306.584771][ T5299] udevd[5299]: worker [5846] /devices/virtual/block/nbd1 timeout; kill it
[  306.588950][ T5299] udevd[5299]: seq 11818 '/devices/virtual/block/nbd1' killed
[  306.594299][ T5299] udevd[5299]: worker [6069] /devices/virtual/block/nbd2 timeout; kill it
[  306.598429][ T5299] udevd[5299]: seq 11821 '/devices/virtual/block/nbd2' killed
[  306.625209][T16490] kthread_run failed with err -4
[  306.632229][T16495] validate_nla: 6 callbacks suppressed
[  306.632244][T16495] netlink: 'syz.2.2886': attribute type 1 has an invalid length.
[  306.637761][T16495] __nla_validate_parse: 13 callbacks suppressed
[  306.637774][T16495] netlink: 212 bytes leftover after parsing attributes in process `syz.2.2886'.
[  306.652950][T16495] netlink: 'syz.2.2886': attribute type 1 has an invalid length.
[  306.676664][T16503] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2887'.
[  306.763076][T16511] lo speed is unknown, defaulting to 1000
[  306.771563][T16512] lo speed is unknown, defaulting to 1000
[  307.509230][T16501] delete_channel: no stack
[  307.541423][T16533] netlink: 'syz.0.2894': attribute type 2 has an invalid length.
[  307.553917][T16533] : entered promiscuous mode
[  307.618203][T16541] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  307.675141][T16545] mac80211_hwsim hwsim47 wlan0: entered promiscuous mode
[  307.708214][T16533] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2894'.
[  307.742709][T16549] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  307.746056][T16549] syzkaller0: entered promiscuous mode
[  307.748518][T16549] syzkaller0: entered allmulticast mode
[  307.756734][T16549] tipc: Resetting bearer <eth:syzkaller0>
[  307.762634][T16548] tipc: Resetting bearer <eth:syzkaller0>
[  307.774486][T16548] tipc: Disabling bearer <eth:syzkaller0>
[  307.779031][T16551] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2899'.
[  307.962507][T16569] 8021q: adding VLAN 0 to HW filter on device bond18
[  307.967798][T16569] bond18: entered promiscuous mode
[  307.970570][T16569] bond18: entered allmulticast mode
[  307.971082][T16573] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2905'.
[  307.973049][T16569] bond0: (slave bond18): Enslaving as an active interface with an up link
[  307.980546][T16573] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2905'.
[  307.997902][T16529] delete_channel: no stack
[  308.055433][T16585] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2909'.
[  308.058824][T16585] netlink: 'syz.0.2909': attribute type 1 has an invalid length.
[  308.075064][T16587] (unnamed net_device) (uninitialized): up delay (1024) is not a multiple of miimon (100), value rounded to 1000 ms
[  308.079199][T16587] (unnamed net_device) (uninitialized): down delay (4) is not a multiple of miimon (100), value rounded to 0 ms
[  308.100263][T16585] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2909'.
[  308.110022][T16585] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0
[  308.148401][T16594] syzkaller1: entered promiscuous mode
[  308.155147][T16594] syzkaller1: entered allmulticast mode
[  308.159430][T16594] bridge_slave_0: invalid flags given to default FDB implementation
[  308.202268][T16597] netlink: 'syz.0.2912': attribute type 1 has an invalid length.
[  308.204860][T16597] netlink: 'syz.0.2912': attribute type 4 has an invalid length.
[  308.207395][T16597] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.2912'.
[  308.212447][T16597] netlink: 'syz.0.2912': attribute type 1 has an invalid length.
[  308.215087][T16597] netlink: 'syz.0.2912': attribute type 4 has an invalid length.
[  308.217615][T16597] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.2912'.
[  308.325064][T16614] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  308.329473][T16613] IPVS: stopping backup sync thread 16614 ...
[  308.461580][T16626] lo speed is unknown, defaulting to 1000
[  308.799516][T16648] bridge0: left allmulticast mode
[  309.228297][T16666] netlink: 'syz.2.2932': attribute type 1 has an invalid length.
[  309.276306][T16665] 8021q: adding VLAN 0 to HW filter on device bond31
[  309.396204][T16676] lo speed is unknown, defaulting to 1000
[  309.536058][T16686] netlink: 'syz.1.2935': attribute type 30 has an invalid length.
[  310.280931][T16699] bond0: entered promiscuous mode
[  310.284498][T16699] bond0: left promiscuous mode
[  310.444325][T16711] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  310.461931][T16711] mac80211_hwsim hwsim21 syzkaller0: entered promiscuous mode
[  310.464858][T16711] mac80211_hwsim hwsim21 syzkaller0: entered allmulticast mode
[  310.476513][T16714] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  310.476607][T16713] IPVS: stopping backup sync thread 16714 ...
[  310.813641][T16744] lo speed is unknown, defaulting to 1000
[  310.884950][T16751] macvlan0: left allmulticast mode
[  311.105293][T16768] openvswitch: netlink: Missing key (keys=40, expected=80)
[  311.637529][T16804] veth0_to_hsr: entered allmulticast mode
[  311.738400][T16812] validate_nla: 3 callbacks suppressed
[  311.738414][T16812] netlink: 'syz.2.2973': attribute type 1 has an invalid length.
[  311.746563][T16812] __nla_validate_parse: 13 callbacks suppressed
[  311.746577][T16812] netlink: 144 bytes leftover after parsing attributes in process `syz.2.2973'.
[  311.753087][T16812] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2973'.
[  311.757500][T16812] mac80211_hwsim hwsim21 wlan0: entered promiscuous mode
[  311.799898][    C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  311.918442][T16821] netlink: 'syz.0.2977': attribute type 1 has an invalid length.
[  311.938691][T16821] bond19: entered promiscuous mode
[  311.940905][T16821] 8021q: adding VLAN 0 to HW filter on device bond19
[  311.956866][T16821] 8021q: adding VLAN 0 to HW filter on device bond19
[  311.959430][T16821] bond19: (slave wireguard0): The slave device specified does not support setting the MAC address
[  311.963705][T16821] bond19: (slave wireguard0): Setting fail_over_mac to active for active-backup mode
[  311.969243][T16821] bond19: (slave wireguard0): making interface the new active one
[  311.972479][T16821] wireguard0: entered promiscuous mode
[  311.975303][T16821] bond19: (slave wireguard0): Enslaving as an active interface with an up link
[  312.007713][T16827] netlink: 'syz.0.2978': attribute type 1 has an invalid length.
[  312.021012][T16827] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2978'.
[  312.027676][T16827] vlan5: entered allmulticast mode
[  312.029361][T16827] bond20: entered allmulticast mode
[  312.242331][T16835] netlink: 'syz.0.2981': attribute type 1 has an invalid length.
[  312.245442][T16835] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2981'.
[  312.252347][T16835] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2981'.
[  312.265401][T16835] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2981'.
[  312.503820][T16853] lo speed is unknown, defaulting to 1000
[  312.540956][T16856] netlink: 'syz.0.2986': attribute type 1 has an invalid length.
[  312.565786][T16856] 8021q: adding VLAN 0 to HW filter on device bond21
[  312.790849][T16871] lo speed is unknown, defaulting to 1000
[  312.816060][T16876] bond31: option mode: unable to set because the bond device is up
[  312.842063][T16878] bond27: (slave gretap2): Releasing active interface
[  312.846053][T16878] bond29: (slave geneve7): Releasing active interface
[  312.850309][T16873] lo speed is unknown, defaulting to 1000
[  312.860774][   T47] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  312.949096][T16853] netlink: 'syz.1.2985': attribute type 6 has an invalid length.
[  313.040959][T16884] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2993'.
[  313.100978][T16885] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2993'.
[  313.118863][T16885] lo speed is unknown, defaulting to 1000
[  313.167953][T16886] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2993'.
[  313.281551][T16889] netlink: 248 bytes leftover after parsing attributes in process `syz.0.2994'.
[  313.652137][   T47] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  313.673638][T16920] netlink: 'syz.1.3002': attribute type 2 has an invalid length.
[  313.967062][T16937] lo speed is unknown, defaulting to 1000
[  314.016059][T16940] netlink: 'syz.2.3005': attribute type 11 has an invalid length.
[  315.199139][T16958] openvswitch: netlink: Key type 129 is out of range max 32
[  315.216823][T16960] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  315.222519][T16960] syzkaller0: entered promiscuous mode
[  315.224588][T16960] syzkaller0: entered allmulticast mode
[  315.232672][T16960] tipc: Resetting bearer <eth:syzkaller0>
[  315.235412][T16959] tipc: Resetting bearer <eth:syzkaller0>
[  315.246590][T16959] tipc: Disabling bearer <eth:syzkaller0>
[  315.435362][   T33] audit: type=1800 audit(1758477215.455:7): pid=16983 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.3018" name="memory.events" dev="tmpfs" ino=5267 res=0 errno=0
[  315.541199][   T12] syzkaller0: tun_net_xmit 76
[  315.542601][T16991] syzkaller0: create flow: hash 760173700 index 2
[  315.542999][   T12] syzkaller0: tun_net_xmit 48
[  315.579128][T16991] syzkaller0: delete flow: hash 760173700 index 2
[  316.622759][T17013] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  316.625592][T17012] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  316.637476][T17014] lo speed is unknown, defaulting to 1000
[  316.764644][T17025] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on
[  316.792510][T17025] bond24: entered promiscuous mode
[  316.794785][T17025] bond24: entered allmulticast mode
[  316.797248][T17025] 8021q: adding VLAN 0 to HW filter on device bond24
[  316.864214][T17031] netlink: 'syz.2.3034': attribute type 1 has an invalid length.
[  316.923617][ T1363] aoe: packet could not be sent on bond0.  consider increasing tx_queue_len
[  316.928779][T17033] netlink: 'syz.2.3034': attribute type 14 has an invalid length.
[  316.935575][T17036] __nla_validate_parse: 11 callbacks suppressed
[  316.935587][T17036] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3036'.
[  316.951680][T17036] 8021q: adding VLAN 0 to HW filter on device bond0
[  316.998983][T17042] lo speed is unknown, defaulting to 1000
[  317.004729][T17045] netlink: 504 bytes leftover after parsing attributes in process `syz.1.3038'.
[  317.008688][T17045] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  317.036785][T17042] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3037'.
[  317.076874][T17047] mac80211_hwsim hwsim3 wlan1: left promiscuous mode
[  317.104171][T17049] warn_alloc: 1 callbacks suppressed
[  317.104187][T17049] syz.2.3039: vmalloc error: size 33558528, failed to allocated page array size 65544, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  317.114996][T17049] CPU: 0 UID: 0 PID: 17049 Comm: syz.2.3039 Not tainted syzkaller #0 PREEMPT(full) 
[  317.115014][T17049] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  317.115019][T17049] Call Trace:
[  317.115022][T17049]  <TASK>
[  317.115026][T17049]  dump_stack_lvl+0x189/0x250
[  317.115041][T17049]  ? __pfx_dump_stack_lvl+0x10/0x10
[  317.115050][T17049]  ? __pfx__printk+0x10/0x10
[  317.115061][T17049]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  317.115070][T17049]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  317.115079][T17049]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  317.115089][T17049]  warn_alloc+0x214/0x310
[  317.115103][T17049]  ? __pfx_warn_alloc+0x10/0x10
[  317.115118][T17049]  ? __get_vm_area_node+0x28f/0x300
[  317.115129][T17049]  ? xskq_create+0xbf/0x170
[  317.115138][T17049]  __vmalloc_node_range_noprof+0x67e/0x12f0
[  317.115182][T17049]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  317.115196][T17049]  ? __kasan_kmalloc+0x93/0xb0
[  317.115208][T17049]  vmalloc_user_noprof+0xad/0xf0
[  317.115219][T17049]  ? xskq_create+0xbf/0x170
[  317.115226][T17049]  xskq_create+0xbf/0x170
[  317.115234][T17049]  xsk_init_queue+0xb0/0x110
[  317.115242][T17049]  xsk_setsockopt+0x57b/0x8d0
[  317.115254][T17049]  ? __pfx_xsk_setsockopt+0x10/0x10
[  317.115265][T17049]  ? __pfx_aa_sk_perm+0x10/0x10
[  317.115278][T17049]  ? __fget_files+0x2a/0x420
[  317.115283][T17049]  ? aa_sock_opt_perm+0xff/0x1b0
[  317.115292][T17049]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  317.115301][T17049]  ? __pfx_xsk_setsockopt+0x10/0x10
[  317.115312][T17049]  do_sock_setsockopt+0x17c/0x1b0
[  317.115324][T17049]  __x64_sys_setsockopt+0x13f/0x1b0
[  317.115335][T17049]  do_syscall_64+0xfa/0x3b0
[  317.115342][T17049]  ? lockdep_hardirqs_on+0x9c/0x150
[  317.115350][T17049]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  317.115357][T17049]  ? exc_page_fault+0x9f/0xf0
[  317.115365][T17049]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  317.115372][T17049] RIP: 0033:0x7faf4bb8eba9
[  317.115380][T17049] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  317.115386][T17049] RSP: 002b:00007faf4c947038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  317.115395][T17049] RAX: ffffffffffffffda RBX: 00007faf4bdd5fa0 RCX: 00007faf4bb8eba9
[  317.115401][T17049] RDX: 0000000000000003 RSI: 000000000000011b RDI: 0000000000000003
[  317.115405][T17049] RBP: 00007faf4bc11e19 R08: 0000000000000004 R09: 0000000000000000
[  317.115410][T17049] R10: 00002000000001c0 R11: 0000000000000246 R12: 0000000000000000
[  317.115414][T17049] R13: 00007faf4bdd6038 R14: 00007faf4bdd5fa0 R15: 00007ffff2b50c08
[  317.115425][T17049]  </TASK>
[  317.115428][T17049] Mem-Info:
[  317.212224][T17049] active_anon:14328 inactive_anon:0 isolated_anon:0
[  317.212224][T17049]  active_file:1395 inactive_file:38326 isolated_file:0
[  317.212224][T17049]  unevictable:1768 dirty:84 writeback:0
[  317.212224][T17049]  slab_reclaimable:11336 slab_unreclaimable:157562
[  317.212224][T17049]  mapped:18464 shmem:2568 pagetables:1171
[  317.212224][T17049]  sec_pagetables:0 bounce:0
[  317.212224][T17049]  kernel_misc_reclaimable:0
[  317.212224][T17049]  free:176076 free_pcp:23470 free_cma:0
[  317.228057][T17049] Node 0 active_anon:34976kB inactive_anon:0kB active_file:4016kB inactive_file:26724kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:44428kB dirty:256kB writeback:0kB shmem:5440kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:5140kB pagetables:2356kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  317.239730][T17049] Node 1 active_anon:22336kB inactive_anon:0kB active_file:1564kB inactive_file:126580kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:29428kB dirty:80kB writeback:0kB shmem:4832kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:9264kB pagetables:2328kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  317.249510][T17049] Node 0 DMA free:7168kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  317.258578][T17049] lowmem_reserve[]: 0 811 811 811 811
[  317.260385][T17049] Node 0 DMA32 free:113264kB boost:0kB min:33660kB low:42072kB high:50484kB reserved_highatomic:0KB free_highatomic:0KB active_anon:34976kB inactive_anon:0kB active_file:4016kB inactive_file:26724kB unevictable:3536kB writepending:256kB present:1556484kB managed:830892kB mlocked:0kB bounce:0kB free_pcp:36704kB local_pcp:18096kB free_cma:0kB
[  317.270205][T17049] lowmem_reserve[]: 0 0 0 0 0
[  317.272106][T17049] Node 1 DMA32 free:458492kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:116kB local_pcp:0kB free_cma:0kB
[  317.282085][T17049] lowmem_reserve[]: 0 0 854 854 854
[  317.283857][T17049] Node 1 Normal free:125380kB boost:0kB min:36612kB low:45764kB high:54916kB reserved_highatomic:0KB free_highatomic:0KB active_anon:22336kB inactive_anon:0kB active_file:1564kB inactive_file:126580kB unevictable:3536kB writepending:80kB present:1048576kB managed:874952kB mlocked:0kB bounce:0kB free_pcp:57060kB local_pcp:20228kB free_cma:0kB
[  317.293958][T17049] lowmem_reserve[]: 0 0 0 0 0
[  317.295552][T17049] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 1*4096kB (M) = 7168kB
[  317.299829][T17049] Node 0 DMA32: 1254*4kB (UME) 621*8kB (UME) 605*16kB (UM) 151*32kB (UME) 115*64kB (UME) 80*128kB (UM) 52*256kB (UME) 15*512kB (UM) 19*1024kB (UM) 13*2048kB (UME) 1*4096kB (M) = 113264kB
[  317.306378][T17049] Node 1 DMA32: 3*4kB (UM) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 2*128kB (UM) 3*256kB (UM) 3*512kB (UM) 3*1024kB (UM) 3*2048kB (UM) 109*4096kB (M) = 458492kB
[  317.312123][T17049] Node 1 Normal: 1322*4kB (UME) 914*8kB (UME) 719*16kB (UME) 183*32kB (UME) 57*64kB (UM) 21*128kB (UME) 12*256kB (UM) 22*512kB (UME) 19*1024kB (UME) 11*2048kB (UME) 8*4096kB (UM) = 125384kB
[  317.318445][T17049] Node 0 hugepages_total=6 hugepages_free=0 hugepages_surp=4 hugepages_size=2048kB
[  317.322073][T17049] Node 1 hugepages_total=2 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[  317.325443][T17049] 42289 total pagecache pages
[  317.327523][T17049] 0 pages in swap cache
[  317.329109][T17049] Free swap  = 124996kB
[  317.330931][T17049] Total swap = 124996kB
[  317.332674][T17049] 786301 pages RAM
[  317.333970][T17049] 0 pages HighMem/MovableOnly
[  317.335570][T17049] 241346 pages reserved
[  317.336830][T17049] 0 pages cma reserved
[  317.443634][T17063] macsec3: entered promiscuous mode
[  317.445987][T17063] macsec3: entered allmulticast mode
[  317.459221][T17063] netlink: 'syz.0.3041': attribute type 12 has an invalid length.
[  317.462428][T17063] netlink: 190972 bytes leftover after parsing attributes in process `syz.0.3041'.
[  317.652700][T17075] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  317.652769][T17074] IPVS: stopping backup sync thread 17075 ...
[  317.716135][T17077] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  317.752997][T17077] tipc: Resetting bearer <eth:syzkaller0>
[  317.769404][T17081] mac80211_hwsim hwsim6 wlan1: entered allmulticast mode
[  317.781704][T17081] bond0: (slave bond18): Releasing backup interface
[  317.786065][T17081] bond18: left promiscuous mode
[  317.788362][T17081] bond18: left allmulticast mode
[  317.796209][T17081] bond19: (slave wireguard0): Releasing backup interface
[  317.799213][T17081] wireguard0: left promiscuous mode
[  317.812964][T17081] netlink: 'syz.0.3047': attribute type 10 has an invalid length.
[  317.816041][T17081] mac80211_hwsim hwsim6 wlan1: left allmulticast mode
[  317.825917][T17081] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  317.832031][T17081] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  317.848247][T17087] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  317.872351][T17092] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3050'.
[  317.924495][T17102] lo speed is unknown, defaulting to 1000
[  317.946895][T17108] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  317.951689][T17107] IPVS: stopping backup sync thread 17108 ...
[  318.044690][T17117] netlink: 'syz.2.3055': attribute type 1 has an invalid length.
[  318.086971][T17120] lo speed is unknown, defaulting to 1000
[  319.233919][T17138] nbd: must specify at least one socket
[  319.268539][T17140] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3062'.
[  319.634933][T17169] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3069'.
[  319.651451][T17169] bridge16: port 1(veth15) entered blocking state
[  319.654356][T17169] bridge16: port 1(veth15) entered disabled state
[  319.657062][T17169] veth15: entered allmulticast mode
[  319.661237][T17169] veth15: entered promiscuous mode
[  319.666944][T17169] bridge16: port 2(veth0_to_bond) entered blocking state
[  319.670358][T17169] bridge16: port 2(veth0_to_bond) entered disabled state
[  319.673392][T17169] veth0_to_bond: entered allmulticast mode
[  319.677188][T17169] veth0_to_bond: entered promiscuous mode
[  319.688299][T17169] vlan1: entered allmulticast mode
[  319.690806][T17169] veth1: entered allmulticast mode
[  319.693168][T17169] bridge16: port 3(vlan1) entered blocking state
[  319.695878][T17169] bridge16: port 3(vlan1) entered disabled state
[  319.700383][T17169] vlan1: entered promiscuous mode
[  319.702508][T17169] veth1: entered promiscuous mode
[  319.740348][T17172] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  319.744518][T17171] IPVS: stopping backup sync thread 17172 ...
[  319.751333][T17171] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3070'.
[  319.853441][T17175] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  319.908992][T17179] netlink: 'syz.2.3073': attribute type 21 has an invalid length.
[  319.916804][T17179] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3073'.
[  319.964457][T17181] netlink: 4820 bytes leftover after parsing attributes in process `syz.2.3074'.
[  319.981653][T17185] netlink: 'syz.1.3075': attribute type 1 has an invalid length.
[  320.025835][T17195] netlink: 'syz.0.3072': attribute type 10 has an invalid length.
[  320.035534][T17195] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  320.039391][T17195] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  320.081208][T17200] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  320.085588][T17199] IPVS: stopping backup sync thread 17200 ...
[  320.090552][T17199] Bluetooth: MGMT ver 1.23
[  320.434522][T17224] netlink: 'syz.2.3088': attribute type 39 has an invalid length.
[  320.486423][T17225] netlink: 'syz.2.3088': attribute type 5 has an invalid length.
[  320.500607][T17225] vlan2: entered allmulticast mode
[  320.502738][T17225] bridge_slave_0: entered allmulticast mode
[  320.770293][  T128] block nbd1: Possible stuck request ffff8880201d8000: control (read@0,1024B). Runtime 240 seconds
[  320.774314][  T128] block nbd1: Possible stuck request ffff8880201d8200: control (read@1024,1024B). Runtime 240 seconds
[  320.778357][  T128] block nbd1: Possible stuck request ffff8880201d8400: control (read@2048,1024B). Runtime 240 seconds
[  320.782630][ T7345] block nbd2: Possible stuck request ffff8880201f0000: control (read@0,1024B). Runtime 240 seconds
[  320.786561][ T7345] block nbd2: Possible stuck request ffff8880201f0200: control (read@1024,1024B). Runtime 240 seconds
[  320.790669][  T128] block nbd1: Possible stuck request ffff8880201d8600: control (read@3072,1024B). Runtime 240 seconds
[  320.794726][ T7345] block nbd2: Possible stuck request ffff8880201f0400: control (read@2048,1024B). Runtime 240 seconds
[  320.799181][ T7345] block nbd2: Possible stuck request ffff8880201f0600: control (read@3072,1024B). Runtime 240 seconds
[  320.908184][T17241] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check.
[  321.004522][T17243] lo speed is unknown, defaulting to 1000
[  321.034516][T17245] lo speed is unknown, defaulting to 1000
[  321.784176][T17264] netlink: zone id is out of range
[  321.786128][T17264] netlink: zone id is out of range
[  321.787857][T17264] netlink: zone id is out of range
[  321.789513][T17264] netlink: zone id is out of range
[  321.791425][T17264] netlink: zone id is out of range
[  321.793457][T17264] netlink: zone id is out of range
[  321.795416][T17264] netlink: zone id is out of range
[  322.036756][T17278] __nla_validate_parse: 14 callbacks suppressed
[  322.036766][T17278] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3103'.
[  322.087230][T17286] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3106'.
[  322.120233][ T5845] Bluetooth: hci2: command 0x0405 tx timeout
[  322.122800][ T6154] Bluetooth: hci2: Opcode 0x0401 failed: -110
[  322.127454][T17288] netlink: 240 bytes leftover after parsing attributes in process `syz.0.3107'.
[  322.185084][T17289] lo speed is unknown, defaulting to 1000
[  322.354746][T17305] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  322.481702][T17311] validate_nla: 2 callbacks suppressed
[  322.481719][T17311] netlink: 'syz.0.3113': attribute type 1 has an invalid length.
[  322.517397][T17311] bond22: (slave ip6gretap2): Enslaving as a backup interface with an up link
[  322.524514][   T13] net_ratelimit: 17 callbacks suppressed
[  322.524529][   T13] bond22: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  322.525362][T17311] 8021q: adding VLAN 0 to HW filter on device bond22
[  322.550417][T17311] veth31: entered promiscuous mode
[  322.630214][T10819] bond22: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  322.683217][T17321] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  322.737727][T17322] IPVS: stopping backup sync thread 17321 ...
[  322.821597][T17320] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3116'.
[  322.824525][T17320] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3116'.
[  323.143921][T17338] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3121'.
[  323.147298][T17338] netlink: 244 bytes leftover after parsing attributes in process `syz.1.3121'.
[  323.152074][T17338] netlink: 1168 bytes leftover after parsing attributes in process `syz.1.3121'.
[  323.197890][T17338] lo speed is unknown, defaulting to 1000
[  323.211301][T17345] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  323.211355][T17343] IPVS: stopping backup sync thread 17345 ...
[  323.262802][T17351] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  323.607518][T17364] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3128'.
[  324.082019][T17380] netlink: 'syz.1.3132': attribute type 1 has an invalid length.
[  324.085074][T17380] netlink: 'syz.1.3132': attribute type 2 has an invalid length.
[  324.092396][T17380] netlink: 'syz.1.3132': attribute type 11 has an invalid length.
[  324.138795][T17383] netlink: 'syz.1.3133': attribute type 1 has an invalid length.
[  324.212003][T17390] sctp: [Deprecated]: syz.1.3135 (pid 17390) Use of struct sctp_assoc_value in delayed_ack socket option.
[  324.212003][T17390] Use struct sctp_sack_info instead
[  324.224777][T17393] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  324.244966][T17396] syzkaller0: entered promiscuous mode
[  324.246983][T17396] syzkaller0: entered allmulticast mode
[  324.252174][T17396] syzkaller0: tun_chr_ioctl cmd 1074025677
[  324.254130][T17396] syzkaller0: Linktype set failed because interface is up
[  324.262072][   T10] lo speed is unknown, defaulting to 1000
[  324.264108][   T10] syz1: Port: 1 Link ACTIVE
[  324.362677][T17406] IPVS: stopping backup sync thread 17393 ...
[  324.369072][T17406] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3139'.
[  324.826432][T17422] lo speed is unknown, defaulting to 1000
[  325.830997][T17455] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  325.835476][T17454] IPVS: stopping backup sync thread 17455 ...
[  326.188107][T17480] netlink: 'syz.0.3158': attribute type 1 has an invalid length.
[  326.196874][T17480] netlink: 'syz.0.3158': attribute type 1 has an invalid length.
[  326.484337][T17502] lo speed is unknown, defaulting to 1000
[  326.532943][T17509] IPVS: length: 164 != 24
[  326.534711][T17509] IPVS: length: 164 != 24
[  326.536414][T17509] IPVS: length: 164 != 24
[  326.614528][T17516] openvswitch: netlink: EtherType 50a is less than min 600
[  326.753509][T17530] lo speed is unknown, defaulting to 1000
[  326.800446][T17532] netlink: 'syz.2.3173': attribute type 12 has an invalid length.
[  327.032649][T17540] lo speed is unknown, defaulting to 1000
[  327.267254][T17559] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  327.275677][T17559] netlink: 'syz.0.3179': attribute type 2 has an invalid length.
[  327.278389][T17559] __nla_validate_parse: 25 callbacks suppressed
[  327.278397][T17559] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3179'.
[  327.376537][T17567] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  327.376558][T17566] IPVS: stopping backup sync thread 17567 ...
[  327.528032][T17590] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3188'.
[  327.565799][T17593] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3189'.
[  327.568758][T17593] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3189'.
[  327.574535][T17593] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap3
[  327.578158][T17593] gretap3: entered promiscuous mode
[  327.580164][T17593] gretap3: entered allmulticast mode
[  327.626201][T17587] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3186'.
[  327.627411][T17598] lo speed is unknown, defaulting to 1000
[  327.649824][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  327.659847][T17587] bond32: (slave vxcan9): The slave device specified does not support setting the MAC address
[  327.664140][T17587] bond32: (slave vxcan9): Error -95 calling set_mac_address
[  327.698840][T17594] macvlan1: entered promiscuous mode
[  327.702210][T17594] macvlan1: entered allmulticast mode
[  327.704207][T17594] bond32: (slave macvlan1): Error -98 calling set_mac_address
[  327.743786][T17587] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3186'.
[  327.790787][T17616] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  327.794946][T17613] IPVS: stopping backup sync thread 17616 ...
[  327.795396][T17617] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  327.814196][T17617] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3195'.
[  327.923561][T17624] lo speed is unknown, defaulting to 1000
[  327.956985][T17628] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3199'.
[  327.969796][T17628] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3199'.
[  327.982172][T17628] netlink: 'syz.2.3199': attribute type 1 has an invalid length.
[  328.679766][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  329.279714][T17635] lo speed is unknown, defaulting to 1000
[  329.297682][T17639] lo speed is unknown, defaulting to 1000
[  329.417089][T17653] lo speed is unknown, defaulting to 1000
[  329.473301][T17660] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3205'.
[  329.719918][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  330.159483][T17669] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  330.285299][T17678] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  330.598524][T17705] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  330.759962][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  331.148123][T17730] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  331.625070][T17775] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  331.628297][T17775] openvswitch: netlink: Duplicate key (type 0).
[  331.634385][T17775] netlink: 'syz.2.3238': attribute type 1 has an invalid length.
[  331.706148][T17781] pim6reg1: entered promiscuous mode
[  331.708199][T17781] pim6reg1: entered allmulticast mode
[  331.809997][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  331.923558][T17791] netlink: 'syz.2.3244': attribute type 13 has an invalid length.
[  331.965188][T17791] 8021q: adding VLAN 0 to HW filter on device bond0
[  331.989989][  T793] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  332.019135][T17791] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check.
[  332.057838][T17796] netlink: 'syz.2.3245': attribute type 1 has an invalid length.
[  332.060468][  T793] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  332.198820][T17803] veth0_to_bond: left allmulticast mode
[  332.203716][T17803] veth0_to_bond: left promiscuous mode
[  332.206411][T17803] bridge16: port 2(veth0_to_bond) entered disabled state
[  332.214575][T17803] veth15: left allmulticast mode
[  332.216692][T17803] veth15: left promiscuous mode
[  332.218851][T17803] bridge16: port 1(veth15) entered disabled state
[  332.222299][ T5317] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  332.229158][T17803] vlan1: left promiscuous mode
[  332.231441][T17803] veth1: left promiscuous mode
[  332.233625][T17803] bridge16: port 3(vlan1) entered disabled state
[  332.249983][ T5872] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  332.281082][   T10] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  332.314343][T17812] A link change request failed with some changes committed already. Interface veth1_macvtap may have been left with an inconsistent configuration, please check.
[  332.323548][T17813] netlink: 'syz.0.3251': attribute type 4 has an invalid length.
[  332.326878][T17814] netlink: 'syz.0.3251': attribute type 1 has an invalid length.
[  332.342785][   T10] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  332.474676][T17818] __nla_validate_parse: 17 callbacks suppressed
[  332.474691][T17818] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3252'.
[  332.561214][   T10] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  332.655775][T17833] netlink: 'syz.1.3255': attribute type 1 has an invalid length.
[  332.711153][T17839] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3257'.
[  332.834838][T17847] bridge0: the hash_elasticity option has been deprecated and is always 16
[  332.838232][T17847] bridge0: entered allmulticast mode
[  332.850922][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  332.903973][T17854] sctp: [Deprecated]: syz.1.3261 (pid 17854) Use of int in maxseg socket option.
[  332.903973][T17854] Use struct sctp_assoc_value instead
[  333.115881][T17863] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3264'.
[  333.119205][T17863] bond21: left allmulticast mode
[  333.122349][T17863] bond21: left promiscuous mode
[  333.124370][T17863] bridge0: port 1(bond21) entered disabled state
[  333.182667][T17866] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3264'.
[  333.306125][T17873] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3266'.
[  333.321017][   T12] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  333.323956][   T12] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  333.332230][T17875] netlink: 200 bytes leftover after parsing attributes in process `syz.2.3267'.
[  333.335700][T17875] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3267'.
[  333.338536][T17878] netlink: 256 bytes leftover after parsing attributes in process `syz.0.3268'.
[  333.373705][T17880] lo speed is unknown, defaulting to 1000
[  333.506232][T17896] netlink: 'syz.0.3274': attribute type 1 has an invalid length.
[  333.525554][T17896] 8021q: adding VLAN 0 to HW filter on device bond23
[  333.541403][T17896] 8021q: adding VLAN 0 to HW filter on device bond23
[  333.544266][T17896] bond23: (slave vxcan7): The slave device specified does not support setting the MAC address
[  333.552734][T17896] bond23: (slave vxcan7): Error -95 calling set_mac_address
[  333.581313][T17899] bond0: entered promiscuous mode
[  333.582818][T17900] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3274'.
[  333.584405][T17899] bond0: left promiscuous mode
[  333.700851][T17908] netlink: 256 bytes leftover after parsing attributes in process `syz.2.3278'.
[  333.732153][T17906] netlink: 'syz.0.3277': attribute type 1 has an invalid length.
[  333.879846][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  333.882688][ T5317] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  334.002749][T17933] openvswitch: netlink: Missing key (keys=40, expected=10000000)
[  334.116622][T17945] syzkaller0: entered promiscuous mode
[  334.119016][T17945] syzkaller0: entered allmulticast mode
[  334.373082][T17955] netlink: 'syz.2.3289': attribute type 10 has an invalid length.
[  334.929937][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  335.179387][T17955] wlan1: mtu greater than device maximum
[  335.182216][T17955] bond0: (slave wlan1): Error -22 calling dev_set_mtu
[  335.365624][T17979] netlink: 'syz.2.3295': attribute type 1 has an invalid length.
[  335.555809][T17999] IPVS: wlc: SCTP 172.20.20.187:0 - no destination available
[  335.763582][T18022] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_rx_wq": -EINTR
[  335.868184][T18039] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[  335.895014][T18044] nicvf0: entered promiscuous mode
[  335.921999][T18048] netlink: 'syz.1.3313': attribute type 13 has an invalid length.
[  335.924522][T18048] netlink: 'syz.1.3313': attribute type 17 has an invalid length.
[  335.940521][T18048] team0: left promiscuous mode
[  335.954116][T18048] 8021q: adding VLAN 0 to HW filter on device team0
[  335.965832][T18048] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  335.969917][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  335.993673][T18048] lo speed is unknown, defaulting to 1000
[  336.118837][T18057] lo speed is unknown, defaulting to 1000
[  336.134468][T18068] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  336.140384][T18067] IPVS: stopping backup sync thread 18068 ...
[  336.374034][T18081] netlink: 'syz.0.3322': attribute type 1 has an invalid length.
[  336.404242][T18081] 8021q: adding VLAN 0 to HW filter on device bond24
[  336.416336][T18084] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  336.419940][T18084] syzkaller0: entered promiscuous mode
[  336.423658][T18084] syzkaller0: entered allmulticast mode
[  336.483408][T18084] tipc: Resetting bearer <eth:syzkaller0>
[  336.491946][T18082] tipc: Resetting bearer <eth:syzkaller0>
[  336.533787][T18082] tipc: Disabling bearer <eth:syzkaller0>
[  336.862463][T18110] bond22: (slave ip6gretap2): Removing an active aggregator
[  336.865753][T18110] bond22: (slave ip6gretap2): Releasing backup interface
[  336.902034][T18107] lo speed is unknown, defaulting to 1000
[  336.966543][T18114] team0: Mode changed to "activebackup"
[  336.999932][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  337.003040][    C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  337.104238][T18121] netlink: 'syz.1.3334': attribute type 1 has an invalid length.
[  337.236935][T18127] siw: device registration error -23
[  337.306764][T18131] team0: Failed to send options change via netlink (err -105)
[  337.309406][T18131] team0: Mode changed to "loadbalance"
[  337.351386][T18141] netlink: 'syz.0.3340': attribute type 1 has an invalid length.
[  337.356080][T18141] netlink: 'syz.0.3340': attribute type 4 has an invalid length.
[  337.423977][T18147] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  337.497615][T18150] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  337.505087][T18149] IPVS: stopping backup sync thread 18150 ...
[  337.544157][T18152] syzkaller1: entered promiscuous mode
[  337.546572][T18152] syzkaller1: entered allmulticast mode
[  337.612887][T18161] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  337.612995][T18160] IPVS: stopping backup sync thread 18161 ...
[  337.688378][T18168] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  337.730921][   T47] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  337.742354][T18175] __nla_validate_parse: 25 callbacks suppressed
[  337.742369][T18175] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3350'.
[  337.790499][T18178] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  337.793043][T18177] IPVS: stopping backup sync thread 18178 ...
[  337.831998][T18180] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  337.856996][T18182] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  337.867698][T18182] mac80211_hwsim hwsim21 syzkaller0: Caught tx_queue_len zero misconfig
[  337.919979][   T47] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  337.933210][T18192] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3356'.
[  337.945382][T18189] lo speed is unknown, defaulting to 1000
[  338.039848][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  338.074704][T18197] bond25: (slave ipvlan4): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  338.079348][T18197] bond25: (slave ipvlan4): The slave device specified does not support setting the MAC address
[  338.092459][T18197] bond25: (slave ipvlan4): Setting fail_over_mac to active for active-backup mode
[  338.113360][T18204] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3358'.
[  338.118182][T18204] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3358'.
[  338.123274][T18200] netlink: 576 bytes leftover after parsing attributes in process `syz.2.3359'.
[  338.126932][T18201] netlink: 576 bytes leftover after parsing attributes in process `syz.2.3359'.
[  338.174024][T18208] netlink: 76 bytes leftover after parsing attributes in process `syz.2.3360'.
[  338.178035][T18208] batadv_slave_0: Caught tx_queue_len zero misconfig
[  338.187378][T18208] bond0: Caught tx_queue_len zero misconfig
[  338.213397][T18210] lo speed is unknown, defaulting to 1000
[  338.289172][T18213] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3362'.
[  338.293461][T18213] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3362'.
[  338.347506][T18216] netlink: 119 bytes leftover after parsing attributes in process `syz.2.3363'.
[  338.457192][T18220] IPv6: addrconf: prefix option has invalid lifetime
[  338.460190][T18220] IPv6: addrconf: prefix option has invalid lifetime
[  338.463032][T18220] IPv6: addrconf: prefix option has invalid lifetime
[  338.677104][T18245] validate_nla: 6 callbacks suppressed
[  338.677118][T18245] netlink: 'syz.0.3370': attribute type 3 has an invalid length.
[  338.862426][T18271] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  338.865318][T18269] IPVS: stopping backup sync thread 18271 ...
[  338.883324][T18272] netlink: 'syz.0.3376': attribute type 1 has an invalid length.
[  339.089996][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  339.609049][T18279] netlink: 'syz.0.3380': attribute type 62 has an invalid length.
[  339.733545][T18290] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  339.737289][T18289] IPVS: stopping backup sync thread 18290 ...
[  339.737461][T18279] syzkaller1: entered promiscuous mode
[  339.743498][T18279] syzkaller1: entered allmulticast mode
[  339.892863][T18297] veth0_to_hsr: left allmulticast mode
[  339.906554][T18297] macvtap1: left promiscuous mode
[  339.909253][T18297] bridge12: left allmulticast mode
[  339.911889][T18297] mac80211_hwsim hwsim47 wlan0: left promiscuous mode
[  339.914807][T18297] geneve3: left promiscuous mode
[  339.916861][T18297] geneve3: left allmulticast mode
[  339.919166][T18297] bond24: left promiscuous mode
[  339.921268][T18297] bond24: left allmulticast mode
[  339.927084][  T793] lo speed is unknown, defaulting to 1000
[  339.928666][T18304] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  339.930074][  T793] syz1: Port: 1 Link DOWN
[  339.933833][T18303] IPVS: stopping backup sync thread 18304 ...
[  340.015792][T18306] lo speed is unknown, defaulting to 1000
[  340.063538][T18309] netlink: 'syz.2.3389': attribute type 1 has an invalid length.
[  340.088146][T18309] 8021q: adding VLAN 0 to HW filter on device bond36
[  340.103040][T18309] bond36: (slave veth17): Enslaving as an active interface with a down link
[  340.119902][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  340.393420][T18335] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  340.397711][T18334] IPVS: stopping backup sync thread 18335 ...
[  340.466336][T18337] lo speed is unknown, defaulting to 1000
[  340.615593][T18350] 8021q: adding VLAN 0 to HW filter on device bond25
[  341.035882][T18393] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  341.086723][T18399] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  341.087073][T18398] IPVS: stopping backup sync thread 18399 ...
[  341.159865][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  341.297621][T18410] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 43040 - 0
[  341.303968][T18410] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 54384 - 0
[  341.308225][T18410] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 2] type 2 family 0 port 20001 - 0
[  341.343718][T18416] netlink: 'syz.2.3409': attribute type 4 has an invalid length.
[  341.362834][T18416] netlink: 'syz.2.3409': attribute type 4 has an invalid length.
[  341.390796][T18410] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 43040 - 0
[  341.395188][T18410] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 54384 - 0
[  341.399604][T18410] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 2] type 2 family 0 port 20001 - 0
[  341.463852][T18410] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 43040 - 0
[  341.467994][T18410] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 54384 - 0
[  341.472556][T18410] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 2] type 2 family 0 port 20001 - 0
[  341.663904][T10819] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 20001 - 0
[  341.667333][T10819] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 54384 - 0
[  341.678112][T10819] netdevsim netdevsim0 eth0: set [1, 2] type 2 family 0 port 43040 - 0
[  341.690838][ T5872] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 20001 - 0
[  341.694098][ T5872] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 54384 - 0
[  341.697852][ T5872] netdevsim netdevsim0 eth1: set [1, 2] type 2 family 0 port 43040 - 0
[  341.702336][T18422] netlink: 'syz.1.3412': attribute type 8 has an invalid length.
[  341.719022][T10819] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 20001 - 0
[  341.736767][T10819] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 54384 - 0
[  341.740165][T10819] netdevsim netdevsim0 eth2: set [1, 2] type 2 family 0 port 43040 - 0
[  341.744825][T10819] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 20001 - 0
[  341.747871][T10819] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 54384 - 0
[  341.754374][T10819] netdevsim netdevsim0 eth3: set [1, 2] type 2 family 0 port 43040 - 0
[  342.034228][T18434] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  342.038843][T18433] IPVS: stopping backup sync thread 18434 ...
[  342.157436][T18444] netlink: 'syz.2.3419': attribute type 1 has an invalid length.
[  342.184566][T18444] bond37: entered promiscuous mode
[  342.187144][T18444] 8021q: adding VLAN 0 to HW filter on device bond37
[  342.199996][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  342.575084][T18484] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  342.577665][T18484] syzkaller0: entered promiscuous mode
[  342.579578][T18484] syzkaller0: entered allmulticast mode
[  342.614812][T18484] tipc: Resetting bearer <eth:syzkaller0>
[  342.619167][T18483] tipc: Resetting bearer <eth:syzkaller0>
[  342.634192][T18483] tipc: Disabling bearer <eth:syzkaller0>
[  342.642885][T18488] openvswitch: netlink: IPv4 tunnel dst address is zero
[  342.680970][T18501] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  342.684034][T18501] IPv6: NLM_F_CREATE should be set when creating new route
[  342.687024][T18501] IPv6: NLM_F_CREATE should be set when creating new route
[  342.810372][T18516] __nla_validate_parse: 20 callbacks suppressed
[  342.810386][T18516] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3438'.
[  342.828770][T18518] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3437'.
[  342.877865][T18518] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3437'.
[  342.882496][T18518] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3437'.
[  342.899777][T18518] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3437'.
[  342.960730][T18532] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  343.005411][T18529] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3441'.
[  343.009378][T18535] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3443'.
[  343.018486][T18535] bond14: (slave vcan0): The slave device specified does not support setting the MAC address
[  343.027093][T18535] bond14: (slave vcan0): making interface the new active one
[  343.034519][T18535] bond14: (slave vcan0): Enslaving as an active interface with an up link
[  343.240028][    C0] net_ratelimit: 1 callbacks suppressed
[  343.240044][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  343.270762][T18548] bond14: (slave vcan0): Releasing backup interface
[  343.773942][T18560] syzkaller0: entered promiscuous mode
[  343.775929][T18560] syzkaller0: entered allmulticast mode
[  343.805721][T18562] ip6tnl0: Caught tx_queue_len zero misconfig
[  343.918100][T18567] lo speed is unknown, defaulting to 1000
[  344.117174][T18579] netlink: 'syz.0.3453': attribute type 10 has an invalid length.
[  344.232215][T18589] netlink: 'syz.0.3456': attribute type 21 has an invalid length.
[  344.235580][T18589] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3456'.
[  344.279967][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  344.490625][T18559] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  344.507301][T18554] tipc: Resetting bearer <eth:syzkaller0>
[  344.538873][T18554] tipc: Disabling bearer <eth:syzkaller0>
[  344.568323][T18597] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3458'.
[  344.575745][T18597] netlink: 'syz.0.3458': attribute type 5 has an invalid length.
[  344.625253][T18599] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3459'.
[  344.642289][T18603] tunl0: Caught tx_queue_len zero misconfig
[  344.687753][T18609] netlink: 'syz.2.3463': attribute type 1 has an invalid length.
[  344.704013][T18609] veth19: entered promiscuous mode
[  344.710316][T18609] bond0: (slave veth19): Enslaving as an active interface with an up link
[  344.803679][T18617] lo speed is unknown, defaulting to 1000
[  344.920957][T18632] ip6tnl5: entered promiscuous mode
[  345.136076][T18639] lo speed is unknown, defaulting to 1000
[  345.193524][T18645] lo speed is unknown, defaulting to 1000
[  345.319936][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  345.353970][T18658] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  345.358305][T18657] IPVS: stopping backup sync thread 18658 ...
[  345.717836][T18674] lo speed is unknown, defaulting to 1000
[  345.918545][T18678] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  345.922808][T18678] openvswitch: netlink: Duplicate key (type 0).
[  345.956264][T18678] lo speed is unknown, defaulting to 1000
[  346.350016][T18697] lo speed is unknown, defaulting to 1000
[  346.360289][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  346.384316][T18702] IPVS: stopping backup sync thread 18704 ...
[  346.384647][T18704] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  346.586597][T18716] netlink: 'syz.1.3488': attribute type 32 has an invalid length.
[  346.773438][T18728] IPv6: sit3: Disabled Multicast RS
[  346.781149][T18728] sit3: entered allmulticast mode
[  346.873283][T18731] sctp: [Deprecated]: syz.2.3490 (pid 18731) Use of int in maxseg socket option.
[  346.873283][T18731] Use struct sctp_assoc_value instead
[  346.921448][T18737] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  347.107598][T18749] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  347.111681][T18746] IPVS: stopping backup sync thread 18749 ...
[  347.154293][T18752] lo speed is unknown, defaulting to 1000
[  347.398961][T18762] netlink: 'syz.2.3498': attribute type 4 has an invalid length.
[  347.402007][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  347.434919][T18762] netlink: 'syz.2.3498': attribute type 4 has an invalid length.
[  347.541729][T18772] lo speed is unknown, defaulting to 1000
[  347.546299][T18773] lo speed is unknown, defaulting to 1000
[  347.564685][T18771] lo speed is unknown, defaulting to 1000
[  347.596983][T18775] macsec0: entered promiscuous mode
[  347.599623][T18775] macsec0: entered allmulticast mode
[  347.626239][T18775] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode
[  347.629907][T18775] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode
[  347.632906][T18775] macsec0: left promiscuous mode
[  347.634916][T18775] mac80211_hwsim hwsim4 wlan0: left promiscuous mode
[  347.637811][T18775] macsec0: left allmulticast mode
[  347.640284][T18775] mac80211_hwsim hwsim4 wlan0: left allmulticast mode
[  347.900428][T18792] __nla_validate_parse: 9 callbacks suppressed
[  347.900444][T18792] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3506'.
[  347.927338][T18796] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3507'.
[  347.969219][T18800] 8021q: VLANs not supported on 60X
[  348.050800][T18808] netlink: 'syz.2.3511': attribute type 1 has an invalid length.
[  348.052131][T18807] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  348.067462][T18807] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3510'.
[  348.072633][T18807] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3510'.
[  348.084139][T18808] 8021q: adding VLAN 0 to HW filter on device bond38
[  348.086682][T18808] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3511'.
[  348.119225][T18816] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3513'.
[  348.169840][T18816] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3513'.
[  348.201272][T18823] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3515'.
[  348.422324][T18845] netlink: 'syz.1.3522': attribute type 9 has an invalid length.
[  348.426005][T18848] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  348.426460][T18846] IPVS: stopping backup sync thread 18848 ...
[  348.450402][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  348.468804][T18845] netlink: 236 bytes leftover after parsing attributes in process `syz.1.3522'.
[  348.472463][T18845] netlink: 1 bytes leftover after parsing attributes in process `syz.1.3522'.
[  348.475589][T18842] lo speed is unknown, defaulting to 1000
[  348.674779][T18867] lo speed is unknown, defaulting to 1000
[  348.707130][T18869] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0
[  348.714737][T18869] netdevsim netdevsim0 eth3 (unregistering): unset [1, 1] type 2 family 0 port 54384 - 0
[  348.724429][T18869] netdevsim netdevsim0 eth3 (unregistering): unset [1, 2] type 2 family 0 port 43040 - 0
[  348.805084][T18869] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0
[  348.815906][T18869] netdevsim netdevsim0 eth2 (unregistering): unset [1, 1] type 2 family 0 port 54384 - 0
[  348.824457][T18869] netdevsim netdevsim0 eth2 (unregistering): unset [1, 2] type 2 family 0 port 43040 - 0
[  348.900170][T18869] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0
[  348.904201][T18869] netdevsim netdevsim0 eth1 (unregistering): unset [1, 1] type 2 family 0 port 54384 - 0
[  348.908203][T18869] netdevsim netdevsim0 eth1 (unregistering): unset [1, 2] type 2 family 0 port 43040 - 0
[  348.976798][T18869] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0
[  348.985988][T18869] netdevsim netdevsim0 eth0 (unregistering): unset [1, 1] type 2 family 0 port 54384 - 0
[  348.991305][T18869] netdevsim netdevsim0 eth0 (unregistering): unset [1, 2] type 2 family 0 port 43040 - 0
[  349.082330][ T5872] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 20001 - 0
[  349.085585][ T5872] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 54384 - 0
[  349.088432][ T5872] netdevsim netdevsim0 eth0: set [1, 2] type 2 family 0 port 43040 - 0
[  349.097793][   T13] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 20001 - 0
[  349.100869][   T13] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 54384 - 0
[  349.103655][   T13] netdevsim netdevsim0 eth1: set [1, 2] type 2 family 0 port 43040 - 0
[  349.113590][   T13] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 20001 - 0
[  349.116695][   T13] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 54384 - 0
[  349.119490][   T13] netdevsim netdevsim0 eth2: set [1, 2] type 2 family 0 port 43040 - 0
[  349.135538][ T5872] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 20001 - 0
[  349.138714][ T5872] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 54384 - 0
[  349.145400][ T5872] netdevsim netdevsim0 eth3: set [1, 2] type 2 family 0 port 43040 - 0
[  349.489807][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  349.644412][T18909] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  349.648794][T18909] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  349.825921][T18914] netlink: 'syz.1.3542': attribute type 1 has an invalid length.
[  349.847314][T18914] 8021q: adding VLAN 0 to HW filter on device bond26
[  349.856915][T18914] ipvlan3: entered allmulticast mode
[  349.858778][T18914] bond26: entered allmulticast mode
[  349.947621][T18923] (unnamed net_device) (uninitialized): invalid ARP target 0.0.0.0 specified for addition
[  349.953746][T18923] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (0)
[  349.957852][T18924] (unnamed net_device) (uninitialized): invalid ARP target 0.0.0.0 specified for addition
[  349.962096][T18924] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (0)
[  350.002963][T18927] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  350.007609][T18926] IPVS: stopping backup sync thread 18927 ...
[  350.093572][T18934] netlink: 'syz.2.3548': attribute type 3 has an invalid length.
[  350.095071][T18938] IPVS: stopping backup sync thread 18939 ...
[  350.096231][T18934] netlink: 'syz.2.3548': attribute type 3 has an invalid length.
[  350.101705][T18934] netlink: 'syz.2.3548': attribute type 3 has an invalid length.
[  350.104283][T18934] netlink: 'syz.2.3548': attribute type 3 has an invalid length.
[  350.106891][T18934] netlink: 'syz.2.3548': attribute type 3 has an invalid length.
[  350.112170][T18934] netlink: 'syz.2.3548': attribute type 3 has an invalid length.
[  350.116922][T18934] netlink: 'syz.2.3548': attribute type 3 has an invalid length.
[  350.130011][T18934] netlink: 'syz.2.3548': attribute type 3 has an invalid length.
[  350.135159][T18934] netlink: 'syz.2.3548': attribute type 3 has an invalid length.
[  350.168221][T18946] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  350.168330][T18945] IPVS: stopping backup sync thread 18946 ...
[  350.266077][T18958] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  350.271136][T18957] IPVS: stopping backup sync thread 18958 ...
[  350.404096][T18970] lo speed is unknown, defaulting to 1000
[  350.519814][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  350.535642][T18984] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  350.536280][T18982] IPVS: stopping backup sync thread 18984 ...
[  350.772653][T19008] pim6reg: entered allmulticast mode
[  350.847399][T19018] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  350.859028][ T7345] block nbd1: Possible stuck request ffff8880201d8000: control (read@0,1024B). Runtime 270 seconds
[  350.864427][ T7345] block nbd1: Possible stuck request ffff8880201d8200: control (read@1024,1024B). Runtime 270 seconds
[  350.868785][ T7345] block nbd1: Possible stuck request ffff8880201d8400: control (read@2048,1024B). Runtime 270 seconds
[  350.875853][ T7345] block nbd1: Possible stuck request ffff8880201d8600: control (read@3072,1024B). Runtime 270 seconds
[  350.881118][  T128] block nbd2: Possible stuck request ffff8880201f0000: control (read@0,1024B). Runtime 270 seconds
[  350.885407][  T128] block nbd2: Possible stuck request ffff8880201f0200: control (read@1024,1024B). Runtime 270 seconds
[  350.889919][  T128] block nbd2: Possible stuck request ffff8880201f0400: control (read@2048,1024B). Runtime 270 seconds
[  350.894146][  T128] block nbd2: Possible stuck request ffff8880201f0600: control (read@3072,1024B). Runtime 270 seconds
[  351.144149][T19042] 8021q: adding VLAN 0 to HW filter on device bond27
[  351.164979][T19042] bond27: (slave ip6gretap5): making interface the new active one
[  351.168583][T19042] bond27: (slave ip6gretap5): Enslaving as an active interface with an up link
[  351.186544][T19042] erspan0: entered allmulticast mode
[  351.194123][T19042] bond27: (slave erspan0): Enslaving as an active interface with an up link
[  351.279117][T19053] lo speed is unknown, defaulting to 1000
[  351.405561][T19064] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  351.405647][T19063] IPVS: stopping backup sync thread 19064 ...
[  351.559954][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  351.678702][T19080] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  351.833238][T19091] syz.1.3587: vmalloc error: size 33558528, failed to allocated page array size 65544, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  351.841749][T19091] CPU: 1 UID: 0 PID: 19091 Comm: syz.1.3587 Not tainted syzkaller #0 PREEMPT(full) 
[  351.841765][T19091] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  351.841773][T19091] Call Trace:
[  351.841779][T19091]  <TASK>
[  351.841784][T19091]  dump_stack_lvl+0x189/0x250
[  351.841806][T19091]  ? __pfx_dump_stack_lvl+0x10/0x10
[  351.841848][T19091]  ? __pfx__printk+0x10/0x10
[  351.841866][T19091]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  351.841881][T19091]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  351.841902][T19091]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  351.841919][T19091]  warn_alloc+0x214/0x310
[  351.841940][T19091]  ? __pfx_warn_alloc+0x10/0x10
[  351.841964][T19091]  ? __get_vm_area_node+0x28f/0x300
[  351.841980][T19091]  ? xskq_create+0xbf/0x170
[  351.841996][T19091]  __vmalloc_node_range_noprof+0x67e/0x12f0
[  351.842052][T19091]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  351.842075][T19091]  ? __kasan_kmalloc+0x93/0xb0
[  351.842093][T19091]  vmalloc_user_noprof+0xad/0xf0
[  351.842110][T19091]  ? xskq_create+0xbf/0x170
[  351.842121][T19091]  xskq_create+0xbf/0x170
[  351.842134][T19091]  xsk_init_queue+0xb0/0x110
[  351.842147][T19091]  xsk_setsockopt+0x57b/0x8d0
[  351.842166][T19091]  ? __pfx_xsk_setsockopt+0x10/0x10
[  351.842183][T19091]  ? __pfx_aa_sk_perm+0x10/0x10
[  351.842204][T19091]  ? __fget_files+0x2a/0x420
[  351.842213][T19091]  ? aa_sock_opt_perm+0xff/0x1b0
[  351.842227][T19091]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  351.842239][T19091]  ? __pfx_xsk_setsockopt+0x10/0x10
[  351.842258][T19091]  do_sock_setsockopt+0x17c/0x1b0
[  351.842276][T19091]  __x64_sys_setsockopt+0x13f/0x1b0
[  351.842293][T19091]  do_syscall_64+0xfa/0x3b0
[  351.842306][T19091]  ? lockdep_hardirqs_on+0x9c/0x150
[  351.842317][T19091]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  351.842329][T19091]  ? exc_page_fault+0x9f/0xf0
[  351.842343][T19091]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  351.842355][T19091] RIP: 0033:0x7f20d258eba9
[  351.842366][T19091] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  351.842377][T19091] RSP: 002b:00007f20d349a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  351.842389][T19091] RAX: ffffffffffffffda RBX: 00007f20d27d6180 RCX: 00007f20d258eba9
[  351.842398][T19091] RDX: 0000000000000003 RSI: 000000000000011b RDI: 0000000000000003
[  351.842404][T19091] RBP: 00007f20d2611e19 R08: 0000000000000004 R09: 0000000000000000
[  351.842412][T19091] R10: 00002000000001c0 R11: 0000000000000246 R12: 0000000000000000
[  351.842419][T19091] R13: 00007f20d27d6218 R14: 00007f20d27d6180 R15: 00007ffcae7d1c18
[  351.842441][T19091]  </TASK>
[  351.843554][T19091] Mem-Info:
[  351.957438][T19091] active_anon:14330 inactive_anon:0 isolated_anon:0
[  351.957438][T19091]  active_file:1560 inactive_file:38343 isolated_file:0
[  351.957438][T19091]  unevictable:1768 dirty:252 writeback:0
[  351.957438][T19091]  slab_reclaimable:11718 slab_unreclaimable:88914
[  351.957438][T19091]  mapped:18610 shmem:2571 pagetables:1189
[  351.957438][T19091]  sec_pagetables:0 bounce:0
[  351.957438][T19091]  kernel_misc_reclaimable:0
[  351.957438][T19091]  free:244164 free_pcp:24152 free_cma:0
[  351.975405][T19091] Node 0 active_anon:35104kB inactive_anon:0kB active_file:4544kB inactive_file:26768kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:44784kB dirty:740kB writeback:0kB shmem:5448kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:5220kB pagetables:2576kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  351.987947][T19091] Node 1 active_anon:22216kB inactive_anon:0kB active_file:1696kB inactive_file:126604kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:29656kB dirty:268kB writeback:0kB shmem:4836kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:9688kB pagetables:2180kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  352.001384][T19091] Node 0 DMA free:15360kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  352.013461][T19091] lowmem_reserve[]: 0 811 811 811 811
[  352.015716][T19091] Node 0 DMA32 free:301848kB boost:0kB min:33660kB low:42072kB high:50484kB reserved_highatomic:0KB free_highatomic:0KB active_anon:35104kB inactive_anon:0kB active_file:4544kB inactive_file:26768kB unevictable:3536kB writepending:740kB present:1556484kB managed:830892kB mlocked:0kB bounce:0kB free_pcp:46336kB local_pcp:16744kB free_cma:0kB
[  352.028666][T19097] vlan0: entered promiscuous mode
[  352.030991][T19091] lowmem_reserve[]: 0 0 0 0 0
[  352.032928][T19091] Node 1 DMA32 free:458492kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:116kB local_pcp:116kB free_cma:0kB
[  352.045082][T19091] lowmem_reserve[]: 0 0 854 854 854
[  352.047311][T19091] Node 1 Normal free:200956kB boost:0kB min:36612kB low:45764kB high:54916kB reserved_highatomic:0KB free_highatomic:0KB active_anon:22216kB inactive_anon:0kB active_file:1696kB inactive_file:126604kB unevictable:3536kB writepending:268kB present:1048576kB managed:874952kB mlocked:0kB bounce:0kB free_pcp:50468kB local_pcp:28908kB free_cma:0kB
[  352.071411][T19091] lowmem_reserve[]: 0 0 0 0 0
[  352.073241][T19091] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (UM) = 15360kB
[  352.077761][T19091] Node 0 DMA32: 1024*4kB (UME) 91*8kB (UE) 649*16kB (UME) 294*32kB (UE) 179*64kB (U) 56*128kB (UME) 40*256kB (UM) 11*512kB (UM) 19*1024kB (UME) 5*2048kB (UM) 52*4096kB (U) = 301800kB
[  352.085247][T19091] Node 1 DMA32: 3*4kB (UM) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 2*128kB (UM) 3*256kB (UM) 3*512kB (UM) 3*1024kB (UM) 3*2048kB (UM) 109*4096kB (M) = 458492kB
[  352.092589][T19091] Node 1 Normal: 215*4kB (UME) 1047*8kB (UME) 658*16kB (UME) 216*32kB (UM) 35*64kB (UME) 42*128kB (UME) 41*256kB (UM) 23*512kB (UM) 21*1024kB (UME) 14*2048kB (UME) 23*4096kB (UM) = 200948kB
[  352.099417][T19091] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  352.102261][T19100] lo speed is unknown, defaulting to 1000
[  352.104624][T19091] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  352.109162][T19091] 42474 total pagecache pages
[  352.113631][T19091] 0 pages in swap cache
[  352.115512][T19091] Free swap  = 124996kB
[  352.117146][T19091] Total swap = 124996kB
[  352.118605][T19091] 786301 pages RAM
[  352.120171][T19091] 0 pages HighMem/MovableOnly
[  352.122098][T19091] 241346 pages reserved
[  352.123540][T19091] 0 pages cma reserved
[  352.175271][T19105] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  352.175389][T19104] IPVS: stopping backup sync thread 19105 ...
[  352.609980][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  352.725940][T19111] IPVS: wlc: SCTP 172.20.20.187:0 - no destination available
[  353.093477][T19129] __nla_validate_parse: 55 callbacks suppressed
[  353.093492][T19129] netlink: 188 bytes leftover after parsing attributes in process `syz.2.3600'.
[  353.148976][T19131] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3602'.
[  353.200723][T19138] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3605'.
[  353.205028][T19135] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3603'.
[  353.219170][T19138] bond26: entered promiscuous mode
[  353.221716][T19138] 8021q: adding VLAN 0 to HW filter on device bond26
[  353.240572][T19138] 8021q: adding VLAN 0 to HW filter on device bond26
[  353.243041][T19138] bond26: (slave vcan2): The slave device specified does not support setting the MAC address
[  353.247707][T19138] bond26: (slave vcan2): Error -95 calling set_mac_address
[  353.256845][T19135] IPVS: set_ctl: invalid protocol: 59 172.30.1.3:20001
[  353.447089][T19158] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3610'.
[  353.455348][T19158] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3610'.
[  353.496035][T19158] 8021q: adding VLAN 0 to HW filter on device bond28
[  353.544148][T19163] sctp: [Deprecated]: syz.2.3612 (pid 19163) Use of struct sctp_assoc_value in delayed_ack socket option.
[  353.544148][T19163] Use struct sctp_sack_info instead
[  353.582885][T19165] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3613'.
[  353.631189][T19174] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3617'.
[  353.644667][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  353.746208][T19187] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3620'.
[  353.775734][T19187] lo speed is unknown, defaulting to 1000
[  353.804111][T19196] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3622'.
[  353.823685][   T33] audit: type=1107 audit(1758477253.845:8): pid=19193 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
[  354.310658][T19224] lo speed is unknown, defaulting to 1000
[  354.479182][T19228] IPVS: stopping backup sync thread 19229 ...
[  354.481940][T19229] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 1073742337, id = 0
[  354.680196][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  354.830298][T19242] lo speed is unknown, defaulting to 1000
[  355.076094][T19252] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  355.080691][T19250] IPVS: stopping backup sync thread 19252 ...
[  355.275185][T19268] validate_nla: 37 callbacks suppressed
[  355.275200][T19268] netlink: 'syz.2.3641': attribute type 13 has an invalid length.
[  355.284220][T19268] netlink: 'syz.2.3641': attribute type 17 has an invalid length.
[  355.367270][T19268] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check.
[  355.523428][T19277] !: left allmulticast mode
[  355.525286][T19277] !: left promiscuous mode
[  355.549622][ T5872] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 20001 - 0
[  355.555886][ T5872] netdevsim netdevsim0 eth0: unset [1, 1] type 2 family 0 port 54384 - 0
[  355.559467][ T5872] netdevsim netdevsim0 eth0: unset [1, 2] type 2 family 0 port 43040 - 0
[  355.563558][ T5872] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 20001 - 0
[  355.567359][ T5872] netdevsim netdevsim0 eth1: unset [1, 1] type 2 family 0 port 54384 - 0
[  355.580080][ T5872] netdevsim netdevsim0 eth1: unset [1, 2] type 2 family 0 port 43040 - 0
[  355.586503][ T5872] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 20001 - 0
[  355.589419][ T5872] netdevsim netdevsim0 eth2: unset [1, 1] type 2 family 0 port 54384 - 0
[  355.595475][ T5872] netdevsim netdevsim0 eth2: unset [1, 2] type 2 family 0 port 43040 - 0
[  355.599272][ T5872] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 20001 - 0
[  355.603613][ T5872] netdevsim netdevsim0 eth3: unset [1, 1] type 2 family 0 port 54384 - 0
[  355.609043][ T5872] netdevsim netdevsim0 eth3: unset [1, 2] type 2 family 0 port 43040 - 0
[  355.720039][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  356.109356][T19305] lo speed is unknown, defaulting to 1000
[  356.347089][T19310] netlink: 'syz.0.3651': attribute type 10 has an invalid length.
[  356.354466][T19310] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  356.357885][T19310] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  356.769845][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  357.094086][T19326] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[  357.101757][T19326] netlink: 'syz.1.3656': attribute type 4 has an invalid length.
[  357.237666][T19336] netlink: 'syz.0.3660': attribute type 8 has an invalid length.
[  357.351883][T19349] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  357.363390][T19348] IPVS: stopping backup sync thread 19349 ...
[  357.676784][T19376] lo speed is unknown, defaulting to 1000
[  357.704694][T19385] sctp: [Deprecated]: syz.0.3671 (pid 19385) Use of struct sctp_assoc_value in delayed_ack socket option.
[  357.704694][T19385] Use struct sctp_sack_info instead
[  357.765048][T19385] netlink: 'syz.0.3671': attribute type 21 has an invalid length.
[  357.769408][T19385] netlink: 'syz.0.3671': attribute type 4 has an invalid length.
[  357.772133][T19385] netlink: 'syz.0.3671': attribute type 3 has an invalid length.
[  357.799792][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  358.199360][T19421] syzkaller1: entered promiscuous mode
[  358.205868][T19421] syzkaller1: entered allmulticast mode
[  358.215393][T19423] __nla_validate_parse: 26 callbacks suppressed
[  358.215405][T19423] netlink: 76 bytes leftover after parsing attributes in process `syz.2.3682'.
[  358.321964][T19435] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  358.357505][T19435] macsec2: entered promiscuous mode
[  358.360161][T19435] macsec2: entered allmulticast mode
[  358.361864][T19435] mac80211_hwsim hwsim21 wlan0: entered allmulticast mode
[  358.489214][T19455] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3689'.
[  358.498143][T19453] pim6reg1: entered promiscuous mode
[  358.501318][T19453] pim6reg1: entered allmulticast mode
[  358.538371][T19459] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3690'.
[  358.543194][T19459] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3690'.
[  358.559228][T19457] lo speed is unknown, defaulting to 1000
[  358.721167][T19463] netlink: 9 bytes leftover after parsing attributes in process `syz.0.3691'.
[  358.727721][T19463] netlink: 156 bytes leftover after parsing attributes in process `syz.0.3691'.
[  358.812017][T19478] lo speed is unknown, defaulting to 1000
[  358.839839][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  358.861010][T19488] IPVS: set_ctl: invalid protocol: 108 224.0.0.2:20006
[  358.899799][T19488] IPVS: set_ctl: invalid protocol: 41 172.20.20.170:24097
[  358.902801][T19488] netlink: 244 bytes leftover after parsing attributes in process `syz.1.3699'.
[  358.948119][T19495] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  358.949012][T19492] IPVS: stopping backup sync thread 19495 ...
[  359.020256][T19499] bond0: entered promiscuous mode
[  359.025553][T19499] bond0: left promiscuous mode
[  359.204240][T19506] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3705'.
[  359.773833][T19525] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3710'.
[  359.799356][T19526] lo speed is unknown, defaulting to 1000
[  359.865069][T19529] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3711'.
[  359.879955][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  360.458463][T19556] lo speed is unknown, defaulting to 1000
[  360.751760][T19534] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  360.754420][T19534] Bluetooth: hci1: Error when powering off device on rfkill (-4)
[  360.763848][T19534] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  360.767003][T19534] Bluetooth: hci2: Error when powering off device on rfkill (-4)
[  360.919854][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  361.108048][T19594] lo speed is unknown, defaulting to 1000
[  361.156969][T19587] lo speed is unknown, defaulting to 1000
[  361.405309][T19602] netlink: 'syz.2.3728': attribute type 6 has an invalid length.
[  361.969797][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  362.477290][T19661] netlink: 'syz.0.3748': attribute type 1 has an invalid length.
[  362.549018][T19665] lo speed is unknown, defaulting to 1000
[  362.575932][T19667] netlink: 'syz.2.3750': attribute type 1 has an invalid length.
[  362.603310][T19667] 8021q: adding VLAN 0 to HW filter on device bond43
[  363.009788][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  363.037911][T19681] dvmrp8: entered allmulticast mode
[  363.116419][T19687] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  363.119334][T19687] syzkaller0: entered promiscuous mode
[  363.121521][T19687] syzkaller0: entered allmulticast mode
[  363.132566][T19687] tipc: Resetting bearer <eth:syzkaller0>
[  363.136085][T19686] tipc: Resetting bearer <eth:syzkaller0>
[  363.146344][T19686] tipc: Disabling bearer <eth:syzkaller0>
[  363.326662][T19694] netlink: 'syz.1.3757': attribute type 3 has an invalid length.
[  363.330496][T19694] __nla_validate_parse: 13 callbacks suppressed
[  363.330508][T19694] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3757'.
[  363.342595][T19694] syzkaller1: tun_chr_ioctl cmd 1074025677
[  363.344615][T19694] syzkaller1: linktype set to 778
[  363.514067][T19705] netlink: 'syz.1.3762': attribute type 22 has an invalid length.
[  363.517137][T19705] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3762'.
[  363.539584][T19705] netlink: 'syz.1.3762': attribute type 22 has an invalid length.
[  363.544313][T19705] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3762'.
[  363.634939][T19713] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3765'.
[  363.790472][T19728] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  363.808893][T19728] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  363.887284][T19742] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3770'.
[  363.965768][T19749] netlink: 'syz.2.3773': attribute type 10 has an invalid length.
[  364.014253][T19754] netlink: 'syz.2.3775': attribute type 1 has an invalid length.
[  364.039947][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  364.048310][T19754] 8021q: adding VLAN 0 to HW filter on device bond44
[  364.061921][T19754] bond44: (slave ip6gretap7): making interface the new active one
[  364.066184][T19754] bond44: (slave ip6gretap7): Enslaving as an active interface with an up link
[  364.087483][T19754] bond44: (slave veth21): Enslaving as an active interface with a down link
[  364.093168][T19754] erspan0: entered allmulticast mode
[  364.101981][T19754] bond44: (slave erspan0): Enslaving as an active interface with an up link
[  364.229891][T19771] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  364.235202][T19769] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3779'.
[  364.266129][T19769] vlan5: entered allmulticast mode
[  364.268727][T19769] bridge16: port 1(vlan5) entered blocking state
[  364.273299][T19769] bridge16: port 1(vlan5) entered disabled state
[  364.277578][T19769] vlan5: entered promiscuous mode
[  364.280286][T19769] bridge0: entered promiscuous mode
[  364.284046][T19769] IPVS: stopping backup sync thread 19771 ...
[  364.412507][T19791] 8021q: adding VLAN 0 to HW filter on device bond14
[  364.422518][T19791] vlan5: left promiscuous mode
[  364.425999][T19791] bridge0: left promiscuous mode
[  364.428469][T19791] bridge16: port 1(vlan5) entered disabled state
[  364.448314][T19793] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc.
[  364.513351][T19800] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3785'.
[  364.585865][T19804] netlink: 'syz.0.3787': attribute type 1 has an invalid length.
[  364.630097][T19804] 8021q: adding VLAN 0 to HW filter on device bond29
[  364.688539][T19811] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  364.717246][T19813] netlink: 'syz.0.3791': attribute type 1 has an invalid length.
[  364.723286][T19813] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3791'.
[  364.726557][T19813] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3791'.
[  365.079895][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  365.200799][T19851] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3802'.
[  365.721211][T19884] lo speed is unknown, defaulting to 1000
[  366.015905][T19911] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  366.016598][T19910] IPVS: stopping backup sync thread 19911 ...
[  366.052713][T19913] batadv_slave_0: entered promiscuous mode
[  366.065475][T19912] batadv_slave_0: left promiscuous mode
[  366.119885][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  366.657576][T19920] validate_nla: 4 callbacks suppressed
[  366.657590][T19920] netlink: 'syz.0.3822': attribute type 1 has an invalid length.
[  366.967065][T19940] (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode balance-rr(0)
[  367.016716][T19948] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  367.020545][T19947] IPVS: stopping backup sync thread 19948 ...
[  367.101486][T19955] netlink: 'syz.2.3832': attribute type 1 has an invalid length.
[  367.153375][T19955] 8021q: adding VLAN 0 to HW filter on device bond45
[  367.159923][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  367.170840][T19955] veth23: entered promiscuous mode
[  367.175889][T19955] bond45: (slave veth23): Enslaving as a backup interface with a down link
[  367.184291][T19955] bond44: (slave erspan0): Releasing active interface
[  367.186697][T19955] ip6gretap7: entered promiscuous mode
[  367.210479][T19955] bond36: (slave veth17): Releasing active interface
[  367.224007][T19967] IPVS: set_ctl: invalid protocol: 12 127.0.0.1:20000
[  367.224158][T19955] bond0: (slave veth19): Releasing backup interface
[  367.226476][T19967] IPVS: set_ctl: invalid protocol: 0 172.20.20.187:20004
[  367.246123][T19955] bond44: (slave ip6gretap7): Releasing active interface
[  367.248724][T19955] bond44: (slave ip6gretap7): the permanent HWaddr of slave - 7e:a7:ae:15:03:30 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  367.257403][T19955] ip6gretap7: left promiscuous mode
[  367.268982][T19955] bond44: (slave veth21): Releasing active interface
[  367.279565][T19955] bond45: (slave veth23): Releasing backup interface
[  367.376479][T19986] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  367.382115][T19985] IPVS: stopping backup sync thread 19986 ...
[  367.488834][T20006] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  367.494624][T20006] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  367.497935][T20006] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  367.501123][T20006] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  367.504160][T20006] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  367.508361][T20006] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  367.515935][T20006] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  367.519155][T20006] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  367.530516][T20006] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  367.534263][T20006] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  367.534656][T20002] IPVS: set_ctl: invalid protocol: 59 100.1.1.1:20002
[  367.537273][T20006] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  367.542472][T20006] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  367.545466][T20006] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  367.554830][T20006] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  367.585936][T20016] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  367.603312][T20019] veth1: left promiscuous mode
[  367.609187][T20019] vlan0: left promiscuous mode
[  367.617097][T20019] macvlan0: left allmulticast mode
[  367.626236][T20019] mac80211_hwsim hwsim4 syzkaller0: left promiscuous mode
[  367.629319][T20019] mac80211_hwsim hwsim4 syzkaller0: left allmulticast mode
[  367.635827][T20019] macsec2: left promiscuous mode
[  367.637842][T20019] macsec2: left allmulticast mode
[  367.643962][T20019] geneve4: left promiscuous mode
[  367.646197][T20019] geneve4: left allmulticast mode
[  367.649496][T20019] hsr0: left allmulticast mode
[  367.651888][T20019] veth1_to_team: left allmulticast mode
[  367.654270][T20019] bond0: left allmulticast mode
[  367.657153][T20019] bond19: left promiscuous mode
[  367.661915][T20019] macsec3: left promiscuous mode
[  367.664001][T20019] macsec3: left allmulticast mode
[  367.666955][T20019] veth31: left promiscuous mode
[  367.669488][T20019] gretap3: left promiscuous mode
[  367.672200][T20019] gretap3: left allmulticast mode
[  367.674892][T20019] nicvf0: left promiscuous mode
[  367.685478][T20019] vlan5: left allmulticast mode
[  367.717345][T20019] veth1_to_team: left promiscuous mode
[  367.722456][T20019] bond0: left promiscuous mode
[  367.941353][T20052] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  367.944968][T20050] IPVS: stopping backup sync thread 20052 ...
[  368.199892][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  368.288949][T20062] Failed to register nexthop notifier
[  368.308298][T20096] vlan5: entered allmulticast mode
[  368.313848][T20096] gretap0: entered allmulticast mode
[  368.332759][T20100] lo speed is unknown, defaulting to 1000
[  368.352824][T20096] __nla_validate_parse: 11 callbacks suppressed
[  368.352838][T20096] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3871'.
[  368.374234][T20098] netlink: 1284 bytes leftover after parsing attributes in process `syz.0.3872'.
[  368.628731][T20119] erspan0: left allmulticast mode
[  368.635785][T20119] 8021q: adding VLAN 0 to HW filter on device team0
[  368.643843][T20119] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  368.652549][   T10] lo speed is unknown, defaulting to 1000
[  368.655460][   T10] syz1: Port: 1 Link ACTIVE
[  368.683276][T20126] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  368.698324][T20126] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3879'.
[  368.730455][T20126] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  368.735744][T20126] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3879'.
[  368.764716][T20127] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3878'.
[  368.828156][T20142] lo speed is unknown, defaulting to 1000
[  368.899105][T20142] netlink: 'syz.1.3884': attribute type 4 has an invalid length.
[  368.903053][T20142] netlink: 'syz.1.3884': attribute type 4 has an invalid length.
[  368.909408][T20142] netlink: 'syz.1.3884': attribute type 3 has an invalid length.
[  368.915316][T20142] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.3884'.
[  369.104844][T20163] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3889'.
[  369.108271][T20163] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3889'.
[  369.114703][T20163] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap4
[  369.118538][T20163] gretap4: entered promiscuous mode
[  369.120995][T20163] gretap4: entered allmulticast mode
[  369.239934][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  369.286579][T20169] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  369.356212][T20177] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  369.363308][T20176] IPVS: stopping backup sync thread 20177 ...
[  369.377726][T20176] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3893'.
[  369.547601][T20194] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3900'.
[  369.554985][T20194] netlink: 'syz.1.3900': attribute type 1 has an invalid length.
[  369.571821][ T5872] bond27: (slave erspan0): link status definitely down, disabling slave
[  369.574923][ T5872] ip6gretap5: entered promiscuous mode
[  369.626113][T20202] netlink: 'syz.1.3902': attribute type 58 has an invalid length.
[  369.676606][T20202] netlink: 'syz.1.3902': attribute type 1 has an invalid length.
[  369.852827][T20221] syzkaller0: entered promiscuous mode
[  369.854834][T20221] syzkaller0: entered allmulticast mode
[  369.859436][T20222] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  369.859469][T20221] IPVS: stopping backup sync thread 20222 ...
[  370.289852][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  370.913431][T20223] lo speed is unknown, defaulting to 1000
[  371.081248][T20235] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  371.096924][T20237] lo speed is unknown, defaulting to 1000
[  371.203121][T20245] 8021q: adding VLAN 0 to HW filter on device bond31
[  371.213882][T20245] 8021q: adding VLAN 0 to HW filter on device bond31
[  371.216234][T20245] bond31: (slave wireguard1): The slave device specified does not support setting the MAC address
[  371.222488][T20245] bond31: (slave wireguard1): Error -95 calling set_mac_address
[  371.306339][T20255] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  371.309997][T20254] IPVS: stopping backup sync thread 20255 ...
[  371.329855][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  371.407737][T20265] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  371.422911][T20265] netlink: 'syz.0.3919': attribute type 1 has an invalid length.
[  371.448813][T20265] bond32: (slave bridge17): Enslaving as a backup interface with an up link
[  371.678736][T20276] bridge18: port 1(veth0_to_bond) entered blocking state
[  371.681393][T20276] bridge18: port 1(veth0_to_bond) entered disabled state
[  371.683862][T20276] veth0_to_bond: entered allmulticast mode
[  371.686832][T20276] veth0_to_bond: entered promiscuous mode
[  371.772300][T20283] netlink: 'syz.0.3924': attribute type 1 has an invalid length.
[  371.873657][T20291] netlink: 'syz.2.3926': attribute type 1 has an invalid length.
[  371.899588][T20293] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  371.915713][T20293] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  371.944396][T20296] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  371.949048][T20295] IPVS: stopping backup sync thread 20296 ...
[  372.094924][T20307] lo speed is unknown, defaulting to 1000
[  372.359871][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  372.456524][T20321] lo speed is unknown, defaulting to 1000
[  372.825051][T20332] lo speed is unknown, defaulting to 1000
[  372.969019][T20337] lo speed is unknown, defaulting to 1000
[  373.119401][T20349] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  373.124081][T20348] IPVS: stopping backup sync thread 20349 ...
[  373.228111][T20357] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  373.234090][T20356] IPVS: stopping backup sync thread 20357 ...
[  373.296900][T20360] netlink: 'syz.0.3944': attribute type 2 has an invalid length.
[  373.349446][T20363] netlink: 'syz.0.3945': attribute type 2 has an invalid length.
[  373.409772][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  373.422780][T20367] __nla_validate_parse: 56 callbacks suppressed
[  373.422790][T20367] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3947'.
[  373.547825][T20377] netlink: 'syz.0.3951': attribute type 1 has an invalid length.
[  373.583315][T20377] 8021q: adding VLAN 0 to HW filter on device bond33
[  373.622873][T20388] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3954'.
[  373.760714][T20402] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3957'.
[  373.965656][T20404] lo speed is unknown, defaulting to 1000
[  373.974137][T20415] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3961'.
[  374.034488][T20419] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3961'.
[  374.060888][T20422] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3958'.
[  374.191348][T20424] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3962'.
[  374.449889][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  374.496295][T20434] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3964'.
[  374.506278][T20434] netlink: 'syz.1.3964': attribute type 1 has an invalid length.
[  374.521978][T20434] 8021q: adding VLAN 0 to HW filter on device bond30
[  374.545707][T20434] bond30: (slave gretap5): making interface the new active one
[  374.549362][T20434] bond30: (slave gretap5): Enslaving as an active interface with an up link
[  374.884732][T20453] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3969'.
[  375.165178][T20469] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  375.171189][T20469] netlink: 'syz.2.3975': attribute type 13 has an invalid length.
[  375.390225][T20473] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3976'.
[  375.471253][T20480] netlink: 'syz.1.3978': attribute type 1 has an invalid length.
[  375.480192][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  376.523211][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  376.947516][T20513] mac80211_hwsim hwsim21 syzkaller0: Caught tx_queue_len zero misconfig
[  377.052169][T20524] netlink: 'syz.1.3989': attribute type 1 has an invalid length.
[  377.149386][T20540] sit0: Caught tx_queue_len zero misconfig
[  377.200143][T20544] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  377.203355][T20545] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  377.256979][T20554] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  377.257037][T20551] IPVS: stopping backup sync thread 20554 ...
[  377.264924][T20551] netlink: 'syz.0.3998': attribute type 1 has an invalid length.
[  377.267495][T20551] netlink: 'syz.0.3998': attribute type 2 has an invalid length.
[  377.270916][T20551] netlink: 'syz.0.3998': attribute type 1 has an invalid length.
[  377.337476][T20563] syzkaller1: entered promiscuous mode
[  377.339795][T20563] syzkaller1: entered allmulticast mode
[  377.356042][T20565] 8021q: adding VLAN 0 to HW filter on device bond34
[  377.382182][T20565] macvlan0: entered promiscuous mode
[  377.384424][T20565] macvlan0: entered allmulticast mode
[  377.387673][T20565] bond34: entered promiscuous mode
[  377.390777][T20565] 8021q: adding VLAN 0 to HW filter on device macvlan0
[  377.395467][T20565] bond34: left promiscuous mode
[  377.437659][T20568] lo speed is unknown, defaulting to 1000
[  377.569862][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  377.873992][T20605] netlink: 'syz.2.4014': attribute type 1 has an invalid length.
[  377.983738][T20612] bridge0 (unregistering): left allmulticast mode
[  378.030944][T20616] bridge0: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms)
[  378.256457][T20644] lo speed is unknown, defaulting to 1000
[  378.353388][T20653] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  378.447684][T20662] netlink: 'syz.1.4028': attribute type 12 has an invalid length.
[  378.457962][T20662] __nla_validate_parse: 8 callbacks suppressed
[  378.457977][T20662] netlink: 224 bytes leftover after parsing attributes in process `syz.1.4028'.
[  378.609873][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  378.681507][T20686] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4031'.
[  378.719059][T20679] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4031'.
[  378.737167][T20690] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  378.753504][T20688] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  378.814812][T20695] mac80211_hwsim hwsim4 syzkaller0: entered promiscuous mode
[  378.821698][T20697] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4040'.
[  378.825519][T20695] mac80211_hwsim hwsim4 syzkaller0: entered allmulticast mode
[  378.840879][T20697] vti3: entered promiscuous mode
[  378.892848][T20703] netlink: 'syz.1.4042': attribute type 6 has an invalid length.
[  378.945749][T20703] netlink: 'syz.1.4042': attribute type 12 has an invalid length.
[  378.949153][T20703] netlink: 9472 bytes leftover after parsing attributes in process `syz.1.4042'.
[  378.993198][T20716] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4045'.
[  379.049583][T20722] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4047'.
[  379.255704][T20742] netlink: 'syz.2.4051': attribute type 1 has an invalid length.
[  379.275658][T20742] bond47: entered promiscuous mode
[  379.278024][T20742] 8021q: adding VLAN 0 to HW filter on device bond47
[  379.283446][T20742] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4051'.
[  379.322466][T20742] bond47: (slave bridge18): making interface the new active one
[  379.325725][T20742] bridge18: entered promiscuous mode
[  379.328961][T20742] bond47: (slave bridge18): Enslaving as an active interface with an up link
[  379.350684][T20747] netlink: 'syz.0.4053': attribute type 5 has an invalid length.
[  379.403054][T20752] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4055'.
[  379.415970][T20750] lo speed is unknown, defaulting to 1000
[  379.434344][T20755] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4056'.
[  379.596165][T20761] lo speed is unknown, defaulting to 1000
[  379.639934][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  379.744574][T20767] vlan0: entered promiscuous mode
[  379.755407][T20767] tipc: Enabling of bearer <eth:team0> rejected, failed to enable media
[  380.043218][T20796] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: mode dependency failed, not supported in mode broadcast(3)
[  380.181080][T20815] veth25: entered promiscuous mode
[  380.465799][T20841] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  380.611266][T20851] tipc: Enabled bearer <ib:caif0>, priority 14
[  380.689874][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  380.760559][ T5872] ip6gretap5: left promiscuous mode
[  380.930443][ T7345] block nbd2: Possible stuck request ffff8880201f0000: control (read@0,1024B). Runtime 300 seconds
[  380.934615][ T7345] block nbd2: Possible stuck request ffff8880201f0200: control (read@1024,1024B). Runtime 300 seconds
[  380.938810][ T7345] block nbd2: Possible stuck request ffff8880201f0400: control (read@2048,1024B). Runtime 300 seconds
[  380.943087][  T128] block nbd1: Possible stuck request ffff8880201d8000: control (read@0,1024B). Runtime 300 seconds
[  380.947148][  T128] block nbd1: Possible stuck request ffff8880201d8200: control (read@1024,1024B). Runtime 300 seconds
[  380.951559][ T7345] block nbd2: Possible stuck request ffff8880201f0600: control (read@3072,1024B). Runtime 300 seconds
[  380.956224][  T128] block nbd1: Possible stuck request ffff8880201d8400: control (read@2048,1024B). Runtime 300 seconds
[  380.961583][  T128] block nbd1: Possible stuck request ffff8880201d8600: control (read@3072,1024B). Runtime 300 seconds
[  381.351270][T20889] 
[  381.352322][T20889] ======================================================
[  381.355164][T20889] WARNING: possible circular locking dependency detected
[  381.357846][T20889] syzkaller #0 Not tainted
[  381.359725][T20889] ------------------------------------------------------
[  381.362803][T20889] syz.2.4083/20889 is trying to acquire lock:
[  381.364794][T20889] ffff88810966fba8 (&q->elevator_lock){+.+.}-{4:4}, at: elevator_change+0x19b/0x450
[  381.368150][T20889] 
[  381.368150][T20889] but task is already holding lock:
[  381.370815][T20889] ffff88810966f668 (&q->q_usage_counter(io)#52){++++}-{0:0}, at: elevator_change+0x180/0x450
[  381.374462][T20889] 
[  381.374462][T20889] which lock already depends on the new lock.
[  381.374462][T20889] 
[  381.377999][T20889] 
[  381.377999][T20889] the existing dependency chain (in reverse order) is:
[  381.381397][T20889] 
[  381.381397][T20889] -> #6 (&q->q_usage_counter(io)#52){++++}-{0:0}:
[  381.384238][T20889]        lock_acquire+0x120/0x360
[  381.385924][T20889]        blk_alloc_queue+0x538/0x620
[  381.387665][T20889]        __blk_mq_alloc_disk+0x15c/0x340
[  381.389686][T20889]        nbd_dev_add+0x46c/0xae0
[  381.391460][T20889]        nbd_init+0x168/0x1f0
[  381.393264][T20889]        do_one_initcall+0x236/0x820
[  381.395375][T20889]        do_initcall_level+0x104/0x190
[  381.397353][T20889]        do_initcalls+0x59/0xa0
[  381.399326][T20889]        kernel_init_freeable+0x334/0x4b0
[  381.401285][T20889]        kernel_init+0x1d/0x1d0
[  381.403021][T20889]        ret_from_fork+0x439/0x7d0
[  381.404774][T20889]        ret_from_fork_asm+0x1a/0x30
[  381.406518][T20889] 
[  381.406518][T20889] -> #5 (fs_reclaim){+.+.}-{0:0}:
[  381.409145][T20889]        lock_acquire+0x120/0x360
[  381.411129][T20889]        fs_reclaim_acquire+0x72/0x100
[  381.413133][T20889]        __kmalloc_cache_noprof+0x41/0x3d0
[  381.415155][T20889]        rxrpc_alloc_peer+0x7d/0x330
[  381.416846][T20889]        rxrpc_lookup_peer+0x3fd/0xa60
[  381.418591][T20889]        rxrpc_do_sendmsg+0xb0a/0x1220
[  381.420285][T20889]        __sock_sendmsg+0x21c/0x270
[  381.421995][T20889]        ____sys_sendmsg+0x505/0x830
[  381.424060][T20889]        ___sys_sendmsg+0x21f/0x2a0
[  381.425906][T20889]        __x64_sys_sendmsg+0x19b/0x260
[  381.428053][T20889]        do_syscall_64+0xfa/0x3b0
[  381.430129][T20889]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  381.432635][T20889] 
[  381.432635][T20889] -> #4 (sk_lock-AF_RXRPC){+.+.}-{0:0}:
[  381.435716][T20889]        lock_acquire+0x120/0x360
[  381.437882][T20889]        lock_sock_nested+0x48/0x100
[  381.440133][T20889]        rxrpc_shutdown+0xa6/0x1c0
[  381.442299][T20889]        nbd_mark_nsock_dead+0x2e9/0x560
[  381.444637][T20889]        recv_work+0x2138/0x24f0
[  381.446716][T20889]        process_scheduled_works+0xae1/0x17b0
[  381.449224][T20889]        worker_thread+0x8a0/0xda0
[  381.451399][T20889]        kthread+0x711/0x8a0
[  381.453386][T20889]        ret_from_fork+0x439/0x7d0
[  381.455612][T20889]        ret_from_fork_asm+0x1a/0x30
[  381.457844][T20889] 
[  381.457844][T20889] -> #3 (&nsock->tx_lock){+.+.}-{4:4}:
[  381.461056][T20889]        lock_acquire+0x120/0x360
[  381.463234][T20889]        __mutex_lock+0x187/0x1350
[  381.465434][T20889]        nbd_queue_rq+0x257/0xf10
[  381.467512][T20889]        blk_mq_dispatch_rq_list+0x4c0/0x1900
[  381.470063][T20889]        __blk_mq_sched_dispatch_requests+0xda4/0x1570
[  381.472969][T20889]        blk_mq_sched_dispatch_requests+0xd7/0x190
[  381.475749][T20889]        blk_mq_run_hw_queue+0x348/0x4f0
[  381.478132][T20889]        blk_mq_dispatch_list+0xd0c/0xe00
[  381.480565][T20889]        blk_mq_flush_plug_list+0x469/0x550
[  381.483060][T20889]        __blk_flush_plug+0x3d3/0x4b0
[  381.485315][T20889]        __submit_bio+0x2d3/0x5a0
[  381.487448][T20889]        submit_bio_noacct_nocheck+0x4ab/0xb50
[  381.489831][T20889]        block_read_full_folio+0x599/0x830
[  381.492068][T20889]        filemap_read_folio+0x117/0x380
[  381.494384][T20889]        do_read_cache_folio+0x350/0x590
[  381.496705][T20889]        read_part_sector+0xb6/0x2b0
[  381.498462][T20889]        adfspart_check_ICS+0xa4/0xa50
[  381.500196][T20889]        bdev_disk_changed+0x75f/0x14b0
[  381.501987][T20889]        blkdev_get_whole+0x380/0x510
[  381.503964][T20889]        bdev_open+0x31e/0xd30
[  381.505828][T20889]        blkdev_open+0x457/0x600
[  381.507787][T20889]        do_dentry_open+0x953/0x13f0
[  381.509791][T20889]        vfs_open+0x3b/0x340
[  381.511516][T20889]        path_openat+0x2ee5/0x3830
[  381.513476][T20889]        do_filp_open+0x1fa/0x410
[  381.515132][T20889]        do_sys_openat2+0x121/0x1c0
[  381.517275][T20889]        __x64_sys_openat+0x138/0x170
[  381.519499][T20889]        do_syscall_64+0xfa/0x3b0
[  381.521668][T20889]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  381.524353][T20889] 
[  381.524353][T20889] -> #2 (&cmd->lock){+.+.}-{4:4}:
[  381.527058][T20889]        lock_acquire+0x120/0x360
[  381.528712][T20889]        __mutex_lock+0x187/0x1350
[  381.530670][T20889]        nbd_queue_rq+0xc8/0xf10
[  381.532666][T20889]        blk_mq_dispatch_rq_list+0x4c0/0x1900
[  381.535019][T20889]        __blk_mq_sched_dispatch_requests+0xda4/0x1570
[  381.537478][T20889]        blk_mq_sched_dispatch_requests+0xd7/0x190
[  381.539568][T20889]        blk_mq_run_hw_queue+0x348/0x4f0
[  381.541492][T20889]        blk_mq_dispatch_list+0xd0c/0xe00
[  381.543831][T20889]        blk_mq_flush_plug_list+0x469/0x550
[  381.546012][T20889]        __blk_flush_plug+0x3d3/0x4b0
[  381.547807][T20889]        __submit_bio+0x2d3/0x5a0
[  381.549427][T20889]        submit_bio_noacct_nocheck+0x4ab/0xb50
[  381.551476][T20889]        block_read_full_folio+0x599/0x830
[  381.553405][T20889]        filemap_read_folio+0x117/0x380
[  381.555699][T20889]        do_read_cache_folio+0x350/0x590
[  381.558102][T20889]        read_part_sector+0xb6/0x2b0
[  381.560174][T20889]        adfspart_check_ICS+0xa4/0xa50
[  381.562392][T20889]        bdev_disk_changed+0x75f/0x14b0
[  381.564164][T20889]        blkdev_get_whole+0x380/0x510
[  381.565864][T20889]        bdev_open+0x31e/0xd30
[  381.567729][T20889]        blkdev_open+0x457/0x600
[  381.569761][T20889]        do_dentry_open+0x953/0x13f0
[  381.572016][T20889]        vfs_open+0x3b/0x340
[  381.573918][T20889]        path_openat+0x2ee5/0x3830
[  381.575848][T20889]        do_filp_open+0x1fa/0x410
[  381.577923][T20889]        do_sys_openat2+0x121/0x1c0
[  381.579966][T20889]        __x64_sys_openat+0x138/0x170
[  381.582055][T20889]        do_syscall_64+0xfa/0x3b0
[  381.584151][T20889]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  381.586257][T20889] 
[  381.586257][T20889] -> #1 (set->srcu){.+.+}-{0:0}:
[  381.588863][T20889]        lock_sync+0xba/0x160
[  381.590348][T20889]        __synchronize_srcu+0x96/0x3a0
[  381.592021][T20889]        elevator_switch+0x12b/0x640
[  381.594204][T20889]        elevator_change+0x2d4/0x450
[  381.595964][T20889]        elevator_set_default+0x186/0x260
[  381.597801][T20889]        blk_register_queue+0x34e/0x3f0
[  381.599662][T20889]        __add_disk+0x677/0xd50
[  381.601282][T20889]        add_disk_fwnode+0xfc/0x480
[  381.603159][T20889]        nbd_dev_add+0x717/0xae0
[  381.605230][T20889]        nbd_init+0x168/0x1f0
[  381.607247][T20889]        do_one_initcall+0x236/0x820
[  381.609548][T20889]        do_initcall_level+0x104/0x190
[  381.611853][T20889]        do_initcalls+0x59/0xa0
[  381.613907][T20889]        kernel_init_freeable+0x334/0x4b0
[  381.616254][T20889]        kernel_init+0x1d/0x1d0
[  381.618326][T20889]        ret_from_fork+0x439/0x7d0
[  381.620487][T20889]        ret_from_fork_asm+0x1a/0x30
[  381.622764][T20889] 
[  381.622764][T20889] -> #0 (&q->elevator_lock){+.+.}-{4:4}:
[  381.626069][T20889]        validate_chain+0xb9b/0x2140
[  381.628322][T20889]        __lock_acquire+0xab9/0xd20
[  381.630433][T20889]        lock_acquire+0x120/0x360
[  381.632387][T20889]        __mutex_lock+0x187/0x1350
[  381.634099][T20889]        elevator_change+0x19b/0x450
[  381.636046][T20889]        elevator_set_none+0x42/0xb0
[  381.637773][T20889]        blk_mq_update_nr_hw_queues+0x598/0x1aa0
[  381.640162][T20889]        nbd_start_device+0x17f/0xb10
[  381.642067][T20889]        nbd_genl_connect+0x135b/0x18f0
[  381.644305][T20889]        genl_family_rcv_msg_doit+0x215/0x300
[  381.646769][T20889]        genl_rcv_msg+0x60e/0x790
[  381.648812][T20889]        netlink_rcv_skb+0x208/0x470
[  381.650962][T20889]        genl_rcv+0x28/0x40
[  381.652812][T20889]        netlink_unicast+0x82f/0x9e0
[  381.654964][T20889]        netlink_sendmsg+0x805/0xb30
[  381.657070][T20889]        __sock_sendmsg+0x21c/0x270
[  381.659032][T20889]        ____sys_sendmsg+0x505/0x830
[  381.661043][T20889]        ___sys_sendmsg+0x21f/0x2a0
[  381.663118][T20889]        __x64_sys_sendmsg+0x19b/0x260
[  381.665247][T20889]        do_syscall_64+0xfa/0x3b0
[  381.667093][T20889]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  381.669463][T20889] 
[  381.669463][T20889] other info that might help us debug this:
[  381.669463][T20889] 
[  381.673273][T20889] Chain exists of:
[  381.673273][T20889]   &q->elevator_lock --> fs_reclaim --> &q->q_usage_counter(io)#52
[  381.673273][T20889] 
[  381.678595][T20889]  Possible unsafe locking scenario:
[  381.678595][T20889] 
[  381.681224][T20889]        CPU0                    CPU1
[  381.683343][T20889]        ----                    ----
[  381.685336][T20889]   lock(&q->q_usage_counter(io)#52);
[  381.687186][T20889]                                lock(fs_reclaim);
[  381.689466][T20889]                                lock(&q->q_usage_counter(io)#52);
[  381.692450][T20889]   lock(&q->elevator_lock);
[  381.694100][T20889] 
[  381.694100][T20889]  *** DEADLOCK ***
[  381.694100][T20889] 
[  381.696999][T20889] 6 locks held by syz.2.4083/20889:
[  381.698824][T20889]  #0: ffffffff8f59f5b0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  381.701696][T20889]  #1: ffffffff8f59f3c8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790
[  381.704710][T20889]  #2: ffff888020113988 (&set->update_nr_hwq_lock){++++}-{4:4}, at: blk_mq_update_nr_hw_queues+0xa7/0x1aa0
[  381.708304][T20889]  #3: ffff8880201138d8 (&set->tag_list_lock){+.+.}-{4:4}, at: blk_mq_update_nr_hw_queues+0xba/0x1aa0
[  381.711753][T20889]  #4: ffff88810966f668 (&q->q_usage_counter(io)#52){++++}-{0:0}, at: elevator_change+0x180/0x450
[  381.715146][T20889]  #5: ffff88810966f6a0 (&q->q_usage_counter(queue)#36){+.+.}-{0:0}, at: elevator_change+0x180/0x450
[  381.719393][T20889] 
[  381.719393][T20889] stack backtrace:
[  381.721806][T20889] CPU: 0 UID: 0 PID: 20889 Comm: syz.2.4083 Not tainted syzkaller #0 PREEMPT(full) 
[  381.721822][T20889] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  381.721831][T20889] Call Trace:
[  381.721837][T20889]  <TASK>
[  381.721844][T20889]  dump_stack_lvl+0x189/0x250
[  381.721865][T20889]  ? __pfx_dump_stack_lvl+0x10/0x10
[  381.721881][T20889]  ? __pfx__printk+0x10/0x10
[  381.721900][T20889]  ? print_lock_name+0xde/0x100
[  381.721918][T20889]  print_circular_bug+0x2ee/0x310
[  381.721935][T20889]  check_noncircular+0x134/0x160
[  381.721952][T20889]  validate_chain+0xb9b/0x2140
[  381.721972][T20889]  __lock_acquire+0xab9/0xd20
[  381.721992][T20889]  ? elevator_change+0x19b/0x450
[  381.722003][T20889]  lock_acquire+0x120/0x360
[  381.722019][T20889]  ? elevator_change+0x19b/0x450
[  381.722034][T20889]  __mutex_lock+0x187/0x1350
[  381.722049][T20889]  ? elevator_change+0x19b/0x450
[  381.722061][T20889]  ? xa_find_after+0xae/0x430
[  381.722077][T20889]  ? xa_find_after+0x402/0x430
[  381.722090][T20889]  ? elevator_change+0x19b/0x450
[  381.722100][T20889]  ? xa_find_after+0xae/0x430
[  381.722114][T20889]  ? __pfx___mutex_lock+0x10/0x10
[  381.722125][T20889]  ? __pfx_blk_mq_cancel_work_sync+0x10/0x10
[  381.722135][T20889]  elevator_change+0x19b/0x450
[  381.722141][T20889]  ? elevator_set_none+0x37/0xb0
[  381.722149][T20889]  elevator_set_none+0x42/0xb0
[  381.722156][T20889]  blk_mq_update_nr_hw_queues+0x598/0x1aa0
[  381.722167][T20889]  ? __pfx_blk_mq_update_nr_hw_queues+0x10/0x10
[  381.722179][T20889]  ? sysfs_add_file_mode_ns+0x259/0x300
[  381.722192][T20889]  nbd_start_device+0x17f/0xb10
[  381.722201][T20889]  ? device_create_file+0xf4/0x1c0
[  381.722211][T20889]  nbd_genl_connect+0x135b/0x18f0
[  381.722219][T20889]  ? __pfx_nbd_genl_connect+0x10/0x10
[  381.722228][T20889]  ? __nla_parse+0x40/0x60
[  381.722236][T20889]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  381.722249][T20889]  genl_family_rcv_msg_doit+0x215/0x300
[  381.722260][T20889]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  381.722272][T20889]  ? stack_trace_save+0x9c/0xe0
[  381.722282][T20889]  genl_rcv_msg+0x60e/0x790
[  381.722298][T20889]  ? __pfx_genl_rcv_msg+0x10/0x10
[  381.722307][T20889]  ? __pfx_nbd_genl_connect+0x10/0x10
[  381.722316][T20889]  netlink_rcv_skb+0x208/0x470
[  381.722323][T20889]  ? __lock_acquire+0xab9/0xd20
[  381.722334][T20889]  ? __pfx_genl_rcv_msg+0x10/0x10
[  381.722344][T20889]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  381.722355][T20889]  ? down_read+0x1ad/0x2e0
[  381.722363][T20889]  genl_rcv+0x28/0x40
[  381.722373][T20889]  netlink_unicast+0x82f/0x9e0
[  381.722385][T20889]  ? __pfx_netlink_unicast+0x10/0x10
[  381.722397][T20889]  ? netlink_sendmsg+0x642/0xb30
[  381.722406][T20889]  netlink_sendmsg+0x805/0xb30
[  381.722416][T20889]  ? __pfx_netlink_sendmsg+0x10/0x10
[  381.722424][T20889]  ? __lock_acquire+0xab9/0xd20
[  381.722434][T20889]  ? aa_sock_msg_perm+0xf1/0x1d0
[  381.722441][T20889]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  381.722449][T20889]  ? __pfx_netlink_sendmsg+0x10/0x10
[  381.722457][T20889]  __sock_sendmsg+0x21c/0x270
[  381.722469][T20889]  ____sys_sendmsg+0x505/0x830
[  381.722478][T20889]  ? __pfx_____sys_sendmsg+0x10/0x10
[  381.722488][T20889]  ? import_iovec+0x74/0xa0
[  381.722498][T20889]  ___sys_sendmsg+0x21f/0x2a0
[  381.722507][T20889]  ? __pfx____sys_sendmsg+0x10/0x10
[  381.722548][T20889]  ? __fget_files+0x2a/0x420
[  381.722560][T20889]  ? __fget_files+0x3a0/0x420
[  381.722569][T20889]  __x64_sys_sendmsg+0x19b/0x260
[  381.722579][T20889]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  381.722591][T20889]  ? do_syscall_64+0xbe/0x3b0
[  381.722600][T20889]  do_syscall_64+0xfa/0x3b0
[  381.722608][T20889]  ? lockdep_hardirqs_on+0x9c/0x150
[  381.722616][T20889]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  381.722623][T20889]  ? exc_page_fault+0x9f/0xf0
[  381.722631][T20889]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  381.722639][T20889] RIP: 0033:0x7faf4bb8eba9
[  381.722648][T20889] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  381.722656][T20889] RSP: 002b:00007faf4c947038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  381.722664][T20889] RAX: ffffffffffffffda RBX: 00007faf4bdd5fa0 RCX: 00007faf4bb8eba9
[  381.722671][T20889] RDX: 0000000004040840 RSI: 00002000000011c0 RDI: 0000000000000008
[  381.722676][T20889] RBP: 00007faf4bc11e19 R08: 0000000000000000 R09: 0000000000000000
[  381.722681][T20889] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  381.722685][T20889] R13: 00007faf4bdd6038 R14: 00007faf4bdd5fa0 R15: 00007ffff2b50c08
[  381.722693][T20889]  </TASK>
[  381.888674][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  382.001421][   T57] block nbd3: Receive control failed (result -32)
[  382.002371][T20897] block nbd3: Receive control failed (result -32)
[  382.004182][ T6922] block nbd3: Receive control failed (result -32)
[  382.007005][ T6934] block nbd3: Receive control failed (result -32)
[  382.919872][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  383.970001][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  384.999967][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  386.050041][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  387.089843][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  388.120307][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  389.159862][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  390.210052][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  391.249829][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available

VM DIAGNOSIS:
17:54:41  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000038 RBX=0000000000000038 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000003d4e RDI=0000000000003d4f RBP=00000000000003f8 RSP=ffffc90003c1e370
R8 =ffff88801f7d0237 R9 =1ffff11003efa046 R10=dffffc0000000000 R11=ffffffff854f91c0
R12=dffffc0000000000 R13=ffffffff99b008d3 R14=ffffffff99df5420 R15=0000000000000000
RIP=ffffffff854f923c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007faf4c9476c0 ffffffff 00c00000
GS =0000 ffff8880b8615000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f20d33056c0 CR3=00000000422a4000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 00007faf4bc12e53
XMM06=0000000000000000 00007faf4bc12e4d XMM07=0000000000000000 00007faf4bc12e61
XMM08=0000000000000000 00007faf4bc12ee7 XMM09=0000000000000000 00007faf4bc12fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=ffffffff81b4601b RBX=1ffff11009608341 RCX=ffff888020890000 RDX=0000000000000000
RSI=0000000000000001 RDI=0000000000000000 RBP=ffffc900031df6c0 RSP=ffffc900031df540
R8 =ffffffff8fa3a637 R9 =1ffffffff1f474c6 R10=dffffc0000000000 R11=fffffbfff1f474c7
R12=ffff88804b041a08 R13=dffffc0000000000 R14=ffff88813663b1c0 R15=0000000000000000
RIP=ffffffff81b46003 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00005555747a8500 ffffffff 00c00000
GS =0000 ffff8881a3c15000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00005555747c35c8 CR3=00000000271bc000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0100040000000000 0000020000000000
XMM02=00007f931ffa7498 00007f931ffa7470 XMM03=00007f931ffa74a8 00007f931ffa74a0
XMM04=00007f9320b0d100 00007f931ffa7460 XMM05=00007f931ffa7478 00007f931ffa74c0
XMM06=00007f931ffa74b8 00007f931ffa74b0 XMM07=00007f931ffa74a8 00007f931ffa74a0
XMM08=0000000000000000 00007f931fe12ee7 XMM09=0000000000000000 00007f931fe12fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
