last executing test programs:

1.679298572s ago: executing program 2 (id=2916):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x40)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff)
recvmmsg(r0, &(0x7f0000003800)=[{{&(0x7f00000006c0)=@caif=@rfm, 0x80, &(0x7f0000000880)=[{&(0x7f0000000780)=""/33, 0x21}], 0x1}}, {{&(0x7f00000008c0)=@l2tp={0x2, 0x0, @multicast1}, 0x80, &(0x7f0000000e80)=[{&(0x7f0000000a00)=""/189, 0xbd}, {&(0x7f0000000ac0)=""/164, 0xa4}, {&(0x7f0000000b80)=""/82, 0x52}, {&(0x7f0000000c00)=""/181, 0xb5}, {&(0x7f0000000cc0)=""/245, 0xf5}, {&(0x7f0000000dc0)=""/191, 0xbf}], 0x6}, 0xfffffff9}, {{&(0x7f0000000f00)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f00000035c0)=[{&(0x7f0000001fc0)=""/134, 0x86}, {&(0x7f0000002080)=""/236, 0xec}, {&(0x7f0000002180)=""/176, 0xb0}, {&(0x7f0000002240)=""/4096, 0x1000}, {&(0x7f0000003240)=""/220, 0xdc}, {&(0x7f0000003340)=""/7, 0x7}, {&(0x7f0000003380)=""/91, 0x5b}, {&(0x7f0000003400)=""/43, 0x2b}, {&(0x7f0000003440)=""/201, 0xc9}, {&(0x7f0000003540)=""/124, 0x7c}], 0xa, &(0x7f0000003680)=""/65, 0x41}, 0xe}], 0x3, 0x40000040, &(0x7f00000038c0)={0x77359400})
r3 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="1c0000005a00010000000000fbdbdf250a00000008000100", @ANYRES32, @ANYBLOB="dce4c882414d457ebb1e752dc8f4212a6968f551624942f6d0aa20fb8b6bd1d42d58b2536cb0561031c2183d5fb7e67646e73160aa72495a90fb44da3d4767053b28f5b35f5aa62b066cb0e60ebea8cddb3c6d01b1d6ecc0d52795e6a6"], 0x1c}}, 0x4)
r4 = socket$inet6_sctp(0xa, 0x5, 0x84)
close(0x3)
r5 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r5, 0x84, 0x6b, &(0x7f0000000100)=[@in6={0xa, 0x4e23, 0x35f, @private1, 0xfffffffe}], 0x1c)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000480)={0x0, 0x10, &(0x7f0000000400)=[@in={0x2, 0x4e22, @rand_addr=0x64010101}]}, &(0x7f00000004c0)=0x10)
setsockopt(r5, 0x84, 0x7f, &(0x7f0000000040)="020000000980ffff", 0x8)
shutdown(r4, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={<r6=>0x0, 0x1c, &(0x7f0000000140)=[@in6={0xa, 0x4e20, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x3}]}, &(0x7f0000000440)=0x10)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r4, 0x84, 0x66, &(0x7f0000000080)={r6, 0x2}, &(0x7f0000000100)=0x8)
ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f0000003740)={{0x2, 0x4e20, @private=0xa010102}, {0x6, @random="c54ffe6664c0"}, 0x0, {0x2, 0x4e23, @local}, 'bond_slave_1\x00'})
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={<r7=>0xffffffffffffffff})
sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000001c0)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100ffffffff0000000001000000100007800c00018008000100", @ANYRES32=r7, @ANYBLOB="0c0005006c010000000000000c000200ff7f000000000000400007800c00018008000100", @ANYRES32=r7, @ANYBLOB="0c00018008000100", @ANYRES32=r7], 0x7c}}, 0x20000000)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000300000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x8084)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$BTRFS_IOC_START_SYNC(r7, 0x80089418, &(0x7f0000000340))
r8 = socket(0x10, 0x803, 0x0)
sendto(r8, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r8, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f, 0x4000000}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400})
sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000003a0096eef56015fc0701002000000000e6ffff0a00000008"], 0x1c}, 0x1, 0x0, 0x0, 0xd1}, 0x10)

829.574147ms ago: executing program 2 (id=2930):
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)={0x34, 0x40, 0x1, 0x7fffc, 0x4, {0x1}, [@nested={0x4, 0x48}, @nested={0x14, 0x1, 0x0, 0x1, [@nested={0x10, 0x10, 0x0, 0x1, [@typed={0x6, 0x9, 0x0, 0x0, @str=':\x00'}, @nested={0x4, 0x10}]}]}, @typed={0x8, 0x2, 0x0, 0x0, @fd=r1}]}, 0x34}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000500), r2)
ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000580)=<r4=>0x0)
sendmsg$NFC_CMD_SE_IO(r2, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a00)={0x2c, r3, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r4}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0x1}, @NFC_ATTR_SE_APDU={0x5, 0x19, "d8"}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000100), r5)
sendmsg$NLBL_CIPSOV4_C_REMOVE(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x1c, r6, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4d1e67d8aff17e9a}, 0x4000000)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)=@newlink={0x40, 0x10, 0x403, 0x2, 0x2, {0x0, 0x0, 0x4, 0x0, 0x4300, 0x1000000}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GTP_FD0={0x8, 0x1, @udp6}, @IFLA_GTP_PDP_HASHSIZE={0x8, 0x3, 0xf}]}}}]}, 0x40}, 0x1, 0x1000000, 0x0, 0x20000044}, 0x24028044)
r7 = socket$inet6_sctp(0xa, 0x5, 0x84)
r8 = socket$rxrpc(0x21, 0x2, 0xa)
r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r10 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0x8, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000d0000000000000000000000850000000500000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000000)='syzkaller\x00', 0xb, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r10, 0x0, 0xe, 0x0, &(0x7f00000001c0)="581f9239658ea95ed371ea3dd361", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50)
ioctl$int_in(r8, 0x5452, &(0x7f0000000040)=0x400000000000009)
setsockopt$sock_int(r8, 0x1, 0x7, &(0x7f0000000240), 0x4)
r11 = socket$inet_sctp(0x2, 0x1, 0x84)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001300)=@newtfilter={0x24, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, 0x0, {0x5, 0x4}, {}, {0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x0)
getsockopt$inet_sctp_SCTP_MAX_BURST(r11, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={<r12=>0x0}, &(0x7f0000000280)=0x8)
r13 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r14=>0x0})
syz_emit_ethernet(0x2a, &(0x7f0000000000)={@link_local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x1, 0x0, @private, @broadcast}, @address_reply={0x2a}}}}}, 0x0)
sendmsg$nl_route_sched(r13, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x24, 0x24, 0x3fe3aa0262d8c583, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r14, {0x0, 0xf}, {}, {0x6, 0x6}}}, 0x24}, 0x1, 0x0, 0x0, 0x40022}, 0x2000400c)
getsockopt$CAN_RAW_RECV_OWN_MSGS(r13, 0x65, 0x4, &(0x7f00000000c0), &(0x7f0000000180)=0x4)
setsockopt$inet_sctp6_SCTP_AUTH_KEY(r7, 0x84, 0x17, &(0x7f0000000080)={r12, 0x2, 0x1, "fa"}, 0x9)

740.259639ms ago: executing program 2 (id=2932):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r0, 0x0)
setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2b, &(0x7f0000000000)={0x7, {{0x2, 0x4e23, @remote}}, {{0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x108)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000001c0)={<r1=>0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10)
setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000300)={r1, 0x7f, 0x2, '|0'}, 0xa)

658.134708ms ago: executing program 2 (id=2934):
r0 = socket$nl_crypto(0x10, 0x3, 0x15)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000280))
socket$packet(0x11, 0x3, 0x300) (async)
r1 = socket$packet(0x11, 0x3, 0x300)
getsockopt$packet_int(r1, 0x107, 0x12, 0x0, &(0x7f0000000240)) (async)
getsockopt$packet_int(r1, 0x107, 0x12, 0x0, &(0x7f0000000240))
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0x23}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0x23}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$netlink(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000140)={0x114, 0x10, 0x50b, 0x0, 0x0, "", [@nested={0x101, 0xf6, 0x0, 0x1, [@generic="eccea46115feab350c8afe46bed9c2854e79cff03797acb8e06c56d011954ed3dbb0b1adbaf03b2832890c83e5de9279942993195a4d1590e086cebd9ee4536099d7d9a52ed90956d4ebe303c5d990b030baafe79161cdd0fdcf34fae009c31074cb3dd229c203275e620f2ae1971e87b757a2e007b2652c7608e9d561577aec9c", @nested={0x2d, 0x13b, 0x0, 0x1, [@nested={0x4, 0xf1}, @nested={0x4, 0xae}, @generic="5aef6167e18c18332091bea0cbbe30fe8f5e7e8c178439edd9", @typed={0x8, 0x156, 0x0, 0x0, @u32}]}, @nested={0x4a, 0xed, 0x0, 0x1, [@typed={0x4, 0xe9}, @typed={0x8, 0x43, 0x0, 0x0, @uid}, @generic="1ce469bb6cb001295fe3e03e2176bb38d8554bc5030d1cc1375cb66a4a0c560ed3e3ae80e5dd630d9ffda734674f57a88bc3e8c25da87701139f"]}]}]}, 0x114}], 0x1, 0x0, 0x0, 0x4000040}, 0x0)
r2 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=0xffffffffffffffff, 0x4)
r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000040)={r2}, 0x8)
sendmsg$AUDIT_SIGNAL_INFO(r3, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x10, 0x3f2, 0x10, 0x70bd2d, 0x25dfdbfd, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x80}, 0x810)

549.765363ms ago: executing program 0 (id=2937):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840)
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff})
readv(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/243, 0xfffffdef}], 0x1) (async)
readv(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/243, 0xfffffdef}], 0x1)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) (async)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r2, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0x10000000, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) (async)
connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0x10000000, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r3, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x20800, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'veth1_to_hsr\x00', 0x7101})
socket(0x400000000010, 0x3, 0x0) (async)
r5 = socket(0x400000000010, 0x3, 0x0)
r6 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x70, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0xf, 0xf}, {}, {0x7}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x40, 0x2, [@TCA_CGROUP_EMATCHES={0x3c, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x2c, 0x1, 0x0, 0x0, {{0x800, 0x7, 0x1}, {{0xfff2, 0x0, 0x1}, {0x3, 0x1, 0x1}}}}, @TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0xe85, 0x1, 0xc}, {0x4, 0x80000000, 0x3, 0x1, 0xf, 0x1}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x8}}]}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x10}, 0x0)
socket$nl_route(0x10, 0x3, 0x0) (async)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001dc0)=@ipv6_newrule={0x30, 0x1a, 0x1, 0x0, 0x0, {0x81}, [@FRA_SRC={0x14, 0x2, @empty}]}, 0x30}, 0x1, 0x0, 0x0, 0x8d0}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800e80010000d0428bd7000fcdbff2500008000", @ANYRES32, @ANYBLOB="1000000000000000280012800b000100627269646765000018000280050019"], 0x48}}, 0x4084)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) (async)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840)
sendmmsg(0xffffffffffffffff, &(0x7f0000000000), 0x4000000000001f2, 0x0)

548.295696ms ago: executing program 2 (id=2938):
r0 = socket$inet6(0xa, 0x1, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000600)={&(0x7f0000000580)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x3c, 0x3c, 0x2, [@func_proto={0x0, 0x0, 0x0, 0xd, 0x3}, @volatile={0x1, 0x0, 0x0, 0x9, 0x5}, @const={0x0, 0x0, 0x0, 0xa, 0x2}, @restrict, @union={0x0, 0x0, 0x0, 0x2, 0x0, 0x3}]}}, 0x0, 0x56}, 0x28)
r1 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_int(r1, 0x29, 0x4e, &(0x7f0000000000)=0x1, 0x4)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x9, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8000}, 0x1c)
listen(r1, 0x5)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f00000002c0)={&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000000080)=""/19, 0x13, 0x1, &(0x7f00000001c0)=""/195, 0xc3}, &(0x7f0000000300)=0x40)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000f40)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffaa, 0x0, 0xffffffffffffffff, 0x48}, 0x48)
setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x20800001, 0x4)
r2 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10)
getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000340)="89e1a58d76f1aa54573365871721de65298af9b3b6747d0f46446acc2927f0ad30a72e2659476846197e63301d9e6176a22b4972d0ba65fad97a9b795797a6106cfb5d7bbf43e672d573d6319e802e4af172c1cdcd15194c8d7a3fe416b73e665b312516b30e1f6a33c773b2df5fed3d8252a33f2fdb", 0x76)
setsockopt$inet6_int(r0, 0x29, 0x4e, &(0x7f0000000000)=0x1, 0x4)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0xce22, 0x9, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8003}, 0x1c)
listen(r0, 0x5)

538.846181ms ago: executing program 2 (id=2939):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001640)={0x3, 0x6, &(0x7f00000004c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0x94}, [@map_val={0x18, 0x7, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x4}, @call={0x85, 0x0, 0x0, 0x48}]}, &(0x7f0000000040)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) (async)
syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff)
mmap(&(0x7f0000196000/0x4000)=nil, 0x4000, 0xffffffffefffffff, 0x8032, 0xffffffffffffffff, 0x0) (async)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x52) (async)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d05c164a534308", 0x10) (async)
r1 = accept4(r0, 0x0, 0x0, 0x0)
recvmmsg(r1, &(0x7f0000004c00)=[{{0x0, 0x0, &(0x7f0000000240)}, 0x2ca998c3}], 0x4000032, 0x40000021, 0x0)
recvmsg$can_raw(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000340)=""/197, 0xc5}], 0x1}, 0x1) (async)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="5c000000100001002abd7000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="4fb00200305b0180140003006e657464657673696d30000000000000200016801c00018018000c8014000100000000a8b6"], 0x5c}, 0x1, 0x0, 0x0, 0xc1}, 0x0) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), r1) (async)
r3 = socket$kcm(0xa, 0x2, 0x0) (async)
r4 = socket(0x2, 0x80805, 0x0) (async)
r5 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x64010101, 0x4e22, 0x3, 'lblcr\x00', 0x1, 0x80005, 0x6f}, 0x2c) (async)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000001c0)=@bpf_lsm={0x4, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="660a0000060000006111dedc8400000000009500"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x29}, 0x94)
sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000070a01"], 0x14}}, 0x0) (async)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x48241, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r7 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async, rerun: 64)
write$tun(r6, &(0x7f0000000040)=ANY=[@ANYBLOB="000008060000"], 0xfdef) (rerun: 64)
setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f0000000000)={{0x84, @remote, 0x4e24, 0x3, 'lc\x00', 0x0, 0x80000000, 0x76}, {@remote, 0x4e20, 0x3, 0xcd}}, 0x44) (async)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async, rerun: 64)
sendmsg$NFT_BATCH(r8, 0x0, 0x0) (async, rerun: 64)
r9 = accept$alg(r4, 0x0, 0x0)
ioctl$sock_SIOCBRDELBR(r9, 0x89a1, &(0x7f00000001c0)='ip6tnl0\x00') (async, rerun: 64)
sendmsg$sock(r3, &(0x7f00000000c0)={&(0x7f0000000580)=@in6={0x2, 0x4e21, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) (rerun: 64)

460.293942ms ago: executing program 1 (id=2940):
socket$inet_icmp_raw(0x2, 0x3, 0x1) (async)
unshare(0x2c060000) (async)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async)
socket$nl_route(0x10, 0x3, 0x0)
close(0x4) (async)
syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/mnt\x00') (async)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000000)=ANY=[@ANYBLOB="200000002e00010026bdf000fcdbdf2504"], 0x20}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) (async)
ioctl$F2FS_IOC_FLUSH_DEVICE(r0, 0x4008f50a, &(0x7f0000000180)={0x3, 0x200})
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) (async)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
r3 = socket$packet(0x11, 0x3, 0x300) (async)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xa, &(0x7f0000000200)=@raw=[@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffff364}}, @exit], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000140)=r4, 0x4) (async)
setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000040)=r4, 0x4) (async)
r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYRES32=r3], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffff8}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000f80)={r5, 0x5, 0x145, 0x0, &(0x7f0000001000)="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", 0x0, 0xcfc, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffff1}, 0x50) (async)
sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a14000000060a0102000000000000000005000900000000001100010000000000000000000100000a"], 0x3c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840)
r6 = accept4$x25(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=0x12, 0x80800)
sendto$x25(r6, &(0x7f00000000c0)="a8c4d5bf4d812170d4ea53f046e3abb5e94a4fc9806d4046f34235efab60499f9c73df120f16df535df1edeee04592b88ecce0e40fb83625d7e7274ea32d", 0x3e, 0x400c007, 0x0, 0x0) (async)
r7 = socket(0x40000000015, 0x5, 0x0)
bind$inet6(r7, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendmsg$IPSET_CMD_TEST(r1, &(0x7f0000000ec0)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x80008010}, 0xc, &(0x7f0000000e80)={&(0x7f0000000dc0)={0x9c, 0xb, 0x6, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@IPSET_ATTR_DATA={0x38, 0x7, 0x0, 0x1, [@IPSET_ATTR_PROTO={0x5, 0x7, 0x21}, @IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0x8}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @local}}, @IPSET_ATTR_CADT_FLAGS={0x8}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}]}, @IPSET_ATTR_ADT={0x48, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @remote}}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2_TO={0xc, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010101}}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0xffff8000}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARK={0x8}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}}]}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x9c}, 0x1, 0x0, 0x0, 0x4}, 0x40) (async)
sendto$inet6(r7, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xa, 0x0, 0x0, @dev, 0xfffffffc}, 0x1c)

459.302904ms ago: executing program 0 (id=2941):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000)
sendmsg$NFT_BATCH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000010700000a44000000060a030400000000000000000a0000010900010073797a3100000000100004800c00018007000100727400000900020073797a32000000000500074062"], 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000002a00)={&(0x7f0000000000)=@ipv6_newnexthop={0x44, 0x68, 0x400, 0x70bd28, 0x25dfdbff, {0xa, 0x0, 0x1, 0x0, 0x4}, [@NHA_RES_GROUP={0xffffffb5, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_IDLE_TIMER={0x0, 0x2, 0x1}, @NHA_RES_GROUP_BUCKETS={0x0, 0x1, 0xe}]}, @NHA_FDB={0x4}, @NHA_ID={0x8, 0x1, 0x1}, @NHA_GROUP_TYPE={0x6, 0x3, 0x1}, @NHA_FDB={0x4}]}, 0x44}}, 0x4080)

399.842797ms ago: executing program 0 (id=2942):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r1 = socket(0x10, 0x3, 0x0) (async)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000d80)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48)
setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000047c0)=r2, 0x4) (async)
sendmsg$nl_route_sched(r1, &(0x7f0000007940)={0x0, 0x0, &(0x7f0000007900)={&(0x7f0000011040)=@newtaction={0x60, 0x30, 0x216822a75a8bdd29, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x7, 0x3, 0xffffffffffffffff, 0x3ff, 0x7}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x60}}, 0x48010) (async)
bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x1}, 0x6) (async)
ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f0000000080)={0x3d, 0x800000, 0x8, 0x7, 0x2, 0x81}) (async)
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f00000000c0)={"09cc60b2efabc72e03372ce22982c7ac", 0x0, <r3=>0x0, {0x3, 0xffffffff}, {0xd}, 0x8001, [0x7ff, 0x6, 0x3, 0x7, 0x9, 0x44, 0xfffffffffffffff7, 0xf, 0xfffffffffffffff9, 0x5e, 0x0, 0x5, 0xecd, 0x9, 0x4]})
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f00000001c0)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0, <r4=>0x0})
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f00000003c0)={"557c86e12c473baa7c2dbf81407bcfb9", r3, r4, {0x3}, {0x8, 0xd1ea}, 0x80000001, [0x8, 0x1, 0x6, 0x27, 0x7, 0x8, 0xd9d, 0x200, 0x1, 0x4, 0x9, 0x5aa5, 0x80000003, 0x2, 0x91, 0xc]})
write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x6)

398.360755ms ago: executing program 1 (id=2943):
r0 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x4e22, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r0, 0x28)
r1 = accept4(r0, 0x0, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={0x0, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84)
r2 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000080)="5c00000012006bab9e3fe3d86e6c1d0000147ea64e21160af36504b68675f8001d000a00a0e69ee517d34460bc24eab556a705251e6182949a36c23d3b48dfd8cdbf9367b4fa51f60a64c9f408000300060100000800030011000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
setsockopt$bt_BT_DEFER_SETUP(r4, 0x112, 0x7, 0x0, 0x0)
r5 = socket$igmp(0x2, 0x3, 0x2)
getsockopt$ARPT_SO_GET_ENTRIES(r5, 0x0, 0x61, &(0x7f0000000400)=ANY=[@ANYBLOB="666965720000000019b38e89000000000000000000000000000000000000040004"], &(0x7f0000000180)=0x2c)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
unshare(0x24020400)
r7 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/time\x00')
ioctl$NS_GET_NSTYPE(r7, 0x8004b707, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x79, 0x11, 0xc0}, [@call={0x85, 0x0, 0x0, 0x6b}]}, &(0x7f00000002c0)='GPL\x00', 0x5, 0xfe01, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x222}, 0x21)
sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000c40)=ANY=[@ANYBLOB="1c000000263dc70000bd7000fddbdf2508000000d4051391124087001f08000100030000003b61135ed7cba36c05d7d3f873b1e249c9220ff30e7c4d2c778fb2e241e4fb488ad7d3bf7921febbe81f20558f3d9062b60a783df61e44b43da798ad3d97219ffb8b515f86823e161661ee803d562144a5826b683e7b3463579c516f8df323853851e3594ebeea7c6c08c50cdba6763f35c656ee5e7066a27bc79096bdca3809a39374d66ab7ae11a5787dbce35d00401e93e498ae00fee1b75e77e3463311d383b9754333667aa2771e600089490fe46305d6936643e30f35c213b4567f1a27219881d2456ea5270d373674fc5d242c0c7255a2439052ecccad9b44e49dbed13da400bec39de017884da836d7b686e75e1842541710a2f0cbda72983f7c0db8992da48a"], 0x1c}, 0x1, 0x0, 0x0, 0x4000002}, 0x4000080)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x74, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x4c, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_SREG={0x8, 0x7, 0x1, 0x0, 0x16}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x14, 0x1, 0x0, 0x1, @byteorder={{0xe}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xe8}, 0x1, 0x0, 0x0, 0x24000040}, 0x0)
r9 = accept$inet(r5, &(0x7f0000000e00)={0x2, 0x0, @private}, &(0x7f0000000e40)=0x10)
sendmsg$nl_generic(r3, &(0x7f0000002780)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000d80)={0x44, 0x40, 0x1, 0x7fffc, 0x4, {0x3}, [@nested={0xffffffffffffffc0, 0x10c}, @nested={0x24, 0x1, 0x0, 0x1, [@nested={0x20, 0x10, 0x0, 0x1, [@nested={0x1c, 0x8, 0x0, 0x1, [@nested={0x18, 0x101, 0x0, 0x1, [@nested={0x14, 0x14f, 0x0, 0x1, [@typed={0x4, 0x107}, @typed={0xc, 0x61, 0x0, 0x0, @u64=0x30829fb1}]}]}]}]}]}, @typed={0x8, 0x2, 0x0, 0x0, @fd=r9}]}, 0x44}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094)

339.937485ms ago: executing program 1 (id=2944):
r0 = socket$netlink(0x10, 0x3, 0x4)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'gre0\x00', <r2=>0x0})
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="180000007500"/16, @ANYRES16=r1], &(0x7f00000000c0)='syzkaller\x00', 0xfffffff9, 0x0, 0x0, 0x41100, 0xd, '\x00', r2, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x5e, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0)
r4 = socket$kcm(0x29, 0x2, 0x0)
write$cgroup_pressure(r4, &(0x7f0000000140)={'full'}, 0xfffffdef)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x80}, 0xc)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f00000004c0)=0x6, 0x4)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000200), 0x4)
socket$nl_netfilter(0x10, 0x3, 0xc)
unshare(0x26000400)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r5, &(0x7f0000000140)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000000, 0x12, r5, 0x1c7bf000)
r6 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r6, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340)={0x3, 0xa}, 0x10, 0x0, r5}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r7, 0x2000012, 0xffffffffffffffca, 0x0, &(0x7f0000000c40), 0x0, 0x7ffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$IPCTNL_MSG_CT_NEW(r8, &(0x7f0000000300)={0x0, 0xfffffe98, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="8400000000010104000000000000000002000000240001801400018008000100ac1414bb08000200ac0314bb0c0002800500010000000000240002801400018008000100ac1414aa08000200ac1414000c0002800500010000000000080007400000000010001700000000000000000000000000100016"], 0x84}}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_GET(r9, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010000000000001f0000540000000e0001006e657464657673696d0000000f0002"], 0x34}}, 0x0)
sendmsg$DEVLINK_CMD_GET(r9, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16=r10, @ANYBLOB="0100"/14], 0x14}, 0x1, 0x0, 0x0, 0x40000c0}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x16, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
getsockopt$sock_linger(r8, 0x1, 0xd, &(0x7f0000000340), &(0x7f0000000380)=0x8)

339.027419ms ago: executing program 0 (id=2945):
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000d40)=@raw={'raw\x00', 0x3c1, 0x3, 0xb18, 0x0, 0x12, 0x600, 0x0, 0x202, 0xa48, 0x2e8, 0x2e8, 0xa48, 0x2c0, 0x4, 0x0, {[{{@ipv6={@private0={0xfc, 0x0, '\x00', 0x4}, @mcast2, [], [], 'veth1_to_bond\x00', 'geneve1\x00', {0xff}}, 0x0, 0x948, 0x978, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "0000000000000019b5115c2aee68d23a465cd431e150c3234e082555f67222476147864fa0318236000000c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baeb8989f1f34a214e6726401fe4b124e0f7323a587d2a1fcf07000000eca0a7b66c60c527bac2b50700", 0x2, 0x0, {0x3}}}, @common=@unspec=@u32={{0x7e0}, {[{[{0x5, 0x1}, {0x4, 0x1}, {0x6, 0x2}, {0xffff8001, 0x2}, {0x3}, {0x7, 0x3}, {0x7, 0x2}, {0x65, 0x3}, {0x9, 0x1}, {0x33d8786a, 0x1}, {0x2, 0x2}], [{0x7, 0x8c}, {0x1, 0x5}, {0x3ff, 0xda}, {0x5, 0x80000000}, {0x6, 0x1}, {0x5, 0x3}, {0x9037, 0x8}, {0x1000, 0x1}, {0x7, 0x7ff}, {0x7}, {0x7, 0x4}], 0x7, 0x1}, {[{0x1, 0x3}, {0x80000000, 0x2}, {0x81, 0x3}, {0x8, 0x1}, {0x3}, {0x8, 0x1}, {0x5, 0x3}, {0x6ec7, 0x1}, {0x1, 0x2}, {0x9}, {0xffffffff}], [{0x0, 0x8000}, {0x1, 0x51}, {0x800, 0x1}, {0x40, 0xfffffffe}, {0x1, 0x400}, {0xffffffff, 0x4}, {0x1, 0x2f}, {0x6, 0xe3}, {0x5, 0x2336}, {0x2, 0x7fffffff}, {0x3, 0x100}], 0x2, 0x5}, {[{0x0, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x401}, {0xffff, 0x2}, {0x80, 0x3}, {0xc, 0x1}, {0x7, 0x2}, {0x4}, {0x8, 0x1}, {0x84, 0x2}], [{0x2, 0x48ea5d6a}, {0x6, 0x1}, {0x5, 0xf7}, {0xc}, {0xab, 0x5}, {0x2, 0x9}, {0x6, 0x6}, {0x67, 0x5}, {0x40, 0x6}, {0x1800, 0xd}, {0x1ff, 0x8d6}], 0x7}, {[{0x6, 0x2}, {0xfffffff9}, {0xc}, {0x8, 0x1}, {0x8, 0x3}, {0xf, 0x1}, {0xe00}, {0x7fffffff}, {0x7, 0x2}, {0x5, 0x1}], [{0xe, 0x80000000}, {0x1, 0x9}, {0xea, 0x5}, {0x6, 0x5}, {0xa, 0x1}, {0x8, 0x8}, {0x8, 0x1}, {0x401, 0x2}, {0xfff, 0x9}, {0xb, 0x9}, {0x9, 0xffff}], 0xb, 0x4}, {[{0x585b, 0x2}, {0x800, 0x2}, {0x80, 0x1}, {0x6, 0x1}, {0x8001, 0x3}, {0x1, 0x1}, {0x2, 0x3}, {0x100}, {0xfff, 0x3}, {0x1}, {0x8001, 0x1}], [{0x6, 0x8}, {0x7f, 0x5}, {0x6, 0xf}, {0x3}, {0x2}, {0x80000000, 0x4}, {0x400, 0x6de0}, {0x8, 0x9}, {0x7, 0x800}, {0x98f, 0x10000}, {0xa9, 0x7}], 0x6, 0x9}, {[{0x8}, {0x81}, {0x0, 0x3}, {0xb, 0x3}, {0x2, 0x1}, {0xd7, 0x1}, {0x8, 0x3}, {0xf8a9, 0x3}, {0x5}, {0x0, 0x3}, {0x8, 0x2}], [{0x67c4, 0x8b}, {0xeb2, 0x1}, {0x0, 0x7ff}, {0x2, 0x9}, {0x3, 0x3}, {0x81, 0x8cc2}, {0xd, 0x200}, {0x2, 0x7}, {0x4, 0x800}, {0x7, 0x1d}, {0x9, 0x40}], 0x7, 0xb}, {[{0x6, 0x2}, {0x207, 0x2}, {0x0, 0x1b385c99f5cbecae}, {0x10000, 0x1}, {0x65593b7e, 0x2}, {0xdd}, {0x1, 0x2}, {0x4, 0x3}, {0x8, 0x1}, {0x6, 0x2}, {0x4, 0x2}], [{0x2, 0x2}, {0x5, 0x8}, {0x478f, 0x6}, {0x5cc0, 0x3}, {0x967, 0x3}, {0x0, 0x9}, {0x4, 0xfffffffb}, {0x800, 0xffffffff}, {0x81, 0xffff}, {0x6, 0xc}, {0x101, 0x7}], 0x7, 0x5}, {[{0xfffffffd, 0x3}, {0x3, 0x2}, {0xfffffffd, 0x3}, {0x9}, {0x5e84, 0x2}, {0x0, 0x1}, {0x4c2}, {0x8b6a, 0x2}, {0x10, 0x3}, {0x8001, 0x3}, {0x5, 0x3}], [{0x1, 0xc}, {0xf33, 0x8}, {0x6, 0xffffff01}, {0x3, 0x4}, {0x9, 0x66}, {0xb, 0x5}, {0x0, 0xf6c9}, {0x0, 0x4}, {0x2, 0x1000000}, {0x7, 0x4}, {0x40, 0x5d55}], 0xa, 0x5}, {[{}, {0xfff, 0x3}, {0xfffffff7, 0x2}, {0x5, 0x3}, {0x1}, {0x4, 0x1}, {0xae0, 0x3}, {0xffffffc0}, {0x8, 0x1}, {0x4}, {0x7, 0x3}], [{0x1, 0xfffffffc}, {0x1000, 0x7}, {0x2, 0xffffffff}, {0x80, 0x2}, {0x4, 0x6}, {0x3, 0x8}, {0x4, 0x8}, {0x4, 0x7}, {0x4, 0x1}, {0x8, 0x80}, {0xfffff802, 0x34a16896}], 0x6, 0x9}, {[{0x88, 0x3}, {0x9, 0x1}, {0xa610000, 0x1}, {0x0, 0x2}, {0x3, 0x2}, {0x44, 0x2}, {0x9}, {0x3, 0x1}, {0x2}, {0x9, 0x1}, {0x9}], [{0x80000000, 0x6}, {0x7fffffff}, {0x382, 0x3ff}, {0x1, 0x8}, {0xbd, 0x2c8}, {0x7}, {0x10000, 0x5ff}, {0x7, 0x6}, {0x1fd, 0x2}, {0x7, 0xffffffff}, {0x4, 0xe6}], 0x0, 0x3}, {[{0x3, 0x1}, {0x1, 0x2}, {0x4}, {0x36, 0x3}, {0xe1}, {0x9, 0x6}, {0x1}, {0x101, 0x2}, {0x23, 0x3}, {0x6}, {0xffffffff, 0x2}], [{0x7, 0x8}, {0x84b, 0x4}, {0x9, 0x1}, {0x18d, 0x75091ebd}, {0x2, 0xf9}, {0x4, 0xfffffff5}, {0xa, 0x4}, {0x2, 0x3}, {0x0, 0x9}, {0x1ff, 0x3ff}, {0x12505a58, 0x9}], 0x0, 0x4}], 0x2}}]}, @common=@unspec=@CONNMARK={0x30}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0xb78)
r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000008280), r1)
sendmsg$DEVLINK_CMD_SB_POOL_GET(r1, &(0x7f00000084c0)={0x0, 0x0, &(0x7f0000008480)={&(0x7f00000082c0)={0x44, r3, 0x1, 0x70bd26, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x67, 0xb, 0x8001}, {0x6, 0x11, 0x6}}]}, 0x44}, 0x1, 0x0, 0x0, 0x24000084}, 0x40080)
sendmsg$DEVLINK_CMD_TRAP_SET(r0, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x98, r3, 0x200, 0x70bd2b, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5}}]}, 0x98}, 0x1, 0x0, 0x0, 0x24000000}, 0x4000010)
r4 = socket$inet6_mptcp(0xa, 0x1, 0x106)
getsockopt$inet6_tcp_buf(r4, 0x6, 0x1a, 0x0, &(0x7f0000000040))
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet6_int(r6, 0x29, 0x1a, &(0x7f0000000280)=0x80000001, 0x4)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r6, 0x84, 0x6e, &(0x7f0000000140)=[@in6={0xa, 0x4e23, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x2}, @in={0x2, 0x4e23, @multicast1}], 0x2c)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000380)={'sit0\x00', <r7=>0x0})
ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000000)={0x8, 'macsec0\x00', {'wlan1\x00'}})
getuid()
r8 = socket$inet(0x2, 0x3, 0x30)
getsockopt$inet_mreqsrc(r8, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000080)=0x2c)
sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r7, {}, {}, {0xfff3}}}, 0x24}}, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(0xffffffffffffffff, 0x10f, 0x86)
r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000240)={'rose0\x00', 0x112})
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={@map=0x1, 0x13, 0x1, 0x2, &(0x7f0000000040)=[0x0], 0x1, 0x0, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40)
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r10=>0xffffffffffffffff})
write$cgroup_devices(r10, &(0x7f00000001c0)=ANY=[], 0x9)
bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, <r11=>0x0}, 0x8)
r12 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func_proto]}}, 0x0, 0x26}, 0x28)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000202064250000000000202020861af8ff00000000bfa1f9000000000007010000f8ffffffb702000008000000b7030000070000008500000006000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x13, '\x00', 0x0, 0x0, r12, 0x8, &(0x7f0000000080)={0x0, 0x1}, 0x8}, 0x94)
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=r11, 0x4)

337.604198ms ago: executing program 1 (id=2946):
syz_emit_ethernet(0x0, 0x0, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3)
r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000001400000018"], 0x44}}, 0x0) (async)
sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000001400000018"], 0x44}}, 0x0)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000740)={0x94, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x8}]}, 0x94}}, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x98}, 0x1, 0x0, 0x0, 0x4004015}, 0x8884)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x20, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800"/13], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0xfffffee8, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x20, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800"/13], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0xfffffee8, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000002c0)={r3, 0xffffffffffffffff, 0x2d, 0x0, @val=@netkit={@void, @value=r3}}, 0x1c)
close(0x4) (async)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00')
unshare(0x8000000)
ioctl$OCFS2_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40046f01, 0x0) (async)
ioctl$OCFS2_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40046f01, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$devlink(&(0x7f0000000640), 0xffffffffffffffff) (async)
syz_genetlink_get_family_id$devlink(&(0x7f0000000640), 0xffffffffffffffff)
pipe(&(0x7f0000000280)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
vmsplice(r5, &(0x7f0000000000)=[{&(0x7f0000000f40)="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", 0x94a}, {&(0x7f0000000080)}], 0x2, 0xe) (async)
vmsplice(r5, &(0x7f0000000000)=[{&(0x7f0000000f40)="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", 0x94a}, {&(0x7f0000000080)}], 0x2, 0xe)
socket$inet_udp(0x2, 0x2, 0x0) (async)
r6 = socket$inet_udp(0x2, 0x2, 0x0)
r7 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_STAT_SET(r7, 0x0, 0x24001850)
connect$inet(r6, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) (async)
connect$inet(r6, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10)
splice(r4, 0x0, r6, 0x0, 0x2000000002ffff, 0x0) (async)
splice(r4, 0x0, r6, 0x0, 0x2000000002ffff, 0x0)
openat$cgroup_ro(r1, &(0x7f00000000c0)='blkio.bfq.idle_time\x00', 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a1400000011000100c7c90000000000000300000a"], 0x28}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
r8 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r8, &(0x7f0000000100)={0x2, 0x0, @rand_addr=0x64010102}, 0x10) (async)
bind$inet(r8, &(0x7f0000000100)={0x2, 0x0, @rand_addr=0x64010102}, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)

200.041118ms ago: executing program 1 (id=2947):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000500)={0x24, 0x1, 0x1, 0x201, 0x0, 0x0, {0x0, 0x0, 0x1}, [@CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x7}, @CTA_MARK_MASK={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4008014}, 0x800)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendto$inet6(r3, &(0x7f00000001c0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x800, @loopback={0x0, 0x1c9ae7fffe9a6f34}}, 0x1c)
setsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f00000000c0)={0x0, 0x4, 0xfe, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x5}, 0xe)
shutdown(r3, 0x1)
ioctl$sock_TIOCINQ(r3, 0x541b, &(0x7f0000000000))
setsockopt$inet_tcp_int(r2, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4)
bind$inet(r2, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10)
unshare(0x400)
r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
shutdown(r4, 0x1)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x6, 0x4, 0x4, 0x6, 0x0, 0x1}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r5], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000200)={0xffffffffffffffff, 0x58, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r6=>0x0}}, 0x10)
r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r8 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_TABLE(r8, 0x29, 0xd1, &(0x7f0000000040)=0xfe, 0x4)
r9 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='pids.current\x00', 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@bloom_filter={0x1e, 0x1, 0x5, 0x7fffffff, 0x0, r5, 0xd, '\x00', r6, r9, 0x5, 0x1, 0x1, 0x6}, 0x50)
sendmmsg$inet(r2, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @multicast1}, 0x10, &(0x7f0000001c80)=[{&(0x7f0000000080)="15be381e485e45e897206c3d74dfcecb03cbff2f975128d92a077bf67ec1ad7b486927b48fe4087d", 0x28}, {&(0x7f00000003c0)="d48449e081b658de9e078f7c160b9ced403e9103444a5beb3a965bdbbe3a59ec49d1e51b8d1de3319dcd727aa654d9badb1f90933051e41ef330a73d0ac8519c5fe95e2d32cbe7e555f1677fb3224e", 0x4f}, {&(0x7f0000000440)="6a80de8641cda84d1971100003fefc66a3817a1ff09ab991fca5b0f96191728ca523ffc19368c6afaef73588a2332ece0cefd4417621816def66711fcb07040be2346a72127c4ae7932588b4f515479a72085a4fd6df7dd69ef698300d04be54ab41a06feb7c161e54ccd430f72bb38c733d47cf71252215f759b45491cb9105c5fe6304bda8300de72192e49e194d23fbf619fad9ea14f035168ca7b76263ba081155512a6a46b3a3e2adc3fd0ca6a495d3eb9608f2fd833de1cf5d9d1bde070dd6e5650bf81582ee3311875cd01382c8c89c6655756b66ebbdaaf15f", 0xdd}, {&(0x7f0000000540)="6f413c63448e5d4f3c486552b94adf2376f17fcb494ab2f36085643d33feda17d03fde9506d0efe1ae983add7cf146a4add9aeca4462cee2fb78100ba11ca2644bb5ff31a91403acbefc5b945a6d3a280272", 0x52}, {0x0}, {&(0x7f0000001b80)="cf4af566425ba56804d807abc08e2f175c7312f77c8425e77daafced9987977373fbbd497c8a13252987ff5c7b3f933332ac5170c2ade2bbef7832d3134ab2c64ac54c4c56f23117bd8765df6a0ebcb54463a8292ef14ae3e466e5ca528e50f3d7c3ea9711d8d1b43df51f5ef366569ce963c082c5fb0d7b220484a59f133c28f8eb0cbe5146ec4a66094283c8b637267891db3f7e2b20d7e529209ca8bd7c884d5343a494b4c16de541b401c4153e0cc4914c8e94e0be404b3ac67d60a6a01d914fa518d13ae6d1e6", 0xc9}], 0x6}}], 0x1, 0x20008000)
shutdown(r2, 0x1)
r10 = syz_genetlink_get_family_id$gtp(&(0x7f00000005c0), r9)
r11 = ioctl$NS_GET_PARENT(r7, 0xb702, 0x0)
sendmsg$GTP_CMD_NEWPDP(r9, &(0x7f0000000780)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x7c, r10, 0x300, 0x70bd27, 0x25dfdbfe, {}, [@GTPA_O_TEI={0x8}, @GTPA_LINK={0x8, 0x1, r6}, @GTPA_PEER_ADDRESS={0x8, 0x4, @empty}, @GTPA_PEER_ADDR6={0x14, 0xb, @loopback}, @GTPA_O_TEI={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x21}}, @GTPA_FLOW={0x6, 0x6, 0x2}, @GTPA_NET_NS_FD={0x8, 0x7, r11}, @GTPA_MS_ADDR6={0x14, 0xc, @remote}, @GTPA_NET_NS_FD={0x8, 0x7, r9}]}, 0x7c}, 0x1, 0x0, 0x0, 0x8014}, 0x40000)
r12 = socket$phonet_pipe(0x23, 0x5, 0x2)
ioctl$sock_proto_private(r12, 0x89ee, &(0x7f0000000300))
ioctl$TUNSETTXFILTER(r0, 0x400454ca, &(0x7f0000000100)=ANY=[@ANYBLOB="2e2e000c371303ed6a33fe86890df20e87"])

199.188892ms ago: executing program 0 (id=2948):
r0 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000e40)=@raw={'raw\x00', 0x3c1, 0x3, 0x5a0, 0x0, 0xffffff80, 0x178, 0xd0040000, 0x178, 0x4d0, 0x22b, 0x258, 0x4d0, 0x258, 0x2034, 0x0, {[{{@uncond, 0x1d, 0x300, 0x368, 0x340, {0x1e0002a8, 0x7203000000000000}, [@common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x1a, 0x64, [{}, {0x0, 0x0, 0x1}, {0x35, 0x40}, {}, {0x0, 0x7, 0x8}, {}, {0x0, 0x0, 0xfd}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x0, 0x4}, {}, {0x6}, {}, {0x9}, {}, {}, {}, {0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0x80000000}, {0x870}, {}, {}, {}, {0x2, 0xfe}, {0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x3, 0x10}, {}, {}, {0xfffe, 0x7, 0x4}, {0x0, 0x0, 0x1}, {0x0, 0x1}, {0x8, 0x8, 0x0, 0xfffffffc}, {}, {0x0, 0xfc, 0xe4}, {0x0, 0x0, 0xff}, {}, {0x3}, {}, {0x0, 0x0, 0x0, 0x10}, {}, {}, {0x0, 0x0, 0x0, 0xffffffff}, {}, {0x4, 0x8a}, {}, {}, {}, {0x0, 0x4}]}}, @common=@inet=@socket1={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x1c, 0x7, 0x279, 0x2, 'netbios-ns\x00', 'syz1\x00', {0x170}}}}, {{@ipv6={@private2, @empty, [0xff, 0x0, 0xffffff00, 0xff000000], [0xff000000, 0xff000000, 0xffffff00], 'vlan1\x00', 'pim6reg1\x00', {}, {0xff}, 0x0, 0x9, 0x1, 0x12}, 0x0, 0x100, 0x168, 0x0, {}, [@common=@ah={{0x30}}, @inet=@rpfilter={{0x28}, {0x4}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x11, 0x0, 0x0, 0x0, 'syz1\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x600)
r1 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000008c0)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14}, 0x50)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
ioctl$sock_ipv6_tunnel_SIOCDELPRL(r3, 0x89f6, &(0x7f0000000200)={'sit0\x00', &(0x7f0000000140)={@loopback, 0x1, 0x0, 0x20, 0x0, [{@loopback}, {@empty}]}})
getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000001440)=""/4096, &(0x7f0000002440)=0x1000)
write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0x32600)
r4 = socket$inet_smc(0x2b, 0x1, 0x0)
r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_buf(r5, 0x0, 0x8008000000010, &(0x7f0000005e40)="17000000020001000003d68c5ee17688a2003208020300ecff3f0200000300000a000000009afc5ad9485bbb6a880000d6c8db0000dba67e060180000a0000f10607bdff59100ac45761407a681f009cee4a5acb3da400001fb700674f19b44e09f9315033bf79ac2dff060115003901000000000000ea000000000000000009ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e000"/184, 0xb8)
setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f00000000c0)=0x1, 0x4)
connect$inet(r4, &(0x7f0000000080)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x10)
recvfrom(r4, &(0x7f00000002c0)=""/197, 0xc5, 0x3, &(0x7f00000003c0)=@pppoe={0x18, 0x0, {0x3, @empty, 'veth1_to_batadv\x00'}}, 0x80)
ioctl$NILFS_IOCTL_GET_BDESCS(r4, 0xc0186e87, &(0x7f00000004c0)={&(0x7f0000000440)=[{0x101, 0x80, 0x4, 0xffffffffffffffff, 0x28ee}, {0x8, 0x7, 0xe, 0x9, 0xcd1}, {0xf9f4, 0x7, 0x1000, 0x6, 0x9}], 0x3, 0x28, 0x9, 0x2})
close(r4)
r6 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@ipv6_newrule={0x44, 0x20, 0x1, 0x70bd27, 0x0, {0xa, 0x0, 0x0, 0x40}, [@FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'hsr0\x00'}, @FIB_RULE_POLICY=@FRA_OIFNAME={0x14, 0x11, 'veth1_to_bridge\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x24040804}, 0x4008000)
sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}}, 0x40084)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0)
ioctl$XFS_IOC_GOINGDOWN(r1, 0x8004587d, &(0x7f0000000040)=0x1)
connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e20, @private=0xa010102}, 0x10)
openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000180), 0x35c, 0x0)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000680)={r7, 0x18000000000002a0, 0x12, 0x0, &(0x7f0000000380)="b9fe030768045c8c989a14f088a8657986dd", 0x0, 0x9b, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)

81.562733ms ago: executing program 0 (id=2949):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
ioctl$int_in(r0, 0x5452, &(0x7f0000000180)=0xf51)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x4c02})
readv(r1, &(0x7f0000000080)=[{&(0x7f0000000980)=""/4096, 0x1000}], 0x1)
r2 = socket$kcm(0x2, 0xa, 0x2)
ioctl$TUNSETVNETHDRSZ(r1, 0x400454d8, &(0x7f0000000100)=0x730)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @link_local})
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3000003, 0x204031, 0xffffffffffffffff, 0xffffd000)
readv(r0, &(0x7f0000000340)=[{&(0x7f0000000080)=""/107, 0x6b}], 0x1)
openat$ppp(0xffffffffffffff9c, 0x0, 0x30f602, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x275a, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
pwritev(r4, &(0x7f0000000100)=[{&(0x7f00000001c0)="8ed0", 0x2}], 0x1, 0x8001, 0x80)
sendfile(r4, r3, 0x0, 0x101)
r5 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000100), 0xffffffffffffffff)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$WG_CMD_SET_DEVICE(r6, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000540)=ANY=[@ANYRES64=r1, @ANYRES16=r5, @ANYBLOB="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", @ANYRES64=r5], 0x21c}, 0x1, 0x0, 0x0, 0x20040010}, 0x4008804)
setsockopt$sock_int(r0, 0x1, 0x20, &(0x7f00000000c0)=0xf6, 0x4)

0s ago: executing program 1 (id=2950):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000000)=0x16a, 0x4)
r2 = socket$inet_sctp(0x2, 0xa, 0x84)
setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000040)='bond0\x00', 0x10)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000200)={<r3=>0xffffffffffffffff})
connect$vsock_stream(r3, 0x0, 0x0)
bind$802154_raw(0xffffffffffffffff, &(0x7f0000000000)={0x24, @long}, 0x8)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0)
sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r3, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41}, 0xc010)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@struct={0x0, 0x0, 0x0, 0x4, 0x0, 0x8}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x1, 0xfffffffe}}]}}, 0x0, 0x3e}, 0x28)
r5 = accept4(r4, 0x0, 0x0, 0x800)
bind$alg(r5, 0x0, 0x0)
sendmmsg$alg(r5, &(0x7f0000000640)=[{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000140)="b57523cb1a2c90d8acad2e2d98dfc9ea7a5843c3b63b683ced2b3266175599b779617e66e6b3e15c04", 0x29}, {&(0x7f00000001c0)="66f7", 0x2}, {&(0x7f0000000300)='l3', 0x2}], 0x3}], 0x1, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_FLUSH(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x1c, 0x4, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0)
sendmmsg$inet(r1, &(0x7f0000003240)=[{{&(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10, &(0x7f00000016c0)}}], 0x1, 0x4000800)
recvmmsg(r1, 0x0, 0x0, 0x2100, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7"], 0x0, 0x4}, 0x94)
r7 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_mreqn(r7, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc)
setsockopt$inet_msfilter(r7, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a010100000004"], 0x57)
r8 = socket$netlink(0x10, 0x3, 0x0)
writev(r8, &(0x7f0000000080)=[{&(0x7f0000000540)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000191c00049000000000000000e5ffff08000400000000000000", 0x39}], 0x1)
sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xc3}, {}, {0x10, 0xd}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x4}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0xc000}, 0x4c014)

kernel console output (not intermixed with test programs):

'.
[  199.018783][T12245] syzkaller0: entered promiscuous mode
[  199.021725][T12245] syzkaller0: entered allmulticast mode
[  199.054277][T12247] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1650'.
[  199.441294][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  199.557109][T12262] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1652'.
[  199.581923][T12262] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1652'.
[  199.641842][T12263] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1652'.
[  199.691615][ T1382] ieee802154 phy1 wpan1: encryption failed: -22
[  199.836524][T12267] netlink: 'syz.0.1653': attribute type 11 has an invalid length.
[  200.310750][T12278] bond14: option primary: mode dependency failed, not supported in mode balance-rr(0)
[  200.317643][T12278] bond14 (unregistering): Released all slaves
[  200.481155][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  200.574390][T12283] openvswitch: netlink: Missing key (keys=40, expected=2000)
[  200.644032][T12285] netlink: 'syz.0.1658': attribute type 1 has an invalid length.
[  200.674659][T12285] 8021q: adding VLAN 0 to HW filter on device bond20
[  200.729248][T12285] bond20: (slave veth7): Enslaving as an active interface with a down link
[  200.754082][T12285] bond20: (slave veth9): Enslaving as an active interface with a down link
[  200.991927][T12289] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1659'.
[  201.060249][T12296] netlink: 207952 bytes leftover after parsing attributes in process `syz.1.1661'.
[  201.103560][T12298] lo speed is unknown, defaulting to 1000
[  201.188562][T12301] IPv6: sit2: Disabled Multicast RS
[  201.511375][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  201.616406][T12310] lo speed is unknown, defaulting to 1000
[  201.636894][T12310] lo speed is unknown, defaulting to 1000
[  201.686927][T12314] : renamed from lo
[  201.766202][T12310]  speed is unknown, defaulting to 1000
[  201.787343][T12310] smbdirect: ib_dev[sy2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000
[  201.814986][T12310] smbdirect: ib_dev[sy2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6
[  201.834186][T12310] smbdirect: ib_dev[sy2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008
[  201.877634][T12310] infiniband sy2: RDMA CMA: cma_listen_on_dev, error -98
[  201.908663][T12310]  speed is unknown, defaulting to 1000
[  201.931784][T12310]  speed is unknown, defaulting to 1000
[  201.951288][T12310]  speed is unknown, defaulting to 1000
[  202.394497][T12358] x_tables: duplicate underflow at hook 2
[  202.396882][T12360] xt_hashlimit: size too large, truncated to 1048576
[  202.485970][T12367] netlink: 'syz.0.1683': attribute type 1 has an invalid length.
[  202.535491][T12371] __nla_validate_parse: 3 callbacks suppressed
[  202.535503][T12371] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1684'.
[  202.544753][T12367] 8021q: adding VLAN 0 to HW filter on device bond21
[  202.551405][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  202.578963][T12367] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  202.825769][T12391] dvmrp0: entered allmulticast mode
[  202.980978][ T5718] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  202.987001][ T5718] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  203.001379][ T5718] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  203.009347][ T5718] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  203.045020][T12407] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1694'.
[  203.057323][T12407] syzkaller1: entered promiscuous mode
[  203.059332][T12407] syzkaller1: entered allmulticast mode
[  203.097373][T12408] xt_cluster: you have exceeded the maximum number of cluster nodes (524288 > 32)
[  203.108116][T12408] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1695'.
[  203.171793][T12412] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1695'.
[  203.175258][T12412] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1695'.
[  203.306770][T12418] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1698'.
[  203.412300][T12427] SET target dimension over the limit!
[  203.601421][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  204.070623][ T5610] Bluetooth: hci2: command 0x0401 tx timeout
[  204.073199][   T54] Bluetooth: hci2: Opcode 0x0401 failed: -110
[  204.167346][T12444] netlink: 'syz.1.1705': attribute type 1 has an invalid length.
[  204.193134][T12444] 8021q: adding VLAN 0 to HW filter on device bond14
[  204.212454][T12444] bond14: (slave veth7): Enslaving as an active interface with a down link
[  204.220203][T12444] 8021q: adding VLAN 0 to HW filter on device batadv1
[  204.224494][T12444] bond14: (slave batadv1): making interface the new active one
[  204.228852][T12444] batadv1: entered promiscuous mode
[  204.232032][T12444] bond14: (slave batadv1): Enslaving as an active interface with an up link
[  204.267313][T12444] bond14 (unregistering): (slave veth7): Releasing active interface
[  204.294442][T12444] bond14 (unregistering): (slave batadv1): Releasing active interface
[  204.304910][T12444] bond14 (unregistering): Released all slaves
[  204.586228][T12466] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0
[  204.641184][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  204.714672][T12471] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1713'.
[  204.718226][T12471] netlink: 7 bytes leftover after parsing attributes in process `syz.0.1713'.
[  204.813601][T12477] netlink: 27 bytes leftover after parsing attributes in process `syz.1.1715'.
[  204.961130][T12479]  speed is unknown, defaulting to 1000
[  205.012021][T12481] netlink: 276 bytes leftover after parsing attributes in process `syz.1.1716'.
[  205.134146][T12479]  speed is unknown, defaulting to 1000
[  205.495987][   T54] Bluetooth: hci1: link tx timeout
[  205.502003][   T54] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa
[  205.535042][   T54] Bluetooth: hci1: link tx timeout
[  205.537048][   T54] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa
[  205.556278][   T54] Bluetooth: hci1: link tx timeout
[  205.558000][   T54] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa
[  205.562990][   T54] Bluetooth: hci1: link tx timeout
[  205.564776][   T54] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa
[  205.569229][   T54] Bluetooth: hci1: link tx timeout
[  205.571375][   T54] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa
[  205.582969][   T54] Bluetooth: hci1: link tx timeout
[  205.585414][   T54] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa
[  205.588673][   T54] Bluetooth: hci1: link tx timeout
[  205.591373][   T54] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa
[  205.611268][   T54] Bluetooth: hci1: link tx timeout
[  205.613113][   T54] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa
[  205.615965][   T54] Bluetooth: hci1: link tx timeout
[  205.617977][   T54] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa
[  205.646984][   T54] Bluetooth: hci1: link tx timeout
[  205.649022][   T54] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa
[  205.652322][   T54] Bluetooth: hci1: link tx timeout
[  205.654508][   T54] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa
[  205.672755][   T54] Bluetooth: hci1: link tx timeout
[  205.674683][   T54] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa
[  205.677784][   T54] Bluetooth: hci1: link tx timeout
[  205.679761][   T54] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa
[  205.681595][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  205.693822][   T54] Bluetooth: hci1: link tx timeout
[  205.695507][   T54] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa
[  205.709045][   T54] Bluetooth: hci1: link tx timeout
[  205.710787][   T54] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa
[  205.713335][   T54] Bluetooth: hci1: link tx timeout
[  205.715014][   T54] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa
[  205.723903][   T54] Bluetooth: hci1: link tx timeout
[  205.725703][   T54] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa
[  205.727985][   T54] Bluetooth: hci1: link tx timeout
[  205.729830][   T54] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa
[  205.733157][   T54] Bluetooth: hci1: link tx timeout
[  205.735775][   T54] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa
[  205.836324][T12495] tipc: New replicast peer: 0000:0000:0000:0000:0000:0000:0000:0001
[  205.895366][T12497] netlink: 'syz.0.1721': attribute type 11 has an invalid length.
[  206.558943][T12523] bond14: option fail_over_mac: invalid value (127)
[  206.575936][T12523] bond14 (unregistering): Released all slaves
[  206.689483][T12526] mac80211_hwsim hwsim19 syzkaller0: entered promiscuous mode
[  206.701506][T12526] mac80211_hwsim hwsim19 syzkaller0: entered allmulticast mode
[  206.721688][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  206.849976][T12538] mac80211_hwsim hwsim19 syzkaller0: left promiscuous mode
[  206.853804][T12538] mac80211_hwsim hwsim19 syzkaller0: left allmulticast mode
[  207.529468][T12575] netlink: 'syz.1.1744': attribute type 1 has an invalid length.
[  207.590929][   T54] Bluetooth: hci1: command 0x0405 tx timeout
[  207.631526][T12575] bond14: entered promiscuous mode
[  207.644386][T12575] bond14: entered allmulticast mode
[  207.652125][T12575] 8021q: adding VLAN 0 to HW filter on device bond14
[  207.691540][T12587] __nla_validate_parse: 17 callbacks suppressed
[  207.691551][T12587] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1745'.
[  207.721944][T12589] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1500) !
[  207.728861][T12589] syzkaller0: entered promiscuous mode
[  207.731458][T12589] syzkaller0: entered allmulticast mode
[  207.751624][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  207.800116][T12590] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1746'.
[  208.025455][T12599] netlink: 'syz.2.1750': attribute type 4 has an invalid length.
[  208.076425][T12601] netlink: 27 bytes leftover after parsing attributes in process `syz.0.1751'.
[  208.345335][T12608] siw: device registration error -23
[  208.347488][T12607] siw: device registration error -23
[  208.390250][T12610] xt_CT: You must specify a L4 protocol and not use inversions on it
[  208.488304][T12614] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  208.492630][T12612] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1755'.
[  208.497864][T12614] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1756'.
[  208.502382][T12614] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1756'.
[  208.505724][T12614] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1756'.
[  208.508934][T12614] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1756'.
[  208.512380][T12612] vlan3: entered promiscuous mode
[  208.512441][T12612] bridge0: entered promiscuous mode
[  208.519294][T12614] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1756'.
[  208.588627][T12615] netlink: 'syz.2.1755': attribute type 4 has an invalid length.
[  208.791705][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  208.816417][T12620] 8021q: adding VLAN 0 to HW filter on device batadv0
[  208.874837][T12620] batman_adv: batadv0: Interface activated: batadv_slave_0
[  208.885133][T12620] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  208.897046][T12620] veth1_vlan: left promiscuous mode
[  208.900395][T12620] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check.
[  208.964348][ T5672] syz1: Port: 1 Link ACTIVE
[  209.008879][T12634] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  209.014728][T12634] syzkaller0: entered promiscuous mode
[  209.016623][T12634] syzkaller0: entered allmulticast mode
[  209.082779][T12634] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1761'.
[  209.145969][T12634] tipc: Resetting bearer <eth:syzkaller0>
[  209.157529][T12633] tipc: Resetting bearer <eth:syzkaller0>
[  209.188556][T12633] tipc: Disabling bearer <eth:syzkaller0>
[  209.428438][T12644] netlink: 'syz.2.1765': attribute type 1 has an invalid length.
[  209.464395][T12653] pim6reg1: entered promiscuous mode
[  209.472267][T12653] pim6reg1: entered allmulticast mode
[  209.574186][T12653] tipc: Trying to set illegal importance in message
[  209.841922][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  210.880923][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  210.902886][T12723] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  210.920954][T12718] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  210.934758][T12718] syzkaller0: entered promiscuous mode
[  210.949289][T12718] syzkaller0: entered allmulticast mode
[  210.984725][T12718] tipc: Resetting bearer <eth:syzkaller0>
[  211.024041][T12717] tipc: Resetting bearer <eth:syzkaller0>
[  211.059945][T12717] tipc: Disabling bearer <eth:syzkaller0>
[  211.082782][T12724] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  211.150684][T12728] ip6tnl6: entered allmulticast mode
[  211.413283][T12741] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  211.418726][T12741] openvswitch: netlink: IP tunnel dst address not specified
[  211.569859][T12751] netlink: 'syz.2.1787': attribute type 1 has an invalid length.
[  211.634760][T12751] 8021q: adding VLAN 0 to HW filter on device bond14
[  211.769184][T12768] IPVS: lblc: FWM 3 0x00000003 - no destination available
[  211.911964][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  212.152292][T12788] netlink: 'syz.2.1795': attribute type 10 has an invalid length.
[  212.398593][T12792] netlink: 'syz.0.1798': attribute type 2 has an invalid length.
[  212.402693][T12792] netlink: 'syz.0.1798': attribute type 2 has an invalid length.
[  212.433457][T12802] netlink: 'syz.2.1800': attribute type 1 has an invalid length.
[  212.571076][ T8342] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  212.578381][ T8342] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  212.585132][ T8342] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  212.605910][ T8342] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  212.629198][T12810] ipt_rpfilter: unknown options
[  212.865848][T12815] __nla_validate_parse: 42 callbacks suppressed
[  212.865860][T12815] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1805'.
[  212.928636][T12815] bond15 (unregistering): Released all slaves
[  212.961810][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  212.994593][T12818] bond23: option ad_select: invalid value (34)
[  213.001015][T12818] bond23 (unregistering): Released all slaves
[  213.152541][T12826] netlink: 'syz.0.1808': attribute type 1 has an invalid length.
[  213.211858][T12826] 8021q: adding VLAN 0 to HW filter on device bond24
[  213.216105][T12826] bond23: (slave bond24): making interface the new active one
[  213.220148][T12826] bond23: (slave bond24): Enslaving as an active interface with an up link
[  213.225707][T12826] netlink: 4768 bytes leftover after parsing attributes in process `syz.0.1808'.
[  213.230864][T12826] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1808'.
[  213.256129][T12826] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1808'.
[  213.263360][T12826] 8021q: adding VLAN 0 to HW filter on device bond23
[  213.356865][T12830] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1809'.
[  213.379501][T12830] openvswitch: netlink: IPv4 frag type 127 is out of range max 2
[  213.639186][T12846] syzkaller1: entered promiscuous mode
[  213.641391][T12846] syzkaller1: entered allmulticast mode
[  213.782628][T12860] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1816'.
[  213.799233][T12859] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1817'.
[  213.805148][T12859] netlink: 'syz.1.1817': attribute type 1 has an invalid length.
[  213.925411][T12862] netlink: 'syz.1.1818': attribute type 3 has an invalid length.
[  213.928048][T12862] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1818'.
[  214.001383][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  214.162417][T12869] syzkaller0: entered promiscuous mode
[  214.164910][T12869] syzkaller0: entered allmulticast mode
[  214.317114][T12879] netlink: 'syz.2.1825': attribute type 1 has an invalid length.
[  214.346111][T12879] bond15: (slave bridge7): making interface the new active one
[  214.349975][T12879] bond15: (slave bridge7): Enslaving as an active interface with an up link
[  214.361755][T12880] bond15: (slave bridge8): Enslaving as an active interface with a down link
[  214.583315][T12906] macsec0: entered promiscuous mode
[  214.588427][T12906] macsec0: entered allmulticast mode
[  214.647507][T12905] validate_nla: 1 callbacks suppressed
[  214.647518][T12905] netlink: 'syz.0.1830': attribute type 10 has an invalid length.
[  214.744495][T12912] netlink: 'syz.0.1832': attribute type 1 has an invalid length.
[  214.749494][T12912] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1832'.
[  214.784710][T12914] netlink: 'syz.0.1833': attribute type 1 has an invalid length.
[  214.787673][T12914] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1833'.
[  215.006611][T12923] netlink: 'syz.0.1836': attribute type 13 has an invalid length.
[  215.014585][T12923] netlink: 'syz.0.1836': attribute type 13 has an invalid length.
[  215.017658][ T5505] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  215.020588][ T5505] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  215.024091][ T5505] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  215.027309][ T5505] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  215.393892][T12938] netlink: 'syz.2.1841': attribute type 83 has an invalid length.
[  216.070633][    C1] net_ratelimit: 1 callbacks suppressed
[  216.070644][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  216.167811][T12953] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  216.171588][T12953] mac80211_hwsim hwsim19 syzkaller0: entered promiscuous mode
[  216.174288][T12953] mac80211_hwsim hwsim19 syzkaller0: entered allmulticast mode
[  216.188053][T12957] bridge9: entered promiscuous mode
[  216.190022][T12957] bridge9: entered allmulticast mode
[  216.219761][T12958] bridge10: entered promiscuous mode
[  216.222757][T12958] bridge10: entered allmulticast mode
[  216.265209][T12963] SET target dimension over the limit!
[  216.473388][T12991] netlink: 'syz.0.1856': attribute type 5 has an invalid length.
[  216.476212][T12992] netlink: 'syz.0.1856': attribute type 5 has an invalid length.
[  216.482969][T12992] geneve5: entered promiscuous mode
[  216.484952][T12992] geneve5: entered allmulticast mode
[  216.488051][ T5505] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 256 - 0
[  216.493232][ T5505] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 256 - 0
[  216.502242][ T5505] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 256 - 0
[  216.510752][ T5505] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 256 - 0
[  216.534426][T12986]  speed is unknown, defaulting to 1000
[  216.819086][T13024] netlink: 'syz.0.1863': attribute type 30 has an invalid length.
[  216.910036][T13029] 8021q: adding VLAN 0 to HW filter on device bond26
[  216.921837][T13029] bond26: entered promiscuous mode
[  216.923678][T13029] bond26: entered allmulticast mode
[  216.929647][T13029] 8021q: adding VLAN 0 to HW filter on device bond26
[  216.934123][T13029] team0: Port device bond26 added
[  216.937370][T13029] team_slave_1: entered promiscuous mode
[  216.940725][T13029] team0: Port device team_slave_1 removed
[  216.949988][T13029] team_slave_1: entered allmulticast mode
[  216.953533][T13029] bond26: (slave team_slave_1): Enslaving as an active interface with an up link
[  217.046157][T12986]  speed is unknown, defaulting to 1000
[  217.110725][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  217.952102][T13073] __nla_validate_parse: 11 callbacks suppressed
[  217.952115][T13073] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1876'.
[  217.987864][T13073] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1876'.
[  218.045569][T13074] sctp: [Deprecated]: syz.1.1876 (pid 13074) Use of int in maxseg socket option.
[  218.045569][T13074] Use struct sctp_assoc_value instead
[  218.150567][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  218.503551][T13100] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1882'.
[  218.506733][T13100] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1882'.
[  218.514321][T13100] batadv1: entered promiscuous mode
[  218.516174][T13100] batadv1: entered allmulticast mode
[  218.518534][T13100] 8021q: adding VLAN 0 to HW filter on device batadv1
[  218.524859][T13100] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1882'.
[  218.624639][T13109] netlink: 'syz.0.1885': attribute type 1 has an invalid length.
[  218.627245][T13109] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1885'.
[  218.731151][T13123] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1890'.
[  218.770957][T13123] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1890'.
[  218.819763][T13132] bond27: (slave vxcan9): The slave device specified does not support setting the MAC address
[  218.823811][T13132] bond27: (slave vxcan9): Error -95 calling set_mac_address
[  218.925020][T13138] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input5
[  218.944675][T13138] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1893'.
[  219.064544][T13149] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1895'.
[  219.190683][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  219.657515][T13175] openvswitch: netlink: IPv4 frag type 127 is out of range max 2
[  219.739604][T13178] bond16: option active_slave: mode dependency failed, not supported in mode balance-xor(2)
[  219.744701][T13178] bond16 (unregistering): Released all slaves
[  220.048628][T13186] validate_nla: 5 callbacks suppressed
[  220.048638][T13186] netlink: 'syz.0.1900': attribute type 4 has an invalid length.
[  220.230844][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  220.271051][T13200] netlink: 'syz.1.1903': attribute type 29 has an invalid length.
[  220.280113][T13200] syzkaller0: entered promiscuous mode
[  220.282959][T13200] syzkaller0: entered allmulticast mode
[  220.370077][T13203] netlink: 'syz.1.1904': attribute type 1 has an invalid length.
[  220.391575][T13203] bond15: entered promiscuous mode
[  220.393941][T13203] bond15: entered allmulticast mode
[  220.396578][T13203] 8021q: adding VLAN 0 to HW filter on device bond15
[  220.499949][T13209] netlink: 'syz.1.1906': attribute type 10 has an invalid length.
[  220.513098][T13209] bond0: (slave dummy0): Releasing backup interface
[  220.516449][T13209] dummy0: left allmulticast mode
[  220.576434][T13213] veth0: entered promiscuous mode
[  220.579317][T13213] veth0_to_bond: entered promiscuous mode
[  220.674003][T13208] veth0_to_bond: left promiscuous mode
[  220.677247][T13208] veth0: left promiscuous mode
[  221.270722][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  221.469649][T13242] veth1_to_hsr: entered allmulticast mode
[  221.521075][T13246] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  221.582988][T13246] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  221.633830][T13246] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  221.648851][T13254] netlink: 'syz.1.1917': attribute type 2 has an invalid length.
[  221.688373][T13246] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  221.768622][ T5505] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  221.783697][ T5505] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  221.793899][ T5505] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  221.805738][ T5718] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  222.310757][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  222.518954][T13267] vlan0: entered promiscuous mode
[  222.523548][T13267] gretap0: entered promiscuous mode
[  222.551416][T13269] netlink: 'syz.1.1923': attribute type 3 has an invalid length.
[  222.565325][T13269] veth1_vlan: entered promiscuous mode
[  222.567905][T13269] macvtap1: entered promiscuous mode
[  222.569664][T13269] macvtap1: entered allmulticast mode
[  222.572337][T13269] veth1_vlan: entered allmulticast mode
[  222.583301][T13269] macvtap2: entered promiscuous mode
[  222.584987][T13269] macvtap2: entered allmulticast mode
[  222.930226][T13296] sctp: [Deprecated]: syz.0.1928 (pid 13296) Use of int in max_burst socket option.
[  222.930226][T13296] Use struct sctp_assoc_value instead
[  222.937019][T13296] sctp: [Deprecated]: syz.0.1928 (pid 13296) Use of int in max_burst socket option.
[  222.937019][T13296] Use struct sctp_assoc_value instead
[  223.110215][T13299] 8021q: adding VLAN 0 to HW filter on device bond0
[  223.116992][T13299] 8021q: adding VLAN 0 to HW filter on device team0
[  223.126924][T13299] batman_adv: batadv0: Interface activated: dummy0
[  223.130293][T13299] batadv0: mtu less than device minimum
[  223.133562][T13299] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0)
[  223.137078][T13299] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0)
[  223.140584][T13299] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0)
[  223.144847][T13299] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0)
[  223.148507][T13299] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0)
[  223.152110][T13299] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0)
[  223.155644][T13299] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0)
[  223.173711][T13299] 8021q: adding VLAN 0 to HW filter on device batadv0
[  223.201491][T13299] batman_adv: batadv0: Interface activated: batadv_slave_0
[  223.213947][T13299] batman_adv: batadv0: Interface activated: batadv_slave_1
[  223.229594][ T8111]  speed is unknown, defaulting to 1000
[  223.235015][ T8111] sy2: Port: 1 Link ACTIVE
[  223.237885][   T89] bridge0: port 2(bridge_slave_1) entered blocking state
[  223.240084][   T89] bridge0: port 2(bridge_slave_1) entered listening state
[  223.251777][   T89] bridge0: port 1(veth0_virt_wifi) entered blocking state
[  223.254066][   T89] bridge0: port 1(veth0_virt_wifi) entered listening state
[  223.283685][T13303] __nla_validate_parse: 7 callbacks suppressed
[  223.283700][T13303] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1930'.
[  224.148109][T13365] 8021q: adding VLAN 0 to HW filter on device macvlan0
[  224.161469][ T5427] team_slave_0: entered promiscuous mode
[  224.242732][T13369]  speed is unknown, defaulting to 1000
[  224.286192][T13370] batman_adv: batadv0: Adding interface: ipvlan0
[  224.288251][T13370] batman_adv: batadv0: The MTU of interface ipvlan0 is too small (1500) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1532.
[  224.294962][T13370] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  224.298814][T13370] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  224.302517][T13370] batman_adv: batadv0: Not using interface ipvlan0 (retrying later): interface not active
[  224.441089][T13369]  speed is unknown, defaulting to 1000
[  224.550366][T13375] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1942'.
[  224.656062][T13379] sctp: [Deprecated]: syz.2.1944 (pid 13379) Use of struct sctp_assoc_value in delayed_ack socket option.
[  224.656062][T13379] Use struct sctp_sack_info instead
[  224.665641][T13379] sctp: [Deprecated]: syz.2.1944 (pid 13379) Use of struct sctp_assoc_value in delayed_ack socket option.
[  224.665641][T13379] Use struct sctp_sack_info instead
[  224.672688][T13379] Cannot find del_set index 8192 as target
[  224.722346][T13380] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1943'.
[  225.848083][T13405] netlink: 277 bytes leftover after parsing attributes in process `syz.1.1950'.
[  226.349120][T13421] net_ratelimit: 72 callbacks suppressed
[  226.349135][T13421] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  226.358529][T13422] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  226.460970][   T12] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01
[  226.470569][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  226.534513][T13434] netlink: 'syz.0.1957': attribute type 1 has an invalid length.
[  226.589927][T13436] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1957'.
[  226.971204][ T5718] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01
[  227.490694][ T5505] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01
[  227.510708][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  227.750699][   T54] Bluetooth: hci1: command 0x0405 tx timeout
[  228.000883][ T5505] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01
[  228.231392][ T1114] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  228.236244][  T799] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  229.039664][T13414] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  229.136127][T13448] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1959'.
[  229.282567][T13463]  speed is unknown, defaulting to 1000
[  229.481384][T13463]  speed is unknown, defaulting to 1000
[  229.564474][T13471] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1964'.
[  229.759562][T13482] bond28: entered promiscuous mode
[  229.763677][T13482] 8021q: adding VLAN 0 to HW filter on device bond28
[  229.830630][   T54] Bluetooth: hci1: command 0x0405 tx timeout
[  229.893326][T13492] xt_ipcomp: unknown flags 1D
[  230.037479][T13494]  speed is unknown, defaulting to 1000
[  230.271672][T13494]  speed is unknown, defaulting to 1000
[  230.430955][T13501] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT
[  230.763027][T13515] netlink: 'syz.0.1975': attribute type 4 has an invalid length.
[  230.812497][T13515] netlink: 'syz.0.1975': attribute type 4 has an invalid length.
[  230.819470][ T7929]  speed is unknown, defaulting to 1000
[  230.827590][  T799]  speed is unknown, defaulting to 1000
[  231.045422][T13533] IPVS: length: 15 != 8
[  231.169207][T13542] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1981'.
[  231.294274][T13544] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1982'.
[  231.443569][T13556] netlink: 'syz.1.1986': attribute type 3 has an invalid length.
[  231.498069][T13562] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1989'.
[  231.511682][T13562] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1989'.
[  231.524134][T13564] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1988'.
[  231.570815][ T5718] net_ratelimit: 15 callbacks suppressed
[  231.570826][ T5718] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01
[  231.639321][T13568] netlink: 80 bytes leftover after parsing attributes in process `syz.1.1990'.
[  231.655135][T13572] netlink: 180568 bytes leftover after parsing attributes in process `syz.2.1991'.
[  231.670687][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  231.748285][T13576] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  231.752085][T13576] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  231.801924][T13579] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  231.811342][T13579] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  231.814870][T13579] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  231.862266][T13585] x_tables: arp_tables: NFQUEUE target: not valid for this family
[  231.862858][T13586] x_tables: arp_tables: NFQUEUE target: not valid for this family
[  231.975434][T13600] netlink: 'syz.1.1998': attribute type 1 has an invalid length.
[  231.993870][T13600] 8021q: adding VLAN 0 to HW filter on device bond16
[  232.041133][T13600] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1998'.
[  232.048527][T13600] 8021q: adding VLAN 0 to HW filter on device batadv2
[  232.054005][T13600] bond16: (slave batadv2): making interface the new active one
[  232.057938][T13600] bond16: (slave batadv2): Enslaving as an active interface with an up link
[  232.081232][   T12] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01
[  232.591375][ T5665] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01
[  232.634281][   T34] audit: type=1804 audit(1778610439.989:7): pid=13624 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.2004" name="/newroot/734/cgroup.controllers" dev="tmpfs" ino=3770 res=1 errno=0
[  232.643576][   T34] audit: type=1800 audit(1778610439.989:8): pid=13625 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2004" name="cgroup.controllers" dev="tmpfs" ino=3770 res=0 errno=0
[  232.653318][   T34] audit: type=1800 audit(1778610439.989:9): pid=13624 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2004" name="cgroup.controllers" dev="tmpfs" ino=3770 res=0 errno=0
[  232.710820][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  232.746522][T13630] bridge22: entered promiscuous mode
[  232.748310][T13630] bridge22: entered allmulticast mode
[  232.752243][T13630] team0: Port device bridge22 added
[  232.762210][T13630] bridge23: entered promiscuous mode
[  232.765378][T13630] bridge23: entered allmulticast mode
[  232.769270][T13630] team0: Port device bridge23 added
[  232.773718][T13630] bridge0: port 3(team0) entered blocking state
[  232.777307][T13630] bridge0: port 3(team0) entered disabled state
[  232.779498][T13630] team0: entered allmulticast mode
[  232.782060][T13630] team_slave_0: entered allmulticast mode
[  232.783952][T13630] geneve1: entered allmulticast mode
[  232.793802][T13630] team0: left allmulticast mode
[  232.795504][T13630] team_slave_0: left allmulticast mode
[  232.797347][T13630] geneve1: left allmulticast mode
[  232.829339][T13632] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048)
[  233.046342][T13645] netlink: 'syz.0.2010': attribute type 10 has an invalid length.
[  233.049724][T13645] batman_adv: batadv0: Interface deactivated: dummy0
[  233.057639][T13645] batman_adv: batadv0: Removing interface: dummy0
[  233.073493][T13645] team0: Port device dummy0 added
[  233.075838][T13645] dummy0: entered promiscuous mode
[  233.141434][T13646] veth0: entered promiscuous mode
[  233.149593][T13646] bond0: entered promiscuous mode
[  233.157666][T13646] bond_slave_0: entered promiscuous mode
[  233.163648][T13646] syz_tun: entered promiscuous mode
[  233.223170][T13649]  speed is unknown, defaulting to 1000
[  233.261529][T13644] bond0: left promiscuous mode
[  233.263078][T13644] bond_slave_0: left promiscuous mode
[  233.265040][T13644] syz_tun: left promiscuous mode
[  233.270955][T13644] veth0: left promiscuous mode
[  233.352275][T13659] netlink: 'syz.2.2014': attribute type 13 has an invalid length.
[  233.417982][T13649]  speed is unknown, defaulting to 1000
[  233.511185][   T31] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  233.550207][T13674] bond16 (unregistering): Released all slaves
[  233.964995][T13691] veth0: entered promiscuous mode
[  233.967416][T13690] veth0: left promiscuous mode
[  234.072721][T13708] netlink: 'syz.0.2030': attribute type 1 has an invalid length.
[  234.085619][T13708] bond29: entered promiscuous mode
[  234.087440][T13708] bond29: entered allmulticast mode
[  234.089408][T13708] 8021q: adding VLAN 0 to HW filter on device bond29
[  234.183117][T13721] xt_TPROXY: Can be used only with -p tcp or -p udp
[  234.184547][T13722] xt_TPROXY: Can be used only with -p tcp or -p udp
[  234.287205][T13721] __nla_validate_parse: 13 callbacks suppressed
[  234.287216][T13721] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2035'.
[  234.371776][T13738] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2039'.
[  234.374619][T13738] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2039'.
[  234.463516][T13748] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2043'.
[  234.610041][T13752] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2044'.
[  234.656941][T13752] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2044'.
[  234.660839][T13752] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  234.681317][T13752] batman_adv: batadv0: Removing interface: ipvlan0
[  234.692973][T13752] batman_adv: batadv0: Removing interface: batadv_slave_1
[  234.766672][   T34] audit: type=1800 audit(1778610442.119:10): pid=13759 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2046" name="blkio.bfq.time_recursive" dev="tmpfs" ino=3884 res=0 errno=0
[  235.120306][T13776] 8021q: adding VLAN 0 to HW filter on device bond0
[  235.135890][T13776] 8021q: adding VLAN 0 to HW filter on device batadv0
[  235.167540][T13776] veth1_to_hsr: left allmulticast mode
[  235.170873][T13776] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  235.174289][T13776] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  235.211487][ T1114] bridge0: port 1(veth0_virt_wifi) entered blocking state
[  235.213781][ T1114] bridge0: port 1(veth0_virt_wifi) entered forwarding state
[  235.230050][ T5674] syz0: Port: 1 Link ACTIVE
[  235.235932][T13781] macvtap0: entered promiscuous mode
[  235.237676][T13781] team0: entered promiscuous mode
[  235.239448][T13781] geneve1: entered promiscuous mode
[  235.245539][T13781] macvtap0: entered allmulticast mode
[  235.247357][T13781] team0: entered allmulticast mode
[  235.249096][T13781] team_slave_0: entered allmulticast mode
[  235.251573][T13781] geneve1: entered allmulticast mode
[  235.253348][T13781] dummy0: entered allmulticast mode
[  235.257488][T13781] 8021q: adding VLAN 0 to HW filter on device macvtap0
[  235.264077][T13780] macvtap1: entered promiscuous mode
[  235.265872][T13780] macvtap1: entered allmulticast mode
[  235.341909][T13785] netlink: 'syz.0.2055': attribute type 2 has an invalid length.
[  235.345901][T13785] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2055'.
[  235.392266][T13791] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2056'.
[  235.406069][T13787] bridge9: entered promiscuous mode
[  235.408138][T13787] bridge9: entered allmulticast mode
[  235.448818][T13791] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2056'.
[  235.492631][T13804] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2059'.
[  235.527039][T13787] bridge9: entered promiscuous mode
[  235.533040][T13787] bridge9: entered allmulticast mode
[  235.582085][T13804] bond17: (slave bridge11): Enslaving as an active interface with an up link
[  235.637892][T13814] netlink: 'syz.2.2062': attribute type 1 has an invalid length.
[  235.843965][T13844] netlink: 'syz.0.2071': attribute type 1 has an invalid length.
[  235.848893][T13844] netlink: 'syz.0.2071': attribute type 1 has an invalid length.
[  235.921345][T13852] netlink: 'syz.0.2074': attribute type 1 has an invalid length.
[  235.939893][T13855] netlink: 'syz.2.2075': attribute type 13 has an invalid length.
[  235.958548][T13852] bond30 (unregistering): Released all slaves
[  236.028070][T13858] only policy match revision 0 supported
[  236.028082][T13858] unable to load match
[  236.082922][T13861] bond30: (slave vxcan9): The slave device specified does not support setting the MAC address
[  236.088838][T13861] bond30: (slave vxcan9): Error -95 calling set_mac_address
[  236.641314][ T8111] net_ratelimit: 45 callbacks suppressed
[  236.641325][ T8111] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  236.715039][T13903]  speed is unknown, defaulting to 1000
[  236.782134][T13905] syzkaller0: entered promiscuous mode
[  236.784329][T13905] syzkaller0: entered allmulticast mode
[  236.880689][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  236.890353][T13903]  speed is unknown, defaulting to 1000
[  237.483853][T13938] bond0: (slave syz_tun): Releasing backup interface
[  237.495720][T13938] dummy0: left allmulticast mode
[  237.538481][T13938] team0: Port device dummy0 removed
[  237.549998][T13938] bridge_slave_1: left allmulticast mode
[  237.555339][T13938] bridge_slave_1: left promiscuous mode
[  237.559474][T13938] bridge0: port 2(bridge_slave_1) entered disabled state
[  237.569403][T13938] bond0: (slave bond_slave_0): Releasing backup interface
[  237.582244][T13938] team_slave_0: left allmulticast mode
[  237.587521][T13938] team_slave_0: left promiscuous mode
[  237.597993][T13938] team0: Port device team_slave_0 removed
[  237.609170][T13938] bond26: (slave team_slave_1): Releasing backup interface
[  237.614537][T13938] team_slave_1: left allmulticast mode
[  237.616528][T13938] team_slave_1: left promiscuous mode
[  237.625911][T13938] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  237.632052][T13938] batman_adv: batadv0: Removing interface: batadv_slave_0
[  237.640996][T13938] veth0_virt_wifi: left allmulticast mode
[  237.643787][T13938] veth0_virt_wifi: left promiscuous mode
[  237.646456][T13938] bridge0: port 1(veth0_virt_wifi) entered disabled state
[  237.654686][T13938] geneve1: left promiscuous mode
[  237.657107][T13938] geneve1: left allmulticast mode
[  237.661239][T13938] team0: Port device geneve1 removed
[  237.665093][T13938] bond1: (slave bridge1): Releasing active interface
[  237.670206][T13938] bond8: (slave gretap1): Releasing active interface
[  237.678543][T13938] bond10: (slave geneve3): Releasing active interface
[  237.686671][T13938] bond11: (slave bridge5): Releasing active interface
[  237.689526][T13938] bond11: (slave bridge5): the permanent HWaddr of slave - fa:5e:a0:3a:c2:3e - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  237.696999][T13938] bond11: (slave gretap3): making interface the new active one
[  237.702418][T13938] bond11: (slave gretap3): Releasing active interface
[  237.709447][T13938] bond15: (slave bridge7): Releasing backup interface
[  237.715866][T13938] bond16: (slave erspan1): Releasing active interface
[  237.721650][T13938] bond19: (slave bridge20): Releasing backup interface
[  237.726633][T13938] bond20: (slave veth7): Releasing active interface
[  237.729514][T13938] bond20: (slave veth7): the permanent HWaddr of slave - 2a:f0:8c:81:4f:8e - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  237.738741][T13938] bond20: (slave veth9): Releasing active interface
[  237.745021][T13938] bond23: (slave bond24): Releasing backup interface
[  237.755896][T13938] team0: Port device bond26 removed
[  237.765885][T13938] team0: Port device bridge22 removed
[  237.775356][T13938] team0: Port device bridge23 removed
[  237.812423][T13948] validate_nla: 1 callbacks suppressed
[  237.812451][T13948] netlink: 'syz.0.2098': attribute type 1 has an invalid length.
[  237.816739][T13949] netlink: 'syz.0.2098': attribute type 1 has an invalid length.
[  237.910662][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  237.952780][T13959] netlink: 'syz.0.2101': attribute type 4 has an invalid length.
[  237.969268][T13959] netlink: 'syz.0.2101': attribute type 4 has an invalid length.
[  237.982537][T13956] veth11: entered allmulticast mode
[  237.996542][  T799]  speed is unknown, defaulting to 1000
[  238.004499][  T799]  speed is unknown, defaulting to 1000
[  238.030772][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  238.161752][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  238.258661][T13975] netlink: 'syz.1.2105': attribute type 2 has an invalid length.
[  238.711438][   T82] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  238.950591][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  239.338399][T14055] __nla_validate_parse: 18 callbacks suppressed
[  239.338409][T14055] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2128'.
[  239.344532][T14057] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2128'.
[  239.349378][T14055] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2128'.
[  239.358824][T14056]  speed is unknown, defaulting to 1000
[  239.437882][T14063] IPVS: sh: FWM 3 0x00000003 - no destination available
[  239.440288][T14062] IPVS: sh: FWM 3 0x00000003 - no destination available
[  239.442546][T14062] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  239.468305][T14061]  speed is unknown, defaulting to 1000
[  239.622488][T14056]  speed is unknown, defaulting to 1000
[  239.839784][T14084] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2134'.
[  239.894905][T14061]  speed is unknown, defaulting to 1000
[  240.053821][T14093] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2136'.
[  240.064658][T14089] netlink: 'syz.1.2135': attribute type 2 has an invalid length.
[  240.067317][T14089] netlink: 'syz.1.2135': attribute type 2 has an invalid length.
[  240.093061][T14093] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2136'.
[  240.288419][T14107] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2140'.
[  240.316837][T14107] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2140'.
[  240.327454][T14107] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2140'.
[  240.331008][T14107] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2140'.
[  240.917858][T14142] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[  240.920733][T14142] CPU: 1 UID: 0 PID: 14142 Comm: syz.1.2150 Not tainted syzkaller #0 PREEMPT(full) 
[  240.920747][T14142] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  240.920752][T14142] Call Trace:
[  240.920756][T14142]  <TASK>
[  240.920761][T14142]  dump_stack_lvl+0xe8/0x150
[  240.920775][T14142]  sysfs_warn_dup+0x8e/0xa0
[  240.920787][T14142]  sysfs_do_create_link_sd+0xc0/0x110
[  240.920799][T14142]  device_add_class_symlinks+0x1cf/0x240
[  240.920812][T14142]  device_add+0x475/0xbb0
[  240.920824][T14142]  wiphy_register+0x1fb1/0x2fe0
[  240.920841][T14142]  ? __pfx_wiphy_register+0x10/0x10
[  240.920849][T14142]  ? __pfx_netdev_run_todo+0x10/0x10
[  240.920859][T14142]  ? minstrel_ht_alloc+0x6e0/0x7e0
[  240.920872][T14142]  ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0
[  240.920888][T14142]  ieee80211_register_hw+0x3c53/0x4910
[  240.920902][T14142]  ? ieee80211_register_hw+0x1901/0x4910
[  240.920922][T14142]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  240.920932][T14142]  ? __asan_memset+0x22/0x50
[  240.920942][T14142]  ? __hrtimer_setup+0x1b7/0x260
[  240.920951][T14142]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  240.920963][T14142]  mac80211_hwsim_new_radio+0x3327/0x57e0
[  240.920984][T14142]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  240.920993][T14142]  ? kstrndup+0xbf/0x160
[  240.921005][T14142]  hwsim_new_radio_nl+0xe20/0x26e0
[  240.921013][T14142]  ? unwind_next_frame+0xa6/0x2550
[  240.921030][T14142]  ? is_bpf_text_address+0x26/0x2b0
[  240.921044][T14142]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  240.921054][T14142]  ? __kernel_text_address+0xd/0x30
[  240.921064][T14142]  ? unwind_get_return_address+0x4d/0x90
[  240.921073][T14142]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  240.921084][T14142]  ? arch_stack_walk+0xfb/0x150
[  240.921098][T14142]  ? stack_trace_save+0xa9/0x100
[  240.921108][T14142]  ? __pfx_stack_trace_save+0x10/0x10
[  240.921120][T14142]  ? stack_depot_save_flags+0x33/0x810
[  240.921136][T14142]  ? __nla_validate_parse+0x2480/0x2dc0
[  240.921146][T14142]  ? ____sys_sendmsg+0x972/0x9f0
[  240.921157][T14142]  ? ___sys_sendmsg+0x2a5/0x360
[  240.921174][T14142]  ? __pfx___nla_validate_parse+0x10/0x10
[  240.921192][T14142]  ? rcu_is_watching+0x15/0xb0
[  240.921201][T14142]  ? trace_kmalloc+0x2a/0xf0
[  240.921214][T14142]  ? __nla_parse+0x40/0x60
[  240.921225][T14142]  ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0
[  240.921234][T14142]  ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0
[  240.921246][T14142]  genl_family_rcv_msg_doit+0x22a/0x330
[  240.921257][T14142]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  240.921270][T14142]  ? bpf_lsm_capable+0x9/0x20
[  240.921277][T14142]  ? security_capable+0x7e/0x2c0
[  240.921289][T14142]  genl_rcv_msg+0x61c/0x7a0
[  240.921300][T14142]  ? __pfx_genl_rcv_msg+0x10/0x10
[  240.921307][T14142]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  240.921322][T14142]  netlink_rcv_skb+0x232/0x4b0
[  240.921333][T14142]  ? __pfx_genl_rcv_msg+0x10/0x10
[  240.921342][T14142]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  240.921359][T14142]  ? down_read+0x270/0x2e0
[  240.921366][T14142]  ? genl_rcv+0xd/0x40
[  240.921375][T14142]  genl_rcv+0x28/0x40
[  240.921382][T14142]  netlink_unicast+0x75c/0x8e0
[  240.921396][T14142]  netlink_sendmsg+0x813/0xb40
[  240.921411][T14142]  ? __pfx_netlink_sendmsg+0x10/0x10
[  240.921423][T14142]  ? aa_sock_msg_perm+0xf1/0x1b0
[  240.921434][T14142]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  240.921446][T14142]  ____sys_sendmsg+0x972/0x9f0
[  240.921456][T14142]  ? __might_fault+0xaf/0x130
[  240.921469][T14142]  ? __pfx_____sys_sendmsg+0x10/0x10
[  240.921483][T14142]  ? import_iovec+0x73/0xa0
[  240.921495][T14142]  ___sys_sendmsg+0x2a5/0x360
[  240.921506][T14142]  ? __lock_acquire+0x6b5/0x2cf0
[  240.921516][T14142]  ? __pfx____sys_sendmsg+0x10/0x10
[  240.921530][T14142]  ? futex_wait+0x2a2/0x390
[  240.921550][T14142]  ? __fget_files+0x2a/0x420
[  240.921559][T14142]  ? __fget_files+0x3a0/0x420
[  240.921572][T14142]  __x64_sys_sendmsg+0x1bd/0x2a0
[  240.921584][T14142]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  240.921599][T14142]  ? rcu_is_watching+0x15/0xb0
[  240.921611][T14142]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  240.921619][T14142]  do_syscall_64+0x15f/0xf80
[  240.921626][T14142]  ? trace_irq_disable+0x3b/0x140
[  240.921649][T14142]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  240.921698][T14142] RIP: 0033:0x7fc1caf9cdd9
[  240.921708][T14142] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  240.921715][T14142] RSP: 002b:00007fc1cbdc9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  240.921724][T14142] RAX: ffffffffffffffda RBX: 00007fc1cb215fa0 RCX: 00007fc1caf9cdd9
[  240.921730][T14142] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000009
[  240.921735][T14142] RBP: 00007fc1cb032d69 R08: 0000000000000000 R09: 0000000000000000
[  240.921741][T14142] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  240.921746][T14142] R13: 00007fc1cb216038 R14: 00007fc1cb215fa0 R15: 00007ffc3a40dc78
[  240.921760][T14142]  </TASK>
[  241.251475][T14125] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  241.441962][T14156] bond0 (unregistering): Released all slaves
[  241.748611][T14181] net_ratelimit: 12 callbacks suppressed
[  241.748622][T14181] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  242.713525][  T799] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  242.768952][T14204] tipc: Can't bind to reserved service type 2
[  242.799942][T14218] netlink: 'syz.1.2173': attribute type 1 has an invalid length.
[  242.830302][T14218] 8021q: adding VLAN 0 to HW filter on device bond19
[  242.898452][T14226] vlan5: entered promiscuous mode
[  242.901234][T14226] bond19: entered promiscuous mode
[  242.903246][T14226] vlan5: entered allmulticast mode
[  242.906692][T14226] bond19: entered allmulticast mode
[  242.930549][T14226] bond19: (slave bridge12): making interface the new active one
[  242.933088][T14226] bridge12: entered promiscuous mode
[  242.942404][T14226] bridge12: entered allmulticast mode
[  242.945916][T14226] bond19: (slave bridge12): Enslaving as an active interface with an up link
[  242.956045][T14235] netlink: 'syz.0.2178': attribute type 32 has an invalid length.
[  242.969216][T14235] bond0: option coupled_control: invalid value (12)
[  242.973041][T14235] bond0 (unregistering): Released all slaves
[  243.071491][T14251] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  243.104010][T14251] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  243.136896][T14251] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  243.196434][T14251] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  243.258758][   T13] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  243.273559][   T13] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  243.287799][   T13] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  243.309578][   T13] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  243.402716][T14277] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  243.411862][T14277] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  243.657673][T14305] netlink: 'syz.1.2196': attribute type 1 has an invalid length.
[  243.680396][T14305] 8021q: adding VLAN 0 to HW filter on device bond20
[  243.815875][T14327] xt_hashlimit: size too large, truncated to 1048576
[  243.818218][T14328] xt_hashlimit: size too large, truncated to 1048576
[  243.896544][T14329] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048)
[  243.899609][T14327] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048)
[  243.997093][T14338] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  244.000134][T14338] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  244.242536][T14345] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan3
[  244.246076][T14345] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  244.250347][T14345] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan2
[  244.255801][T14345] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  244.276873][T14345] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan3
[  244.282366][T14345] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  244.298420][T14345] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan2
[  244.303465][T14345] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  244.472244][   T82] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  244.779741][T14358] netlink: 'syz.0.2207': attribute type 1 has an invalid length.
[  244.820021][T14358] bond0: entered promiscuous mode
[  244.827087][T14358] 8021q: adding VLAN 0 to HW filter on device bond0
[  244.832404][T14361] netlink: 'syz.1.2208': attribute type 29 has an invalid length.
[  244.835067][T14361] __nla_validate_parse: 24 callbacks suppressed
[  244.835075][T14361] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2208'.
[  244.846829][T14358] bond0: Error: Cannot enslave bond to itself.
[  244.873381][T14358] 8021q: adding VLAN 0 to HW filter on device bond0
[  244.881013][T14358] bond0: (slave vti1): The slave device specified does not support setting the MAC address
[  244.884217][T14358] bond0: (slave vti1): Setting fail_over_mac to active for active-backup mode
[  244.889688][T14358] bond0: (slave vti1): making interface the new active one
[  244.893727][T14358] vti1: entered promiscuous mode
[  244.896274][T14358] bond0: (slave vti1): Enslaving as an active interface with an up link
[  244.907015][T14366] netlink: 'syz.1.2210': attribute type 16 has an invalid length.
[  244.909360][T14366] netlink: 'syz.1.2210': attribute type 3 has an invalid length.
[  244.913965][T14366] netlink: 64066 bytes leftover after parsing attributes in process `syz.1.2210'.
[  244.957039][T14368] netlink: 'syz.0.2211': attribute type 13 has an invalid length.
[  244.959645][T14368] netlink: 88 bytes leftover after parsing attributes in process `syz.0.2211'.
[  244.963656][T14368] IPVS: set_ctl: invalid protocol: 47 100.1.1.1:20002
[  244.967107][T14368] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2211'.
[  244.978033][T14368] syz_tun (unregistering): left allmulticast mode
[  245.070182][T14374] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check.
[  245.148286][T14376] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  245.151715][T14376] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  245.192251][T14376] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  245.195652][T14376] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  245.237155][T14376] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  245.240596][T14376] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  245.291205][T14376] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  245.295484][T14376] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  245.359995][   T13] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  245.364218][   T13] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 256 - 0
[  245.378996][   T13] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  245.383127][   T13] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 256 - 0
[  245.396580][   T12] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  245.399971][   T12] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 256 - 0
[  245.413136][   T12] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  245.416588][   T12] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 256 - 0
[  245.624253][T14389] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2216'.
[  245.627664][T14389] nbd: socks must be embedded in a SOCK_ITEM attr
[  245.637227][T14389] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2216'.
[  245.641919][T14389] nbd: socks must be embedded in a SOCK_ITEM attr
[  245.705306][T14393] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  245.715888][T14393] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  246.105572][T14393] mac80211_hwsim hwsim19 syzkaller0: left promiscuous mode
[  246.108304][T14393] mac80211_hwsim hwsim19 syzkaller0: left allmulticast mode
[  246.112895][T14393] macsec0: left promiscuous mode
[  246.114998][T14393] macsec0: left allmulticast mode
[  246.121141][T14393] ip6tnl6: left allmulticast mode
[  246.153674][T14393] geneve5: left promiscuous mode
[  246.155821][T14393] geneve5: left allmulticast mode
[  246.166562][T14393] bond26: left promiscuous mode
[  246.171690][T14393] bond26: left allmulticast mode
[  246.179890][T14393] batadv1: left promiscuous mode
[  246.185207][T14393] batadv1: left allmulticast mode
[  246.210110][T14393] bond28: left promiscuous mode
[  246.220947][T14393] bridge22: left allmulticast mode
[  246.227588][T14393] bridge23: left allmulticast mode
[  246.234769][T14393] bond29: left promiscuous mode
[  246.236910][T14393] bond29: left allmulticast mode
[  246.243299][T14393] team0: left allmulticast mode
[  246.247923][T14393] team0: left promiscuous mode
[  246.250168][T14393] macvtap0: left promiscuous mode
[  246.253337][T14393] macvtap0: left allmulticast mode
[  246.260767][T14393] bond0: left promiscuous mode
[  246.268822][T14393] vti1: left promiscuous mode
[  246.282784][ T5427]  speed is unknown, defaulting to 1000
[  246.284939][ T5427] sy2: Port: 1 Link DOWN
[  246.324903][   T13] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  246.327920][   T13] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 256 - 0
[  246.331700][   T13] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  246.334820][   T13] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 256 - 0
[  246.338037][   T13] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  246.345015][   T13] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 256 - 0
[  246.347970][   T13] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  246.351114][   T13] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 256 - 0
[  246.374862][T14399] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2219'.
[  246.377902][T14399] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2219'.
[  246.381004][T14399] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2219'.
[  246.384387][T14399] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2219'.
[  246.396520][T14403] netlink: 'syz.1.2220': attribute type 29 has an invalid length.
[  246.411155][T14403] : entered promiscuous mode
[  246.574373][T14418] netlink: 'syz.1.2225': attribute type 10 has an invalid length.
[  246.672754][T14433] bond16: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0)
[  246.677367][T14433] bond16 (unregistering): Released all slaves
[  249.516491][T14413] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  249.622062][T14449] IPVS: length: 35 != 24
[  249.691475][T14456] netlink: 'syz.0.2234': attribute type 11 has an invalid length.
[  249.744989][T14453] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  249.750174][T14453] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  249.773118][T14460] geneve7: entered promiscuous mode
[  249.775600][T14460] geneve7: entered allmulticast mode
[  249.782154][   T13] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  249.785177][   T13] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  249.791915][   T13] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  249.796867][   T13] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  249.996470][T14474] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan3
[  250.000395][T14474] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  250.005844][T14474] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan2
[  250.009949][T14474] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  250.038676][T14474] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan3
[  250.044328][T14474] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  250.059137][T14470] __nla_validate_parse: 37 callbacks suppressed
[  250.059154][T14470] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2238'.
[  250.065928][T14474] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan2
[  250.070243][T14474] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  250.359939][T14493] netlink: 'syz.0.2245': attribute type 3 has an invalid length.
[  250.633693][T14498] netlink: 'syz.1.2247': attribute type 10 has an invalid length.
[  250.708125][T14503] netlink: 'syz.2.2246': attribute type 1 has an invalid length.
[  250.714240][T14503] netlink: 'syz.2.2246': attribute type 2 has an invalid length.
[  250.723524][T14503] netlink: 'syz.2.2246': attribute type 1 has an invalid length.
[  250.736603][T14503] netlink: 'syz.2.2246': attribute type 2 has an invalid length.
[  250.754523][T14503] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2246'.
[  250.774586][T14503] net_ratelimit: 3 callbacks suppressed
[  250.774597][T14503] openvswitch: netlink: Message has 16 unknown bytes.
[  250.860686][T14514] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2249'.
[  250.864930][T14515] netlink: 188 bytes leftover after parsing attributes in process `syz.1.2250'.
[  250.880030][T14515] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2250'.
[  250.886686][T14514] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  250.905213][T14514] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  250.947578][T14520] netlink: 'syz.2.2252': attribute type 4 has an invalid length.
[  250.978912][T14520] netlink: 'syz.2.2252': attribute type 4 has an invalid length.
[  251.033312][T14524] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  251.035833][T14525] syzkaller0: entered promiscuous mode
[  251.041308][T14525] syzkaller0: entered allmulticast mode
[  251.060974][T14524] tipc: Resetting bearer <eth:syzkaller0>
[  251.081819][T14524] tipc: Disabling bearer <eth:syzkaller0>
[  251.506169][T14535] bond0: (slave vti1): Releasing backup interface
[  251.622660][T14551] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2258'.
[  251.712931][T14557]  speed is unknown, defaulting to 1000
[  251.750089][T14558] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2263'.
[  251.806972][T14560] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2264'.
[  251.833471][T14560] macvtap0: entered promiscuous mode
[  251.886824][T14570] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2266'.
[  251.924882][T14557]  speed is unknown, defaulting to 1000
[  251.949180][T14577] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2268'.
[  252.075041][T14585]  speed is unknown, defaulting to 1000
[  252.170561][T14592] netlink: 'syz.2.2272': attribute type 13 has an invalid length.
[  252.184632][T14591] IPVS: set_ctl: invalid protocol: 0 100.1.1.1:20002
[  252.478779][T14585]  speed is unknown, defaulting to 1000
[  252.619073][T14608] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  252.622818][T14608] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  252.678717][T14608] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  252.686375][T14608] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  252.737884][T14608] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  252.749491][T14608] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  252.827151][T14608] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  252.830279][T14608] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  252.891453][ T5665] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  252.894310][ T5665] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  252.906859][ T5718] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  252.910713][ T5718] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  252.919289][ T5718] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  252.922395][ T5718] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  252.937027][ T5718] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  252.942342][ T5718] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  253.648493][T14698] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT
[  253.786032][T14712] bond31: entered promiscuous mode
[  254.306910][T14739] : entered promiscuous mode
[  254.318642][T14739] openvswitch: : Dropping previously announced user features
[  254.969770][T14773] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  255.235846][T14776] validate_nla: 3 callbacks suppressed
[  255.235858][T14776] netlink: 'syz.0.2321': attribute type 9 has an invalid length.
[  255.240987][T14777] netlink: 'syz.0.2321': attribute type 9 has an invalid length.
[  257.718427][T14779] ip6gre2: entered promiscuous mode
[  257.721195][T14779] ip6gre2: entered allmulticast mode
[  257.736523][T14782] netlink: 'syz.2.2323': attribute type 28 has an invalid length.
[  257.777446][T14784] __nla_validate_parse: 28 callbacks suppressed
[  257.777462][T14784] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2324'.
[  257.802964][T14787] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2325'.
[  257.870371][T14795] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  258.204513][T14832] netlink: 'syz.0.2331': attribute type 11 has an invalid length.
[  258.221830][T14835] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2330'.
[  258.247661][T14835] openvswitch: : Dropping previously announced user features
[  258.285121][T14839] mac80211_hwsim hwsim4 syzkaller0: entered promiscuous mode
[  258.287668][T14839] mac80211_hwsim hwsim4 syzkaller0: entered allmulticast mode
[  258.293658][T14839] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2333'.
[  258.330255][T14844] netlink: 'syz.2.2334': attribute type 1 has an invalid length.
[  258.344779][T14844] bond16: entered promiscuous mode
[  258.346593][T14844] bond16: entered allmulticast mode
[  258.348581][T14844] 8021q: adding VLAN 0 to HW filter on device bond16
[  258.402206][T14856] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2338'.
[  258.407751][T14856] veth1_to_team: entered promiscuous mode
[  258.410126][T14856] gretap0: entered promiscuous mode
[  258.414394][T14856] hsr1: entered promiscuous mode
[  258.418157][T14858] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2339'.
[  258.469599][T14864] bond0: Master is either lo or non-ether device
[  261.111361][ T1382] ieee802154 phy1 wpan1: encryption failed: -22
[  261.484285][T14866] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  261.666227][T14899] netlink: 'syz.2.2349': attribute type 6 has an invalid length.
[  261.669294][T14899] netlink: 'syz.2.2349': attribute type 7 has an invalid length.
[  261.673631][T14899] netlink: 'syz.2.2349': attribute type 8 has an invalid length.
[  261.678674][T14899] netlink: 'syz.2.2349': attribute type 15 has an invalid length.
[  261.682751][T14900] netlink: 'syz.2.2349': attribute type 6 has an invalid length.
[  261.685365][T14900] netlink: 'syz.2.2349': attribute type 7 has an invalid length.
[  261.687886][T14900] netlink: 'syz.2.2349': attribute type 8 has an invalid length.
[  261.690734][T14900] netlink: 'syz.2.2349': attribute type 15 has an invalid length.
[  261.693394][T14897] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2348'.
[  261.697400][T14897] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2348'.
[  261.712311][T14897] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2348'.
[  261.715397][T14897] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2348'.
[  261.817334][T14912] netlink: 'syz.2.2354': attribute type 10 has an invalid length.
[  261.830826][T14912] geneve1: left promiscuous mode
[  261.835577][T14912] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check.
[  261.956165][T14923] netlink: 'syz.2.2356': attribute type 4 has an invalid length.
[  262.167049][T14930] bridge0: port 1(veth0_virt_wifi) entered disabled state
[  262.399173][T14930] macvtap0: left promiscuous mode
[  262.405362][T14930] macsec0: left promiscuous mode
[  262.410706][T14930] macsec0: left allmulticast mode
[  262.415077][T14930] mac80211_hwsim hwsim4 wlan0: left promiscuous mode
[  262.421990][T14930] mac80211_hwsim hwsim4 wlan0: left allmulticast mode
[  262.426891][T14930] bond3: left promiscuous mode
[  262.428965][T14930] vcan1: left promiscuous mode
[  262.431308][T14930] veth11: left allmulticast mode
[  262.434111][T14930] veth13: left allmulticast mode
[  262.437137][T14930] geneve3: left promiscuous mode
[  262.439576][T14930] bond6: left promiscuous mode
[  262.442503][T14930] erspan1: left promiscuous mode
[  262.444831][T14930] bond6: left allmulticast mode
[  262.447067][T14930] erspan1: left allmulticast mode
[  262.459237][T14930] macvlan2: left promiscuous mode
[  262.461294][T14930] macvlan2: left allmulticast mode
[  262.497615][T14930] batman_adv: batadv0: Interface deactivated: ip6gretap2
[  262.538871][T14930] bond10: left promiscuous mode
[  262.549790][T14930] bridge5: left promiscuous mode
[  262.566386][T14930] bond11: left promiscuous mode
[  262.573523][T14930] bond11: left allmulticast mode
[  262.625715][T14930] mac80211_hwsim hwsim4 syzkaller0: left promiscuous mode
[  262.629215][T14930] mac80211_hwsim hwsim4 syzkaller0: left allmulticast mode
[  262.633144][T14930] bond16: left promiscuous mode
[  262.635675][T14930] bond16: left allmulticast mode
[  262.639450][T14930] hsr1: left promiscuous mode
[  262.646598][ T5674] syz0: Port: 1 Link DOWN
[  262.649179][ T5718] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  262.652472][ T5718] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  262.658190][ T5718] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  262.664236][ T5718] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  262.957742][T14973] __nla_validate_parse: 14 callbacks suppressed
[  262.957754][T14973] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2368'.
[  265.818285][T14959] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  266.059041][T14991] netlink: 112 bytes leftover after parsing attributes in process `syz.0.2373'.
[  266.063255][T14992] netlink: 112 bytes leftover after parsing attributes in process `syz.0.2373'.
[  266.271209][T15007] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2376'.
[  266.389179][T15017] netlink: 96 bytes leftover after parsing attributes in process `syz.1.2378'.
[  266.407732][T15017] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2378'.
[  266.420721][T15017] 8021q: VLANs not supported on ip6_vti0
[  266.858562][T15049] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2387'.
[  266.883000][T15049] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2387'.
[  267.003118][T15060] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  267.094778][T15063] bridge0: port 1(wlan1) entered blocking state
[  267.109361][T15063] bridge0: port 1(wlan1) entered disabled state
[  267.112998][    C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  267.121822][T15063] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode
[  267.132520][T15063] mac80211_hwsim hwsim3 wlan1: entered promiscuous mode
[  267.205694][T15072]  speed is unknown, defaulting to 1000
[  267.209743][T15075] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2391'.
[  267.217658][T15069] validate_nla: 5 callbacks suppressed
[  267.217672][T15069] netlink: 'syz.1.2393': attribute type 1 has an invalid length.
[  267.228502][T15069] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2393'.
[  267.232264][T15069] netlink: 'syz.1.2393': attribute type 21 has an invalid length.
[  267.311549][T15078] xt_hashlimit: size too large, truncated to 1048576
[  267.558427][T15072]  speed is unknown, defaulting to 1000
[  267.687096][T15098] netlink: 'syz.2.2398': attribute type 1 has an invalid length.
[  267.751425][T15098] bond17: (slave bridge9): making interface the new active one
[  267.757165][T15098] bond17: (slave bridge9): Enslaving as an active interface with an up link
[  267.771776][T15098] bond17: (slave vlan0): Opening slave failed
[  268.000319][T15108] openvswitch: netlink: Flow key attr not present in new flow.
[  268.106490][T15121] netlink: 'syz.0.2404': attribute type 1 has an invalid length.
[  268.160294][T15121] workqueue: Failed to create a rescuer kthread for wq "bond32": -EINTR
[  268.160803][    C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  268.216682][T15128] __nla_validate_parse: 4 callbacks suppressed
[  268.216694][T15128] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2405'.
[  268.239509][T15131] netlink: 212328 bytes leftover after parsing attributes in process `syz.2.2406'.
[  268.248613][T15131] netlink: Unknown conntrack attr (type=2304, max=9)
[  268.297596][T15142] netlink: 'syz.1.2409': attribute type 3 has an invalid length.
[  268.300606][T15142] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2409'.
[  268.427019][T15160] netlink: 'syz.1.2412': attribute type 58 has an invalid length.
[  268.458381][T15160] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2412'.
[  268.520308][T15175] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2416'.
[  268.661989][T15181] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2419'.
[  268.667003][T15181] netlink: 'syz.0.2419': attribute type 1 has an invalid length.
[  268.696886][T15181]  speed is unknown, defaulting to 1000
[  268.880856][T15181]  speed is unknown, defaulting to 1000
[  269.017456][T15193] hmac(sha224: entered promiscuous mode
[  269.076973][T15195] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2421'.
[  269.190947][    C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  269.201510][T15204] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2423'.
[  269.204590][T15204] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2423'.
[  269.322688][T15214] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2427'.
[  269.698454][T15250] mac80211_hwsim hwsim19 syzkaller0: entered promiscuous mode
[  269.703743][T15250] mac80211_hwsim hwsim19 syzkaller0: entered allmulticast mode
[  269.777439][T15263] netlink: 'syz.1.2443': attribute type 11 has an invalid length.
[  269.787500][T15263] netlink: 'syz.1.2443': attribute type 11 has an invalid length.
[  269.797863][T15263] netlink: 'syz.1.2443': attribute type 11 has an invalid length.
[  270.012234][T15285] mac80211_hwsim hwsim4 syzkaller0: entered promiscuous mode
[  270.020042][T15285] mac80211_hwsim hwsim4 syzkaller0: entered allmulticast mode
[  270.194444][T15297] bridge0: port 1(veth0_virt_wifi) entered blocking state
[  270.196875][T15297] bridge0: port 1(veth0_virt_wifi) entered disabled state
[  270.199361][T15297] veth0_virt_wifi: entered allmulticast mode
[  270.203461][T15297] veth0_virt_wifi: entered promiscuous mode
[  270.208056][T15297] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  270.211983][T15297] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  270.230875][    C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  270.263237][T15297] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  270.269587][T15297] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  270.319814][T15297] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  270.324549][T15297] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  270.368116][T15297] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  270.373041][T15297] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  270.463531][T15313] 8021q: adding VLAN 0 to HW filter on device bond0
[  270.469898][T15313] 8021q: adding VLAN 0 to HW filter on device batadv0
[  270.515405][T15313] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  270.519932][T15313] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  270.529951][T15313] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  270.564301][ T1131] bridge0: port 1(veth0_virt_wifi) entered blocking state
[  270.567451][ T1131] bridge0: port 1(veth0_virt_wifi) entered forwarding state
[  270.578851][ T5427] syz0: Port: 1 Link ACTIVE
[  270.604822][   T13] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  270.608128][   T13] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  270.630078][   T13] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  270.633792][   T13] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  270.653042][ T5665] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  270.656592][ T5665] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  270.669594][ T5665] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  270.673617][ T5665] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  271.280791][    C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  272.320681][    C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  273.360686][    C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  273.897742][T15326] __nla_validate_parse: 5 callbacks suppressed
[  273.897756][T15326] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2458'.
[  273.940388][T15330] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2460'.
[  274.016510][T15337] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2460'.
[  274.036455][T15338] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2461'.
[  274.061241][T15338] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2461'.
[  274.084689][T15340] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2463'.
[  274.087786][T15340] openvswitch: netlink: Invalid VLAN frame
[  274.091721][T15340] siw: device registration error -23
[  274.094898][T15340] sctp: [Deprecated]: syz.0.2463 (pid 15340) Use of int in max_burst socket option.
[  274.094898][T15340] Use struct sctp_assoc_value instead
[  274.132867][T15346] syzkaller1: tun_chr_ioctl cmd 35111
[  274.136672][T15346] mac80211_hwsim hwsim19 syzkaller0: left promiscuous mode
[  274.139021][T15346] mac80211_hwsim hwsim19 syzkaller0: left allmulticast mode
[  274.194799][T15351] IPv6: NLM_F_CREATE should be specified when creating new route
[  274.197435][T15351] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  274.200114][T15351] IPv6: NLM_F_CREATE should be set when creating new route
[  274.202680][T15351] IPv6: NLM_F_CREATE should be set when creating new route
[  274.205102][T15351] IPv6: NLM_F_CREATE should be set when creating new route
[  274.207550][T15352] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  274.235782][T15352] validate_nla: 62 callbacks suppressed
[  274.235796][T15352] netlink: 'syz.0.2467': attribute type 10 has an invalid length.
[  274.244792][T15352] team0: Port device dummy0 added
[  274.246576][T15352] dummy0: left promiscuous mode
[  274.248487][T15351] netlink: 'syz.0.2467': attribute type 10 has an invalid length.
[  274.256671][T15351] team0: Port device dummy0 removed
[  274.299576][T15354] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2468'.
[  274.316026][T15354] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check.
[  274.323427][T15355] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check.
[  274.333168][T15354] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check.
[  274.357984][T15348] xt_CT: No such helper "snmp"
[  274.362858][T15348] netlink: 88 bytes leftover after parsing attributes in process `syz.2.2466'.
[  274.390977][    C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  274.436329][T15359] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.2470'.
[  274.439430][T15359] openvswitch: netlink: Message has 3 unknown bytes.
[  274.444784][T15359] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2470'.
[  274.478066][T15361] bridge24: port 1(veth15) entered blocking state
[  274.482662][T15361] bridge24: port 1(veth15) entered disabled state
[  274.486125][T15361] veth15: entered allmulticast mode
[  274.489128][T15361] veth15: entered promiscuous mode
[  274.499910][T15361] bridge24: port 2(veth0_to_bond) entered blocking state
[  274.502633][T15361] bridge24: port 2(veth0_to_bond) entered disabled state
[  274.504991][T15361] veth0_to_bond: entered allmulticast mode
[  274.507673][T15361] veth0_to_bond: entered promiscuous mode
[  275.440768][    C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  275.453003][T15390] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check.
[  275.503022][T15395] geneve8: entered promiscuous mode
[  275.579131][T15404] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT
[  275.583573][T15404] netlink: 'syz.2.2483': attribute type 16 has an invalid length.
[  275.596149][T15401] syzkaller1: entered promiscuous mode
[  275.598541][T15401] syzkaller1: entered allmulticast mode
[  275.817258][T15415] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  275.820181][T15415] Bluetooth: hci2: Error when powering off device on rfkill (-4)
[  275.846246][T15415] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  275.851733][T15415] Bluetooth: hci1: Error when powering off device on rfkill (-4)
[  276.006292][T15430] xt_cgroup: path and classid specified
[  276.051972][T15434] netlink: 'syz.1.2491': attribute type 61 has an invalid length.
[  276.754238][T15472] bond33 (unregistering): Released all slaves
[  276.900035][T15491] sctp: [Deprecated]: syz.0.2506 (pid 15491) Use of struct sctp_assoc_value in delayed_ack socket option.
[  276.900035][T15491] Use struct sctp_sack_info instead
[  276.906658][T15491] sctp: [Deprecated]: syz.0.2506 (pid 15491) Use of struct sctp_assoc_value in delayed_ack socket option.
[  276.906658][T15491] Use struct sctp_sack_info instead
[  277.268803][T15526] netlink: 'syz.2.2515': attribute type 1 has an invalid length.
[  277.313230][T15526] 8021q: adding VLAN 0 to HW filter on device bond20
[  277.319735][T15526] bond19: (slave bond20): making interface the new active one
[  277.323677][T15526] bond19: (slave bond20): Enslaving as an active interface with an up link
[  277.331884][T15526] 8021q: adding VLAN 0 to HW filter on device bond19
[  277.475398][T15532]  speed is unknown, defaulting to 1000
[  277.510810][    C1] net_ratelimit: 2 callbacks suppressed
[  277.510822][    C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  277.529550][T15539] netlink: 'syz.2.2516': attribute type 1 has an invalid length.
[  277.581595][T15541] 8021q: adding VLAN 0 to HW filter on device batadv0
[  277.624713][T15541] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check.
[  277.630086][ T5674]  speed is unknown, defaulting to 1000
[  277.634563][ T5674] sy2: Port: 1 Link ACTIVE
[  277.641057][ T5922] bridge24: port 2(veth0_to_bond) entered blocking state
[  277.644637][ T5922] bridge24: port 2(veth0_to_bond) entered forwarding state
[  277.751817][T15549] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check.
[  277.757689][T15532]  speed is unknown, defaulting to 1000
[  277.885560][T15562] netlink: 'syz.0.2524': attribute type 1 has an invalid length.
[  277.968142][T15562] 8021q: adding VLAN 0 to HW filter on device bond33
[  278.125018][T15576] vlan6: entered promiscuous mode
[  278.128572][T15576] bridge0: entered promiscuous mode
[  278.179271][T15577] netlink: 'syz.1.2527': attribute type 4 has an invalid length.
[  278.449905][T15613] netlink: 'syz.1.2536': attribute type 1 has an invalid length.
[  278.455008][T15613] netlink: 'syz.1.2536': attribute type 1 has an invalid length.
[  278.550793][    C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  278.557775][T15619] IPVS: length: 15 != 8
[  278.775576][T15631] veth1_to_bond: entered allmulticast mode
[  278.806812][T15631] 8021q: adding VLAN 0 to HW filter on device bond21
[  278.823719][T15631] vlan1: entered allmulticast mode
[  278.825444][T15631] bond21: entered allmulticast mode
[  278.833703][T15630] veth1_to_bond: left allmulticast mode
[  278.922210][T15639] __nla_validate_parse: 39 callbacks suppressed
[  278.922223][T15639] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2545'.
[  278.929891][T15641] netlink: 71 bytes leftover after parsing attributes in process `syz.1.2546'.
[  278.938945][T15641] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.2546'.
[  279.600710][    C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  279.824931][T15664]  speed is unknown, defaulting to 1000
[  279.848594][T15665] Bluetooth: hci0: Opcode 0x0401 failed: -22
[  280.062537][T15664]  speed is unknown, defaulting to 1000
[  280.085031][T15668] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2556'.
[  280.088291][T15668] netlink: 9 bytes leftover after parsing attributes in process `syz.1.2556'.
[  280.630838][    C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  280.696330][T15702] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2563'.
[  281.001850][T15711] nftables ruleset with unbound chain
[  281.129718][T15723] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2569'.
[  281.244960][T15726]  speed is unknown, defaulting to 1000
[  281.273666][T15732] netlink: 84 bytes leftover after parsing attributes in process `syz.0.2570'.
[  281.276532][T15732] netlink: 84 bytes leftover after parsing attributes in process `syz.0.2570'.
[  281.469451][T15726]  speed is unknown, defaulting to 1000
[  281.657659][T15752] bridge24: port 2(veth0_to_bond) entered disabled state
[  281.670688][    C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  281.698253][T15752] geneve7: left promiscuous mode
[  281.700043][T15752] geneve7: left allmulticast mode
[  281.704852][T15752] bond31: left promiscuous mode
[  281.712951][T15752] geneve8: left promiscuous mode
[  281.733011][  T799]  speed is unknown, defaulting to 1000
[  281.736645][  T799] sy2: Port: 1 Link DOWN
[  281.739293][   T13] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  281.743859][   T13] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  281.749925][   T13] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  281.755542][   T13] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  281.814288][T15755] veth27: entered promiscuous mode
[  281.865900][T15762] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2578'.
[  282.045740][T15778] validate_nla: 2 callbacks suppressed
[  282.045751][T15778] netlink: 'syz.1.2583': attribute type 1 has an invalid length.
[  282.072845][T15778] 8021q: adding VLAN 0 to HW filter on device bond22
[  282.256880][T15818]  speed is unknown, defaulting to 1000
[  282.491818][T15818]  speed is unknown, defaulting to 1000
[  282.584917][T15834] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check.
[  282.710827][    C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  282.770876][T15845] netlink: 'syz.2.2602': attribute type 1 has an invalid length.
[  282.810986][T15845] 8021q: adding VLAN 0 to HW filter on device bond22
[  282.825523][T15848] macsec0: entered promiscuous mode
[  282.827324][T15848] erspan0: entered promiscuous mode
[  282.829925][T15848] erspan0: left promiscuous mode
[  283.131183][T15867] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  283.210169][T15873] netlink: 'syz.2.2610': attribute type 32 has an invalid length.
[  283.213824][T15873] bond0: option coupled_control: mode dependency failed, not supported in mode balance-rr(0)
[  283.750804][    C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  284.256705][T15906] bridge10: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms)
[  284.264907][T15906] __nla_validate_parse: 10 callbacks suppressed
[  284.264919][T15906] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2619'.
[  284.447288][T15920] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2624'.
[  284.450335][T15920] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2624'.
[  284.529823][T15924] netlink: 'syz.1.2625': attribute type 10 has an invalid length.
[  284.530847][T15923] netlink: 'syz.1.2625': attribute type 10 has an invalid length.
[  284.790686][    C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  284.814851][T15932] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  284.819657][T15932] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  284.890745][T15929] tipc: Resetting bearer <eth:syzkaller0>
[  284.905421][ T5672]  speed is unknown, defaulting to 1000
[  284.961982][T15941] netlink: 'syz.1.2631': attribute type 15 has an invalid length.
[  284.965218][T15941] netlink: 666 bytes leftover after parsing attributes in process `syz.1.2631'.
[  285.004258][T15944] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2632'.
[  285.055457][T15946] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check.
[  285.218635][T15954] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2636'.
[  285.224108][T15954] netlink: 348 bytes leftover after parsing attributes in process `syz.2.2636'.
[  285.228222][T15954] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2636'.
[  285.231787][T15954] netlink: 348 bytes leftover after parsing attributes in process `syz.2.2636'.
[  285.289837][T15958] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2637'.
[  285.575713][T15983] xt_cluster: you have exceeded the maximum number of cluster nodes (524288 > 32)
[  285.581459][T15981] netlink: 'syz.0.2643': attribute type 1 has an invalid length.
[  285.599043][T15981] 8021q: adding VLAN 0 to HW filter on device bond34
[  285.606306][T15981] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  285.678395][T15989] 8021q: adding VLAN 0 to HW filter on device batadv0
[  285.707695][T15989] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check.
[  285.714760][ T5674]  speed is unknown, defaulting to 1000
[  285.719222][ T5674] sy2: Port: 1 Link ACTIVE
[  285.731504][ T5718] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  285.739914][ T5718] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  285.743410][ T5718] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  285.746173][ T5718] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  285.830805][    C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  286.133659][T15999] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  286.201060][T16006]  speed is unknown, defaulting to 1000
[  286.438781][T16006]  speed is unknown, defaulting to 1000
[  286.619453][T16017] netlink: 'syz.2.2654': attribute type 1 has an invalid length.
[  286.625913][T16017] netlink: 'syz.2.2654': attribute type 1 has an invalid length.
[  286.634090][T16017] netlink: 'syz.2.2654': attribute type 1 has an invalid length.
[  286.689723][T16019] mac80211_hwsim hwsim19 syzkaller0: entered promiscuous mode
[  286.698320][T16019] mac80211_hwsim hwsim19 syzkaller0: entered allmulticast mode
[  286.788966][T16024] x_tables: duplicate underflow at hook 2
[  286.831970][T16028] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  286.964555][T16034] netlink: 'syz.1.2661': attribute type 11 has an invalid length.
[  287.254651][T16048] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  287.403831][T16048] veth1_vlan: left allmulticast mode
[  287.482485][T16050] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  287.496525][ T7929] syz1: Port: 1 Link DOWN
[  287.499479][ T5665] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  287.502969][ T5665] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  287.506158][ T5665] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  287.508825][ T5665] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  287.513292][ T5665] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  287.517544][ T5665] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  287.523324][ T5665] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  287.526830][ T5665] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  287.882780][  T799]  speed is unknown, defaulting to 1000
[  287.885861][  T799] sy2: Port: 1 Link DOWN
[  287.905481][T16057] net_ratelimit: 3 callbacks suppressed
[  287.905494][T16057] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  287.914379][ T5665] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  287.926278][ T5665] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  287.933184][ T5665] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  287.938308][ T5665] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  288.023645][T16069] team0: Mode changed to "loadbalance"
[  288.074037][T16076]  speed is unknown, defaulting to 1000
[  288.374662][T16076]  speed is unknown, defaulting to 1000
[  288.472864][T16099] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  288.494860][T16096] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  288.503822][T16105] validate_nla: 3 callbacks suppressed
[  288.503832][T16105] netlink: 'syz.1.2682': attribute type 12 has an invalid length.
[  288.606497][T16108] macsec0: entered promiscuous mode
[  288.620974][T16105] macsec0 (unregistering): left promiscuous mode
[  288.977787][T16133] batadv0: entered promiscuous mode
[  288.980155][T16133] batadv0: left promiscuous mode
[  289.048882][T16135] openvswitch: netlink: ct_state flags 010000e0 unsupported
[  289.249864][T16145] netlink: 'syz.1.2691': attribute type 1 has an invalid length.
[  289.632814][T16152] __nla_validate_parse: 421 callbacks suppressed
[  289.632825][T16152] netlink: 16158 bytes leftover after parsing attributes in process `syz.2.2693'.
[  289.815791][T16171] netlink: 'syz.2.2697': attribute type 1 has an invalid length.
[  289.818984][T16171] netlink: 228 bytes leftover after parsing attributes in process `syz.2.2697'.
[  290.238885][T16178] netlink: 10 bytes leftover after parsing attributes in process `syz.1.2699'.
[  290.298153][T16183] netlink: 'syz.1.2700': attribute type 1 has an invalid length.
[  290.311605][T16183] bond23: entered promiscuous mode
[  290.313622][T16183] 8021q: adding VLAN 0 to HW filter on device bond23
[  290.326040][T16183] bond23: (slave bridge14): making interface the new active one
[  290.328604][T16183] bridge14: entered promiscuous mode
[  290.331322][T16183] bond23: (slave bridge14): Enslaving as an active interface with an up link
[  290.341193][T16183] bond23: (slave ipvlan3): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  290.346200][T16183] bond23: (slave ipvlan3): The slave device specified does not support setting the MAC address
[  290.394544][T16185] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2700'.
[  290.442952][T16187] netlink: 'syz.1.2701': attribute type 1 has an invalid length.
[  290.485807][T16187] bond24: (slave bridge15): making interface the new active one
[  290.490346][T16187] bond24: (slave bridge15): Enslaving as an active interface with an up link
[  290.542352][T16187] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2701'.
[  290.546039][T16187] bond24: entered promiscuous mode
[  290.547747][T16187] bridge15: entered promiscuous mode
[  290.553272][T16187] bond24: entered allmulticast mode
[  290.555023][T16187] bridge15: entered allmulticast mode
[  290.557388][T16187] 8021q: adding VLAN 0 to HW filter on device bond24
[  290.591536][T16191] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  290.650307][T16194] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2703'.
[  290.773396][T16208] netlink: 168 bytes leftover after parsing attributes in process `syz.2.2707'.
[  290.776538][T16208] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2707'.
[  290.787332][T16208] bridge11: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms)
[  291.499991][T16235] bond0: Master is either lo or non-ether device
[  291.731892][T16238] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2716'.
[  291.736143][T16238] nbd: must specify a device to reconfigure
[  291.739310][T16238] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2716'.
[  292.472453][T16256] bridge0: port 2(batadv2) entered blocking state
[  292.474650][T16256] bridge0: port 2(batadv2) entered disabled state
[  292.476965][T16256] batadv2: entered allmulticast mode
[  292.479478][T16256] batadv2: entered promiscuous mode
[  292.690577][T16265] netlink: 'syz.1.2725': attribute type 1 has an invalid length.
[  292.693177][T16265] netlink: 'syz.1.2725': attribute type 2 has an invalid length.
[  292.695738][T16265] netlink: 'syz.1.2725': attribute type 1 has an invalid length.
[  292.857931][T16278] ipvlan3: entered allmulticast mode
[  292.859805][T16278] gretap0: entered allmulticast mode
[  292.882729][T16280] ip6gretap3: default qdisc (pfifo_fast) fail, fallback to noqueue
[  292.909987][T16284] netlink: 'syz.2.2731': attribute type 1 has an invalid length.
[  292.934342][T16284] bond23: entered promiscuous mode
[  292.936833][T16284] 8021q: adding VLAN 0 to HW filter on device bond23
[  292.952811][T16284] 8021q: adding VLAN 0 to HW filter on device bond23
[  292.955264][T16284] bond23: (slave wireguard0): The slave device specified does not support setting the MAC address
[  292.958760][T16284] bond23: (slave wireguard0): Setting fail_over_mac to active for active-backup mode
[  292.965274][T16284] bond23: (slave wireguard0): making interface the new active one
[  292.967785][T16284] wireguard0: entered promiscuous mode
[  292.970402][T16284] bond23: (slave wireguard0): Enslaving as an active interface with an up link
[  292.970905][T13946] batman_adv: batadv2: IGMP Querier appeared
[  292.975297][T13946] batman_adv: batadv2: MLD Querier appeared
[  293.005637][T16288] block nbd4: Unsupported socket: should be TCP or UNIX.
[  293.108641][T16295] syzkaller1: entered promiscuous mode
[  293.111592][T16295] syzkaller1: entered allmulticast mode
[  293.518473][T16305] Cannot find add_set index 0 as target
[  294.244523][T16342] netlink: 'syz.0.2747': attribute type 1 has an invalid length.
[  294.248001][T16342] netlink: 'syz.0.2747': attribute type 1 has an invalid length.
[  294.262041][T16342] bond35: entered promiscuous mode
[  294.264219][T16342] 8021q: adding VLAN 0 to HW filter on device bond35
[  294.274664][T16342] xt_hashlimit: size too large, truncated to 1048576
[  294.333176][T16342] IPv6: NLM_F_CREATE should be specified when creating new route
[  294.363951][T16347] openvswitch: netlink: Key type 38 is out of range max 32
[  294.626737][T16366]  speed is unknown, defaulting to 1000
[  294.691627][T16370] __nla_validate_parse: 11 callbacks suppressed
[  294.691638][T16370] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2754'.
[  294.845907][T16366]  speed is unknown, defaulting to 1000
[  295.065813][T16385]  speed is unknown, defaulting to 1000
[  295.407226][T16400]  speed is unknown, defaulting to 1000
[  295.534304][T16385]  speed is unknown, defaulting to 1000
[  295.662656][T16408] netlink: 'syz.1.2762': attribute type 11 has an invalid length.
[  295.718234][T16400]  speed is unknown, defaulting to 1000
[  295.720401][T16410] xt_l2tp: v2 doesn't support IP mode
[  295.732955][T16410] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2764'.
[  295.736984][T16411] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2764'.
[  295.797754][T16420] xt_hashlimit: size too large, truncated to 1048576
[  295.952279][T16429] netlink: 100 bytes leftover after parsing attributes in process `syz.0.2767'.
[  295.963583][T16429] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2767'.
[  295.967809][T16429] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2767'.
[  296.021247][T16431]  speed is unknown, defaulting to 1000
[  296.121874][T16438] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2768'.
[  296.264223][T16447] netlink: 'syz.2.2771': attribute type 1 has an invalid length.
[  296.309335][T16447] 8021q: adding VLAN 0 to HW filter on device bond24
[  296.345512][T16449] bond24: (slave veth27): Enslaving as an active interface with a down link
[  296.365122][T16447] 8021q: adding VLAN 0 to HW filter on device batadv1
[  296.372227][T16447] bond24: (slave batadv1): making interface the new active one
[  296.377152][T16447] batadv1: entered promiscuous mode
[  296.379821][T16447] bond24: (slave batadv1): Enslaving as an active interface with an up link
[  296.387007][T16431]  speed is unknown, defaulting to 1000
[  296.412907][T16447] bond24 (unregistering): (slave veth27): Releasing active interface
[  296.423466][T16447] bond24 (unregistering): (slave batadv1): Releasing active interface
[  296.429461][T16447] bond24 (unregistering): Released all slaves
[  296.595846][T16451] netlink: 'syz.2.2772': attribute type 4 has an invalid length.
[  296.699887][T16461] netlink: 'syz.2.2773': attribute type 13 has an invalid length.
[  296.710752][T16461] netlink: 88 bytes leftover after parsing attributes in process `syz.2.2773'.
[  296.721916][T16461] IPVS: rr: FWM 3 0x00000003 - no destination available
[  296.820182][T16469] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2777'.
[  296.876589][T16471] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2777'.
[  296.939346][T16472] xt_policy: output policy not valid in PREROUTING and INPUT
[  296.982469][T16476] netlink: 'syz.2.2779': attribute type 10 has an invalid length.
[  297.075657][T16482] veth0: entered promiscuous mode
[  297.089917][T16482] bond0: entered promiscuous mode
[  297.185687][T16484] ip6tnl8: entered allmulticast mode
[  297.201510][T16475] bond0: left promiscuous mode
[  297.210936][T16475] veth0: left promiscuous mode
[  297.214920][ T5665] ip6_tunnel: ip6tnl8 xmit: Local address not yet configured!
[  297.222307][ T5665] ip6_tunnel: ip6tnl8 xmit: Local address not yet configured!
[  297.244454][ T7930] ip6_tunnel: ip6tnl8 xmit: Local address not yet configured!
[  297.562118][  T799] ip6_tunnel: ip6tnl8 xmit: Local address not yet configured!
[  297.598626][T16509] bond25: entered allmulticast mode
[  297.990650][ T5674] ip6_tunnel: ip6tnl8 xmit: Local address not yet configured!
[  298.235789][T16537] netlink: 'syz.2.2796': attribute type 14 has an invalid length.
[  298.267071][T16539] netlink: 'syz.2.2797': attribute type 1 has an invalid length.
[  298.326960][T16547] openvswitch: netlink: IP tunnel dst address not specified
[  298.358249][T16547] netlink: 'syz.2.2800': attribute type 8 has an invalid length.
[  298.461984][T16566] netlink: 'syz.0.2805': attribute type 1 has an invalid length.
[  298.835780][T16603]  speed is unknown, defaulting to 1000
[  298.971799][T16613] 8021q: adding VLAN 0 to HW filter on device bond26
[  298.982734][T16613] bond26 (unregistering): Released all slaves
[  299.096091][T16618] ip6gre4: entered promiscuous mode
[  299.100317][T16618] ip6gre4: entered allmulticast mode
[  299.105728][T16603]  speed is unknown, defaulting to 1000
[  299.128768][T16618] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  299.132434][T16618] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  299.359978][T16627] validate_nla: 2 callbacks suppressed
[  299.359996][T16627] netlink: 'syz.2.2823': attribute type 1 has an invalid length.
[  299.435505][T16627] 8021q: adding VLAN 0 to HW filter on device bond24
[  299.771922][T16643] __nla_validate_parse: 18 callbacks suppressed
[  299.771935][T16643] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2828'.
[  299.805944][T16648] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2829'.
[  299.809218][T16648] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2829'.
[  299.817842][T16652] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2830'.
[  299.824951][T16648] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2829'.
[  299.825670][T16652] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  299.895077][T16654] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2831'.
[  299.910134][T16658] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2832'.
[  299.931766][T16660] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2833'.
[  299.934978][T16660] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check.
[  299.956595][T16660] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  299.970360][T16660] Cannot find add_set index 2 as target
[  299.983716][T16660] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2833'.
[  299.989621][T16664] netlink: 'syz.1.2835': attribute type 1 has an invalid length.
[  300.020363][T16664] 8021q: adding VLAN 0 to HW filter on device bond26
[  300.032031][T16669] nbd: nbd0 already in use
[  300.033826][T16669] block nbd0: NBD_DISCONNECT
[  300.035354][T16669] block nbd0: Send disconnect failed -32
[  300.037289][T16669] block nbd0: Send disconnect failed -32
[  300.042188][T16669] block nbd0: shutting down sockets
[  300.044458][T16664] bond26: (slave veth11): Enslaving as an active interface with a down link
[  300.054741][T16667] bond0: entered promiscuous mode
[  300.058792][T16667] batadv0: entered promiscuous mode
[  300.061737][T16667] hsr2: Slave A (bond0) is not up; please bring it up to get a fully working HSR network
[  300.066502][T16667] 8021q: adding VLAN 0 to HW filter on device hsr2
[  300.071670][T16667] bond0: left promiscuous mode
[  300.073865][T16667] batadv0: left promiscuous mode
[  300.097966][T16664] netlink: 'syz.1.2835': attribute type 10 has an invalid length.
[  300.101204][T16664] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2835'.
[  300.185869][T16681] netlink: 'syz.2.2840': attribute type 9 has an invalid length.
[  300.319708][T16701] netlink: 'syz.2.2845': attribute type 4 has an invalid length.
[  300.419464][T16719] openvswitch: netlink: IP tunnel attribute has 4460 unknown bytes.
[  300.510971][T16724] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  300.515552][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  300.565196][T16730] netlink: 'syz.1.2855': attribute type 10 has an invalid length.
[  300.918227][T16753] tipc: Enabled bearer <eth:vcan0>, priority 10
[  300.930949][T16753] bond25: Removing last ns target with arp_interval on
[  300.960890][    C1] ip6_tunnel: ip6tnl8 xmit: Local address not yet configured!
[  301.389529][T16767] netlink: 'syz.0.2866': attribute type 13 has an invalid length.
[  301.393202][T16767] netlink: 'syz.0.2866': attribute type 17 has an invalid length.
[  301.524481][T16767] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check.
[  301.531064][   T33]  speed is unknown, defaulting to 1000
[  301.535783][   T33] sy2: Port: 1 Link ACTIVE
[  301.557405][ T5665] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  301.563269][ T5665] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  301.611413][T16773] 8021q: adding VLAN 0 to HW filter on device bond27
[  301.617272][ T5665] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  301.624115][ T5665] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  301.653510][T16777] bridge27: entered promiscuous mode
[  301.656863][T16777] bridge27: entered allmulticast mode
[  301.666805][T16777] team0: Port device bridge27 added
[  301.685434][T16777] bridge28: entered promiscuous mode
[  301.688711][T16777] bridge28: entered allmulticast mode
[  301.699923][T16777] team0: Port device bridge28 added
[  301.706668][T16777] bridge0: port 3(team0) entered blocking state
[  301.717204][T16777] bridge0: port 3(team0) entered disabled state
[  301.721367][T16777] team0: entered allmulticast mode
[  301.731817][T16777] team0: left allmulticast mode
[  301.804941][T16786] bridge29: entered promiscuous mode
[  301.808316][T16786] bridge29: entered allmulticast mode
[  301.822171][T16786] team0: Port device bridge29 added
[  301.829730][T16786] bridge0: port 3(team0) entered blocking state
[  301.833737][T16786] bridge0: port 3(team0) entered disabled state
[  301.836436][T16786] team0: entered allmulticast mode
[  301.846550][T16786] team0: left allmulticast mode
[  301.910873][ T7930] ip6_tunnel: ip6tnl8 xmit: Local address not yet configured!
[  301.953531][ T7930] ip6_tunnel: ip6tnl8 xmit: Local address not yet configured!
[  302.032227][ T7930] tipc: Node number set to 127131000
[  302.086329][   T82] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  302.090724][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  302.208849][T16830] nbd: nbd64 already in use
[  302.232836][T16829] openvswitch: netlink: Missing key (keys=40, expected=100)
[  302.712568][ T1131] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  302.717644][ T7930] ip6_tunnel: ip6tnl8 xmit: Local address not yet configured!
[  303.361151][ T1131] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  303.383150][T16872] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[  303.387115][T16872] CPU: 0 UID: 0 PID: 16872 Comm: syz.1.2896 Not tainted syzkaller #0 PREEMPT(full) 
[  303.387128][T16872] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  303.387133][T16872] Call Trace:
[  303.387137][T16872]  <TASK>
[  303.387142][T16872]  dump_stack_lvl+0xe8/0x150
[  303.387156][T16872]  sysfs_warn_dup+0x8e/0xa0
[  303.387167][T16872]  sysfs_do_create_link_sd+0xc0/0x110
[  303.387178][T16872]  device_add_class_symlinks+0x1cf/0x240
[  303.387189][T16872]  device_add+0x475/0xbb0
[  303.387200][T16872]  wiphy_register+0x1fb1/0x2fe0
[  303.387214][T16872]  ? __pfx_wiphy_register+0x10/0x10
[  303.387222][T16872]  ? __pfx_netdev_run_todo+0x10/0x10
[  303.387230][T16872]  ? minstrel_ht_alloc+0x6e0/0x7e0
[  303.387244][T16872]  ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0
[  303.387259][T16872]  ieee80211_register_hw+0x3c53/0x4910
[  303.387273][T16872]  ? ieee80211_register_hw+0x1901/0x4910
[  303.387291][T16872]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  303.387301][T16872]  ? __asan_memset+0x22/0x50
[  303.387311][T16872]  ? __hrtimer_setup+0x1b7/0x260
[  303.387321][T16872]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  303.387332][T16872]  mac80211_hwsim_new_radio+0x3327/0x57e0
[  303.387354][T16872]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  303.387364][T16872]  ? kstrndup+0xbf/0x160
[  303.387375][T16872]  hwsim_new_radio_nl+0xe20/0x26e0
[  303.387384][T16872]  ? unwind_next_frame+0xa6/0x2550
[  303.387400][T16872]  ? is_bpf_text_address+0x26/0x2b0
[  303.387413][T16872]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  303.387422][T16872]  ? __kernel_text_address+0xd/0x30
[  303.387433][T16872]  ? unwind_get_return_address+0x4d/0x90
[  303.387442][T16872]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  303.387453][T16872]  ? arch_stack_walk+0xfb/0x150
[  303.387468][T16872]  ? stack_trace_save+0xa9/0x100
[  303.387478][T16872]  ? __pfx_stack_trace_save+0x10/0x10
[  303.387490][T16872]  ? stack_depot_save_flags+0x33/0x810
[  303.387506][T16872]  ? __nla_validate_parse+0x2480/0x2dc0
[  303.387517][T16872]  ? ____sys_sendmsg+0x972/0x9f0
[  303.387528][T16872]  ? ___sys_sendmsg+0x2a5/0x360
[  303.387545][T16872]  ? __pfx___nla_validate_parse+0x10/0x10
[  303.387563][T16872]  ? rcu_is_watching+0x15/0xb0
[  303.387573][T16872]  ? trace_kmalloc+0x2a/0xf0
[  303.387586][T16872]  ? __nla_parse+0x40/0x60
[  303.387599][T16872]  ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0
[  303.387607][T16872]  ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0
[  303.387619][T16872]  genl_family_rcv_msg_doit+0x22a/0x330
[  303.387631][T16872]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  303.387644][T16872]  ? bpf_lsm_capable+0x9/0x20
[  303.387652][T16872]  ? security_capable+0x7e/0x2c0
[  303.387665][T16872]  genl_rcv_msg+0x61c/0x7a0
[  303.387676][T16872]  ? __pfx_genl_rcv_msg+0x10/0x10
[  303.387684][T16872]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  303.387699][T16872]  netlink_rcv_skb+0x232/0x4b0
[  303.387711][T16872]  ? __pfx_genl_rcv_msg+0x10/0x10
[  303.387719][T16872]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  303.387736][T16872]  ? down_read+0x270/0x2e0
[  303.387744][T16872]  ? genl_rcv+0xd/0x40
[  303.387753][T16872]  genl_rcv+0x28/0x40
[  303.387760][T16872]  netlink_unicast+0x75c/0x8e0
[  303.387775][T16872]  netlink_sendmsg+0x813/0xb40
[  303.387790][T16872]  ? __pfx_netlink_sendmsg+0x10/0x10
[  303.387802][T16872]  ? aa_sock_msg_perm+0xf1/0x1b0
[  303.387813][T16872]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  303.387824][T16872]  ____sys_sendmsg+0x972/0x9f0
[  303.387835][T16872]  ? __might_fault+0xaf/0x130
[  303.387847][T16872]  ? __pfx_____sys_sendmsg+0x10/0x10
[  303.387862][T16872]  ? import_iovec+0x73/0xa0
[  303.387875][T16872]  ___sys_sendmsg+0x2a5/0x360
[  303.387894][T16872]  ? __lock_acquire+0x6b5/0x2cf0
[  303.387905][T16872]  ? __pfx____sys_sendmsg+0x10/0x10
[  303.387919][T16872]  ? futex_wake+0x4ac/0x580
[  303.387940][T16872]  ? __fget_files+0x2a/0x420
[  303.387949][T16872]  ? __fget_files+0x3a0/0x420
[  303.387985][T16872]  __x64_sys_sendmsg+0x1bd/0x2a0
[  303.388000][T16872]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  303.388016][T16872]  ? rcu_is_watching+0x15/0xb0
[  303.388028][T16872]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  303.388036][T16872]  do_syscall_64+0x15f/0xf80
[  303.388043][T16872]  ? trace_irq_disable+0x3b/0x140
[  303.388058][T16872]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  303.388065][T16872] RIP: 0033:0x7fc1caf9cdd9
[  303.388074][T16872] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  303.388080][T16872] RSP: 002b:00007fc1cbdc9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  303.388090][T16872] RAX: ffffffffffffffda RBX: 00007fc1cb215fa0 RCX: 00007fc1caf9cdd9
[  303.388095][T16872] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 000000000000000d
[  303.388100][T16872] RBP: 00007fc1cb032d69 R08: 0000000000000000 R09: 0000000000000000
[  303.388105][T16872] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  303.388109][T16872] R13: 00007fc1cb216038 R14: 00007fc1cb215fa0 R15: 00007ffc3a40dc78
[  303.388137][T16872]  </TASK>
[  303.647827][T16870] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  303.651462][T16870] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  303.775631][T16887] bridge: RTM_NEWNEIGH with invalid state 0x8
[  303.872754][T16892] tipc: Resetting bearer <eth:vcan0>
[  303.897096][T16892] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan3
[  303.901678][T16892] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  303.906239][T16892] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan2
[  303.910400][T16892] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  303.945721][T16892] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan3
[  303.950231][T16892] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  303.963184][T16892] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan2
[  303.966745][T16892] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  304.760742][T16906] syzkaller1: entered promiscuous mode
[  304.763739][T16906] syzkaller1: entered allmulticast mode
[  304.845926][T16913] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  304.862541][T16913] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  304.971369][T16927] block nbd0: shutting down sockets
[  304.978004][T16927] __nla_validate_parse: 27 callbacks suppressed
[  304.978014][T16927] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2912'.
[  305.108875][T16941] netlink: 'syz.2.2916': attribute type 10 has an invalid length.
[  305.242760][T16946] net_ratelimit: 2 callbacks suppressed
[  305.242780][T16946] netlink: zone id is out of range
[  305.249635][T16946] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2917'.
[  305.312217][T16944] nbd0: detected capacity change from 0 to 63
[  305.418804][T16957] bridge0: port 3(batadv0) entered blocking state
[  305.423913][T16957] bridge0: port 3(batadv0) entered disabled state
[  305.426277][T16957] batadv0: entered allmulticast mode
[  305.432828][T16957] batadv0: entered promiscuous mode
[  305.449724][T16959] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2922'.
[  305.876427][T16976] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2927'.
[  305.911816][T16978] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2928'.
[  305.915791][T16978] netlink: 'syz.1.2928': attribute type 1 has an invalid length.
[  305.922577][T13946] batman_adv: batadv0: IGMP Querier appeared
[  305.925014][T13946] batman_adv: batadv0: MLD Querier appeared
[  305.942007][   T55] block nbd0: Receive control failed (result -104)
[  305.943511][ T5796] block nbd0: Receive control failed (result -32)
[  305.981976][T16981] openvswitch: netlink: IPv4 tun info is not correct
[  306.036642][T16990] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16)
[  306.094163][T16994] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  306.098141][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  306.109484][T16990] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2931'.
[  306.124401][T16990] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  306.142327][T16990] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2931'.
[  306.209278][T17003] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2934'.
[  306.334704][T17027] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2940'.
[  306.416186][T17037] openvswitch: netlink: IP tunnel dst address not specified
[  306.469810][T17045] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[  306.482680][T17045] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2945'.
[  306.616589][T17054] xt_bpf: check failed: parse error
[  306.808539][T17061] netlink: 'syz.1.2950': attribute type 13 has an invalid length.
[  306.811812][T17061] netlink: 'syz.1.2950': attribute type 17 has an invalid length.
[  306.817653][T17061] gretap0: refused to change device tx_queue_len
[  306.819782][T17061] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  306.876713][   T33] 
[  306.877653][   T33] ======================================================
[  306.880386][   T33] WARNING: possible circular locking dependency detected
[  306.883229][   T33] syzkaller #0 Not tainted
[  306.885119][   T33] ------------------------------------------------------
[  306.887383][   T33] kworker/1:2/33 is trying to acquire lock:
[  306.889449][   T33] ffffffff8ea85520 (fs_reclaim){+.+.}-{0:0}, at: kmem_cache_alloc_node_noprof+0x4a/0x690
[  306.893439][   T33] 
[  306.893439][   T33] but task is already holding lock:
[  306.896673][   T33] ffff88817291a530 (&idev->mc_lock){+.+.}-{4:4}, at: mld_mca_work+0x52/0x440
[  306.900515][   T33] 
[  306.900515][   T33] which lock already depends on the new lock.
[  306.900515][   T33] 
[  306.904033][   T33] 
[  306.904033][   T33] the existing dependency chain (in reverse order) is:
[  306.907406][   T33] 
[  306.907406][   T33] -> #7 (&idev->mc_lock){+.+.}-{4:4}:
[  306.910451][   T33]        __mutex_lock+0x1a3/0x1550
[  306.912818][   T33]        __ipv6_dev_mc_inc+0x4e/0xa50
[  306.915399][   T33]        __ipv6_sock_mc_join+0x503/0x750
[  306.917753][   T33]        do_ipv6_mcast_group_source+0x3df/0x4c0
[  306.920276][   T33]        do_ipv6_setsockopt+0x16e9/0x3150
[  306.922602][   T33]        ipv6_setsockopt+0x59/0x170
[  306.924686][   T33]        do_sock_setsockopt+0x17c/0x1b0
[  306.927362][   T33]        __x64_sys_setsockopt+0x13d/0x1b0
[  306.930093][   T33]        do_syscall_64+0x15f/0xf80
[  306.932581][   T33]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  306.935238][   T33] 
[  306.935238][   T33] -> #6 (sk_lock-AF_INET6){+.+.}-{0:0}:
[  306.938631][   T33]        lock_sock_nested+0x41/0x100
[  306.941064][   T33]        inet_shutdown+0x6a/0x390
[  306.943362][   T33]        nbd_mark_nsock_dead+0x2e9/0x560
[  306.945814][   T33]        recv_work+0x1c2e/0x1d40
[  306.947803][   T33]        process_scheduled_works+0xb5d/0x1860
[  306.950166][   T33]        worker_thread+0xa53/0xfc0
[  306.952061][   T33]        kthread+0x388/0x470
[  306.953887][   T33]        ret_from_fork+0x514/0xb70
[  306.956079][   T33]        ret_from_fork_asm+0x1a/0x30
[  306.958229][   T33] 
[  306.958229][   T33] -> #5 (&nsock->tx_lock){+.+.}-{4:4}:
[  306.961176][   T33]        __mutex_lock+0x1a3/0x1550
[  306.962840][   T33]        nbd_queue_rq+0x37b/0x1100
[  306.964555][   T33]        blk_mq_dispatch_rq_list+0xa70/0x1910
[  306.966621][   T33]        __blk_mq_sched_dispatch_requests+0xdcc/0x1600
[  306.969793][   T33]        blk_mq_sched_dispatch_requests+0xd7/0x190
[  306.972524][   T33]        blk_mq_run_hw_queue+0x348/0x4f0
[  306.974560][   T33]        blk_mq_dispatch_list+0xd16/0xe10
[  306.976420][   T33]        blk_mq_flush_plug_list+0x48d/0x570
[  306.978276][   T33]        __blk_flush_plug+0x3ed/0x4d0
[  306.980032][   T33]        __submit_bio+0x28d/0x580
[  306.981737][   T33]        submit_bio_noacct_nocheck+0x2f4/0xa40
[  306.984040][   T33]        block_read_full_folio+0x599/0x830
[  306.986185][   T33]        filemap_read_folio+0x137/0x3b0
[  306.988056][   T33]        do_read_cache_folio+0x358/0x590
[  306.989833][   T33]        read_part_sector+0xb6/0x2b0
[  306.991553][   T33]        adfspart_check_ICS+0xb1/0x960
[  306.993390][   T33]        bdev_disk_changed+0x817/0x1770
[  306.995230][   T33]        blkdev_get_whole+0x380/0x510
[  306.997157][   T33]        bdev_open+0x31e/0xd30
[  306.998985][   T33]        blkdev_open+0x470/0x610
[  307.000772][   T33]        do_dentry_open+0x785/0x14e0
[  307.002585][   T33]        vfs_open+0x3b/0x340
[  307.004430][   T33]        path_openat+0x2e08/0x3860
[  307.006513][   T33]        do_file_open+0x23e/0x4a0
[  307.008504][   T33]        do_sys_openat2+0x113/0x200
[  307.010285][   T33]        __x64_sys_openat+0x138/0x170
[  307.012549][   T33]        do_syscall_64+0x15f/0xf80
[  307.014956][   T33]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  307.017594][   T33] 
[  307.017594][   T33] -> #4 (&cmd->lock){+.+.}-{4:4}:
[  307.022116][   T33]        __mutex_lock+0x1a3/0x1550
[  307.024133][   T33]        nbd_queue_rq+0xc6/0x1100
[  307.026169][   T33]        blk_mq_dispatch_rq_list+0xa70/0x1910
[  307.028868][   T33]        __blk_mq_sched_dispatch_requests+0xdcc/0x1600
[  307.032017][   T33]        blk_mq_sched_dispatch_requests+0xd7/0x190
[  307.034577][   T33]        blk_mq_run_hw_queue+0x348/0x4f0
[  307.036749][   T33]        blk_mq_dispatch_list+0xd16/0xe10
[  307.038899][   T33]        blk_mq_flush_plug_list+0x48d/0x570
[  307.041161][   T33]        __blk_flush_plug+0x3ed/0x4d0
[  307.043398][   T33]        __submit_bio+0x28d/0x580
[  307.045734][   T33]        submit_bio_noacct_nocheck+0x2f4/0xa40
[  307.048626][   T33]        block_read_full_folio+0x599/0x830
[  307.051074][   T33]        filemap_read_folio+0x137/0x3b0
[  307.053152][   T33]        do_read_cache_folio+0x358/0x590
[  307.055329][   T33]        read_part_sector+0xb6/0x2b0
[  307.057337][   T33]        adfspart_check_ICS+0xb1/0x960
[  307.059703][   T33]        bdev_disk_changed+0x817/0x1770
[  307.062173][   T33]        blkdev_get_whole+0x380/0x510
[  307.064560][   T33]        bdev_open+0x31e/0xd30
[  307.066547][   T33]        blkdev_open+0x470/0x610
[  307.068659][   T33]        do_dentry_open+0x785/0x14e0
[  307.071073][   T33]        vfs_open+0x3b/0x340
[  307.073154][   T33]        path_openat+0x2e08/0x3860
[  307.075306][   T33]        do_file_open+0x23e/0x4a0
[  307.077386][   T33]        do_sys_openat2+0x113/0x200
[  307.079286][   T33]        __x64_sys_openat+0x138/0x170
[  307.081087][   T33]        do_syscall_64+0x15f/0xf80
[  307.082953][   T33]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  307.085269][   T33] 
[  307.085269][   T33] -> #3 (set->srcu){.+.+}-{0:0}:
[  307.087821][   T33]        __synchronize_srcu+0xca/0x300
[  307.089623][   T33]        elevator_switch+0x1e8/0x7a0
[  307.091439][   T33]        elevator_change+0x2cc/0x450
[  307.093408][   T33]        elevator_set_default+0x36c/0x430
[  307.095634][   T33]        blk_register_queue+0x3e9/0x4e0
[  307.097828][   T33]        __add_disk+0x677/0xd50
[  307.099661][   T33]        add_disk_fwnode+0xfb/0x480
[  307.101486][   T33]        nbd_dev_add+0x72c/0xb50
[  307.103162][   T33]        nbd_init+0x168/0x1f0
[  307.104756][   T33]        do_one_initcall+0x250/0x870
[  307.106618][   T33]        do_initcall_level+0x104/0x190
[  307.108490][   T33]        do_initcalls+0x59/0xa0
[  307.110271][   T33]        kernel_init_freeable+0x2a6/0x3e0
[  307.112815][   T33]        kernel_init+0x1d/0x1d0
[  307.114677][   T33]        ret_from_fork+0x514/0xb70
[  307.116503][   T33]        ret_from_fork_asm+0x1a/0x30
[  307.118326][   T33] 
[  307.118326][   T33] -> #2 (&q->elevator_lock){+.+.}-{4:4}:
[  307.120834][   T33]        __mutex_lock+0x1a3/0x1550
[  307.122843][   T33]        elevator_change+0x1b3/0x450
[  307.125041][   T33]        elevator_set_none+0xb5/0x140
[  307.127253][   T33]        blk_mq_update_nr_hw_queues+0x5e7/0x1a60
[  307.129649][   T33]        nbd_start_device+0x17f/0xb10
[  307.131628][   T33]        nbd_genl_connect+0x165b/0x1cf0
[  307.133512][   T33]        genl_family_rcv_msg_doit+0x22a/0x330
[  307.135623][   T33]        genl_rcv_msg+0x61c/0x7a0
[  307.137562][   T33]        netlink_rcv_skb+0x232/0x4b0
[  307.139577][   T33]        genl_rcv+0x28/0x40
[  307.141244][   T33]        netlink_unicast+0x75c/0x8e0
[  307.143133][   T33]        netlink_sendmsg+0x813/0xb40
[  307.145205][   T33]        ____sys_sendmsg+0x972/0x9f0
[  307.147099][   T33]        ___sys_sendmsg+0x2a5/0x360
[  307.148878][   T33]        __x64_sys_sendmsg+0x1bd/0x2a0
[  307.150823][   T33]        do_syscall_64+0x15f/0xf80
[  307.152911][   T33]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  307.155736][   T33] 
[  307.155736][   T33] -> #1 (&q->q_usage_counter(io)#49){++++}-{0:0}:
[  307.159482][   T33]        blk_alloc_queue+0x546/0x680
[  307.161666][   T33]        __blk_mq_alloc_disk+0x197/0x390
[  307.163850][   T33]        nbd_dev_add+0x499/0xb50
[  307.165491][   T33]        nbd_init+0x168/0x1f0
[  307.167131][   T33]        do_one_initcall+0x250/0x870
[  307.169050][   T33]        do_initcall_level+0x104/0x190
[  307.171030][   T33]        do_initcalls+0x59/0xa0
[  307.172949][   T33]        kernel_init_freeable+0x2a6/0x3e0
[  307.174814][   T33]        kernel_init+0x1d/0x1d0
[  307.176434][   T33]        ret_from_fork+0x514/0xb70
[  307.178121][   T33]        ret_from_fork_asm+0x1a/0x30
[  307.179970][   T33] 
[  307.179970][   T33] -> #0 (fs_reclaim){+.+.}-{0:0}:
[  307.182618][   T33]        __lock_acquire+0x15a5/0x2cf0
[  307.184555][   T33]        lock_acquire+0x106/0x350
[  307.186297][   T33]        fs_reclaim_acquire+0x71/0x100
[  307.188071][   T33]        kmem_cache_alloc_node_noprof+0x4a/0x690
[  307.190107][   T33]        __alloc_skb+0x1d0/0x7d0
[  307.191694][   T33]        mld_newpack+0x14c/0xc90
[  307.193299][   T33]        add_grhead+0x5a/0x2a0
[  307.194819][   T33]        add_grec+0x1452/0x1740
[  307.196389][   T33]        mld_send_report+0xcf/0x380
[  307.198068][   T33]        mld_mca_work+0x169/0x440
[  307.199665][   T33]        process_scheduled_works+0xb5d/0x1860
[  307.201593][   T33]        worker_thread+0xa53/0xfc0
[  307.203221][   T33]        kthread+0x388/0x470
[  307.204687][   T33]        ret_from_fork+0x514/0xb70
[  307.206386][   T33]        ret_from_fork_asm+0x1a/0x30
[  307.208123][   T33] 
[  307.208123][   T33] other info that might help us debug this:
[  307.208123][   T33] 
[  307.211332][   T33] Chain exists of:
[  307.211332][   T33]   fs_reclaim --> sk_lock-AF_INET6 --> &idev->mc_lock
[  307.211332][   T33] 
[  307.215353][   T33]  Possible unsafe locking scenario:
[  307.215353][   T33] 
[  307.217711][   T33]        CPU0                    CPU1
[  307.219399][   T33]        ----                    ----
[  307.221136][   T33]   lock(&idev->mc_lock);
[  307.222529][   T33]                                lock(sk_lock-AF_INET6);
[  307.224675][   T33]                                lock(&idev->mc_lock);
[  307.226865][   T33]   lock(fs_reclaim);
[  307.228169][   T33] 
[  307.228169][   T33]  *** DEADLOCK ***
[  307.228169][   T33] 
[  307.230708][   T33] 3 locks held by kworker/1:2/33:
[  307.232455][   T33]  #0: ffff888172b30540 ((wq_completion)mld){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860
[  307.235994][   T33]  #1: ffffc90000a97c40 ((work_completion)(&(&mc->mca_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860
[  307.239977][   T33]  #2: ffff88817291a530 (&idev->mc_lock){+.+.}-{4:4}, at: mld_mca_work+0x52/0x440
[  307.242872][   T33] 
[  307.242872][   T33] stack backtrace:
[  307.244721][   T33] CPU: 1 UID: 0 PID: 33 Comm: kworker/1:2 Not tainted syzkaller #0 PREEMPT(full) 
[  307.244730][   T33] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  307.244736][   T33] Workqueue: mld mld_mca_work
[  307.244748][   T33] Call Trace:
[  307.244752][   T33]  <TASK>
[  307.244757][   T33]  dump_stack_lvl+0xe8/0x150
[  307.244766][   T33]  print_circular_bug+0x2e1/0x300
[  307.244777][   T33]  check_noncircular+0x12e/0x150
[  307.244788][   T33]  __lock_acquire+0x15a5/0x2cf0
[  307.244796][   T33]  ? lockdep_unlock+0x5d/0xd0
[  307.244802][   T33]  ? __lock_acquire+0x146e/0x2cf0
[  307.244811][   T33]  ? kmem_cache_alloc_node_noprof+0x4a/0x690
[  307.244821][   T33]  lock_acquire+0x106/0x350
[  307.244828][   T33]  ? kmem_cache_alloc_node_noprof+0x4a/0x690
[  307.244837][   T33]  ? lock_acquire+0x106/0x350
[  307.244845][   T33]  fs_reclaim_acquire+0x71/0x100
[  307.244856][   T33]  ? kmem_cache_alloc_node_noprof+0x4a/0x690
[  307.244865][   T33]  kmem_cache_alloc_node_noprof+0x4a/0x690
[  307.244875][   T33]  ? __alloc_skb+0x1d0/0x7d0
[  307.244884][   T33]  ? __local_bh_enable_ip+0xd0/0x130
[  307.244892][   T33]  __alloc_skb+0x1d0/0x7d0
[  307.244902][   T33]  mld_newpack+0x14c/0xc90
[  307.244912][   T33]  ? __pfx___mutex_trylock_common+0x10/0x10
[  307.244944][   T33]  ? __pfx_mld_newpack+0x10/0x10
[  307.244953][   T33]  ? rcu_is_watching+0x15/0xb0
[  307.244962][   T33]  ? trace_contention_end+0x3d/0x140
[  307.244971][   T33]  ? __mutex_lock+0x319/0x1550
[  307.244979][   T33]  add_grhead+0x5a/0x2a0
[  307.244987][   T33]  ? add_grec+0x1360/0x1740
[  307.244997][   T33]  add_grec+0x1452/0x1740
[  307.245006][   T33]  ? irqentry_exit+0x218/0x730
[  307.245012][   T33]  ? mld_mca_work+0x52/0x440
[  307.245021][   T33]  ? __pfx___mutex_lock+0x10/0x10
[  307.245030][   T33]  mld_send_report+0xcf/0x380
[  307.245039][   T33]  mld_mca_work+0x169/0x440
[  307.245048][   T33]  ? process_scheduled_works+0xa70/0x1860
[  307.245055][   T33]  process_scheduled_works+0xb5d/0x1860
[  307.245066][   T33]  ? __pfx_process_scheduled_works+0x10/0x10
[  307.245074][   T33]  ? assign_work+0x3d5/0x5e0
[  307.245080][   T33]  worker_thread+0xa53/0xfc0
[  307.245091][   T33]  kthread+0x388/0x470
[  307.245105][   T33]  ? __pfx_worker_thread+0x10/0x10
[  307.245112][   T33]  ? __pfx_kthread+0x10/0x10
[  307.245121][   T33]  ret_from_fork+0x514/0xb70
[  307.245129][   T33]  ? __pfx_ret_from_fork+0x10/0x10
[  307.245136][   T33]  ? __switch_to+0xc79/0x1410
[  307.245146][   T33]  ? __pfx_kthread+0x10/0x10
[  307.245155][   T33]  ret_from_fork_asm+0x1a/0x30
[  307.245165][   T33]  </TASK>
[  307.245986][   T89] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  307.343454][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  307.990772][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  309.110655][    C1] ip6_tunnel: ip6tnl8 xmit: Local address not yet configured!
[  311.030655][    C0] net_ratelimit: 4 callbacks suppressed
[  311.030671][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  311.036297][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  311.040121][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  312.951241][  T175] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  312.954037][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  314.231789][  T175] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  314.872329][  T175] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  315.512064][ T1114] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  315.515728][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
