last executing test programs:

1.591396989s ago: executing program 2 (id=6318):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
pipe(&(0x7f0000000000)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
splice(r1, 0x0, r3, 0x0, 0x6, 0x0)
sendfile(r3, r0, 0x0, 0x0)
close(r2)
write(r0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x13, 0x4, &(0x7f0000000380)=@framed={{0x18, 0x0, 0x0, 0x0, 0x201, 0x0, 0x0, 0x0, 0x8}, [@generic={0x81, 0x1, 0x1, 0x4d}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x42, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

1.371306335s ago: executing program 2 (id=6319):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f000001a640)=@delchain={0x1e8, 0x65, 0x2, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x1}, {0x0, 0x1}, {0x0, 0xb}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}, @TCA_CHAIN={0x8, 0xb, 0x6}, @filter_kind_options=@f_bpf={{0x8}, {0x1a0, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_ACT={0x74, 0x1, [@m_mirred={0x40, 0x5, 0x0, 0x0, {{0xb}, {0x4}, {0x11, 0x6, "d527360c37d81b077c369a3b45"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x4}}}}, @m_skbmod={0x30, 0xa, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x5, 0x1}}}}]}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x3}, @TCA_BPF_ACT={0x118, 0x1, [@m_ctinfo={0x114, 0x19, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0xffff}]}, {0xdd, 0x6, "ed5c1eb99390e7d0a8730c2f4ad7eab8a255351b763e5585c30ef05596ff09fd3ea6975074d4baa7805a08bfdd7f7fa2634cbcdbba1c88eea89d70023a7b9d8d2a94daf79fa1e5bffdc60fbea174f1aa7372acb7f356da638e68d8cc0dfa35b1ef1879e8526f439300c841829ae601a7811d02b21fcc5aaa7951b03466f8a1800a4b912630d3eb9f282786ef340f4e3cb08280f71f4ee2941ec13001a2c7884372e6ba0fb2f0aaa4766f88f4e7f768d299cf02a379f46bdc6682f28a257745a6d3ef46b8f9de69a946bbf1ee9dcd47e35fd96ce64d20d45afb"}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}]}]}}]}, 0x1e8}, 0x1, 0x0, 0x0, 0x81}, 0x20000080)
r0 = socket(0x10, 0x803, 0x0)
sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r3=>0x0})
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x8, 0x3, 0x500, 0x340, 0x11, 0x148, 0x0, 0x0, 0x468, 0x2a8, 0x2a8, 0x468, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x300, 0x0, 0x3f, 0x6, 0x88000000, 0x3, 0x7}}}, @common=@unspec=@bpf1={{0x230}, @pinned={0x1, 0x0, 0x0, './file0\x00'}}]}, @unspec=@CT0={0x48}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0xf8, 0x128, 0x0, {}, [@common=@osf={{0x50}, {'syz1\x00', 0x0, 0x4, 0x0, 0x2}}, @common=@unspec=@quota={{0x38}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x560)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, 0x0, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f0000000240)={0x94, r2, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_FRAME={0x52, 0x33, @probe_response={{{0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1}, {0x9}, @broadcast, @device_a, @random="29092e2d0ed0", {0xe, 0x1}, @value=@ver_80211n={0x0, 0xb, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}}, 0x3, @random=0x4, 0x21, @val, @void, @void, @void, @val={0x6, 0x2, 0x7}, @void, @void, @val={0x71, 0x7, {0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0x0, 0x8, 0x20}}, [{0xdd, 0x15, "539151c4d6efe0795167755c0418ca9d8b5baf8252"}]}}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x5}, @NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @chandef_params]}, 0x94}, 0x1, 0x0, 0x0, 0x8000}, 0x4000)
recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400})

1.309756188s ago: executing program 2 (id=6321):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha20\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20)
r2 = accept4(r1, 0x0, 0x0, 0x0)
syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r2)
sendmmsg$alg(r2, &(0x7f0000009000)=[{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000140)="9c2e044eb4", 0x5}], 0x1, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x8010}], 0x1, 0x4)
sendmsg$IPSET_CMD_GET_BYNAME(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x240048e0)
r3 = socket$key(0xf, 0x3, 0x2)
socket$can_j1939(0x1d, 0x2, 0x7)
sendmsg$key(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={0x2, 0x9, 0x0, 0x0, 0x2}, 0x10}}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv4_newrule={0x24, 0x20, 0x301, 0x0, 0x8000, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x10002}, [@FRA_GENERIC_POLICY=@FRA_SPORT_RANGE={0x8, 0x17, {0x4e20, 0x4e22}}]}, 0x24}}, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x1000, {0x0, 0x0, 0x0, 0x0, 0x9801, 0x1303}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast1}]}}}]}, 0x3c}}, 0x4040014)

820.507207ms ago: executing program 1 (id=6326):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=@updpolicy={0x1fc, 0x19, 0x1, 0x0, 0x0, {{@in6=@private2, @in6=@empty, 0x0, 0x3, 0x0, 0x1, 0x2, 0x0, 0x20, 0x8}, {0x0, 0x0, 0x0, 0xfd24, 0x0, 0x0, 0x0, 0x1d}, {0x9, 0x0, 0x0, 0x2dd}}, [@tmpl={0x144, 0x5, [{{@in=@dev={0xac, 0x14, 0x14, 0x3b}, 0x0, 0x2b}, 0x0, @in=@remote, 0x0, 0x0, 0x0, 0xff}, {{@in6=@private2, 0x0, 0x32}, 0x0, @in6=@empty}, {{@in6=@mcast2, 0x0, 0x3c}, 0x2, @in=@loopback, 0x0, 0x1, 0x3}, {{@in6=@mcast2, 0x0, 0x2b}, 0x2, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x6c}, 0x2, @in=@broadcast, 0x0, 0x1}]}]}, 0x1fc}}, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x3c1, 0x3, 0x3d8, 0x0, 0xc8, 0x8, 0x0, 0x5803, 0x308, 0x2e8, 0x2e8, 0x308, 0x2e8, 0x3, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast1}, @mcast1, [], [0xff, 0x0, 0x0, 0xff000000], 'erspan0\x00', 'geneve1\x00'}, 0x0, 0x190, 0x1f8, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "cfcfcf0c672f61cd17ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f34a214e67262c1fe4b124e0f7323a587d2a1fcfe36bbf12eca0a7b66c60c527bac2b5", 0x1a, 0x0, {0x80000}}}, @inet=@rpfilter={{0x28}, {0x6}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x17, 0x3, 0x6, 0x80000000, 'snmp\x00', 'syz0\x00', {0xe6}}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @broadcast}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0xff, 0xff000000, 0xff000000, 0xff], [0xffffff00, 0x0, 0xffffff00], 'wg0\x00', 'nicvf0\x00', {0xff}, {0xff}, 0x0, 0xc0, 0x0, 0x14}, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x4, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x438)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c010000190001000000000000000000e0000001000000000000000000000000fe8000000000000000000000000000aa4e220000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000104000000000000feffffffffffffff030000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000008400050020010000000000000000000000000000000000002b00000000000000000000000000000000000000000500000000000002000700000000000000000000000000e00000020000000000000000000000004000000033"], 0x13c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20040880)

718.334597ms ago: executing program 1 (id=6327):
r0 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan1\x00', <r1=>0x0})
bind$can_j1939(r0, &(0x7f0000000040)={0x1d, r1, 0x0, {0x1, 0x0, 0x4}}, 0x18)
r2 = socket$netlink(0x10, 0x3, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x3}, 0x50)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000000)={0xffffffffffffffff, 0xe0, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffdc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x49, 0x1}, 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r3, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r3}, 0x0, 0x0}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000740)={r3, &(0x7f0000000000), &(0x7f00000000c0)=""/109}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r3, &(0x7f00000006c0), &(0x7f00000003c0)=""/14, 0x2}, 0x20)
r4 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x24}}, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'ip6tnl0\x00'}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x4}]}}}]}, 0x50}}, 0x0)
getsockname$packet(r4, &(0x7f0000000200)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14)
r7 = socket$netlink(0x10, 0x3, 0x4)
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r8, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
listen(r8, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r9 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r9, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
setsockopt$inet_tcp_int(r9, 0x6, 0x9, 0x0, 0x0)
getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x18, 0x0, 0x0)
writev(r7, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323b470c45b45602067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03adcac4b74ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002140)=@newqdisc={0x470, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x444, 0x2, [@TCA_TBF_PARMS={0x28}, @TCA_TBF_BURST={0x8, 0x6, 0x58}, @TCA_TBF_PRATE64={0xc, 0x5, 0x45453b1fd9101d14}, @TCA_TBF_PTAB={0x404, 0x3, [0x4, 0x5, 0x6, 0x200, 0xc, 0xa803, 0x6, 0xfff, 0x70, 0x5, 0x6034, 0x5, 0x7ff, 0x3, 0x9, 0x400, 0x7, 0x42b912b5, 0x7, 0x6, 0x8001, 0x0, 0xe, 0xfffffffc, 0x401, 0x8, 0x0, 0x3, 0x6, 0x7, 0x1, 0x10000, 0x1000, 0x80000000, 0x0, 0x8, 0x101, 0x9c7, 0x81, 0xe, 0x1, 0xff, 0x0, 0x7, 0xfff, 0x49fd, 0xfffff37e, 0x6, 0xb4, 0x8, 0xffffffff, 0x7, 0x1, 0x81, 0x3, 0x7fffffff, 0x7, 0x7e, 0x3, 0x1, 0x7, 0x5, 0x9, 0xa, 0xb4a, 0xa, 0xb, 0x7ff, 0x3, 0x6, 0x4, 0x0, 0xdb2, 0x80000000, 0x4, 0x400, 0x6, 0x4, 0xe, 0x401, 0x100, 0x2, 0x0, 0x9, 0x500, 0x8, 0x8545, 0x1000, 0x135, 0xd, 0x6a, 0x9, 0x0, 0xc3, 0x0, 0x2011, 0x9, 0x0, 0x419, 0x20b0fb33, 0x7, 0x5b8, 0x81, 0x25a, 0x9, 0x0, 0x0, 0xdbd, 0x0, 0x7fffffff, 0xffffffff, 0x0, 0x40000401, 0x7, 0xdedf, 0x5, 0x8310, 0x10, 0x4, 0x8, 0x7fff, 0x6, 0x6, 0x100, 0x5, 0x27e5, 0x400, 0xf, 0x1ff, 0x3ff, 0x6, 0x80000001, 0xffffffff, 0xfffffffa, 0x10, 0x5000000, 0x0, 0xb90, 0x17b, 0xa39f, 0x6, 0x1, 0x1, 0x1002, 0x6a5, 0x13, 0x41, 0xb, 0xfffffffb, 0xc0000000, 0x3, 0x1ff, 0x6, 0x5, 0x1, 0x3, 0x401, 0x100, 0x8, 0x8, 0x2, 0xef, 0x200, 0x400, 0x9, 0x8, 0x63c3, 0x3, 0x935, 0x1, 0x8, 0x756, 0x2, 0x9, 0x0, 0x81, 0x140e, 0x648, 0xea, 0x7, 0x4, 0x3ff, 0x1, 0xc, 0x8000, 0xff, 0xa77c, 0x1, 0x3, 0xa994, 0x10000, 0x5, 0xffff, 0x5, 0x0, 0x3, 0x8001, 0x0, 0x8000, 0x5, 0x3, 0x6, 0x100, 0x4, 0x4, 0x3, 0x7, 0x10000, 0x8, 0xfb72, 0x7ff, 0x1, 0x10001, 0x4a7, 0xb, 0x8, 0x8, 0x7, 0x5, 0x7, 0x72f1, 0x80000001, 0x9, 0x4, 0x825b, 0x6, 0x80000000, 0x9, 0x6, 0x56cc, 0x4, 0x800, 0x8001, 0xf3, 0xfffffffd, 0x8, 0x8, 0x1, 0x4, 0x9, 0xfff, 0x10000, 0x4, 0x9, 0x7, 0x3, 0x6, 0x174, 0x0, 0x81, 0x5, 0x6, 0x1, 0x2, 0x0, 0xfffffff8]}]}}]}, 0x470}}, 0x8015)
sendmsg$xdp(r4, &(0x7f0000000dc0)={&(0x7f0000000080)={0x2c, 0x1, r1, 0x11}, 0x10, &(0x7f0000000d40)=[{&(0x7f0000000140)="152b746c053e5f6333fb748c0e13722e78463a9fea8d8a14012209f2bc2c1b3aab2938adee6b077f76763485fd7f6ded86e6915eee05000a8924ad55f49ac105d39086b67f5ad68717643d44d35e91468999f4ceb030415305b372b3073c76122df42f2490856f16c03358dd629618d8e6d5f4b635c12dc31c825d4d2e74b1d8d169ffd0bb633bf8a41edc8d244b0e60cd1904723fd045211f4c74988233ca5b43ca066bcda10ded0d1a3843d5c7631820c0ebd3210698a9ead70cb03969315150a8476852b02c4cbf502a3f6987fb1d00aae7a2923045bb596cfa4cf76d0713063d782bb3596ffc0a689f9c", 0xec}, {&(0x7f0000000280)="780ff72f", 0x4}, {&(0x7f00000002c0)="99deba41308de739cc88d1ef22be19f31ddec1f3f71595cbc9142f8392b8e2676f2f827c911211890652f6a3a4c1f6459ad6430cc16929c22edaa1f1d596adc120415a65169948bb318c095b6a5a8e3bb6c50f55175fddbb7eb2fd720bbcbe4ce73f89794eb5e7271d713e68e4a6ab0fd31b3002d4a24a79c707edb2ea0fccdc3b9298c34836ad854e2d700ff19fa9b8bf77a5b3cda6", 0x96}, {&(0x7f0000000a80)="e818bed379942b6480010baa0e1996b8872cac4539de869cddc13c21c6af566fb902381934816516540c758525ec6ba56318bcfe069495a13c0d44b78defe440305f14f4c7b9c4e34cea10d16b17bb086a14c0a1a1f41588643cbd76994dfa06d99eb3318e792572ad7bb2d8bed9bc816c64eceaba065e8523bc00d528a89e0d3d287eed2b9af8dc383da7c5c79fab6bede429774aa7ba104d7935840a07a79265edaa392d7b53013ae33202962fdb22bc92f6a6dd2fd450a9470cdd671d3d13ae2635f15dbde1ef43b766f25c4abca794dd72df11fb1eb01b3afe055dc9595696b87808ce343523d43e3af490ce65b37331265fd87ad45c", 0xf8}, {&(0x7f0000000b80)="4946b51b73d414016ee0a5aac3489b5309c2409c84cb799e7552d46bb27be53f4f7d6dabdc4221217af66920daa19134ef290326689dae325daabaf07bd7876553e7bc05448b390c7334c8c258bebe6b92e601a1bc129a5fe4af2bf4bd886bc69ef5b7261cd6841833e0723a36a8b0b155f9cd175549a4a41fff2f86127fc8b4f6ad863dd4a22d50bf0bc19f0770fbc9b00f92daf05de66fe640dcc6459b8967e72f4f9ac86c97cbcc097aed766ab973817c780ebb99a266d5ed87eb500ca283cf067d345431b3c2878274c9b3", 0xcd}, {&(0x7f0000000c80)="9ac4a0eac5e59e48f40a51dabfb136ae7c882713d0d7186f2bc1796a4e3297cb1017e7cfac4c3a5d39ff14ce0c66e1ffa41d53fd3f556507bc0d999b16b71620669101e6a77c2f7e5cfc1b5c6fd29eb2b2e67dbf4e823e845b349fbbaa3cf534f436a58a1c1aab06c725053d3b0aa465d639a2ca2e554f", 0x77}, {&(0x7f0000000d00)="86f583149ad09b006d0a33b49b2bab1ded8739fe718c126d65f98ad4d06dd879da8f75be9315d5b78b6f", 0x2a}], 0x7, 0x0, 0x0, 0x4000}, 0x0)

651.512896ms ago: executing program 1 (id=6328):
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{0xffffffffffffffff, <r0=>0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000080)}, 0x20)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
writev(r1, &(0x7f00000005c0)=[{&(0x7f00000000c0)="052f00", 0x3}], 0x1)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0)
r2 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r2, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)=ANY=[@ANYBLOB="020200090d0000000000000000000000030006000000000002000000ac1414bb000000000000000002000100000000000000000200000000030005000000000002000000ac1414aa000000000000000001001500000000000100140000000000010016"], 0x68}, 0x1, 0x7}, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="9feb010018000000000000000c"], 0x0, 0x26, 0x0, 0x1, 0x4}, 0x28)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
r4 = openat$cgroup_devices(r3, &(0x7f0000000300)='devices.allow\x00', 0x2, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[], &(0x7f00000001c0)=""/257, 0x2a, 0x101, 0x6}, 0x28)
write$cgroup_devices(r4, &(0x7f0000000200)=ANY=[@ANYBLOB='c 1223'], 0xa)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xc, 0x18, &(0x7f0000000280)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xd44f}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @call={0x85, 0x0, 0x0, 0x35}, @jmp={0x5, 0x0, 0xf, 0x6, 0x6, 0xfffffffffffffff4, 0x8}, @jmp={0x5, 0x0, 0x6, 0x1, 0xa, 0xffffffffffffffe0, 0x1}, @call={0x85, 0x0, 0x0, 0xcd}, @alu={0x7, 0x1, 0x1, 0x1, 0x6, 0xfffffffffffffff8, 0xfffffffffffffff0}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xc, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94)

650.740947ms ago: executing program 1 (id=6330):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
write$cgroup_int(r2, &(0x7f0000000000), 0x12)
ioctl$FS_IOC_RESVSP(r2, 0x40305829, &(0x7f0000000440)={0x1100, 0x0, 0x0, 0x10000})
mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x3, 0x28011, r1, 0x0)
ioctl$FS_IOC_RESVSP(r1, 0x40305829, &(0x7f0000000180)={0x1100, 0x0, 0x52, 0x11000})
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r3 = socket$unix(0x1, 0x1, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r5, {}, {0x2, 0xb}, {0xd, 0xb}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000500)={'syzkaller0\x00', 0x7101})
r6 = socket$unix(0x1, 0x1, 0x0)
r7 = socket(0x200000000000011, 0x2, 0x0)
getsockname$packet(r7, &(0x7f00000015c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000080), &(0x7f0000000180)=0xc)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="1809000000ffffff00000000000000008510000002000000850000000f0000009500000000000000"], 0x0, 0xfffffdff, 0x0, 0x0, 0x727c45cd4283345, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000000)={r8, 0xe0, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000001440), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54, 0x0, 0x8, 0xfffffffffffffcac, 0xfffffffffffffffd}}, 0x10)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
r10 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0xfffffff8, {0x0, 0x0, 0x0, r9, {0xb, 0xd}, {}, {0x8, 0xc}}}, 0x24}}, 0x40004)

474.613832ms ago: executing program 2 (id=6333):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_bt_hci(r1, 0x400448de, 0x0)
r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000000000170000000c00068008000600f7"], 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x4000004)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r4 = socket(0x400000000010, 0x3, 0x0) (async)
setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) (async, rerun: 32)
r5 = socket$unix(0x1, 0x1, 0x0) (rerun: 32)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) (async)
sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x90, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0x9}, {}, {0x7, 0x10}}, [@TCA_RATE={0x6, 0x5, {0x81, 0x7}}, @filter_kind_options=@f_route={{0xa}, {0x58, 0x2, [@TCA_ROUTE4_ACT={0x54, 0x6, [@m_tunnel_key={0x50, 0x1, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0xffffffff, 0x1, 0xffffffffffffffff, 0x1, 0x4}, 0x2}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}}]}, 0x90}, 0x1, 0x0, 0x0, 0x40}, 0x2008c014) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, 0x0}, 0x94) (async)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async, rerun: 64)
r8 = socket$kcm(0x2, 0xa, 0x2) (rerun: 64)
ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) (async)
setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) (async, rerun: 64)
write$tun(r7, &(0x7f0000003240)={@val={0x8, 0x800}, @val={0x5, 0x0, 0x2, 0xe7b6, 0x14, 0x2}, @ipv4=@tcp={{0x5, 0x4, 0x0, 0x2c, 0x28, 0x68, 0x0, 0x3, 0x6, 0x0, @private=0xa010100, @multicast1}, {{0x4e20, 0x4e28, 0x41424344, 0x41424344, 0x1, 0x0, 0x5, 0x10, 0x7, 0x0, 0x8}}}}, 0x36) (async, rerun: 64)
r9 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000002c0)=0xffffffffffffffff, 0x4)
bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x15, 0x9, 0x7, 0x3, 0x20000, 0xffffffffffffffff, 0x7, '\x00', r6, r9, 0x4, 0x1, 0x3}, 0x50) (async)
r10 = socket(0x15, 0x5, 0x0) (async, rerun: 32)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="48000000120001000000000000000000ac141400000000000000000000000000000000000000000014000000200100000000000000000000000000000c0015000000000008000000"], 0x48}}, 0x0) (async, rerun: 32)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000140)={0xffffffffffffffff, 0x0}, 0x20) (async)
r11 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x190, 0x5230}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_SELECT={0x5, 0x16, 0x1}]}}}]}, 0x3c}}, 0x0)
sendmsg$nl_route(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00000018"], 0x50}}, 0x0) (async)
bind$inet6(r10, &(0x7f0000000040)={0xa, 0x4e21, 0x1, @ipv4={'\x00', '\xff\xff', @empty}, 0x8}, 0x1c) (async)
connect$inet6(r10, &(0x7f0000000040)={0xa, 0x4e20, 0x7, @local, 0x80}, 0x1c)

472.783053ms ago: executing program 1 (id=6334):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000060a010400000000000000000a0000010900010073797a310000000028000480240001800b00010065787468647200001400028008108b400000000e08000640000000040900020073797a3200000000060007"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r0}, 0x8)
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9}, 0x94)

401.136693ms ago: executing program 1 (id=6336):
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
recvmsg(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0xf8}], 0x1}, 0x1f00)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = socket(0xa, 0x5, 0x0)
setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f0000000000)=0x5, 0x4)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r3, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r4, 0x2000000, 0xe0, 0x0, &(0x7f0000000540)="1f323bb6b8858b34a80040000044c116850290adac5d87fe0401f1c1e95d9eedbd64804cbfad113659eedf2749636995a802148c7c92425ef788289b572c2bac1c430514aab9942eb53e3f6df4118ed3c62cc1adce868388eaff5248bcb2a0f24efc5101dfabb802037c10c92081529352f21814196d49ca1e9cd6d7661dc401469316c3087eaf6c9eeac7390cd3438edde0951c346e7839b4feb4fcc28737855f5a08253d8e5e57b793e12eb94151c6f030f28b8b93ade273070513ae1cbe773909245133682a35f4df42994193e2f31c4de50397319ad75a976903a8120bc1", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50)
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002940)=[{{0x0, 0x0, &(0x7f0000000f80)=[{}], 0x1}}], 0x1, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000fc0)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000f40)=ANY=[@ANYBLOB="50000000480011012abd7000fedbdf250a006000", @ANYRES32=0x0, @ANYBLOB="02000000080002000700000008000200070000000800020000000000140001"], 0x50}}, 0x10)

400.433673ms ago: executing program 0 (id=6337):
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000240)=@o_path={&(0x7f0000000200)='./file0\x00', 0x0, 0x4010}, 0x18)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a}, 0x28)
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newlink={0xb0, 0x10, 0x401, 0x5, 0x3, {0x0, 0x0, 0x0, 0x0, 0x503}, [@IFLA_LINKINFO={0x88, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x78, 0x2, 0x0, 0x1, [@IFLA_VLAN_INGRESS_QOS={0x10, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x308, {0x10005, 0xb}}]}, @IFLA_VLAN_ID={0x6, 0x1, 0x3}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x2, 0xe}}, @IFLA_VLAN_EGRESS_QOS={0x1c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xfffffffffffffc5d, 0x1, {0xfffffffa}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x49b}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x8, 0xf}}, @IFLA_VLAN_INGRESS_QOS={0x28, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x4, 0x6}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x4, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x4590, 0x6}}]}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0xb0}, 0x1, 0x0, 0x0, 0x20004800}, 0x4000000)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000000c0), 0x4)
r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0xc, 0x6, &(0x7f00000006c0)=@raw=[@tail_call={{0x18, 0x2, 0x1, 0x0, r2}}, @exit], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r3, 0x58}, 0x10)

291.088921ms ago: executing program 0 (id=6338):
r0 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendmmsg$inet6(r0, &(0x7f0000000800)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x9, @remote, 0x5}, 0x1c, &(0x7f0000000480)=[{&(0x7f0000000300)="e2", 0x1}], 0x1}}, {{&(0x7f0000000580)={0xa, 0x4e24, 0x81, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xb}, 0x1c, &(0x7f0000000600)=[{&(0x7f00000005c0)='j', 0x1}], 0x1}}], 0x2, 0x14)
shutdown(r0, 0x1)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000004c0)={'syz_tun\x00', <r4=>0x0})
sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002abd7000fedbdf000014000380040004000400050008000200000000000c00018008000100000000", @ANYRES32=r4, @ANYBLOB], 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x4044094)
sendmsg$ETHTOOL_MSG_LINKINFO_GET(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r2, 0x800, 0x5, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x800)
setsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000000)=@int=0x9, 0x4)

290.731312ms ago: executing program 0 (id=6339):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newtaction={0xe68, 0x30, 0x871a15abc695fa3d, 0x70bd2d, 0x1, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x0, 0x2fd}, 0x93}, [{0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x3000000, 0x40000000}, {0x1, 0x0, 0x0, 0x4000000, 0x7, 0x80000}, {0x8000, 0x5, 0x0, 0xfffffffc, 0x5}, {0x0, 0x8000000, 0x1000000}, {0x0, 0x0, 0x800000, 0x0, 0x6}, {0x0, 0xc3}, {0x0, 0x5}, {0x5}, {}, {0x0, 0x10}, {0x0, 0x470a, 0x0, 0x8000000}, {}, {0x2, 0x0, 0x0, 0x0, 0x6, 0x6}, {}, {}, {0x0, 0x0, 0x0, 0x1, 0x0, 0xfff}, {0x0, 0x0, 0x0, 0x8000000}, {}, {0x0, 0x0, 0x0, 0x0, 0x20}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x0, 0x0, 0xfffffffc}, {0x20000}, {}, {0x0, 0x7, 0x0, 0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x0, 0x5, 0xfffffffc}, {0xffffffff, 0x0, 0x0, 0x0, 0xfffffffd, 0x60569add}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {0xffffffff, 0x9, 0x6}, {0x0, 0x0, 0x0, 0x0, 0xfffff800}, {}, {}, {0xffffffff, 0x0, 0x0, 0xfffffffb, 0x0, 0xfffffffc}, {0xfffffffd}, {}, {0x0, 0x9, 0x0, 0xffffffff, 0x0, 0x2}, {}, {0x80}, {0x80}, {0x0, 0x0, 0x0, 0x5, 0x5}, {}, {0x0, 0x0, 0x8}, {0x0, 0x2, 0x0, 0x0, 0x9}, {0x0, 0x0, 0x8, 0x0, 0x3}, {0x0, 0x9}, {0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0x8510}, {0xffff}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x0, 0xfffefffd}, {0x0, 0x0, 0x0, 0x1}, {}, {0x5}, {0x0, 0x0, 0x2000, 0x0, 0x0, 0x8000000}, {0x0, 0x7}, {}, {0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x9}, {0x0, 0xfffffffc, 0x200}, {0x0, 0x0, 0x0, 0x200, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, {0x4}, {0x0, 0x0, 0x0, 0x0, 0xfffffffb}, {0x0, 0x0, 0x800}, {0xdb3, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x101, 0x0, 0x0, 0x0, 0xffffffff}, {}, {0x3, 0xfffffffe}, {0x0, 0x0, 0x0, 0x4, 0x9}, {}, {0x0, 0x0, 0x0, 0x0, 0x1, 0x7}, {0x0, 0xb}, {0x0, 0x0, 0x0, 0xffffffff}, {}, {0x0, 0x5}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x56}, {0x0, 0x9797, 0x0, 0xec33, 0x0, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20000}, {0xb, 0x0, 0x0, 0x0, 0x0, 0xfe1}, {0x0, 0x0, 0x0, 0x0, 0x4}, {0x0, 0x0, 0xfffffffc}, {}, {0x0, 0xfffffffd}, {0x6, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x7f}, {}, {0x0, 0x8, 0x0, 0x0, 0xfffffffe}, {0x4, 0x2, 0x2000000, 0x2, 0x0, 0xfffffffe}, {0x0, 0x0, 0x0, 0x0, 0xe9d, 0x58a}, {0x2}, {0x2, 0x9, 0x20000000}, {0xfffffffc}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x292}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {0x0, 0x0, 0xe600, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, {0x0, 0x5, 0x0, 0x7, 0x1}, {0x0, 0x5}, {0x0, 0x0, 0x0, 0x0, 0x80}, {0x10000000, 0x0, 0x0, 0x0, 0x4}, {}, {0x0, 0x10000, 0x0, 0x0, 0xfffffffd}, {0x3}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {}, {0x0, 0x0, 0x0, 0x2}, {0xfffffffb, 0x0, 0x0, 0x0, 0x8000}, {0x6, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x2d, 0x0, 0x10000}, {0x0, 0x0, 0x8000}, {0x0, 0x8000}, {0x0, 0x0, 0x10000}, {0x0, 0x80000000, 0x0, 0x7fff800, 0x4}, {0x0, 0x3}, {0xffffffff, 0x0, 0x0, 0x0, 0xd}], [{}, {}, {0x0, 0x1}, {0x1}, {}, {0x3}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x3, 0x1}, {0x0, 0x1}, {}, {0x5, 0x1}, {}, {0x4}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {0x4}, {}, {}, {0x1}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {0x0, 0x1}, {}, {0x5}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {0x0, 0x1}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {0x1}, {}, {0x5}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x5, 0x1}, {}, {}, {}, {}, {0x5, 0x1}, {}, {}, {}, {0x2}, {}, {}, {0x4}, {0x3}, {}, {}, {}, {}, {0x0, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0)

231.436209ms ago: executing program 0 (id=6340):
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20)
r1 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x14, 0x55, 0xffffffffffffffff, 0x0, 0x25dfdbfb, {0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x80004}, 0x0)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001540)=@newsa={0x188, 0x10, 0x1, 0x0, 0x0, {{@in6=@remote, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x8}, {@in6=@private2, 0x4d3, 0x33}, @in=@multicast1, {0x3, 0x0, 0xfffffffffffffffd, 0x7, 0x0, 0x0, 0x0, 0x30b}, {0x0, 0xfffffffffffffffd}, {0x0, 0x22}, 0x70bd2a, 0x0, 0x2, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'cmac(aes)\x00'}, 0x0, 0x80}}, @algo_aead={0x4c, 0x12, {{'gcm(cipher_null)\x00'}, 0x0, 0x180}}]}, 0x188}}, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0xc4f, 0x0, 0x0, 0x0, 0xfffffffc}}, &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x41000, 0x70, '\x00', 0x0, 0x1a, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r3, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94)

229.739604ms ago: executing program 0 (id=6341):
r0 = socket$kcm(0x10, 0x2, 0x0)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r1, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r2, &(0x7f0000000a00)=ANY=[@ANYRESHEX=r2, @ANYRES64=r1, @ANYRESOCT=r0, @ANYRES16=r1], 0x32600)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc)
connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r3)
recvmmsg(r3, &(0x7f0000000980)=[{{0x0, 0x0, 0x0}, 0x7fffffff}, {{&(0x7f00000002c0)=@alg, 0x80, &(0x7f0000000840)=[{&(0x7f0000000440)=""/223, 0xdf}, {&(0x7f0000000540)=""/124, 0x7c}, {&(0x7f00000005c0)=""/80, 0x50}, {&(0x7f0000000640)=""/177, 0xb1}, {&(0x7f0000000700)=""/125, 0x7d}, {&(0x7f0000000780)=""/138, 0x8a}], 0x6, &(0x7f00000008c0)=""/183, 0xb7}, 0x9}], 0x2, 0x10002, 0x0)
setsockopt$sock_int(r3, 0x1, 0x28, &(0x7f0000000240), 0x4)
bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=ANY=[@ANYRES64=r2, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000e3ffffff00"/28], 0x50)
r4 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000680)={'bridge0\x00', <r5=>0x0})
sendmsg$nl_route(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5800000055003d07000000000001000007000000", @ANYRES32=r5, @ANYBLOB="20000280", @ANYRES32=r4, @ANYBLOB="0000000000000000000000000a0000000000000000000014200001"], 0x58}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22e8a65c15}, 0x4008840)
r6 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0)

229.103439ms ago: executing program 2 (id=6342):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
close(r4)
r5 = socket$unix(0x1, 0x1, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffe0}, {0xfff2, 0xd}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x25dfdc03, {0x0, 0x0, 0x0, r7, {0x0, 0xa}, {0xa, 0xb}, {0x9}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x6, 0x0, 0x1, 0x4, 0xfffffff9, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2000c0a2}, 0x4008000)
ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})

161.243626ms ago: executing program 0 (id=6343):
r0 = socket$netlink(0x10, 0x3, 0x0) (async)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) (async)
getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
setsockopt(r0, 0xe8a6, 0x80000000, &(0x7f00000002c0)="19ddc4d206d82b855283a3c14a3b73dfa8cfb55925f71e8e8b4baf03eec6da6f7140cf8ecbd67c0f81b5ed4c82d780cf4a01a678deb0f7643629c4e035bc589fc313a495b0fbe3da06fdc4468fd4a18688ea357e7d4939308ba584c914e051f6c13b954c524f5d792e90f6bfce331bb58f689ca715bc536e01d04c5035f0eabf9ff32dee6438f3a6899f57d35b6115a458e90c8157d685064217914935209b00020326aa2d0b00f804185fcf065e5bcc0747c23e", 0xb4) (async)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000000)=@generic={&(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', r3}, 0x18)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c000000020603000000000000000000000000001400078008001240000000000500150002000000050001000600000005000500020000000500040000000000090002"], 0x4c}}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x6, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200e19}, 0x94)
r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffff7fff}, 0x94)
syz_emit_ethernet(0x3c, &(0x7f0000000000)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa080045"], 0x0)
recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) (async)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x400, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x7002})
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000600)={'pim6reg1\x00', @broadcast}) (async)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x31, 0xffffffffffffffff, 0x0)
pread64(r5, &(0x7f0000002200)=""/87, 0x57, 0xfffd)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a03000000000000000000050000000900010073797a30000000000900030073797a300000000008000c40000000032800048008000240000000120800014000000000140004"], 0xa4}}, 0x0) (async)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24000840)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, 0x0, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="200000001400010028bd7000fcdbdf25022001c8", @ANYRES32=r2, @ANYBLOB="0800020096a68e15670b"], 0x20}}, 0x40000c0)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x40, 0x10, 0x503, 0x70bd2a, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3806}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @vti={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VTI_LOCAL={0x8, 0x4, @multicast1}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x40}}, 0x440b0)

0s ago: executing program 2 (id=6344):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106(gcm(aes))\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000009c0)="ad56b6c5820fae9d6dcd3292ea54c7be8bbdadbb1632ea5704cae881ef915d374c90c200", 0x24)
r1 = accept4(r0, 0x0, 0x0, 0x800)
r2 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_RX_RING(r2, 0x11b, 0x2, &(0x7f0000000040)=0x1000000, 0x4)
bind$xdp(r2, &(0x7f0000000100)={0x2c, 0x4}, 0x10)
r3 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000000)={'syz_tun\x00', &(0x7f0000000380)=@ethtool_link_settings={0x4d, 0x32, 0xf7, 0x3, 0xc0, 0x7, 0xc2, 0x4, 0x66, 0x4, [0x20044, 0x81, 0x10, 0x40, 0x6, 0x8, 0x2001, 0x2174]}})
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0)
syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r1)

kernel console output (not intermixed with test programs):

307.271732][T18285] netlink: 'syz.2.4076': attribute type 11 has an invalid length.
[  307.278098][T18285] netlink: 'syz.2.4076': attribute type 5 has an invalid length.
[  307.607843][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  307.954292][T18356] netlink: 'syz.2.4096': attribute type 11 has an invalid length.
[  307.960613][T18356] netlink: 'syz.2.4096': attribute type 5 has an invalid length.
[  308.031300][T18358] batadv_slave_0: Caught tx_queue_len zero misconfig
[  308.131006][T18375] netlink: 'syz.0.4103': attribute type 3 has an invalid length.
[  308.647765][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  308.735047][T18448] netlink: 'syz.0.4129': attribute type 1 has an invalid length.
[  308.758395][T18448] bond17: entered promiscuous mode
[  308.760423][T18448] bond17: entered allmulticast mode
[  308.762599][T18448] 8021q: adding VLAN 0 to HW filter on device bond17
[  308.875105][T18456] IPv6: Can't replace route, no match found
[  309.136961][T18476] netlink: 'syz.2.4139': attribute type 13 has an invalid length.
[  309.139765][T18476] netlink: 'syz.2.4139': attribute type 17 has an invalid length.
[  309.147239][T18476] gretap0: left promiscuous mode
[  309.170085][T18476] ip6gretap0: left promiscuous mode
[  309.180287][T18476] 8021q: adding VLAN 0 to HW filter on device bond0
[  309.189081][T18476] 8021q: adding VLAN 0 to HW filter on device batadv0
[  309.214208][T18481] netlink: 'syz.1.4140': attribute type 1 has an invalid length.
[  309.225956][T18476] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  309.313715][T18481] 8021q: adding VLAN 0 to HW filter on device bond0
[  309.350074][T18480] bond0: (slave veth19): Enslaving as an active interface with a down link
[  309.361297][T18480] netlink: 'syz.1.4140': attribute type 10 has an invalid length.
[  309.612724][T18523] __nla_validate_parse: 89 callbacks suppressed
[  309.612734][T18523] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4155'.
[  309.627120][T18523] veth0_to_hsr: Caught tx_queue_len zero misconfig
[  309.675717][T18532] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4158'.
[  309.687842][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  309.710976][T18537] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4160'.
[  309.723622][T18532] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4158'.
[  309.731798][T18532] 8021q: adding VLAN 0 to HW filter on device bond18
[  309.799946][T18543] GUP no longer grows the stack in syz.1.4162 (18543): 200000002000-20000000a000 (200000001000)
[  309.813599][T18543] CPU: 1 UID: 0 PID: 18543 Comm: syz.1.4162 Not tainted syzkaller #0 PREEMPT(full) 
[  309.813613][T18543] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  309.813620][T18543] Call Trace:
[  309.813624][T18543]  <TASK>
[  309.813628][T18543]  dump_stack_lvl+0xe8/0x150
[  309.813643][T18543]  __get_user_pages+0x2378/0x2720
[  309.813656][T18543]  ? __gup_longterm_locked+0xc4e/0x1630
[  309.813673][T18543]  ? __gup_longterm_locked+0xc4e/0x1630
[  309.813681][T18543]  ? down_read_killable+0x1bb/0x340
[  309.813694][T18543]  __gup_longterm_locked+0xdcf/0x1630
[  309.813705][T18543]  ? lock_acquire+0x106/0x350
[  309.813721][T18543]  gup_fast_fallback+0x1d84/0x20d0
[  309.813768][T18543]  ? __pfx_gup_fast_fallback+0x10/0x10
[  309.813780][T18543]  ? is_valid_gup_args+0x11f/0x200
[  309.813790][T18543]  ? get_user_pages_fast+0x4d/0xb0
[  309.813800][T18543]  __iov_iter_get_pages_alloc+0x370/0xa10
[  309.813816][T18543]  ? __pfx_pipe_clear_nowait+0x10/0x10
[  309.813829][T18543]  iov_iter_get_pages2+0x5e/0xa0
[  309.813842][T18543]  __se_sys_vmsplice+0x7c7/0x1620
[  309.813861][T18543]  ? __pfx___se_sys_vmsplice+0x10/0x10
[  309.813871][T18543]  ? __pfx_futex_wait+0x10/0x10
[  309.813912][T18543]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  309.813921][T18543]  do_syscall_64+0x15f/0xf80
[  309.813928][T18543]  ? trace_irq_disable+0x3b/0x140
[  309.813942][T18543]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  309.813950][T18543] RIP: 0033:0x7fa06439cdd9
[  309.813959][T18543] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  309.813966][T18543] RSP: 002b:00007fa065222028 EFLAGS: 00000246 ORIG_RAX: 0000000000000116
[  309.813975][T18543] RAX: ffffffffffffffda RBX: 00007fa064616090 RCX: 00007fa06439cdd9
[  309.813981][T18543] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 0000000000000029
[  309.813986][T18543] RBP: 00007fa064432d69 R08: 0000000000000000 R09: 0000000000000000
[  309.813991][T18543] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000
[  309.813996][T18543] R13: 00007fa064616128 R14: 00007fa064616090 R15: 00007ffd87d7aec8
[  309.814009][T18543]  </TASK>
[  309.870650][T18549] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  309.896540][T18549] syzkaller0: MTU too low for tipc bearer
[  309.899424][T18549] tipc: Disabling bearer <eth:syzkaller0>
[  309.922439][T18553] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4166'.
[  310.058253][T18559] netlink: 'syz.0.4168': attribute type 32 has an invalid length.
[  310.061268][T18559] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4168'.
[  310.083985][T18559] bond19: option coupled_control: invalid value (20)
[  310.089932][T18559] bond19 (unregistering): Released all slaves
[  310.246125][T18571] bond0: (slave ipvlan1): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  310.451643][T18575] xt_hashlimit: size too large, truncated to 1048576
[  310.562600][T18578] netlink: 224 bytes leftover after parsing attributes in process `syz.0.4173'.
[  310.737780][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  310.844362][T18594] dvmrp0: left allmulticast mode
[  310.884546][T18597] 8021q: adding VLAN 0 to HW filter on device ipvlan3
[  310.894178][T18597] bond0: (slave ipvlan3): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  310.909457][T18598] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4177'.
[  311.263369][T18623] x_tables: duplicate underflow at hook 2
[  311.274556][T18623] x_tables: duplicate underflow at hook 2
[  311.392654][T18634] netlink: 'syz.0.4186': attribute type 11 has an invalid length.
[  311.400829][T18631] bond34 (unregistering): Released all slaves
[  311.402793][T18634] netlink: 6548 bytes leftover after parsing attributes in process `syz.0.4186'.
[  311.719552][T18649] siw: device registration error -23
[  311.756657][T18649] smc: removing ib device syz0
[  311.767829][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  311.854098][T18649] smbdirect: ib_dev[syz0] removed
[  312.009658][T18672] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20004
[  312.437957][T18696] tunl0: Caught tx_queue_len zero misconfig
[  312.460226][T18696] netem: incorrect gi model size
[  312.463685][T18696] netem: change failed
[  312.465409][T18698] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4211'.
[  312.500302][T18702] 8021q: adding VLAN 0 to HW filter on device ipvlan0
[  312.503992][T18702] A link change request failed with some changes committed already. Interface ipvlan0 may have been left with an inconsistent configuration, please check.
[  312.573020][T18702] team0: No ports can be present during mode change
[  312.679911][T18709] IPVS: set_ctl: invalid protocol: 108 10.1.0.252:20002
[  312.734936][T18715] netlink: 'syz.1.4218': attribute type 11 has an invalid length.
[  312.737299][T18715] validate_nla: 3 callbacks suppressed
[  312.737309][T18715] netlink: 'syz.1.4218': attribute type 5 has an invalid length.
[  312.807706][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  312.967541][T18730] bond18: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  312.984866][T18730] bond18: (slave lo): Enslaving as an active interface with an up link
[  312.993440][T18730] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check.
[  313.095485][T18744] netlink: 'syz.2.4230': attribute type 9 has an invalid length.
[  313.555759][T18773] netlink: 'syz.2.4240': attribute type 1 has an invalid length.
[  313.569037][T18773] 8021q: adding VLAN 0 to HW filter on device bond34
[  313.636488][T18773] bond34: (slave ip6gretap3): making interface the new active one
[  313.645093][T18773] bond34: (slave ip6gretap3): Enslaving as an active interface with an up link
[  313.839836][T18793] netlink: 'syz.0.4246': attribute type 1 has an invalid length.
[  313.847779][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  314.887706][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  314.999074][T18836] netlink: 'syz.0.4262': attribute type 11 has an invalid length.
[  315.003748][T18836] netlink: 'syz.0.4262': attribute type 5 has an invalid length.
[  315.006055][T18836] __nla_validate_parse: 4 callbacks suppressed
[  315.006063][T18836] netlink: 6548 bytes leftover after parsing attributes in process `syz.0.4262'.
[  315.365672][T18873] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4278'.
[  315.451020][T18888] IPv6: sit3: Disabled Multicast RS
[  315.852903][T18911] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4293'.
[  315.927749][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  316.661111][T18933] x_tables: ip_tables: ah match: only valid for protocol 51
[  316.967847][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  317.045267][T18954] netlink: 128 bytes leftover after parsing attributes in process `syz.0.4309'.
[  317.057298][T18954] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  317.130725][T18960] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4309'.
[  317.174258][T18962] netlink: 'syz.1.4311': attribute type 1 has an invalid length.
[  317.176678][T18962] netlink: 'syz.1.4311': attribute type 4 has an invalid length.
[  317.180260][T18962] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.4311'.
[  317.293068][T18974] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4316'.
[  317.295796][T18974] --map-set only usable from mangle table
[  317.297381][T18975] netlink: 'syz.1.4315': attribute type 1 has an invalid length.
[  317.334244][T18975] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4315'.
[  317.457365][T18985] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING
[  317.524430][T18989] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4321'.
[  317.579933][T18993] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4322'.
[  317.875793][T19015] lo speed is unknown, defaulting to 1000
[  317.878803][T19015] lo speed is unknown, defaulting to 1000
[  317.883284][T19015] lo speed is unknown, defaulting to 1000
[  317.886366][T19015] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000
[  317.892707][T19015] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6
[  317.898686][T19015] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008
[  317.911986][T19015] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  317.934126][T19015] lo speed is unknown, defaulting to 1000
[  317.938015][T19015] lo speed is unknown, defaulting to 1000
[  317.940635][T19015] lo speed is unknown, defaulting to 1000
[  318.017720][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  318.253907][T19035] netlink: 'syz.1.4337': attribute type 11 has an invalid length.
[  318.257144][T19035] netlink: 'syz.1.4337': attribute type 5 has an invalid length.
[  318.506191][T19047] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  318.841055][T19059] dummy0: entered allmulticast mode
[  319.057873][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  319.328837][T19087] netlink: 'syz.0.4355': attribute type 1 has an invalid length.
[  319.498791][T19095] netlink: 'syz.0.4358': attribute type 1 has an invalid length.
[  319.501357][T19095] netlink: 'syz.0.4358': attribute type 1 has an invalid length.
[  319.519325][T19095] lo speed is unknown, defaulting to 1000
[  319.699118][T19106] lo speed is unknown, defaulting to 1000
[  320.087722][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  320.108183][T19140] syzkaller0: entered promiscuous mode
[  320.114356][T19140] syzkaller0: entered allmulticast mode
[  320.141865][T19133] __nla_validate_parse: 9 callbacks suppressed
[  320.141876][T19133] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4369'.
[  320.146210][T19133] netlink: 260 bytes leftover after parsing attributes in process `syz.0.4369'.
[  320.313351][T19151] netlink: 'syz.2.4373': attribute type 1 has an invalid length.
[  320.333407][T19151] erspan2: entered allmulticast mode
[  320.635681][T19173] bond19: option packets_per_slave: invalid value (1048582)
[  320.638583][T19173] bond19: option packets_per_slave: allowed values 0 - 65535
[  320.642139][T19173] bond19 (unregistering): Released all slaves
[  320.743500][T19177] netlink: 'syz.1.4380': attribute type 32 has an invalid length.
[  320.745803][T19177] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4380'.
[  320.760771][T19177] bond19: Setting coupled_control to off (0)
[  321.033738][T19194] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  321.075546][T19197] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4385'.
[  321.079066][T19197] netlink: 'syz.0.4385': attribute type 21 has an invalid length.
[  321.127767][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  321.195618][T19209] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4387'.
[  321.227855][T19201] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4387'.
[  321.234263][T19201] netlink: 'syz.2.4387': attribute type 298 has an invalid length.
[  321.240104][T19201] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4387'.
[  321.243659][T19201] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4387'.
[  321.303322][T19212] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4389'.
[  321.322847][T19216] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20000
[  321.331929][T19207] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4389'.
[  321.452272][T19229] 8021q: adding VLAN 0 to HW filter on device ipvlan3
[  321.454772][T19229] bond0: (slave ipvlan3): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  321.567346][T19235] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:00aa with DS=0xee
[  322.167775][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  322.278245][T19255] syzkaller1: entered promiscuous mode
[  322.287177][T19255] syzkaller1: entered allmulticast mode
[  322.293939][ T5651] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  322.300254][ T5651] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  322.333076][ T5651] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  322.335625][ T5651] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  322.675753][T19291] sctp: [Deprecated]: syz.2.4413 (pid 19291) Use of struct sctp_assoc_value in delayed_ack socket option.
[  322.675753][T19291] Use struct sctp_sack_info instead
[  322.974200][T19301] syzkaller1: entered promiscuous mode
[  322.976445][T19301] syzkaller1: entered allmulticast mode
[  322.992234][T16557] block nbd1: Receive control failed (result -32)
[  322.995541][   T55] block nbd1: Receive control failed (result -32)
[  323.119093][T19307] netlink: 'syz.2.4419': attribute type 22 has an invalid length.
[  323.217880][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  323.244791][T19312] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  323.248885][T19312] syzkaller0: MTU too low for tipc bearer
[  323.250616][T19312] tipc: Disabling bearer <eth:syzkaller0>
[  323.586227][T19334] netlink: 'syz.0.4429': attribute type 1 has an invalid length.
[  323.738284][T19340] lo speed is unknown, defaulting to 1000
[  323.823348][T19344] openvswitch: netlink: Unknown key attributes 2
[  323.959025][T19351] netlink: 'syz.0.4435': attribute type 10 has an invalid length.
[  324.150527][T19366] netlink: 'syz.0.4441': attribute type 5 has an invalid length.
[  324.257821][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  324.442758][T19401] xt_TCPMSS: Only works on TCP SYN packets
[  324.508978][T19414] netlink: 'syz.0.4457': attribute type 5 has an invalid length.
[  324.644399][T19417] netlink: 'syz.1.4458': attribute type 1 has an invalid length.
[  325.191135][T19436] syzkaller0: entered promiscuous mode
[  325.192826][T19436] syzkaller0: entered allmulticast mode
[  325.201715][T19436] __nla_validate_parse: 22 callbacks suppressed
[  325.201726][T19436] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4465'.
[  325.298077][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  325.345864][T19438] bond0: (slave ipvlan1): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  325.503458][T19442] netlink: 256 bytes leftover after parsing attributes in process `syz.0.4468'.
[  325.508633][T19442] netlink: 72 bytes leftover after parsing attributes in process `syz.0.4468'.
[  325.521895][T19442] syzkaller1: entered promiscuous mode
[  325.523626][T19442] syzkaller1: entered allmulticast mode
[  325.772696][    C0] bridge0: port 3(veth0_virt_wifi) entered learning state
[  325.776862][    C0] bridge0: port 2(bridge_slave_1) entered learning state
[  325.780106][    C0] bridge0: port 1(bridge_slave_0) entered learning state
[  325.803350][T19448] netlink: 'syz.0.4470': attribute type 337 has an invalid length.
[  326.253889][T19421] syz.1.4458 (19421) used greatest stack depth: 15992 bytes left
[  326.322888][T19470] netlink: 'syz.2.4476': attribute type 1 has an invalid length.
[  326.327706][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  326.388947][T19476] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4476'.
[  326.400451][T19476] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4476'.
[  326.556256][T19480] netlink: 'syz.1.4482': attribute type 10 has an invalid length.
[  326.564939][T19480] netlink: 228 bytes leftover after parsing attributes in process `syz.1.4482'.
[  326.665105][T19486] netlink: 80 bytes leftover after parsing attributes in process `syz.2.4485'.
[  326.685901][T19484] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4485'.
[  326.691595][T19484] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4485'.
[  326.694259][T19484] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4485'.
[  326.973721][T19509] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  327.377725][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  328.015693][T19576] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  328.068874][T19581] netlink: 'syz.2.4512': attribute type 21 has an invalid length.
[  328.407845][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  328.496696][T19618] 8021q: adding VLAN 0 to HW filter on device ipvlan3
[  328.500124][T19618] bond0: (slave ipvlan3): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  328.626218][T19624] syzkaller0: entered promiscuous mode
[  328.631517][T19624] syzkaller0: entered allmulticast mode
[  328.635533][T19624] PF_CAN: dropped non conform CAN FD skbuff: dev type 280, len 65487
[  329.136695][T19647] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  329.211953][T19651] netlink: 'syz.0.4540': attribute type 4 has an invalid length.
[  329.214752][T19651] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  329.457793][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  329.499548][T19663] IPv6: sit5: Disabled Multicast RS
[  329.911916][T19686] 8021q: adding VLAN 0 to HW filter on device ipvlan3
[  329.914337][T19686] bond0: (slave ipvlan3): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  330.208211][ T5651] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  330.212345][ T5651] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  330.214809][ T5651] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  330.225324][ T5651] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  330.447482][T19723] __nla_validate_parse: 21 callbacks suppressed
[  330.447498][T19723] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4566'.
[  330.497737][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  330.617084][T19735] 8021q: adding VLAN 0 to HW filter on device ipvlan0
[  330.620125][T19735] bond0: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  330.911118][T19750] netlink: 'syz.1.4577': attribute type 29 has an invalid length.
[  330.924289][T19750] netlink: 'syz.1.4577': attribute type 1 has an invalid length.
[  330.927325][T19750] netlink: 'syz.1.4577': attribute type 2 has an invalid length.
[  331.101485][T19767] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4585'.
[  331.121886][T19769] netlink: 'syz.0.4586': attribute type 29 has an invalid length.
[  331.134949][T19769] netlink: 'syz.0.4586': attribute type 1 has an invalid length.
[  331.142302][T19769] netlink: 'syz.0.4586': attribute type 2 has an invalid length.
[  331.173613][T19771] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4587'.
[  331.326482][T19788] sch_tbf: burst 3 is lower than device ip6tnl0 mtu (32769) !
[  331.340895][T19789] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4590'.
[  331.506311][T19803] bond0: (slave ipvlan1): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  331.538032][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  331.683182][T19816] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4604'.
[  331.819775][T19832] syzkaller1: tun_chr_ioctl cmd 35111
[  331.822775][T19832] syzkaller1: tun_chr_ioctl cmd 1074025677
[  331.824657][T19832] syzkaller1: linktype set to 270
[  332.059808][T19842] netlink: 56 bytes leftover after parsing attributes in process `syz.2.4613'.
[  332.062554][T19842] netlink: 19 bytes leftover after parsing attributes in process `syz.2.4613'.
[  332.065169][T19842] netlink: 19 bytes leftover after parsing attributes in process `syz.2.4613'.
[  332.349823][T19864] syzkaller0: entered promiscuous mode
[  332.351638][T19864] syzkaller0: entered allmulticast mode
[  332.567808][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  332.693109][T19887] 8021q: adding VLAN 0 to HW filter on device ipvlan3
[  332.700812][T19887] bond0: (slave ipvlan3): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  332.706354][T19889] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4628'.
[  332.741689][T19889] netlink: 68 bytes leftover after parsing attributes in process `syz.1.4628'.
[  332.814213][T19898] netlink: 'syz.1.4630': attribute type 12 has an invalid length.
[  332.826191][T19899] netlink: 'syz.2.4631': attribute type 7 has an invalid length.
[  332.854099][T19899] netem: change failed
[  332.938045][T19903] openvswitch: netlink: IPv4 frag type 127 is out of range max 2
[  333.617767][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  333.730735][T19910] netlink: 'syz.0.4634': attribute type 1 has an invalid length.
[  334.647705][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  335.687714][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  336.727809][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  336.736982][T19932] tls_set_device_offload: netdev not found
[  336.798851][T19936] __nla_validate_parse: 4 callbacks suppressed
[  336.798868][T19936] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4643'.
[  336.947860][T19955] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4649'.
[  336.953059][T19955] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4649'.
[  336.980070][T19959] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4650'.
[  337.001384][T19964] netlink: 'syz.1.4652': attribute type 11 has an invalid length.
[  337.003673][T19964] netlink: 'syz.1.4652': attribute type 5 has an invalid length.
[  337.006387][T19964] netlink: 6548 bytes leftover after parsing attributes in process `syz.1.4652'.
[  337.123875][T19972] syzkaller1: entered promiscuous mode
[  337.125656][T19972] syzkaller1: entered allmulticast mode
[  337.777804][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  338.313437][T19992] netlink: 'syz.1.4660': attribute type 11 has an invalid length.
[  338.320154][T19992] netlink: 'syz.1.4660': attribute type 5 has an invalid length.
[  338.323847][T19992] netlink: 6548 bytes leftover after parsing attributes in process `syz.1.4660'.
[  338.334377][T19987] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4659'.
[  338.381490][T20001] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4663'.
[  338.393875][T20001] gtp1: entered promiscuous mode
[  338.396447][T20001] gtp1: entered allmulticast mode
[  338.567529][T20031] lo: entered allmulticast mode
[  338.582922][T20032] lo: left allmulticast mode
[  338.807796][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  338.826189][T20063] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4683'.
[  339.396899][T20082] xt_TPROXY: Can be used only with -p tcp or -p udp
[  339.435212][T20082] x_tables: duplicate underflow at hook 1
[  339.539415][T20097] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4693'.
[  339.565551][T20099] netlink: 'syz.2.4694': attribute type 11 has an invalid length.
[  339.568191][T20099] netlink: 'syz.2.4694': attribute type 5 has an invalid length.
[  339.641121][T20103] SET target dimension over the limit!
[  339.785868][T20113] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  339.858044][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  340.003490][T20132] sctp: [Deprecated]: syz.2.4707 (pid 20132) Use of int in maxseg socket option.
[  340.003490][T20132] Use struct sctp_assoc_value instead
[  340.792837][T20186] macvtap0: entered allmulticast mode
[  340.794793][T20186] bond24: entered allmulticast mode
[  340.796920][T20186] bridge14: entered allmulticast mode
[  340.801257][T20186] 8021q: adding VLAN 0 to HW filter on device macvtap0
[  340.887742][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  341.092549][T20226] IPVS: set_ctl: invalid protocol: 0 172.30.0.2:20003
[  341.132525][T20230] syzkaller1: tun_chr_ioctl cmd 2147767506
[  341.135784][T20232] netlink: 'syz.0.4736': attribute type 6 has an invalid length.
[  341.300645][T20254] netlink: 'syz.0.4748': attribute type 8 has an invalid length.
[  341.305291][T20254] netlink: 'syz.0.4748': attribute type 4 has an invalid length.
[  341.330632][T20254] lo speed is unknown, defaulting to 1000
[  341.357019][T20258] mac80211_hwsim hwsim2 wlan0: Caught tx_queue_len zero misconfig
[  341.500513][T20254] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  341.794354][T20291] netlink: 'syz.0.4758': attribute type 1 has an invalid length.
[  341.847023][T20292] __nla_validate_parse: 10 callbacks suppressed
[  341.847035][T20292] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4758'.
[  341.853958][T20291] 8021q: adding VLAN 0 to HW filter on device bond19
[  341.857168][T20292] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4758'.
[  341.860457][T20292] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4758'.
[  341.863506][T20292] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4758'.
[  341.868460][T20292] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4758'.
[  341.871454][T20292] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4758'.
[  341.874890][T20292] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4758'.
[  341.879055][T20292] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4758'.
[  341.882699][T20292] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4758'.
[  341.886085][T20292] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4758'.
[  341.888945][T20294] netlink: 'syz.0.4758': attribute type 10 has an invalid length.
[  341.897526][T20294] dummy0: entered promiscuous mode
[  341.935711][T20301] netlink: 'syz.1.4761': attribute type 28 has an invalid length.
[  341.938592][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  342.059330][ T5668] TC_ACT_REPEAT abuse ?
[  342.231431][T20314] netlink: 'syz.0.4765': attribute type 1 has an invalid length.
[  342.668558][T20330] xt_addrtype: ipv6 BLACKHOLE matching not supported
[  342.861173][T20341] netlink: 'syz.1.4775': attribute type 11 has an invalid length.
[  342.864263][T20341] netlink: 'syz.1.4775': attribute type 5 has an invalid length.
[  342.940889][T20343] netlink: ct family unspecified
[  342.959356][T20340] bond36: option tlb_dynamic_lb: invalid value (5)
[  342.962372][T20340] bond36 (unregistering): Released all slaves
[  342.967778][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  343.305041][T20386] netlink: 'syz.1.4792': attribute type 11 has an invalid length.
[  343.307406][T20386] netlink: 'syz.1.4792': attribute type 5 has an invalid length.
[  343.398874][T20390] lo speed is unknown, defaulting to 1000
[  343.530104][T20408] ip6gretap3: entered promiscuous mode
[  343.532265][T20408] ip6gretap3: entered allmulticast mode
[  343.535855][T20408] Unknown options in mask 6
[  343.651795][T20418] netlink: 'syz.0.4801': attribute type 11 has an invalid length.
[  343.654476][T20418] netlink: 'syz.0.4801': attribute type 5 has an invalid length.
[  343.808405][T20405] xt_l2tp: v2 doesn't support IP mode
[  343.863867][   T33] audit: type=1804 audit(1778284073.962:5): pid=20435 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.4807" name="/newroot/1607/cgroup.controllers" dev="tmpfs" ino=8201 res=1 errno=0
[  343.871831][   T33] audit: type=1800 audit(1778284073.962:6): pid=20435 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.4807" name="cgroup.controllers" dev="tmpfs" ino=8201 res=0 errno=0
[  343.990944][T20439] openvswitch: netlink: IP tunnel dst address not specified
[  344.007780][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  344.117108][T20447] block nbd4: Unsupported socket: should be TCP or UNIX.
[  344.146597][T20459] syzkaller1: entered promiscuous mode
[  344.149712][T20459] syzkaller1: entered allmulticast mode
[  345.047681][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  345.568021][T20570] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  345.652082][T20581] netlink: 'syz.0.4850': attribute type 83 has an invalid length.
[  345.677428][T20584] netlink: 'syz.1.4849': attribute type 2 has an invalid length.
[  345.680287][T20584] netlink: 'syz.1.4849': attribute type 2 has an invalid length.
[  345.682707][T20584] netlink: 'syz.1.4849': attribute type 2 has an invalid length.
[  345.685106][T20584] netlink: 'syz.1.4849': attribute type 2 has an invalid length.
[  345.694936][T20584] netlink: 'syz.1.4849': attribute type 2 has an invalid length.
[  346.004335][T20615] syzkaller1: entered promiscuous mode
[  346.010268][T20615] syzkaller1: entered allmulticast mode
[  346.021329][T20615] syzkaller1: left promiscuous mode
[  346.022977][T20615] syzkaller1: left allmulticast mode
[  346.097744][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  346.186228][T20633] 8021q: adding VLAN 0 to HW filter on device ipvlan3
[  346.189276][T20633] bond0: (slave ipvlan3): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  346.212458][T20635] tipc: Enabling of bearer <eth:syzjaller0> rejected, failed to enable media
[  346.285713][T20639] bond36: entered promiscuous mode
[  346.293696][T20639] vcan1: entered promiscuous mode
[  346.295249][T20639] vcan1: entered allmulticast mode
[  346.296972][T20639] bond36: (slave vcan1): The slave device specified does not support setting the MAC address
[  346.305640][T20639] bond36: (slave vcan1): Error -95 calling set_mac_address
[  346.602937][T20652] syzkaller1: entered allmulticast mode
[  346.730680][   T33] audit: type=1804 audit(1778284076.832:7): pid=20666 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.4879" name="/newroot/1637/cgroup.controllers" dev="tmpfs" ino=8356 res=1 errno=0
[  346.737238][   T33] audit: type=1800 audit(1778284076.832:8): pid=20666 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.4879" name="cgroup.controllers" dev="tmpfs" ino=8356 res=0 errno=0
[  346.877543][T20676] netlink: 'syz.2.4884': attribute type 11 has an invalid length.
[  346.880906][T20676] __nla_validate_parse: 83 callbacks suppressed
[  346.880916][T20676] netlink: 6548 bytes leftover after parsing attributes in process `syz.2.4884'.
[  346.894536][T20676] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4884'.
[  347.028425][   T33] audit: type=1804 audit(1778284077.122:9): pid=20697 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.4889" name="/newroot/1649/cgroup.controllers" dev="tmpfs" ino=8430 res=1 errno=0
[  347.038673][   T33] audit: type=1800 audit(1778284077.122:10): pid=20697 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.4889" name="cgroup.controllers" dev="tmpfs" ino=8430 res=0 errno=0
[  347.106302][T20704] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4892'.
[  347.127772][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  347.218294][T20710] lo speed is unknown, defaulting to 1000
[  347.274911][T20700] validate_nla: 58 callbacks suppressed
[  347.274922][T20700] netlink: 'syz.0.4890': attribute type 1 has an invalid length.
[  347.293093][T20700] bond21: entered promiscuous mode
[  347.295136][T20700] 8021q: adding VLAN 0 to HW filter on device bond21
[  347.532190][T20732] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4897'.
[  348.177859][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  348.194602][T20742] pim6reg1: entered promiscuous mode
[  348.196832][T20742] pim6reg1: entered allmulticast mode
[  348.309076][T20744] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4902'.
[  348.382536][T20750] openvswitch: netlink: IP tunnel dst address not specified
[  348.465207][T20760] netlink: 'syz.2.4908': attribute type 11 has an invalid length.
[  348.476167][T20760] netlink: 'syz.2.4908': attribute type 5 has an invalid length.
[  348.484753][T20760] netlink: 6548 bytes leftover after parsing attributes in process `syz.2.4908'.
[  348.491558][T20758] nbd: must specify an index to disconnect
[  348.602200][T20771] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4913'.
[  348.605210][T20770] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4912'.
[  348.630299][T20770] bond3: (slave team_slave_1): Releasing backup interface
[  348.635266][T20770] team_slave_1: left allmulticast mode
[  348.877286][T20785] hmac(sh: entered promiscuous mode
[  348.895035][T20792] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4921'.
[  348.912686][T20792] ip6gretap0: left promiscuous mode
[  349.133133][T20810] ip6t_srh: unknown srh match flags  4000
[  349.217757][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  349.234044][T20822] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048)
[  349.243671][T20822] pim6reg1: entered promiscuous mode
[  349.245459][T20822] pim6reg1: entered allmulticast mode
[  349.252165][T20828] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4932'.
[  349.368701][T20835] netlink: 'syz.1.4935': attribute type 4 has an invalid length.
[  349.675047][T20861] syzkaller0: entered promiscuous mode
[  349.676805][T20861] syzkaller0: entered allmulticast mode
[  350.252842][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  351.287785][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  351.563117][T20899] bridge0: entered promiscuous mode
[  351.566299][T20899] 8021q: adding VLAN 0 to HW filter on device bond0
[  351.580497][T20899] 8021q: adding VLAN 0 to HW filter on device batadv0
[  352.327767][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  352.340738][T20899] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  352.548354][   T33] audit: type=1804 audit(1778284082.652:11): pid=20926 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.4965" name="/newroot/1681/cgroup.controllers" dev="tmpfs" ino=8595 res=1 errno=0
[  352.556219][   T33] audit: type=1800 audit(1778284082.652:12): pid=20926 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.4965" name="cgroup.controllers" dev="tmpfs" ino=8595 res=0 errno=0
[  352.585393][T20928] __nla_validate_parse: 4 callbacks suppressed
[  352.585404][T20928] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4966'.
[  352.643743][T20932] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4968'.
[  352.699329][T20928] netlink: 'syz.1.4966': attribute type 2 has an invalid length.
[  352.705646][T20928] netlink: 'syz.1.4966': attribute type 9 has an invalid length.
[  352.714906][T20928] netlink: 185500 bytes leftover after parsing attributes in process `syz.1.4966'.
[  352.800258][T20949] netlink: 56 bytes leftover after parsing attributes in process `syz.2.4973'.
[  352.911319][T20963] netlink: 'syz.2.4978': attribute type 11 has an invalid length.
[  352.914224][T20963] netlink: 'syz.2.4978': attribute type 5 has an invalid length.
[  352.917047][T20963] netlink: 6548 bytes leftover after parsing attributes in process `syz.2.4978'.
[  353.000612][T20972] netlink: 64 bytes leftover after parsing attributes in process `syz.2.4979'.
[  353.094682][   T33] audit: type=1804 audit(1778284083.192:13): pid=20982 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.4984" name="/newroot/1644/cgroup.controllers" dev="tmpfs" ino=8406 res=1 errno=0
[  353.101236][   T33] audit: type=1800 audit(1778284083.192:14): pid=20982 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.4984" name="cgroup.controllers" dev="tmpfs" ino=8406 res=0 errno=0
[  353.167796][T20986] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4986'.
[  353.178275][   T33] audit: type=1804 audit(1778284083.272:15): pid=20987 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.4986" name="/newroot/1646/cgroup.controllers" dev="tmpfs" ino=8419 res=1 errno=0
[  353.192702][   T33] audit: type=1800 audit(1778284083.272:16): pid=20987 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.4986" name="cgroup.controllers" dev="tmpfs" ino=8419 res=0 errno=0
[  353.202284][   T33] audit: type=1800 audit(1778284083.292:17): pid=20987 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.4986" name="cgroup.controllers" dev="tmpfs" ino=8419 res=0 errno=0
[  353.209663][   T33] audit: type=1800 audit(1778284083.292:18): pid=20987 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.4986" name="cgroup.controllers" dev="tmpfs" ino=8419 res=0 errno=0
[  353.216637][   T33] audit: type=1804 audit(1778284083.292:19): pid=20986 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.4986" name="/newroot/1646/cgroup.controllers" dev="tmpfs" ino=8419 res=1 errno=0
[  353.270997][T20995] netlink: 64 bytes leftover after parsing attributes in process `syz.1.4988'.
[  353.367874][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  353.441873][T21005] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.4992'.
[  353.626797][T21015] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4996'.
[  353.815088][   T33] audit: type=1804 audit(1778284083.912:20): pid=21034 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.5004" name="/newroot/1660/cgroup.controllers" dev="tmpfs" ino=8492 res=1 errno=0
[  354.251613][T21073] erspan0: entered allmulticast mode
[  354.349862][T21084] netlink: 'syz.2.5022': attribute type 8 has an invalid length.
[  354.417781][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  354.484375][T21088] bond0 (unregistering): Released all slaves
[  354.542103][T21088] lo speed is unknown, defaulting to 1000
[  354.554497][T21091] netlink: 'syz.2.5025': attribute type 4 has an invalid length.
[  354.869384][T21110] syzkaller1: entered promiscuous mode
[  354.871474][T21110] syzkaller1: entered allmulticast mode
[  355.155397][T21145] netlink: 'syz.2.5040': attribute type 11 has an invalid length.
[  355.158232][T21145] netlink: 'syz.2.5040': attribute type 5 has an invalid length.
[  355.447735][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  355.452953][T21175] xt_hashlimit: size too large, truncated to 1048576
[  355.573454][T21183] xt_recent: Unsupported userspace flags (000000b1)
[  355.603963][T21187] syzkaller0: entered promiscuous mode
[  355.605684][T21187] syzkaller0: entered allmulticast mode
[  355.847882][    C0] bridge0: port 1(bridge_slave_0) entered forwarding state
[  355.850641][    C0] bridge0: topology change detected, propagating
[  355.853505][    C0] bridge0: port 2(bridge_slave_1) entered forwarding state
[  355.855620][    C0] bridge0: topology change detected, propagating
[  355.858959][    C0] bridge0: port 3(veth0_virt_wifi) entered forwarding state
[  355.861087][    C0] bridge0: topology change detected, propagating
[  355.909102][T21214] netlink: 'syz.1.5069': attribute type 30 has an invalid length.
[  355.916242][T19672] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  355.918866][T21214] netlink: 'syz.1.5069': attribute type 30 has an invalid length.
[  355.921358][T19672] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  355.924189][T19672] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  355.931802][T19672] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  356.022822][T21219] team_slave_0 (unregistering): left promiscuous mode
[  356.025543][T21219] team0: Port device team_slave_0 removed
[  356.261843][T21236] netlink: 'syz.1.5076': attribute type 3 has an invalid length.
[  356.354227][T21240] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  356.357579][T21240] syzkaller0: entered promiscuous mode
[  356.359873][T21240] syzkaller0: entered allmulticast mode
[  356.497965][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  356.630076][T21246] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  356.760660][T21252] openvswitch: netlink: Invalid MD length 0 for MD type 0
[  356.763413][T21252] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  356.797355][T21254] netlink: 'syz.0.5084': attribute type 1 has an invalid length.
[  356.801757][T21254] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  357.130270][T21238] tipc: Resetting bearer <eth:syzkaller0>
[  357.176464][T21238] tipc: Disabling bearer <eth:syzkaller0>
[  357.192202][T21277] pim6reg1: entered promiscuous mode
[  357.193932][T21277] pim6reg1: entered allmulticast mode
[  357.410780][T21304] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  357.527729][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  357.589908][T21317] __nla_validate_parse: 17 callbacks suppressed
[  357.589925][T21317] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5101'.
[  357.794896][T21324] syzkaller0: entered promiscuous mode
[  357.797097][T21324] syzkaller0: entered allmulticast mode
[  357.824949][T21324] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5104'.
[  358.106632][T21334] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5107'.
[  358.113165][T21334] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  358.182624][T21339] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5108'.
[  358.234916][T21330] nbd0: detected capacity change from 0 to 63
[  358.242793][T21331] nbd: nbd0 already in use
[  358.246161][T21335] block nbd0: NBD_DISCONNECT
[  358.252042][T21335] block nbd0: Disconnected due to user request.
[  358.256953][T21310] tipc: Disabling bearer <eth:syzkaller0>
[  358.261395][T21335] block nbd0: shutting down sockets
[  358.268282][    C1] blk_print_req_error: 25 callbacks suppressed
[  358.268293][    C1] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  358.273014][    C1] buffer_io_error: 25 callbacks suppressed
[  358.273027][    C1] Buffer I/O error on dev nbd0, logical block 0, async page read
[  358.278177][    C1] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  358.281547][    C1] Buffer I/O error on dev nbd0, logical block 1, async page read
[  358.283841][    C1] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  358.286467][    C1] Buffer I/O error on dev nbd0, logical block 2, async page read
[  358.288865][    C1] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  358.291893][    C1] Buffer I/O error on dev nbd0, logical block 3, async page read
[  358.296411][T21094] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  358.307124][T21094] Buffer I/O error on dev nbd0, logical block 0, async page read
[  358.312937][T21094] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  358.321985][T21094] Buffer I/O error on dev nbd0, logical block 1, async page read
[  358.328532][T21094] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  358.335776][T21094] Buffer I/O error on dev nbd0, logical block 2, async page read
[  358.344170][T21094] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  358.346843][T21094] Buffer I/O error on dev nbd0, logical block 3, async page read
[  358.353467][T21094] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  358.359332][T21094] Buffer I/O error on dev nbd0, logical block 0, async page read
[  358.362031][T21094] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  358.365152][T21094] Buffer I/O error on dev nbd0, logical block 1, async page read
[  358.372145][T21094] ldm_validate_partition_table(): Disk read failed.
[  358.385632][T21094] Dev nbd0: unable to read RDB block 0
[  358.392398][T21347] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5111'.
[  358.395732][T21094]  nbd0: unable to read partition table
[  358.425120][T21094] ldm_validate_partition_table(): Disk read failed.
[  358.433571][T21094] Dev nbd0: unable to read RDB block 0
[  358.442802][T21094]  nbd0: unable to read partition table
[  358.567801][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  358.613998][T21378] netlink: 332 bytes leftover after parsing attributes in process `syz.0.5120'.
[  358.621461][T21382] xt_TCPMSS: Only works on TCP SYN packets
[  358.654832][T21384] macsec0: entered promiscuous mode
[  358.656444][T21384] macsec0: entered allmulticast mode
[  358.661773][   T24] bridge0: left promiscuous mode
[  358.717958][T21389] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5125'.
[  358.721607][T21389] validate_nla: 1 callbacks suppressed
[  358.721619][T21389] netlink: 'syz.0.5125': attribute type 30 has an invalid length.
[  358.735681][ T5668] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  358.735704][T21389] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5125'.
[  358.740369][ T5668] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  358.741666][T21389] netlink: 'syz.0.5125': attribute type 30 has an invalid length.
[  358.751063][ T5668] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  358.754520][T21395] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5126'.
[  358.754939][ T5668] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  358.763476][T21395] netlink: 'syz.2.5126': attribute type 30 has an invalid length.
[  358.785055][T19672] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  358.785093][T21395] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5126'.
[  358.788364][T19672] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  358.792430][T21395] netlink: 'syz.2.5126': attribute type 30 has an invalid length.
[  358.798857][T19672] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  358.801338][T19672] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  358.881231][T21403] openvswitch: netlink: Unknown nsh attribute 0
[  358.910640][T21408] ip6gre0: Caught tx_queue_len zero misconfig
[  358.912989][T21408] sch_tbf: burst 0 is lower than device ip6gre0 mtu (32769) !
[  358.940026][T21410] netlink: 'syz.0.5132': attribute type 10 has an invalid length.
[  358.947574][T21410] syz_tun: entered promiscuous mode
[  359.041678][T21424] netlink: 'syz.1.5136': attribute type 4 has an invalid length.
[  359.296033][T21445] ip6erspan1: entered allmulticast mode
[  359.617827][    C1] net_ratelimit: 1 callbacks suppressed
[  359.617842][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  359.627211][T21480] lo speed is unknown, defaulting to 1000
[  359.865194][T21491] netlink: 'syz.0.5160': attribute type 12 has an invalid length.
[  359.935292][T21500] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check.
[  359.941885][T21499] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check.
[  360.273647][T21511] netlink: 'syz.0.5165': attribute type 1 has an invalid length.
[  360.276191][T21511] netlink: 'syz.0.5165': attribute type 1 has an invalid length.
[  360.647877][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  360.766202][   T33] kauditd_printk_skb: 5 callbacks suppressed
[  360.766217][   T33] audit: type=1804 audit(1778284090.862:26): pid=21517 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.5167" name="/newroot/1738/cgroup.controllers" dev="tmpfs" ino=8894 res=1 errno=0
[  360.781911][   T33] audit: type=1800 audit(1778284090.862:27): pid=21517 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.5167" name="cgroup.controllers" dev="tmpfs" ino=8894 res=0 errno=0
[  361.061315][T21531] lo speed is unknown, defaulting to 1000
[  361.687723][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  362.160438][T21563] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  362.171007][T21563] IPVS: Unknown mcast interface: bridge_slave_0
[  362.307885][T21575] netlink: 'syz.1.5189': attribute type 30 has an invalid length.
[  362.544827][T21594] bond21: entered promiscuous mode
[  362.553231][T21594] 8021q: adding VLAN 0 to HW filter on device bond21
[  362.611960][T21603] x_tables: ip_tables: ah match: only valid for protocol 51
[  362.622552][T21594] __nla_validate_parse: 24 callbacks suppressed
[  362.622569][T21594] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5195'.
[  362.651001][T21594] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5195'.
[  362.698335][T21607] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5198'.
[  362.737909][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  362.754094][T21607] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5198'.
[  362.878735][T21615] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  362.883764][T21619] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5200'.
[  362.892157][T21616] syzkaller0: entered promiscuous mode
[  362.895437][T21616] syzkaller0: entered allmulticast mode
[  362.929997][T21616] tipc: Resetting bearer <eth:syzkaller0>
[  362.964179][T21616] tipc: Disabling bearer <eth:syzkaller0>
[  363.038714][T21624] sctp: [Deprecated]: syz.2.5203 (pid 21624) Use of int in max_burst socket option.
[  363.038714][T21624] Use struct sctp_assoc_value instead
[  363.161569][T21633] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5208'.
[  363.298580][T21653] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5213'.
[  363.403408][T21660] netlink: 207952 bytes leftover after parsing attributes in process `syz.0.5216'.
[  363.570183][T21674] dvmrp0: entered allmulticast mode
[  363.576612][T21674] syzkaller1: entered promiscuous mode
[  363.579194][T21674] syzkaller1: entered allmulticast mode
[  363.584474][T21674] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 324
[  363.617483][T21674] bond22: Unable to set up delay as MII monitoring is disabled
[  363.622603][T21674] bond22 (unregistering): Released all slaves
[  363.655855][T21679] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5223'.
[  363.767827][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  364.148073][T21716] netlink: 'syz.0.5233': attribute type 11 has an invalid length.
[  364.635126][T21743] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.5240'.
[  364.656561][   T33] audit: type=1804 audit(1778284094.752:28): pid=21745 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.5242" name="/newroot/1728/cgroup.controllers" dev="tmpfs" ino=8842 res=1 errno=0
[  364.665975][   T33] audit: type=1800 audit(1778284094.752:29): pid=21745 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.5242" name="cgroup.controllers" dev="tmpfs" ino=8842 res=0 errno=0
[  364.808314][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  364.822898][T21752] syz.1.5244: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  364.827318][T21752] CPU: 1 UID: 0 PID: 21752 Comm: syz.1.5244 Not tainted syzkaller #0 PREEMPT(full) 
[  364.827339][T21752] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  364.827350][T21752] Call Trace:
[  364.827360][T21752]  <TASK>
[  364.827367][T21752]  dump_stack_lvl+0xe8/0x150
[  364.827388][T21752]  warn_alloc+0x249/0x340
[  364.827410][T21752]  ? stack_trace_save+0xa9/0x100
[  364.827434][T21752]  ? __pfx_warn_alloc+0x10/0x10
[  364.827452][T21752]  ? kasan_save_track+0x4f/0x80
[  364.827464][T21752]  ? kasan_save_track+0x3e/0x80
[  364.827473][T21752]  ? __kasan_kmalloc+0x93/0xb0
[  364.827483][T21752]  ? __kmalloc_cache_noprof+0x31c/0x660
[  364.827494][T21752]  ? xskq_create+0x56/0x170
[  364.827505][T21752]  ? xsk_setsockopt+0x54c/0x990
[  364.827514][T21752]  ? do_sock_setsockopt+0x17c/0x1b0
[  364.827526][T21752]  ? __x64_sys_setsockopt+0x13d/0x1b0
[  364.827537][T21752]  ? do_syscall_64+0x15f/0xf80
[  364.827546][T21752]  __vmalloc_node_range_noprof+0x132/0x1750
[  364.827571][T21752]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  364.827604][T21752]  ? __kasan_kmalloc+0x93/0xb0
[  364.827619][T21752]  vmalloc_user_noprof+0xad/0xe0
[  364.827631][T21752]  ? xskq_create+0xbf/0x170
[  364.827643][T21752]  xskq_create+0xbf/0x170
[  364.827656][T21752]  xsk_init_queue+0x8a/0xe0
[  364.827670][T21752]  xsk_setsockopt+0x54c/0x990
[  364.827681][T21752]  ? __pfx_xsk_setsockopt+0x10/0x10
[  364.827691][T21752]  ? __pfx_aa_sk_perm+0x10/0x10
[  364.827703][T21752]  ? aa_sock_opt_perm+0xff/0x1a0
[  364.827745][T21752]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  364.827763][T21752]  ? __pfx_xsk_setsockopt+0x10/0x10
[  364.827782][T21752]  do_sock_setsockopt+0x17c/0x1b0
[  364.827798][T21752]  __x64_sys_setsockopt+0x13d/0x1b0
[  364.827810][T21752]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  364.827820][T21752]  do_syscall_64+0x15f/0xf80
[  364.827827][T21752]  ? trace_irq_disable+0x3b/0x140
[  364.827843][T21752]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  364.827851][T21752] RIP: 0033:0x7fa06439cdd9
[  364.827860][T21752] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  364.827868][T21752] RSP: 002b:00007fa065243028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  364.827877][T21752] RAX: ffffffffffffffda RBX: 00007fa064615fa0 RCX: 00007fa06439cdd9
[  364.827883][T21752] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000004
[  364.827888][T21752] RBP: 00007fa064432d69 R08: 0000000000000004 R09: 0000000000000000
[  364.827893][T21752] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[  364.827899][T21752] R13: 00007fa064616038 R14: 00007fa064615fa0 R15: 00007ffd87d7aec8
[  364.827913][T21752]  </TASK>
[  364.886195][T21753] block nbd0: Unsupported socket: should be TCP or UNIX.
[  364.892220][T21752] Mem-Info:
[  364.913436][T21752] active_anon:5128 inactive_anon:7 isolated_anon:0
[  364.913436][T21752]  active_file:11267 inactive_file:41525 isolated_file:0
[  364.913436][T21752]  unevictable:1768 dirty:148 writeback:0
[  364.913436][T21752]  slab_reclaimable:12000 slab_unreclaimable:96614
[  364.913436][T21752]  mapped:18543 shmem:2358 pagetables:1199
[  364.913436][T21752]  sec_pagetables:0 bounce:0
[  364.913436][T21752]  kernel_misc_reclaimable:0
[  364.913436][T21752]  free:1107890 free_pcp:22975 free_cma:0
[  364.926763][T21752] Node 0 active_anon:7984kB inactive_anon:20kB active_file:23772kB inactive_file:146604kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:39752kB dirty:252kB writeback:0kB shmem:4708kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:9184kB pagetables:2236kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  364.936889][T21752] Node 1 active_anon:12528kB inactive_anon:8kB active_file:21296kB inactive_file:19496kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:34420kB dirty:340kB writeback:0kB shmem:4724kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:6052kB pagetables:2560kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  364.946649][T21752] Node 0 DMA free:15360kB boost:0kB min:240kB low:300kB high:360kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  364.955643][T21752] lowmem_reserve[]: 0 1587 2117 2117 2117
[  364.957415][T21752] Node 0 DMA32 free:1477108kB boost:0kB min:25012kB low:31264kB high:37516kB reserved_highatomic:0KB free_highatomic:0KB active_anon:268kB inactive_anon:8kB active_file:18860kB inactive_file:8kB unevictable:0kB writepending:220kB zspages:0kB present:2080636kB managed:1625248kB mlocked:0kB bounce:0kB free_pcp:15148kB local_pcp:8444kB free_cma:0kB
[  364.966860][T21752] lowmem_reserve[]: 0 0 530 530 530
[  364.968798][T21752] Node 0 Normal free:13388kB boost:0kB min:8512kB low:10640kB high:12768kB reserved_highatomic:0KB free_highatomic:0KB active_anon:7684kB inactive_anon:12kB active_file:4912kB inactive_file:146596kB unevictable:3536kB writepending:32kB zspages:0kB present:1572868kB managed:543152kB mlocked:0kB bounce:0kB free_pcp:3252kB local_pcp:2940kB free_cma:0kB
[  364.986682][T21752] lowmem_reserve[]: 0 0 0 0 0
[  364.988702][T21752] Node 1 Normal free:2925704kB boost:0kB min:56344kB low:70428kB high:84512kB reserved_highatomic:0KB free_highatomic:0KB active_anon:12528kB inactive_anon:8kB active_file:21296kB inactive_file:19496kB unevictable:3536kB writepending:340kB zspages:0kB present:3670012kB managed:3594684kB mlocked:0kB bounce:0kB free_pcp:73532kB local_pcp:32868kB free_cma:0kB
[  364.999277][T21752] lowmem_reserve[]: 0 0 0 0 0
[  365.005066][T21752] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  365.009545][T21752] Node 0 DMA32: 203*4kB (UME) 585*8kB (UME) 320*16kB (UM) 320*32kB (UME) 290*64kB (UME) 180*128kB (UME) 134*256kB (UM) 70*512kB (UM) 29*1024kB (UM) 30*2048kB (UME) 306*4096kB (UM) = 1477108kB
[  365.015460][T21752] Node 0 Normal: 620*4kB (UM) 306*8kB (UME) 164*16kB (UM) 47*32kB (UM) 43*64kB (UM) 9*128kB (U) 1*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 13216kB
[  365.020995][T21752] Node 1 Normal: 2910*4kB (UME) 1122*8kB (UME) 1786*16kB (UME) 453*32kB (UME) 503*64kB (UME) 422*128kB (UM) 233*256kB (UM) 121*512kB (UME) 74*1024kB (UM) 45*2048kB (UM) 607*4096kB (UM) = 2925704kB
[  365.027314][T21752] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  365.031106][T21752] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  365.034221][T21752] 55153 total pagecache pages
[  365.035985][T21752] 1 pages in swap cache
[  365.039307][T21752] Free swap  = 124992kB
[  365.040887][T21752] Total swap = 124996kB
[  365.044994][T21752] 1834877 pages RAM
[  365.046731][T21752] 0 pages HighMem/MovableOnly
[  365.049913][T21752] 390266 pages reserved
[  365.052416][T21752] 0 pages cma reserved
[  365.091677][T21760] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check.
[  365.102472][T21760] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  365.857687][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  366.001859][T21783] validate_nla: 1 callbacks suppressed
[  366.001873][T21783] netlink: 'syz.1.5251': attribute type 30 has an invalid length.
[  366.011218][T21783] netlink: 'syz.1.5251': attribute type 30 has an invalid length.
[  366.222251][T21797] syzkaller0: entered promiscuous mode
[  366.224391][T21797] syzkaller0: entered allmulticast mode
[  366.514395][T21821] netlink: 'syz.1.5263': attribute type 8 has an invalid length.
[  366.516965][T21821] sch_fq: defrate 0 ignored.
[  366.672074][T21835] macsec0: entered promiscuous mode
[  366.674963][T21835] macsec0: left promiscuous mode
[  366.678368][T21835] netlink: 'syz.1.5268': attribute type 1 has an invalid length.
[  366.897793][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  367.120776][T21845] netlink: 'syz.0.5271': attribute type 1 has an invalid length.
[  367.153247][T21845] bond22: (slave bridge16): making interface the new active one
[  367.156647][T21845] bond22: (slave bridge16): Enslaving as an active interface with an up link
[  367.214278][T21847] bond22: entered promiscuous mode
[  367.215908][T21847] bridge16: entered promiscuous mode
[  367.218894][T21847] bond22: entered allmulticast mode
[  367.221018][T21847] bridge16: entered allmulticast mode
[  367.223761][T21847] 8021q: adding VLAN 0 to HW filter on device bond22
[  367.386732][T21853] syz_tun: left promiscuous mode
[  367.390990][T21853] dummy0: left promiscuous mode
[  367.394644][T21853] 8021q: adding VLAN 0 to HW filter on device batadv0
[  367.401777][T21853] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  367.637475][T21865] __nla_validate_parse: 12 callbacks suppressed
[  367.637486][T21865] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5278'.
[  367.685710][T21867] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5279'.
[  367.702362][T21867] netlink: 'syz.0.5279': attribute type 30 has an invalid length.
[  367.772530][T21867] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5279'.
[  367.777809][T21867] netlink: 'syz.0.5279': attribute type 30 has an invalid length.
[  367.778885][T21871] netlink: 'syz.2.5281': attribute type 2 has an invalid length.
[  367.937786][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  368.293703][T21905] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5292'.
[  368.333676][T21918] netlink: 'syz.2.5296': attribute type 1 has an invalid length.
[  368.352047][T21918] 8021q: adding VLAN 0 to HW filter on device bond37
[  368.376256][T21918] vlan5: entered promiscuous mode
[  368.379520][T21918] bond37: entered promiscuous mode
[  368.383755][T21918] vlan5: entered allmulticast mode
[  368.389976][T21918] bond37: entered allmulticast mode
[  368.416283][T21918] bond37: (slave bridge20): making interface the new active one
[  368.419092][T21918] bridge20: entered promiscuous mode
[  368.420835][T21918] bridge20: entered allmulticast mode
[  368.423250][T21918] bond37: (slave bridge20): Enslaving as an active interface with an up link
[  368.655850][T21928] netlink: 'syz.2.5299': attribute type 11 has an invalid length.
[  368.815048][T21937] bond23: option packets_per_slave: invalid value (1129335124)
[  368.817389][T21937] bond23: option packets_per_slave: allowed values 0 - 65535
[  368.822729][T21937] bond23 (unregistering): Released all slaves
[  368.881114][T21941] syzkaller1: entered promiscuous mode
[  368.883363][T21941] syzkaller1: entered allmulticast mode
[  368.967735][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  369.009881][T21951] netlink: 7060 bytes leftover after parsing attributes in process `syz.2.5308'.
[  369.098828][T21954] lo speed is unknown, defaulting to 1000
[  369.126546][T21962] RDS: rds_bind could not find a transport for ::a00:0:0:0, load rds_tcp or rds_rdma?
[  369.183926][T21965] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5312'.
[  369.187872][T21965] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5312'.
[  369.277798][T21972] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5315'.
[  369.338909][T21972] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5315'.
[  369.377083][T21979] bond0: entered promiscuous mode
[  369.381496][T21979] batadv0: entered promiscuous mode
[  369.384261][T21979] hsr0: Slave A (bond0) is not up; please bring it up to get a fully working HSR network
[  369.391349][T21979] 8021q: adding VLAN 0 to HW filter on device hsr0
[  369.396712][T21979] bond0: left promiscuous mode
[  369.399749][T21979] batadv0: left promiscuous mode
[  369.481192][T21987] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5320'.
[  369.488189][T21987] xt_ipcomp: unknown flags 1D
[  369.833519][T22008] xfrm0: Caught tx_queue_len zero misconfig
[  369.835467][T22008] netem: change failed
[  369.941150][T22014] bond0: entered promiscuous mode
[  369.946429][T22014] batadv0: entered promiscuous mode
[  369.951693][T22014] hsr0: Slave A (bond0) is not up; please bring it up to get a fully working HSR network
[  369.957847][T22014] 8021q: adding VLAN 0 to HW filter on device hsr0
[  369.961592][T22014] bond0: left promiscuous mode
[  369.963702][T22014] batadv0: left promiscuous mode
[  370.007733][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  370.307049][T22032] veth18: entered allmulticast mode
[  370.321407][T22033] veth18: entered allmulticast mode
[  370.541537][T22052] syzkaller1: entered promiscuous mode
[  370.544042][T22052] syzkaller1: entered allmulticast mode
[  371.018115][T22088] validate_nla: 8 callbacks suppressed
[  371.018131][T22088] netlink: 'syz.1.5356': attribute type 30 has an invalid length.
[  371.057769][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  371.079442][T22097] netlink: 'syz.1.5359': attribute type 21 has an invalid length.
[  371.315883][T22115] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  371.379641][T22123] netlink: 'syz.0.5365': attribute type 30 has an invalid length.
[  371.429783][T22123] netlink: 'syz.0.5365': attribute type 30 has an invalid length.
[  371.473553][T22131] netlink: 'syz.2.5370': attribute type 11 has an invalid length.
[  371.476484][T22131] netlink: 'syz.2.5370': attribute type 5 has an invalid length.
[  371.587091][T22141] openvswitch: netlink: Flow key attr not present in new flow.
[  371.623072][T22144] netlink: 'syz.0.5374': attribute type 1 has an invalid length.
[  371.658113][T22149] netlink: 'syz.2.5376': attribute type 5 has an invalid length.
[  371.661298][T22148] x_tables: duplicate underflow at hook 1
[  371.764609][T22157] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  371.828114][T22153] netlink: 'syz.1.5375': attribute type 1 has an invalid length.
[  372.087790][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  372.539830][T22219] netlink: 'syz.2.5399': attribute type 11 has an invalid length.
[  372.542770][T22219] netlink: 'syz.2.5399': attribute type 5 has an invalid length.
[  372.592770][T22223] syzkaller0: entered promiscuous mode
[  372.598015][T22223] syzkaller0: entered allmulticast mode
[  372.745006][T22229] __nla_validate_parse: 16 callbacks suppressed
[  372.745017][T22229] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5404'.
[  372.750278][T22229] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5404'.
[  372.833800][T22236] netlink: 84 bytes leftover after parsing attributes in process `syz.2.5407'.
[  372.958890][T22242] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5409'.
[  372.983400][T22245] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5408'.
[  373.128157][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  373.313876][T22262] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5413'.
[  373.314296][T22268] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5417'.
[  373.320119][T22262] netlink: 'syz.1.5413': attribute type 30 has an invalid length.
[  373.333154][T22268] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[  373.360599][T22262] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5413'.
[  373.526148][T22291] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5424'.
[  373.530672][T22291] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5424'.
[  373.806132][T22305] block nbd0: server does not support multiple connections per device.
[  373.836141][T22305] block nbd0: shutting down sockets
[  373.961518][T22324] netlink: 'syz.0.5434': attribute type 11 has an invalid length.
[  373.964845][T22307] lo speed is unknown, defaulting to 1000
[  373.969953][T22313] RDS: rds_bind could not find a transport for ::a00:0:0:0, load rds_tcp or rds_rdma?
[  374.021453][T22321] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  374.167748][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  374.278691][T22347] 8021q: adding VLAN 0 to HW filter on device ipvlan0
[  374.372583][T22355] vlan6: entered promiscuous mode
[  374.376307][T22355] geneve1: entered promiscuous mode
[  374.379864][T22355] vlan6: entered allmulticast mode
[  374.381847][T22355] geneve1: entered allmulticast mode
[  374.581391][T22375] netlink: 'syz.2.5451': attribute type 11 has an invalid length.
[  374.686167][T22386] tc action pedit 'at' offset 6 out of bounds
[  375.170606][T22429] bridge: RTM_NEWNEIGH with unconfigured vlan 1 on bridge0
[  375.207774][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  375.391581][   T33] audit: type=1804 audit(1778284105.492:30): pid=22455 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.5478" name="/newroot/1802/cgroup.controllers" dev="tmpfs" ino=9204 res=1 errno=0
[  375.398869][   T33] audit: type=1800 audit(1778284105.492:31): pid=22455 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.5478" name="cgroup.controllers" dev="tmpfs" ino=9204 res=0 errno=0
[  375.728239][T22475] xt_HMARK: spi-set and port-set can't be combined
[  376.008373][T22505] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1500) !
[  376.013443][T22505] syzkaller0: entered promiscuous mode
[  376.015242][T22505] syzkaller0: entered allmulticast mode
[  376.247800][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  376.303847][T22527] 8021q: adding VLAN 0 to HW filter on device ipvlan3
[  376.306424][T22527] bond0: (slave ipvlan3): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  376.627110][T22554] validate_nla: 10 callbacks suppressed
[  376.627121][T22554] netlink: 'syz.0.5512': attribute type 30 has an invalid length.
[  376.631086][T22556] xt_addrtype: ipv6 does not support BROADCAST matching
[  376.668799][T22554] netlink: 'syz.0.5512': attribute type 30 has an invalid length.
[  377.297738][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  377.319700][T22615] lo speed is unknown, defaulting to 1000
[  377.326088][T22616] lo speed is unknown, defaulting to 1000
[  377.333365][   T33] audit: type=1804 audit(1778284107.432:32): pid=22618 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.5534" name="/newroot/1827/cgroup.controllers" dev="tmpfs" ino=9348 res=1 errno=0
[  377.347460][   T33] audit: type=1800 audit(1778284107.432:33): pid=22618 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.5534" name="cgroup.controllers" dev="tmpfs" ino=9348 res=0 errno=0
[  377.719751][T22636] netlink: 'syz.2.5540': attribute type 30 has an invalid length.
[  377.723311][T22636] netlink: 'syz.2.5540': attribute type 30 has an invalid length.
[  377.831519][T22645] netlink: 'syz.2.5544': attribute type 11 has an invalid length.
[  377.836193][T22645] netlink: 'syz.2.5544': attribute type 4 has an invalid length.
[  377.839889][T22645] __nla_validate_parse: 33 callbacks suppressed
[  377.839897][T22645] netlink: 199780 bytes leftover after parsing attributes in process `syz.2.5544'.
[  378.327715][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  378.569454][T22654] netlink: 7 bytes leftover after parsing attributes in process `syz.1.5548'.
[  378.584569][T22654] netlink: 7 bytes leftover after parsing attributes in process `syz.1.5548'.
[  378.709010][T22676] 8021q: adding VLAN 0 to HW filter on device ipvlan3
[  378.712277][T22676] bond0: (slave ipvlan3): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  379.367767][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  379.646713][T22707] netlink: 'syz.2.5562': attribute type 1 has an invalid length.
[  379.905877][T22721] netlink: 'syz.1.5569': attribute type 9 has an invalid length.
[  379.977163][T22725] 8021q: adding VLAN 0 to HW filter on device ipvlan3
[  379.980953][T22725] bond0: (slave ipvlan3): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  380.271219][T22750] netlink: 'syz.0.5581': attribute type 21 has an invalid length.
[  380.275043][T22750] netlink: 128 bytes leftover after parsing attributes in process `syz.0.5581'.
[  380.280801][T22750] netlink: 'syz.0.5581': attribute type 4 has an invalid length.
[  380.284118][T22750] netlink: 'syz.0.5581': attribute type 5 has an invalid length.
[  380.287277][T22750] netlink: 3 bytes leftover after parsing attributes in process `syz.0.5581'.
[  380.366560][T22751] syzkaller0: entered promiscuous mode
[  380.368723][T22751] syzkaller0: entered allmulticast mode
[  380.408961][T22759] netlink: 64 bytes leftover after parsing attributes in process `syz.1.5586'.
[  380.417831][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  381.458047][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  382.061733][T22771] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check.
[  382.196159][T22783] 8021q: adding VLAN 0 to HW filter on device ipvlan3
[  382.199041][T22783] bond0: (slave ipvlan3): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  382.372926][T22800] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  382.428734][T22803] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5600'.
[  382.432242][T22803] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5600'.
[  382.443124][T22810] netlink: 17 bytes leftover after parsing attributes in process `syz.2.5602'.
[  382.464651][T22810] dvmrp0: left allmulticast mode
[  382.466499][T22810] syz_tun: left allmulticast mode
[  382.486175][T22816] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5603'.
[  382.488920][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  382.491661][T22816] netlink: 'syz.0.5603': attribute type 30 has an invalid length.
[  382.494669][T22816] netlink: 'syz.0.5603': attribute type 30 has an invalid length.
[  382.617324][T22825] 8021q: adding VLAN 0 to HW filter on device ipvlan3
[  382.622036][T22825] bond0: (slave ipvlan3): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  382.692221][T22830] geneve3: entered allmulticast mode
[  383.102072][T22852] __nla_validate_parse: 3 callbacks suppressed
[  383.102089][T22852] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5615'.
[  383.152624][T22871] netlink: 'syz.2.5620': attribute type 11 has an invalid length.
[  383.155558][T22871] netlink: 'syz.2.5620': attribute type 5 has an invalid length.
[  383.158874][T22871] netlink: 6548 bytes leftover after parsing attributes in process `syz.2.5620'.
[  383.211947][T22874] openvswitch: netlink: VXLAN extension message has 3 unknown bytes.
[  383.242694][T22876] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5623'.
[  383.247006][T22874] lo speed is unknown, defaulting to 1000
[  383.257848][T22876] netlink: 'syz.1.5623': attribute type 30 has an invalid length.
[  383.274164][T22876] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5623'.
[  383.280214][T22876] netlink: 'syz.1.5623': attribute type 30 has an invalid length.
[  383.343989][T22874] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  383.433001][T22887] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5625'.
[  383.452804][T22887] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5625'.
[  383.475277][T22887] netlink: 80 bytes leftover after parsing attributes in process `syz.0.5625'.
[  383.492329][T22883] netlink: 64 bytes leftover after parsing attributes in process `syz.0.5625'.
[  383.527794][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  383.751964][T22909] netlink: 'syz.2.5633': attribute type 11 has an invalid length.
[  383.754556][T22909] netlink: 'syz.2.5633': attribute type 5 has an invalid length.
[  383.757947][T22909] netlink: 6548 bytes leftover after parsing attributes in process `syz.2.5633'.
[  383.875863][T22917] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5637'.
[  383.882993][T22917] netlink: 'syz.0.5637': attribute type 30 has an invalid length.
[  383.890884][T22917] netlink: 'syz.0.5637': attribute type 30 has an invalid length.
[  383.929794][T22919] team1: entered promiscuous mode
[  383.931630][T22919] team1: entered allmulticast mode
[  383.934517][T22919] 8021q: adding VLAN 0 to HW filter on device team1
[  383.965012][T22929] syzkaller1: entered promiscuous mode
[  383.966758][T22929] syzkaller1: entered allmulticast mode
[  384.161562][T22942] netlink: 'syz.1.5644': attribute type 11 has an invalid length.
[  384.164481][T22942] netlink: 'syz.1.5644': attribute type 5 has an invalid length.
[  384.280132][T22948] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  384.296891][T22948] batman_adv: batadv0: Removing interface: batadv_slave_1
[  384.577814][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  385.002718][T22965] 8021q: adding VLAN 0 to HW filter on device ipvlan3
[  385.006003][T22965] bond0: (slave ipvlan3): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  385.485109][T22978] netlink: 'syz.1.5656': attribute type 30 has an invalid length.
[  385.607717][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  385.626932][T22984] x_tables: arp_tables: NFQUEUE target: not valid for this family
[  385.663698][   T33] audit: type=1804 audit(1778284115.762:34): pid=22989 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.5661" name="/newroot/1910/cgroup.controllers" dev="tmpfs" ino=9770 res=1 errno=0
[  385.682379][   T33] audit: type=1800 audit(1778284115.762:35): pid=22989 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.5661" name="cgroup.controllers" dev="tmpfs" ino=9770 res=0 errno=0
[  385.709369][T22986] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  385.945017][T23014] xt_l2tp: v2 sid > 0xffff: 16777216
[  385.994464][T23016] syzkaller0: entered promiscuous mode
[  385.996332][T23016] syzkaller0: entered allmulticast mode
[  386.003383][T23018] netlink: 'syz.2.5672': attribute type 11 has an invalid length.
[  386.279241][T23032] xt_l2tp: v2 sid > 0xffff: 67108864
[  386.483195][T23048] xt_cgroup: xt_cgroup: no path or classid specified
[  386.559080][T23052] xt_l2tp: v2 sid > 0xffff: 285212672
[  386.647792][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  387.151542][T23074] syzkaller0: entered promiscuous mode
[  387.153715][T23074] syzkaller0: entered allmulticast mode
[  387.697750][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  388.737754][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  389.004614][T23076] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check.
[  389.024085][T23081] 8021q: adding VLAN 0 to HW filter on device ipvlan3
[  389.028757][T23081] bond0: (slave ipvlan3): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  389.060966][T23083] xt_l2tp: v2 sid > 0xffff: 3624009728
[  389.199094][T23099] __nla_validate_parse: 24 callbacks suppressed
[  389.199105][T23099] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5700'.
[  389.229130][T23099] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5700'.
[  389.234752][T23099] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5700'.
[  389.768260][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  390.066792][T23115] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5704'.
[  390.135552][T23118] validate_nla: 8 callbacks suppressed
[  390.135686][T23118] netlink: 'syz.0.5707': attribute type 1 has an invalid length.
[  390.141403][T23118] netlink: 'syz.0.5707': attribute type 2 has an invalid length.
[  390.144817][T23118] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5707'.
[  390.219481][T23121] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5708'.
[  390.222172][T23122] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5709'.
[  390.231382][T23121] netlink: 'syz.0.5708': attribute type 30 has an invalid length.
[  390.243574][T23121] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5708'.
[  390.252254][T23121] netlink: 'syz.0.5708': attribute type 30 has an invalid length.
[  390.333822][T23129] netlink: 180 bytes leftover after parsing attributes in process `syz.1.5712'.
[  390.435071][T23146] netlink: 3 bytes leftover after parsing attributes in process `syz.1.5716'.
[  390.443521][T23146] 0X: renamed from batadv0 (while UP)
[  390.461768][T23146] 0X: entered allmulticast mode
[  390.463758][T23146] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check.
[  390.807687][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  390.825296][   T33] audit: type=1804 audit(1778284120.922:36): pid=23187 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.5731" name="/newroot/1942/cgroup.controllers" dev="tmpfs" ino=9934 res=1 errno=0
[  390.828391][T23188] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 32, id = 0
[  390.844135][   T33] audit: type=1800 audit(1778284120.942:37): pid=23187 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.5731" name="cgroup.controllers" dev="tmpfs" ino=9934 res=0 errno=0
[  390.944887][T23198] netlink: 'syz.2.5735': attribute type 49 has an invalid length.
[  390.949842][T23198] netlink: 'syz.2.5735': attribute type 10 has an invalid length.
[  391.015950][T23206] netlink: 'syz.0.5738': attribute type 30 has an invalid length.
[  391.023822][T23206] netlink: 'syz.0.5738': attribute type 30 has an invalid length.
[  391.276435][T23237] 8021q: adding VLAN 0 to HW filter on device ipvlan1
[  391.283868][T23237] bond0: (slave ipvlan1): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  391.375654][   T33] audit: type=1804 audit(1778284121.472:38): pid=23247 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.5752" name="/newroot/1949/cgroup.controllers" dev="tmpfs" ino=9972 res=1 errno=0
[  391.387706][   T33] audit: type=1800 audit(1778284121.482:39): pid=23247 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.5752" name="cgroup.controllers" dev="tmpfs" ino=9972 res=0 errno=0
[  391.848244][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  392.085771][T23272] bond24: left allmulticast mode
[  392.089552][T23272] bridge14: left allmulticast mode
[  392.231462][T23273] bond38: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0)
[  392.235571][T23273] bond38 (unregistering): Released all slaves
[  392.246967][ T5668] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  392.252524][ T5668] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  392.258293][ T5668] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  392.266907][ T5668] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  392.273050][ T5668] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  392.280341][ T5668] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  392.291001][ T5668] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  392.297149][ T5668] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  392.542030][T23298] openvswitch: netlink: Missing key (keys=40, expected=2000)
[  392.897976][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  393.369266][T23310] bond38: (slave vcan1): refused to change device type
[  393.496750][T23320] raw_sendmsg: syz.1.5775 forgot to set AF_INET. Fix it!
[  393.500448][T23310] lo speed is unknown, defaulting to 1000
[  393.626069][T23330] netlink: 'syz.1.5777': attribute type 8 has an invalid length.
[  393.675877][T23334] netlink: 'syz.0.5780': attribute type 32 has an invalid length.
[  393.732193][T23334] bond23: option coupled_control: invalid value (12)
[  393.749180][T23334] bond23 (unregistering): Released all slaves
[  393.788957][T23337] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  393.856405][T23340] syzkaller0: entered promiscuous mode
[  393.862399][T23340] syzkaller0: entered allmulticast mode
[  393.927851][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  393.957224][   T33] audit: type=1804 audit(1778284124.052:40): pid=23350 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.5785" name="/newroot/1907/cgroup.controllers" dev="tmpfs" ino=9738 res=1 errno=0
[  393.973412][   T33] audit: type=1800 audit(1778284124.062:41): pid=23350 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.5785" name="cgroup.controllers" dev="tmpfs" ino=9738 res=0 errno=0
[  394.144229][T23358] nicvf0: tun_chr_ioctl cmd 2148553947
[  394.195801][T23362] geneve3: entered promiscuous mode
[  394.204263][T19672] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  394.210528][T19672] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  394.213743][T19672] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  394.217762][T19672] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  394.270916][T23366] : entered promiscuous mode
[  394.407336][T23379] bond0: (slave ipvlan5): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  394.691346][T23413] bond0: (slave ipvlan5): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  394.712240][T23410] __nla_validate_parse: 12 callbacks suppressed
[  394.712256][T23410] netlink: 816 bytes leftover after parsing attributes in process `syz.0.5807'.
[  394.920924][T23419] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5810'.
[  394.952842][T23419] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5810'.
[  394.977792][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  395.049732][T23439] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5814'.
[  395.071159][T23441] openvswitch: netlink: Unexpected mask (mask=40040, allowed=10048)
[  395.159990][T23439] batman_adv: batadv0: Interface deactivated: ip6gretap1
[  395.238647][   T12] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  395.243418][   T12] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  395.247028][   T12] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  395.250691][   T12] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  395.254104][   T12] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  395.257352][   T12] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  395.265425][   T12] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  395.268940][   T12] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  395.501400][T23450] validate_nla: 3 callbacks suppressed
[  395.501415][T23450] netlink: 'syz.0.5818': attribute type 2 has an invalid length.
[  395.606328][T23459] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5822'.
[  395.609553][T23459] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5822'.
[  395.716930][T23467] netlink: 'syz.1.5824': attribute type 1 has an invalid length.
[  395.719537][T23467] netlink: 'syz.1.5824': attribute type 3 has an invalid length.
[  395.722218][T23467] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5824'.
[  395.997359][T23473] syzkaller0: entered promiscuous mode
[  395.999396][T23473] syzkaller0: entered allmulticast mode
[  396.007845][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  396.604923][T23484] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5828'.
[  396.608630][T23484] netlink: 'syz.1.5828': attribute type 30 has an invalid length.
[  396.616036][T23484] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5828'.
[  396.621039][T23484] netlink: 'syz.1.5828': attribute type 30 has an invalid length.
[  396.670680][T23486] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5829'.
[  396.674275][T23486] unsupported nla_type 216
[  396.795541][T23490] netlink: 'syz.1.5831': attribute type 1 has an invalid length.
[  396.956204][   T33] audit: type=1107 audit(1778284127.052:42): pid=23505 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=''
[  396.960253][T23507] xt_CT: You must specify a L4 protocol and not use inversions on it
[  397.057777][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  397.965979][T23526] netlink: 'syz.1.5842': attribute type 30 has an invalid length.
[  397.974688][T23526] netlink: 'syz.1.5842': attribute type 30 has an invalid length.
[  398.087854][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  398.549031][   T33] audit: type=1804 audit(1778284128.652:43): pid=23540 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.5846" name="/newroot/1930/cgroup.controllers" dev="tmpfs" ino=9861 res=1 errno=0
[  398.556611][   T33] audit: type=1800 audit(1778284128.652:44): pid=23540 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.5846" name="cgroup.controllers" dev="tmpfs" ino=9861 res=0 errno=0
[  398.711079][T23545] xt_hashlimit: max too large, truncated to 1048576
[  398.713686][T23545] xt_hashlimit: Unknown mode mask 300, kernel too old?
[  399.137792][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  399.925768][T23586] netlink: 'syz.2.5861': attribute type 11 has an invalid length.
[  399.928511][T23586] netlink: 'syz.2.5861': attribute type 5 has an invalid length.
[  399.930840][T23586] __nla_validate_parse: 13 callbacks suppressed
[  399.930848][T23586] netlink: 6548 bytes leftover after parsing attributes in process `syz.2.5861'.
[  400.074862][T23597] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1514) !
[  400.092026][T23597] syzkaller0: entered promiscuous mode
[  400.093835][T23597] syzkaller0: entered allmulticast mode
[  400.167872][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  400.264844][T23601] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5868'.
[  400.357848][T23606] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5869'.
[  400.563776][T23611] team0: No ports can be present during mode change
[  400.683844][T23617] netlink: 'syz.0.5875': attribute type 4 has an invalid length.
[  400.686337][T23617] netlink: 17 bytes leftover after parsing attributes in process `syz.0.5875'.
[  401.211515][T23623] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5877'.
[  401.217746][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  401.335302][T23633] netlink: 'syz.1.5882': attribute type 11 has an invalid length.
[  401.338105][T23633] netlink: 'syz.1.5882': attribute type 5 has an invalid length.
[  401.340489][T23633] netlink: 6548 bytes leftover after parsing attributes in process `syz.1.5882'.
[  401.421095][T23638] netlink: 'syz.2.5884': attribute type 1 has an invalid length.
[  401.423948][T23638] netlink: 'syz.2.5884': attribute type 2 has an invalid length.
[  401.534379][T23646] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5886'.
[  401.674075][T23657] netlink: 44 bytes leftover after parsing attributes in process `syz.0.5891'.
[  401.690444][T23659] bond0: (slave ipvlan5): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  401.718293][T23661] netlink: 156 bytes leftover after parsing attributes in process `syz.1.5893'.
[  401.783279][T23668] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5895'.
[  402.247758][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  402.660810][T23746] syzkaller0: entered promiscuous mode
[  402.663025][T23746] syzkaller0: entered allmulticast mode
[  402.776496][   T33] audit: type=1107 audit(1778284132.872:45): pid=23750 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='_c^fXc;hXߴ@YQ#Delf!M'
[  402.781866][   T33] audit: type=1107 audit(1778284132.872:46): pid=23750 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='_c^fXc;hXߴ@YQ#Delf!M'
[  402.816761][T23754] netlink: 'syz.2.5917': attribute type 30 has an invalid length.
[  402.824728][T19672] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  402.827332][T23754] netlink: 'syz.2.5917': attribute type 30 has an invalid length.
[  402.829906][T19672] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  402.832955][T19672] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  402.841516][T19672] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  402.946126][T23765] sctp: [Deprecated]: syz.1.5920 (pid 23765) Use of int in max_burst socket option.
[  402.946126][T23765] Use struct sctp_assoc_value instead
[  402.975795][T23765] nicvf0: tun_chr_ioctl cmd 2148553947
[  403.059644][T23772] syzkaller1: entered promiscuous mode
[  403.061706][T23772] syzkaller1: entered allmulticast mode
[  403.219324][T23781] netlink: 'syz.1.5926': attribute type 30 has an invalid length.
[  403.228444][T23781] netlink: 'syz.1.5926': attribute type 30 has an invalid length.
[  403.287927][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  403.389868][T23789] ip6t_REJECT: TCP_RESET illegal for non-tcp
[  403.472536][T23796] netlink: 'syz.0.5930': attribute type 21 has an invalid length.
[  403.631418][T23801] lo speed is unknown, defaulting to 1000
[  404.090415][T23810] veth1_macvtap: renamed from veth0_vlan (while UP)
[  404.327759][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  404.405480][T23826] 8021q: adding VLAN 0 to HW filter on device ipvlan3
[  404.408301][T23826] bond0: (slave ipvlan3): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  404.586743][T23836] netlink: 'syz.1.5944': attribute type 30 has an invalid length.
[  404.911325][T23855] netlink: 'syz.2.5955': attribute type 11 has an invalid length.
[  404.968042][T23863] __nla_validate_parse: 17 callbacks suppressed
[  404.968054][T23863] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5956'.
[  404.977396][T23863] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5956'.
[  405.013591][T23863] xt_NFQUEUE: number of total queues is 0
[  405.024510][T23863] netlink: 44 bytes leftover after parsing attributes in process `syz.2.5956'.
[  405.203019][T23889] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5966'.
[  405.215943][T23889] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5966'.
[  405.297402][T23891] set match dimension is over the limit!
[  405.377797][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  405.526106][T23911] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5975'.
[  405.668482][T23914] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5974'.
[  405.727919][T23919] validate_nla: 6 callbacks suppressed
[  405.727937][T23919] netlink: 'syz.0.5978': attribute type 29 has an invalid length.
[  405.774966][T23919] netlink: 60 bytes leftover after parsing attributes in process `syz.0.5978'.
[  405.958345][T23934] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5983'.
[  405.972679][T23935] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.5982'.
[  406.417791][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  406.573949][T23951] 8021q: adding VLAN 0 to HW filter on device ipvlan1
[  406.576560][T23951] bond0: (slave ipvlan1): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  406.776835][T23962] netlink: 'syz.2.5991': attribute type 83 has an invalid length.
[  406.790113][T23962] ip6gretap5: default qdisc (pfifo_fast) fail, fallback to noqueue
[  407.352944][T24005] 8021q: adding VLAN 0 to HW filter on device ipvlan1
[  407.356214][T24005] bond0: (slave ipvlan1): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  407.447821][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  407.632888][T24014] netlink: 'syz.1.6004': attribute type 11 has an invalid length.
[  407.636107][T24014] netlink: 'syz.1.6004': attribute type 5 has an invalid length.
[  407.787846][T24028] netlink: 'syz.2.6008': attribute type 1 has an invalid length.
[  407.811291][T24028] 8021q: adding VLAN 0 to HW filter on device bond39
[  407.990326][T24035] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  408.092063][T24043] netlink: 'syz.0.6011': attribute type 1 has an invalid length.
[  408.142228][T24043] 8021q: adding VLAN 0 to HW filter on device bond23
[  408.149916][T24047] bond23: option tlb_dynamic_lb: unable to set because the bond device is up
[  408.306042][T24055] netlink: 'syz.0.6014': attribute type 30 has an invalid length.
[  408.338761][T19672] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  408.342006][T24055] netlink: 'syz.0.6014': attribute type 30 has an invalid length.
[  408.344944][T19672] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  408.355664][T19672] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  408.360926][T19672] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  408.487885][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  408.580906][T24073] netlink: 'syz.0.6019': attribute type 11 has an invalid length.
[  408.583301][T24073] netlink: 'syz.0.6019': attribute type 5 has an invalid length.
[  409.123428][T24104] lo speed is unknown, defaulting to 1000
[  409.527740][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  409.571685][T24136] netlink: 'syz.2.6038': attribute type 11 has an invalid length.
[  409.574256][T24136] netlink: 'syz.2.6038': attribute type 5 has an invalid length.
[  409.816349][T24165] netlink: 'syz.2.6047': attribute type 29 has an invalid length.
[  409.836741][T24163] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  409.847086][T24163] syzkaller0: entered promiscuous mode
[  409.855607][T24163] syzkaller0: entered allmulticast mode
[  409.870270][T24162] tipc: Resetting bearer <eth:syzkaller0>
[  409.887901][T24162] tipc: Disabling bearer <eth:syzkaller0>
[  409.981775][T24178] __nla_validate_parse: 81 callbacks suppressed
[  409.981793][T24178] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6050'.
[  410.011107][T24178] A link change request failed with some changes committed already. Interface > may have been left with an inconsistent configuration, please check.
[  410.033355][T24178] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6050'.
[  410.053362][T24178] A link change request failed with some changes committed already. Interface > may have been left with an inconsistent configuration, please check.
[  410.063130][T24182] veth1_to_bond: entered allmulticast mode
[  410.076045][T24182] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6051'.
[  410.088840][T24182] veth1_to_bond (unregistering): left allmulticast mode
[  410.237340][T24194] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6056'.
[  410.247500][T24198] x_tables: duplicate underflow at hook 1
[  410.471353][T24211] sch_tbf: peakrate 512 is lower than or equals to rate 15074843384341957408 !
[  410.475208][T24211] syzkaller0: entered promiscuous mode
[  410.476904][T24211] syzkaller0: entered allmulticast mode
[  410.577796][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  410.588428][T24219] netlink: 240 bytes leftover after parsing attributes in process `syz.1.6059'.
[  410.643294][T24222] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6063'.
[  410.677994][   T24] syzkaller0: tun_net_xmit 76
[  410.714314][T24222] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6063'.
[  411.617789][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  412.657704][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  412.732080][T24224] syzkaller0: entered promiscuous mode
[  412.734273][T24224] syzkaller0: entered allmulticast mode
[  413.697838][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  414.737968][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  414.799871][T24249] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6071'.
[  414.803218][T24249] validate_nla: 2 callbacks suppressed
[  414.803227][T24249] netlink: 'syz.1.6071': attribute type 30 has an invalid length.
[  414.818091][T24249] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6071'.
[  414.821521][T24249] netlink: 'syz.1.6071': attribute type 30 has an invalid length.
[  415.033468][T24276] netlink: 3 bytes leftover after parsing attributes in process `syz.1.6078'.
[  415.036853][T24276] 1X: renamed from 60X (while UP)
[  415.043670][T24276] A link change request failed with some changes committed already. Interface 61X may have been left with an inconsistent configuration, please check.
[  415.122638][T24282] team0: entered promiscuous mode
[  415.164402][T24285] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6081'.
[  415.224702][T24293] netlink: 'syz.0.6083': attribute type 4 has an invalid length.
[  415.229667][T24293] netlink: 'syz.0.6083': attribute type 4 has an invalid length.
[  415.304228][T24300] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6087'.
[  415.307569][T24300] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6087'.
[  415.611076][T24331] bridge0: port 3(veth0_virt_wifi) entered disabled state
[  415.613326][T24331] bridge0: port 2(bridge_slave_1) entered disabled state
[  415.615508][T24331] bridge0: port 1(bridge_slave_0) entered disabled state
[  415.625833][T24331] team0: left promiscuous mode
[  415.630066][T24331] 1X: left allmulticast mode
[  415.656682][T24331] team_slave_1: left promiscuous mode
[  415.659965][T24331] batman_adv: 61X: Interface deactivated: batadv_slave_0
[  415.662431][T24331] batadv_slave_0: left promiscuous mode
[  415.664181][T24331] batadv_slave_0: left allmulticast mode
[  415.675896][T24333] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6097'.
[  415.676426][T24331] 0: left allmulticast mode
[  415.681451][T24331] hsr_slave_0: left allmulticast mode
[  415.683083][T24331] hsr_slave_1: left allmulticast mode
[  415.692168][T24331] bond3: left promiscuous mode
[  415.693708][T24331] bond3: left allmulticast mode
[  415.695363][T24331] geneve2: left promiscuous mode
[  415.696901][T24331] geneve2: left allmulticast mode
[  415.699148][T24331] vlan0: left promiscuous mode
[  415.700664][T24331] geneve1: left promiscuous mode
[  415.702312][T24331] vlan0: left allmulticast mode
[  415.703873][T24331] geneve1: left allmulticast mode
[  415.705970][T24331] ip6erspan0: left allmulticast mode
[  415.708584][T24331] sit1: left promiscuous mode
[  415.710382][T24331] bond7: left promiscuous mode
[  415.711767][T24331] ip6gre1: left promiscuous mode
[  415.713402][T24331] ip6erspan1: left allmulticast mode
[  415.715083][T24331] geneve3: left promiscuous mode
[  415.716752][T24331] sit2: left allmulticast mode
[  415.719356][T24331] macsec2: left promiscuous mode
[  415.721225][T24331] bond11: left promiscuous mode
[  415.722788][T24331] vlan2: left allmulticast mode
[  415.724307][T24331] : left allmulticast mode
[  415.725681][T24331] bond_slave_0: left allmulticast mode
[  415.727333][T24331] @0: left allmulticast mode
[  415.729072][T24331] bond13: left promiscuous mode
[  415.730598][T24331] bond14: left promiscuous mode
[  415.732035][T24331] vti0: left promiscuous mode
[  415.733642][T24331] geneve5: left promiscuous mode
[  415.735136][T24331] geneve5: left allmulticast mode
[  415.737046][T24331] bond15: left promiscuous mode
[  415.738919][T24331] ipip1: left promiscuous mode
[  415.740604][T24331] ipip1: left allmulticast mode
[  415.742607][T24331] bond16: left promiscuous mode
[  415.744466][T24331] ip6tnl3: left allmulticast mode
[  415.751504][T24331] ip6gre4: left promiscuous mode
[  415.753214][T24331] ip6gre4: left allmulticast mode
[  415.761165][T24331] gtp1: left promiscuous mode
[  415.762636][T24331] gtp1: left allmulticast mode
[  415.767792][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  415.803112][T24331] bond21: left promiscuous mode
[  415.843651][T24331] team1: left promiscuous mode
[  415.845217][T24331] team1: left allmulticast mode
[  415.881339][T19672] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  415.887777][T19672] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  415.895299][T19672] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  415.898527][T19672] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  415.962929][T24350] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6100'.
[  416.038929][T24354] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6101'.
[  416.041755][T24355] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6101'.
[  416.104669][T24361] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6105'.
[  416.121591][T24361] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6105'.
[  416.235816][T24373] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[  416.244390][T24373] CPU: 0 UID: 0 PID: 24373 Comm: syz.0.6110 Not tainted syzkaller #0 PREEMPT(full) 
[  416.244405][T24373] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  416.244411][T24373] Call Trace:
[  416.244416][T24373]  <TASK>
[  416.244420][T24373]  dump_stack_lvl+0xe8/0x150
[  416.244436][T24373]  sysfs_warn_dup+0x8e/0xa0
[  416.244449][T24373]  sysfs_do_create_link_sd+0xc0/0x110
[  416.244461][T24373]  device_add_class_symlinks+0x1cf/0x240
[  416.244474][T24373]  device_add+0x475/0xbb0
[  416.244486][T24373]  wiphy_register+0x1fb1/0x2fe0
[  416.244503][T24373]  ? __pfx_wiphy_register+0x10/0x10
[  416.244511][T24373]  ? __pfx_netdev_run_todo+0x10/0x10
[  416.244521][T24373]  ? minstrel_ht_alloc+0x6e0/0x7e0
[  416.244535][T24373]  ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0
[  416.244552][T24373]  ieee80211_register_hw+0x3c53/0x4910
[  416.244567][T24373]  ? ieee80211_register_hw+0x1941/0x4910
[  416.244590][T24373]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  416.244601][T24373]  ? __asan_memset+0x22/0x50
[  416.244611][T24373]  ? __hrtimer_setup+0x1b7/0x260
[  416.244621][T24373]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  416.244634][T24373]  mac80211_hwsim_new_radio+0x3327/0x57e0
[  416.244658][T24373]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  416.244668][T24373]  ? kstrndup+0xbf/0x160
[  416.244681][T24373]  hwsim_new_radio_nl+0xe20/0x26e0
[  416.244690][T24373]  ? unwind_next_frame+0xa6/0x2550
[  416.244708][T24373]  ? is_bpf_text_address+0x26/0x2b0
[  416.244722][T24373]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  416.244733][T24373]  ? __kernel_text_address+0xd/0x30
[  416.244745][T24373]  ? unwind_get_return_address+0x4d/0x90
[  416.244755][T24373]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  416.244768][T24373]  ? arch_stack_walk+0xfb/0x150
[  416.244784][T24373]  ? stack_trace_save+0xa9/0x100
[  416.244795][T24373]  ? __pfx_stack_trace_save+0x10/0x10
[  416.244808][T24373]  ? stack_depot_save_flags+0x33/0x810
[  416.244837][T24373]  ? __nla_validate_parse+0x2480/0x2dc0
[  416.244856][T24373]  ? ____sys_sendmsg+0x972/0x9f0
[  416.244876][T24373]  ? ___sys_sendmsg+0x2a5/0x360
[  416.244907][T24373]  ? __pfx___nla_validate_parse+0x10/0x10
[  416.244933][T24373]  ? irqentry_exit+0x218/0x730
[  416.244970][T24373]  ? lockdep_hardirqs_on+0x7a/0x110
[  416.244989][T24373]  ? irqentry_exit+0x218/0x730
[  416.244996][T24373]  ? trace_irq_disable+0x3b/0x140
[  416.245021][T24373]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  416.245045][T24373]  genl_family_rcv_msg_doit+0x22a/0x330
[  416.245069][T24373]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  416.245086][T24373]  ? bpf_lsm_capable+0x9/0x20
[  416.245094][T24373]  ? security_capable+0x7e/0x2c0
[  416.245108][T24373]  genl_rcv_msg+0x61c/0x7a0
[  416.245121][T24373]  ? __pfx_genl_rcv_msg+0x10/0x10
[  416.245130][T24373]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  416.245147][T24373]  netlink_rcv_skb+0x232/0x4b0
[  416.245160][T24373]  ? __pfx_genl_rcv_msg+0x10/0x10
[  416.245169][T24373]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  416.245189][T24373]  ? down_read+0x270/0x2e0
[  416.245198][T24373]  ? genl_rcv+0xd/0x40
[  416.245207][T24373]  genl_rcv+0x28/0x40
[  416.245215][T24373]  netlink_unicast+0x75c/0x8e0
[  416.245231][T24373]  netlink_sendmsg+0x813/0xb40
[  416.245255][T24373]  ? __pfx_netlink_sendmsg+0x10/0x10
[  416.245280][T24373]  ? aa_sock_msg_perm+0xf1/0x1b0
[  416.245301][T24373]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  416.245317][T24373]  ____sys_sendmsg+0x972/0x9f0
[  416.245329][T24373]  ? __might_fault+0xaf/0x130
[  416.245348][T24373]  ? __pfx_____sys_sendmsg+0x10/0x10
[  416.245366][T24373]  ? import_iovec+0x73/0xa0
[  416.245380][T24373]  ___sys_sendmsg+0x2a5/0x360
[  416.245392][T24373]  ? __lock_acquire+0x6b5/0x2cf0
[  416.245403][T24373]  ? __pfx____sys_sendmsg+0x10/0x10
[  416.245418][T24373]  ? futex_wait+0x2a2/0x390
[  416.245442][T24373]  ? __fget_files+0x2a/0x420
[  416.245452][T24373]  ? __fget_files+0x3a0/0x420
[  416.245466][T24373]  __x64_sys_sendmsg+0x1bd/0x2a0
[  416.245479][T24373]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  416.245495][T24373]  ? rcu_is_watching+0x15/0xb0
[  416.245510][T24373]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  416.245519][T24373]  do_syscall_64+0x15f/0xf80
[  416.245526][T24373]  ? trace_irq_disable+0x3b/0x140
[  416.245541][T24373]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  416.245549][T24373] RIP: 0033:0x7f9af019cdd9
[  416.245559][T24373] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  416.245566][T24373] RSP: 002b:00007f9af0f9f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  416.245576][T24373] RAX: ffffffffffffffda RBX: 00007f9af0415fa0 RCX: 00007f9af019cdd9
[  416.245583][T24373] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000004
[  416.245590][T24373] RBP: 00007f9af0232d69 R08: 0000000000000000 R09: 0000000000000000
[  416.245595][T24373] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  416.245600][T24373] R13: 00007f9af0416038 R14: 00007f9af0415fa0 R15: 00007ffec4760588
[  416.245614][T24373]  </TASK>
[  416.665568][T24406] netlink: 'syz.1.6121': attribute type 298 has an invalid length.
[  416.807749][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  416.831830][T24408] syzkaller1: tun_chr_ioctl cmd 1074025677
[  416.835924][T24408] syzkaller1: Refused to change device type
[  416.954698][T24429] netlink: 'syz.0.6129': attribute type 7 has an invalid length.
[  417.042982][T24438] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported
[  417.095258][T24442] bond24: option min_links: invalid value (18446744073709551612)
[  417.097972][T24442] bond24: option min_links: allowed values 0 - 2147483647
[  417.101010][T24442] bond24 (unregistering): Released all slaves
[  417.197229][   T12] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  417.200151][   T12] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  417.203007][   T12] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  417.205581][   T12] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  417.781133][T24476] bond0: (slave ipvlan5): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  417.847762][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  417.850335][T24482] vti2: entered promiscuous mode
[  418.060439][T24507] sch_fq: defrate 4294967293 ignored.
[  418.100936][T24506] lo speed is unknown, defaulting to 1000
[  418.186897][   T24] lo speed is unknown, defaulting to 1000
[  418.189997][   T24] syz2: Port: 1 Link DOWN
[  418.674121][T24554] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  418.677088][T24554] syzkaller0: entered promiscuous mode
[  418.678988][T24554] syzkaller0: entered allmulticast mode
[  418.696010][T24554] tipc: Resetting bearer <eth:syzkaller0>
[  418.698324][T24554] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  418.702936][T24554] tipc: Resetting bearer <eth:syzkaller0>
[  418.716305][T24554] tipc: Disabling bearer <eth:syzkaller0>
[  418.820635][T24559] netlink: 'syz.0.6171': attribute type 1 has an invalid length.
[  418.887835][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  419.435111][T24573] netlink: 'syz.1.6176': attribute type 1 has an invalid length.
[  419.454738][T24573] bond22: (slave vxcan1): The slave device specified does not support setting the MAC address
[  419.459001][T24573] bond22: (slave vxcan1): Error -95 calling set_mac_address
[  419.520789][T24573] macvlan4: entered promiscuous mode
[  419.522494][T24573] macvlan4: entered allmulticast mode
[  419.524656][T24573] bond22: entered promiscuous mode
[  419.526991][T24573] 8021q: adding VLAN 0 to HW filter on device macvlan4
[  419.532281][T24573] bond22: left promiscuous mode
[  419.626530][T24582] 8021q: adding VLAN 0 to HW filter on device ipvlan1
[  419.629607][T24582] bond0: (slave ipvlan1): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  419.714657][T24584] veth0_to_bridge: Caught tx_queue_len zero misconfig
[  419.827233][   T12] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  419.830536][   T12] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  419.833895][   T12] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  419.836961][   T12] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  419.927740][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  420.141437][T24611] netem: incorrect gi model size
[  420.145283][T24611] netem: change failed
[  420.246964][T24619] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  420.328491][T24621] tipc: Enabling of bearer <udp:s> rejected, already enabled
[  420.349266][T24621] netlink: 'syz.1.6191': attribute type 4 has an invalid length.
[  420.417134][T24628] __nla_validate_parse: 33 callbacks suppressed
[  420.417146][T24628] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6192'.
[  420.516073][T24638] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6197'.
[  420.591004][T24648] bond23: option lacp_active: invalid value (8)
[  420.593917][T24648] bond23 (unregistering): Released all slaves
[  420.753281][T24650] Cannot find add_set index 4 as target
[  420.755864][T24650] netlink: 48 bytes leftover after parsing attributes in process `syz.1.6199'.
[  420.841906][T24654] IPVS: set_ctl: invalid protocol: 50 172.30.1.2:20003
[  420.977720][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  421.072417][T24661] 8021q: adding VLAN 0 to HW filter on device ipvlan1
[  421.075667][T24661] bond0: (slave ipvlan1): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  421.345396][T24671] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6207'.
[  421.355650][T24671] mac80211_hwsim hwsim3 wlan1: Caught tx_queue_len zero misconfig
[  421.369702][T24671] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.6207'.
[  421.451924][T24681] netlink: 'syz.1.6211': attribute type 4 has an invalid length.
[  421.689310][T24696] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6214'.
[  422.007794][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  422.008887][T24713] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6219'.
[  422.263961][T24728] netlink: 'syz.2.6224': attribute type 83 has an invalid length.
[  422.402675][T24732] netlink: 277 bytes leftover after parsing attributes in process `syz.1.6226'.
[  422.647457][T24732] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6226'.
[  422.772914][T24764] netlink: 'syz.0.6232': attribute type 1 has an invalid length.
[  422.811186][T24768] veth1_to_team: Caught tx_queue_len zero misconfig
[  423.029107][T24781] 8021q: adding VLAN 0 to HW filter on device ipvlan1
[  423.031466][T24781] bond0: (slave ipvlan1): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  423.057782][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  423.295054][T24799] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6246'.
[  423.311215][T24801] 8021q: adding VLAN 0 to HW filter on device ipvlan1
[  423.313582][T24801] bond0: (slave ipvlan1): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  423.351151][T15620] block nbd0: Receive control failed (result -1)
[  423.772631][T24829] bond0: (slave ipvlan5): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  423.995528][T24849] lo speed is unknown, defaulting to 1000
[  423.999943][T24849] lo speed is unknown, defaulting to 1000
[  424.002124][T24849] lo speed is unknown, defaulting to 1000
[  424.087744][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  424.118960][T24849] infiniband sqz0: set down
[  424.120782][ T7998] lo speed is unknown, defaulting to 1000
[  424.123062][T24849] infiniband sqz0: added lo
[  424.133511][T24849] smbdirect: ib_dev[sqz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000
[  424.139145][T24849] smbdirect: ib_dev[sqz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32
[  424.144136][T24849] smbdirect: ib_dev[sqz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005
[  424.166625][T24849] RDS/IB: sqz0: added
[  424.168670][T24849] smc: adding ib device sqz0 with port count 1
[  424.170844][T24849] smc:    ib device sqz0 port 1 has no pnetid
[  424.172770][ T7998] lo speed is unknown, defaulting to 1000
[  424.175490][T24849] lo speed is unknown, defaulting to 1000
[  424.298697][T24849] lo speed is unknown, defaulting to 1000
[  424.422958][T24849] lo speed is unknown, defaulting to 1000
[  424.701606][T24899] netlink: 'syz.1.6284': attribute type 12 has an invalid length.
[  424.703941][T24899] netlink: 'syz.1.6284': attribute type 29 has an invalid length.
[  424.775596][T24910] bond0: (slave ipvlan5): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  424.900290][T24923] netlink: 'syz.2.6291': attribute type 6 has an invalid length.
[  425.127827][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  425.187400][T24940] lo speed is unknown, defaulting to 1000
[  425.193482][T24940] lo speed is unknown, defaulting to 1000
[  425.265525][T24945] netlink: 'syz.2.6298': attribute type 2 has an invalid length.
[  425.271311][T24945] netlink: 'syz.2.6298': attribute type 1 has an invalid length.
[  426.085540][T24992] __nla_validate_parse: 18 callbacks suppressed
[  426.085554][T24992] netlink: 44 bytes leftover after parsing attributes in process `syz.0.6311'.
[  426.177730][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  426.247461][T24994] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6312'.
[  426.250771][T24994] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6312'.
[  426.315848][T25000] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  426.594585][T25017] netlink: 212348 bytes leftover after parsing attributes in process `syz.0.6317'.
[  426.694543][T25023] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6320'.
[  426.697358][T25023] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6320'.
[  426.700889][T25023] netlink: 'syz.1.6320': attribute type 14 has an invalid length.
[  426.703415][T25023] netlink: 'syz.1.6320': attribute type 11 has an invalid length.
[  427.135332][T25035] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6324'.
[  427.207970][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  427.300522][T25044] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6327'.
[  427.425918][T25052] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6329'.
[  427.562898][T25064] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6334'.
[  427.624416][T25075] vlan0: entered promiscuous mode
[  427.625842][T25075] bridge0: entered promiscuous mode
[  427.627510][T25075] vlan1: entered promiscuous mode
[  427.629555][T25075] geneve0: entered promiscuous mode
[  427.698792][T25078] sctp: [Deprecated]: syz.0.6338 (pid 25078) Use of int in max_burst socket option deprecated.
[  427.698792][T25078] Use struct sctp_assoc_value instead
[  427.831592][T25086] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  427.836306][T25086] syzkaller0: entered promiscuous mode
[  427.838767][T25086] syzkaller0: entered allmulticast mode
[  427.840740][T25088] netlink: 'syz.0.6343': attribute type 1 has an invalid length.
[  427.866415][T25088] bond24: entered promiscuous mode
[  427.869728][T25088] 8021q: adding VLAN 0 to HW filter on device bond24
[  427.874380][T25086] tipc: Resetting bearer <eth:syzkaller0>
[  427.918029][T25085] tipc: Resetting bearer <eth:syzkaller0>
[  427.932234][T25085] tipc: Disabling bearer <eth:syzkaller0>
[  427.997364][T25088] 8021q: adding VLAN 0 to HW filter on device bond24
[  428.000053][T25088] bond24: (slave vti2): The slave device specified does not support setting the MAC address
[  428.003060][T25088] bond24: (slave vti2): Setting fail_over_mac to active for active-backup mode
[  428.010436][T25088] bond24: (slave vti2): making interface the new active one
[  428.012732][T25088] vti2: entered promiscuous mode
[  428.015220][T25088] bond24: (slave vti2): Enslaving as an active interface with an up link
[  428.031107][   T12] 
[  428.031862][   T12] ======================================================
[  428.033899][   T12] WARNING: possible circular locking dependency detected
[  428.035945][   T12] syzkaller #0 Not tainted
[  428.037451][   T12] ------------------------------------------------------
[  428.039580][   T12] kworker/u8:0/12 is trying to acquire lock:
[  428.041266][   T12] ffffffff8ea85520 (fs_reclaim){+.+.}-{0:0}, at: __kmalloc_node_track_caller_noprof+0x9d/0x7b0
[  428.044949][   T12] 
[  428.044949][   T12] but task is already holding lock:
[  428.047722][   T12] ffff8881203fb530 (&idev->mc_lock){+.+.}-{4:4}, at: ipv6_mc_netdev_event+0xe1/0x5a0
[  428.051232][   T12] 
[  428.051232][   T12] which lock already depends on the new lock.
[  428.051232][   T12] 
[  428.054395][   T12] 
[  428.054395][   T12] the existing dependency chain (in reverse order) is:
[  428.056996][   T12] 
[  428.056996][   T12] -> #7 (&idev->mc_lock){+.+.}-{4:4}:
[  428.059447][   T12]        __mutex_lock+0x1a3/0x1550
[  428.061060][   T12]        ip6_mc_source+0x1cc/0x17e0
[  428.062694][   T12]        do_ipv6_mcast_group_source+0x435/0x4c0
[  428.064407][   T12]        do_ipv6_setsockopt+0x16e9/0x3150
[  428.066036][   T12]        ipv6_setsockopt+0x59/0x170
[  428.067533][   T12]        do_sock_setsockopt+0x17c/0x1b0
[  428.069140][   T12]        __x64_sys_setsockopt+0x13d/0x1b0
[  428.070758][   T12]        do_syscall_64+0x15f/0xf80
[  428.072231][   T12]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  428.074066][   T12] 
[  428.074066][   T12] -> #6 (sk_lock-AF_INET6){+.+.}-{0:0}:
[  428.076302][   T12]        lock_sock_nested+0x41/0x100
[  428.077840][   T12]        inet_shutdown+0x6a/0x390
[  428.079272][   T12]        nbd_mark_nsock_dead+0x2e9/0x560
[  428.080868][   T12]        recv_work+0x1c2e/0x1d40
[  428.082277][   T12]        process_scheduled_works+0xb5d/0x1860
[  428.084008][   T12]        worker_thread+0xa53/0xfc0
[  428.085494][   T12]        kthread+0x388/0x470
[  428.086789][   T12]        ret_from_fork+0x514/0xb70
[  428.088255][   T12]        ret_from_fork_asm+0x1a/0x30
[  428.089773][   T12] 
[  428.089773][   T12] -> #5 (&nsock->tx_lock){+.+.}-{4:4}:
[  428.091912][   T12]        __mutex_lock+0x1a3/0x1550
[  428.093329][   T12]        nbd_queue_rq+0x37b/0x1100
[  428.094815][   T12]        blk_mq_dispatch_rq_list+0xa70/0x1910
[  428.096554][   T12]        __blk_mq_sched_dispatch_requests+0xdcc/0x1600
[  428.098480][   T12]        blk_mq_sched_dispatch_requests+0xd7/0x190
[  428.100362][   T12]        blk_mq_run_hw_queue+0x348/0x4f0
[  428.101990][   T12]        blk_mq_dispatch_list+0xd16/0xe10
[  428.103652][   T12]        blk_mq_flush_plug_list+0x48d/0x570
[  428.105353][   T12]        __blk_flush_plug+0x3ed/0x4d0
[  428.106911][   T12]        __submit_bio+0x28d/0x580
[  428.108334][   T12]        submit_bio_noacct_nocheck+0x2f4/0xa40
[  428.110097][   T12]        block_read_full_folio+0x7b7/0x830
[  428.111705][   T12]        filemap_read_folio+0x137/0x3b0
[  428.113301][   T12]        do_read_cache_folio+0x358/0x590
[  428.114914][   T12]        read_part_sector+0xb6/0x2b0
[  428.116465][   T12]        adfspart_check_ICS+0xb1/0x960
[  428.117965][   T12]        bdev_disk_changed+0x817/0x1770
[  428.119507][   T12]        blkdev_get_whole+0x380/0x510
[  428.121054][   T12]        bdev_open+0x31e/0xd30
[  428.122463][   T12]        blkdev_open+0x470/0x610
[  428.123864][   T12]        do_dentry_open+0x785/0x14e0
[  428.125469][   T12]        vfs_open+0x3b/0x340
[  428.126996][   T12]        path_openat+0x2e08/0x3860
[  428.128492][   T12]        do_file_open+0x23e/0x4a0
[  428.129987][   T12]        do_sys_openat2+0x113/0x200
[  428.131695][   T12]        __x64_sys_openat+0x138/0x170
[  428.133564][   T12]        do_syscall_64+0x15f/0xf80
[  428.135030][   T12]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  428.136862][   T12] 
[  428.136862][   T12] -> #4 (&cmd->lock){+.+.}-{4:4}:
[  428.138961][   T12]        __mutex_lock+0x1a3/0x1550
[  428.140426][   T12]        nbd_queue_rq+0xc6/0x1100
[  428.141887][   T12]        blk_mq_dispatch_rq_list+0xa70/0x1910
[  428.143659][   T12]        __blk_mq_sched_dispatch_requests+0xdcc/0x1600
[  428.145525][   T12]        blk_mq_sched_dispatch_requests+0xd7/0x190
[  428.147289][   T12]        blk_mq_run_hw_queue+0x348/0x4f0
[  428.148886][   T12]        blk_mq_dispatch_list+0xd16/0xe10
[  428.150480][   T12]        blk_mq_flush_plug_list+0x48d/0x570
[  428.152095][   T12]        __blk_flush_plug+0x3ed/0x4d0
[  428.153687][   T12]        __submit_bio+0x28d/0x580
[  428.155137][   T12]        submit_bio_noacct_nocheck+0x2f4/0xa40
[  428.156908][   T12]        block_read_full_folio+0x7b7/0x830
[  428.158584][   T12]        filemap_read_folio+0x137/0x3b0
[  428.160182][   T12]        do_read_cache_folio+0x358/0x590
[  428.161766][   T12]        read_part_sector+0xb6/0x2b0
[  428.163301][   T12]        adfspart_check_ICS+0xb1/0x960
[  428.164873][   T12]        bdev_disk_changed+0x817/0x1770
[  428.166470][   T12]        blkdev_get_whole+0x380/0x510
[  428.168029][   T12]        bdev_open+0x31e/0xd30
[  428.169405][   T12]        blkdev_open+0x470/0x610
[  428.170825][   T12]        do_dentry_open+0x785/0x14e0
[  428.172360][   T12]        vfs_open+0x3b/0x340
[  428.173662][   T12]        path_openat+0x2e08/0x3860
[  428.175107][   T12]        do_file_open+0x23e/0x4a0
[  428.176473][   T12]        do_sys_openat2+0x113/0x200
[  428.177927][   T12]        __x64_sys_openat+0x138/0x170
[  428.179412][   T12]        do_syscall_64+0x15f/0xf80
[  428.180813][   T12]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  428.182658][   T12] 
[  428.182658][   T12] -> #3 (set->srcu){.+.+}-{0:0}:
[  428.184684][   T12]        __synchronize_srcu+0xca/0x300
[  428.186223][   T12]        elevator_switch+0x1e8/0x7a0
[  428.187701][   T12]        elevator_change+0x2cc/0x450
[  428.189152][   T12]        elevator_set_default+0x36c/0x430
[  428.190737][   T12]        blk_register_queue+0x3e9/0x4e0
[  428.192338][   T12]        __add_disk+0x677/0xd50
[  428.193752][   T12]        add_disk_fwnode+0xfb/0x480
[  428.195277][   T12]        nbd_dev_add+0x72c/0xb50
[  428.196670][   T12]        nbd_init+0x168/0x1f0
[  428.198035][   T12]        do_one_initcall+0x250/0x870
[  428.199548][   T12]        do_initcall_level+0x104/0x190
[  428.201138][   T12]        do_initcalls+0x59/0xa0
[  428.202496][   T12]        kernel_init_freeable+0x2a6/0x3e0
[  428.204198][   T12]        kernel_init+0x1d/0x1d0
[  428.205698][   T12]        ret_from_fork+0x514/0xb70
[  428.207222][   T12]        ret_from_fork_asm+0x1a/0x30
[  428.208818][   T12] 
[  428.208818][   T12] -> #2 (&q->elevator_lock){+.+.}-{4:4}:
[  428.211257][   T12]        __mutex_lock+0x1a3/0x1550
[  428.213106][   T12]        elevator_change+0x1b3/0x450
[  428.214623][   T12]        elevator_set_none+0xb5/0x140
[  428.216162][   T12]        blk_mq_update_nr_hw_queues+0x5e7/0x1a60
[  428.217897][   T12]        nbd_start_device+0x17f/0xb10
[  428.219346][   T12]        nbd_genl_connect+0x165b/0x1cf0
[  428.220855][   T12]        genl_family_rcv_msg_doit+0x22a/0x330
[  428.222504][   T12]        genl_rcv_msg+0x61c/0x7a0
[  428.223892][   T12]        netlink_rcv_skb+0x232/0x4b0
[  428.225328][   T12]        genl_rcv+0x28/0x40
[  428.226583][   T12]        netlink_unicast+0x75c/0x8e0
[  428.228039][   T12]        netlink_sendmsg+0x813/0xb40
[  428.229489][   T12]        ____sys_sendmsg+0x972/0x9f0
[  428.230956][   T12]        ___sys_sendmsg+0x2a5/0x360
[  428.232474][   T12]        __x64_sys_sendmsg+0x1bd/0x2a0
[  428.234157][   T12]        do_syscall_64+0x15f/0xf80
[  428.235749][   T12]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  428.237510][   T12] 
[  428.237510][   T12] -> #1 (&q->q_usage_counter(io)#50){++++}-{0:0}:
[  428.239916][   T12]        blk_alloc_queue+0x546/0x680
[  428.241454][   T12]        __blk_mq_alloc_disk+0x197/0x390
[  428.243121][   T12]        nbd_dev_add+0x499/0xb50
[  428.244521][   T12]        nbd_init+0x168/0x1f0
[  428.245812][   T12]        do_one_initcall+0x250/0x870
[  428.247336][   T12]        do_initcall_level+0x104/0x190
[  428.248915][   T12]        do_initcalls+0x59/0xa0
[  428.250359][   T12]        kernel_init_freeable+0x2a6/0x3e0
[  428.252015][   T12]        kernel_init+0x1d/0x1d0
[  428.253447][   T12]        ret_from_fork+0x514/0xb70
[  428.254936][   T12]        ret_from_fork_asm+0x1a/0x30
[  428.256449][   T12] 
[  428.256449][   T12] -> #0 (fs_reclaim){+.+.}-{0:0}:
[  428.258469][   T12]        __lock_acquire+0x15a5/0x2cf0
[  428.259991][   T12]        lock_acquire+0x106/0x350
[  428.261584][   T12]        fs_reclaim_acquire+0x71/0x100
[  428.263229][   T12]        __kmalloc_node_track_caller_noprof+0x9d/0x7b0
[  428.265249][   T12]        __alloc_skb+0x2c1/0x7d0
[  428.266639][   T12]        mld_newpack+0x14c/0xc90
[  428.268125][   T12]        add_grhead+0x5a/0x2a0
[  428.269516][   T12]        add_grec+0x1452/0x1740
[  428.270906][   T12]        mld_send_report+0x1ed/0x380
[  428.272438][   T12]        ipv6_mc_netdev_event+0x1b7/0x5a0
[  428.274086][   T12]        notifier_call_chain+0x1ad/0x3d0
[  428.275669][   T12]        call_netdevice_notifiers+0x90/0xd0
[  428.277360][   T12]        bond_resend_igmp_join_requests_delayed+0x61/0x170
[  428.277807][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  428.279463][   T12]        process_scheduled_works+0xb5d/0x1860
[  428.279478][   T12]        worker_thread+0xa53/0xfc0
[  428.285495][   T12]        kthread+0x388/0x470
[  428.287259][   T12]        ret_from_fork+0x514/0xb70
[  428.289193][   T12]        ret_from_fork_asm+0x1a/0x30
[  428.290904][   T12] 
[  428.290904][   T12] other info that might help us debug this:
[  428.290904][   T12] 
[  428.294750][   T12] Chain exists of:
[  428.294750][   T12]   fs_reclaim --> sk_lock-AF_INET6 --> &idev->mc_lock
[  428.294750][   T12] 
[  428.298428][   T12]  Possible unsafe locking scenario:
[  428.298428][   T12] 
[  428.300602][   T12]        CPU0                    CPU1
[  428.302289][   T12]        ----                    ----
[  428.303898][   T12]   lock(&idev->mc_lock);
[  428.305203][   T12]                                lock(sk_lock-AF_INET6);
[  428.307200][   T12]                                lock(&idev->mc_lock);
[  428.309287][   T12]   lock(fs_reclaim);
[  428.310450][   T12] 
[  428.310450][   T12]  *** DEADLOCK ***
[  428.310450][   T12] 
[  428.312740][   T12] 4 locks held by kworker/u8:0/12:
[  428.314213][   T12]  #0: ffff88811750b140 ((wq_completion)bond24#2){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860
[  428.317478][   T12]  #1: ffffc90000117c40 ((work_completion)(&(&bond->mcast_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860
[  428.321205][   T12]  #2: ffffffff8fdd02c0 (rtnl_mutex){+.+.}-{4:4}, at: bond_resend_igmp_join_requests_delayed+0x23/0x170
[  428.324377][   T12]  #3: ffff8881203fb530 (&idev->mc_lock){+.+.}-{4:4}, at: ipv6_mc_netdev_event+0xe1/0x5a0
[  428.327192][   T12] 
[  428.327192][   T12] stack backtrace:
[  428.328872][   T12] CPU: 0 UID: 0 PID: 12 Comm: kworker/u8:0 Not tainted syzkaller #0 PREEMPT(full) 
[  428.328883][   T12] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  428.328889][   T12] Workqueue: bond24 bond_resend_igmp_join_requests_delayed
[  428.328904][   T12] Call Trace:
[  428.328909][   T12]  <TASK>
[  428.328914][   T12]  dump_stack_lvl+0xe8/0x150
[  428.328925][   T12]  print_circular_bug+0x2e1/0x300
[  428.328937][   T12]  check_noncircular+0x12e/0x150
[  428.328948][   T12]  __lock_acquire+0x15a5/0x2cf0
[  428.328956][   T12]  ? kthread+0x388/0x470
[  428.328966][   T12]  ? ret_from_fork+0x514/0xb70
[  428.328973][   T12]  ? ret_from_fork_asm+0x1a/0x30
[  428.328985][   T12]  ? __kmalloc_node_track_caller_noprof+0x9d/0x7b0
[  428.328997][   T12]  lock_acquire+0x106/0x350
[  428.329005][   T12]  ? __kmalloc_node_track_caller_noprof+0x9d/0x7b0
[  428.329018][   T12]  fs_reclaim_acquire+0x71/0x100
[  428.329029][   T12]  ? __kmalloc_node_track_caller_noprof+0x9d/0x7b0
[  428.329039][   T12]  __kmalloc_node_track_caller_noprof+0x9d/0x7b0
[  428.329050][   T12]  ? mld_newpack+0x14c/0xc90
[  428.329080][   T12]  ? __alloc_skb+0x186/0x7d0
[  428.329090][   T12]  __alloc_skb+0x2c1/0x7d0
[  428.329101][   T12]  mld_newpack+0x14c/0xc90
[  428.329113][   T12]  ? __pfx_mld_newpack+0x10/0x10
[  428.329124][   T12]  ? __mutex_lock+0x32d/0x1550
[  428.329133][   T12]  add_grhead+0x5a/0x2a0
[  428.329142][   T12]  ? add_grec+0x1360/0x1740
[  428.329152][   T12]  add_grec+0x1452/0x1740
[  428.329162][   T12]  ? __pfx___mutex_lock+0x10/0x10
[  428.329172][   T12]  mld_send_report+0x1ed/0x380
[  428.329183][   T12]  ipv6_mc_netdev_event+0x1b7/0x5a0
[  428.329194][   T12]  notifier_call_chain+0x1ad/0x3d0
[  428.329206][   T12]  call_netdevice_notifiers+0x90/0xd0
[  428.329216][   T12]  ? __pfx_call_netdevice_notifiers+0x10/0x10
[  428.329224][   T12]  ? process_scheduled_works+0xa70/0x1860
[  428.329234][   T12]  bond_resend_igmp_join_requests_delayed+0x61/0x170
[  428.329245][   T12]  ? process_scheduled_works+0xa70/0x1860
[  428.329253][   T12]  process_scheduled_works+0xb5d/0x1860
[  428.329266][   T12]  ? __pfx_process_scheduled_works+0x10/0x10
[  428.329274][   T12]  ? assign_work+0x3d5/0x5e0
[  428.329282][   T12]  worker_thread+0xa53/0xfc0
[  428.329295][   T12]  kthread+0x388/0x470
[  428.329304][   T12]  ? __pfx_worker_thread+0x10/0x10
[  428.329311][   T12]  ? __pfx_kthread+0x10/0x10
[  428.329320][   T12]  ret_from_fork+0x514/0xb70
[  428.329328][   T12]  ? __pfx_ret_from_fork+0x10/0x10
[  428.329336][   T12]  ? __switch_to+0xc79/0x1410
[  428.329348][   T12]  ? __pfx_kthread+0x10/0x10
[  428.329357][   T12]  ret_from_fork_asm+0x1a/0x30
[  428.329369][   T12]  </TASK>
[  429.287817][    C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  430.327777][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  431.377691][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  432.407754][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  433.447673][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  434.487983][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  435.527722][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  436.567732][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  437.617721][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
