last executing test programs:

4m36.299527644s ago: executing program 0 (id=2294):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000008c0), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000001900010000000000000000001c140000fe040001", @ANYRES8=r1], 0x24}, 0x1, 0x0, 0x0, 0x40010}, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="2000000009000000000000000080000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000000000acf466664f6dc39d121b2e2c6e000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x1f, 0x15, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000009000000000000008000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800007d0b00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200001985000000", @ANYRESHEX, @ANYBLOB="0000000000000000b7080000018000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x11}, 0x94)
r4 = syz_init_net_socket$llc(0x1a, 0x802, 0x1800000000000000)
bind$llc(r4, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000c80)={'lo\x00', <r7=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xe}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_FLOW_PLIMIT={0x8, 0x2, 0x4}, @TCA_FQ_FLOW_MAX_RATE={0x8, 0x2}, @TCA_FQ_QUANTUM={0x8, 0x2}]}}]}, 0x48}}, 0x0)
getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000180), &(0x7f0000000200)=0x14)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000100))
r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
ioctl$TUNSETTXFILTER(r8, 0x400454d1, 0x0)
socket$kcm(0x10, 0x3, 0x10)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000040)={'hsr0\x00'})
socket(0x10, 0x80002, 0x0)
r10 = socket$nl_route(0x10, 0x3, 0x0)
r11 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="200000006800e97800000000000000000a0000000000000008000500", @ANYRES8=r10], 0x20}}, 0x0)

4m36.01293005s ago: executing program 0 (id=2298):
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x7fff, 0x0, 0xfffffffd, 0x1}, 0x10)
write(r0, &(0x7f0000000000)="240000001a005f0214f9f407000904001f00000000000001000000000800040029000000", 0x24)

4m35.891281229s ago: executing program 0 (id=2300):
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f0000000080)='pids.max\x00', 0x2, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[@ANYBLOB='-0'], 0x9)
r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x11)

4m35.811811098s ago: executing program 0 (id=2302):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
readv(r0, &(0x7f0000001280)=[{&(0x7f00000001c0)=""/4096, 0x1000}, {&(0x7f0000000000)=""/52, 0x34}, {&(0x7f0000000080)=""/200, 0xc8}, {&(0x7f00000011c0)=""/165, 0xa5}], 0x4)
connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10)
r2 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x10000802, 0x80, 0x0, 0x40000}, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="280000005200010004000000000000001c0000001400", @ANYRES16], 0x28}}, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='illinois', 0x8)

4m35.492244863s ago: executing program 0 (id=2305):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000008c0), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000001900010000000000000000001c140000fe040001", @ANYRES8=r1], 0x24}, 0x1, 0x0, 0x0, 0x40010}, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="2000000009000000000000000080000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000000000acf466664f6dc39d121b2e2c6e000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x1f, 0x15, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000009000000000000008000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800007d0b00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200001985000000", @ANYRESHEX, @ANYBLOB="0000000000000000b7080000018000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x11}, 0x94)
r4 = syz_init_net_socket$llc(0x1a, 0x802, 0x1800000000000000)
bind$llc(r4, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000c80)={'lo\x00', <r7=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xe}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_FLOW_PLIMIT={0x8, 0x2, 0x4}, @TCA_FQ_FLOW_MAX_RATE={0x8, 0x2}, @TCA_FQ_QUANTUM={0x8, 0x2}]}}]}, 0x48}}, 0x0)
getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000180), &(0x7f0000000200)=0x14)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000100))
r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
ioctl$TUNSETTXFILTER(r8, 0x400454d1, 0x0)
socket$kcm(0x10, 0x3, 0x10)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x25}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWSETELEM={0x58, 0xc, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x2c, 0x3, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x6}, @NFTA_SET_ELEM_EXPRESSIONS={0x1c, 0xb, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8}]}}}]}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0xdc}}, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000040)={'hsr0\x00'})
socket(0x10, 0x80002, 0x0)
r10 = socket$nl_route(0x10, 0x3, 0x0)
r11 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="200000006800e97800000000000000000a0000000000000008000500", @ANYRES8=r10], 0x20}}, 0x0)

4m30.366829926s ago: executing program 0 (id=2305):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000008c0), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000001900010000000000000000001c140000fe040001", @ANYRES8=r1], 0x24}, 0x1, 0x0, 0x0, 0x40010}, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="2000000009000000000000000080000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000000000acf466664f6dc39d121b2e2c6e000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x1f, 0x15, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000009000000000000008000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800007d0b00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200001985000000", @ANYRESHEX, @ANYBLOB="0000000000000000b7080000018000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x11}, 0x94)
r4 = syz_init_net_socket$llc(0x1a, 0x802, 0x1800000000000000)
bind$llc(r4, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000c80)={'lo\x00', <r7=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xe}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_FLOW_PLIMIT={0x8, 0x2, 0x4}, @TCA_FQ_FLOW_MAX_RATE={0x8, 0x2}, @TCA_FQ_QUANTUM={0x8, 0x2}]}}]}, 0x48}}, 0x0)
getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000180), &(0x7f0000000200)=0x14)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000100))
r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
ioctl$TUNSETTXFILTER(r8, 0x400454d1, 0x0)
socket$kcm(0x10, 0x3, 0x10)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x25}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWSETELEM={0x58, 0xc, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x2c, 0x3, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x6}, @NFTA_SET_ELEM_EXPRESSIONS={0x1c, 0xb, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8}]}}}]}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0xdc}}, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000040)={'hsr0\x00'})
socket(0x10, 0x80002, 0x0)
r10 = socket$nl_route(0x10, 0x3, 0x0)
r11 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="200000006800e97800000000000000000a0000000000000008000500", @ANYRES8=r10], 0x20}}, 0x0)

4m30.168455169s ago: executing program 32 (id=2305):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000008c0), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000001900010000000000000000001c140000fe040001", @ANYRES8=r1], 0x24}, 0x1, 0x0, 0x0, 0x40010}, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="2000000009000000000000000080000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000000000acf466664f6dc39d121b2e2c6e000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x1f, 0x15, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000009000000000000008000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800007d0b00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200001985000000", @ANYRESHEX, @ANYBLOB="0000000000000000b7080000018000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x11}, 0x94)
r4 = syz_init_net_socket$llc(0x1a, 0x802, 0x1800000000000000)
bind$llc(r4, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000c80)={'lo\x00', <r7=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xe}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_FLOW_PLIMIT={0x8, 0x2, 0x4}, @TCA_FQ_FLOW_MAX_RATE={0x8, 0x2}, @TCA_FQ_QUANTUM={0x8, 0x2}]}}]}, 0x48}}, 0x0)
getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000180), &(0x7f0000000200)=0x14)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000100))
r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
ioctl$TUNSETTXFILTER(r8, 0x400454d1, 0x0)
socket$kcm(0x10, 0x3, 0x10)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x25}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWSETELEM={0x58, 0xc, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x2c, 0x3, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x6}, @NFTA_SET_ELEM_EXPRESSIONS={0x1c, 0xb, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8}]}}}]}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0xdc}}, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000040)={'hsr0\x00'})
socket(0x10, 0x80002, 0x0)
r10 = socket$nl_route(0x10, 0x3, 0x0)
r11 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="200000006800e97800000000000000000a0000000000000008000500", @ANYRES8=r10], 0x20}}, 0x0)

1.64424647s ago: executing program 2 (id=5868):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000)
recvmmsg(r0, &(0x7f0000001b80)=[{{0x0, 0x0, 0x0}, 0x7ffffffb}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0xff}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000940)=""/4096, 0x1000}, {&(0x7f00000003c0)=""/100, 0x64}, {&(0x7f0000001940)=""/152, 0x98}, {&(0x7f0000001a00)=""/181, 0xb5}, {&(0x7f0000001dc0)=""/200, 0xc8}], 0x5}, 0x80000000}, {{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500}, 0x3}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0x7}, {{0x0, 0x0, 0x0}, 0x6}], 0x9, 0x14022, 0x0)

1.475383896s ago: executing program 2 (id=5871):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$inet(0x2, 0x80000, 0x64c7)
setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f0000000340)=ANY=[@ANYRES32], 0x1)
getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f00000000c0)={<r2=>0x0, @local, @local}, &(0x7f0000000100)=0xc)
r3 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000000)={@ipv4={'\x00', '\xff\xff', @broadcast}, 0x0, r2})
r4 = socket(0xa, 0x1, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)}], 0x1}, 0x0)
ioctl(r4, 0x8916, &(0x7f0000000000))
ioctl(r4, 0x8936, &(0x7f0000000000))
r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000005c40), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f0000005e40)={0x0, 0x0, &(0x7f0000005e00)={&(0x7f0000005d40)={0x20, r5, 0x21, 0x8d, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x100}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x8004)

1.406364915s ago: executing program 2 (id=5874):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f0000000180)={{0x2, 0x4e23, @multicast1}, {0x6, @local}, 0xc44e9c840b6a76a8, {0x2, 0x4e22, @rand_addr=0x64010101}, 'erspan0\x00'})
r1 = socket(0xa, 0x2, 0x0)
getpeername$packet(r1, &(0x7f0000000200)={0x11, 0x0, <r2=>0x0}, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', r2}, 0x50)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0x20, &(0x7f0000000280)={&(0x7f0000000a40)=""/4096, 0x1000, <r4=>0x0, 0x0}}, 0x10)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="4000000010000706000000000400000000000000", @ANYRES32=0x0, @ANYBLOB="b57dad8800000000140012800b00010067656e6576650000040002800b000100"], 0x40}}, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_type(r7, &(0x7f00000000c0), 0x9)
sendfile(r7, r6, 0x0, 0x10000)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0xc, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x800000}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r3}, {}, {}, {}, {0x7, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffe00}, {}, {}, {0x85, 0x0, 0x0, 0x55}}]}, &(0x7f0000000300)='syzkaller\x00', 0x5b8c, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @xdp, r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x10, &(0x7f0000000300)=@framed={{0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4b, '\x00', 0x0, @fallback=0x36, r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x94)
r9 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_group_source_req(r9, 0x29, 0x2e, &(0x7f00000002c0)={0x402, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @local}}}, 0x108)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r8, 0xfffff000, 0xe, 0x0, &(0x7f0000000000)="619ff1e3c70400d5721ff59fe864", 0x0, 0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xe, 0xe, &(0x7f0000001300)=ANY=[@ANYBLOB="b7020000f53f6314bfa300000000000024020000fffeff7f7a0300fef0ffffff79a4f0ff00000000b7060000ffffffff2e640500000000007502faff07cd02020404000000247d60b70300000a0a00006a0a00fe0000000c8500000026000000b70000000000002995000000000000001da5ad3548ebb63d18db6a1c7e821c9b767ac8308fbcd5c5e4a5ad1065b572c2c9ff215ac60c2ceaea4c0ec908abb6e7325ec1956bd8660bf3664148a2c96752fe2bb328dff1a15750ab9a780001000000000000d4bf20c2bd152d814f01f2cd519e078d4ffab418e4682b2aec5e4a35629e8ef040c50287c37a7f4182f32333b08c6e497687e10a4daea5cac0ceafdbb126eb02a1f5104d16ddb64963d84d91814cd5817e0b8f6f5e6ee7a39e180b5a18ed786b782ab1321ea5e82ae5ba2c42a5e23ea6253d5df768d0cb9f35e4f41a6211e52bb3598e9b5d4f22d8c19f958e8b34de35949a7a48ce18799ee53da177a81ea65e652c1d71b7ee86a75b0100000042127a8f84538a9a311c757f7169f006f3f5c95177fbd0b14b36259e2905ef911785c88a16aae46084d676d8ef8aa6ecc2d32e3f4ee367c5a769c0a606636c9f4a4413c098f4fcc96623b7c373b0ef04d55b846b094bf97e2ef5987b6e09a6a7cab79bffda141f65e7d9ebe3be70c436432b70a80cce69df30d3d67d84ccf3f9db9b690111de2ddc4b153c989ef100bbf76063d3f6ffffb73d70e9c3d7b90aecf48e7565efff2dbbb512218c98442406333c890923a797e00b75481739952fe87fde27ce81893f54ec0ea8e792414f639bc9ce1fea3f6ac0d7025759d4b45576c205c70631e8ad585951950e521f4e210b6494e3c52d927195737945cc03d5668483151710de246420a1b6c55b73876a6ed7fd0d9338923789a1edcd8043fe83919088383268324a25df14010c8ed6b8d43400eaa00ff9bc46e1cfecbdc0e451ac53b409d04544d3a7edd4d447d2fb431e226ae182b8dcc86fe09b404e0b7c723d3b19c3dc382fa91fb0fb8f9f3f13296bb1758b24aad0922091d49e2bc408a5a37deee7a60b903d2d9fe9d451cafcc8dc389671c2d08b6e264150a6b9445b00cee4585af04fa69e0380be0d66649dcf3bf8a906b029faca75ce34c41aec7aa86e596119109ea8b3f7c65c902499227c087301643baab1c95bb22cedd913b22dcaa197ccc34586dc50bd9f4628e3e77a0de32e356521df06f995cb57f97052fc4158250ccecfb67ea8faf509593fadc7eafb613327b052397af1ede94d87590ce90a0a7579766f7ec4fcd3cb0b1a8c531724d5ef6b334803cedaa9cedf16dc3af6e0b67f62a83a256474c97c925d9d447175b535c87dbdeb0dcca5303eed6689ea91e1665c691df736368dde47e6672e93a314c5f60e7b68c2242bd0f0d8c66449d8687dcf2d0f76668b2b9bf8b32b99b7daf34b2d825d192ade90a1162acfe9749d516d014cef5f99126324ea02baea5808c430985749901b09e4902a6f5addc0103756b894418e4591c624a9b206abbfb888d413d923b0d7c9d997d6d8e64787c4d397f57a15b6d5b4212b6cb55b9c207bbe08f483b1bea05f41b9a1d3af087047c568ae6ebfc0bb5ec10b6290dc757a4903a88fb2c035b2349b6d2f0c051b8b7718384eebd5fc19928cea713ff09e179c308fbe9bd64374d96ef2447a2a4af5ca0c39e7ca2e801e57560a55e9cfa095cf3f74398219ad1030a79517a88de7596429a20793e12616aa32b3e720c6521fbe93963e9536d16f3db211fca7dd99c0a0125ff8c18119a6926083f4a2c008a9f2a29e30823bf0ec3639cadaf9be9608358e1e5ab17eea477b1754f78f45468c9568471667f82f5e250b979b9f2bd0d1b6bc03d11811ac6eec9a3ecd9e3c3299ee5eb3c6cac8fbd06514b7ee743ece79c04566d02a08fd5fcabbab3d129c0cced3ce11dafa387a8077927a1ad367c114d0b423e64c6157fac5e4e2168f33541daeff9983d0e488a78bef538f870b84798272b2101e0abf1cd64500b79e01e11d727389653bd80a39d5bbe2e23d2f5ff10047423429981bd9b4ce680e174c266391e3e7689452654e5cd5ada6e025327a1942b5a068f15fa58eaa267d4e0881783dddbdd777f8be0824ffdf6d06c621880dbbe9534f15e8c2e364d3ec67deb6ab9f2a0f03212972dbd38500000008173553a67be48633103809eee0be51d67d7ce230b389607b4c3b18da1c48f3180f2e0d79e54565fdd9a099b5b5ba2761905b88b7cbfc39c35dd153609da3da263438f12769602c2195245ff83e249119d4f6cabfbdef84ada19ef4a67ed66d7043036515d0be5a231f99e71aba5d5ae04676eff3e85f0844c41bbcfde7a931d1ec55c01f703bfd1b97756bfe55a91f6b379f34a018906339771157c66dbd7471d1beec7f029ef552cf5e92a1a0db21b59355763967ce26a577bc514b6d22a09c385c5ba6caf524e1688fc0f20002b35ae7bc8eb5ba51aebdf7d972c3267cedbe77ed70d9c539bc455a6f88b39196c8a224b0acf4d796fea59a07baa34cc270fb096ef330fbebdf872d7d0bc4f9a963355c554abc5cdb91464faabcd09cd9a53f5d1b2ea7e96f428f7cd6735c19c61dc9942d30bf29ef85ed01c2fcd6060aa40eeff971477b4fde48507b7bad95a496540adff7e4a72fd1f94d7c703ab1525c946c54e0da3d7ebfcc8c367d1bfd1aea2e84c3b310aaea5a1627df898c00a9aaf2d88a36afa4c5b1816384310600001c33125ad7f7970beeb256aec06e39fc6c66544e1d1dc5fea4b68a82dc568ca30aea9a1d097f06f11dc362f4bae5ef57c67686a15855cd351bf26f40fb1348cfce79897682228e6d9643530c81bab27bf7b1c4a76a5be180bb830cf06827c3f38a9c9c580c732c30aaceda78b0297de35a922b1375b129655beb31899e26052cc216f832fdb0a0015f93c9cff77f59cda1ec5f3e358848756cebb074266a47e39ae26e80e8c65aaf73c24925458520a9ca98760d1005c9f81846459ae6d5baa4f02807939ddc29c3520f7c58ed9bc5a569c7a1bc33cf4f330a18276ffb4550b9166c3939e8041094bec034aa0ec6638b74fe34f0f1ec6903a1135808d5d8d26c9203c3f87e66c407b7c5c0888d4558dd657cc0213efad68e76fdd7b23e68064fd4b271ed79c50abacdd2871b0c1f8c971df59a5a1901ddf804bed43e391f882d2a45c51cdbba86b2a1b7c0c4923642a731ea4dcbad2b6ebbebe787a8e28e781d75beee924b3b1e390750f316648133922c021f98fd2d5d71a7a3679397ef6cf432837b7e264831ec01c4c3146ba0caac3b13d55945ec00e978a1c1712cd51187936200606c9cd6877b2f72125295c54721f8e15df2ae282a8becb99a726fd92acc92141e1f574b4b0b3c992a61af3372d0d9217776b1a42cd2cee816a70bf1ddd69b590d53e28ba356e74b38e23e50d898e95cdc7cc809e462c884b53f672aab1411ecfd4c91e7a9782fc6763f0efd4bcbaf1fc3a00000000000000000000000000000000000000000000000000000000048e510340087caf22439d5304bd704a6a78a512269a9b1cbd13bea78c807bbc73853ae187cbb768673e9d1bf74a3b0a6c234accd8506adf314f4c5e08174540b69d3c0da660052b43b86baf49e7ac6f09c21598b1e01dc1e1b5a53626b090496dbf7af441e397016c3c094d5c91ffe0a7ceacfd225ed9a6c905f79ad7052747dd6cceef4c310e0e935311118bc6bf0e5ca6c7cca7d5c03be570308da8a40578b4db14961fbccf6e2f2d56e9509c434126515b56d032e20c12e830d1bc64826fc9b318da5911e466878dbb81edeff69363fb75af5cd80536f14d2eaa7764db23acdbd394bbbbccf5e882602897a85bf8523d891080593d831d758deb4f2c7e49c6d6b35d8fd92601c8500febb0c5fe0be294bf6bbbecad444695277a9e3992a354492513b43091d161c7c7cdbbe44e8e83b4cf333238a52f214b278c6485236ea880db2f113f6381187679a4620d6149808b0af024b3b3e6ba99b4b15ca"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x143}, 0x48)

1.217015292s ago: executing program 3 (id=5877):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000)
recvmmsg(r0, &(0x7f0000001b80)=[{{0x0, 0x0, 0x0}, 0x7ffffffb}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0xff}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000940)=""/4096, 0x1000}, {&(0x7f00000003c0)=""/100, 0x64}, {&(0x7f0000001940)=""/152, 0x98}, {&(0x7f0000001a00)=""/181, 0xb5}, {&(0x7f0000001dc0)=""/200, 0xc8}], 0x5}, 0x80000000}, {{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x3}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0x7}, {{0x0, 0x0, 0x0}, 0x6}], 0x9, 0x14022, 0x0)

1.214046983s ago: executing program 3 (id=5879):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001d40)=@base={0x1, 0x4, 0x7, 0xa3, 0x10}, 0x48)
bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x2}, 0x38) (async)
r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0)
ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f00000001c0)=0x2) (async)
ioctl$PPPIOCSACTIVE(r2, 0x40047459, &(0x7f0000000080)={0xfffffffffffffe43, 0x0})
r3 = epoll_create1(0x80000)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000100)={0x90000011}) (async)
pwrite64(r2, &(0x7f0000000140)="7906", 0x2, 0x9) (async)
sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000f80)={{0x14, 0x10, 0x1, 0x0, 0x2000000}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}], {0x14}}, 0x64}}, 0x0)

1.017562481s ago: executing program 3 (id=5881):
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x10, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="b40000000000000079104800000000009500740000000000bb3f28b7add9d5382f7b230cea302bede320748fe497b4dfa4ed81d2279f09cafc9c3d45e4978074cd91f83b54628eae02c3e84d4548b16a039c1e2475ec39c3b3de8146ff04c20e31d474ed138540740c745f607f8a54de41c841d197ba645c24ad89db42ba6f28c6d2376d5079c0af296b0228b156185e04bda24d3fa0fa826f0d5073e1842c8d39ee081a2a4fe26f9e6cd4636d367cb9e5cc2dfaf6adf7bd4aaea24ddd03bad3b78cd6563fa6ab"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) (async)
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000001d80)={0x0, @in6={{0xa, 0x4e23, 0x20006, @empty, 0x6}}, 0x7f, 0x2, 0x0, 0x5, 0x392, 0x94}, 0x9c) (async)
shutdown(r1, 0x0) (async)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={<r2=>0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, &(0x7f0000000100)=0x10)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000140)={r2, @in={{0x2, 0x4e21, @empty}}, 0x7, 0xfe00, 0x2, 0x6, 0x54, 0x6, 0xf9}, &(0x7f0000000000)=0x9c) (async)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00'})
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7fffffff}, 0x10)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="2e00000022008102e00f80ecdb4cb9020a", 0x11}, {&(0x7f0000000080)="0c74c75350f4a590e15c61c7942348092734fe18630100000000000000", 0x1d}], 0x2, 0x0, 0x0, 0x10}, 0x0)

957.350771ms ago: executing program 1 (id=5882):
socket$nl_xfrm(0x10, 0x3, 0x6) (async)
r0 = socket(0x3, 0x3, 0x28)
bind$unix(r0, &(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x6e)
r1 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) (async)
connect$inet(r1, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) (async)
writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x11)
shutdown(r1, 0x1)
getsockopt$IP_VS_SO_GET_DAEMON(r1, 0x0, 0x487, &(0x7f0000000000), &(0x7f0000000180)=0x30) (async)
r2 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20) (async)
setsockopt$inet6_int(r0, 0x29, 0x13, 0x0, 0x0)
sendmsg$inet6(r2, &(0x7f00000000c0)={&(0x7f00000001c0)={0xa, 0x4e23, 0x80000, @rand_addr=' \x01\x00'}, 0x1c, 0x0}, 0x4080) (async)
setsockopt$inet_int(r1, 0x0, 0xa, &(0x7f0000000500)=0x10000, 0x4)
ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f0000000240)={<r3=>r1, 0x5, 0x5, 0x9})
getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000000600)={{{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0}}, {{@in=@loopback}, 0x0, @in6=@initdev}}, &(0x7f0000000340)=0xffffffffffffffe7)
setsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000400)={{{@in6=@remote, @in6=@private1, 0x4e22, 0x9, 0x4e21, 0x0, 0xa, 0xa0, 0xa0, 0xb6f6ab86ea344308, 0x0, r4}, {0x6, 0xc3, 0x3, 0x5, 0x3be, 0x9, 0x2, 0xb}, {0x3, 0x7fffffffffffffff, 0x7, 0x40}, 0x5, 0x6e6bb3, 0x1, 0x1, 0x3, 0x1}, {{@in6=@mcast1, 0x4d6, 0x2b}, 0x66a06055485916e5, @in=@remote, 0x3505, 0x0, 0x0, 0xa7, 0x1ff, 0xd47, 0x7}}, 0xe8) (async)
setsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000240)={{{@in6=@loopback, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4e20, 0x81, 0x4e21, 0x3, 0xa, 0x0, 0x80, 0xc, 0x0, r4}, {0xfffffffffffffff9, 0x100000000, 0x5b4, 0x0, 0x8001, 0xffffffffffffffff, 0x4, 0x1}, {0x100, 0x0, 0x2, 0xa}, 0x7, 0x0, 0x0, 0x1, 0x3, 0x2}, {{@in=@broadcast, 0x4d4, 0xff}, 0x2, @in=@rand_addr=0x64010102, 0x3501, 0x2, 0x3, 0x1, 0x3ff, 0x5, 0xf87}}, 0xe8)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="1c0000001500010300000000000000000c00000008000100", @ANYRES32=r0], 0x1c}, 0x1, 0x0, 0x0, 0xc001}, 0x4000000) (async)
r6 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, 0x0, 0x0)
sendmsg$NLBL_UNLABEL_C_STATICADD(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x6b7e369c4a37b0ea)

864.806582ms ago: executing program 3 (id=5883):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x78, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2, 0x0, 0x10}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}, @CTA_LABELS={0x14, 0x16, 0x1, 0x0, [0xffffffff, 0x3, 0xc3, 0x3]}]}, 0x78}}, 0x0)
connect$vsock_stream(r0, &(0x7f0000000080)={0x28, 0x0, 0x2710, @my=0x1}, 0x10)
socket$nl_netfilter(0x10, 0x3, 0xc)
openat$rfkill(0xffffffffffffff9c, &(0x7f00000002c0), 0x80080, 0x0)
r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@multicast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x4f}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {{@in6=@mcast2, 0x404d3, 0x2b}, 0x0, @in=@empty, 0x0, 0x3}}, 0xe8)
r3 = socket$key(0xf, 0x3, 0x2)
setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f00000001c0), 0x4)
sendmsg$key(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$IPVS_CMD_DEL_DAEMON(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="554b00000000000000000800000014000180080005eeffffffff050001"], 0x28}}, 0x0)
sendmsg$IPVS_CMD_GET_DEST(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="88000000", @ANYRES16=r5, @ANYBLOB="0006000d0000000800040008000000080004000400000008000600050000004000018008000500000e00000800080001f8ffff0c00070003000000110000000700060064680000060002002b000000060001003a4d000008000800000000001400018008000500030000000800080081000000"], 0x88}, 0x1, 0x0, 0x0, 0x94}, 0x4804)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="1802000000000000000000000200100085000000a000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000"], &(0x7f0000000040)='GPL\x00', 0x2}, 0x94)
sendmsg$key(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0)
close(r2)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000700)=ANY=[@ANYBLOB="b80000001500e9990000000000000000fc000000000000000000000000000000ac1e0001000000000000000000000000000000004e2100000a00400000000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="00000000000000000000000000000000a30a000000000000f8ffffffffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000b0000000100"/105], 0xb8}}, 0x0)
r7 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000000)={@mcast2={0xff, 0x5}, 0x200, 0x0, 0x0, 0xb, 0x0, 0xf}, 0x20)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000680)={'bridge0\x00'})
sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x44000}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x15, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="e0ae00caaf8a3716000600000000000000d50321cb45a2ccc2c3a5e3d588c7"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94)

795.26351ms ago: executing program 1 (id=5884):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000008c0), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0)
ioctl$FS_IOC_GETFSMAP(r0, 0x4008af03, &(0x7f0000000000)=ANY=[@ANYBLOB="00000000000000000200000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000a49900000000c500000004000000010000000000000001000000000000000100000000000000070000000000000000000000000000000000000000000000000000000000000005000000fcffffff0600000000000000ff01000000000000030000000000000000000100"/320])

722.573258ms ago: executing program 1 (id=5885):
r0 = socket$inet6(0xa, 0x3, 0xff)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000001800010025bd70f2ffffbd9302000000000000090000000008000500ac14140e29b195d2b3817fee71d6ca240c6e003d655d1d90eb27f5dc12c98a20c4eb73ea0c0b00c3a8c77752fc67572009864f10438fe95912e768a37c33d8d93b65831865b356a15b1d2b842229"], 0x24}}, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c01000013000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="050027000000000008008500", @ANYRES32=0x0, @ANYBLOB="140003006d6163766c616e31000000000000000008000a00", @ANYRES32=r2, @ANYBLOB="e8001a8048000a8014000700ff02000000000000000000000000000114000700fe8000000000000000000000000000aa050008000000000014000700fe8000000000000000000000000000bb9c00028010010180bafc0000000000000400070040ff0700100002800c000180080000000000000018000a80140007000000000000000000000000000000000144000a80050008000000000014000700fc020000000000000000000000000000140007000000000000000000000000000000000100000700fe80000000000000000000000000000005000800000000000400070004000700100002800c0001"], 0x15c}}, 0x0)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r2}, 0x8)
close(0x3)
r3 = socket(0x26, 0x3, 0x0)
r4 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r4, 0x0)
close(0x3)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f00000009c0)={<r5=>0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x7a, &(0x7f0000000340)={<r6=>r5, @in6={{0xa, 0x4e23, 0x5, @private0, 0x8}}}, &(0x7f0000000040)=0x84)
sendmmsg$inet_sctp(r3, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000540)={r6, 0x90bf}, &(0x7f0000000580)=0x8)
bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x1d, 0xc, &(0x7f0000000180)=ANY=[@ANYRESHEX=r2], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @lsm=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000006c0)={<r7=>0xffffffffffffffff})
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000080)=0x1a06, 0x4)
ioctl$FIDEDUPERANGE(r7, 0xc0189436, &(0x7f00000005c0)=ANY=[@ANYBLOB="fdffffffffcf3b316b9cffffffffffff7f"])
r8 = socket$netlink(0x10, 0x3, 0x0)
r9 = socket$inet_icmp(0x2, 0x2, 0x1)
r10 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r10, 0x6, 0x25, &(0x7f0000000340), 0x14)
getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000000240)={0x0, <r11=>0x0}, &(0x7f0000000400)=0xc)
r12 = socket$kcm(0xa, 0x3, 0x87)
sendmsg$kcm(r12, &(0x7f0000000580)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x7, @mcast2}, 0x80, &(0x7f0000000540)=[{&(0x7f0000000180)="ff", 0x1}, {0x0}], 0x2}, 0x40810)
sendmsg$netlink(r8, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000007c0)={0xd8, 0x2d, 0x1, 0x0, 0x0, "", [@typed={0x8, 0xc, 0x0, 0x0, @uid=r11}, @nested={0xb, 0x0, 0x0, 0x1, [@generic="976b6408686030"]}, @nested={0xb4, 0x1, 0x0, 0x1, [@nested={0xb0, 0xf6, 0x0, 0x1, [@nested={0xac, 0x146, 0x0, 0x1, [@nested={0xa4, 0x42, 0x0, 0x1, [@typed={0x8, 0xa6, 0x0, 0x0, @fd=r12}, @typed={0x8, 0x31, 0x0, 0x0, @fd=r8}, @generic="e492d9c3ff02cd50b791a48600b38ca5df5646131dde9f2721099f165faa12b77661bd6624e2fdfa50bebace3dae9d712f9ca4e9065e59869c7778e50debfb18d30b95e2b244339cd6bc9c8241e455808833efb4d3cc0888c3432dbfb2e484162fde86080f0ee307687785b0c0931b24f4a317daf5f69314d24ddf4837ba589cc25e6461666245c9e79a00358794a152"]}, @nested={0x4, 0x4d}]}]}]}]}, 0xd8}], 0x1, 0x0, 0x0, 0x2000000}, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x16, &(0x7f0000fcb000)=0xfffffffc, 0x4)
socket$nl_generic(0x10, 0x3, 0x10)

657.053405ms ago: executing program 3 (id=5886):
r0 = socket(0x2, 0xa, 0x300)
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x19, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000081"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x80)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f271a76d2688634c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', <r2=>0x0})
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}}, &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r2}, 0x94)
r4 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'syz_tun\x00', <r5=>0x0})
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000500)={r3, r5, 0x25, 0x4, @val=@tcx={@void, @value=r3}}, 0x1c)
syz_emit_ethernet(0x152, &(0x7f00000006c0)={@local, @random="1347d8e6eaaf", @void, {@ipv6={0x86dd, @tipc_packet={0xd, 0x6, "6ed6c9", 0x11c, 0x6, 0xff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, {[@routing={0x6, 0x6, 0x2, 0x3, 0x0, [@mcast1, @private0={0xfc, 0x0, '\x00', 0x1}, @private2]}, @routing={0x2e, 0xc, 0x2, 0x3, 0x0, [@mcast1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x44}}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}]}], @name_distributor={{0x7c, 0x0, 0x0, 0x0, 0x0, 0xa, 0xb, 0x2, 0x8, 0x0, 0x1, 0x4, 0x5, 0x4, 0x4e23, 0x4e21, 0x2}, [{0x7, 0x2, 0x2, 0x401, 0xc, 0x2, 0xf, 0x7}, {0xfffffffc, 0x3, 0x0, 0x0, 0x8, 0x2, 0x7, 0x1ff}, {0x51, 0x5, 0x6, 0x1ff, 0x0, 0x0, 0x5, 0x3}]}}}}}}, 0x0)
r6 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$MRT6_DONE(r6, 0x29, 0xc9, 0x0, 0x0)
r7 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@gettfilter={0x2, 0x2e, 0x100, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x7, 0xd}, {0x9, 0xffe0}, {0x1, 0xfff1}}, [{0x8, 0xb, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x90}, 0x4000c00)

655.757667ms ago: executing program 1 (id=5887):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048801)
r0 = socket$igmp6(0xa, 0x3, 0x2)
r1 = socket$alg(0x26, 0x5, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newtaction={0x2690, 0x30, 0x300, 0x70bd2a, 0x1, {}, [{0x1114, 0x1, [@m_skbmod={0xb0, 0x10, 0x0, 0x0, {{0xb}, {0x18, 0x2, 0x0, 0x1, [@TCA_SKBMOD_ETYPE={0x6, 0x5, 0x596}, @TCA_SKBMOD_SMAC={0xa, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}}]}, {0x6d, 0x6, "f3cda3ffc458caae02aca4b978967ba89bb94288b30292a7586c05670257eb3b3a38a1e8c160cb9af5855b12cc8e0c9c2dfbe6d8cdf54b59e1a5c23ac20002aa2fae9c47322298615bb5d3e53347e1e0b15b81f15d0ec8c741786bf16457df04eac9c7479748024e29"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_gact={0x1060, 0x1e, 0x0, 0x0, {{0x9}, {0x34, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0xb4, 0x2, 0x5, 0x8, 0x561}}, @TCA_GACT_PARMS={0x18, 0x2, {0x7, 0x3, 0x20000000, 0xfffff45c, 0xff}}]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}, {0x4}, {0x3dc, 0x1, [@m_ct={0x84, 0xe, 0x0, 0x0, {{0x7}, {0x54, 0x2, 0x0, 0x1, [@TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @dev={0xac, 0x14, 0x14, 0x10}}, @TCA_CT_MARK={0x8, 0x5, 0xfffffffc}, @TCA_CT_MARK_MASK={0x8, 0x6, 0x1}, @TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e24}, @TCA_CT_NAT_PORT_MAX={0x6, 0xe, 0x4e23}, @TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @broadcast}, @TCA_CT_MARK={0x8, 0x5, 0x8}, @TCA_CT_ACTION={0x6, 0x3, 0xc}, @TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @remote}, @TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e20}]}, {0xc, 0x6, "205b717b3ad3094e"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x5}}}}, @m_skbmod={0x11c, 0x1e, 0x0, 0x0, {{0xb}, {0x64, 0x2, 0x0, 0x1, [@TCA_SKBMOD_DMAC={0xa, 0x3, @multicast}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x7, 0xffff, 0x3, 0x7, 0x1d}, 0x8}}, @TCA_SKBMOD_DMAC={0xa, 0x3, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x2, 0x0, 0x20000000, 0x3, 0x6}, 0x3}}]}, {0x8d, 0x6, "e95bcd02ae93802ab7f21cb0d862cadfef59914f6b4977de74ab8bfaaf846440b6053f1481f12e84dd61e22728bf1ad8f69c71a1b1dbc1a88a9e098051f4ddebc9b258d25b1d7b40c2eb209f3cdd76d14b9371a561e0df6dd9fc8715e0c7e2a9aa1fca7cb2d0c632093be46e40d4cb799ed68809cdd4931a050dc13359897df196ed303a601906c32b"}, {0xc}, {0xc, 0x8, {0x2}}}}, @m_connmark={0x238, 0xc, 0x0, 0x0, {{0xd}, {0x11c, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x7e70, 0x2, 0x3, 0x8}, 0xfff8}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x8, 0x8001, 0x6, 0xffffff47, 0x9}, 0x3}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x101, 0x3, 0xffffffffffffffff, 0xffffff80, 0x3}, 0x1}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xe302, 0x0, 0x20000000, 0x3, 0x81}}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x200, 0x3, 0x8, 0xf, 0xfffffff7}, 0x7}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xf99, 0x200, 0xffffffffffffffff, 0x3, 0x6}, 0xdd}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x385, 0xff, 0x20000004, 0x5, 0x7}, 0x6}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x40, 0xfe0f, 0x1, 0x10000000, 0xffffffff}, 0x4}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x6, 0x2, 0x1, 0x81, 0x5}, 0x3}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x5, 0x1000, 0x2, 0x6, 0x40}, 0x800}}]}, {0xed, 0x6, "8a272861e4d16a5451d24944b8bd7a7cbce3861514e0c77e2a80c858a0281dd9cf508e65364280bd8807a96ba18a947a9d0012242764017c4d61a9125f34cff08a55d831cccee4007e62654e8930dfa0c38c00fb8e51244c4d3e3bc9d33eb0077c3b6c6ce4f9cf1cd71a94109280b34c71dd4e806b7636ea6566d2603b0b4fd6e23da2e1e387c99153c05bb36e5a58a2d097c7b875bd3fc238971158cf41698460024664a6cfcec5934c1c26afa5d6e09b25515fc1ade0612f1c8813d1df3ac6a62d25fc56bd4fe78da607efd142894f9c3e145c72122ec7d1ccda1ab0401a2936902898fcf348ab84"}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}, {0x748, 0x1, [@m_nat={0x1a0, 0x16, 0x0, 0x0, {{0x8}, {0xa4, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x3, 0x0, 0xfffffffffffffffe, 0xf, 0x6}, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0xcc09, 0x3, 0x5, 0x8}, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x10000, 0x3ff, 0x5, 0x2, 0xffffffff}, @loopback, @local, 0x1feffffff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0x3, 0x0, 0xfd3f, 0x80000000}, @broadcast, @multicast2}}]}, {0xd7, 0x6, "47dc8132eaa48f2d0c49b90278370c1cd6a3534c1a57a9522031f97885a2677ff6f9912254cc064f3eb83c740d7ffe087ef12d7444b2855f95df1cec3c702c0e671e19675d744e480ba540d52071082ce0272b82d50aaf8903c42a754614fb3fc6e29d5bbcd4451f605595b9d6c6b7e11f936ae2c71f895daf7a67cd235bd2df625722b5b7b373f13991cd4208cbd0fcbe56c8fce720673083160625734d6b860c21f18f742566b4399773ac36e36eccb4b1106761921fead409f7b01cb6339a607e7443d7081ee731fc1ef348f1483c89059c"}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}, @m_ife={0x134, 0x9, 0x0, 0x0, {{0x8}, {0x54, 0x2, 0x0, 0x1, [@TCA_IFE_TYPE={0x6, 0x5, 0x2}, @TCA_IFE_TYPE={0x6, 0x5, 0x2}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x7fffffff, 0x7, 0x2, 0x6, 0x7fad77cc}}}, @TCA_IFE_TYPE={0x6, 0x5, 0x8}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x9, 0x9, 0xffffffffffffffff, 0x7, 0x6d9}, 0x1}}]}, {0xbc, 0x6, "359367e054cc12bdf9ebbdf8f675f90031bd40f87b257819f0252906a9ddaabd22ebc588c36cbae026eb32c9eb0ab33441e6b5d39b1618169d2088b329b3e270329364e31a2d78da0e36945d866af1c7085d7495087e5ca736012147ef4a1730ec1b64c2a66be04e7620b77a78b29708bde6e0d39fb3d9565397c2c3c2733ee1c1d5a83fbc23369d12786af037038eaff5e79b429fd23ac80d7830cfd5b936b56b6dfdd0a102932ee057a6c5101c0e67d1786e4f61dad9a5"}, {0xc, 0x7, {0x6f8179282f4ec4d1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_vlan={0x58, 0x8, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0xae5, 0x7, 0x4, 0x6, 0x1}, 0x2}}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x3}]}, {0x6, 0x6, "ab7b"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_simple={0x168, 0x9, 0x0, 0x0, {{0xb}, {0x58, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0xffffdc57, 0x6a9d, 0x5, 0x1, 0x3}}, @TCA_DEF_PARMS={0x18, 0x2, {0x8, 0x5, 0x10000000, 0x9, 0x29a}}, @TCA_DEF_PARMS={0x18, 0x2, {0x4c8184a8, 0x10, 0x2, 0x8, 0x3}}, @TCA_DEF_DATA={0xa, 0x3, '${*^^\x00'}]}, {0xe6, 0x6, "3d7407d5aec86c0bc0279f7fd7e140b6a386f03936a35b77ea2b85967b831c55ad04eac9483e21a967a9fc1936d50efaeaf262c96ba88ed72857caafb4433a029d832b163cedaa319e4ec568a17a4eb4b147588cc705ef9a8348faf3fe79d87fbbf0d837f1f3abc835fce8352d7d32888b25dc0487b54ada9c7c990980d3c6bc69c3060e2709d62ea7a107bc9008842c720fd07610f85e8269a6bd6af44ee4295e5fb6a6215e3b874121d947578e8ad70908a94d142401d598a6693922d706fff84febca995a0bdd189c0c9b04fe21e37f6535731ef7c02d82a036557aa39c68caac"}, {0xc, 0x7, {0x1, 0xbfd557074ab4e433}}, {0xc}}}, @m_csum={0x17c, 0x9, 0x0, 0x0, {{0x9}, {0x100, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x1, 0x101, 0x6, 0x4, 0xffffffff}, 0x1a}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x5, 0x101, 0x2, 0x7, 0xf}, 0x3b}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x2, 0x6, 0x1, 0x3}, 0x18}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x0, 0x8, 0x5, 0x4, 0xd6}, 0x75}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x6, 0x2979, 0x7, 0x0, 0x1}, 0x35}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x5, 0x7, 0x20000000, 0x6, 0x6}, 0x48}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x0, 0x2244, 0x20000000, 0x5a7, 0x7}, 0x4f}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x2a, 0x400, 0x0, 0x4, 0xf}, 0xd}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0xa00000, 0x1492, 0x2, 0x3, 0x3}, 0x3b}}]}, {0x52, 0x6, "c209d93f7e37e6962120d3c7635601f6e63b412c2b5cb998d1791e4b8dcfe386ed079bda2c9522dee24ca3597bdb562d9f0886e5f2aae47cf9af0a1eb8f95c658055017b4e047eca1a2c68709656"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x6}}}}, @m_skbedit={0x134, 0x8, 0x0, 0x0, {{0xc}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_MARK={0x8, 0x5, 0x3}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x5, 0x3}}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xffff, 0x10}}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x1}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6}]}, {0xe0, 0x6, "8063e012001a73fee40c21cb075749a30910dcc5b5c8ea5db96b13e7f59cab0a12f732c1c94f926f12b8797852acae2271e5d0244273dad856fbb3d971464d7879b7e3085d4f9cf687fb265f1d55480818222037816fc422e7eee48119ad0f48b0727d607b691bcd6c13e05ca63710e9aaa6a1ab27940b474cb2d7abd17918534331f9b21685502692bb0e21559b42247df137ea2470f5d96577fd63b8de31d6995145d4213f08739143247e63458d7eaa245b2545df117d4baaf2373d5bb84fa52a0c87a5be37cfc2a6279bdd20ac2176b0ade15861637f43c232d1"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}, {0xa40, 0x1, [@m_gact={0xd0, 0x13, 0x0, 0x0, {{0x9}, {0xa0, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x1, 0xffff, 0x20000000, 0x501, 0x7}}, @TCA_GACT_PARMS={0x18, 0x2, {0xdd, 0xffffffff, 0x10000000, 0xfffffff6, 0x9}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x1da7, 0xffffffffffffffff}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0xc77, 0x6}}, @TCA_GACT_PARMS={0x18, 0x2, {0x6, 0x9, 0x3, 0x9, 0x3}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x1cbd, 0x4}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0x1c47, 0x1}}, @TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x9, 0x5, 0x7fffffff, 0x40}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x2708, 0x10000000}}]}, {0x7, 0x6, "05ccdd"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3}}}}, @m_skbedit={0x130, 0x1, 0x0, 0x0, {{0xc}, {0xc, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xc, 0x4}}]}, {0xfb, 0x6, "9c75cc16b742172ea540b95e9b147058b59cd55340154150cd4e55fe0dd72182fe39ee644785413d583eee45236dc717a3c75d8a3695e287b32b60cc0b76735505968135def0929292904d9e20acf81ecbd2581ecfaab3a27036362ee52cd93841bcd32b4cd392777c7fefc68fcb5508b17f3a63e5a549e008f01c1a07d5ebbf637bdbd9bf16a643538b0bb9c1e633d9c80fa90b7b3f76f74918bdbdfcd75adeabcdfcba97fabee22b1e5280cb5947c2a679735cebbb7609eb93b99af0af28833023f7ac886ea27410bb56d0f27af3dbaf8cec5c67442a7c8711f40026d872f72a6350f2dab9ad4ea2535337cbce96bb273f2e789be32a"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x7}}}}, @m_csum={0x10c, 0x2, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x5, 0x8, 0x4, 0x6f7, 0x7}, 0x9}}]}, {0xc2, 0x6, "7880bb31a2d813ab8f26ae65e9da15e488d59276e8e69b2d66c3b61954bcfe0640bee56e649cdb16525d918277ed71d4fbc169ce01ad2cd7f5ce0ccec62ff053f118edc2aea7286c48fd0a382f7ba5536b6c4e203867b1209a9874822f8a2b2172896c68c3fbd9ac77bce91f7a104ce22ea4b1c07d5979d1c05cab48b935812abd31fdac9297a9d0ad7fbe8770303ee99af1a54301d7b4f7e0f7da76aefeb895f7f137f62f931f955e2aaf657a5467eb5a2f2e3beacffeb08daf92d91484"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x6, 0x3}}}}, @m_bpf={0x1e0, 0x19, 0x0, 0x0, {{0x8}, {0x110, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0xffff, 0x9d57, 0x1, 0x6, 0x3}}, @TCA_ACT_BPF_OPS={0x2c, 0x4, [{0x100, 0x1, 0xf, 0x9}, {0xbbf2, 0x5, 0x14, 0x5}, {0xe021, 0x6, 0x8, 0x6f4b}, {0x5, 0x40, 0x5, 0xa}, {0xab5a, 0x7, 0x8, 0x5}]}, @TCA_ACT_BPF_OPS={0x14, 0x4, [{0x100, 0x3, 0xf2, 0x9}, {0xfffa, 0xf, 0x7b, 0x393}]}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_OPS={0x54, 0x4, [{0xfff, 0x5, 0x67, 0x3e}, {0xf176, 0x5, 0x2}, {0xfff, 0x42, 0x3, 0x7}, {0x3, 0x0, 0x4, 0x4}, {0x6c5, 0x10, 0x10, 0xe4}, {0x9, 0x0, 0xe7, 0x2}, {0x7, 0x2, 0xe, 0x2}, {0x9, 0x3, 0x10, 0x14a}, {0x10, 0x80, 0x4, 0xd}, {0x9, 0xff, 0xb, 0xffffff7c}]}, @TCA_ACT_BPF_OPS={0x24, 0x4, [{0xe290, 0x1, 0x4, 0x800000}, {0x8, 0xd, 0x5, 0x4}, {0x6, 0x5c, 0x0, 0x6}, {0x8, 0x3, 0x9}]}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x8, 0x3, 0x6, 0xe320, 0xa0}}, @TCA_ACT_BPF_FD={0x8, 0x5, r0}, @TCA_ACT_BPF_FD={0x8, 0x5, r1}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0xa}]}, {0xab, 0x6, "ba535b13c50e3481424c4fea8e0e3091136e2f7220eb0be9cd52f05666d4b8f197e6c4e5de701dc0eda4311bbcad1d3631f8dd0e5141fcf4a9af995820e667a2c1db663dbc54bc4e9626ff342477014bee66a437eb0d0b24794259c81abbe5e54583fa0ecd1361b0d42dd1bd25cef483805a7be610dba2e22d9c5a4336f041c0262ddf4a3483a84041a95af67401335e907d3ab035c6c820143b1aed9f832046fe5ec6a60a1294"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_simple={0x1b0, 0x1d, 0x0, 0x0, {{0xb}, {0x8c, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x5, 0x3, '\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0xfffffffb, 0x0, 0x1, 0x5, 0x1}}, @TCA_DEF_DATA={0x8, 0x3, 'bpf\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x3746, 0x3, 0x2, 0x1, 0x9}}, @TCA_DEF_PARMS={0x18, 0x2, {0x80000001, 0x8000, 0x10000000, 0x1}}, @TCA_DEF_PARMS={0x18, 0x2, {0x80, 0x8, 0xffffffffffffffff, 0x3, 0x3}}, @TCA_DEF_PARMS={0x18, 0x2, {0x6, 0xffffffff, 0x20000000, 0xffffffff, 0xf}}]}, {0xf9, 0x6, "7c6b691628d58b9debcbdeef9dcfcba6d2d5e8281c542738317880c26dde649b671477e60aeec4d5fa192b3acf995c4c907a1859940609bae8c987eea88ad025e7a93eb6877ef550071bd0af24fe303e55c67187cc0043608cba358ca2e52ffa78d1886b354b4af4fbd0950e1e37a57a5d8754674f5bc8dadda3e2fbbb3b31a0c85d35af2b4ffceecbb06d9935a4fd8cef71f7e9bbc8f2586b62f9b12c22be373148b2ce2375bb89b1ca4c873fc94d80acfa6bc79b412a43e791e89425d8b9b4b51fb2e812e809d09a13afa9cb79f2ef4948515d3c0520fa47081e1846e7eec7cd0e11b9fc652a926503bc4b9cf6081a4188e6983d"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_simple={0x158, 0x11, 0x0, 0x0, {{0xb}, {0x34, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x200, 0x3, 0x10000000, 0xa, 0x8}}, @TCA_DEF_PARMS={0x18, 0x2, {0xd3f, 0x40, 0x2, 0x7, 0x4}}]}, {0xfb, 0x6, "97378a2d177cdd16f890827edc8230ff8e0340c1bfe455d345f65c8954ce81af7042f27666a22a32797099cf4df3f97694d2865cfdde810d69272e1a8e0dfe3760f9c7dc1a6c4d5074c9cc51ac30ddd105e8b32e93e6e4f7c24c7dba0e30a5d1e1fca7b9e83c58d96e939d61c762abd4103d2e8d54835ea6d987b1ec542296a136d07336af154ce5408cd0ffa54a6a4d1cb49fd121312975b5bdc7ea59fe3e2bfb27ee6e63c085819dc70ba66d20487055012fc09ddd1c73d46b120208c2aef949fd58c6c670980695c09a4964d36a77f771e5a64baeb7181802ff033682ec8111f8e0e1558619945cc876c549be548682f9c9d68aa715"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_sample={0x148, 0x1b, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x6}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x2000000}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8}]}, {0x103, 0x6, "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"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_csum={0x100, 0xd, 0x0, 0x0, {{0x9}, {0x90, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x787f, 0xffffffff, 0xffffffffffffffff, 0x9, 0x40}, 0x29}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x9, 0x8, 0x2, 0x7, 0xccc8}, 0x1a}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x6, 0x5, 0xffffffffffffffff, 0x4, 0x4}, 0x3b}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x8, 0xd, 0x4, 0x401, 0x5}, 0x71}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x10001, 0xfffffffb, 0x0, 0x81, 0x229}, 0xb}}]}, {0x48, 0x6, "722b64fb0615ea8fc15fbcf22ff0afedbe7ae524ec1341bf4c1e657633bf0f010d66a197e5d859c1ad4ff43522a510f388a72b320329a828bac13c63f48d89cdca062de3"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0x2690}, 0x1, 0x0, 0x0, 0x40}, 0x0)
bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x67)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x2, &(0x7f0000000180)=[{0x1d, 0x5, 0xa, 0x5}, {0xd, 0x81, 0xd, 0x403}]})
bind$bt_hci(r2, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201})
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r5, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000900)={0x30, 0x3, 0x8, 0x301, 0x0, 0x0, {0x5, 0x0, 0x4}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}, @CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_COOKIE_WAIT={0x8, 0x2, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_SCTP_COOKIE_ECHOED={0x8, 0x3, 0x1, 0x0, 0x7ff}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x20000000)
r6 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local})
write$tun(r4, &(0x7f00000003c0)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff02000000000000000000000000000100000000000000cc00000000000000000000000000000000860090780000000000000000000000000000ee3f000000002b036f8c006e64021d683910c3090b3188a7c747eb2278a273c1b80029442911892704", @ANYRES32=r3], 0xfdef)
write$bt_hci(r2, &(0x7f0000000040)=ANY=[], 0x6)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x200, 0x80000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0xfff2}, {0xa, 0xffe0}, {0xc, 0x4}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_ECN_PROB={0x8, 0x9, 0x34}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20008814}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001b80)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe000000008500000002000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e655ced4fbd44e24eb0d34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622003b538dfd8e012cdc75d0ae7f6134ece79f435e79578e51bc53099e90f4580d760551b5b341a29f31e3a06d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005dba9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fff0d7216fdb0d3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff2c91018afc9ffc2cc788bee1b47683db01a469398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447e2edfae4f390a8337841cef386e2209000000476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae486aca54183fb01c82f979ca9857399537f5dc2acb72e7ead0509d380578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db7ab22e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90941576aebc8619d73415cda2130f5011e4845505000000000000004f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4f1f8c7b400000000000007ff57c39495d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a331bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9000071414c99d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8413e92191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cf020deb28c13c1ed1c0d9cae846bcbfa8c3e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4e62b445c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708194cd6f496e5dee734fe7da3770845cf442d488afdc0e1700000000000000000000000000000000000000000000000000000520500002952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a2162415f78000000005f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b40824095135861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e5dd921a5eadd4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033ec10bb9cc16bd83a00840e602c28ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add57729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e29b10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e74e2e5da2696e285a59b51c34a5384f2cf51180c159ce40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af243b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380ecf1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137ff47257f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb79f558982d57c556ca1427b5960b79990565ca2a20996fcba472213744d3a156979651596afde2b8089f023fcfccd072bd6ea8445fc787390d71ec61d5b7b0f05f6931914bf49d66f07dd646bfbdea1cf021a88aa0d66eff294271a93e32f54f281068514a4cd2d0700a43df59e9924e4affdbd22405e675e9d7cdc10546571131831d4dc8c95f5b07667f93a3573d3fabfca58ee0a6b6a691102bb3c7be4dc5b816853275e7ae8c13ec341bad15353fad794b46c4fd73e1b4cc78de2156cb158870d5b8446dae9ba5f7f244e6cf8f6791671057347208a313ebbcb72b04706005670f2b0055e440d72c7c3316982c6ebe8675459cf6bb393b007f5cedb7bc41183460000000000000000000000000000000000000000000000000000b2a7406571e87981ff52907293d17c78ee814c3b2b2daab1c3fae6c8e5bcba4c480dd32946fb3469c25c5d9a80aea721a727dda47f51ad161de1e38e95c8fd856ae241fce3ac63db69930700616ab6c1f383cd3f0efd8a9b40edf1902730d17c3bbf8cb939d714f1b494d817bb8cdc2dbce7c13ca8b6ce9db8577edab646c98944b418e8ee72d58a5f58ce483eb7f10df3f230c22e3429a744ce4e8750b7abe3a54ad6c53101152b1998b69370cae53facee43fe7ae7707ce960cc86cb5b1b041efa2767de75de4de4b6f4506a04c26ac05a87274a99e1dbf31221e3aa0506fa9eac267d7142827ae9a8085892ce79872aac4cb057bcb523398972bcc1165a4ce7756cceaa142842e354e718c65d7f259e20527c360b9f32a2764641912816c874fb96d7b189a48b787cb2900154c6aebf021a7ad1a7d003d01fef55989adfdd9eaf57e763c8cf0000000000000000"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840)
r7 = socket$rxrpc(0x21, 0x2, 0xa)
poll(&(0x7f0000000180)=[{r7, 0x2}, {r7}], 0x2, 0x7f)
getsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f00000000c0), &(0x7f00000001c0)=0x4)
setsockopt$sock_int(r7, 0x1, 0x7, &(0x7f0000000240), 0x4)
r8 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r8, &(0x7f00000002c0), 0x40000000000009f, 0x0)

587.11387ms ago: executing program 2 (id=5888):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ed5696c5820fae0000000000000080beef911d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x800)
r2 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x0, 0x1000}, 0x20)
sendmmsg$unix(r1, &(0x7f00000020c0)=[{{&(0x7f00000050c0)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x80}}, {{&(0x7f0000000540)=@abs={0x0, 0x0, 0x4e20}, 0x6e, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="24000000000000001701"], 0x28, 0x2000c000}}], 0x2, 0x88)

525.730769ms ago: executing program 2 (id=5889):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000001a40)=ANY=[@ANYBLOB="5801000010000100030000000000000000000000000000ac1414bb0000000000000000000000000000000000000000000000001600"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc0100000000000000000000000000000400000033000000ac1414bb00000000000000000000000000000000000000000000000000000000030000000000000004000000000000005700000000000000fdffffffffffffff000000000000010000000000000000007b00000000000000000080000000000000200000000000000000000000000000000000005cfd00000000000000000000000000000a000000aa0000000000000048000100686d616328736861312900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200017"], 0x158}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x437, 0x0, 0xffffffff, {0x0, 0x0, 0x0, 0x0, 0x5120b}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0xfffffffffffffe3f}}}]}, 0x3c}}, 0x4000010)

416.551803ms ago: executing program 2 (id=5890):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000004c0)='cubic', 0x6)
bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) (async)
bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x843}, 0x44040)
bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[], 0x48) (async)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[], 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r2, &(0x7f0000000080), &(0x7f0000000200)=""/155}, 0x20) (async)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r2, &(0x7f0000000080), &(0x7f0000000200)=""/155}, 0x20)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket(0x1e, 0x4, 0x0)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) (async)
sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0xce56fe61a68fc369, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10)
r7 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r7, &(0x7f00000002c0)={0xa, 0x4e24, 0x0, @rand_addr, 0x8000}, 0x1c)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="b400000000000000791048000000000079003000000000009500000000000000db74589d4b38cc306ac390649f8edea0e50e2317db042855d6c74ff3493c7e31e3f6c643155a8e2e01d50bc3347475be393b1f1e4aba75a0750472719cc516eec8b02df8ef39db6e67fa14b769e7f385ba72c64242263c05ddab05e37efe81b8bffc35cdf2ac0d93263ff755d611c4cca1684b1470af6a83366aa430ad2d700b186da622d6fba7000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xb1, &(0x7f000000cf3d)=""/173, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x53)
socket$netlink(0x10, 0x3, 0x10) (async)
r8 = socket$netlink(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_NEW(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r9, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) (async)
sendmsg$DEVLINK_CMD_RATE_NEW(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r9, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0)
sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r3, &(0x7f0000000840)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000800)={&(0x7f00000005c0)={0x14, r9, 0x100, 0x70bd2c, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20000800}, 0x4040)
sendmmsg(r7, &(0x7f00000092c0), 0x4ff, 0xfdff)
sendmsg$NFT_BATCH(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002100)=ANY=[@ANYBLOB="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"], 0x1128}}, 0x20000000) (async)
sendmsg$NFT_BATCH(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002100)=ANY=[@ANYBLOB="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"], 0x1128}}, 0x20000000)
socket(0x8, 0x0, 0x8000) (async)
r10 = socket(0x8, 0x0, 0x8000)
ioctl$sock_netrom_SIOCADDRT(r10, 0x6180, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r11=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r11, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x2, 0xfffff010}, {0x20, 0x0, 0x0, 0xfffff038}, {0x6}]}, 0x10)
sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000940)=ANY=[@ANYBLOB=' '], 0x20}}, 0x0) (async)
sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000940)=ANY=[@ANYBLOB=' '], 0x20}}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))

306.775098ms ago: executing program 3 (id=5891):
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
r0 = socket$rds(0x15, 0x5, 0x0)
getsockopt$rose(0xffffffffffffffff, 0x104, 0x7, 0x0, 0x0)
sendmsg$rds(r0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000640)}, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0xc2300, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xf3a, 0x0)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x80, 0x6)
setsockopt$RDS_GET_MR(0xffffffffffffffff, 0x114, 0x2, &(0x7f0000000280)={{&(0x7f0000000500)=""/216, 0xd8}, &(0x7f0000000240)}, 0x20)
r2 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0x6}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd25, 0x4, {0x0, 0x0, 0x0, r3, {0x4, 0x2}, {}, {0x1, 0x6}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ETH_DST={0xa, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x44}}, @TCA_FLOWER_KEY_ETH_DST_MASK={0xa, 0x5, [0x0, 0xff, 0x0, 0x0, 0x0, 0xff]}]}}]}, 0x4c}}, 0x20040054)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r4, &(0x7f00000000c0)={0x2, 0x4e20, @empty}, 0x10)
sendto$inet(r4, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10)
recvmmsg(r4, &(0x7f0000001240)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x10001, 0x0)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r6 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r5, &(0x7f00000024c0)={@val={0x0, 0x800}, @val={0x0, 0x0, 0x3}, @ipv4=@icmp={{0x9, 0x4, 0x1, 0x16, 0x2c, 0x65, 0x0, 0x4, 0x1, 0x0, @remote, @broadcast, {[@generic={0x94, 0xf, "f00c8e76d0966f9a2b2407c08a"}]}}, @address_reply={0x12, 0x0, 0x0, 0xffff}}}, 0xff04)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x2, 0x0, 0x0, 0xc6}, [@call={0x85, 0x0, 0x0, 0xbc}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200000}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000bc0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWSET={0x14, 0x9, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x4}}, @NFT_MSG_NEWSETELEM={0xe4, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0xb8, 0x3, 0x0, 0x1, [{0xb4, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0x6e, 0x6, 0x1, 0x0, "3dfd2ed268470db32bb16aff5622acc9eac80b80887705794e2d101989048cecadbbfc1d15820df224075fc978e89400e40b7c1bf6052dbe8911a3228215635fc009f0de3bb98ff55d10f4bddd9548ea6f318bbc4a53ea2f02d14aaf97c00bb94289e202710ad9906abf"}, @NFTA_SET_ELEM_EXPRESSIONS={0x40, 0xb, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x2}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x10000}]}}}, {0x10, 0x1, 0x0, 0x1, @limit={{0xa}, @void}}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x120}, 0x1, 0x0, 0x0, 0x4000850}, 0x24028010)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)

236.333717ms ago: executing program 1 (id=5892):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000007740)={0x0, 0x0, &(0x7f0000007700)={&(0x7f00000008c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWSET={0x58, 0x9, 0xa, 0x401, 0x0, 0x0, {0x0, 0x0, 0x7}, [@NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x5}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x2}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x15}, @NFTA_SET_ID={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x90}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x80}, 0x1, 0x0, 0x0, 0x10}, 0x20000840)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0)

0s ago: executing program 1 (id=5893):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0x3, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast})
write$tun(r0, &(0x7f0000000080)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x0, 0x0, 0x14}, @ipv4=@udp={{0x6, 0x4, 0x3, 0x1b, 0x18, 0x66, 0x0, 0x3f, 0x11, 0x0, @private=0xa010103, @dev={0xac, 0x14, 0x14, 0x12}, {[@timestamp={0x44, 0x0, 0x1c, 0x0, 0x6}]}}, {0x4e20, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x4, "31150048d5e06bdc339f0b82e56e05e9a3f461bd8f05c60ff304e7fee8a3221b", "b54970b8807c69e8aba2815e90ed451c3c1a9dff75f0f264e44cbb999c8f292e5aa143fd63ea1886e0cd425df0d8e5e7", "2bed86cd87cd326b66a3ca343e29e347dc61214ad793ad9f48b4d287", {"b15c14be998215153aaf76bbf0aea000", "5cd7bcd4dc8e05cb0a78f479ff0f00"}}}}}, 0xc2)

kernel console output (not intermixed with test programs):

e_anon:0kB active_file:2680kB inactive_file:148424kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:18576kB dirty:956kB writeback:0kB shmem:12856kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:6644kB pagetables:2336kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  344.925262][T16958] Node 1 active_anon:30652kB inactive_anon:0kB active_file:2016kB inactive_file:5616kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:64264kB dirty:292kB writeback:0kB shmem:5116kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:6704kB pagetables:2388kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  344.937830][T16958] Node 0 DMA free:14652kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:576kB local_pcp:300kB free_cma:0kB
[  344.949329][T16958] lowmem_reserve[]: 0 811 811 811 811
[  344.951546][T16958] Node 0 DMA32 free:289756kB boost:0kB min:33660kB low:42072kB high:50484kB reserved_highatomic:2048KB free_highatomic:1240KB active_anon:33964kB inactive_anon:0kB active_file:2680kB inactive_file:148424kB unevictable:3536kB writepending:956kB present:1556484kB managed:830884kB mlocked:0kB bounce:0kB free_pcp:32616kB local_pcp:19588kB free_cma:0kB
[  344.964625][T16958] lowmem_reserve[]: 0 0 0 0 0
[  344.966835][T16958] Node 1 DMA32 free:458492kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:116kB local_pcp:0kB free_cma:0kB
[  344.978921][T16958] lowmem_reserve[]: 0 0 854 854 854
[  344.981320][T16958] Node 1 Normal free:267956kB boost:0kB min:36612kB low:45764kB high:54916kB reserved_highatomic:0KB free_highatomic:0KB active_anon:30652kB inactive_anon:0kB active_file:2016kB inactive_file:5616kB unevictable:3536kB writepending:292kB present:1048576kB managed:874952kB mlocked:0kB bounce:0kB free_pcp:49832kB local_pcp:18392kB free_cma:0kB
[  344.993763][T16958] lowmem_reserve[]: 0 0 0 0 0
[  344.995849][T16958] Node 0 DMA: 7*4kB (U) 8*8kB (U) 10*16kB (U) 12*32kB (UE) 7*64kB (UE) 6*128kB (UE) 4*256kB (UE) 1*512kB (E) 1*1024kB (E) 1*2048kB (U) 2*4096kB (U) = 14652kB
[  345.002575][T16958] Node 0 DMA32: 1501*4kB (UEH) 272*8kB (UMEH) 27*16kB (UEH) 133*32kB (UEH) 272*64kB (UMEH) 161*128kB (UMH) 71*256kB (UM) 31*512kB (UME) 18*1024kB (UE) 9*2048kB (UME) 41*4096kB (UM) = 289732kB
[  345.014384][T16958] Node 1 DMA32: 3*4kB (UM) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 2*128kB (UM) 3*256kB (UM) 3*512kB (UM) 3*1024kB (UM) 3*2048kB (UM) 109*4096kB (M) = 458492kB
[  345.020787][T16958] Node 1 Normal: 1*4kB (E) 60*8kB (ME) 121*16kB (ME) 72*32kB (UME) 45*64kB (ME) 18*128kB (UM) 16*256kB (UM) 12*512kB (M) 6*1024kB (UME) 2*2048kB (UM) 58*4096kB (UM) = 267956kB
[  345.032330][T16958] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  345.035986][T16958] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  345.039553][T16958] 44177 total pagecache pages
[  345.041395][T16958] 0 pages in swap cache
[  345.043271][T16958] Free swap  = 124996kB
[  345.044887][T16958] Total swap = 124996kB
[  345.046763][T16958] 786301 pages RAM
[  345.048505][T16958] 0 pages HighMem/MovableOnly
[  345.050783][T16958] 241348 pages reserved
[  345.052581][T16958] 0 pages cma reserved
[  345.161740][T17005] netlink: 'syz.3.3184': attribute type 2 has an invalid length.
[  345.171995][T17005] k*: entered promiscuous mode
[  345.178558][T17005] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3184'.
[  345.277250][T16929] Set syz1 is full, maxelem 65536 reached
[  345.478213][T17023] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3189'.
[  345.892313][T17058] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3202'.
[  345.897372][T17059] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3202'.
[  346.086682][T17075] netlink: 156 bytes leftover after parsing attributes in process `syz.2.3208'.
[  346.091359][T17075] netlink: 156 bytes leftover after parsing attributes in process `syz.2.3208'.
[  346.103003][T17075] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3208'.
[  346.105998][T17075] ip6tnl1: entered allmulticast mode
[  347.273623][T17132] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3224'.
[  347.595572][T17148] syzkaller1: entered promiscuous mode
[  347.597763][T17148] syzkaller1: entered allmulticast mode
[  347.690080][T17150] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3231'.
[  347.871566][T17159] xt_limit: Overflow, try lower: 271964/0
[  348.077537][T17165] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3235'.
[  348.080712][T17165] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3235'.
[  348.088547][T17168] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3235'.
[  348.092299][T17168] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3235'.
[  348.113764][T17170] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3236'.
[  349.180200][T17196] delete_channel: no stack
[  349.796950][T17208] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3247'.
[  350.347509][T17226] netlink: 'syz.1.3251': attribute type 5 has an invalid length.
[  350.713687][T17228] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3252'.
[  350.936210][T17243] sctp: [Deprecated]: syz.3.3256 (pid 17243) Use of struct sctp_assoc_value in delayed_ack socket option.
[  350.936210][T17243] Use struct sctp_sack_info instead
[  350.975897][T17252] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3259'.
[  351.431799][T17270] syz_tun: entered allmulticast mode
[  351.434510][T17269] syz_tun: left allmulticast mode
[  352.360150][T17310] __nla_validate_parse: 3 callbacks suppressed
[  352.360161][T17310] netlink: 134820 bytes leftover after parsing attributes in process `syz.3.3275'.
[  352.366713][T17310] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3275'.
[  352.369960][T17310] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3275'.
[  352.870778][T17317] bridge0: port 2(bridge_slave_1) entered disabled state
[  352.873971][T17317] bridge0: port 1(bridge_slave_0) entered disabled state
[  352.930436][T17317] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  352.938826][T17317] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  353.007567][T15075] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  353.010651][T15075] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  353.015886][T15075] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  353.019398][T15075] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  353.088779][T17322] netlink: 'syz.2.3281': attribute type 2 has an invalid length.
[  353.097698][T17322] netlink: 'syz.2.3281': attribute type 2 has an invalid length.
[  353.316503][T17341] bridge: RTM_NEWNEIGH with invalid state 0x10
[  353.440337][T17350] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3290'.
[  353.495947][T17355] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3292'.
[  353.499564][T17355] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3292'.
[  353.513569][T17355] netlink: 'syz.3.3292': attribute type 18 has an invalid length.
[  354.019157][T17384] syzkaller1: entered promiscuous mode
[  354.021490][T17384] syzkaller1: entered allmulticast mode
[  354.361811][T17405] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491
[  354.373474][T17405] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491
[  354.540947][T17421] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3313'.
[  354.791304][T17430] netlink: 96 bytes leftover after parsing attributes in process `syz.3.3316'.
[  354.797315][T17430] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3316'.
[  354.890921][T17436] netlink: 100 bytes leftover after parsing attributes in process `syz.3.3317'.
[  355.340601][T17465] lo: entered allmulticast mode
[  355.411450][T17469] lo: left allmulticast mode
[  355.458509][T17474] erspan0: entered promiscuous mode
[  355.638344][T17489] tipc: Failed to remove unknown binding: 66,1,1/0:1099360420/1099360422
[  355.641161][T17489] tipc: Failed to remove unknown binding: 66,1,1/0:1099360420/1099360422
[  356.163682][T17531] syzkaller1: entered promiscuous mode
[  356.166303][T17531] syzkaller1: entered allmulticast mode
[  356.826048][T17582] PF_CAN: dropped non conform CAN XL skbuff: dev type 65534, len 64993
[  356.871955][T17585] syzkaller1: entered promiscuous mode
[  356.875614][T17585] syzkaller1: entered allmulticast mode
[  357.040592][T17592] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not bonding slave
[  357.058241][T17592] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1)
[  357.524095][T17621] netlink: 'syz.2.3376': attribute type 4 has an invalid length.
[  357.527540][T17621] __nla_validate_parse: 10 callbacks suppressed
[  357.527555][T17621] netlink: 152 bytes leftover after parsing attributes in process `syz.2.3376'.
[  357.537717][T17621] .`: renamed from bond0
[  357.548059][T17619] netlink: 348 bytes leftover after parsing attributes in process `syz.1.3375'.
[  357.818936][T17638] syzkaller1: entered promiscuous mode
[  357.820806][T17638] syzkaller1: entered allmulticast mode
[  357.859639][T17641] netlink: 'syz.2.3382': attribute type 2 has an invalid length.
[  357.960065][T17646] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3383'.
[  357.963872][T17646] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3383'.
[  358.357755][T17675] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3389'.
[  358.609309][T17691] bridge0: port 3(macvlan2) entered blocking state
[  358.661640][T17691] bridge0: port 3(macvlan2) entered disabled state
[  358.665725][T17691] macvlan2: entered allmulticast mode
[  358.670971][T17691] macvlan2: left allmulticast mode
[  358.951069][T17725] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3404'.
[  358.980524][T17725] 8021q: adding VLAN 0 to HW filter on device bond4
[  359.002535][T17725] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3404'.
[  359.101149][T17736] syzkaller1: entered promiscuous mode
[  359.103104][T17736] syzkaller1: entered allmulticast mode
[  359.245761][T17741] netlink: 'syz.3.3409': attribute type 3 has an invalid length.
[  359.382764][T17754] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.3413'.
[  359.537636][T17769] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3417'.
[  359.540319][T17771] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3418'.
[  359.598803][T17768] delete_channel: no stack
[  359.836998][T17796] netlink: 'syz.1.3426': attribute type 7 has an invalid length.
[  359.840180][T17796] netlink: 'syz.1.3426': attribute type 8 has an invalid length.
[  359.850002][T17796] ip6gretap0: entered promiscuous mode
[  359.853383][T17796] syz_tun: entered promiscuous mode
[  359.865756][T17796] ip6gretap0: left promiscuous mode
[  359.874050][T17796] syz_tun: left promiscuous mode
[  360.836560][T17837] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  361.148785][T17855] syzkaller1: entered promiscuous mode
[  361.151197][T17855] syzkaller1: entered allmulticast mode
[  361.623973][T17899] syzkaller1: entered promiscuous mode
[  361.625862][T17899] syzkaller1: entered allmulticast mode
[  361.917724][T17913] xt_bpf: check failed: parse error
[  361.922910][T17913] RDS: rds_bind could not find a transport for ::ffff:172.30.1.2, load rds_tcp or rds_rdma?
[  361.985739][   T10] IPVS: starting estimator thread 0...
[  362.072306][T17917] IPVS: using max 41 ests per chain, 98400 per kthread
[  362.670177][T17941] 8021q: adding VLAN 0 to HW filter on device bond5
[  362.903056][T17939] __nla_validate_parse: 13 callbacks suppressed
[  362.903067][T17939] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3471'.
[  363.432920][T17997] netlink: 'syz.1.3490': attribute type 7 has an invalid length.
[  363.433417][T17999] netlink: 'syz.1.3490': attribute type 7 has an invalid length.
[  363.837727][T18016] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3494'.
[  363.841439][T18016] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3494'.
[  363.848820][T18016] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3494'.
[  364.017339][T18023] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3497'.
[  364.021066][T18024] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3497'.
[  364.048291][T18027] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3496'.
[  364.095843][T18027] 8021q: adding VLAN 0 to HW filter on device bond0
[  364.137207][T18027] bond0: (slave batadv1): Opening slave failed
[  364.472045][T18049] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3503'.
[  364.619201][T18062] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3505'.
[  365.240453][T18080] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3510'.
[  365.610764][T18090] IPVS: set_ctl: invalid protocol: 94 224.0.0.2:20003
[  365.729484][T18097] syzkaller1: tun_chr_ioctl cmd 1074025677
[  365.734083][T18097] syzkaller1: Linktype set failed because interface is up
[  366.153588][T18113] veth1_to_team: entered promiscuous mode
[  366.156298][T18113] bond0: entered promiscuous mode
[  366.158150][T18113] bond_slave_0: entered promiscuous mode
[  366.160053][T18113] bond_slave_1: entered promiscuous mode
[  366.165499][T18113] hsr0: entered allmulticast mode
[  366.167292][T18113] veth1_to_team: entered allmulticast mode
[  366.169493][T18113] bond0: entered allmulticast mode
[  366.171453][T18113] bond_slave_0: entered allmulticast mode
[  366.198977][T18113] bond_slave_1: entered allmulticast mode
[  366.476902][T18129] vxcan1: entered allmulticast mode
[  366.580893][T18136] syzkaller1: entered promiscuous mode
[  366.584914][T18136] syzkaller1: entered allmulticast mode
[  366.849362][T18045] Set syz1 is full, maxelem 65536 reached
[  366.948746][T18166] syz_tun: entered allmulticast mode
[  366.958334][T18166] dvmrp8: entered allmulticast mode
[  366.961783][T18166] syz_tun: left allmulticast mode
[  366.963843][T18166] dvmrp8: left allmulticast mode
[  367.419524][T18188] netlink: 'syz.1.3549': attribute type 1 has an invalid length.
[  367.425869][T18188] netlink: 'syz.1.3549': attribute type 4 has an invalid length.
[  368.175395][T18219] netlink: 'syz.2.3560': attribute type 10 has an invalid length.
[  368.181918][T18219] team0: Port device dummy0 added
[  368.296170][T18225] netlink: 'syz.2.3562': attribute type 1 has an invalid length.
[  368.389825][T18230] __nla_validate_parse: 14 callbacks suppressed
[  368.389844][T18230] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3564'.
[  368.396312][T18230] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3564'.
[  368.938799][T18250] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3570'.
[  369.103576][T18265] netlink: 'syz.3.3572': attribute type 32 has an invalid length.
[  369.890109][T18289] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3581'.
[  369.939347][T18292] bridge: RTM_NEWNEIGH with unconfigured vlan 4 on bridge_slave_0
[  370.066668][T18303] netlink: 'syz.2.3585': attribute type 3 has an invalid length.
[  370.069344][T18303] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.3585'.
[  370.137420][T18309] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3588'.
[  370.339034][T18320] netlink: 'syz.3.3591': attribute type 12 has an invalid length.
[  370.362122][T18320] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3591'.
[  370.867573][T18345] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3597'.
[  370.949208][T18360] bridge2: entered promiscuous mode
[  370.951615][T18360] bridge2: entered allmulticast mode
[  371.041539][T18371] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3604'.
[  371.051145][T18373] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3604'.
[  371.114382][T18376] netlink: 'syz.3.3605': attribute type 21 has an invalid length.
[  371.177991][T18380] netlink: 'syz.2.3606': attribute type 3 has an invalid length.
[  371.209584][T18385] netlink: 'syz.2.3608': attribute type 1 has an invalid length.
[  371.292288][T18391] syzkaller1: entered promiscuous mode
[  371.294563][T18391] syzkaller1: entered allmulticast mode
[  371.517265][T18408] netlink: 'syz.2.3615': attribute type 3 has an invalid length.
[  371.587795][T18413] netlink: 'syz.1.3618': attribute type 5 has an invalid length.
[  371.602561][T18413] ip6erspan0: entered promiscuous mode
[  371.661940][T18421] batadv_slave_1: entered promiscuous mode
[  371.683511][T18421] batadv_slave_1 (unregistering): left promiscuous mode
[  371.726085][T18422] netlink: 'syz.1.3620': attribute type 1 has an invalid length.
[  371.729364][T18422] block nbd3: Unsupported socket: shutdown callout must be supported.
[  371.890260][T18429] netlink: 'syz.2.3623': attribute type 3 has an invalid length.
[  371.953211][T18436] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input7
[  372.467140][T18477] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  372.728677][T18490] syzkaller1: entered promiscuous mode
[  372.730835][T18490] syzkaller1: entered allmulticast mode
[  373.217412][T18498] ieee802154 phy1 wpan1: encryption failed: -22
[  373.397299][T18504] __nla_validate_parse: 15 callbacks suppressed
[  373.397321][T18504] netlink: 4856 bytes leftover after parsing attributes in process `syz.1.3650'.
[  373.567403][T18523] netlink: 830 bytes leftover after parsing attributes in process `syz.1.3655'.
[  373.573026][T18523] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3655'.
[  373.577877][T18523] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3655'.
[  373.580863][T18523] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3655'.
[  373.710340][T18528] netlink: 136 bytes leftover after parsing attributes in process `syz.1.3657'.
[  373.717214][T18528] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check.
[  373.747596][   T61] block nbd1: Possible stuck request ffff8880208c0c00: control (read@0,1024B). Runtime 150 seconds
[  373.751981][   T61] block nbd1: Possible stuck request ffff8880208c0e00: control (read@1024,1024B). Runtime 150 seconds
[  373.759581][   T61] block nbd1: Possible stuck request ffff8880208c1000: control (read@2048,1024B). Runtime 150 seconds
[  373.764125][   T61] block nbd1: Possible stuck request ffff8880208c1200: control (read@3072,1024B). Runtime 150 seconds
[  373.964367][T18542] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3660'.
[  374.160392][T18550] syzkaller1: entered promiscuous mode
[  374.164243][T18550] syzkaller1: entered allmulticast mode
[  374.359686][T18560] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3666'.
[  374.391586][T18560] validate_nla: 7 callbacks suppressed
[  374.391600][T18560] netlink: 'syz.3.3666': attribute type 10 has an invalid length.
[  374.405687][T18560] team0: Failed to send port change of device 0! via netlink (err -105)
[  374.408753][T18560] team0: Failed to send options change via netlink (err -105)
[  374.411626][T18560] team0: Port device 0! added
[  374.599802][T18572] netlink: 'syz.3.3669': attribute type 1 has an invalid length.
[  374.619805][T18572] 8021q: adding VLAN 0 to HW filter on device bond2
[  374.637166][T18572] bond2: (slave geneve2): making interface the new active one
[  374.641805][T18572] bond2: (slave geneve2): Enslaving as an active interface with an up link
[  374.725193][T18579] tipc: Started in network mode
[  374.727196][T18579] tipc: Node identity 0e47da031402, cluster identity 4711
[  374.730137][T18579] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  374.733985][T18579] syzkaller0: entered promiscuous mode
[  374.736391][T18579] syzkaller0: entered allmulticast mode
[  374.772785][T18583] tipc: Resetting bearer <eth:syzkaller0>
[  374.778102][T18578] tipc: Resetting bearer <eth:syzkaller0>
[  374.796526][T18578] tipc: Disabling bearer <eth:syzkaller0>
[  374.860515][T18581] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  374.864726][T18582] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  374.883051][T18594] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3673'.
[  375.011266][T18601] netlink: 'syz.2.3676': attribute type 1 has an invalid length.
[  375.074544][T18601] 8021q: adding VLAN 0 to HW filter on device bond5
[  375.485440][T18634] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  375.505248][T18636] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check.
[  375.639107][T18650] netlink: 164 bytes leftover after parsing attributes in process `syz.2.3687'.
[  375.702955][T18650] netlink: 'syz.2.3687': attribute type 4 has an invalid length.
[  375.750331][T18655] tipc: New replicast peer: 0.0.0.0
[  375.758541][T18655] tipc: Enabled bearer <udp:syz2>, priority 10
[  375.770851][T18655] tipc: New replicast peer: 255.255.255.255
[  375.870895][T18666] macsec1: entered promiscuous mode
[  375.873846][T18666] macsec1: entered allmulticast mode
[  376.024860][T18678] syzkaller1: entered promiscuous mode
[  376.026776][T18678] syzkaller1: entered allmulticast mode
[  376.057212][T18680] netlink: 'syz.1.3694': attribute type 5 has an invalid length.
[  376.206860][T18697] netlink: 'syz.3.3699': attribute type 4 has an invalid length.
[  376.268614][T18699] netlink: 'syz.3.3700': attribute type 1 has an invalid length.
[  376.316772][T18699] 8021q: adding VLAN 0 to HW filter on device bond3
[  376.621060][T18726] tipc: Failed to remove unknown binding: 66,1,1/117979617:2489650762/2489650764
[  376.626111][T18726] tipc: Failed to remove unknown binding: 66,1,1/117979617:2489650762/2489650764
[  376.630808][T18726] tipc: Failed to remove unknown binding: 66,1,1/117979617:2489650762/2489650764
[  376.685314][T18733] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  376.761896][T18734] tipc: Enabled bearer <udp:s>, priority 10
[  376.808784][T18742] netlink: 'syz.2.3715': attribute type 6 has an invalid length.
[  377.449665][T18765] netlink: 'syz.1.3722': attribute type 1 has an invalid length.
[  377.718524][T18778] team0: Port device 0! removed
[  377.725807][T18778] bridge_slave_0: left allmulticast mode
[  377.728412][T18778] bridge_slave_0: left promiscuous mode
[  377.732657][T18778] bridge0: port 1(bridge_slave_0) entered disabled state
[  377.739589][T18778] bridge_slave_1: left allmulticast mode
[  377.741885][T18778] bridge_slave_1: left promiscuous mode
[  377.752659][ T6338] tipc: Node number set to 440785411
[  377.754534][T18778] bridge0: port 2(bridge_slave_1) entered disabled state
[  377.773492][T18778] bond0: (slave bond_slave_0): Releasing backup interface
[  377.777108][T18778] bond_slave_0: left promiscuous mode
[  377.779357][T18778] bond_slave_0: left allmulticast mode
[  377.787594][T18778] bond0: (slave bond_slave_1): Releasing backup interface
[  377.797826][T18778] bond_slave_1: left promiscuous mode
[  377.800384][T18778] bond_slave_1: left allmulticast mode
[  377.816729][T18778] team0: Port device team_slave_0 removed
[  377.828518][T18778] team0: Port device team_slave_1 removed
[  377.831939][T18778] batman_adv: batadv0: Removing interface: batadv_slave_0
[  377.837137][T18778] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  377.840175][T18778] batman_adv: batadv0: Removing interface: batadv_slave_1
[  377.853675][T18778] bond1: (slave bridge2): Releasing active interface
[  377.865763][T18778] bond2: (slave geneve2): Releasing active interface
[  377.889476][T18781] netlink: 'syz.1.3729': attribute type 4 has an invalid length.
[  377.970595][T18785] syzkaller1: entered promiscuous mode
[  377.975655][T18785] syzkaller1: entered allmulticast mode
[  378.157391][T18801] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) !
[  378.217401][ T1364] ieee802154 phy1 wpan1: encryption failed: -22
[  378.429180][T18825] 8021q: adding VLAN 0 to HW filter on device bond4
[  378.459922][T18831] __nla_validate_parse: 37 callbacks suppressed
[  378.459942][T18831] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3746'.
[  378.475741][T18832] netlink: 240 bytes leftover after parsing attributes in process `syz.1.3741'.
[  378.500040][T18834] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3747'.
[  379.417415][T18874] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3758'.
[  379.487487][T18888] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  379.539199][T18894] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3764'.
[  379.599545][T18897] validate_nla: 2 callbacks suppressed
[  379.599564][T18897] netlink: 'syz.2.3765': attribute type 1 has an invalid length.
[  379.624993][T18897] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3765'.
[  379.935733][T18931] netlink: 'syz.3.3771': attribute type 1 has an invalid length.
[  379.976346][T18931] 8021q: adding VLAN 0 to HW filter on device bond5
[  379.987375][T18932] netlink: 'syz.2.3772': attribute type 3 has an invalid length.
[  380.030020][T18937] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3773'.
[  380.150392][T18948] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3777'.
[  380.158008][T18948] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3777'.
[  380.173786][T18939] netlink: 1041 bytes leftover after parsing attributes in process `syz.3.3774'.
[  380.846729][T18982] netlink: zone id is out of range
[  380.980060][T18997] netlink: 'syz.3.3791': attribute type 12 has an invalid length.
[  381.948852][T19071] vlan2: entered allmulticast mode
[  382.132238][T13554] Bluetooth: hci1: command 0x0405 tx timeout
[  382.594309][T19079] dvmrp0: entered allmulticast mode
[  382.610666][T19079] xfrm1: entered promiscuous mode
[  382.614684][T19079] xfrm1: entered allmulticast mode
[  383.298485][T19102] bridge7: entered promiscuous mode
[  383.300877][T19102] bridge7: entered allmulticast mode
[  383.744075][T19107] syzkaller1: entered promiscuous mode
[  383.746469][T19107] syzkaller1: entered allmulticast mode
[  383.959051][T19109] __nla_validate_parse: 14 callbacks suppressed
[  383.959068][T19109] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3823'.
[  383.984524][T19109] netlink: 104 bytes leftover after parsing attributes in process `syz.3.3823'.
[  384.061849][T19111] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  384.154414][T19111] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  384.233078][T19111] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  384.357953][T19111] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  384.691142][ T5876] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  384.704803][ T5876] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  384.717814][ T5876] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  384.720941][ T5876] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  384.829063][T19120] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3825'.
[  384.881185][T19124] netlink: 140 bytes leftover after parsing attributes in process `syz.2.3825'.
[  384.977311][T19130] syzkaller1: entered promiscuous mode
[  384.979777][T19130] syzkaller1: entered allmulticast mode
[  385.212584][T19083] Set syz1 is full, maxelem 65536 reached
[  385.257796][T19132] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3830'.
[  385.508910][T19141] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3834'.
[  385.513796][T19141] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3834'.
[  385.568803][T19149] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3836'.
[  385.641760][T19147] vlan0: left promiscuous mode
[  385.646975][T19147] ipvlan2: left allmulticast mode
[  385.648845][T19147] bond2: left allmulticast mode
[  385.650478][T19147] gretap1: left allmulticast mode
[  385.659390][T19147] ip6erspan0: left promiscuous mode
[  385.664204][T19147] macsec1: left promiscuous mode
[  385.665972][T19147] macsec1: left allmulticast mode
[  385.669510][T19147] xfrm1: left promiscuous mode
[  385.671247][T19147] xfrm1: left allmulticast mode
[  386.122991][T19197] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3845'.
[  386.857665][T19207] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3852'.
[  387.154608][T19221] : renamed from bond_slave_0
[  388.115361][T19234] syzkaller1: entered promiscuous mode
[  388.117407][T19234] syzkaller1: entered allmulticast mode
[  388.296981][T19242] netlink: 'syz.2.3866': attribute type 33 has an invalid length.
[  388.300124][T19242] `: renamed from team0
[  388.576391][T19254] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  388.768476][T19267] xt_limit: Overflow, try lower: 604147548/4200216962
[  388.813479][T19271] vlan0: entered promiscuous mode
[  389.266442][T19287] netlink: 'syz.2.3880': attribute type 3 has an invalid length.
[  389.301634][T19290] __nla_validate_parse: 8 callbacks suppressed
[  389.301653][T19290] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3881'.
[  389.311292][T19290] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3881'.
[  389.356291][T19292] netlink: 'syz.2.3882': attribute type 6 has an invalid length.
[  389.360240][T19292] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3882'.
[  389.364052][T19292] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3882'.
[  389.406528][T19294] netlink: 'syz.2.3883': attribute type 10 has an invalid length.
[  389.480594][T19300] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3885'.
[  389.497778][T19300] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3885'.
[  389.674379][T19308] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3888'.
[  389.775516][T19314] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3890'.
[  389.924229][T19320] sch_fq: defrate 32769 ignored.
[  390.070336][T19333] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3895'.
[  390.073778][T19333] tipc: Started in network mode
[  390.075572][T19333] tipc: Node identity aaaaaaaaaa32, cluster identity 4711
[  390.082937][T19333] tipc: Enabled bearer <eth:vlan0>, priority 18
[  390.148584][T19338] batadv_slave_0: entered promiscuous mode
[  390.151765][T19335] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3896'.
[  390.155161][T19336] batadv_slave_0: left promiscuous mode
[  390.217718][T19342] (unnamed net_device) (uninitialized): option lacp_rate: mode dependency failed, not supported in mode active-backup(1)
[  390.613961][T19364] xt_limit: Overflow, try lower: 604147548/4200216962
[  390.807456][T19376] (unnamed net_device) (uninitialized): option ad_select: invalid value (34)
[  391.097092][T19394] syzkaller1: entered promiscuous mode
[  391.099444][T19394] syzkaller1: entered allmulticast mode
[  391.201138][T19398] syzkaller1: entered promiscuous mode
[  391.203928][   T10] tipc: Node number set to 10005162
[  391.208536][T19398] syzkaller1: entered allmulticast mode
[  391.660827][T19450] ip6gre0: entered allmulticast mode
[  391.711241][T19450] IPVS: persistence engine module ip_vs_pe_ not found
[  391.719227][T19450] netlink: 'syz.3.3932': attribute type 10 has an invalid length.
[  391.726837][T19450] team0: Device ipvlan1 failed to register rx_handler
[  393.310382][T19522] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  393.310982][ T6337] IPVS: starting estimator thread 0...
[  393.347076][T19522] netlink: 'syz.3.3954': attribute type 8 has an invalid length.
[  393.420631][T19524] IPVS: using max 46 ests per chain, 110400 per kthread
[  393.571757][T19538] syzkaller1: entered promiscuous mode
[  393.576913][T19538] syzkaller1: entered allmulticast mode
[  394.077265][T19569] syzkaller1: entered promiscuous mode
[  394.079814][T19569] syzkaller1: entered allmulticast mode
[  394.130805][T19572] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  394.468873][T19587] netlink: 'syz.2.3970': attribute type 13 has an invalid length.
[  394.476306][T19595] wg1 speed is unknown, defaulting to 1000
[  394.484637][T19595] wg1 speed is unknown, defaulting to 1000
[  394.491579][T19595] wg1 speed is unknown, defaulting to 1000
[  394.543386][T19595] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[  394.617223][T19598] __nla_validate_parse: 87 callbacks suppressed
[  394.617235][T19598] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3973'.
[  394.626518][T19599] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3973'.
[  394.631137][T19595] wg1 speed is unknown, defaulting to 1000
[  394.634181][T19595] wg1 speed is unknown, defaulting to 1000
[  394.637719][T19595] wg1 speed is unknown, defaulting to 1000
[  394.657600][T19595] wg1 speed is unknown, defaulting to 1000
[  394.671013][T19595] wg1 speed is unknown, defaulting to 1000
[  394.694998][T19595] wg1 speed is unknown, defaulting to 1000
[  394.955750][T19617] macvlan6: entered promiscuous mode
[  394.957916][T19617] macvlan6: entered allmulticast mode
[  394.989195][T19619] macvlan6: entered promiscuous mode
[  394.992497][T19619] macvlan6: entered allmulticast mode
[  395.022619][T19613] netlink: 10 bytes leftover after parsing attributes in process `syz.2.3976'.
[  395.058242][T19610] wg1 speed is unknown, defaulting to 1000
[  395.915530][T19641] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3983'.
[  395.919003][T19641] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3983'.
[  396.276257][T19668] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3991'.
[  396.405106][T19675] veth0: entered promiscuous mode
[  396.446335][T19675] netlink: 'syz.1.3993': attribute type 16 has an invalid length.
[  396.449624][T19675] netlink: 'syz.1.3993': attribute type 17 has an invalid length.
[  396.480711][T19675] 8021q: adding VLAN 0 to HW filter on device bond0
[  396.486207][T19675] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  396.501558][T19674] wg1 speed is unknown, defaulting to 1000
[  396.522567][ T5884] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  396.586783][T19675] veth0: left promiscuous mode
[  396.673703][   T13] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  396.712464][ T5884] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  396.948943][T19683] wg1 speed is unknown, defaulting to 1000
[  397.028872][T19695] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4000'.
[  397.054482][T19693] can: request_module (can-proto-0) failed.
[  397.151848][T19715] netlink: 'syz.3.4003': attribute type 39 has an invalid length.
[  397.293643][T19718] netlink: 'syz.2.4004': attribute type 4 has an invalid length.
[  397.513467][T19737] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  397.516226][T19737] syzkaller0: entered promiscuous mode
[  397.518522][T19737] syzkaller0: entered allmulticast mode
[  397.604368][T19737] tipc: Resetting bearer <eth:syzkaller0>
[  397.613854][T19741] veth0_to_bridge: entered promiscuous mode
[  397.616623][T19741] veth0_to_bridge: left promiscuous mode
[  397.631962][T19737] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4013'.
[  397.637847][T19736] tipc: Resetting bearer <eth:syzkaller0>
[  397.661479][T19736] tipc: Disabling bearer <eth:syzkaller0>
[  397.765110][   T12] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  397.776976][   T12] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  397.958564][T19757] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4019'.
[  398.033696][T19757] bridge_slave_1 (unregistering): left allmulticast mode
[  398.036810][T19757] bridge_slave_1 (unregistering): left promiscuous mode
[  398.040004][T19757] bridge0: port 2(bridge_slave_1) entered disabled state
[  398.047165][T19759] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4020'.
[  398.051905][T19759] netlink: 'syz.1.4020': attribute type 7 has an invalid length.
[  398.056975][T19759] netlink: 'syz.1.4020': attribute type 8 has an invalid length.
[  398.062573][ T6337] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  398.155774][T19764] tipc: Failed to remove unknown binding: 66,1,1/10005162:2745419298/2745419300
[  398.160175][T19764] tipc: Failed to remove unknown binding: 66,1,1/10005162:2745419298/2745419300
[  399.206428][T19821] geneve3: entered promiscuous mode
[  399.217657][T19823] syzkaller1: entered promiscuous mode
[  399.219569][T19823] syzkaller1: entered allmulticast mode
[  399.441330][T19841] gre2: entered promiscuous mode
[  399.449639][T19841] gre2: entered allmulticast mode
[  399.541098][T12148] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  399.545640][T12148] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  399.553843][   T12] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  399.557099][   T12] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  399.778256][T19869] sch_tbf: burst 0 is lower than device veth0_to_team mtu (1514) !
[  399.780026][T19871] __nla_validate_parse: 12 callbacks suppressed
[  399.780036][T19871] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4056'.
[  399.971532][T19878] netlink: 'syz.2.4058': attribute type 1 has an invalid length.
[  399.974999][T19880] vlan2: entered allmulticast mode
[  399.976873][T19880] bridge_slave_0: entered allmulticast mode
[  400.118450][T19886] syzkaller1: entered promiscuous mode
[  400.120637][T19886] syzkaller1: entered allmulticast mode
[  400.319323][T19901] RDS: rds_bind could not find a transport for ::ffff:172.30.1.2, load rds_tcp or rds_rdma?
[  400.328426][T19897] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4063'.
[  400.337261][T19901] RDS: rds_bind could not find a transport for ::ffff:172.30.1.2, load rds_tcp or rds_rdma?
[  400.342428][T19901] RDS: rds_bind could not find a transport for ::ffff:172.30.1.2, load rds_tcp or rds_rdma?
[  400.345776][T19901] RDS: rds_bind could not find a transport for ::ffff:172.30.1.2, load rds_tcp or rds_rdma?
[  400.349784][T19901] RDS: rds_bind could not find a transport for ::ffff:172.30.1.2, load rds_tcp or rds_rdma?
[  400.358509][T19901] RDS: rds_bind could not find a transport for ::ffff:172.30.1.2, load rds_tcp or rds_rdma?
[  400.364517][T19901] RDS: rds_bind could not find a transport for ::ffff:172.30.1.2, load rds_tcp or rds_rdma?
[  400.376819][T19901] RDS: rds_bind could not find a transport for ::ffff:172.30.1.2, load rds_tcp or rds_rdma?
[  400.380946][T19901] RDS: rds_bind could not find a transport for ::ffff:172.30.1.2, load rds_tcp or rds_rdma?
[  400.418435][T19901] RDS: rds_bind could not find a transport for ::ffff:172.30.1.2, load rds_tcp or rds_rdma?
[  400.439629][T19908] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4069'.
[  400.786351][   T55] Bluetooth: hci2: command 0x0406 tx timeout
[  400.788979][   T55] Bluetooth: hci0: command 0x0406 tx timeout
[  400.792776][   T10] IPVS: starting estimator thread 0...
[  400.882423][T19930] IPVS: using max 61 ests per chain, 146400 per kthread
[  400.894248][T19932] netlink: 'syz.1.4076': attribute type 1 has an invalid length.
[  401.064616][T19936] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4078'.
[  401.240990][T19943] netlink: 52 bytes leftover after parsing attributes in process `syz.1.4080'.
[  401.585185][T19954] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4083'.
[  401.652247][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  401.711576][T19960] syzkaller1: entered promiscuous mode
[  401.713506][T19960] syzkaller1: entered allmulticast mode
[  401.876250][T19964] netlink: 56 bytes leftover after parsing attributes in process `syz.2.4088'.
[  401.886491][T19966] netlink: 56 bytes leftover after parsing attributes in process `syz.2.4088'.
[  401.991877][T19973] syzkaller1: entered promiscuous mode
[  401.995835][T19973] syzkaller1: entered allmulticast mode
[  402.155196][T19979] tc_dump_action: action bad kind
[  402.172658][T19983] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4093'.
[  402.187023][T19983] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4093'.
[  402.258776][T19989] netlink: 'syz.2.4095': attribute type 21 has an invalid length.
[  402.315509][T19989] netlink: 'syz.2.4095': attribute type 4 has an invalid length.
[  402.576761][T20012] ip6gre0: left allmulticast mode
[  402.664224][T20022] syzkaller1: entered promiscuous mode
[  402.671899][T20022] syzkaller1: entered allmulticast mode
[  403.126912][T20062] syzkaller1: entered promiscuous mode
[  403.128890][T20062] syzkaller1: entered allmulticast mode
[  403.277717][T20071] tc_dump_action: action bad kind
[  403.280484][T20071] netlink: 'syz.1.4120': attribute type 4 has an invalid length.
[  403.816723][   T61] block nbd1: Possible stuck request ffff8880208c0c00: control (read@0,1024B). Runtime 180 seconds
[  403.821029][   T61] block nbd1: Possible stuck request ffff8880208c0e00: control (read@1024,1024B). Runtime 180 seconds
[  403.825595][   T61] block nbd1: Possible stuck request ffff8880208c1000: control (read@2048,1024B). Runtime 180 seconds
[  403.829931][   T61] block nbd1: Possible stuck request ffff8880208c1200: control (read@3072,1024B). Runtime 180 seconds
[  403.931337][T20093] syzkaller1: entered promiscuous mode
[  403.933583][T20093] syzkaller1: entered allmulticast mode
[  404.034876][T20095] tipc: Enabled bearer <udp:syz2>, priority 10
[  404.251649][T20109] syzkaller0: entered promiscuous mode
[  404.256626][T20109] syzkaller0: entered allmulticast mode
[  404.544762][T20130] syzkaller1: entered promiscuous mode
[  404.546672][T20130] syzkaller1: entered allmulticast mode
[  405.015142][T20140] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  405.046383][T20139] tipc: Disabling bearer <eth:syzkaller0>
[  405.313016][T20155] xfrm2: entered allmulticast mode
[  405.395010][T20160] __nla_validate_parse: 15 callbacks suppressed
[  405.395024][T20160] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4150'.
[  405.467015][T20162] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4151'.
[  405.882281][ T5298] udevd[5298]: worker [12101] /devices/virtual/block/nbd1 timeout; kill it
[  405.886906][ T5298] udevd[5298]: seq 16618 '/devices/virtual/block/nbd1' killed
[  406.127587][T20190] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4161'.
[  406.168392][T20192] syzkaller1: entered promiscuous mode
[  406.170210][T20192] syzkaller1: entered allmulticast mode
[  406.329668][T20196] netlink: 'syz.2.4164': attribute type 1 has an invalid length.
[  406.336309][T20196] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4164'.
[  406.340207][T20196] netlink: 'syz.2.4164': attribute type 2 has an invalid length.
[  406.343718][T20196] netlink: 'syz.2.4164': attribute type 1 has an invalid length.
[  406.346955][T20196] netlink: 2 bytes leftover after parsing attributes in process `syz.2.4164'.
[  406.395628][T20198] netlink: 'syz.2.4165': attribute type 4 has an invalid length.
[  406.406105][T20198] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 !
[  406.411134][T20198] netlink: 'syz.2.4165': attribute type 4 has an invalid length.
[  406.717367][T20209] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4168'.
[  406.809725][T20212] syzkaller1: entered promiscuous mode
[  406.812788][T20212] syzkaller1: entered allmulticast mode
[  406.843935][T20215] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR
[  406.893437][T20221] netlink: 11 bytes leftover after parsing attributes in process `syz.2.4171'.
[  406.900941][T20221] netlink: 11 bytes leftover after parsing attributes in process `syz.2.4171'.
[  407.265265][T20135] Set syz1 is full, maxelem 65536 reached
[  407.658958][T20255] netlink: 'syz.3.4181': attribute type 15 has an invalid length.
[  407.662504][T20255] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4181'.
[  407.702900][T20261] netlink: 'syz.3.4182': attribute type 13 has an invalid length.
[  407.747047][T20264] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4183'.
[  408.193220][T20284] netlink: 'syz.3.4190': attribute type 1 has an invalid length.
[  409.057522][T20316] mac80211_hwsim hwsim52 syzkaller0: entered promiscuous mode
[  409.075542][T20316] mac80211_hwsim hwsim52 syzkaller0: entered allmulticast mode
[  409.080377][T20315] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  409.166575][T20320] block nbd0: NBD_DISCONNECT
[  409.168580][T20320] block nbd0: Send disconnect failed -32
[  409.204677][T12148] bridge_slave_1: left allmulticast mode
[  409.206903][T12148] bridge_slave_1: left promiscuous mode
[  409.209402][T12148] bridge0: port 2(bridge_slave_1) entered disabled state
[  409.214710][T12148] bridge_slave_0: left allmulticast mode
[  409.216878][T12148] bridge_slave_0: left promiscuous mode
[  409.219149][T12148] bridge0: port 1(bridge_slave_0) entered disabled state
[  409.582239][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  409.675416][T12148] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  409.682211][T12148] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  409.687404][T12148] bond0 (unregistering): Released all slaves
[  410.259275][T12148] hsr_slave_0: left promiscuous mode
[  410.262355][T12148] hsr_slave_1: left promiscuous mode
[  410.265146][T12148] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  410.268108][T12148] batman_adv: batadv0: Removing interface: batadv_slave_0
[  410.276191][T12148] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  410.283669][T12148] batman_adv: batadv0: Removing interface: batadv_slave_1
[  410.313187][T12148] veth1_to_hsr: left allmulticast mode
[  410.315631][T12148] veth1_to_hsr: left promiscuous mode
[  410.319792][T12148] veth1_macvtap: left promiscuous mode
[  410.321730][T12148] veth0_macvtap: left promiscuous mode
[  410.323769][T12148] veth1_vlan: left promiscuous mode
[  410.325756][T12148] veth0_vlan: left promiscuous mode
[  410.537444][T20357] netlink: 'syz.3.4211': attribute type 1 has an invalid length.
[  410.621603][T20361] __nla_validate_parse: 9 callbacks suppressed
[  410.621627][T20361] netlink: 200 bytes leftover after parsing attributes in process `syz.3.4212'.
[  410.644552][T20361] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4212'.
[  410.992757][T12148] team0 (unregistering): Port device team_slave_1 removed
[  411.037338][T12148] team0 (unregistering): Port device team_slave_0 removed
[  411.201463][T18909] smc: removing ib device syz2
[  411.525100][T20351] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4208'.
[  411.527995][ T6337] syz2: Port: 1 Link DOWN
[  412.118870][T20371] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4214'.
[  412.414604][   T33] audit: type=1804 audit(1759329911.215:7): pid=20382 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.4216" name="/newroot/556/x000000000000000300000000000000000000003" dev="tmpfs" ino=2834 res=1 errno=0
[  412.437002][   T33] audit: type=1800 audit(1759329911.215:8): pid=20382 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.4216" name="x000000000000000300000000000000000000003" dev="tmpfs" ino=2834 res=0 errno=0
[  412.444132][T20385] syzkaller1: entered promiscuous mode
[  412.464043][T20385] syzkaller1: entered allmulticast mode
[  413.507451][T20419] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  413.510369][T20419] syzkaller0: entered promiscuous mode
[  413.515080][T20419] syzkaller0: entered allmulticast mode
[  413.535607][T20419] tipc: Resetting bearer <eth:syzkaller0>
[  413.544767][T20418] tipc: Resetting bearer <eth:syzkaller0>
[  413.558882][T20418] tipc: Disabling bearer <eth:syzkaller0>
[  414.138316][T20442] netlink: 72 bytes leftover after parsing attributes in process `syz.3.4238'.
[  414.149231][T20444] netlink: 'syz.2.4239': attribute type 23 has an invalid length.
[  414.515726][T20468] netlink: 'syz.3.4247': attribute type 4 has an invalid length.
[  414.554648][T20470] syzkaller1: entered promiscuous mode
[  414.556594][T20470] syzkaller1: entered allmulticast mode
[  414.884266][T20494] netlink: 'syz.3.4255': attribute type 12 has an invalid length.
[  414.887071][T20494] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4255'.
[  414.891041][T20494] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4255'.
[  414.934057][T20497] syzkaller1: entered promiscuous mode
[  414.936064][T20497] syzkaller1: entered allmulticast mode
[  414.940895][T20495] netlink: 48 bytes leftover after parsing attributes in process `syz.2.4253'.
[  414.946320][T20495] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4253'.
[  414.957704][T20495] netlink: 'syz.2.4253': attribute type 2 has an invalid length.
[  415.045981][T20499] netlink: 'syz.3.4257': attribute type 10 has an invalid length.
[  415.048701][T20499] batadv_slave_0: left promiscuous mode
[  415.061133][T20499] batadv_slave_0: entered promiscuous mode
[  415.063692][T20499] batadv_slave_0: entered allmulticast mode
[  415.066414][T20499] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link
[  415.156185][T20503] wg1 speed is unknown, defaulting to 1000
[  415.316315][T20516] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4262'.
[  415.320705][T20516] 8021q: VLANs not supported on ipvlan1
[  415.968507][T20535] netlink: 'syz.3.4265': attribute type 1 has an invalid length.
[  415.971497][T20535] netlink: 'syz.3.4265': attribute type 1 has an invalid length.
[  416.288095][T20547] tipc: Resetting bearer <eth:syzkaller0>
[  416.291810][T20547] netlink: 'syz.3.4269': attribute type 1 has an invalid length.
[  416.342381][T20551] netlink: 'syz.3.4270': attribute type 1 has an invalid length.
[  416.555752][T20565] __nla_validate_parse: 3 callbacks suppressed
[  416.555771][T20565] netlink: 64 bytes leftover after parsing attributes in process `syz.3.4275'.
[  416.562087][T20565] block nbd0: not configured, cannot reconfigure
[  416.576308][T20565] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4275'.
[  416.647473][T20570] wg1 speed is unknown, defaulting to 1000
[  416.846144][T20580] netlink: 112 bytes leftover after parsing attributes in process `syz.1.4279'.
[  417.144041][T20584] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4281'.
[  417.149256][T20584] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4281'.
[  417.167645][T20584] geneve2: entered promiscuous mode
[  417.170023][T20584] geneve2: entered allmulticast mode
[  417.174511][ T5876] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  417.179920][ T5876] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  417.184561][T20584] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4281'.
[  417.188016][T20584] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4281'.
[  417.191794][ T5876] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  417.195603][ T5876] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  417.300834][T20591] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4283'.
[  417.309310][T20591] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4283'.
[  417.361064][T20593] pim6reg1: entered promiscuous mode
[  417.364089][T20593] pim6reg1: entered allmulticast mode
[  417.608884][T20604] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4286'.
[  417.614213][T20603] dvmrp8: entered allmulticast mode
[  417.661903][T20603] wg1 speed is unknown, defaulting to 1000
[  417.807341][T20612] netlink: 'syz.1.4290': attribute type 5 has an invalid length.
[  418.135816][T12148] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  418.138705][T12148] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  418.147936][T20626] syzkaller1: entered promiscuous mode
[  418.149931][T20626] syzkaller1: entered allmulticast mode
[  418.162134][T12148] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  418.170341][   T12] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  418.293241][T20632] syzkaller1: entered promiscuous mode
[  418.295065][T20632] syzkaller1: entered allmulticast mode
[  418.553703][T20646] wg1 speed is unknown, defaulting to 1000
[  418.611202][T20651] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  418.893566][T20663] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  418.997667][T20663] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  419.061137][T20663] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  419.106087][T20663] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  419.186023][T12148] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  419.196832][T12148] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  419.211285][   T13] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  419.228350][   T13] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  419.398382][T13554] Bluetooth: hci1: link tx timeout
[  419.400544][T13554] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa
[  419.404995][ T5239] Bluetooth: hci1: link tx timeout
[  419.406855][ T5239] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa
[  419.411547][ T5239] Bluetooth: hci1: link tx timeout
[  419.416091][ T5239] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa
[  419.755417][T20700] nbd: nbd1 already in use
[  419.825637][T20702] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check.
[  420.119450][T20714] validate_nla: 1 callbacks suppressed
[  420.119471][T20714] netlink: 'syz.2.4321': attribute type 2 has an invalid length.
[  420.132904][T20714] netlink: 'syz.2.4321': attribute type 2 has an invalid length.
[  420.136185][T20714] netlink: 'syz.2.4321': attribute type 1 has an invalid length.
[  420.139447][T20714] netlink: 'syz.2.4321': attribute type 2 has an invalid length.
[  420.299201][T20724] tipc: MTU too low for tipc bearer
[  420.788783][T20759] netlink: 'syz.1.4337': attribute type 4 has an invalid length.
[  420.996145][T20764] wg1 speed is unknown, defaulting to 1000
[  421.138350][T20767] netlink: 'syz.1.4340': attribute type 4 has an invalid length.
[  421.261356][T20777] syzkaller1: entered promiscuous mode
[  421.265275][T20777] syzkaller1: entered allmulticast mode
[  421.412640][ T5239] Bluetooth: hci1: command 0x0405 tx timeout
[  421.444368][T20781] tipc: Enabled bearer <eth:vlan0>, priority 14
[  421.523611][T20794] syzkaller1: entered promiscuous mode
[  421.528401][T20794] syzkaller1: entered allmulticast mode
[  421.557447][T20796] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  421.596081][T20799] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check.
[  421.637458][T20803] netlink: 'syz.3.4353': attribute type 32 has an invalid length.
[  421.640080][T20803] __nla_validate_parse: 23 callbacks suppressed
[  421.640093][T20803] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4353'.
[  421.645587][T20803] (unnamed net_device) (uninitialized): option coupled_control: invalid value (12)
[  421.741627][T20810] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4356'.
[  421.746336][T20810] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4356'.
[  421.899742][T20818] syzkaller1: entered promiscuous mode
[  421.901723][T20818] syzkaller1: entered allmulticast mode
[  422.573183][T20828] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4361'.
[  422.576651][T20828] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4361'.
[  422.611100][T20835] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4364'.
[  422.645515][T20831] netlink: 11 bytes leftover after parsing attributes in process `syz.1.4363'.
[  422.649328][T20831] netlink: 11 bytes leftover after parsing attributes in process `syz.1.4363'.
[  422.653825][T20831] netlink: 11 bytes leftover after parsing attributes in process `syz.1.4363'.
[  422.657300][T20831] netlink: 11 bytes leftover after parsing attributes in process `syz.1.4363'.
[  422.734658][T20847] netlink: 'syz.2.4367': attribute type 7 has an invalid length.
[  422.737796][T20847] netlink: 'syz.2.4367': attribute type 8 has an invalid length.
[  422.740770][T20847] netlink: 'syz.2.4367': attribute type 4 has an invalid length.
[  423.858699][ T5876] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 20001 - 0
[  423.861950][ T5876] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 20001 - 0
[  423.873616][ T5876] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 20001 - 0
[  423.876878][ T5876] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 20001 - 0
[  423.968904][T20896] sctp: [Deprecated]: syz.1.4379 (pid 20896) Use of int in max_burst socket option.
[  423.968904][T20896] Use struct sctp_assoc_value instead
[  424.609982][T20908] wg1 speed is unknown, defaulting to 1000
[  425.008114][T20920] tipc: Disabling bearer <eth:vlan0>
[  425.137449][T20929] raw_sendmsg: syz.1.4388 forgot to set AF_INET. Fix it!
[  425.826251][T20977] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  425.861135][T20980] netlink: 'syz.3.4407': attribute type 2 has an invalid length.
[  425.920485][T20983] pimreg3: entered allmulticast mode
[  426.013062][T20997] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  426.016967][T20997] syzkaller0: entered promiscuous mode
[  426.026634][T20997] syzkaller0: entered allmulticast mode
[  426.261906][T21021] bridge3: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms)
[  426.383068][T21033] bridge4: entered promiscuous mode
[  426.385161][T21033] bridge4: entered allmulticast mode
[  426.428711][T21040] openvswitch: netlink: Missing key (keys=1040, expected=10000000)
[  426.564138][T21050] bond2: (slave gretap1): Releasing active interface
[  426.770682][T21064] __nla_validate_parse: 24 callbacks suppressed
[  426.770705][T21064] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4432'.
[  426.888320][T21069] netlink: 'syz.2.4435': attribute type 21 has an invalid length.
[  426.892229][T21069] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4435'.
[  427.116418][T21091] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4442'.
[  427.310298][T21111] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4449'.
[  427.346355][T21111] bond6: entered promiscuous mode
[  427.348781][T21111] 8021q: adding VLAN 0 to HW filter on device bond6
[  427.400121][T21111] 8021q: adding VLAN 0 to HW filter on device bond6
[  427.404007][T21111] bond6: (slave wireguard0): The slave device specified does not support setting the MAC address
[  427.409144][T21111] bond6: (slave wireguard0): Error -95 calling set_mac_address
[  427.590322][T21124] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4451'.
[  427.788870][T21142] syzkaller1: entered promiscuous mode
[  427.791131][T21142] syzkaller1: entered allmulticast mode
[  427.908988][T21152] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4463'.
[  428.104636][T21171] wg1 speed is unknown, defaulting to 1000
[  428.319523][T21173] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4468'.
[  428.323327][T21173] netdevsim0: renamed from ip_vti0
[  428.326890][T21173] netdevsim0: entered promiscuous mode
[  428.446362][T21177] delete_channel: no stack
[  428.537668][T21182] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4471'.
[  428.543243][T21182] netlink: 76 bytes leftover after parsing attributes in process `syz.2.4471'.
[  428.730660][T21192] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4474'.
[  428.798767][T21192] 8021q: adding VLAN 0 to HW filter on device bond6
[  428.811817][T21194] 8021q: adding VLAN 0 to HW filter on device bond6
[  428.814787][T21194] bond6: (slave sit3): The slave device specified does not support setting the MAC address
[  428.818791][T21194] bond6: (slave sit3): Error -95 calling set_mac_address
[  428.965530][T21210] wg1 speed is unknown, defaulting to 1000
[  429.045505][T21210] bond7: entered promiscuous mode
[  429.047376][T21210] 8021q: adding VLAN 0 to HW filter on device bond7
[  429.305526][T21253] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  429.308078][T21253] IPv6: NLM_F_CREATE should be set when creating new route
[  429.310572][T21253] IPv6: NLM_F_CREATE should be set when creating new route
[  429.313465][T21253] IPv6: NLM_F_CREATE should be set when creating new route
[  429.330693][T21253] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  429.436848][T21267] syzkaller1: entered promiscuous mode
[  429.438964][T21267] syzkaller1: entered allmulticast mode
[  429.461518][T21269] tipc: Failed to remove unknown binding: 66,1,1/117979617:3948722262/3948722264
[  429.518898][T21272] tipc: Failed to remove unknown binding: 66,1,1/117979617:3948722262/3948722264
[  429.524432][T21272] tipc: Failed to remove unknown binding: 66,1,1/117979617:3948722262/3948722264
[  429.972611][ T5239] Bluetooth: hci1: command 0x0405 tx timeout
[  429.989199][T21300] netlink: 'syz.1.4501': attribute type 18 has an invalid length.
[  429.992736][T21300] netlink: 'syz.1.4501': attribute type 20 has an invalid length.
[  430.150198][T21312] vlan2: entered promiscuous mode
[  430.215559][T21318] erspan0: entered promiscuous mode
[  430.506676][T21345] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0)
[  430.656907][T21355] syzkaller1: entered promiscuous mode
[  430.660560][T21355] syzkaller1: entered allmulticast mode
[  431.273492][T21380] bridge_slave_0: left promiscuous mode
[  431.275536][T21380] bridge0: port 1(bridge_slave_0) entered disabled state
[  431.326743][T21381] netlink: 'syz.2.4524': attribute type 1 has an invalid length.
[  431.891916][T21402] __nla_validate_parse: 12 callbacks suppressed
[  431.891928][T21402] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4530'.
[  431.942925][T21404] IPVS: Error connecting to the multicast addr
[  432.186993][T21428] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4538'.
[  432.218930][T21433] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4540'.
[  432.375908][T21439] netlink: 666 bytes leftover after parsing attributes in process `syz.1.4542'.
[  432.427866][T21441] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4543'.
[  432.518697][T21445] xt_l2tp: v2 sid > 0xffff: 1114112
[  432.571249][T21450] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4547'.
[  432.599078][T21452] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4548'.
[  432.660254][T21457] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4550'.
[  432.687764][T21459] netlink: 'syz.1.4551': attribute type 1 has an invalid length.
[  432.705946][T21459] 8021q: adding VLAN 0 to HW filter on device bond8
[  432.717502][T21459] ipvlan3: entered allmulticast mode
[  432.719636][T21459] bond8: entered allmulticast mode
[  432.748898][T21464] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  432.752566][T21464] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  432.756170][T21464] hsr0: entered promiscuous mode
[  432.757830][T21464] hsr0: entered allmulticast mode
[  432.759701][T21464] hsr_slave_0: entered allmulticast mode
[  432.761749][T21464] hsr_slave_1: entered allmulticast mode
[  432.797336][T21470] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4555'.
[  432.818446][T21472] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4556'.
[  432.988853][T21481] wg1 speed is unknown, defaulting to 1000
[  433.084778][T21494] veth1_macvtap: left promiscuous mode
[  433.086644][T21494] macsec0: entered promiscuous mode
[  433.089985][T21493] syzkaller1: entered promiscuous mode
[  433.091841][T21493] syzkaller1: entered allmulticast mode
[  433.097253][T21494] veth1_macvtap: entered promiscuous mode
[  433.100332][T21494] macsec0: left promiscuous mode
[  433.160698][T21496] vxcan1 (unregistering): left allmulticast mode
[  433.237039][T21501] netlink: 'syz.1.4565': attribute type 1 has an invalid length.
[  433.279825][T21501] gretap2: entered allmulticast mode
[  433.288800][T21501] bond9: (slave gretap2): making interface the new active one
[  433.295422][T21501] bond9: (slave gretap2): Enslaving as an active interface with an up link
[  433.912595][   T61] block nbd1: Possible stuck request ffff8880208c0c00: control (read@0,1024B). Runtime 210 seconds
[  433.917050][   T61] block nbd1: Possible stuck request ffff8880208c0e00: control (read@1024,1024B). Runtime 210 seconds
[  433.921354][   T61] block nbd1: Possible stuck request ffff8880208c1000: control (read@2048,1024B). Runtime 210 seconds
[  433.925806][   T61] block nbd1: Possible stuck request ffff8880208c1200: control (read@3072,1024B). Runtime 210 seconds
[  434.106418][T21530] netlink: 'syz.1.4574': attribute type 2 has an invalid length.
[  434.218689][T21535] netlink: 'syz.1.4576': attribute type 32 has an invalid length.
[  434.477401][T21554] wg1 speed is unknown, defaulting to 1000
[  434.690776][T21573] bond10: entered promiscuous mode
[  434.695192][T21573] bond10: entered allmulticast mode
[  434.697572][T21573] 8021q: adding VLAN 0 to HW filter on device bond10
[  434.903608][T21573] bond10 (unregistering): Released all slaves
[  434.922918][T21587] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  434.927204][T21587] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  435.093661][T21597] veth6: entered allmulticast mode
[  435.202830][T21602] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_rx_wq": -EINTR
[  435.878999][T21632] hsr_slave_0: left promiscuous mode
[  436.040741][T21632] hsr_slave_1: left promiscuous mode
[  436.339333][T21665] syzkaller1: entered promiscuous mode
[  436.341283][T21665] syzkaller1: entered allmulticast mode
[  436.791266][T21680] bond0: entered promiscuous mode
[  436.794212][T21680] bond0: left promiscuous mode
[  436.969106][T21692] __nla_validate_parse: 25 callbacks suppressed
[  436.969122][T21692] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4623'.
[  437.055286][T21699] IPVS: set_ctl: invalid protocol: 92 255.255.255.255:20004
[  437.135537][T21704] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4627'.
[  437.168428][T21704] 8021q: adding VLAN 0 to HW filter on device bond7
[  437.240018][T21711] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4629'.
[  437.249392][T21714] netlink: 224 bytes leftover after parsing attributes in process `syz.3.4630'.
[  437.259512][T21714] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4630'.
[  437.321903][T21717] sctp: [Deprecated]: syz.1.4631 (pid 21717) Use of int in maxseg socket option.
[  437.321903][T21717] Use struct sctp_assoc_value instead
[  437.387073][T21726] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4634'.
[  437.406465][T21728] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4635'.
[  437.968905][T21778] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4652'.
[  438.718778][T21797] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  438.858422][T21808] netlink: 'syz.1.4659': attribute type 3 has an invalid length.
[  438.895797][T21810] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4660'.
[  438.950713][T21814] netlink: 80 bytes leftover after parsing attributes in process `syz.1.4662'.
[  439.159496][T21829] unknown channel width for channel at 909000KHz?
[  439.907695][T21877] sctp: [Deprecated]: syz.2.4682 (pid 21877) Use of int in max_burst socket option.
[  439.907695][T21877] Use struct sctp_assoc_value instead
[  439.950326][T21887] wg1 speed is unknown, defaulting to 1000
[  440.427670][T21913] netlink: 'syz.3.4691': attribute type 1 has an invalid length.
[  440.435068][T21913] netlink: 'syz.3.4691': attribute type 2 has an invalid length.
[  441.273844][T21923] veth4: entered allmulticast mode
[  441.738331][T21926] vlan0: left promiscuous mode
[  441.746689][T21926] gre2: left promiscuous mode
[  441.749583][T21926] gre2: left allmulticast mode
[  441.756994][T21926] xfrm2: left allmulticast mode
[  441.759361][T21926] geneve2: left promiscuous mode
[  441.766623][T21926] geneve2: left allmulticast mode
[  441.775538][T21926] ipvlan3: left allmulticast mode
[  441.777761][T21926] bond8: left allmulticast mode
[  441.781060][T21926] gretap2: left allmulticast mode
[  441.805602][T21942] syzkaller1: entered promiscuous mode
[  441.807515][T21942] syzkaller1: entered allmulticast mode
[  441.812480][   T13] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  441.815566][T21947] 0X: renamed from caif0
[  441.819451][T21947] 0X: entered allmulticast mode
[  441.821083][T21947] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check.
[  441.848482][   T13] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  441.851158][   T13] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  441.857444][T21949] 1X: renamed from 60X
[  441.867382][T21949] A link change request failed with some changes committed already. Interface 61X may have been left with an inconsistent configuration, please check.
[  441.873665][   T13] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  441.987290][T21959] __nla_validate_parse: 15 callbacks suppressed
[  441.987304][T21959] netlink: 68 bytes leftover after parsing attributes in process `syz.3.4704'.
[  442.028001][T21961] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4706'.
[  442.057249][T21968] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4707'.
[  442.083188][T21970] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4709'.
[  442.148816][T21974] netlink: 5876 bytes leftover after parsing attributes in process `syz.2.4712'.
[  442.189169][T21979] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4714'.
[  442.206072][T21981] netlink: 72 bytes leftover after parsing attributes in process `syz.1.4713'.
[  442.209151][T21981] vlan0: entered promiscuous mode
[  442.286828][T21990] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4718'.
[  442.312623][T21995] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4721'.
[  442.356555][T22001] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  442.378003][T22006] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4724'.
[  442.575654][T22023] netlink: 'syz.1.4729': attribute type 29 has an invalid length.
[  442.579386][T22023] netlink: 'syz.1.4729': attribute type 29 has an invalid length.
[  442.582720][T22023] netlink: 'syz.1.4729': attribute type 29 has an invalid length.
[  442.585596][T22023] netlink: 'syz.1.4729': attribute type 29 has an invalid length.
[  442.588900][T22023] netlink: 'syz.1.4729': attribute type 29 has an invalid length.
[  442.593692][T22023] netlink: 'syz.1.4729': attribute type 29 has an invalid length.
[  442.597487][T22023] netlink: 'syz.1.4729': attribute type 29 has an invalid length.
[  443.506209][T22070] (unnamed net_device) (uninitialized): option arp_all_targets: invalid value (3)
[  443.529136][T22073] vlan0: left promiscuous mode
[  444.033046][T22098] delete_channel: no stack
[  444.193082][T22119] validate_nla: 32 callbacks suppressed
[  444.193096][T22119] netlink: 'syz.2.4761': attribute type 6 has an invalid length.
[  444.234454][T22122] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  444.240885][T22122] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0
[  444.275923][T22122] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  444.279352][T22122] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0
[  444.320564][T22122] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  444.325416][T22122] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0
[  444.381148][T22122] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  444.387685][T22122] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0
[  444.410542][T22137] netlink: 'syz.3.4766': attribute type 1 has an invalid length.
[  444.424700][T22140] bridge7: entered promiscuous mode
[  444.460524][T22143] netlink: 'syz.3.4769': attribute type 21 has an invalid length.
[  444.473822][T22143] netlink: 'syz.3.4769': attribute type 1 has an invalid length.
[  444.477035][   T13] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  444.480914][   T13] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 20001 - 0
[  444.494814][T12148] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  444.497511][T12148] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 20001 - 0
[  444.537492][T12148] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  444.540769][T12148] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 20001 - 0
[  444.544450][T12148] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  444.549266][T12148] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 20001 - 0
[  444.809739][T22157] netlink: 'syz.3.4774': attribute type 1 has an invalid length.
[  445.027799][T22183] netlink: 'syz.3.4779': attribute type 11 has an invalid length.
[  445.232715][T22192] netlink: 'syz.1.4783': attribute type 6 has an invalid length.
[  445.236105][T22192] netlink: 'syz.1.4783': attribute type 6 has an invalid length.
[  446.186626][T22225] vlan0: entered promiscuous mode
[  446.220095][T22227] netlink: 'syz.1.4796': attribute type 3 has an invalid length.
[  446.649422][T22268] netlink: 'syz.2.4811': attribute type 4 has an invalid length.
[  446.878011][T22282] IPVS: sed: FWM 3 0x00000003 - no destination available
[  446.881061][T22282] IPVS: sed: FWM 3 0x00000003 - no destination available
[  447.088166][T22292] __nla_validate_parse: 33 callbacks suppressed
[  447.088182][T22292] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4819'.
[  447.195173][T22300] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4822'.
[  447.367800][T22320] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4828'.
[  447.435509][T22325] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4829'.
[  447.491837][T22330] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4831'.
[  447.565221][T22338] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  447.568668][T22338] syzkaller0: entered promiscuous mode
[  447.570496][T22338] syzkaller0: entered allmulticast mode
[  447.581377][T22338] tipc: Resetting bearer <eth:syzkaller0>
[  447.587106][T22336] tipc: Resetting bearer <eth:syzkaller0>
[  447.605426][T22336] tipc: Disabling bearer <eth:syzkaller0>
[  447.706458][T22352] netlink: 'syz.1.4840': attribute type 1 has an invalid length.
[  447.759302][T22352] bond10: (slave gretap3): making interface the new active one
[  447.763647][T22352] bond10: (slave gretap3): Enslaving as an active interface with an up link
[  447.934653][T22367] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4845'.
[  448.017073][T22372] netlink: 68 bytes leftover after parsing attributes in process `syz.1.4846'.
[  448.054894][T22374] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4847'.
[  448.057880][T22374] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4847'.
[  448.792926][T22402] GUP no longer grows the stack in syz.2.4856 (22402): 200000003000-20000000a000 (200000001000)
[  448.797740][T22402] CPU: 0 UID: 0 PID: 22402 Comm: syz.2.4856 Not tainted syzkaller #0 PREEMPT(full) 
[  448.797761][T22402] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  448.797770][T22402] Call Trace:
[  448.797776][T22402]  <TASK>
[  448.797783][T22402]  dump_stack_lvl+0x189/0x250
[  448.797808][T22402]  ? __pfx_dump_stack_lvl+0x10/0x10
[  448.797824][T22402]  ? __pfx__printk+0x10/0x10
[  448.797841][T22402]  ? find_vma+0xe7/0x160
[  448.797871][T22402]  __get_user_pages+0x24d0/0x2ce0
[  448.797890][T22402]  ? __bpf_trace_mmap_lock_acquire_returned+0x13b/0x190
[  448.797928][T22402]  ? rcu_is_watching+0x15/0xb0
[  448.797945][T22402]  __gup_longterm_locked+0xde9/0x1660
[  448.797969][T22402]  ? sanity_check_pinned_pages+0x123a/0x1300
[  448.797990][T22402]  gup_fast_fallback+0x1e6a/0x2010
[  448.798050][T22402]  ? __pfx_gup_fast_fallback+0x10/0x10
[  448.798065][T22402]  ? stack_trace_save+0x9c/0xe0
[  448.798080][T22402]  ? __pfx_stack_trace_save+0x10/0x10
[  448.798102][T22402]  ? pin_user_pages_fast+0x4d/0xb0
[  448.798121][T22402]  iov_iter_extract_pages+0x35a/0x5e0
[  448.798144][T22402]  extract_iter_to_sg+0xe46/0x24e0
[  448.798171][T22402]  ? __pfx_extract_iter_to_sg+0x10/0x10
[  448.798200][T22402]  ? __asan_memset+0x22/0x50
[  448.798218][T22402]  af_alg_get_rsgl+0x436/0x810
[  448.798279][T22402]  aead_recvmsg+0x4d5/0x13b0
[  448.798293][T22402]  ? finish_task_switch+0x266/0x950
[  448.798313][T22402]  ? aa_sk_perm+0x81e/0x950
[  448.798337][T22402]  ? __schedule+0x17ae/0x4cc0
[  448.798353][T22402]  ? __pfx_aead_recvmsg+0x10/0x10
[  448.798368][T22402]  ? bpf_lsm_socket_recvmsg+0x9/0x20
[  448.798385][T22402]  ? __pfx_aead_recvmsg+0x10/0x10
[  448.798398][T22402]  sock_recvmsg_nosec+0x186/0x1c0
[  448.798425][T22402]  ____sys_recvmsg+0x3aa/0x460
[  448.798450][T22402]  ? __pfx_____sys_recvmsg+0x10/0x10
[  448.798479][T22402]  ? import_iovec+0x74/0xa0
[  448.798500][T22402]  ___sys_recvmsg+0x1b5/0x510
[  448.798522][T22402]  ? __pfx____sys_recvmsg+0x10/0x10
[  448.798572][T22402]  ? __might_fault+0xb0/0x130
[  448.798594][T22402]  do_recvmmsg+0x307/0x770
[  448.798619][T22402]  ? __pfx_do_recvmmsg+0x10/0x10
[  448.798647][T22402]  ? __pfx_do_futex+0x10/0x10
[  448.798679][T22402]  __x64_sys_recvmmsg+0x190/0x240
[  448.798699][T22402]  ? __pfx___x64_sys_recvmmsg+0x10/0x10
[  448.798716][T22402]  ? rcu_is_watching+0x15/0xb0
[  448.798734][T22402]  ? do_syscall_64+0xbe/0x3b0
[  448.798754][T22402]  do_syscall_64+0xfa/0x3b0
[  448.798770][T22402]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  448.798783][T22402]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  448.798801][T22402]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  448.798815][T22402] RIP: 0033:0x7f991d38ec29
[  448.798828][T22402] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  448.798840][T22402] RSP: 002b:00007f991e238038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[  448.798855][T22402] RAX: ffffffffffffffda RBX: 00007f991d5d5fa0 RCX: 00007f991d38ec29
[  448.798865][T22402] RDX: 0000000000000002 RSI: 0000200000000180 RDI: 000000000000000c
[  448.798874][T22402] RBP: 00007f991d411e41 R08: 0000000000000000 R09: 0000000000000000
[  448.798882][T22402] R10: 0000000000000101 R11: 0000000000000246 R12: 0000000000000000
[  448.798891][T22402] R13: 00007f991d5d6038 R14: 00007f991d5d5fa0 R15: 00007ffdddc836a8
[  448.798914][T22402]  </TASK>
[  449.390651][T22410] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4859'.
[  450.581320][T22439] 8021q: adding VLAN 0 to HW filter on device bond8
[  450.840330][T22453] ip6gre0: entered allmulticast mode
[  452.293007][T22512] tap0: tun_chr_ioctl cmd 1074025680
[  452.297003][T22512] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  452.300566][T22512] D: renamed from syzkaller0
[  452.304615][T22512] tipc: Disabling bearer <eth:syzkaller0>
[  452.309061][T22512] __nla_validate_parse: 5 callbacks suppressed
[  452.309075][T22512] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4891'.
[  452.319871][T22512] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4891'.
[  452.326022][T22512] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4891'.
[  452.330758][T22512] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add()
[  452.531227][T22530] netlink: 'syz.2.4896': attribute type 21 has an invalid length.
[  452.538158][T22530] netlink: 128 bytes leftover after parsing attributes in process `syz.2.4896'.
[  452.541080][T22530] netlink: 'syz.2.4896': attribute type 5 has an invalid length.
[  452.543701][T22530] netlink: 'syz.2.4896': attribute type 6 has an invalid length.
[  452.546085][T22530] netlink: 3 bytes leftover after parsing attributes in process `syz.2.4896'.
[  452.798663][T22549] netlink: 48 bytes leftover after parsing attributes in process `syz.2.4903'.
[  452.947139][T22564] netlink: 'syz.2.4908': attribute type 29 has an invalid length.
[  452.953992][T22563] netlink: 'syz.2.4908': attribute type 29 has an invalid length.
[  452.956415][T22564] netlink: 500 bytes leftover after parsing attributes in process `syz.2.4908'.
[  452.958539][T22563] netlink: 48 bytes leftover after parsing attributes in process `syz.2.4908'.
[  452.959729][T22564] unsupported nla_type 58
[  453.303401][T22577] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4912'.
[  454.815512][T22594] Set syz1 is full, maxelem 65536 reached
[  455.546965][T22647] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4933'.
[  456.260224][T22687] netem: invalid attributes len -16
[  456.261953][T22687] netem: change failed
[  456.721419][T22706] wg1 speed is unknown, defaulting to 1000
[  457.147953][T22719] dvmrp8: left allmulticast mode
[  457.683953][T22735] __nla_validate_parse: 8 callbacks suppressed
[  457.683972][T22735] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4964'.
[  457.699025][T22735] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4964'.
[  457.964454][T22743] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4968'.
[  457.967850][T22743] netlink: 'syz.2.4968': attribute type 5 has an invalid length.
[  457.970789][T22743] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4968'.
[  458.003099][T22743] geneve5: entered promiscuous mode
[  458.005028][T22743] geneve5: entered allmulticast mode
[  458.008452][   T13] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 256 - 0
[  458.015012][   T13] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 256 - 0
[  458.035446][   T13] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 256 - 0
[  458.037828][   T13] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 256 - 0
[  458.056846][T22748] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4970'.
[  458.060384][T22748] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4970'.
[  458.067788][T22748] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4970'.
[  458.100958][T22750] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4971'.
[  458.104189][T22750] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4971'.
[  458.123775][T22750] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  458.651460][T22768] wg1 speed is unknown, defaulting to 1000
[  458.727624][T22772] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4979'.
[  458.983059][T22783] IPVS: sync thread started: state = BACKUP, mcast_ifn = batadv0, syncid = 0, id = 0
[  459.112795][T22788] syzkaller1: entered promiscuous mode
[  459.114704][T22788] syzkaller1: entered allmulticast mode
[  459.560709][T22801] macvtap1: entered promiscuous mode
[  459.565423][T22801] mac80211_hwsim hwsim53 wlan1: entered promiscuous mode
[  461.015639][T22852] bond9: (slave gretap2): Releasing active interface
[  461.026172][T22852] bond10: (slave gretap3): Releasing active interface
[  461.049205][T22853] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  461.053294][T22853] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  461.172695][T13554] Bluetooth: hci1: command 0x0405 tx timeout
[  461.441433][T22872] netlink: 'syz.3.5015': attribute type 1 has an invalid length.
[  461.518007][T22878] netlink: 'syz.3.5017': attribute type 7 has an invalid length.
[  461.520489][T22878] netlink: 'syz.3.5017': attribute type 8 has an invalid length.
[  461.619816][T22885] netlink: 'syz.3.5019': attribute type 13 has an invalid length.
[  461.624866][T22885] netlink: 'syz.3.5019': attribute type 17 has an invalid length.
[  461.639406][T22885] erspan0: left promiscuous mode
[  461.674142][T22885] 8021q: adding VLAN 0 to HW filter on device bond0
[  461.679222][T22885] 8021q: adding VLAN 0 to HW filter on device team0
[  461.688624][T22885] 1X: left allmulticast mode
[  461.690740][T22885] A link change request failed with some changes committed already. Interface 61X may have been left with an inconsistent configuration, please check.
[  461.836928][T22895] bridge: RTM_NEWNEIGH with invalid ether address
[  462.770115][T22957] __nla_validate_parse: 16 callbacks suppressed
[  462.770128][T22957] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5044'.
[  462.829764][T22963] IPVS: Scheduler module ip_vs_sip not found
[  462.861517][T22975] sctp: [Deprecated]: syz.2.5049 (pid 22975) Use of int in max_burst socket option.
[  462.861517][T22975] Use struct sctp_assoc_value instead
[  462.898250][T22977] gre4: entered allmulticast mode
[  463.003811][T22981] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  463.007516][T22981] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  463.015648][T22981] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  463.020404][T22981] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  463.040525][T22981] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  463.048790][T22981] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  463.056665][T22981] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  463.273573][T23003] syzkaller1: entered allmulticast mode
[  463.273679][T23007] rdma_rxe: rxe_newlink: failed to add lo
[  463.287461][T23007] gretap0: entered promiscuous mode
[  463.290802][T23007] erspan0: left promiscuous mode
[  463.296200][T23007] netdevsim0: left promiscuous mode
[  463.358753][T23007] 8021q: adding VLAN 0 to HW filter on device .`
[  463.365983][T23007] 8021q: adding VLAN 0 to HW filter on device `
[  463.372969][T23007] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  463.402660][   T24] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  463.452571][   T24] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  463.452627][T23015] netlink: 96 bytes leftover after parsing attributes in process `syz.2.5061'.
[  463.741240][T23028] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5066'.
[  463.760111][T23028] macvtap2: entered promiscuous mode
[  463.812646][   T12] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  463.817939][T23036] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5066'.
[  463.896542][T23041] syzkaller1: entered promiscuous mode
[  463.898590][T23041] syzkaller1: entered allmulticast mode
[  463.974124][   T61] block nbd1: Possible stuck request ffff8880208c0c00: control (read@0,1024B). Runtime 240 seconds
[  463.977711][   T61] block nbd1: Possible stuck request ffff8880208c0e00: control (read@1024,1024B). Runtime 240 seconds
[  463.981823][   T61] block nbd1: Possible stuck request ffff8880208c1000: control (read@2048,1024B). Runtime 240 seconds
[  463.986478][   T61] block nbd1: Possible stuck request ffff8880208c1200: control (read@3072,1024B). Runtime 240 seconds
[  464.448979][T23077] sctp: [Deprecated]: syz.3.5081 (pid 23077) Use of int in max_burst socket option.
[  464.448979][T23077] Use struct sctp_assoc_value instead
[  464.520053][T23084] dvmrp8: entered allmulticast mode
[  464.538185][T23085] dvmrp8: left allmulticast mode
[  464.861273][ T5876] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  464.866107][ T5876] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  464.880553][T23105] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5091'.
[  465.270150][   T24] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  465.423941][T23144] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5104'.
[  465.455421][T23162] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5110'.
[  465.647734][T23168] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5112'.
[  465.651982][T23167] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5112'.
[  465.679990][T23171] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5113'.
[  466.312482][T23211] netlink: 'syz.2.5126': attribute type 1 has an invalid length.
[  466.356707][T23213] netlink: 'syz.3.5129': attribute type 2 has an invalid length.
[  467.305988][T23269] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  467.446437][T23281] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  468.116232][T23324] netlink: 'syz.1.5166': attribute type 1 has an invalid length.
[  468.144116][T23324] 8021q: adding VLAN 0 to HW filter on device bond11
[  468.156831][T23324] netlink: 'syz.1.5166': attribute type 1 has an invalid length.
[  468.159654][T23324] netlink: 'syz.1.5166': attribute type 1 has an invalid length.
[  468.164107][T23324] netlink: 'syz.1.5166': attribute type 1 has an invalid length.
[  468.170803][T23324] netlink: 'syz.1.5166': attribute type 1 has an invalid length.
[  468.173711][T23324] netlink: 'syz.1.5166': attribute type 1 has an invalid length.
[  468.201472][T23325] bond11: (slave geneve3): making interface the new active one
[  468.205421][T23325] bond11: (slave geneve3): Enslaving as an active interface with an up link
[  468.208504][   T12] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  468.208580][T23324] netlink: 'syz.1.5166': attribute type 1 has an invalid length.
[  468.226060][T23324] netlink: 'syz.1.5166': attribute type 1 has an invalid length.
[  468.228765][   T12] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  468.231977][   T12] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  468.241474][   T12] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  468.245423][T23335] __nla_validate_parse: 5 callbacks suppressed
[  468.245432][T23335] netlink: 55631 bytes leftover after parsing attributes in process `syz.3.5170'.
[  468.277647][T23337] bond9: entered promiscuous mode
[  468.279959][T23337] 8021q: adding VLAN 0 to HW filter on device bond9
[  468.326717][T23345] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5173'.
[  468.349477][T23346] syzkaller1: entered promiscuous mode
[  468.351279][T23346] syzkaller1: entered allmulticast mode
[  468.360759][T23348] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5174'.
[  468.384164][T23350] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5175'.
[  468.387579][T23350] sctp: [Deprecated]: syz.3.5175 (pid 23350) Use of int in max_burst socket option deprecated.
[  468.387579][T23350] Use struct sctp_assoc_value instead
[  468.442942][T23353] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5176'.
[  468.446377][T23353] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5176'.
[  468.449833][T23353] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5176'.
[  468.454133][T23353] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5176'.
[  468.536200][T23362] netlink: 96 bytes leftover after parsing attributes in process `syz.3.5180'.
[  468.543860][T23362] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5180'.
[  468.942226][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  469.261909][T23412] 8021q: adding VLAN 0 to HW filter on device bond12
[  469.365978][T23412] bond12 (unregistering): Released all slaves
[  469.795486][T23457] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold
[  471.265638][T23518] wg1 speed is unknown, defaulting to 1000
[  472.281960][T23570] syzkaller1: entered promiscuous mode
[  472.284741][T23570] syzkaller1: entered allmulticast mode
[  473.652165][ T5897] page_pool_release_retry() stalled pool shutdown: id 157, 1 inflight 60 sec
[  474.061191][T23597] syzkaller1: entered promiscuous mode
[  474.063805][T23597] syzkaller1: entered allmulticast mode
[  474.227230][T23599] __nla_validate_parse: 16 callbacks suppressed
[  474.227246][T23599] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5252'.
[  474.237410][T23599] netlink: 120 bytes leftover after parsing attributes in process `syz.2.5252'.
[  474.295318][T23605] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5255'.
[  474.357558][T23611] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5257'.
[  474.486174][T23627] syzkaller1: entered promiscuous mode
[  474.488408][T23627] syzkaller1: entered allmulticast mode
[  474.551989][T23629] validate_nla: 27 callbacks suppressed
[  474.553903][T23629] netlink: 'syz.2.5263': attribute type 10 has an invalid length.
[  474.556293][T23629] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5263'.
[  474.565553][T23629] `: Port device geneve0 added
[  474.568312][T15075] netdevsim netdevsim2 eth0: set [1, 2] type 2 family 0 port 6081 - 0
[  474.578067][T15075] netdevsim netdevsim2 eth1: set [1, 2] type 2 family 0 port 6081 - 0
[  474.580722][T15075] netdevsim netdevsim2 eth2: set [1, 2] type 2 family 0 port 6081 - 0
[  474.592493][T15075] netdevsim netdevsim2 eth3: set [1, 2] type 2 family 0 port 6081 - 0
[  474.894171][T23661] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5276'.
[  474.914620][T23661] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5276'.
[  475.027885][T23670] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5278'.
[  475.119418][T23684] netlink: 'syz.2.5283': attribute type 39 has an invalid length.
[  475.251171][T23688] netlink: 'syz.1.5285': attribute type 5 has an invalid length.
[  475.254643][T23688] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5285'.
[  476.257109][T23706] syzkaller1: entered promiscuous mode
[  476.259324][T23706] syzkaller1: entered allmulticast mode
[  476.368144][T23714] netlink: 'syz.1.5293': attribute type 1 has an invalid length.
[  476.370623][T23714] netlink: 52 bytes leftover after parsing attributes in process `syz.1.5293'.
[  476.601201][T23734] vxcan1: entered allmulticast mode
[  476.831379][T23745] syzkaller1: entered promiscuous mode
[  476.834433][T23745] syzkaller1: entered allmulticast mode
[  477.386827][T23776] netlink: 'syz.2.5315': attribute type 5 has an invalid length.
[  477.412222][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  477.416141][T23779] syzkaller1: entered promiscuous mode
[  477.418262][T23779] syzkaller1: entered allmulticast mode
[  477.422895][T23782] netlink: 'syz.2.5318': attribute type 3 has an invalid length.
[  477.459566][T23782] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  477.465926][T23782] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  477.726127][T23809] netlink: 'syz.3.5326': attribute type 5 has an invalid length.
[  477.739212][T23809] ip6erspan0: entered promiscuous mode
[  478.676296][T23841] syzkaller1: entered promiscuous mode
[  478.679193][T23841] syzkaller1: entered allmulticast mode
[  479.616235][T23891] __nla_validate_parse: 15 callbacks suppressed
[  479.616254][T23891] netlink: 44 bytes leftover after parsing attributes in process `syz.1.5355'.
[  479.632774][T23893] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5356'.
[  479.680204][T23895] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5357'.
[  479.750213][T23900] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  479.776681][T23903] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check.
[  479.825197][T23900] netlink: 'syz.2.5359': attribute type 7 has an invalid length.
[  479.911636][T23899] tipc: Disabling bearer <eth:syzkaller0>
[  480.106483][T23922] IPVS: Unknown mcast interface: macvlan0
[  480.145725][T23927] netlink: 64 bytes leftover after parsing attributes in process `syz.1.5368'.
[  480.205434][T23932] netlink: 'syz.2.5369': attribute type 15 has an invalid length.
[  480.286179][T23945] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5372'.
[  480.319560][T23947] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5374'.
[  480.325115][T23947] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5374'.
[  481.057691][T23954] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5376'.
[  481.140338][T23963] syzkaller1: entered promiscuous mode
[  481.142263][T23963] syzkaller1: entered allmulticast mode
[  481.203170][T23958] nbd: socks must be embedded in a SOCK_ITEM attr
[  481.221707][T23958] block nbd0: shutting down sockets
[  481.336372][T23969] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5382'.
[  481.388838][T23973] wg1 speed is unknown, defaulting to 1000
[  481.405758][T23977] netlink: 44 bytes leftover after parsing attributes in process `syz.2.5382'.
[  482.294881][T24019] syzkaller1: entered promiscuous mode
[  482.297846][T24019] syzkaller1: entered allmulticast mode
[  482.479946][T24040] openvswitch: netlink: Message has 8 unknown bytes.
[  482.705723][T24057] netlink: 'syz.1.5412': attribute type 2 has an invalid length.
[  482.708769][T24057] netlink: 'syz.1.5412': attribute type 1 has an invalid length.
[  482.948909][T24089] pim6reg1: entered promiscuous mode
[  482.951186][T24089] pim6reg1: entered allmulticast mode
[  482.975170][T24091] tun0: tun_chr_ioctl cmd 1074812118
[  483.159259][T24101] netlink: 'syz.3.5420': attribute type 142 has an invalid length.
[  483.335734][T24118] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on
[  483.368893][T24118] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on
[  483.418105][T24118] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on
[  483.442367][T24118] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on
[  483.467006][T24118] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on
[  483.489843][T24118] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on
[  483.532755][T24118] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on
[  483.564609][T24118] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on
[  483.594749][T24118] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on
[  483.617550][T24141] netlink: 'syz.2.5432': attribute type 3 has an invalid length.
[  483.620731][T24141] netlink: 'syz.2.5432': attribute type 3 has an invalid length.
[  483.629953][T24118] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on
[  483.657015][T24118] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on
[  483.709045][T24118] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on
[  483.734912][T24118] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on
[  483.760351][T24118] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on
[  483.782938][T24118] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on
[  483.830517][T24118] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on
[  483.851562][T24118] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on
[  483.877291][T24118] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on
[  483.926255][T24118] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on
[  483.947197][T24118] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on
[  483.966539][T24166] netlink: 'syz.1.5437': attribute type 1 has an invalid length.
[  483.970189][T24118] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on
[  483.987535][T24118] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on
[  484.006008][T24118] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on
[  484.023729][T24118] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on
[  484.042715][T24118] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on
[  484.062771][T24118] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on
[  484.083550][T24118] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on
[  484.102618][T24118] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on
[  484.118996][T24118] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on
[  484.148139][T24118] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on
[  484.855091][T24208] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  484.859415][T24208] sch_tbf: burst 127 is lower than device syzkaller0 mtu (313) !
[  485.014836][T24208] __nla_validate_parse: 12 callbacks suppressed
[  485.014847][T24208] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5447'.
[  485.063252][T24218] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5452'.
[  485.078991][T24220] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5453'.
[  485.111412][T24222] syzkaller1: entered promiscuous mode
[  485.115057][T24222] syzkaller1: entered allmulticast mode
[  485.168380][T24227] Unsupported ieee802154 address type: 0
[  485.414662][T24243] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  485.444250][T24243] syzkaller0: entered promiscuous mode
[  485.446334][T24243] syzkaller0: entered allmulticast mode
[  487.166581][T24259] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5464'.
[  487.187297][T24260] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5465'.
[  487.191049][T24260] netlink: 7 bytes leftover after parsing attributes in process `syz.3.5465'.
[  487.268460][T24268] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5469'.
[  487.298304][T24268] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5469'.
[  487.535267][   T12] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured!
[  487.751679][T24303] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5479'.
[  487.900688][T24315] bond0: (slave batadv_slave_0): Releasing backup interface
[  487.910329][T24315] batadv_slave_0: left promiscuous mode
[  487.916567][T24315] batadv_slave_0: left allmulticast mode
[  487.970708][T24315] netlink: 'syz.3.5483': attribute type 10 has an invalid length.
[  487.979816][T24315] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  487.987507][T24315] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  488.370100][T24338] netlink: 96 bytes leftover after parsing attributes in process `syz.1.5493'.
[  488.377016][T24338] 8021q: VLANs not supported on ip6tnl0
[  488.776761][T24351] netlink: 'syz.1.5497': attribute type 1 has an invalid length.
[  488.950792][T24362] syzkaller1: entered promiscuous mode
[  488.953878][T24362] syzkaller1: entered allmulticast mode
[  489.288849][T24381] netlink: 'syz.3.5507': attribute type 1 has an invalid length.
[  490.157740][T24391] __nla_validate_parse: 3 callbacks suppressed
[  490.157757][T24391] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5511'.
[  490.198651][T24391] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5511'.
[  490.386507][T24398] syzkaller1: entered promiscuous mode
[  490.388727][T24398] syzkaller1: entered allmulticast mode
[  490.498573][T24388] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  490.694997][T24423] syzkaller1: entered promiscuous mode
[  490.696882][T24423] syzkaller1: entered allmulticast mode
[  490.710084][T24426] sctp: [Deprecated]: syz.1.5522 (pid 24426) Use of struct sctp_assoc_value in delayed_ack socket option.
[  490.710084][T24426] Use struct sctp_sack_info instead
[  490.725384][T24426] sctp: [Deprecated]: syz.1.5522 (pid 24426) Use of struct sctp_assoc_value in delayed_ack socket option.
[  490.725384][T24426] Use struct sctp_sack_info instead
[  490.861149][T24437] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5525'.
[  491.046151][T24449] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5527'.
[  491.252395][    C1] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured!
[  491.316047][T24463] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5534'.
[  491.327905][T24459] netlink: 'syz.2.5533': attribute type 1 has an invalid length.
[  491.330801][T24459] netlink: 228 bytes leftover after parsing attributes in process `syz.2.5533'.
[  491.351525][T24470] tipc: Disabling bearer <udp:syz2>
[  491.375594][T24474] netlink: 56 bytes leftover after parsing attributes in process `syz.2.5536'.
[  491.601331][T24486] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5541'.
[  491.645807][T24488] vlan0: entered allmulticast mode
[  491.678233][T24492] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5544'.
[  491.685107][T24490] syzkaller1: entered promiscuous mode
[  491.689021][T24490] syzkaller1: entered allmulticast mode
[  491.764136][T24498] netem: change failed
[  491.793156][T24499] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5545'.
[  491.796677][T24499] netlink: 'syz.3.5545': attribute type 6 has an invalid length.
[  491.822595][T24501] netlink: 'syz.1.5547': attribute type 21 has an invalid length.
[  491.829253][ T5876] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  491.829353][T24499] netlink: 'syz.3.5545': attribute type 6 has an invalid length.
[  491.833026][ T5876] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  491.838924][ T5876] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  491.841471][ T5876] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  491.906804][T24505] 8021q: adding VLAN 0 to HW filter on device bond9
[  492.210927][T24522] syzkaller1: entered promiscuous mode
[  492.215378][T24522] syzkaller1: entered allmulticast mode
[  492.239026][T24518] nbd5: detected capacity change from 0 to 127
[  492.257334][   T56] block nbd5: Receive control failed (result -32)
[  492.599792][T24533] wg1 speed is unknown, defaulting to 1000
[  493.308668][T24568] wg1 speed is unknown, defaulting to 1000
[  493.481687][T24577] netlink: 'syz.1.5572': attribute type 5 has an invalid length.
[  494.052620][   T61] block nbd1: Possible stuck request ffff8880208c0c00: control (read@0,1024B). Runtime 270 seconds
[  494.056980][   T61] block nbd1: Possible stuck request ffff8880208c0e00: control (read@1024,1024B). Runtime 270 seconds
[  494.061324][   T61] block nbd1: Possible stuck request ffff8880208c1000: control (read@2048,1024B). Runtime 270 seconds
[  494.066301][   T61] block nbd1: Possible stuck request ffff8880208c1200: control (read@3072,1024B). Runtime 270 seconds
[  494.120218][T24572] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  494.505000][T24601] netlink: 'syz.1.5582': attribute type 303 has an invalid length.
[  494.645737][T24601] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  494.649016][T24601] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  494.692199][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  495.951216][T24653] __nla_validate_parse: 12 callbacks suppressed
[  495.951229][T24653] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5597'.
[  495.981590][T24655] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5598'.
[  496.119463][T24665] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5603'.
[  496.331533][T24684] syzkaller1: entered promiscuous mode
[  496.336646][T24684] syzkaller1: entered allmulticast mode
[  496.382417][T24680] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5606'.
[  496.385203][T24680] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5606'.
[  496.389103][T24680] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5606'.
[  496.397710][T24680] veth0_to_bond: entered allmulticast mode
[  496.534688][T24695] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5611'.
[  496.550339][T24695] netlink: 84 bytes leftover after parsing attributes in process `syz.3.5611'.
[  496.583410][T24698] netlink: 44 bytes leftover after parsing attributes in process `syz.2.5610'.
[  496.587565][T24698] netlink: 136 bytes leftover after parsing attributes in process `syz.2.5610'.
[  497.196219][T24725] netlink: 'syz.1.5621': attribute type 21 has an invalid length.
[  497.226892][T24725] netlink: 'syz.1.5621': attribute type 21 has an invalid length.
[  498.105126][T24750] netlink: 'syz.1.5628': attribute type 1 has an invalid length.
[  498.150715][T24750] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  498.230283][T24750] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  498.293039][T24750] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  498.351733][T24750] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  498.421314][T15075] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  498.458459][T15075] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  498.462668][   T13] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  498.471984][   T13] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  498.744701][T24806] netlink: 'syz.2.5646': attribute type 1 has an invalid length.
[  498.769832][T24806] 8021q: adding VLAN 0 to HW filter on device bond10
[  498.788596][T24806] 8021q: adding VLAN 0 to HW filter on device bond10
[  498.791045][T24806] bond10: (slave vxcan3): The slave device specified does not support setting the MAC address
[  498.796273][T24806] bond10: (slave vxcan3): Error -95 calling set_mac_address
[  498.848738][T24808] veth7: entered promiscuous mode
[  498.859606][T24808] bond10: (slave veth7): Enslaving as an active interface with a down link
[  499.182219][    C1] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured!
[  500.031089][T24836] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  500.035506][T24836] syzkaller0: entered promiscuous mode
[  500.037829][T24836] syzkaller0: entered allmulticast mode
[  500.054644][T24836] tipc: Resetting bearer <eth:syzkaller0>
[  500.059032][T24835] tipc: Resetting bearer <eth:syzkaller0>
[  500.073447][T24835] tipc: Disabling bearer <eth:syzkaller0>
[  500.285467][T24847] syzkaller1: entered promiscuous mode
[  500.287730][T24847] syzkaller1: entered allmulticast mode
[  500.437731][T24855] netlink: 'syz.1.5661': attribute type 4 has an invalid length.
[  500.601765][   T13] nci: nci_rx_work: unknown MT 0x6
[  500.819228][T24877] netlink: 'syz.3.5668': attribute type 1 has an invalid length.
[  500.840769][T24877] vlan3: entered allmulticast mode
[  500.843862][T24877] bond40: entered allmulticast mode
[  501.346497][T24866] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  501.585694][T24902] netlink: 'syz.2.5675': attribute type 62 has an invalid length.
[  501.588256][T24902] __nla_validate_parse: 24 callbacks suppressed
[  501.588266][T24902] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5675'.
[  501.700192][T24915] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5680'.
[  501.824437][T24927] netlink: 44 bytes leftover after parsing attributes in process `syz.1.5683'.
[  502.188833][T24937] netlink: 'syz.3.5687': attribute type 4 has an invalid length.
[  502.238509][T24939] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5688'.
[  502.515637][T24951] syzkaller1: entered promiscuous mode
[  502.517915][T24951] syzkaller1: entered allmulticast mode
[  502.591288][T24953] netlink: 'syz.2.5694': attribute type 21 has an invalid length.
[  502.602545][T24953] netlink: 'syz.2.5694': attribute type 22 has an invalid length.
[  502.605753][T24953] netlink: 'syz.2.5694': attribute type 23 has an invalid length.
[  502.608780][T24953] netlink: 'syz.2.5694': attribute type 25 has an invalid length.
[  502.629476][T24953] netlink: 'syz.2.5694': attribute type 26 has an invalid length.
[  502.636300][T24953] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5694'.
[  502.987530][T24986] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5704'.
[  503.191620][   T13] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  503.198119][   T13] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  503.201365][   T13] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  503.207412][   T13] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  503.299800][T24996] xt_l2tp: missing protocol rule (udp|l2tpip)
[  503.405137][T25001] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5708'.
[  503.526928][T25004] wg2: entered promiscuous mode
[  503.529059][T25004] wg2: entered allmulticast mode
[  503.769556][T25013] gretap0: refused to change device tx_queue_len
[  503.774635][T25013] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  503.778486][T25021] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5714'.
[  503.830902][T25023] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5715'.
[  503.878789][T25025] netlink: 48 bytes leftover after parsing attributes in process `syz.2.5716'.
[  504.000913][T25030] syzkaller1: entered promiscuous mode
[  504.006338][T25030] syzkaller1: entered allmulticast mode
[  504.108128][T25032] 8021q: adding VLAN 0 to HW filter on device bond41
[  504.429142][T25048] IPVS: set_ctl: invalid protocol: 51 100.1.1.2:20000
[  504.489275][T25052] syzkaller1: entered promiscuous mode
[  504.491354][T25052] syzkaller1: entered allmulticast mode
[  504.575827][T25062] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  504.579754][T25062] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  504.770380][T25077] veth0_to_bridge: entered promiscuous mode
[  504.839795][T25077] veth0_to_bridge: left promiscuous mode
[  504.908314][T25090] syzkaller1: entered promiscuous mode
[  504.910349][T25090] syzkaller1: entered allmulticast mode
[  505.178920][T25102] syzkaller0: entered promiscuous mode
[  505.181970][T25102] syzkaller0: entered allmulticast mode
[  505.315337][T25111] bridge0: entered allmulticast mode
[  505.329997][T25113] batadv_slave_1: entered promiscuous mode
[  505.475910][T25112] batadv_slave_1: left promiscuous mode
[  505.563975][T25123] delete_channel: no stack
[  505.637814][T25136] macvtap3: entered promiscuous mode
[  505.706029][T25135] syzkaller1: entered promiscuous mode
[  505.708453][T25135] syzkaller1: entered allmulticast mode
[  505.716671][T25135] validate_nla: 4 callbacks suppressed
[  505.716687][T25135] netlink: 'syz.2.5754': attribute type 1 has an invalid length.
[  505.910348][T25154] delete_channel: no stack
[  505.914544][T25152] netlink: 'syz.3.5759': attribute type 3 has an invalid length.
[  505.969155][T25160] netlink: 'syz.1.5761': attribute type 1 has an invalid length.
[  506.263109][T25179] tipc: Enabled bearer <udp:syz2>, priority 10
[  507.558746][T25307] wg1 speed is unknown, defaulting to 1000
[  507.747365][T25320] __nla_validate_parse: 16 callbacks suppressed
[  507.747383][T25320] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5798'.
[  507.835610][T25323] syzkaller1: entered promiscuous mode
[  507.838074][T25323] syzkaller1: entered allmulticast mode
[  507.844754][T25322] netlink: 'syz.3.5797': attribute type 7 has an invalid length.
[  507.847207][T25322] netlink: 224 bytes leftover after parsing attributes in process `syz.3.5797'.
[  508.055098][T25338] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5802'.
[  508.078982][T25339] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5801'.
[  508.370477][T25354] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5805'.
[  508.424579][T25356] syzkaller1: entered promiscuous mode
[  508.426769][T25356] syzkaller1: entered allmulticast mode
[  508.750523][T25367] xt_limit: Overflow, try lower: 271964/0
[  508.880226][T25380] syzkaller1: entered promiscuous mode
[  508.882791][T25380] syzkaller1: entered allmulticast mode
[  509.187462][T25392] bond42: entered promiscuous mode
[  509.191090][T25392] bond42: entered allmulticast mode
[  509.195168][T25392] 8021q: adding VLAN 0 to HW filter on device bond42
[  509.357313][T25421] netlink: 'syz.3.5821': attribute type 13 has an invalid length.
[  509.425280][T25431] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  509.460115][T25435] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5828'.
[  509.464019][T25435] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5828'.
[  509.474898][T25437] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5828'.
[  509.477956][T25437] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5828'.
[  509.509121][T25441] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5829'.
[  509.736679][T25461] dummy0: entered promiscuous mode
[  509.740357][T25461] dummy0: left promiscuous mode
[  510.009684][T25474] netlink: 'syz.1.5838': attribute type 16 has an invalid length.
[  510.015753][T25474] netlink: 'syz.1.5838': attribute type 17 has an invalid length.
[  510.038050][T25474] 8021q: adding VLAN 0 to HW filter on device bond0
[  510.044598][T25474] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  510.083188][ T5897] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  510.741966][T25480] syzkaller1: entered promiscuous mode
[  510.746223][T25480] syzkaller1: entered allmulticast mode
[  510.934398][ T6337] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  511.004313][T25501] vxcan2: entered allmulticast mode
[  511.097200][T15075] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  511.127810][T25509] veth0: entered promiscuous mode
[  511.139963][T25511] syzkaller1: entered promiscuous mode
[  511.141806][T25511] syzkaller1: entered allmulticast mode
[  511.291876][T25519] netlink: 'syz.2.5852': attribute type 5 has an invalid length.
[  511.296973][T25509] veth0 (unregistering): left promiscuous mode
[  511.513118][T25543] bond11: entered promiscuous mode
[  511.514784][T25543] bond11: entered allmulticast mode
[  511.516642][T25543] 8021q: adding VLAN 0 to HW filter on device bond11
[  511.524054][T25540] syzkaller1: entered promiscuous mode
[  511.526428][T25540] syzkaller1: entered allmulticast mode
[  511.695131][T25556] netlink: 'syz.1.5863': attribute type 2 has an invalid length.
[  511.763776][T25562] mac80211_hwsim hwsim52 syzkaller0: Caught tx_queue_len zero misconfig
[  511.820860][T25570] vlan3: entered promiscuous mode
[  512.132920][ T5876] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  512.141964][ T5876] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  512.271635][T25608] IPVS: set_ctl: invalid protocol: 33 172.30.1.2:20002
[  512.275764][T25608] netlink: 'syz.1.5878': attribute type 13 has an invalid length.
[  512.279282][T25608] (unnamed net_device) (uninitialized): option fail_over_mac: invalid value (6)
[  512.395781][T25614] 8021q: adding VLAN 0 to HW filter on device bond13
[  512.606684][T25628] netlink: 'syz.3.5883': attribute type 1 has an invalid length.
[  512.937496][T25649] __nla_validate_parse: 38 callbacks suppressed
[  512.937514][T25649] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5889'.
[  513.054278][T25653] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  513.058094][T25653] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0
[  513.061601][T25653] netdevsim netdevsim2 eth3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[  513.065086][T25653] netdevsim netdevsim2 eth3 (unregistering): unset [1, 2] type 2 family 0 port 6081 - 0
[  513.127461][T25655] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5890'.
[  513.136032][T25653] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  513.139146][T25653] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0
[  513.144608][T25653] netdevsim netdevsim2 eth2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[  513.148430][T25653] netdevsim netdevsim2 eth2 (unregistering): unset [1, 2] type 2 family 0 port 6081 - 0
[  513.172430][ T2383] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  513.208526][T25653] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  513.214551][T25653] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0
[  513.218358][T25653] netdevsim netdevsim2 eth1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[  513.225189][T25653] netdevsim netdevsim2 eth1 (unregistering): unset [1, 2] type 2 family 0 port 6081 - 0
[  513.289253][T25653] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  513.293030][T25653] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0
[  513.296590][T25653] netdevsim netdevsim2 eth0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[  513.300352][T25653] netdevsim netdevsim2 eth0 (unregistering): unset [1, 2] type 2 family 0 port 6081 - 0
[  513.397232][T15075] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  513.403815][T15075] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  513.426061][T15075] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 256 - 0
[  513.432245][T15075] netdevsim netdevsim2 eth0: set [1, 2] type 2 family 0 port 20001 - 0
[  513.447309][ T5876] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  513.450562][ T5876] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  513.454065][ T5876] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 256 - 0
[  513.456725][ T5876] netdevsim netdevsim2 eth1: set [1, 2] type 2 family 0 port 20001 - 0
[  513.471542][ T5876] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  513.475601][ T5876] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  513.478854][ T5876] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 256 - 0
[  513.482488][ T5876] netdevsim netdevsim2 eth2: set [1, 2] type 2 family 0 port 20001 - 0
[  513.500496][T25664] syzkaller1: entered promiscuous mode
[  513.505820][T25664] syzkaller1: entered allmulticast mode
[  513.509289][ T5876] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  513.513448][ T5876] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  513.516428][ T5876] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 256 - 0
[  513.519740][ T5876] netdevsim netdevsim2 eth3: set [1, 2] type 2 family 0 port 20001 - 0
[  513.524889][T25654] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  513.528283][T25654] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  513.532971][T25654] netdevsim netdevsim2 eth3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[  513.536686][T25654] netdevsim netdevsim2 eth3 (unregistering): unset [1, 2] type 2 family 0 port 20001 - 0
[  513.561476][ T5876] ==================================================================
[  513.564713][ T5876] BUG: KASAN: slab-use-after-free in __mutex_lock+0x147/0x1350
[  513.567724][ T5876] Read of size 8 at addr ffff888039af5eb0 by task kworker/u8:3/5876
[  513.571661][ T5876] 
[  513.572832][ T5876] CPU: 0 UID: 0 PID: 5876 Comm: kworker/u8:3 Not tainted syzkaller #0 PREEMPT(full) 
[  513.572851][ T5876] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  513.572863][ T5876] Workqueue: udp_tunnel_nic udp_tunnel_nic_device_sync_work
[  513.572884][ T5876] Call Trace:
[  513.572892][ T5876]  <TASK>
[  513.572899][ T5876]  dump_stack_lvl+0x189/0x250
[  513.572917][ T5876]  ? __kasan_check_byte+0x12/0x40
[  513.572938][ T5876]  ? __pfx_dump_stack_lvl+0x10/0x10
[  513.572952][ T5876]  ? lock_release+0x4b/0x3e0
[  513.572972][ T5876]  ? __virt_addr_valid+0x4a5/0x5c0
[  513.572989][ T5876]  print_report+0xca/0x240
[  513.573002][ T5876]  ? __mutex_lock+0x147/0x1350
[  513.573042][ T5876]  kasan_report+0x118/0x150
[  513.573059][ T5876]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  513.573072][ T5876]  ? __mutex_lock+0x147/0x1350
[  513.573088][ T5876]  __mutex_lock+0x147/0x1350
[  513.573104][ T5876]  ? __mutex_lock+0x5bb/0x1350
[  513.573119][ T5876]  ? udp_tunnel_nic_device_sync_work+0x39/0xa50
[  513.573135][ T5876]  ? __pfx___mutex_lock+0x10/0x10
[  513.573151][ T5876]  ? __lock_acquire+0xab9/0xd20
[  513.573172][ T5876]  udp_tunnel_nic_device_sync_work+0x39/0xa50
[  513.573190][ T5876]  ? process_scheduled_works+0x9ef/0x17b0
[  513.573204][ T5876]  ? process_scheduled_works+0x9ef/0x17b0
[  513.573217][ T5876]  process_scheduled_works+0xae1/0x17b0
[  513.573238][ T5876]  ? __pfx_process_scheduled_works+0x10/0x10
[  513.573256][ T5876]  worker_thread+0x8a0/0xda0
[  513.573269][ T5876]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  513.573282][ T5876]  ? __kthread_parkme+0x7b/0x200
[  513.573299][ T5876]  kthread+0x711/0x8a0
[  513.573322][ T5876]  ? __pfx_worker_thread+0x10/0x10
[  513.573335][ T5876]  ? __pfx_kthread+0x10/0x10
[  513.573350][ T5876]  ? _raw_spin_unlock_irq+0x23/0x50
[  513.573363][ T5876]  ? lockdep_hardirqs_on+0x9c/0x150
[  513.573376][ T5876]  ? __pfx_kthread+0x10/0x10
[  513.573392][ T5876]  ret_from_fork+0x439/0x7d0
[  513.573407][ T5876]  ? __pfx_ret_from_fork+0x10/0x10
[  513.573422][ T5876]  ? __switch_to_asm+0x39/0x70
[  513.573439][ T5876]  ? __switch_to_asm+0x33/0x70
[  513.573456][ T5876]  ? __pfx_kthread+0x10/0x10
[  513.573469][ T5876]  ret_from_fork_asm+0x1a/0x30
[  513.573491][ T5876]  </TASK>
[  513.573497][ T5876] 
[  513.656136][ T5876] Allocated by task 25653:
[  513.657896][ T5876]  kasan_save_track+0x3e/0x80
[  513.659765][ T5876]  __kasan_kmalloc+0x93/0xb0
[  513.661637][ T5876]  __kmalloc_noprof+0x27a/0x4f0
[  513.663598][ T5876]  udp_tunnel_nic_netdevice_event+0x854/0x19f0
[  513.666081][ T5876]  notifier_call_chain+0x1b6/0x3e0
[  513.668117][ T5876]  register_netdevice+0x1608/0x1ae0
[  513.670232][ T5876]  nsim_create+0xae8/0xf10
[  513.671981][ T5876]  __nsim_dev_port_add+0x6b6/0xb10
[  513.674040][ T5876]  nsim_dev_port_add_all+0x37/0xf0
[  513.676080][ T5876]  nsim_dev_reload_up+0x451/0x780
[  513.678087][ T5876]  devlink_reload+0x4ec/0x8d0
[  513.679968][ T5876]  devlink_nl_reload_doit+0xb35/0xd50
[  513.682135][ T5876]  genl_family_rcv_msg_doit+0x215/0x300
[  513.684370][ T5876]  genl_rcv_msg+0x60e/0x790
[  513.686172][ T5876]  netlink_rcv_skb+0x208/0x470
[  513.688062][ T5876]  genl_rcv+0x28/0x40
[  513.689586][ T5876]  netlink_unicast+0x82f/0x9e0
[  513.691415][ T5876]  netlink_sendmsg+0x805/0xb30
[  513.693319][ T5876]  __sock_sendmsg+0x21c/0x270
[  513.695171][ T5876]  ____sys_sendmsg+0x505/0x830
[  513.697117][ T5876]  ___sys_sendmsg+0x21f/0x2a0
[  513.699023][ T5876]  __x64_sys_sendmsg+0x19b/0x260
[  513.700942][ T5876]  do_syscall_64+0xfa/0x3b0
[  513.702699][ T5876]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  513.704486][ T5876] 
[  513.705327][ T5876] Freed by task 25654:
[  513.706916][ T5876]  kasan_save_track+0x3e/0x80
[  513.708813][ T5876]  kasan_save_free_info+0x46/0x50
[  513.710846][ T5876]  __kasan_slab_free+0x5b/0x80
[  513.712755][ T5876]  kfree+0x18e/0x440
[  513.714356][ T5876]  udp_tunnel_nic_netdevice_event+0x1332/0x19f0
[  513.716798][ T5876]  notifier_call_chain+0x1b6/0x3e0
[  513.718674][ T5876]  unregister_netdevice_many_notify+0x14d7/0x1ff0
[  513.720700][ T5876]  unregister_netdevice_queue+0x33c/0x380
[  513.722499][ T5876]  nsim_destroy+0x1dd/0x670
[  513.723977][ T5876]  __nsim_dev_port_del+0x14d/0x1b0
[  513.725842][ T5876]  nsim_dev_reload_destroy+0x288/0x490
[  513.728029][ T5876]  nsim_dev_reload_down+0x8a/0xc0
[  513.729744][ T5876]  devlink_reload+0x1b6/0x8d0
[  513.731341][ T5876]  devlink_nl_reload_doit+0xb35/0xd50
[  513.733166][ T5876]  genl_family_rcv_msg_doit+0x215/0x300
[  513.734945][ T5876]  genl_rcv_msg+0x60e/0x790
[  513.736599][ T5876]  netlink_rcv_skb+0x208/0x470
[  513.738514][ T5876]  genl_rcv+0x28/0x40
[  513.739910][ T5876]  netlink_unicast+0x82f/0x9e0
[  513.741689][ T5876]  netlink_sendmsg+0x805/0xb30
[  513.743342][ T5876]  __sock_sendmsg+0x21c/0x270
[  513.745043][ T5876]  ____sys_sendmsg+0x505/0x830
[  513.746869][ T5876]  ___sys_sendmsg+0x21f/0x2a0
[  513.748655][ T5876]  __x64_sys_sendmsg+0x19b/0x260
[  513.750490][ T5876]  do_syscall_64+0xfa/0x3b0
[  513.752103][ T5876]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  513.754081][ T5876] 
[  513.754841][ T5876] Last potentially related work creation:
[  513.756993][ T5876]  kasan_save_stack+0x3e/0x60
[  513.758796][ T5876]  kasan_record_aux_stack+0xbd/0xd0
[  513.760738][ T5876]  insert_work+0x3d/0x330
[  513.762408][ T5876]  __queue_work+0xbaf/0xfb0
[  513.764131][ T5876]  queue_work_on+0x181/0x270
[  513.765897][ T5876]  __udp_tunnel_nic_add_port+0xb71/0xd60
[  513.768048][ T5876]  udp_tunnel_push_rx_port+0x180/0x200
[  513.770120][ T5876]  geneve_offload_rx_ports+0xd7/0x160
[  513.772145][ T5876]  geneve_netdevice_event+0x6a/0x80
[  513.774104][ T5876]  notifier_call_chain+0x1b6/0x3e0
[  513.776089][ T5876]  call_netdevice_notifiers+0x88/0xc0
[  513.778189][ T5876]  udp_tunnel_nic_netdevice_event+0x134d/0x19f0
[  513.780237][ T5876]  notifier_call_chain+0x1b6/0x3e0
[  513.781826][ T5876]  register_netdevice+0x1608/0x1ae0
[  513.783599][ T5876]  nsim_create+0xae8/0xf10
[  513.785211][ T5876]  __nsim_dev_port_add+0x6b6/0xb10
[  513.787260][ T5876]  nsim_dev_port_add_all+0x37/0xf0
[  513.789291][ T5876]  nsim_dev_reload_up+0x451/0x780
[  513.791151][ T5876]  devlink_reload+0x4ec/0x8d0
[  513.792715][ T5876]  devlink_nl_reload_doit+0xb35/0xd50
[  513.794523][ T5876]  genl_family_rcv_msg_doit+0x215/0x300
[  513.796540][ T5876]  genl_rcv_msg+0x60e/0x790
[  513.798369][ T5876]  netlink_rcv_skb+0x208/0x470
[  513.800281][ T5876]  genl_rcv+0x28/0x40
[  513.801841][ T5876]  netlink_unicast+0x82f/0x9e0
[  513.803446][ T5876]  netlink_sendmsg+0x805/0xb30
[  513.805317][ T5876]  __sock_sendmsg+0x21c/0x270
[  513.807163][ T5876]  ____sys_sendmsg+0x505/0x830
[  513.809088][ T5876]  ___sys_sendmsg+0x21f/0x2a0
[  513.810985][ T5876]  __x64_sys_sendmsg+0x19b/0x260
[  513.812961][ T5876]  do_syscall_64+0xfa/0x3b0
[  513.814795][ T5876]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  513.817189][ T5876] 
[  513.818188][ T5876] Second to last potentially related work creation:
[  513.820778][ T5876]  kasan_save_stack+0x3e/0x60
[  513.822677][ T5876]  kasan_record_aux_stack+0xbd/0xd0
[  513.824682][ T5876]  insert_work+0x3d/0x330
[  513.826375][ T5876]  __queue_work+0xcd2/0xfb0
[  513.828178][ T5876]  queue_work_on+0x181/0x270
[  513.830019][ T5876]  __udp_tunnel_nic_add_port+0xb71/0xd60
[  513.832259][ T5876]  udp_tunnel_push_rx_port+0x180/0x200
[  513.834296][ T5876]  vxlan_offload_rx_ports+0x139/0x200
[  513.836381][ T5876]  vxlan_netdevice_event+0x111/0x470
[  513.838455][ T5876]  notifier_call_chain+0x1b6/0x3e0
[  513.840486][ T5876]  call_netdevice_notifiers+0x88/0xc0
[  513.842635][ T5876]  udp_tunnel_nic_netdevice_event+0x134d/0x19f0
[  513.845132][ T5876]  notifier_call_chain+0x1b6/0x3e0
[  513.847083][ T5876]  register_netdevice+0x1608/0x1ae0
[  513.849129][ T5876]  nsim_create+0xae8/0xf10
[  513.850828][ T5876]  __nsim_dev_port_add+0x6b6/0xb10
[  513.852796][ T5876]  nsim_dev_port_add_all+0x37/0xf0
[  513.854850][ T5876]  nsim_dev_reload_up+0x451/0x780
[  513.856859][ T5876]  devlink_reload+0x4ec/0x8d0
[  513.858740][ T5876]  devlink_nl_reload_doit+0xb35/0xd50
[  513.860819][ T5876]  genl_family_rcv_msg_doit+0x215/0x300
[  513.862930][ T5876]  genl_rcv_msg+0x60e/0x790
[  513.864724][ T5876]  netlink_rcv_skb+0x208/0x470
[  513.866634][ T5876]  genl_rcv+0x28/0x40
[  513.868246][ T5876]  netlink_unicast+0x82f/0x9e0
[  513.870084][ T5876]  netlink_sendmsg+0x805/0xb30
[  513.871936][ T5876]  __sock_sendmsg+0x21c/0x270
[  513.873861][ T5876]  ____sys_sendmsg+0x505/0x830
[  513.875774][ T5876]  ___sys_sendmsg+0x21f/0x2a0
[  513.877639][ T5876]  __x64_sys_sendmsg+0x19b/0x260
[  513.879597][ T5876]  do_syscall_64+0xfa/0x3b0
[  513.881429][ T5876]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  513.883756][ T5876] 
[  513.884717][ T5876] The buggy address belongs to the object at ffff888039af5e00
[  513.884717][ T5876]  which belongs to the cache kmalloc-256 of size 256
[  513.890144][ T5876] The buggy address is located 176 bytes inside of
[  513.890144][ T5876]  freed 256-byte region [ffff888039af5e00, ffff888039af5f00)
[  513.895579][ T5876] 
[  513.896562][ T5876] The buggy address belongs to the physical page:
[  513.898726][ T5876] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x39af4
[  513.901541][ T5876] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  513.904275][ T5876] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[  513.907126][ T5876] page_type: f5(slab)
[  513.908713][ T5876] raw: 00fff00000000040 ffff88801a441b40 ffffea0004626800 dead000000000004
[  513.911836][ T5876] raw: 0000000000000000 0000000080100010 00000000f5000000 0000000000000000
[  513.914574][ T5876] head: 00fff00000000040 ffff88801a441b40 ffffea0004626800 dead000000000004
[  513.917506][ T5876] head: 0000000000000000 0000000080100010 00000000f5000000 0000000000000000
[  513.920491][ T5876] head: 00fff00000000001 ffffea0000e6bd01 00000000ffffffff 00000000ffffffff
[  513.923663][ T5876] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002
[  513.926691][ T5876] page dumped because: kasan: bad access detected
[  513.929238][ T5876] page_owner tracks the page as allocated
[  513.931209][ T5876] page last allocated via order 1, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 18045, tgid 18039 (syz.2.3501), ts 366597608866, free_ts 345064287537
[  513.938520][ T5876]  post_alloc_hook+0x240/0x2a0
[  513.940347][ T5876]  get_page_from_freelist+0x21e4/0x22c0
[  513.942455][ T5876]  __alloc_frozen_pages_noprof+0x181/0x370
[  513.944396][ T5876]  alloc_pages_mpol+0x232/0x4a0
[  513.946019][ T5876]  allocate_slab+0x8a/0x370
[  513.947813][ T5876]  ___slab_alloc+0xbeb/0x1420
[  513.949724][ T5876]  __kmalloc_noprof+0x305/0x4f0
[  513.951646][ T5876]  hash_ip4_add+0x18ba/0x1ec0
[  513.953482][ T5876]  hash_ip4_uadt+0x640/0x850
[  513.955375][ T5876]  call_ad+0x383/0xb00
[  513.957034][ T5876]  ip_set_ad+0x791/0x930
[  513.958669][ T5876]  nfnetlink_rcv_msg+0xb4d/0x1130
[  513.960624][ T5876]  netlink_rcv_skb+0x208/0x470
[  513.962528][ T5876]  nfnetlink_rcv+0x26a/0x2520
[  513.964401][ T5876]  netlink_unicast+0x82f/0x9e0
[  513.966211][ T5876]  netlink_sendmsg+0x805/0xb30
[  513.967939][ T5876] page last free pid 5884 tgid 5884 stack trace:
[  513.970432][ T5876]  __free_frozen_pages+0xbc4/0xd30
[  513.972405][ T5876]  kasan_depopulate_vmalloc_pte+0x6d/0x90
[  513.974191][ T5876]  __apply_to_page_range+0xb66/0x13d0
[  513.976057][ T5876]  kasan_release_vmalloc+0xa2/0xd0
[  513.978135][ T5876]  purge_vmap_node+0x214/0x8f0
[  513.979953][ T5876]  __purge_vmap_area_lazy+0x7a4/0xb40
[  513.981972][ T5876]  drain_vmap_area_work+0x27/0x40
[  513.983998][ T5876]  process_scheduled_works+0xae1/0x17b0
[  513.986202][ T5876]  worker_thread+0x8a0/0xda0
[  513.988049][ T5876]  kthread+0x711/0x8a0
[  513.989678][ T5876]  ret_from_fork+0x439/0x7d0
[  513.991547][ T5876]  ret_from_fork_asm+0x1a/0x30
[  513.993427][ T5876] 
[  513.994354][ T5876] Memory state around the buggy address:
[  513.996476][ T5876]  ffff888039af5d80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  513.999600][ T5876]  ffff888039af5e00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  514.002759][ T5876] >ffff888039af5e80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  514.005843][ T5876]                                      ^
[  514.008018][ T5876]  ffff888039af5f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  514.011193][ T5876]  ffff888039af5f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  514.014326][ T5876] ==================================================================
[  514.021948][ T5876] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  514.024207][ T5876] CPU: 0 UID: 0 PID: 5876 Comm: kworker/u8:3 Not tainted syzkaller #0 PREEMPT(full) 
[  514.027609][ T5876] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  514.031602][ T5876] Workqueue: udp_tunnel_nic udp_tunnel_nic_device_sync_work
[  514.034131][ T5876] Call Trace:
[  514.035233][ T5876]  <TASK>
[  514.036430][ T5876]  dump_stack_lvl+0x99/0x250
[  514.038291][ T5876]  ? __asan_memcpy+0x40/0x70
[  514.040138][ T5876]  ? __pfx_dump_stack_lvl+0x10/0x10
[  514.042100][ T5876]  ? __pfx__printk+0x10/0x10
[  514.043942][ T5876]  vpanic+0x281/0x750
[  514.045544][ T5876]  ? preempt_schedule+0xae/0xc0
[  514.047500][ T5876]  ? __pfx_vpanic+0x10/0x10
[  514.049347][ T5876]  ? preempt_schedule_common+0x83/0xd0
[  514.051569][ T5876]  ? preempt_schedule+0xae/0xc0
[  514.053535][ T5876]  ? __pfx_preempt_schedule+0x10/0x10
[  514.055662][ T5876]  panic+0xb9/0xc0
[  514.057209][ T5876]  ? __pfx_panic+0x10/0x10
[  514.059080][ T5876]  ? _raw_spin_unlock_irqrestore+0xfd/0x110
[  514.061424][ T5876]  ? __mutex_lock+0x147/0x1350
[  514.063376][ T5876]  check_panic_on_warn+0x89/0xb0
[  514.065384][ T5876]  ? __mutex_lock+0x147/0x1350
[  514.067306][ T5876]  end_report+0x78/0x160
[  514.069009][ T5876]  kasan_report+0x129/0x150
[  514.070853][ T5876]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  514.073005][ T5876]  ? __mutex_lock+0x147/0x1350
[  514.074622][ T5876]  __mutex_lock+0x147/0x1350
[  514.076271][ T5876]  ? __mutex_lock+0x5bb/0x1350
[  514.077872][ T5876]  ? udp_tunnel_nic_device_sync_work+0x39/0xa50
[  514.079890][ T5876]  ? __pfx___mutex_lock+0x10/0x10
[  514.081585][ T5876]  ? __lock_acquire+0xab9/0xd20
[  514.083151][ T5876]  udp_tunnel_nic_device_sync_work+0x39/0xa50
[  514.085237][ T5876]  ? process_scheduled_works+0x9ef/0x17b0
[  514.087155][ T5876]  ? process_scheduled_works+0x9ef/0x17b0
[  514.088922][ T5876]  process_scheduled_works+0xae1/0x17b0
[  514.090748][ T5876]  ? __pfx_process_scheduled_works+0x10/0x10
[  514.092780][ T5876]  worker_thread+0x8a0/0xda0
[  514.094384][ T5876]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  514.096782][ T5876]  ? __kthread_parkme+0x7b/0x200
[  514.098591][ T5876]  kthread+0x711/0x8a0
[  514.099949][ T5876]  ? __pfx_worker_thread+0x10/0x10
[  514.101764][ T5876]  ? __pfx_kthread+0x10/0x10
[  514.103406][ T5876]  ? _raw_spin_unlock_irq+0x23/0x50
[  514.105110][ T5876]  ? lockdep_hardirqs_on+0x9c/0x150
[  514.106793][ T5876]  ? __pfx_kthread+0x10/0x10
[  514.108314][ T5876]  ret_from_fork+0x439/0x7d0
[  514.110018][ T5876]  ? __pfx_ret_from_fork+0x10/0x10
[  514.112024][ T5876]  ? __switch_to_asm+0x39/0x70
[  514.113677][ T5876]  ? __switch_to_asm+0x33/0x70
[  514.115276][ T5876]  ? __pfx_kthread+0x10/0x10
[  514.116675][ T5876]  ret_from_fork_asm+0x1a/0x30
[  514.118267][ T5876]  </TASK>
[  514.120067][ T5876] Kernel Offset: disabled
[  514.121501][ T5876] Rebooting in 86400 seconds..

VM DIAGNOSIS:
14:46:52  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000061 RBX=0000000000000061 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc9000352f130
R8 =ffff88801fa08237 R9 =1ffff11003f41046 R10=dffffc0000000000 R11=ffffffff854fafa0
R12=dffffc0000000000 R13=ffffffff99b03904 R14=ffffffff99df8460 R15=0000000000000000
RIP=ffffffff854fb01c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b8612000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f949bfb69c0 CR3=00000001277ba000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007f5f4b7a7498 00007f5f4b7a7470 XMM03=00007f5f4b7a74a8 00007f5f4b7a74a0
XMM04=00007f5f4c30d100 00007f5f4b7a7460 XMM05=00007f5f4b7a7478 00007f5f4b7a74c0
XMM06=00007f5f4b7a74b8 00007f5f4b7a74b0 XMM07=00007f5f4b7a74a8 00007f5f4b7a74a0
XMM08=0000000000000000 00007f5f4b612f0f XMM09=0000000000000000 00007f5f4b612fed
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=edfc38596f516700 RBX=ffffffff81968528 RCX=edfc38596f516700 RDX=0000000000000001
RSI=ffffffff8d9ba4bd RDI=ffffffff8be33f80 RBP=ffffc90000177f20 RSP=ffffc90000177de0
R8 =ffff888136632f9b R9 =1ffff11026cc65f3 R10=dffffc0000000000 R11=ffffed1026cc65f4
R12=ffffffff8fa3a830 R13=0000000000000001 R14=0000000000000001 R15=1ffff110200d4000
RIP=ffffffff8b7a73f3 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c12000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000000110c3cddf5 CR3=0000000035436000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 00007f949c012e7b
XMM06=0000000000000000 00007f949c012e75 XMM07=0000000000000000 00007f949c012e89
XMM08=0000000000000000 00007f949c012f0f XMM09=0000000000000000 00007f949c012fed
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
