last executing test programs:

760.092831ms ago: executing program 1 (id=10344):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000400)=@filter={'filter\x00', 0x2, 0x4, 0x340, 0xffffffff, 0x1a0, 0x1a0, 0x1a0, 0xfeffffff, 0xffffffff, 0x270, 0x270, 0x270, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev, @empty, [0x0, 0x0, 0xff000000], [0x0, 0xffffff00], 'macsec0\x00', 'bond_slave_0\x00', {}, {}, 0x6, 0x0, 0x1, 0x8}, 0x2f2, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x8, 0x8c, 0x6}}}, {{@ipv6={@private0, @empty, [0x0, 0xffffffff], [0x0, 0x0, 0xffffffff, 0xff000000], 'sit0\x00', 'vxcan1\x00', {}, {}, 0x0, 0x0, 0x1}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@ipv6={@mcast2, @private2={0xfc, 0x2, '\x00', 0x1}, [0xff000000, 0xffffff00, 0xff, 0xff000000], [0xffffff00, 0x0, 0x0, 0xff], 'veth1_virt_wifi\x00', 'erspan0\x00', {0xff}, {}, 0x29, 0x4, 0x0, 0x10}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0xfe70, 0xa8, 0xd0}, {0x28}}}}, 0x3a0)

700.585286ms ago: executing program 1 (id=10345):
r0 = accept$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @dev}, &(0x7f0000000040)=0x10)
getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000080)={<r1=>0x0, @in={{0x2, 0x4e21, @loopback}}, 0x0, 0x1}, &(0x7f0000000140)=0x90)
getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000000180)={<r2=>r1, @in={{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}}, [0x3, 0xffffffffffffffc0, 0x9606, 0x3, 0x5, 0x100000001, 0x100, 0x6, 0x0, 0xfffffffffffffffb, 0x1, 0xffff, 0xffffffff, 0x7, 0x6]}, &(0x7f0000000280)=0x100)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000002c0)=0x1, 0x4)
r3 = socket(0x11, 0x66c7a023ff4b9fb6, 0xfff)
setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r3, 0x84, 0x23, &(0x7f0000000300)={r1, 0x4}, 0x8)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000340), r4)
r5 = syz_genetlink_get_family_id$gtp(&(0x7f00000003c0), r3)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x34, r5, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @local}, @GTPA_PEER_ADDRESS={0x8, 0x4, @local}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x24040010}, 0x20002004)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000500)={'wlan1\x00', <r6=>0x0})
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000540)={'wlan1\x00', <r7=>0x0})
r8 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0)
sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r3, &(0x7f0000000640)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x58, 0x0, 0x2, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x8, 0x70}}}}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r7}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x1, 0x6}}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x26}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x3, 0x5c}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4001}, 0x404c041)
ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r3, 0x8982, &(0x7f0000000680)={0x6, 'macvlan0\x00', {0x7}, 0x4})
r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000700), r4)
sendmsg$IEEE802154_LLSEC_ADD_DEV(r4, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x1c, r9, 0x0, 0x70bd25, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x10)
r10 = syz_genetlink_get_family_id$batadv(&(0x7f0000000840), r3)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000880)={'batadv0\x00', <r11=>0x0})
sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x2c, r10, 0x400, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r11}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000014}, 0x40)
sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000b00)={&(0x7f00000009c0)={0x140, 0x0, 0x8, 0x70bd25, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x38, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@multicast1}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x9}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x4}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x14e}, @IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x7}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x7d3e}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}, @IPVS_CMD_ATTR_DAEMON={0x24, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x9}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x24}}]}, @IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x9}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'nq\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_SERVICE={0x48, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@private=0xa010101}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2e}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x5}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wlc\x00'}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x7}]}]}, 0x140}, 0x1, 0x0, 0x0, 0x40040}, 0x0)
r12 = accept4$inet(r0, 0x0, &(0x7f0000000b80), 0x180400)
setsockopt$IP_VS_SO_SET_STOPDAEMON(r12, 0x0, 0x48c, &(0x7f0000000bc0)={0x0, 'macvtap0\x00', 0x3}, 0x18)
bind$inet(r3, &(0x7f0000000c00)={0x2, 0x4e21, @multicast2}, 0x10)
ioctl$sock_inet6_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000c40)={@private1, 0x43, r11})
r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000cc0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_REG(r3, &(0x7f0000000d80)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000d40)={&(0x7f0000000d00)={0x1c, r13, 0x100, 0x70bd26, 0x25dfdbfe, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x6c}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x4000)
r14 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r14, 0x84, 0x7c, &(0x7f0000000dc0)={r2, 0x8001, 0x8}, &(0x7f0000000e00)=0x8)
socket$nl_netfilter(0x10, 0x3, 0xc)

700.314224ms ago: executing program 1 (id=10346):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'bridge0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newlink={0x64, 0x10, 0xffffffffffffffff, 0x70bd26, 0x25dfdbee, {0x0, 0x0, 0x0, 0x0, 0x60c35}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @bond={{0x9}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_BOND_FAIL_OVER_MAC={0x5, 0xd, 0x2}, @IFLA_BOND_AD_ACTOR_SYS_PRIO={0x6, 0x18, 0x334}, @IFLA_BOND_ALL_SLAVES_ACTIVE={0x5, 0x11, 0x2}, @IFLA_BOND_AD_LACP_ACTIVE={0x5, 0x1d, 0x5}, @IFLA_BOND_RESEND_IGMP={0x8, 0xf, 0x800}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x64}, 0x1, 0x0, 0x0, 0x28001}, 0x400c850)
setsockopt$TIPC_GROUP_LEAVE(r0, 0x10f, 0x88)

530.164275ms ago: executing program 1 (id=10349):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, &(0x7f0000000000)={0x2c, 0x20c, '\x00', [@hao={0xc9, 0x10, @loopback}, @calipso={0x7, 0x38, {0x3, 0xc, 0x5, 0x10, [0x3, 0x10001, 0x80, 0x2, 0xdd8, 0x5]}}, @pad1, @jumbo={0xc2, 0x4, 0x7}, @ra={0x5, 0x2, 0x80}, @generic={0xc, 0x1000, "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"}, @jumbo={0xc2, 0x4, 0x4}]}, 0x1070)
r2 = accept(r1, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000001080)={<r3=>0x0, 0xfff}, &(0x7f00000010c0)=0x8)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000001140)={<r4=>r3, 0x30, &(0x7f0000001100)=[@in={0x2, 0x4e22, @multicast1}, @in={0x2, 0x4e24, @empty}, @in={0x2, 0x4e20, @multicast2}]}, &(0x7f0000001180)=0x10)
setsockopt$inet_sctp6_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f00000011c0)={r4, 0x6, 0x8, 0x641c}, 0x10)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000002780)=@raw={'raw\x00', 0x3c1, 0x3, 0x300, 0x0, 0x178, 0xc, 0x160, 0x178, 0x230, 0x258, 0x258, 0x230, 0x258, 0x3, 0x0, {[{{@ipv6={@private2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0x0, 0xffffffff], [0xffffffff, 0x0, 0xffffffff], 'wlan0\x00', 'netpci0\x00', {}, {}, 0x11}, 0x0, 0xf8, 0x160, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x1}}, @common=@unspec=@addrtype1={{0x28}, {0x242}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x12, 0x6, 0xa, 0x44, '\x00', 'syz1\x00', {0x3}}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x6, 0x0, 0x3}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x360)

524.37729ms ago: executing program 1 (id=10350):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x13, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x6a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x130}, 0x94)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vlan1\x00'})
setsockopt$WPAN_SECURITY_LEVEL(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000100)=0xfffffffe, 0x4)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f00000004c0)=',8Z', 0x3)
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000180)={<r3=>0xffffffffffffffff})
ioctl$SIOCGETLINKNAME(r3, 0x89e0, &(0x7f00000007c0))
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="0000000000004a641c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010001fff0000000001000000000000d7", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e0000000400028008000a00", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket(0x1, 0x803, 0x0)
r6 = socket$netlink(0x10, 0x3, 0x0)
r7 = socket(0x10, 0x803, 0x8)
sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x60, &(0x7f0000000300)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c00000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800b0001006772657461700000240002800800070064010100060003001008000008001500700f0d0008000700ac1414bb08000a00", @ANYRES32=r8], 0x5c}}, 0x40)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x90, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x60, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x50, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR_DATA={0x4c, 0x5, 0x0, 0x1, [{0xa, 0x4, @remote}, {0xa, 0x4, @random="f00b17f1b331"}, {0xa, 0x4, @remote}, {0xa}, {0xa, 0x4, @local}, {0xa, 0x4, @broadcast}]}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x90}}, 0x884)

449.219251ms ago: executing program 0 (id=10352):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x170bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe5, 0x10}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0xfffd}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001300)=@newtfilter={0x78, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {}, {0x8, 0x10}}, [@filter_kind_options=@f_fw={{0x7}, {0x44, 0x2, [@TCA_FW_POLICE={0x40, 0x2, [@TCA_POLICE_TBF={0x3c, 0x1, {0xffffffff, 0x0, 0x3, 0x0, 0x8, {0x5, 0x2, 0x0, 0xa, 0xccc}, {0x5, 0x1, 0x0, 0x6, 0x2, 0x4}, 0x1, 0x0, 0x800000}}]}]}}, @TCA_RATE={0x4, 0x5, {0x1}}]}, 0x78}}, 0x0)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r3)
sendmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000140)={0x44, r4, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x1c}, @NLBL_CIPSOV4_A_MLSCATLST={0x4, 0xc, 0x0, 0x1, [{0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x6}, @NLBL_CIPSOV4_A_MLSCATREM={0x8}]}]}]}, 0x44}}, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000035c0)=@newtaction={0xeb0, 0x30, 0xb, 0x0, 0x0, {}, [{0xe9c, 0x1, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x80006}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}, @m_pedit={0xe50, 0x2, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0xa, 0x1000, 0x8, 0x5, 0x3}, 0xa3}, [{0x6, 0x5, 0x9, 0x5, 0x5, 0x8}, {0x0, 0x4, 0x7, 0x7, 0x3, 0x3}, {0x0, 0x6, 0x324, 0x5, 0x10, 0x5}, {0x80, 0x8, 0xc, 0x7, 0x400, 0x1000}, {0x4, 0x0, 0x4, 0x6, 0xffffffd3, 0x6}, {0xf, 0x2, 0x8001, 0xfffffffa, 0x800, 0xe5d}, {0xf, 0x6d7, 0x7, 0x1000, 0x2, 0xff}, {0x4, 0x0, 0x6, 0x4, 0x7, 0x1}, {0xe8b, 0x8, 0x7, 0x3, 0x8, 0x8}, {0x45ca, 0x8, 0x0, 0x5, 0x0, 0x5}, {0xd0c, 0x4, 0x7, 0x800, 0x4, 0x5}, {0x4, 0x0, 0x7f, 0x8, 0xb4, 0x3}, {0x5, 0x100, 0x2, 0x1ff, 0x10000, 0xffffffff}, {0x6, 0x3, 0x9, 0x6, 0x6, 0xfffffff8}, {0x7f, 0x3, 0x2, 0x5, 0x563, 0x8}, {0x0, 0x9, 0x87, 0x5, 0x8, 0x800}, {0x5, 0x585e, 0x6, 0x3, 0x400, 0x7}, {0x7, 0x6fc, 0x7fff, 0x6, 0x6, 0x4}, {0x3, 0xef0a, 0x9, 0x4, 0x7c1103b4, 0x5}, {0x7f, 0x4, 0x5, 0x1, 0x6, 0xffff}, {0x80, 0x56, 0x4, 0x9, 0xfffffff4, 0xdff}, {0x7, 0x1, 0x2400, 0x81, 0x0, 0x2}, {0x8, 0x3, 0x4, 0x1, 0xffff8f3e, 0x94e}, {0x0, 0x80, 0x5, 0xc5c3, 0x5, 0xb}, {0xfb, 0x540fb8a0, 0x3, 0x400, 0x8000, 0x8001}, {0xfcf, 0xe0, 0x3, 0x4, 0x1000, 0x4923fb63}, {0x6, 0x5, 0xff, 0x7ff, 0x3, 0x401}, {0x4745c803, 0x9, 0x9, 0x6e, 0x39, 0x9}, {0x0, 0x0, 0x4, 0x3, 0x5, 0x4b9d252f}, {0x40000000, 0x0, 0x7d1, 0xb7, 0x7, 0x8}, {0x9909, 0x3, 0x800, 0x1, 0x7b, 0xffffffc0}, {0x3, 0x200, 0x1, 0x81, 0x10, 0x401}, {0xfffffff4, 0x1, 0x3, 0x10000, 0x5, 0x1}, {0x6, 0xcc6e, 0xee1, 0x3ff, 0xa4f, 0x3}, {0x9, 0x6, 0xc, 0x7, 0x23, 0x200}, {0x5, 0x3, 0x0, 0x6, 0x2, 0x100}, {0x1ff, 0x78d, 0x7, 0x5, 0x942d, 0x8}, {0x6, 0x9, 0xf, 0x401, 0x0, 0xe6}, {0xffffffe8, 0x81, 0x8000, 0x40, 0x0, 0xf192d4b}, {0x5, 0x100, 0x6, 0x4, 0x7, 0x400}, {0x8000, 0x5, 0x4, 0x4, 0x3, 0x8cfa}, {0x0, 0x9, 0x9, 0x2, 0x4, 0x1}, {0x4, 0x7, 0x5, 0x3ff, 0x8, 0x80000000}, {0xb, 0x6, 0x3dcd, 0x5, 0x0, 0x7}, {0x4, 0x7f, 0x8, 0x7, 0xa, 0xdc5}, {0x3, 0x5, 0x6543, 0x8, 0x5, 0x4}, {0x9, 0x1ab, 0xf, 0x7, 0x8001, 0x8}, {0xe, 0x6, 0xfffffc00, 0x9876, 0x81, 0x9}, {0x3, 0x10001, 0xa, 0x400, 0x4c9e, 0xffffff01}, {0x0, 0xce000000, 0xe, 0xfffffff9, 0x401, 0x6}, {0x6, 0xf, 0x2, 0x0, 0x5, 0x2}, {0x80000001, 0x2, 0xf9, 0x9, 0x2, 0x4}, {0x1, 0x400, 0x5, 0x200, 0xed, 0x3}, {0x7, 0x7, 0x899, 0x1000, 0xfff, 0xfffffffb}, {0x3, 0x1, 0xe2, 0x6, 0x160, 0xb8}, {0x3, 0x0, 0xbf6, 0x3, 0x0, 0x81}, {0x2000009, 0x1, 0xed, 0x11e, 0x7fffffff, 0x7}, {0x100, 0xc, 0x7, 0xaa, 0x50000, 0x7fff}, {0x3, 0x19a8, 0x6, 0x529, 0x4, 0x9c2}, {0x4, 0xb, 0x9, 0x3, 0x5, 0x8001}, {0x9, 0x5ad, 0x1, 0x4, 0x10000, 0x25}, {0x0, 0x2, 0x3, 0x1, 0x6, 0x80}, {0x101, 0x1, 0x5, 0xb, 0x1a0d, 0xad47}, {0x9, 0x8, 0x3, 0xb, 0x8, 0xce65}, {0xd, 0x10000000, 0x0, 0x7, 0x7, 0xeee}, {0x9, 0xc8, 0x9e1, 0x55, 0x2, 0x2}, {0x15bd, 0x6, 0x68d, 0x10001, 0xb, 0x5}, {0x1, 0x9, 0x59a, 0x1, 0x6, 0x3ff}, {0x8456, 0x7, 0x3, 0x0, 0x7, 0x2}, {0x759, 0x11, 0x3, 0x9, 0x3, 0x628}, {0x3, 0x4, 0x4, 0x1, 0x9, 0x2}, {0xc71, 0x2, 0x6, 0x7fff, 0x9, 0x5c0}, {0x1, 0x1, 0x5, 0x7, 0xde9, 0x8}, {0x8, 0xfffffffe, 0x1, 0x3, 0x7, 0x36}, {0x0, 0x8, 0x4c6, 0x0, 0x7863, 0x1}, {0x0, 0x8, 0x7152, 0x5, 0x1, 0x6}, {0x0, 0xe08, 0x7, 0x9, 0x7, 0x8}, {0x3, 0xcb86, 0x100, 0x976, 0x935, 0x800}, {0x4, 0x40, 0x0, 0x2, 0x2, 0x80000000}, {0x3, 0x3, 0x0, 0x15, 0x3, 0xa}, {0x4, 0x7fc, 0xb2, 0x7, 0x1}, {0x3, 0x6f15, 0x101, 0x401, 0x8, 0x1}, {0x1, 0x1, 0x0, 0x800, 0x1, 0xfffffe01}, {0x8, 0xa, 0x8000, 0x3, 0x0, 0x6}, {0x6, 0x1, 0x1, 0x46a, 0x5, 0x8001}, {0x0, 0x9a9, 0x9, 0x29b, 0xfffffffc, 0x5}, {0x9, 0x3e0, 0x4, 0x80000001, 0x6, 0x80000000}, {0x6, 0xd, 0xfffffffc, 0x325, 0x8, 0x1}, {0x7fff, 0x7, 0x3ff, 0x0, 0x6}, {0x100, 0xfffffc00, 0x2e, 0x5, 0xfffffffa, 0x9}, {0x0, 0x8f, 0x100, 0x3, 0x4, 0x7}, {0x7ff, 0x4, 0x435d, 0x125, 0x10, 0xfffffff9}, {0x36, 0x2, 0xf, 0xfffffffd, 0x3, 0x8}, {0x7, 0x7, 0x1, 0x0, 0x6, 0x10001}, {0xd609, 0xcd6, 0x0, 0x3, 0xfffffba5, 0x401}, {0x8, 0x7fff, 0x37, 0x8d45, 0x952f, 0x8}, {0x8, 0x4, 0x8, 0x8, 0x0, 0x5}, {0xffff, 0x80000000, 0x8, 0x3ff, 0xff, 0x2}, {0x6, 0xb, 0x9, 0x6, 0x1, 0x1}, {0x4, 0x8, 0x7, 0x0, 0x4, 0x297efd19}, {0x663e, 0x8, 0x81, 0x1, 0x7, 0x8001}, {0x5, 0x2, 0x4b42, 0x5, 0x5, 0x401}, {0xa20, 0xfffffffa, 0x5, 0x6, 0x0, 0xae}, {0x7fff, 0x800, 0x6, 0x262e, 0x5, 0x2}, {0x7fffffff, 0x4, 0x3, 0x2, 0x5, 0xb339}, {0x96, 0x758, 0x9, 0x400, 0x3ff, 0x5}, {0x3, 0x7, 0x4, 0x4, 0x7, 0x9}, {0x3, 0x2, 0x9, 0x7, 0x4, 0xb5}, {0x8, 0x0, 0x2, 0x9, 0x2, 0x200}, {0xff, 0xaf9a, 0x0, 0x7, 0x1, 0x6}, {0xe, 0x9, 0xf, 0x1, 0x460, 0x7}, {0x5e82, 0x0, 0x32, 0xffffffff, 0x81, 0x6}, {0x2, 0x2, 0xfff, 0x1728, 0x200, 0x7}, {0x7, 0x3, 0x6, 0x8, 0x1, 0x6}, {0x7f, 0xfff, 0x9, 0xe037, 0x3, 0xfffffff7}, {0xa0000000, 0xd, 0x8000, 0xf05, 0x6, 0x6b}, {0xffffffff, 0x8, 0x5f94, 0xfffff1f5, 0x7fffffff, 0x1000}, {0x0, 0x3e2, 0x9, 0xfffffffb, 0x0, 0x9}, {0x1, 0x5, 0x9, 0x0, 0x800, 0x401}, {0x513f, 0x8, 0x0, 0x80000000, 0x28e, 0x9}, {0x2, 0x8, 0x80, 0x3, 0x9f8, 0x80000001}, {0x80000001, 0xc1, 0x4, 0xeb3, 0x40000005, 0x2568}, {0xc14c, 0x6, 0x2, 0x71, 0x3062, 0x7}, {0x9, 0x2, 0xd920, 0x1, 0x8, 0x1}, {0x7f, 0x9, 0x7, 0x4, 0xdd2b}, {0x0, 0x8000, 0x819, 0x8, 0x81, 0xb8}, {0x5, 0x2, 0x7, 0x0, 0x2, 0x687d7ec1}, {0x8, 0x80, 0xfffffff7, 0x8001, 0x4, 0x6}], [{0x0, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x4}, {0x5, 0x1}, {0x5}, {}, {0x3}, {0x2, 0x1}, {0x3}, {0x5, 0x1}, {0x3}, {0x3, 0x1}, {0x4}, {}, {0x4, 0x1}, {}, {0x5}, {0x4}, {0x2, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x1}, {}, {0x7, 0x1}, {}, {0x2}, {0x3}, {0x1}, {}, {0x4, 0x1}, {}, {0x0, 0x1}, {0x4, 0x1}, {0x1}, {0x3}, {0x5}, {}, {0x5, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x2}, {0x4, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x1}, {}, {0x4, 0x1}, {0x5, 0x1}, {}, {0x1}, {0x6}, {}, {0x1}, {0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x5}, {0x3, 0x1}, {0x2, 0x1}, {0x2, 0x7e76235531e31529}, {0x2}, {0x3, 0x1}, {0xa}, {0x4}, {}, {0x2, 0x1}, {0x0, 0x1}, {0x4}, {0x6}, {0x4}, {0x4, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x4}, {}, {0x5}, {0x0, 0x1}, {0x5}, {0x2}, {0x3, 0x1}, {0x6}, {0x5, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x5}, {0x0, 0x1}, {0x0, 0x1}, {0x2}, {0x5}, {0x1, 0x1}, {0x5}, {0x2, 0x1}, {0x4}, {0x5, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x3}, {0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x4}, {0x5}, {0x1, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {}, {0x2}, {0x5, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x1}], 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xeb0}}, 0x0)

448.4061ms ago: executing program 0 (id=10353):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r1)
sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x24, r2, 0x3, 0x70bd2d, 0x0, {}, [@TIPC_NLA_BEARER={0x10, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xb, 0x1, @l2={'eth', 0x3a, 'lo\x00'}}]}]}, 0x24}}, 0x4044844)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ipvlan0\x00', <r3=>0x0})
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000500)=@newlink={0x3c, 0x10, 0x503, 0x70bd2a, 0xc, {0x0, 0x0, 0x0, 0x0, 0x3a, 0x201a8}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x3c}}, 0x800)
r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x7, 0x0, 0x1, 0x0, '\x00', r3, 0xffffffffffffffff, 0x1, 0x0, 0x3}, 0x50)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@bloom_filter={0x1e, 0x2, 0x73c, 0x1000, 0x818, 0xffffffffffffffff, 0x0, '\x00', r3, 0xffffffffffffffff, 0x5, 0x2, 0x5, 0xb}, 0x50)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r7, &(0x7f0000000100)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r7, 0x0)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000006c0)={0xffffffffffffffff, <r8=>0xffffffffffffffff}, 0x4)
r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x4, '\x00', r3, 0xffffffffffffffff, 0x4}, 0x50)
r10 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x18, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8f, 0x0, 0x0, 0x0, 0xb}, {{0x18, 0x1, 0x1, 0x0, r10}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x700}, {0x85, 0x0, 0x0, 0x86}}, {}, [@jmp={0x5, 0x1, 0x0, 0xa, 0x0, 0x6}, @printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x530a}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x2a}}}, &(0x7f0000000080)='GPL\x00', 0x9, 0x1000, &(0x7f0000000cc0)=""/4096, 0x41100, 0x3}, 0x94)
r11 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000780)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1, 0x2}, 0x50)
r12 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r12}, &(0x7f0000000080), &(0x7f00000004c0)}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r12, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r13 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
writev(r13, &(0x7f0000000240)=[{&(0x7f0000000280)="0232e6fefa8ce2d4c14866321c084bb58c3dd1666a19af3cf299188914a89370a50d9126b6ecb773704fb3e6430d12727a375df737de35a42869d1e92883480dcb474e020000000000000000", 0x4c}, {&(0x7f00000003c0)="1a36c585f33853c08764d056a86d003cbaf5cde47e5f51052d82c19aa66d403a08c07bbbe72da665341d6592092455897fe84a54e94a0000000000000000000080", 0x41}], 0x2)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r13, 0x0)
r14 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b000000050000000004000009000000"], 0x48)
r15 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r14], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r15, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r1, 0x4048587b, &(0x7f0000000e40)={{<r16=>r0, &(0x7f0000000800)='*\'\x00', 0x32000, &(0x7f0000000840)={@align, {0x4, 0x8466, 0x8001, 0x2}}, 0xed, &(0x7f0000000880), &(0x7f00000008c0)=0x3}, 0x4, &(0x7f0000000dc0)=[{0x2, 0x8, &(0x7f0000000900)='\x00', &(0x7f0000000940)="c058e795eec0bcda5cf39a63427319b33c22fd9667c5bcc5d5bf8ea8c1c0e4c9e4d2bd4b2b001c8c53bcb0d632ec07e65a804bed9df38e82f11c657ea0a3f8349d3251ae46eabbbebb2fd5ddd1e68c0770bf9624d0adc48512c39b84670a20e47733e2e31e29007f26781545de24b740aee9fda630a168efc053b1d4f5fa475b48546ba1b29d6323e577b64367ba7a2a06b08c1ce5b7844638cae6e1e74287620e17e16d3eb9019dd8c72e36b6ae5b4df233ea5bc8772947ae408a9f1fd80de5c1c6c01999f9091217440238cdb215b213bef69f0203fe8a1a", 0xd9, 0x1a}, {0x1, 0x20, &(0x7f0000000a40)='ipvlan0\x00', &(0x7f0000000a80)="30e5476a60ec0808ed171fb9930c5058ed505b86104ffb1345e5771b63f1d27a8bf4ea6450cb671da667e2f7fc653c01022be7317d983ef071d01950461b06eb3d20709f33d27635df4816b35c97f5d9d6cc8b7aa632024f50573271664224b7406db02d15c1d3f98e8bb18d440a123a1e66a121f72b0a50c66736519e1263b3e59c1af9ad6165172c3ebe4b0e060f1f38bfd0269fce6d0b2a", 0x99, 0x16}, {0x2, 0x0, &(0x7f0000000b40)='ipvlan0\x00', &(0x7f0000000b80)="b781d3aa5aeea54f0e4d4232027aaa20905a5f2dd7b48776607207aefe5bf0ef57a1befd814b153585657171b4d330ce845f7224672f0b8d36cec3aeeda5c80cd11b2e036959e581f6e2a2edbf242095727eaa93e86dd255c46aa9b52571a3e64357cf755eda54ad0752b5a70b77ed4b8f793f936ac3e0c4e9ce29a7e0478d85ed970d745e86123ecb38672b08ebea0a48311d2823e56898229480223ea4347eef9da6f700b345809fe19e98eadefdb9bd980f91ce2dfe0c32bf29baa6012a8a89085c373b02a464c96708a8a1e42266f7b7b9b312874c003570d0aedfe5b8a64d6a123b4a1845a5a6", 0xe9, 0xa}, {0x3, 0x8, &(0x7f0000000c80)='\x00', &(0x7f0000000cc0)="9d2a0e58fb7a1c5711650e89c7412f25502b7a29470870a50cfc6cc8254970aedea0c3dfafab5292f37c92707dd9d11323523654b3fc16b68b21a93593e75ae094a4290e459b010febace148900dc3102c7926be6e39ade14a96c91f47f754057d9c9bea9583e26e9536e7396fce13cf410480ff62d37b77601dd993d8a8c4c9aae34617a0b3ace951a3e62cb185f31fdc7099552b6c19ab0f29e8c75c552db008850e946af8a6940f1f6dd88def398ce946650e09b8ac5577464861fd0439b5af90657b56f126029e1efaa1ca05680ad48916a0fe35a82b832bd8931b3b5c0d", 0xe0, 0x22}]})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000f40)={0x11, 0x20, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@map_idx={0x18, 0x8, 0x5, 0x0, 0x5}, @map_val={0x18, 0x8, 0x2, 0x0, r6, 0x0, 0x0, 0x0, 0xc}, @generic={0x1, 0xb, 0x9, 0x6, 0x1}, @map_idx_val={0x18, 0x6, 0x6, 0x0, 0x6, 0x0, 0x0, 0x0, 0x4b90435e}, @printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xc}}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0xf}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000440)='syzkaller\x00', 0x1, 0xe0, &(0x7f0000000540)=""/224, 0x41000, 0x1, '\x00', r3, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x5, 0x5}, 0x8, 0x10, &(0x7f0000000680)={0x1, 0x9, 0x8, 0x4}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000ec0)=[r7, r8, r9, r10, r11, r12, r13, r14, 0xffffffffffffffff, r16], &(0x7f0000000f00)=[{0x2, 0x3, 0xa, 0x5}], 0x10, 0x7}, 0x94)

379.636923ms ago: executing program 1 (id=10354):
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000340))
r0 = socket$igmp(0x2, 0x3, 0x2)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={0xffffffffffffffff, 0x58, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r1=>0x0}}, 0x10)
setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000140)={0x1, 0x1, 0x9, 0x400000c5, @vifc_lcl_addr=@dev={0xac, 0x14, 0x14, 0x3b}, @remote}, 0x10)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a44, 0x1700)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r4 = getpid()
sendmsg$nl_route(r2, &(0x7f0000000600)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)=@getlink={0x54, 0x12, 0x200, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, 0x120, 0x100}, [@IFLA_NET_NS_PID={0x8, 0x13, r4}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_GSO_MAX_SEGS={0x8, 0x28, 0xf30e}, @IFLA_PROTO_DOWN={0x5, 0x27, 0x1}, @IFLA_TXQLEN={0x8, 0xd, 0x8001}, @IFLA_LINK_NETNSID={0x8, 0x25, 0x4}, @IFLA_IFALIASn={0x4}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x4000004)
write$cgroup_type(r3, &(0x7f00000000c0), 0x9)
sendfile(r3, r2, 0x0, 0x10000)
r5 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'dummy0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r6, {0xfff4, 0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080)
r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000080)=0xffffffffffffffff, 0x4)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0x2, 0x401, 0x7ff, 0x20200, r2, 0x5, '\x00', r6, r7, 0x5, 0x3, 0x0, 0x5}, 0x50)
unshare(0x6a040000)
r8 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r8, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@multicast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x4f}}, {{@in6=@mcast2, 0x404d3, 0x2b}, 0x0, @in=@empty}}, 0xe4)
r9 = socket$key(0xf, 0x3, 0x2)
setsockopt$sock_int(r9, 0x1, 0x8, &(0x7f00000001c0), 0x4)
r10 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000140)=@getneigh={0x14, 0x1e, 0x1, 0x70bd2c, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x45844}, 0x0)
sendmsg$key(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0)
r11 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$sock_int(r11, 0x1, 0xf, &(0x7f0000000000)=0x20, 0x4)
listen(r11, 0x0)
close(r11)
socket$inet6_sctp(0xa, 0x1, 0x84)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000280)={'wlan1\x00'})

300.07874ms ago: executing program 0 (id=10355):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x38, 0x40, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x1c, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}, @typed={0xe, 0x15, 0x0, 0x0, @str='wireguard\x00'}]}, @nested={0x4, 0x2}]}, 0x38}}, 0xc000)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000240)={'ip6gre0\x00', &(0x7f00000001c0)={'syztnl0\x00', <r1=>0x0, 0x2f, 0x8, 0x0, 0x101, 0x10, @private0, @local, 0x8, 0x80, 0x3, 0x95d}})
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', r1, 0xffffffffffffffff, 0x3, 0x4}, 0x50)
r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000e40)=ANY=[@ANYRES16=r2, @ANYRES16=r2], 0x50)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003200)=@newsa={0x15c, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x0, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {0x800, 0x192, 0x2, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0x7}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @lifetime_val={0x24, 0x9, {0xf, 0xedcb, 0x9, 0x100}}]}, 0x15c}, 0x1, 0x0, 0x0, 0x8801}, 0x0)
ioctl$XFS_IOC_PATH_TO_FSHANDLE(r4, 0xc0385868, &(0x7f0000000940)={<r5=>0xffffffffffffffff, &(0x7f00000004c0)='\x00', 0x80, &(0x7f0000000500)={@align=0x9, {0x4, 0x81, 0x9}}, 0x7ff, &(0x7f0000000540)={@_ha_fsid}, &(0x7f0000000580)=0x2})
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000600)={0x8, <r6=>0x0}, 0x8)
r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a80)={0x6, 0x11, &(0x7f0000000640)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@btf_id={0x18, 0x4, 0x3, 0x0, 0x1}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000700)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000740)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000780)={0x1, 0xb, 0xffff, 0x5}, 0x10, 0x0, 0x0, 0x4, &(0x7f00000007c0)=[r3, r2, r2, r3, r3, r3, r2], &(0x7f0000000800)=[{0x2, 0x1, 0xb, 0xc}, {0x0, 0x4, 0x9, 0x9}, {0x5, 0x3, 0x8, 0xc}, {0x2, 0x2, 0xb, 0x1}], 0x10, 0x68}, 0x94)
r8 = ioctl$TUNGETDEVNETNS(r5, 0x54e3, 0x0)
sendmsg$GTP_CMD_ECHOREQ(r5, &(0x7f0000000dc0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d00)=ANY=[@ANYBLOB="600059fd", @ANYRES16=0x0, @ANYBLOB="200026bd7000fbdbdf250300000014000c00fe80000000000000000000000000000b0c000300040000000000000014000c00ff02000000000000000000000000000108000700", @ANYRES32=r8, @ANYBLOB='\b\x00\a\x00', @ANYRES32=r5, @ANYBLOB="0600060004000000"], 0x60}, 0x1, 0x0, 0x0, 0x8000}, 0x4)
sendmsg$MPTCP_PM_CMD_SET_LIMITS(r0, &(0x7f0000000e00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x12000200}, 0xc, &(0x7f0000000a40)={&(0x7f0000000980)={0xa8, 0x0, 0x400, 0x70bd2c, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xa2}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x8}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x1}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x9}, @MPTCP_PM_ATTR_ADDR={0x54, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}]}]}, 0xa8}}, 0x8000)
bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x1f, 0x6, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ffffffff00000100006759f2d3955db7e82b088793009500000000000000e8185500"], &(0x7f00000001c0)='GPL\x00', 0xdde, 0xce, &(0x7f00000003c0)=""/206, 0x41100, 0x78, '\x00', 0x0, @fallback=0x29, r5, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r6, r7, 0x9, &(0x7f0000000b40)=[r2, r2, r3, r3, r3], &(0x7f0000000b80)=[{0x0, 0x1, 0x1, 0x6}, {0x4, 0x4, 0x10, 0x6}, {0x1, 0x3, 0x5, 0xc}, {0x2, 0x3, 0x5, 0x8}, {0x2, 0x9, 0xb, 0x8}, {0x1, 0x1, 0x4, 0x7}, {0x5, 0x3, 0xb, 0xf}, {0x5, 0x1, 0x7, 0x3}, {0x2, 0x3, 0xb, 0x3}], 0x10, 0xff8a}, 0x94)
r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0xe, &(0x7f0000000340)=@raw=[@call={0x85, 0x0, 0x0, 0xa4}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}}], &(0x7f00000003c0)='GPL\x00', 0x32, 0x0, 0x0, 0x40f00, 0x12, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x8, 0x5}, 0x8, 0x10, &(0x7f0000000440)={0x3, 0x7, 0x3ff, 0x8}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000480)=[0x1, 0x1, 0x1], &(0x7f00000004c0)=[{0x5, 0x5, 0x5, 0x4}, {0x4, 0x3, 0x2, 0xb}, {0x4, 0x5, 0x1, 0x9}, {0x1, 0x4, 0x5, 0x6}], 0x10, 0x9}, 0x94)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x64, 0x31, 0x1, 0x70bd27, 0x0, {0x4}, [@nested={0x4, 0xe}, @generic="ca91f0a46dd52801991b7ddc0751dacb7b80e771c37e5db9bc836887a6e62b5db0db41b44fbb3a398dee043dc0e42a5437e37fc9217584fb95ec06c6e0e9bf9ee2a1168ef8dd56478901c8"]}, 0x64}, 0x1, 0x0, 0x0, 0x42804}, 0x50)
r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r11, <r12=>0xffffffffffffffff}, 0x4)
r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r10)
ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000500)={'wlan1\x00', <r14=>0x0})
sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r12, &(0x7f00000005c0)={&(0x7f0000000140), 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x34, r13, 0x800, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r14}, @val={0xc, 0x99, {0x3, 0x65}}}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0xc040}, 0x20004800)
r15 = socket$inet6(0xa, 0x2, 0x0)
r16 = bpf$MAP_CREATE(0x0, &(0x7f0000000f40)=ANY=[@ANYBLOB="1200000005000000080000000900000000000000", @ANYRES32, @ANYBLOB="000000000000000000000000000020000001000043cb9c92a55aea18565ccb4d44d2a97d75b26f5362dc7e336389115d7cb5e74c4b987e51ba68b00a435ccbe1c10102e0ade16eaef66b13f24ecf9bdb148fe4d97476964c0dc54d0d82c01f60a1252ed8abffcf6c1ada14d668953b8ac61e8cf8951f21b6ea984d247f9c75fbd357b73a1ef1bfeb58e8f05f1981bf88466a18a5b669495f7b6c1cdef4f3f42e44f274d39f2c492aeeb0e136d217c83d5cf67c09c80a77149e554be7fd770ffb060ba6167d2c14cfea88d82a128cddf3eb0e34ce437884ab246b28b4ca90", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r16, &(0x7f0000000240), &(0x7f00000000c0)=@udp6=r15}, 0x20)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000640)={{}, &(0x7f00000005c0), &(0x7f0000000600)='%pK    \x00'}, 0x20)
ioctl$XFS_IOC_PATH_TO_HANDLE(r0, 0xc0385869, &(0x7f0000000ec0)={r0, &(0x7f0000000f40), 0x60002, &(0x7f0000000e80)={@_ha_fsid={[0xfffffff8, 0x400]}, {0x1, 0xfffa, 0xa000000, 0x8}}, 0x3f8, &(0x7f0000000700), &(0x7f0000000f00)=0x80})
r17 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000005380)={0x6, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r17], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x59, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x0, 0x6, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xfffffffd}, [@generic={0x5, 0xb, 0x5, 0x4}, @map_val={0x18, 0x3, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x5}]}, &(0x7f0000000080)='syzkaller\x00', 0x1, 0x5a, &(0x7f00000000c0)=""/90, 0x41100, 0x15, '\x00', r1, @fallback=0x5, r0, 0x8, &(0x7f00000002c0)={0x9, 0x3}, 0x8, 0x10, &(0x7f0000000300)={0x0, 0x7, 0x9, 0x2}, 0x10, r6, r9, 0x1, &(0x7f00000007c0), &(0x7f0000000800)=[{0x1, 0x2, 0xe, 0x2}], 0x10, 0x5}, 0x94)

298.581209ms ago: executing program 2 (id=10356):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0xc}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfff}, 0x94)
sendmsg$NL80211_CMD_SET_REG(r0, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000180)={0x30, r1, 0x1, 0x70bd25, 0x25dfdb7f, {}, [@NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'b\x00'}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x4}, @NL80211_ATTR_REG_RULES={0xc, 0x22, 0x0, 0x1, [{0x4}, {0x4}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4040001}, 0x2400c000)

203.549476ms ago: executing program 2 (id=10357):
unshare(0x20000400)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1, 0x1, 0x40, 0x40, 0x41, 0xffffffffffffffff, 0xfffffffe}, 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000840), &(0x7f00000003c0), 0x1003, r0}, 0x38)
bpf$MAP_LOOKUP_ELEM(0x15, &(0x7f0000000b80)={r0, &(0x7f00000005c0), &(0x7f0000000b40)=""/31}, 0x20)
r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='blkio.throttle.io_service_bytes_recursive\x00', 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x16, &(0x7f0000000200)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x10001}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@jmp={0x5, 0x1, 0x4, 0x6, 0xb, 0x0, 0x1}, @initr0={0x18, 0x0, 0x0, 0x0, 0xffffff2c, 0x0, 0x0, 0x0, 0x4946}, @alu={0x4, 0x0, 0x2, 0xa, 0x7, 0xfffffffffffffff4, 0xfffffffffffffff0}, @map_idx={0x18, 0x2, 0x5, 0x0, 0xe}, @generic={0x4, 0x2, 0x7, 0x6, 0x59ed}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)

202.076156ms ago: executing program 0 (id=10358):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$sock_linger(r1, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8)
connect$inet6(r1, &(0x7f0000002140)={0xa, 0x4e25, 0x1, @ipv4={'\x00', '\xff\xff', @remote}, 0x5}, 0x1c)
sendmmsg$inet6(r1, &(0x7f0000003cc0)=[{{0x0, 0x91, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
r3 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x7ffe}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2b, 0x2, {0x0, 0x0, 0x0, r4, {0xe, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29d}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0xfffff55a, 0x4, 0x2, 0x3, 0x9}, 0x22}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x884}, 0x2)
close(r2)
socket(0x10, 0x3, 0x0)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=ANY=[@ANYBLOB="300000001800dd8d00000000000000000a000000000000060000000008001e0002"], 0x30}}, 0x4090)
r6 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000007c0)=ANY=[@ANYRES32=r6, @ANYRES32=r2, @ANYRESHEX=r0, @ANYRES32=0x0, @ANYRES16=r0, @ANYBLOB="965ff4ab80f264cb6eabf3b2bc1e5d20a4eac4c31c443575fb34320f5eddb99458195cda8937d2ecbaed4305e79ae6bcf2cd7dc5ac3e512f0cbb93432d4d56bc84fa8bf2b3233b4645bf88a05ae1f9296a7fe9d489e4dd9e6d6923d058212ecdf6f48deebe283b4decbcfeec65064ac3ccf8bac62135e8874eec4426275929ea30bdabd04ed9fbe7bf4d1e8216bb714df0b64c19e74960314679d9e478aeed82a8deb6ae8eb30524c4db46032201f29e3fc9afcfe5c3bb1c0aa685faf4663848007c4d007437d11a735f5ce53d18a2fb07ca08cfe44af182668e739b8b", @ANYBLOB="8c325b51e6a96c13352abb"], 0x3c}, 0x1, 0x11, 0x0, 0x4040020}, 0x0)
r7 = socket(0x10, 0x3, 0x0)
sendmmsg$alg(r7, &(0x7f0000000140), 0x4924b68, 0x0)
r8 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r8, 0x107, 0xf, &(0x7f0000000600), 0x56)
sendmsg$kcm(r8, &(0x7f0000000280)={&(0x7f0000000540)=@xdp={0x2c, 0x0, r4, 0x42}, 0x80, &(0x7f00000000c0)=[{&(0x7f00000002c0)="27030200dc0f14000e00203c002400004000ff8400000066c1532cc10200000003125ce882cbf490d90812533f00", 0x2e}], 0x1}, 0x4005)

150.755959ms ago: executing program 2 (id=10359):
socket$inet_udp(0x2, 0x2, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), 0xffffffffffffffff) (async)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x14}, 0x0)

150.267156ms ago: executing program 2 (id=10360):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x8, 0x4, 0x4, 0x9}, 0x50) (async)
close(0x3) (async)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014}, 0x50) (async)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(fcrypt)\x00'}, 0x58) (async)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000412ff8)="3665a1ab415b7ac7", 0x8) (async)
r3 = accept(r2, 0x0, 0x0)
sendmmsg$alg(r3, &(0x7f0000000740)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000001c0)="564004c6852da7a299e4c397614090d1a6e12edf1767f157", 0xfcdc}], 0x1, &(0x7f0000000480)=[@op={0x18, 0x117, 0x3, 0x1}], 0x7}], 0x1, 0x0) (async)
recvmsg(r2, &(0x7f000000b680)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000200)=""/12}, {&(0x7f0000000300)=""/162, 0xfffffffffffffe4b}], 0x2}, 0x10000) (async)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xa, 0x8, &(0x7f0000000240)=ANY=[@ANYBLOB="1809000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7030000070000008500000021000000b70000000000000095"], &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x200}, [@call={0x85, 0x0, 0x0, 0x5a}]}, &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x27, '\x00', 0x0, @fallback=0x8eceb2e30985c02b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94)
ioctl$EXT4_IOC_MOVE_EXT(r4, 0xc028660f, &(0x7f00000000c0)={0x0, r1, 0x1dc, 0x7, 0xa235, 0xffff})

99.727803ms ago: executing program 2 (id=10361):
r0 = socket(0x2a, 0x2, 0x0)
getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x3ff, 0x1, 0xfffffff8, 0x0, 0x7, 0x7f, 0x8, 0x5, 0x1}}}}]}, 0x58}}, 0x44884)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000025c0)=@newtfilter={0x20c, 0x2c, 0xd27, 0x70bd2d, 0x25dfdffd, {0x0, 0x0, 0x0, r1, {0x6}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_basic={{0xa}, {0x1dc, 0x2, [@TCA_BASIC_CLASSID={0x61, 0x1, {0x2, 0xc}}, @TCA_BASIC_CLASSID={0x0, 0x1, {0xf, 0xc}}, @TCA_BASIC_EMATCHES={0x4}, @TCA_BASIC_ACT={0x0, 0x3, [@m_bpf={0x0, 0x20, 0x0, 0x0, {{}, {0x0, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_NAME={0x0, 0x6, './file0\x00'}, @TCA_ACT_BPF_PARMS={0x0, 0x2, {0x6, 0x3, 0xffffffffffffffff, 0x102b, 0x3}}, @TCA_ACT_BPF_OPS_LEN={0x0, 0x3, 0x3}, @TCA_ACT_BPF_OPS_LEN={0x0, 0x3, 0x3}, @TCA_ACT_BPF_PARMS={0x0, 0x2, {0x80, 0x5, 0x0, 0x4, 0x8}}, @TCA_ACT_BPF_OPS_LEN={0x0, 0x3, 0x1}, @TCA_ACT_BPF_PARMS={0x0, 0x2, {0x9ad, 0xf1, 0x2, 0x10000, 0x101}}, @TCA_ACT_BPF_OPS_LEN={0x0, 0x3, 0xa}, @TCA_ACT_BPF_FD={0x0, 0x5, r0}, @TCA_ACT_BPF_NAME={0x0, 0x6, './file0\x00'}]}, {0x0, 0x6, "e34dddbd29e127d2258cc3fe083180c78d354a50eb489fe35aabec255cbb8604c6b69cbb4a4749274ea6616d43ef209244b4024c42e3a4b1f5a730c2a2851f2cc9588c086e48cb788c5fb894844050842ff57c0ac7b4a30ea02d36"}, {0x0, 0x7, {0x1}}, {0x0, 0x8, {0x1, 0x2}}}}, @m_mpls={0x0, 0x17, 0x0, 0x0, {{}, {0x0, 0x2, 0x0, 0x1, [@TCA_MPLS_TTL={0x0, 0x7, 0x8}]}, {0x0, 0x6, "c2fcd4e8b992df7b121e86f9e226f6428fc608d968615c1233bd73caa8289891dcd8180567f1f5968d37f49822928ca3a44e0fc93fac"}, {0x0, 0x7, {0x0, 0x1}}, {0x0, 0x8, {0x2, 0x1}}}}, @m_skbmod={0x0, 0x1c, 0x0, 0x0, {{}, {0x0, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x0, 0x2, {{0x4, 0x6, 0xd, 0x6, 0x14f1}, 0x3}}, @TCA_SKBMOD_ETYPE={0x0, 0x5, 0x9}, @TCA_SKBMOD_SMAC={0x0, 0x4, @broadcast}, @TCA_SKBMOD_DMAC, @TCA_SKBMOD_DMAC={0x0, 0x3, @link_local}, @TCA_SKBMOD_DMAC={0x0, 0x3, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}}, @TCA_SKBMOD_PARMS={0x0, 0x2, {{0x4, 0x820, 0xffffffffffffffff, 0x1, 0x8}, 0xe}}, @TCA_SKBMOD_PARMS={0x0, 0x2, {{0x8, 0x4, 0xffffffffffffffff, 0xf, 0x2}, 0x3}}, @TCA_SKBMOD_SMAC, @TCA_SKBMOD_ETYPE={0x0, 0x5, 0xf52}]}, {0x0, 0x6, "b1410e51abd91c19df03678c0a734d81f15d12da897bdfda147129939b701982f88ef1530658e77269b94e9578c525f6af9d0b09060f41d335cfe49f87770ed7cfae2bc46bad866cfe2e63954f12060e1e9773ec9687cf75bb8147cd5d44ff0e6670baf0986aa2415bf20da788e368e8b2ad7bf23e33e00571e6cadc2f42"}, {0x0, 0x7, {0x1, 0x1}}, {0x0, 0x8, {0x1, 0x3}}}}, @m_nat={0x0, 0x16, 0x0, 0x0, {{}, {0x0, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x0, 0x1, {{0x6, 0x1, 0x10000000, 0x80000001, 0x6}, @empty, @empty, 0x0, 0x1}}, @TCA_NAT_PARMS={0x0, 0x1, {{0x8, 0x1, 0xfffffffffffffff8, 0x6, 0xfffffffe}, @private=0xa010101, @multicast2, 0xff000000, 0x1}}]}, {0x0, 0x6, "9d61a804491d93f3a318b13472c4c13c4a2ed17605e0276b2e69695fc6c745a8"}, {0x0, 0x7, {0x0, 0x1}}, {0x0, 0x8, {0x3, 0x3}}}}, @m_ct={0x0, 0x6, 0x0, 0x0, {{}, {0x0, 0x2, 0x0, 0x1, [@TCA_CT_ACTION={0x0, 0x3, 0x1}, @TCA_CT_NAT_IPV6_MAX={0x0, 0xc, @remote}, @TCA_CT_NAT_IPV6_MIN={0x0, 0xb, @private1={0xfc, 0x1, '\x00', 0x1}}, @TCA_CT_MARK={0x0, 0x5, 0x7}, @TCA_CT_NAT_PORT_MAX={0x0, 0xe, 0x4e20}, @TCA_CT_MARK={0x0, 0x5, 0x8}]}, {0x0, 0x6, "312feec9711d469aa9e09a47cb4ac7c821f6bbf7f8ede91cefa9514b34992034195a415f193d4bc02077d3c161c98c5c3f8b0a295aac7398c1dde1e03c3b8f9394e5e992ae65aadd44e8224144b3182b648787b711161405176528d797e5527a9f3ae11e84ada47772eade600db074b6d06490dac5292fbb3c18ea2a645e79039d8356b8dc8aeef1edf6b6734a4273ac83466de3bdfe7120500b77accd616acbc031a5923303ee6ccd7939b00a77d36e8aacf8541778ac2eb523656711efe838f558b78558e364942ecd41f46bc6af1fe865686306ed594958"}, {0x0, 0x7, {0x1}}, {0x0, 0x8, {0x0, 0x1}}}}]}]}}]}, 0x20c}}, 0x2000c800)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x57)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x702, 0xe, 0x0, &(0x7f0000000440)="5286dd000000000015abe99db538", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0x2})
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xe, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000080000009111bf000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
r5 = socket$igmp6(0xa, 0x3, 0x2)
r6 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @random="2b0436d23321"})
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r5, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}})
write$tun(r4, &(0x7f0000000340)={@void, @void, @eth={@remote, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @val={@val, {0x8100, 0x0, 0x0, 0x20}}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x3f, 0x1c, 0x68, 0x0, 0x0, 0x11, 0x0, @rand_addr=0x64010100, @multicast1}, {0x0, 0x17c1, 0x8}}}}}}, 0x32)
sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0)
socket(0x2a, 0x2, 0x0) (async)
getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x3ff, 0x1, 0xfffffff8, 0x0, 0x7, 0x7f, 0x8, 0x5, 0x1}}}}]}, 0x58}}, 0x44884) (async)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000025c0)=@newtfilter={0x20c, 0x2c, 0xd27, 0x70bd2d, 0x25dfdffd, {0x0, 0x0, 0x0, r1, {0x6}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_basic={{0xa}, {0x1dc, 0x2, [@TCA_BASIC_CLASSID={0x61, 0x1, {0x2, 0xc}}, @TCA_BASIC_CLASSID={0x0, 0x1, {0xf, 0xc}}, @TCA_BASIC_EMATCHES={0x4}, @TCA_BASIC_ACT={0x0, 0x3, [@m_bpf={0x0, 0x20, 0x0, 0x0, {{}, {0x0, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_NAME={0x0, 0x6, './file0\x00'}, @TCA_ACT_BPF_PARMS={0x0, 0x2, {0x6, 0x3, 0xffffffffffffffff, 0x102b, 0x3}}, @TCA_ACT_BPF_OPS_LEN={0x0, 0x3, 0x3}, @TCA_ACT_BPF_OPS_LEN={0x0, 0x3, 0x3}, @TCA_ACT_BPF_PARMS={0x0, 0x2, {0x80, 0x5, 0x0, 0x4, 0x8}}, @TCA_ACT_BPF_OPS_LEN={0x0, 0x3, 0x1}, @TCA_ACT_BPF_PARMS={0x0, 0x2, {0x9ad, 0xf1, 0x2, 0x10000, 0x101}}, @TCA_ACT_BPF_OPS_LEN={0x0, 0x3, 0xa}, @TCA_ACT_BPF_FD={0x0, 0x5, r0}, @TCA_ACT_BPF_NAME={0x0, 0x6, './file0\x00'}]}, {0x0, 0x6, "e34dddbd29e127d2258cc3fe083180c78d354a50eb489fe35aabec255cbb8604c6b69cbb4a4749274ea6616d43ef209244b4024c42e3a4b1f5a730c2a2851f2cc9588c086e48cb788c5fb894844050842ff57c0ac7b4a30ea02d36"}, {0x0, 0x7, {0x1}}, {0x0, 0x8, {0x1, 0x2}}}}, @m_mpls={0x0, 0x17, 0x0, 0x0, {{}, {0x0, 0x2, 0x0, 0x1, [@TCA_MPLS_TTL={0x0, 0x7, 0x8}]}, {0x0, 0x6, "c2fcd4e8b992df7b121e86f9e226f6428fc608d968615c1233bd73caa8289891dcd8180567f1f5968d37f49822928ca3a44e0fc93fac"}, {0x0, 0x7, {0x0, 0x1}}, {0x0, 0x8, {0x2, 0x1}}}}, @m_skbmod={0x0, 0x1c, 0x0, 0x0, {{}, {0x0, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x0, 0x2, {{0x4, 0x6, 0xd, 0x6, 0x14f1}, 0x3}}, @TCA_SKBMOD_ETYPE={0x0, 0x5, 0x9}, @TCA_SKBMOD_SMAC={0x0, 0x4, @broadcast}, @TCA_SKBMOD_DMAC, @TCA_SKBMOD_DMAC={0x0, 0x3, @link_local}, @TCA_SKBMOD_DMAC={0x0, 0x3, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}}, @TCA_SKBMOD_PARMS={0x0, 0x2, {{0x4, 0x820, 0xffffffffffffffff, 0x1, 0x8}, 0xe}}, @TCA_SKBMOD_PARMS={0x0, 0x2, {{0x8, 0x4, 0xffffffffffffffff, 0xf, 0x2}, 0x3}}, @TCA_SKBMOD_SMAC, @TCA_SKBMOD_ETYPE={0x0, 0x5, 0xf52}]}, {0x0, 0x6, "b1410e51abd91c19df03678c0a734d81f15d12da897bdfda147129939b701982f88ef1530658e77269b94e9578c525f6af9d0b09060f41d335cfe49f87770ed7cfae2bc46bad866cfe2e63954f12060e1e9773ec9687cf75bb8147cd5d44ff0e6670baf0986aa2415bf20da788e368e8b2ad7bf23e33e00571e6cadc2f42"}, {0x0, 0x7, {0x1, 0x1}}, {0x0, 0x8, {0x1, 0x3}}}}, @m_nat={0x0, 0x16, 0x0, 0x0, {{}, {0x0, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x0, 0x1, {{0x6, 0x1, 0x10000000, 0x80000001, 0x6}, @empty, @empty, 0x0, 0x1}}, @TCA_NAT_PARMS={0x0, 0x1, {{0x8, 0x1, 0xfffffffffffffff8, 0x6, 0xfffffffe}, @private=0xa010101, @multicast2, 0xff000000, 0x1}}]}, {0x0, 0x6, "9d61a804491d93f3a318b13472c4c13c4a2ed17605e0276b2e69695fc6c745a8"}, {0x0, 0x7, {0x0, 0x1}}, {0x0, 0x8, {0x3, 0x3}}}}, @m_ct={0x0, 0x6, 0x0, 0x0, {{}, {0x0, 0x2, 0x0, 0x1, [@TCA_CT_ACTION={0x0, 0x3, 0x1}, @TCA_CT_NAT_IPV6_MAX={0x0, 0xc, @remote}, @TCA_CT_NAT_IPV6_MIN={0x0, 0xb, @private1={0xfc, 0x1, '\x00', 0x1}}, @TCA_CT_MARK={0x0, 0x5, 0x7}, @TCA_CT_NAT_PORT_MAX={0x0, 0xe, 0x4e20}, @TCA_CT_MARK={0x0, 0x5, 0x8}]}, {0x0, 0x6, "312feec9711d469aa9e09a47cb4ac7c821f6bbf7f8ede91cefa9514b34992034195a415f193d4bc02077d3c161c98c5c3f8b0a295aac7398c1dde1e03c3b8f9394e5e992ae65aadd44e8224144b3182b648787b711161405176528d797e5527a9f3ae11e84ada47772eade600db074b6d06490dac5292fbb3c18ea2a645e79039d8356b8dc8aeef1edf6b6734a4273ac83466de3bdfe7120500b77accd616acbc031a5923303ee6ccd7939b00a77d36e8aacf8541778ac2eb523656711efe838f558b78558e364942ecd41f46bc6af1fe865686306ed594958"}, {0x0, 0x7, {0x1}}, {0x0, 0x8, {0x0, 0x1}}}}]}]}}]}, 0x20c}}, 0x2000c800) (async)
socket$netlink(0x10, 0x3, 0x0) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="b702000007000000bfa30000000000000703000000feffff7a0af0ff2300000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010001010404000011000000b7030000000000006a0a00fe000000008500000032000000b700000001000000950000000000000075cdc4b57b0c65752a3ad50000007ddd0000cb450063dedba767ade51f7f1f66acd19100002000000000000000ff7f0000b52f17cee19d0001000000000000000000cb04fcbb4e4d0b9bafe3ba431351a58a885ba9918d37b056b9bbd11b6b9f6cf7db6d574620260000000000008062d77e85cef4a2ab938f65aac33c4d620de2c9b7dc10d7d313f9f57606b83b994fc4051ade12f41deff6df6a936b4ec3827c739bb39aad16cc75fe369258673b5df11cc2afb53611cc32a790bc0b80e80eae8f5e64be2c9d2d29db3d36dd0cf8f79a015c7bd3f15aa6aadbeab2a01685108e61aa00000000000000000000000000c67c6c6a06e828e5216f601b19db1af1b5d356d0f062137d866d11be4ba3f0151fdbbd4e97d62ecc645e143a60f10800000000000000826151e3b42bcae95239ef5ca2a730a00c87c493db0300e63fda97a296820000000001000000eecc952a3fd2c46f3c1cde71a19d1a2982492a210e00d2bfea3b8d188df2eff8d56aaae7d32a2e180022537395019f02ec4b85f6aad7faca088de9b26797a8446b16c28d85f225992dbdd5bb01ba51508951c7a7d6ca0916c3a12912715649c2b1c7192a4251b59d378d3f00000000000000665c8b7e89eddfc3783f6c9129a7c5f8ee5f50579e2f638f7eb12f63be72a3d81ab324d6e417b1c2cbfdcada0a16e31790e26cf19588a7e0496ee2782224cf30f810da86cf1a3204f4c9404f5d7321a4fefc4d1c9139ca4b65b99909950000006b42077ca60fdecb2717e21f8f187b1866108b6e8c71e2603217606637ece1fa89917e131f4034a8383e99c3568fd04201b37cd92ca6ebf94a2d8310f7032775cfd75652f87b039d5430b3c6643e9146d2478ce31344b554aca7670000000000000010c65608fda6ed5d08e7a796042aa127d874105787d0347aa37801faff5b9050803a19ff6205aa5c263e407a2f7de56f7a0000e094fa4e3f05528caab5a430c08dd810bc97204b767dd969721a26aa740000000000bc433fe2d0a6ef2a8a91cd3cb305aa80dadef8b0caca780000000000000000863e21db415a222bb1a7ab94bfe4a74157d794f9d0430c2c0eb563350559829865a3dd08fb31bd0801e09aa3ee45e61a56fc83076451cff7632e49a41eadb5044a0d5f73d6932161ae5e9ce218a35cd8e7b747887b1a74798982d0b492c3f0ff53189d80733eb04f8124877b648ff438f7d66c7efcc09a8f3330b6c22d14e80db8e5608bdeab9388b758a15f4ce70390c214bc6838798f5b9b0b500d4e8b5174f329b8501c6feb7a6982bcea74a0f2ced7fa2059234a8d10b7f0597151d5c9067d57d85f4ae933eaf5174ba122f3f702ef8695578d3c08562c9fc185f0f65d11b4c58ae52500cbe99cde3758a5cbe6093dd328ac820e2de309d25a324647aadffcecf0f3bbaeda7af4436d9ffbce1b240a2f5e346eba8812e6329e01b087bde7da4a6448f478102e90c8134f531de08d4cf4f6f35b15a202544c0ced0c1715fd3a90099f785a13a2412bedba2981dd22bd9d736c00000000000000000000000000000000eb6fec8d7d2f77f4d470a9caa5b1bfc00cd1d40830ac35f229f8ffe1c02a63d3c2d9"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x57) (async)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x702, 0xe, 0x0, &(0x7f0000000440)="5286dd000000000015abe99db538", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) (async)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0x2}) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xe, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000080000009111bf000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) (async)
socket$igmp6(0xa, 0x3, 0x2) (async)
socket$kcm(0x2, 0xa, 0x2) (async)
ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @random="2b0436d23321"}) (async)
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r5, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}}) (async)
write$tun(r4, &(0x7f0000000340)={@void, @void, @eth={@remote, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @val={@val, {0x8100, 0x0, 0x0, 0x20}}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x3f, 0x1c, 0x68, 0x0, 0x0, 0x11, 0x0, @rand_addr=0x64010100, @multicast1}, {0x0, 0x17c1, 0x8}}}}}}, 0x32) (async)
sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async)

98.297394ms ago: executing program 0 (id=10362):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000100))
ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000000)={<r1=>0xffffffffffffffff, 0x0, 0x5, 0x2})
ioctl$XFS_IOC_PATH_TO_FSHANDLE(r0, 0xc0385868, &(0x7f0000000140)={r1, &(0x7f0000000040)='-)\x00', 0x1, &(0x7f0000000080)={@_ha_fsid={[0xfff, 0x80]}, {0x1, 0x5, 0x200}}, 0x7fffffff, &(0x7f00000000c0), &(0x7f0000000100)=0x4})
r2 = syz_init_net_socket$llc(0x1a, 0x2, 0x0)
sendmmsg(r2, &(0x7f000000b080)=[{{&(0x7f0000003040)=@pptp={0x18, 0x2, {0x0, @local}}, 0x80, 0x0}}], 0x1, 0x4008000)

462.762µs ago: executing program 0 (id=10363):
r0 = socket(0x2a, 0x2, 0x0)
getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000000)={0x4000, 0x4, 0x200, 0x3, 0x8, 0x0, 0x10000000, 0x4, <r1=>0x0}, &(0x7f0000000040)=0x20)
getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={r1, 0x0, &(0x7f0000000080)}, &(0x7f0000000100)=0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r2, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
listen(r2, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
connect$unix(r3, &(0x7f00000006c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000002640)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000640)="b2", 0x1}], 0x1, &(0x7f0000000240)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES8=r3], 0x18, 0x20040801}}], 0x1, 0x4000000)
accept4$unix(r2, 0x0, 0x0, 0x80800)
getsockname$packet(r0, &(0x7f0000000180)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffe0}, {0xd, 0xffff}, {0x0, 0xffe0}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x20000004)
r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x20)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r5}, 0x8)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="4401000010000100fefffffffddbdf25fe8800051a0000000000000000000001fc010000000000000000000000000001000107144e230005000000803c000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffffff000000000000000000000000000004d46c0000007f000001000000000000000000000000000000000000000092010000000000000600000000000000ffff0000000000001c250800000000000200000000000000f8ffffffffffffff0200000000000000ffffffffffffffff2a000000000000001f00000000000000b80700000000000002000000fcffffffbcfbffff2abd700000000000020001002000000000000000480003006465666c617465000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c0015005b07350008000000"], 0x144}, 0x1, 0x0, 0x0, 0x8801}, 0x0)
r7 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r7, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16)
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$NBD_CMD_CONNECT(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010000000000000000000100000008000100400000000c000200700f0000000000000c00060003000000000000000a000a00272d5d29212b0000140007"], 0x6c}}, 0x0)
sendmsg$NBD_CMD_CONNECT(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[], 0x6c}}, 0x0)
connect$inet(r7, &(0x7f0000000480)={0x2, 0x22, @multicast1}, 0x10)
setsockopt$inet_IP_XFRM_POLICY(r7, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffa}, {}, 0x0, 0x0, 0x1}, {{@in6=@dev, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0xb7, 0x2, 0xfffffffe}}, 0xe8)
sendmmsg(r7, &(0x7f0000007fc0), 0x800001d, 0x1c)
r11 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="2e00000036000511d25a80698c6394090324fc602f6e35400800018025581d00d1bd00000000000000000000000f", 0x2e}], 0x1, 0x0, 0x0, 0x39c}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB], &(0x7f0000000080)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41000}, 0x94)

0s ago: executing program 2 (id=10364):
r0 = socket$tipc(0x1e, 0x5, 0x0)
listen(r0, 0x0)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[@ANYBLOB="1400000010000100f7000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000000144c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100d10300000c000440000000000000000114000000110001"], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_BATCH(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_DELSETELEM={0x2c, 0xe, 0xa, 0x3, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}, @NFT_MSG_DELSETELEM={0x2c, 0xe, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x80}, 0x1, 0x0, 0x0, 0x10}, 0x10)
getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x73, &(0x7f0000000200)={<r3=>0x0, 0x547b, 0x0, 0x8, 0x10}, &(0x7f0000000280)=0x18)
r4 = accept(r0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r5 = socket$inet6(0x10, 0x3, 0x0)
getsockopt$inet_sctp6_SCTP_CONTEXT(r5, 0x84, 0x11, &(0x7f0000000400)={r3, 0xddd}, &(0x7f00000004c0)=0x8)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000000000)=@newtaction={0x6c, 0x30, 0x53b, 0x0, 0x0, {}, [{0x58, 0x1, [@m_simple={0x54, 0x1, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0xb, 0x3, 'simple\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x9f}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4060040}, 0x0)
syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendto$inet6(r5, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r6], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r7, 0x0, 0x0, 0x0, 0x0}, 0x94)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
getsockopt$EBT_SO_GET_INIT_ENTRIES(r4, 0x0, 0x83, &(0x7f0000000280)={'filter\x00', 0x0, 0x4, 0x3, [0x2, 0x5, 0x7, 0x40, 0x7, 0x3], 0x3, &(0x7f0000000080)=[{}, {}, {}], &(0x7f0000000200)=""/3}, &(0x7f00000003c0)=0x78)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r8, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50)

kernel console output (not intermixed with test programs):

multicast mode
[  586.838440][  T788] mac80211_hwsim hwsim37 wlan0: entered promiscuous mode
[  586.854992][  T789] netlink: 'syz.2.8207': attribute type 1 has an invalid length.
[  586.857878][  T789] netlink: 'syz.2.8207': attribute type 1 has an invalid length.
[  586.861146][  T788] netlink: 'syz.2.8207': attribute type 1 has an invalid length.
[  586.864219][  T788] netlink: 'syz.2.8207': attribute type 1 has an invalid length.
[  586.867038][  T789] netlink: 'syz.2.8207': attribute type 1 has an invalid length.
[  586.869511][  T789] netlink: 'syz.2.8207': attribute type 1 has an invalid length.
[  586.872234][  T788] netlink: 'syz.2.8207': attribute type 1 has an invalid length.
[  586.877632][  T788] netlink: 'syz.2.8207': attribute type 1 has an invalid length.
[  587.204847][  T808] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  587.211113][  T810] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  587.241209][  T812] xt_NFQUEUE: number of total queues is 0
[  587.349685][  T819] xt_hashlimit: size too large, truncated to 1048576
[  587.543775][    C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  587.756463][  T840] netlink: 'syz.0.8221': attribute type 3 has an invalid length.
[  587.872826][  T850]  speed is unknown, defaulting to 1000
[  588.022272][  T850] wg1 speed is unknown, defaulting to 1000
[  588.138925][  T873] block nbd9: Unsupported socket: should be TCP or UNIX.
[  588.584368][    C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  588.595005][  T909] IPVS: length: 15 != 8
[  588.762213][  T936] syzkaller1: entered promiscuous mode
[  588.764803][  T936] syzkaller1: entered allmulticast mode
[  589.624030][    C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  590.162906][  T964] __nla_validate_parse: 56 callbacks suppressed
[  590.162923][  T964] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8251'.
[  590.170346][  T964] openvswitch: netlink: IPv4 frag type 127 is out of range max 2
[  590.174460][  T964] netlink: 100 bytes leftover after parsing attributes in process `syz.0.8251'.
[  590.234705][  T965] netlink: 'syz.0.8251': attribute type 1 has an invalid length.
[  590.665490][    C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  591.703859][    C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  592.029169][  T971] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8253'.
[  592.059022][  T975] syzkaller1: entered promiscuous mode
[  592.061367][  T975] syzkaller1: entered allmulticast mode
[  592.064797][  T971] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8253'.
[  592.146110][  T978] netlink: 'syz.2.8256': attribute type 4 has an invalid length.
[  592.149627][  T977] netlink: 'syz.2.8256': attribute type 4 has an invalid length.
[  592.297161][  T986]  speed is unknown, defaulting to 1000
[  592.445276][  T986] wg1 speed is unknown, defaulting to 1000
[  592.460687][ T1006] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8265'.
[  592.744947][    C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  593.038842][ T1075] x_tables: unsorted underflow at hook 3
[  593.041215][ T1073] ip6t_REJECT: TCP_RESET illegal for non-tcp
[  593.163929][ T1084] syzkaller1: entered promiscuous mode
[  593.165772][ T1084] syzkaller1: entered allmulticast mode
[  593.294189][ T1103] ip6t_REJECT: TCP_RESET illegal for non-tcp
[  593.352523][ T1112] netlink: 'syz.2.8286': attribute type 1 has an invalid length.
[  593.369653][ T1112] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8286'.
[  593.373986][ T1112] 8021q: adding VLAN 0 to HW filter on device bond54
[  593.380490][ T1112] macvlan11: entered promiscuous mode
[  593.382713][ T1112] macvlan11: entered allmulticast mode
[  593.386290][ T1112] bond54: entered promiscuous mode
[  593.388792][ T1112] 8021q: adding VLAN 0 to HW filter on device macvlan11
[  593.393983][ T1112] bond54: left promiscuous mode
[  593.446370][ T1118] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8287'.
[  593.485909][ T1127] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8290'.
[  593.491832][ T1127] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8290'.
[  593.498556][ T1127] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8290'.
[  593.544158][ T1129] pim6reg1: entered promiscuous mode
[  593.545993][ T1129] pim6reg1: entered allmulticast mode
[  593.606993][ T1133] netlink: 'syz.2.8292': attribute type 1 has an invalid length.
[  593.783693][    C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  593.916632][ T1162] syzkaller1: entered promiscuous mode
[  593.918450][ T1162] syzkaller1: entered allmulticast mode
[  594.109911][ T1171] netlink: 'syz.1.8301': attribute type 1 has an invalid length.
[  594.124977][ T1171] bond56: entered promiscuous mode
[  594.127002][ T1171] 8021q: adding VLAN 0 to HW filter on device bond56
[  594.252274][ T1180] netlink: 'syz.1.8303': attribute type 1 has an invalid length.
[  594.301555][ T1183] netlink: 'syz.1.8304': attribute type 1 has an invalid length.
[  594.824379][    C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  595.863668][    C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  596.905069][    C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  597.411496][ T1186] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  597.492607][ T1218] xt_hashlimit: size too large, truncated to 1048576
[  597.519859][ T1222] xt_l2tp: unknown flags: 51
[  597.770008][ T1242] syzkaller1: entered promiscuous mode
[  597.772155][ T1242] syzkaller1: entered allmulticast mode
[  597.774724][ T1238] __nla_validate_parse: 33 callbacks suppressed
[  597.774733][ T1238] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8314'.
[  597.901663][ T1256] gretap0: entered promiscuous mode
[  597.943691][    C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  598.135224][ T1288] netlink: 26 bytes leftover after parsing attributes in process `syz.1.8328'.
[  598.142022][ T1290] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16)
[  598.191028][ T1290] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8329'.
[  598.192806][ T1292] xt_hashlimit: max too large, truncated to 1048576
[  598.196299][ T1292] xt_hashlimit: overflow, try lower: 2/0
[  598.208868][ T1296] netlink: 'syz.0.8331': attribute type 1 has an invalid length.
[  598.221743][ T1296] netlink: 'syz.0.8331': attribute type 4 has an invalid length.
[  598.227819][ T1296] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.8331'.
[  598.235561][ T1296] netlink: 'syz.0.8331': attribute type 1 has an invalid length.
[  598.250414][ T1296] netlink: 'syz.0.8331': attribute type 4 has an invalid length.
[  598.260631][ T1296] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.8331'.
[  598.337354][ T1306] Cannot find del_set index 14804 as target
[  598.349170][ T1304] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8334'.
[  598.451916][ T1314] netlink: 'syz.0.8336': attribute type 11 has an invalid length.
[  598.537405][ T1328] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8341'.
[  598.540378][ T1328] tipc: Disabling bearer <udp:syz2>
[  598.547882][ T1324] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8340'.
[  598.552075][ T1324] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8340'.
[  598.556044][ T1324] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8340'.
[  598.588190][ T1334] xt_CHECKSUM: unsupported CHECKSUM operation 68
[  598.591717][ T1334] sctp: [Deprecated]: syz.1.8344 (pid 1334) Use of int in max_burst socket option deprecated.
[  598.591717][ T1334] Use struct sctp_assoc_value instead
[  598.598249][ T1332] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING
[  598.684356][ T1347] xt_CT: You must specify a L4 protocol and not use inversions on it
[  598.831123][ T1369] xt_hashlimit: size too large, truncated to 1048576
[  598.862093][ T1373] xt_hashlimit: size too large, truncated to 1048576
[  598.984133][    C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  599.181739][ T1391] ip6t_REJECT: TCP_RESET illegal for non-tcp
[  599.414156][ T1414] sctp: [Deprecated]: syz.0.8367 (pid 1414) Use of struct sctp_assoc_value in delayed_ack socket option.
[  599.414156][ T1414] Use struct sctp_sack_info instead
[  599.457551][ T1416] ip6t_REJECT: TCP_RESET illegal for non-tcp
[  599.792817][ T1442]  speed is unknown, defaulting to 1000
[  599.889216][ T1442] wg1 speed is unknown, defaulting to 1000
[  600.023686][    C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  600.779884][ T1480] syzkaller1: entered promiscuous mode
[  600.784749][ T1480] syzkaller1: entered allmulticast mode
[  601.064791][    C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  601.189391][ T1503] bond1: option mode: unable to set because the bond device has slaves
[  601.200060][ T1503] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check.
[  601.328820][ T1513] dvmrp6: entered allmulticast mode
[  601.344266][ T1513] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check.
[  602.103834][    C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  602.166397][ T1578] bridge_slave_1: left allmulticast mode
[  602.170594][ T1578] bridge_slave_1: left promiscuous mode
[  602.176897][ T1578] bridge0: port 2(bridge_slave_1) entered disabled state
[  602.182642][ T1578] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check.
[  602.195243][ T1578] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  602.198407][ T1583] mac80211_hwsim hwsim7 syzkaller0: left promiscuous mode
[  602.201053][ T1583] mac80211_hwsim hwsim7 syzkaller0: left allmulticast mode
[  602.331442][ T1589] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  602.340073][ T1589] netlink: 'syz.0.8416': attribute type 7 has an invalid length.
[  602.342724][ T1589] netlink: 'syz.0.8416': attribute type 8 has an invalid length.
[  602.346862][ T1589] netlink: 'syz.0.8416': attribute type 8 has an invalid length.
[  602.349488][ T1589] netlink: 'syz.0.8416': attribute type 4 has an invalid length.
[  602.352059][ T1589] netlink: 'syz.0.8416': attribute type 7 has an invalid length.
[  602.486579][T12820] nci: nci_rf_intf_activated_ntf_packet: unsupported rf_interface 0x25
[  602.971447][ T1613] netlink: 'syz.2.8423': attribute type 1 has an invalid length.
[  602.974998][ T1613] __nla_validate_parse: 25 callbacks suppressed
[  602.975008][ T1613] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8423'.
[  603.144151][    C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  603.250540][ T1601] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  603.358024][ T1627] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8427'.
[  603.487563][ T1628] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  603.494075][ T1628] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8428'.
[  603.561766][ T1642] syzkaller1: entered promiscuous mode
[  603.567466][ T1642] syzkaller1: entered allmulticast mode
[  603.608230][ T1644] Bluetooth: hci0: Opcode 0x0c1a failed: -22
[  603.829945][ T1673] syzkaller1: tun_chr_ioctl cmd 1074025677
[  603.834683][ T1673] syzkaller1: linktype set to 270
[  603.844847][ T1674] syzkaller1: tun_chr_ioctl cmd 1074025677
[  603.852349][ T1674] syzkaller1: linktype set to 270
[  603.867999][ T1665] validate_nla: 1 callbacks suppressed
[  603.868014][ T1665] netlink: 'syz.0.8437': attribute type 10 has an invalid length.
[  603.885451][ T1665] netlink: 41 bytes leftover after parsing attributes in process `syz.0.8437'.
[  603.895639][ T1665] netlink: 140 bytes leftover after parsing attributes in process `syz.0.8437'.
[  603.993771][ T1686] bridge_slave_0: entered promiscuous mode
[  603.999277][ T1686] bridge_slave_0: entered allmulticast mode
[  604.118900][ T1700] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8445'.
[  604.121987][ T1700] openvswitch: netlink: Key type 9734 is out of range max 32
[  604.183990][    C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  604.184724][   T54] Bluetooth: hci2: command 0x0405 tx timeout
[  604.190368][ T1704] netlink: 'syz.2.8448': attribute type 1 has an invalid length.
[  604.193056][ T1704] netlink: 'syz.2.8448': attribute type 2 has an invalid length.
[  604.198032][ T1704] netlink: 'syz.2.8448': attribute type 1 has an invalid length.
[  604.219069][ T1702] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8447'.
[  604.395618][ T1719] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8451'.
[  604.407096][ T1719] netlink: 116 bytes leftover after parsing attributes in process `syz.2.8451'.
[  604.414400][ T1721] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8452'.
[  604.418508][ T1721] netlink: 'syz.0.8452': attribute type 5 has an invalid length.
[  604.422271][ T1721] netlink: 'syz.0.8452': attribute type 5 has an invalid length.
[  604.957675][ T1749] bond58: option packets_per_slave: invalid value (1048582)
[  604.960628][ T1749] bond58: option packets_per_slave: allowed values 0 - 65535
[  604.967589][ T1749] bond58 (unregistering): Released all slaves
[  605.690034][ T1779] bond57: (slave bridge39): Enslaving as an active interface with an up link
[  606.264110][    C1] net_ratelimit: 2 callbacks suppressed
[  606.264125][    C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  606.493216][ T1811] xt_hashlimit: size too large, truncated to 1048576
[  606.890773][ T1832] netlink: 'syz.2.8482': attribute type 1 has an invalid length.
[  606.896055][ T1832] netlink: 'syz.2.8482': attribute type 1 has an invalid length.
[  606.898941][ T1832] netlink: 'syz.2.8482': attribute type 1 has an invalid length.
[  606.901868][ T1832] netlink: 'syz.2.8482': attribute type 1 has an invalid length.
[  606.993333][ T1840] syzkaller1: entered promiscuous mode
[  606.995549][ T1840] syzkaller1: entered allmulticast mode
[  607.079477][ T1843] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  607.111331][ T1845] xt_hashlimit: size too large, truncated to 1048576
[  607.304199][    C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  607.599665][ T1873] syzkaller1: entered promiscuous mode
[  607.601993][ T1873] syzkaller1: entered allmulticast mode
[  607.724904][ T1884] openvswitch: netlink: Unknown nsh attribute 0
[  607.878158][ T1902] syzkaller0: entered promiscuous mode
[  607.880206][ T1902] syzkaller0: entered allmulticast mode
[  608.346229][    C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  609.388059][    C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  609.610888][ T1906] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  609.792963][ T1928] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  609.797657][ T1928] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  609.826333][ T1932] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING
[  609.832952][ T1932] __nla_validate_parse: 23 callbacks suppressed
[  609.832962][ T1932] netlink: 40 bytes leftover after parsing attributes in process `syz.2.8513'.
[  609.873073][ T1937] validate_nla: 2 callbacks suppressed
[  609.873088][ T1937] netlink: 'syz.2.8515': attribute type 1 has an invalid length.
[  609.897824][ T1941] netlink: 4768 bytes leftover after parsing attributes in process `syz.0.8514'.
[  609.901044][ T1941] netlink: 4768 bytes leftover after parsing attributes in process `syz.0.8514'.
[  610.018489][ T1947] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  610.229005][ T1956] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8520'.
[  610.260417][ T1959] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8521'.
[  610.263742][ T1959] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8521'.
[  610.267057][ T1960] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8521'.
[  610.275082][ T1960] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8521'.
[  610.314636][ T1964] ip6t_REJECT: TCP_RESET illegal for non-tcp
[  610.423760][    C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  610.631913][ T1989] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8529'.
[  610.801874][ T1993] netlink: 'syz.2.8531': attribute type 9 has an invalid length.
[  610.961946][ T2006] x_tables: ip_tables: osf match: only valid for protocol 6
[  611.038421][ T2010] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8535'.
[  611.046230][ T5682] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  611.051502][ T5682] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  611.059391][ T5682] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  611.068567][ T5682] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  611.094226][ T2020] xfrm1: entered allmulticast mode
[  611.179431][ T2038] openvswitch: netlink: IP tunnel dst address not specified
[  611.405327][ T2061] syzkaller1: entered promiscuous mode
[  611.407235][ T2061] syzkaller1: entered allmulticast mode
[  611.464192][    C1] net_ratelimit: 3 callbacks suppressed
[  611.464204][    C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  611.635457][ T2070] netlink: 'syz.0.8552': attribute type 1 has an invalid length.
[  611.734748][ T2078] netlink: 'syz.1.8555': attribute type 5 has an invalid length.
[  611.794826][ T2080] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT
[  611.933171][ T2104] syzkaller1: entered promiscuous mode
[  611.937489][ T2104] syzkaller1: entered allmulticast mode
[  611.942149][ T2106] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  611.995563][ T2109] netlink: 'syz.0.8564': attribute type 21 has an invalid length.
[  612.164102][ T2128] syzkaller1: entered promiscuous mode
[  612.166488][ T2128] syzkaller1: entered allmulticast mode
[  612.352557][ T2144] xt_AUDIT: Audit type out of range (valid range: 0..2)
[  612.361013][ T2142] xt_cluster: you have exceeded the maximum number of cluster nodes (524288 > 32)
[  612.385141][ T2142] tun0: tun_chr_ioctl cmd 1074025672
[  612.387296][ T2142] tun0: ignored: set checksum disabled
[  612.407608][ T2135]  speed is unknown, defaulting to 1000
[  612.483731][ T2151] batman_adv: batadv0: Interface deactivated: vlan1
[  612.503629][    C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  612.697271][ T2135] wg1 speed is unknown, defaulting to 1000
[  612.697316][ T5476] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  612.702729][ T5476] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 41141 - 0
[  612.707181][ T5476] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  612.713564][ T5476] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 41141 - 0
[  612.722909][ T5476] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  612.732061][ T5476] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 41141 - 0
[  612.738622][ T5476] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  612.744792][ T5476] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 41141 - 0
[  612.759532][ T2160] netlink: 'syz.2.8583': attribute type 1 has an invalid length.
[  613.231129][ T2207] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  613.248072][ T2207] syzkaller0: entered promiscuous mode
[  613.260904][ T2207] syzkaller0: entered allmulticast mode
[  613.299103][ T2215] xt_bpf: check failed: parse error
[  613.309726][ T2207] tipc: Resetting bearer <eth:syzkaller0>
[  613.324693][ T2206] tipc: Resetting bearer <eth:syzkaller0>
[  613.343029][ T2206] tipc: Disabling bearer <eth:syzkaller0>
[  613.361405][ T2218] ip6_vti0: left promiscuous mode
[  613.389257][ T2218] bridge_slave_1: entered promiscuous mode
[  613.396594][ T2218] team_slave_1: left promiscuous mode
[  613.401212][ T2218] veth1_macvtap: left promiscuous mode
[  613.410642][ T2218] veth0_macvtap: left promiscuous mode
[  613.420400][ T2218] veth0_macvtap: entered promiscuous mode
[  613.424382][ T2218] veth1_macvtap: entered promiscuous mode
[  613.429229][ T2218] A link change request failed with some changes committed already. Interface ; may have been left with an inconsistent configuration, please check.
[  613.483158][   T13] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 6081 - 0
[  613.489636][   T13] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 6081 - 0
[  613.508511][ T2228] vti1: entered promiscuous mode
[  613.513785][ T2228] vti1: entered allmulticast mode
[  613.516026][ T2233] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  613.519630][   T13] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 6081 - 0
[  613.528953][   T13] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 6081 - 0
[  613.544196][    C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  613.587566][ T2237] syzkaller1: entered promiscuous mode
[  613.590445][ T2237] syzkaller1: entered allmulticast mode
[  614.584010][    C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  615.624861][    C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  616.663931][    C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  617.704247][    C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  618.743894][    C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  619.784352][    C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  620.823942][    C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  621.864670][    C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  622.903913][    C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  623.944979][    C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  624.330881][ T2247] syzkaller1: entered promiscuous mode
[  624.342632][ T2247] syzkaller1: entered allmulticast mode
[  624.421163][ T2249] xt_CT: You must specify a L4 protocol and not use inversions on it
[  624.478319][ T2252] tap0: tun_chr_ioctl cmd 1074025680
[  624.482451][ T2252] __nla_validate_parse: 24 callbacks suppressed
[  624.482467][ T2252] netlink: 40 bytes leftover after parsing attributes in process `syz.1.8611'.
[  624.717824][ T2265] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8615'.
[  624.721543][ T2265] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8615'.
[  624.726899][ T2265] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8615'.
[  624.730681][ T2265] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8615'.
[  624.823165][ T2269] syzkaller1: entered promiscuous mode
[  624.825837][ T2269] syzkaller1: entered allmulticast mode
[  624.983880][    C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  625.247561][ T2279] netlink: 'syz.2.8620': attribute type 21 has an invalid length.
[  625.250144][ T2279] netlink: 128 bytes leftover after parsing attributes in process `syz.2.8620'.
[  625.253203][ T2279] netlink: 3 bytes leftover after parsing attributes in process `syz.2.8620'.
[  625.323817][ T2288] xt_hl: Unknown Hop Limit match mode: 206
[  625.345310][ T2287] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode
[  625.348003][ T2287] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode
[  625.400894][ T2290] syzkaller1: entered promiscuous mode
[  625.403474][ T2290] syzkaller1: entered allmulticast mode
[  625.486312][ T2296] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING
[  625.495017][ T2297] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING
[  625.502039][ T2296] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8626'.
[  625.609777][ T2301] netlink: 'syz.2.8628': attribute type 3 has an invalid length.
[  625.613090][ T2301] netlink: 666 bytes leftover after parsing attributes in process `syz.2.8628'.
[  625.665160][ T2307] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8629'.
[  626.024443][    C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  626.452075][ T5476] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  626.458878][ T5476] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  626.503396][ T5476] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  626.548041][ T5476] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  626.850856][ T2355] netlink: 'syz.1.8641': attribute type 11 has an invalid length.
[  626.937793][ T2368] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  627.063670][    C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  627.490909][ T2410] netlink: 'syz.0.8649': attribute type 21 has an invalid length.
[  627.503756][ T2410] IPv6: NLM_F_CREATE should be specified when creating new route
[  627.604471][ T2420] TCP: TCP_TX_DELAY enabled
[  627.654422][ T2425] IPVS: set_ctl: invalid protocol: 22 100.1.1.3:20002
[  627.668832][ T2428] netlink: 'syz.0.8653': attribute type 1 has an invalid length.
[  627.768807][ T2443] xt_time: unknown flags 0xf4
[  627.802428][ T2447] sch_tbf: burst 127 is lower than device syzkaller0 mtu (313) !
[  628.059323][ T2482] xt_hashlimit: size too large, truncated to 1048576
[  628.104926][    C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  628.492941][ T2515] syzkaller1: entered promiscuous mode
[  628.495135][ T2515] syzkaller1: entered allmulticast mode
[  628.554389][ T2522] syzkaller1: entered promiscuous mode
[  628.556307][ T2522] syzkaller1: entered allmulticast mode
[  628.616768][ T2527] syzkaller0: entered promiscuous mode
[  628.618689][ T2527] syzkaller0: entered allmulticast mode
[  628.768012][ T2543] syzkaller1: entered promiscuous mode
[  628.769999][ T2543] syzkaller1: entered allmulticast mode
[  628.817018][ T2548] sch_tbf: burst 3 is lower than device ip6tnl0 mtu (165) !
[  628.845104][ T2553] netlink: 'syz.0.8689': attribute type 1 has an invalid length.
[  628.888762][ T2553] bond57: entered promiscuous mode
[  628.891012][ T2553] 8021q: adding VLAN 0 to HW filter on device bond57
[  629.061563][ T2588] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  629.144067][    C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  629.297995][ T2622] netlink: 'syz.1.8703': attribute type 8 has an invalid length.
[  629.552381][ T2638] __nla_validate_parse: 18 callbacks suppressed
[  629.552392][ T2638] netlink: 108 bytes leftover after parsing attributes in process `syz.0.8708'.
[  629.562222][ T2639] ip6t_REJECT: TCP_RESET illegal for non-tcp
[  629.597327][ T2642] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8709'.
[  629.799163][ T2665] netlink: 732 bytes leftover after parsing attributes in process `syz.1.8715'.
[  629.802127][ T2665] netlink: 732 bytes leftover after parsing attributes in process `syz.1.8715'.
[  629.807135][ T2664] xt_addrtype: both incoming and outgoing interface limitation cannot be selected
[  629.860569][ T2669] ip6t_REJECT: TCP_RESET illegal for non-tcp
[  630.068537][ T2686] syzkaller0: entered promiscuous mode
[  630.070801][ T2686] syzkaller0: entered allmulticast mode
[  630.187434][    C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  631.225635][    C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  631.818574][ T2702] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8726'.
[  631.828129][ T2702] syzkaller0: entered promiscuous mode
[  631.829994][ T2702] syzkaller0: entered allmulticast mode
[  631.874544][ T2712] netlink: 260 bytes leftover after parsing attributes in process `syz.2.8728'.
[  631.878099][ T2712] netlink: 260 bytes leftover after parsing attributes in process `syz.2.8728'.
[  631.881291][ T2712] netlink: 260 bytes leftover after parsing attributes in process `syz.2.8728'.
[  632.025999][ T2734] ip6t_REJECT: TCP_RESET illegal for non-tcp
[  632.141015][ T2736] bond58: entered allmulticast mode
[  632.145154][ T2738] syzkaller1: entered promiscuous mode
[  632.148516][ T2738] syzkaller1: entered allmulticast mode
[  632.210737][ T2744] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8737'.
[  632.264192][    C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  632.418308][ T2770] xt_time: invalid argument - start or stop time greater than 23:59:59
[  632.531557][ T2779] netlink: 128 bytes leftover after parsing attributes in process `syz.0.8745'.
[  632.536750][ T2779] A link change request failed with some changes committed already. Interface 26 may have been left with an inconsistent configuration, please check.
[  632.689909][ T2786] x_tables: duplicate underflow at hook 2
[  633.304546][    C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  634.344734][    C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  634.663800][   T24] page_pool_release_retry() stalled pool shutdown: id 166, 1 inflight 60 sec
[  635.379108][ T2763] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  635.383756][    C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  635.466111][ T2793] netlink: 'syz.0.8746': attribute type 1 has an invalid length.
[  635.486922][ T2793] 8021q: adding VLAN 0 to HW filter on device bond59
[  636.424115][    C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  636.487945][ T2849] netlink: 312 bytes leftover after parsing attributes in process `syz.0.8758'.
[  636.491860][ T2849] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8758'.
[  636.532658][ T2849] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8758'.
[  636.810449][ T2858] syzkaller1: entered promiscuous mode
[  636.812496][ T2858] syzkaller1: entered allmulticast mode
[  636.947814][ T2861] bond58: option all_slaves_active: invalid value (3)
[  636.952385][ T2861] bond58 (unregistering): Released all slaves
[  637.179002][ T2872] Bluetooth: hci1: expected 36 bytes, got 2 bytes
[  637.357982][ T2877] netlink: 'syz.0.8766': attribute type 1 has an invalid length.
[  637.413854][ T2877] bond60: entered promiscuous mode
[  637.415880][ T2877] 8021q: adding VLAN 0 to HW filter on device bond60
[  637.455854][ T2887] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8767'.
[  637.463822][    C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  637.522310][ T2894] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8768'.
[  637.565281][ T2894] bond61: entered promiscuous mode
[  637.571632][ T2894] vcan1: entered promiscuous mode
[  637.573853][ T2894] vcan1: entered allmulticast mode
[  637.612706][ T2897] netlink: 14 bytes leftover after parsing attributes in process `syz.0.8769'.
[  637.759682][ T2902] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8771'.
[  637.849061][ T2907] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8772'.
[  637.858421][ T2907] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8772'.
[  637.992405][ T2934] bond58: option all_slaves_active: invalid value (3)
[  637.999204][ T2934] bond58 (unregistering): Released all slaves
[  638.045835][ T2940] mac80211_hwsim hwsim7 syzkaller0: left promiscuous mode
[  638.048295][ T2940] mac80211_hwsim hwsim7 syzkaller0: left allmulticast mode
[  638.227116][ T2954] netlink: 'syz.2.8780': attribute type 1 has an invalid length.
[  638.230165][ T2954] netlink: 224 bytes leftover after parsing attributes in process `syz.2.8780'.
[  638.390392][ T2958] xt_hashlimit: max too large, truncated to 1048576
[  638.504109][    C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  638.551464][ T2960] bond62: option all_slaves_active: invalid value (3)
[  638.554881][ T2960] bond62 (unregistering): Released all slaves
[  638.664033][   T54] Bluetooth: hci2: command 0x0405 tx timeout
[  639.155616][ T2993] netlink: 'syz.1.8791': attribute type 2 has an invalid length.
[  639.158236][ T2993] netlink: 'syz.1.8791': attribute type 8 has an invalid length.
[  639.543987][    C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  639.584375][ T2972] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  639.654122][ T3003] xt_hashlimit: size too large, truncated to 1048576
[  639.663872][ T3002] bond62: option all_slaves_active: invalid value (3)
[  639.669998][ T3002] bond62 (unregistering): Released all slaves
[  639.812803][ T3018] IPVS: sync thread started: state = BACKUP, mcast_ifn = macsec0, syncid = 4, id = 0
[  639.829201][ T3019] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[  639.847586][ T3021] syzkaller1: entered promiscuous mode
[  639.849470][ T3021] syzkaller1: entered allmulticast mode
[  640.006654][ T3035] xt_hashlimit: size too large, truncated to 1048576
[  640.144171][ T3047] openvswitch: netlink: EtherType 0 is less than min 600
[  640.172761][ T3049] netlink: 'syz.2.8808': attribute type 4 has an invalid length.
[  640.215344][ T3055] openvswitch: netlink: Invalid VLAN frame
[  640.242440][ T3055] bond58: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  640.254374][ T3055] bond58 (unregistering): Released all slaves
[  640.325799][ T3060] syzkaller1: entered promiscuous mode
[  640.327884][ T3060] syzkaller1: entered allmulticast mode
[  640.556625][ T3080] ip6t_REJECT: TCP_RESET illegal for non-tcp
[  640.579980][ T3082] openvswitch: netlink: Actions may not be safe on all matching packets
[  640.584275][    C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  640.634651][ T3087] netlink: 'syz.2.8820': attribute type 39 has an invalid length.
[  640.637628][ T3089] netlink: 'syz.0.8821': attribute type 1 has an invalid length.
[  640.640140][ T3089] netlink: 'syz.0.8821': attribute type 1 has an invalid length.
[  640.648938][T27734] smc: removing ib device syz0
[  640.681541][T27734] smbdirect: ib_dev[syz0] removed
[  640.734705][ T3092] xt_hashlimit: size too large, truncated to 1048576
[  640.975608][ T3104] ip6t_REJECT: TCP_RESET illegal for non-tcp
[  641.141068][ T3116] openvswitch: netlink: Flow key attribute not present in set flow.
[  641.571710][ T3151] __nla_validate_parse: 21 callbacks suppressed
[  641.571721][ T3151] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8839'.
[  641.623692][    C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  641.664277][ T3156] netlink: 'syz.1.8838': attribute type 4 has an invalid length.
[  642.373886][ T3158] netlink: 9 bytes leftover after parsing attributes in process `syz.2.8840'.
[  642.379791][ T3158] netlink: 9 bytes leftover after parsing attributes in process `syz.2.8840'.
[  642.454054][ T3167] netlink: 'syz.0.8844': attribute type 21 has an invalid length.
[  642.454331][ T3164]  speed is unknown, defaulting to 1000
[  642.654675][ T3185] netlink: 'syz.0.8848': attribute type 1 has an invalid length.
[  642.664630][    C1] net_ratelimit: 1 callbacks suppressed
[  642.664644][    C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  642.728780][ T3185] bond62: entered promiscuous mode
[  642.730758][ T3185] 8021q: adding VLAN 0 to HW filter on device bond62
[  643.056807][ T3201] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  643.115843][ T3206] netlink: 104 bytes leftover after parsing attributes in process `syz.0.8855'.
[  643.144050][ T3203] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8854'.
[  643.173115][ T3208]  speed is unknown, defaulting to 1000
[  643.286314][ T3215] xt_cgroup: invalid path, errno=-2
[  643.288412][ T3215] netlink: 32 bytes leftover after parsing attributes in process `syz.2.8858'.
[  643.311278][ T3217] netlink: 'syz.2.8859': attribute type 1 has an invalid length.
[  643.316972][ T3217] nbd: illegal input index 871591272
[  643.356978][ T3219] netlink: 180 bytes leftover after parsing attributes in process `syz.2.8860'.
[  643.360073][ T3219] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8860'.
[  643.368966][ T3219] netlink: 52 bytes leftover after parsing attributes in process `syz.2.8860'.
[  643.402086][ T3219] ip6tnl9: entered allmulticast mode
[  643.414328][ T3225] tipc: Enabling of bearer <udp:syz1> rejected, max 3 bearers permitted
[  643.415834][ T3224] ip6t_REJECT: TCP_RESET illegal for non-tcp
[  643.417347][ T3225] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8860'.
[  643.564680][ T3233] tipc: Resetting bearer <eth:veth1_to_bond>
[  643.703802][    C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  643.718255][ T3245] ip6t_REJECT: TCP_RESET illegal for non-tcp
[  643.745157][ T3252] netlink: 'syz.1.8871': attribute type 7 has an invalid length.
[  643.750341][ T3252] netlink: 'syz.1.8871': attribute type 8 has an invalid length.
[  643.881468][ T3267] 0X: renamed from batadv0
[  643.885217][ T3267] 0X: entered allmulticast mode
[  643.888231][ T3269] netlink: 'syz.1.8877': attribute type 1 has an invalid length.
[  643.891867][ T3267] 8021q: adding VLAN 0 to HW filter on device 60X
[  643.896397][ T3267] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check.
[  644.307777][ T3310] ip6t_REJECT: TCP_RESET illegal for non-tcp
[  644.744197][    C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  645.783720][    C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  646.307675][ T3335] ip6t_REJECT: TCP_RESET illegal for non-tcp
[  646.327832][ T3337] openvswitch: netlink: IP tunnel dst address not specified
[  646.470562][ T3351] bond58: option all_slaves_active: invalid value (3)
[  646.474972][ T3351] bond58 (unregistering): Released all slaves
[  646.590189][ T3362] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  646.767005][ T3381] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  646.825076][    C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  647.165860][ T3392] xt_TCPMSS: Only works on TCP SYN packets
[  647.176460][ T3392] __nla_validate_parse: 13 callbacks suppressed
[  647.176475][ T3392] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8909'.
[  647.317670][ T3400] netlink: 72 bytes leftover after parsing attributes in process `syz.2.8912'.
[  647.355927][ T3400] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8912'.
[  647.362772][ T3400] netlink: 256 bytes leftover after parsing attributes in process `syz.2.8912'.
[  647.430777][ T3404] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8914'.
[  647.441594][ T3404] netlink: 200 bytes leftover after parsing attributes in process `syz.2.8914'.
[  647.527429][T12820] nci: nci_add_new_protocol: the target found does not have the desired protocol
[  647.863881][    C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  648.402923][ T3423] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8918'.
[  648.409780][ T3423] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8918'.
[  648.905360][    C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  649.943776][    C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  650.461065][ T3406] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  650.685342][ T3455] validate_nla: 4 callbacks suppressed
[  650.685352][ T3455] netlink: 'syz.0.8927': attribute type 5 has an invalid length.
[  650.690893][ T3461] netlink: 'syz.0.8927': attribute type 5 has an invalid length.
[  650.806585][ T3468] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8929'.
[  650.897984][ T3471] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8929'.
[  650.903371][ T3471] nbd: device at index 64 is going down
[  650.984205][    C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  651.569721][ T3516] syzkaller1: entered promiscuous mode
[  651.571934][ T3516] syzkaller1: entered allmulticast mode
[  651.876139][ T3550] ip6t_REJECT: TCP_RESET illegal for non-tcp
[  651.925985][ T3557] bond59: entered allmulticast mode
[  651.931175][ T3560] netlink: 'syz.2.8953': attribute type 3 has an invalid length.
[  651.932724][ T3557] macvlan3: entered promiscuous mode
[  651.935506][ T3557] macvlan3: entered allmulticast mode
[  651.937857][ T3557] bond59: entered promiscuous mode
[  651.939966][ T3557] 8021q: adding VLAN 0 to HW filter on device macvlan3
[  651.948773][ T3557] bond59: left promiscuous mode
[  651.981568][ T3563] netlink: 'syz.1.8952': attribute type 1 has an invalid length.
[  651.985089][ T3563] netlink: 'syz.1.8952': attribute type 4 has an invalid length.
[  652.023700][    C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  652.111539][ T3577] ip6t_REJECT: TCP_RESET illegal for non-tcp
[  652.237035][ T3583] sctp: [Deprecated]: syz.2.8961 (pid 3583) Use of struct sctp_assoc_value in delayed_ack socket option.
[  652.237035][ T3583] Use struct sctp_sack_info instead
[  652.445568][ T3594] TC_ACT_REPEAT abuse ?
[  652.492831][ T3603] x_tables: ip6_tables: sctp match: only valid for protocol 132
[  652.501030][ T3605] x_tables: duplicate underflow at hook 2
[  652.566634][ T3607] netlink: 'syz.0.8970': attribute type 1 has an invalid length.
[  652.637981][ T3611] tipc: Enabling of bearer <eth:macvlan1> rejected, max 3 bearers permitted
[  652.642059][ T3615] __nla_validate_parse: 6 callbacks suppressed
[  652.642069][ T3615] netlink: 36 bytes leftover after parsing attributes in process `syz.0.8970'.
[  652.688264][ T3621] syzkaller1: entered promiscuous mode
[  652.690388][ T3621] syzkaller1: entered allmulticast mode
[  652.731121][ T3622] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8974'.
[  652.739118][ T3629] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8977'.
[  652.786867][ T3622] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8974'.
[  652.809876][ T3635] bond60: option arp_validate: mode dependency failed, not supported in mode 802.3ad(4)
[  652.814798][ T3635] bond60 (unregistering): Released all slaves
[  652.878187][ T3647] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8981'.
[  652.955233][ T3656] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8984'.
[  653.057868][ T3664]  speed is unknown, defaulting to 1000
[  653.064292][    C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  653.366571][ T3675] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8990'.
[  653.504688][ T3684] netlink: 'syz.1.8992': attribute type 10 has an invalid length.
[  653.729947][ T3702] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8998'.
[  653.788689][ T3704] syzkaller1: entered promiscuous mode
[  653.790798][ T3704] syzkaller1: entered allmulticast mode
[  653.829455][ T3706] syzkaller1: entered promiscuous mode
[  653.840403][ T3706] syzkaller1: entered allmulticast mode
[  653.897216][ T3710] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9002'.
[  654.076485][ T3724] ip6t_REJECT: TCP_RESET illegal for non-tcp
[  654.095141][ T3727] syzkaller1: entered promiscuous mode
[  654.097258][ T3727] syzkaller1: entered allmulticast mode
[  654.103872][    C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  654.372060][ T3754] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9020'.
[  654.544672][ T3767] tc_dump_action: action bad kind
[  655.144196][    C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  655.527208][ T3813] openvswitch: netlink: Unknown key attributes 2
[  655.596916][ T3824] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold
[  655.610488][ T3827] Cannot find del_set index 14804 as target
[  655.696302][ T3837] IPv6: NLM_F_CREATE should be specified when creating new route
[  655.728106][ T3839] syzkaller1: entered promiscuous mode
[  655.731558][ T3839] syzkaller1: entered allmulticast mode
[  655.781326][ T3851] netlink: 'syz.2.9049': attribute type 1 has an invalid length.
[  655.872031][ T3866] netlink: 'syz.0.9053': attribute type 1 has an invalid length.
[  655.891912][ T3866] 8021q: adding VLAN 0 to HW filter on device bond63
[  655.947029][ T3875] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check.
[  655.952815][   T24]  speed is unknown, defaulting to 1000
[  655.954974][   T24] sy2: Port: 1 Link DOWN
[  656.050846][ T3888] syzkaller1: entered promiscuous mode
[  656.056572][ T3888] syzkaller1: entered allmulticast mode
[  656.100861][ T3883] macsec0: entered promiscuous mode
[  656.102644][ T3883] macsec0: entered allmulticast mode
[  656.183810][    C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  656.188436][ T3898] netlink: 'syz.2.9059': attribute type 1 has an invalid length.
[  656.248078][ T3898] bond59: (slave bridge41): Enslaving as a backup interface with an up link
[  656.287720][ T3910] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  656.291865][ T3910] syzkaller0: entered promiscuous mode
[  656.293992][ T3910] syzkaller0: entered allmulticast mode
[  656.328226][ T3910] tipc: Resetting bearer <eth:syzkaller0>
[  656.335124][ T3909] tipc: Resetting bearer <eth:syzkaller0>
[  656.360269][ T3909] tipc: Disabling bearer <eth:syzkaller0>
[  656.549160][ T3929] netlink: 'syz.1.9070': attribute type 32 has an invalid length.
[  656.573701][ T3929] bond60: Setting coupled_control to off (0)
[  656.779667][ T3947] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode
[  656.784809][ T3947] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode
[  657.021845][ T3962] netlink: 'syz.2.9079': attribute type 1 has an invalid length.
[  657.225090][    C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  657.240923][ T3988] bond64 (unregistering): Released all slaves
[  657.273504][ T3991] netlink: 'syz.0.9087': attribute type 1 has an invalid length.
[  657.482569][ T4003] tap0: tun_chr_ioctl cmd 1074025677
[  657.486818][ T4003] tap0: linktype set to 778
[  657.515810][ T4003] netlink: 'syz.0.9092': attribute type 16 has an invalid length.
[  657.977619][ T4024] syzkaller1: entered promiscuous mode
[  657.981614][ T4024] syzkaller1: entered allmulticast mode
[  658.263734][    C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  658.831603][ T4061] ip6t_REJECT: TCP_RESET illegal for non-tcp
[  659.305288][    C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  660.344162][    C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  660.912703][ T4070] __nla_validate_parse: 18 callbacks suppressed
[  660.912722][ T4070] netlink: 20 bytes leftover after parsing attributes in process `syz.0.9112'.
[  660.980497][ T4072] openvswitch: netlink: IPv4 tun info is not correct
[  661.040607][ T4080] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9117'.
[  661.107691][ T4080] bond60: entered promiscuous mode
[  661.111977][ T4080] 8021q: adding VLAN 0 to HW filter on device bond60
[  661.127756][ T4083] syzkaller1: entered promiscuous mode
[  661.133171][ T4083] syzkaller1: entered allmulticast mode
[  661.177871][ T4092] netlink: 'syz.2.9120': attribute type 7 has an invalid length.
[  661.178206][ T4090] netlink: 52 bytes leftover after parsing attributes in process `syz.1.9121'.
[  661.180307][ T4092] netlink: 'syz.2.9120': attribute type 8 has an invalid length.
[  661.313040][ T4100] bond65: option all_slaves_active: invalid value (3)
[  661.322935][ T4100] bond65 (unregistering): Released all slaves
[  661.388503][    C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  661.891931][ T4136] netlink: 'syz.0.9135': attribute type 9 has an invalid length.
[  661.895600][ T4136] netlink: 212340 bytes leftover after parsing attributes in process `syz.0.9135'.
[  661.900728][ T4136] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9135'.
[  661.946022][ T4134]  speed is unknown, defaulting to 1000
[  661.962656][ T4140] netlink: 84 bytes leftover after parsing attributes in process `syz.2.9134'.
[  661.970938][ T4140] netlink: 84 bytes leftover after parsing attributes in process `syz.2.9134'.
[  662.423742][    C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  662.526420][ T4160] netlink: 'syz.2.9141': attribute type 4 has an invalid length.
[  662.529475][ T4160] netlink: 17 bytes leftover after parsing attributes in process `syz.2.9141'.
[  662.562614][ T4165] netlink: 'syz.2.9142': attribute type 1 has an invalid length.
[  662.566502][ T4165] netlink: 'syz.2.9142': attribute type 2 has an invalid length.
[  662.671023][ T4178] netlink: 68 bytes leftover after parsing attributes in process `syz.2.9144'.
[  662.776982][ T4185] syzkaller1: entered promiscuous mode
[  662.778941][ T4185] syzkaller1: entered allmulticast mode
[  662.908864][ T4187] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.9148'.
[  662.922113][ T4187] ?: option downdelay: invalid value (18446744073709547007)
[  662.926452][ T4187] ?: option downdelay: allowed values 0 - 2147483647
[  662.929848][ T4187] ? (unregistering): Released all slaves
[  663.048401][ T4194] netlink: 'syz.2.9150': attribute type 4 has an invalid length.
[  663.171654][ T4196] vlan6: entered allmulticast mode
[  663.174426][ T4196] bond0: entered allmulticast mode
[  663.176125][ T4196] bridge8: entered allmulticast mode
[  663.257889][ T4205] syzkaller0: entered promiscuous mode
[  663.261417][ T4205] syzkaller0: entered allmulticast mode
[  663.451037][ T4221] bond65: option coupled_control: mode dependency failed, not supported in mode balance-rr(0)
[  663.457250][ T4221] bond65 (unregistering): Released all slaves
[  663.465097][    C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  663.479750][ T4225] netlink: 'syz.1.9160': attribute type 29 has an invalid length.
[  663.487286][ T4225] netlink: 'syz.1.9160': attribute type 29 has an invalid length.
[  663.496409][ T4225] netlink: 'syz.1.9160': attribute type 16 has an invalid length.
[  663.538392][ T4225] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check.
[  663.549431][   T24]  speed is unknown, defaulting to 1000
[  663.552080][   T24] sy2: Port: 1 Link ACTIVE
[  663.572093][ T4231] bond61: entered promiscuous mode
[  663.581180][ T4231] vcan0: entered promiscuous mode
[  663.583030][ T4231] vcan0: entered allmulticast mode
[  663.586238][ T4231] bond61: (slave vcan0): The slave device specified does not support setting the MAC address
[  663.592151][ T4231] bond61: (slave vcan0): Error -95 calling set_mac_address
[  663.701047][ T4246] sch_tbf: burst 2463 is lower than device geneve1 mtu (32783) !
[  663.849660][ T4253] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check.
[  664.190602][ T4276] bond1: (slave lo): Releasing backup interface
[  664.194725][ T4276] bond1: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed
[  664.199468][ T4276] team0: Port device geneve1 removed
[  664.202963][ T4276] bond5: (slave bridge6): Releasing active interface
[  664.205757][ T4276] bond5: (slave bridge6): the permanent HWaddr of slave - 42:e1:1c:79:43:a6 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  664.211151][ T4276] bond5: (slave gretap2): making interface the new active one
[  664.217723][ T4276] bond5: (slave gretap2): Releasing active interface
[  664.222749][ T4276] bond7: (slave veth5): Releasing active interface
[  664.225882][ T4276] bond7: (slave veth5): the permanent HWaddr of slave - 76:0c:dd:ce:07:66 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  664.232836][ T4276] bond7: (slave veth7): Releasing active interface
[  664.237954][ T4276] bond8: (slave bridge7): Releasing backup interface
[  664.242446][ T4276] batman_adv: 60X: Removing interface: gretap3
[  664.246178][ T4276] bond10: (slave bridge11): Releasing active interface
[  664.250400][ T4276] bond11: (slave bridge13): Releasing active interface
[  664.255764][ T4276] bond16: (slave bond17): Releasing backup interface
[  664.260441][ T4276] bond23: (slave geneve4): Releasing active interface
[  664.267876][ T4276] bond25: (slave gretap4): Releasing active interface
[  664.271867][ T4276] batman_adv: 60X: Removing interface: vlan1
[  664.276364][ T4276] bond29: (slave bridge18): Releasing active interface
[  664.278935][ T4276] bridge18: left promiscuous mode
[  664.281009][ T4276] bridge18: left allmulticast mode
[  664.286871][ T4276] bond30: (slave bridge19): Releasing active interface
[  664.292081][ T4276] bond36: (slave bridge25): Releasing backup interface
[  664.297777][ T4276] bond37: (slave bridge26): Releasing backup interface
[  664.300481][ T4276] bridge26: left promiscuous mode
[  664.302634][ T4276] bridge26: left allmulticast mode
[  664.308630][ T4276] bond41: (slave bridge27): Releasing backup interface
[  664.311435][ T4276] bridge27: left promiscuous mode
[  664.316135][ T4276] bond45: (slave ip6gretap2): Releasing active interface
[  664.321397][ T4276] bond50: (slave veth31): Releasing active interface
[  664.326952][ T4276] bond52: (slave bridge38): Releasing backup interface
[  664.331546][ T4276] bond57: (slave bridge39): Releasing backup interface
[  664.336903][ T4276] bond59: (slave bridge41): Releasing backup interface
[  664.503846][    C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  665.189927][ T4316] syzkaller1: entered promiscuous mode
[  665.191797][ T4316] syzkaller1: entered allmulticast mode
[  665.449933][ T4330] ip6t_REJECT: TCP_RESET illegal for non-tcp
[  665.522083][ T4336] syzkaller1: entered promiscuous mode
[  665.528857][ T4336] syzkaller1: entered allmulticast mode
[  665.544609][    C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  665.650119][ T4342] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16)
[  665.653227][ T4342] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  665.880173][ T4351] ip6_tunnel: ip6tnl10 xmit: Local address not yet configured!
[  665.927173][ T4353] ip6t_REJECT: TCP_RESET illegal for non-tcp
[  666.174930][ T4371] ip6t_REJECT: TCP_RESET illegal for non-tcp
[  666.238541][ T4372] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  666.248819][ T4372] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  666.301084][ T4366] tipc: Resetting bearer <eth:veth1_to_bond>
[  666.584006][    C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  667.081890][ T4391] validate_nla: 11 callbacks suppressed
[  667.081901][ T4391] netlink: 'syz.2.9213': attribute type 1 has an invalid length.
[  667.108883][ T4396] netlink: 'syz.2.9214': attribute type 1 has an invalid length.
[  667.117105][ T4396] workqueue: Failed to create a rescuer kthread for wq "bond62": -EINTR
[  667.145895][ T4402] __nla_validate_parse: 33 callbacks suppressed
[  667.145907][ T4402] netlink: 40 bytes leftover after parsing attributes in process `syz.2.9215'.
[  667.155344][ T4402] netlink: 40 bytes leftover after parsing attributes in process `syz.2.9215'.
[  667.247017][ T4411] netlink: 36 bytes leftover after parsing attributes in process `syz.2.9218'.
[  667.387363][ T4423] bond61: Unable to set peer notification delay as MII monitoring is disabled
[  667.391216][ T4423] bond61 (unregistering): Released all slaves
[  667.495836][ T4435] ip6t_REJECT: TCP_RESET illegal for non-tcp
[  667.624884][    C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  667.666197][ T4446] netlink: 124 bytes leftover after parsing attributes in process `syz.2.9230'.
[  667.861797][ T4463] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9232'.
[  667.895482][ T4463] bond62: entered promiscuous mode
[  667.898058][ T4463] 8021q: adding VLAN 0 to HW filter on device bond62
[  667.917394][ T4467] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9234'.
[  667.920787][ T4467] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9234'.
[  667.959443][ T4469] tls_set_device_offload: netdev not found
[  667.965908][ T4469] xt_CHECKSUM: unsupported CHECKSUM operation 68
[  668.044659][ T4471] netlink: 36 bytes leftover after parsing attributes in process `syz.2.9236'.
[  668.090528][ T4481] netlink: 'syz.2.9240': attribute type 11 has an invalid length.
[  668.142837][ T4482] ip6t_REJECT: TCP_RESET illegal for non-tcp
[  668.223090][ T4490] netlink: 44 bytes leftover after parsing attributes in process `syz.2.9245'.
[  668.242323][ T4486] syzkaller0: create flow: hash 1367966236 index 1
[  668.254404][ T7002] syzkaller0: tun_net_xmit 76
[  668.288702][ T4486] tipc: Bearer <eth:macvlan1>: already 2 bearers with priority 10
[  668.291326][ T4486] tipc: Bearer <eth:macvlan1>: trying with adjusted priority
[  668.294551][ T4486] tipc: Enabled bearer <eth:macvlan1>, priority 9
[  668.300195][ T4494] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9247'.
[  668.313737][ T7002] syzkaller0: tun_net_xmit 76
[  668.387778][ T4499] xt_hashlimit: size too large, truncated to 1048576
[  668.394104][ T7002] syzkaller0: tun_net_xmit 76
[  668.485678][ T4503] netlink: 'syz.2.9250': attribute type 1 has an invalid length.
[  668.663735][    C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  668.693771][ T7002] syzkaller0: tun_net_xmit 76
[  668.714978][ T4526] xt_hashlimit: size too large, truncated to 1048576
[  668.800692][ T4530] openvswitch: netlink: Key 6 has unexpected len 214 expected 2
[  669.007516][ T4552] xt_hashlimit: size too large, truncated to 1048576
[  669.018828][ T4485] syzkaller0: delete flow: hash 1367966236 index 1
[  670.901497][ T4574] openvswitch: netlink: Message has 4 unknown bytes.
[  670.947945][ T4576] bond61: entered promiscuous mode
[  670.950453][ T4576] 8021q: adding VLAN 0 to HW filter on device bond61
[  670.976708][ T4576] 8021q: adding VLAN 0 to HW filter on device bond62
[  670.982274][ T4576] bond62: entered promiscuous mode
[  670.987746][ T4576] bond61: (slave bond62): Enslaving as an active interface with an up link
[  671.029554][ T4585] openvswitch: netlink: Unexpected mask (mask=40040, allowed=10048)
[  671.052327][ T4587] ip6t_REJECT: TCP_RESET illegal for non-tcp
[  671.114763][ T4593] bond63: option arp_validate: mode dependency failed, not supported in mode 802.3ad(4)
[  671.118911][ T4593] bond63 (unregistering): Released all slaves
[  671.260518][ T4609] bond0: (slave ipvlan0): Device is not bonding slave
[  671.264649][ T4609] bond0: option active_slave: invalid value (ipvlan0)
[  672.120635][ T4627] openvswitch: netlink: IP tunnel dst address not specified
[  672.155390][ T4629] netlink: 'syz.1.9285': attribute type 4 has an invalid length.
[  672.219979][ T4633] xt_NFQUEUE: number of queues (3633) out of range (got 69161)
[  672.223737][ T4633] netlink: 'syz.1.9287': attribute type 11 has an invalid length.
[  672.606026][ T4675] __nla_validate_parse: 159 callbacks suppressed
[  672.606037][ T4675] netlink: 6 bytes leftover after parsing attributes in process `syz.1.9294'.
[  672.663073][ T4678] netlink: 256 bytes leftover after parsing attributes in process `syz.2.9297'.
[  672.756759][ T4685] set match dimension is over the limit!
[  672.792129][ T4687] ip6t_REJECT: TCP_RESET illegal for non-tcp
[  672.920815][ T4695] netlink: 32 bytes leftover after parsing attributes in process `syz.2.9303'.
[  673.489397][ T4723] syzkaller1: entered promiscuous mode
[  673.491945][ T4723] syzkaller1: entered allmulticast mode
[  673.936612][ T4755] bond63: option packets_per_slave: invalid value (1048582)
[  673.939607][ T4755] bond63: option packets_per_slave: allowed values 0 - 65535
[  673.948147][ T4755] bond63 (unregistering): Released all slaves
[  674.207494][ T4768] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9321'.
[  674.211236][ T4768] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9321'.
[  674.250015][ T4771] netlink: 24 bytes leftover after parsing attributes in process `syz.2.9322'.
[  674.254734][ T4771] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9322'.
[  674.329675][ T4775] sctp: [Deprecated]: syz.1.9321 (pid 4775) Use of int in max_burst socket option deprecated.
[  674.329675][ T4775] Use struct sctp_assoc_value instead
[  675.072597][ T4781] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9323'.
[  675.116422][ T4781] team0: entered promiscuous mode
[  675.121037][ T4781] team0: entered allmulticast mode
[  675.124057][ T4781] 8021q: adding VLAN 0 to HW filter on device team0
[  675.125732][ T4785] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9323'.
[  675.132957][ T4785] team1 (uninitialized): Failed to send options change via netlink (err -105)
[  675.155132][ T4785] team1: entered promiscuous mode
[  675.157330][ T4785] team1: entered allmulticast mode
[  675.159922][ T4785] 8021q: adding VLAN 0 to HW filter on device team1
[  675.251810][ T4793] 8021q: adding VLAN 0 to HW filter on device ipvlan0
[  675.261315][ T4793] netlink: 'syz.2.9327': attribute type 10 has an invalid length.
[  675.264870][ T4793] syz_tun: entered promiscuous mode
[  675.285353][ T4793] netlink: 44 bytes leftover after parsing attributes in process `syz.2.9327'.
[  675.497685][ T4800] "syz.2.9329" (4800) uses obsolete ecb(arc4) skcipher
[  675.515422][    C1] vcan0: j1939_tp_rxtimer: 0xffff88818fb77000: Timeout. Failed to send simple message.
[  677.272834][ T4810] ip6_tunnel: ip6tnl10 xmit: Local address not yet configured!
[  677.312529][ T4812]  speed is unknown, defaulting to 1000
[  677.379239][ T4819] syzkaller1: entered promiscuous mode
[  677.381153][ T4819] syzkaller1: entered allmulticast mode
[  677.408739][ T4822] ip6t_REJECT: TCP_RESET illegal for non-tcp
[  677.628150][ T4831] syzkaller0: entered promiscuous mode
[  677.631207][ T4831] syzkaller0: entered allmulticast mode
[  677.634526][   T12] syzkaller0: tun_net_xmit 70
[  677.636463][ T4829] __nla_validate_parse: 2 callbacks suppressed
[  677.636474][ T4829] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9339'.
[  677.637229][ T4831] syzkaller0: tun_net_xmit 14
[  677.714375][ T4838] netlink: 'syz.0.9342': attribute type 2 has an invalid length.
[  677.719458][ T4838] netlink: 'syz.0.9342': attribute type 9 has an invalid length.
[  677.727061][ T4838] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.9342'.
[  677.800224][ T4842] netlink: 40 bytes leftover after parsing attributes in process `syz.2.9344'.
[  677.812476][ T4842] netlink: 'syz.2.9344': attribute type 1 has an invalid length.
[  677.898806][ T4852] bond65: entered allmulticast mode
[  677.958996][ T4860] macvlan2: entered promiscuous mode
[  677.960728][ T4860] macvlan2: entered allmulticast mode
[  677.963025][ T4860] bond65: entered promiscuous mode
[  677.970448][ T4860] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  677.977915][ T4860] bond65: left promiscuous mode
[  678.091823][ T4874] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9356'.
[  678.251735][ T4894] syzkaller1: entered promiscuous mode
[  678.257714][ T4894] syzkaller1: entered allmulticast mode
[  678.302043][ T4896] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  678.378537][ T4900] netlink: 24 bytes leftover after parsing attributes in process `syz.2.9365'.
[  678.402151][ T4902] netlink: 'syz.1.9364': attribute type 5 has an invalid length.
[  678.660393][ T4926] syzkaller1: entered promiscuous mode
[  678.662823][ T4926] syzkaller1: entered allmulticast mode
[  678.791505][ T4933] syzkaller1: entered promiscuous mode
[  678.795456][ T4933] syzkaller1: entered allmulticast mode
[  678.902480][ T4939] A link change request failed with some changes committed already. Interface ; may have been left with an inconsistent configuration, please check.
[  679.349444][ T4994] batadv0: entered promiscuous mode
[  679.351813][ T4994] macsec4: entered promiscuous mode
[  679.354725][ T4994] macsec4: entered allmulticast mode
[  679.357125][ T4994] 8021q: adding VLAN 0 to HW filter on device macsec4
[  679.360202][ T4994] batadv0: left promiscuous mode
[  679.396586][ T5000] netlink: 120 bytes leftover after parsing attributes in process `syz.2.9385'.
[  679.401090][ T5000] netlink: 120 bytes leftover after parsing attributes in process `syz.2.9385'.
[  679.460832][ T5007] RDS: rds_bind could not find a transport for ::ffff:172.20.20.54, load rds_tcp or rds_rdma?
[  679.597967][ T5021] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  679.610249][ T5021] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  679.611907][ T5024] netlink: 24 bytes leftover after parsing attributes in process `syz.1.9391'.
[  679.641693][ T5024] netlink: 16 bytes leftover after parsing attributes in process `syz.1.9391'.
[  679.861102][ T5035] netlink: 28 bytes leftover after parsing attributes in process `syz.2.9395'.
[  679.945556][ T5049] ip6t_REJECT: TCP_RESET illegal for non-tcp
[  680.126828][ T5067] syzkaller1: entered promiscuous mode
[  680.128743][ T5067] syzkaller1: entered allmulticast mode
[  680.420330][ T5085] netlink: 'syz.0.9408': attribute type 4 has an invalid length.
[  680.482046][ T5087] netlink: 'syz.0.9408': attribute type 4 has an invalid length.
[  681.054910][ T5092] netlink: 'syz.2.9411': attribute type 1 has an invalid length.
[  681.071521][ T5092] 8021q: adding VLAN 0 to HW filter on device bond63
[  681.265052][ T5095] netlink: 'syz.1.9412': attribute type 2 has an invalid length.
[  681.330595][ T5095] 8021q: adding VLAN 0 to HW filter on device bond0
[  681.420556][ T5104] unsupported nlmsg_type 40
[  681.541472][ T5118] netlink: 'syz.1.9419': attribute type 2 has an invalid length.
[  681.726663][ T5129] syzkaller1: entered promiscuous mode
[  681.729071][ T5129] syzkaller1: entered allmulticast mode
[  681.923098][ T5139] netlink: zone id is out of range
[  681.926594][ T5139] netlink: zone id is out of range
[  681.929249][ T5139] netlink: zone id is out of range
[  681.931647][ T5139] netlink: zone id is out of range
[  681.935028][ T5139] netlink: zone id is out of range
[  681.937245][ T5139] netlink: zone id is out of range
[  681.960633][ T5141] netlink: 'syz.0.9429': attribute type 1 has an invalid length.
[  682.189500][ T5156] ip6t_REJECT: TCP_RESET illegal for non-tcp
[  682.228404][ T5158] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  682.232232][ T5158] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  682.318117][ T5162] gtp6: entered promiscuous mode
[  682.319890][ T5162] gtp6: entered allmulticast mode
[  682.439406][ T5166] tipc: Resetting bearer <eth:syzkaller0>
[  682.692063][ T5185] ip6t_REJECT: TCP_RESET illegal for non-tcp
[  682.732445][ T5189] __nla_validate_parse: 13 callbacks suppressed
[  682.732459][ T5189] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9443'.
[  682.879998][ T5194] x_tables: unsorted underflow at hook 3
[  682.968011][ T5203] 8021q: VLANs not supported on gre0
[  683.005403][ T5206] dvmrp0: left allmulticast mode
[  683.180263][ T5222] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9454'.
[  683.250111][ T5235] syzkaller1: entered promiscuous mode
[  683.252036][ T5235] syzkaller1: entered allmulticast mode
[  683.386815][ T5248] syzkaller1: tun_chr_ioctl cmd 2147767520
[  683.537698][ T5254] netlink: 'syz.0.9463': attribute type 4 has an invalid length.
[  683.709826][ T5284] netlink: 104 bytes leftover after parsing attributes in process `syz.1.9468'.
[  683.725184][ T5285] netlink: 104 bytes leftover after parsing attributes in process `syz.1.9468'.
[  683.816863][ T5281] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9467'.
[  683.820728][ T5281] netlink: 32 bytes leftover after parsing attributes in process `syz.0.9467'.
[  683.825720][ T5281] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9467'.
[  683.920067][ T5298] syzkaller1: entered promiscuous mode
[  683.921961][ T5298] syzkaller1: entered allmulticast mode
[  684.043833][ T5303] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9474'.
[  684.055270][ T5305] veth37: entered allmulticast mode
[  684.071515][ T5304] bond64 (unregistering): Released all slaves
[  684.087432][ T5300]  speed is unknown, defaulting to 1000
[  684.169269][ T5309] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9475'.
[  684.176463][ T5309] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9475'.
[  684.315436][ T5322] openvswitch: netlink: Key type 142 is out of range max 32
[  684.414259][ T5325] syzkaller1: entered promiscuous mode
[  684.416078][ T5325] syzkaller1: entered allmulticast mode
[  685.446770][ T5342] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  685.661623][ T5376] syzkaller1: entered promiscuous mode
[  685.664699][ T5376] syzkaller1: entered allmulticast mode
[  685.840714][ T5394]  speed is unknown, defaulting to 1000
[  686.035933][ T5401] workqueue: Failed to create a rescuer kthread for wq "bond66": -EINTR
[  686.182323][ T5407] ip6t_REJECT: TCP_RESET illegal for non-tcp
[  686.947719][ T5444] openvswitch: netlink: Unexpected mask (mask=200440, allowed=10048)
[  687.070877][ T5452] ip6t_REJECT: TCP_RESET illegal for non-tcp
[  687.221684][ T5468] netlink: 'syz.0.9518': attribute type 1 has an invalid length.
[  687.274122][ T5469] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check.
[  687.281318][T22091]  speed is unknown, defaulting to 1000
[  687.283557][T22091] sy2: Port: 1 Link DOWN
[  687.335834][ T5474] ip6t_REJECT: TCP_RESET illegal for non-tcp
[  687.364979][ T5477] IPVS: set_ctl: invalid protocol: 50 172.20.20.187:20004
[  687.612529][ T5487] openvswitch: netlink: Unexpected mask (mask=100000000, allowed=10048)
[  687.754870][ T5492] __nla_validate_parse: 7 callbacks suppressed
[  687.754886][ T5492] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9527'.
[  687.761044][ T5492] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9527'.
[  687.766498][ T5492] rdma_op ffff88810f8a81f0 conn xmit_rdma 0000000000000000
[  687.827772][ T5502] netlink: 72 bytes leftover after parsing attributes in process `syz.0.9528'.
[  688.330444][ T5550] ip6t_REJECT: TCP_RESET illegal for non-tcp
[  688.447989][ T5558] tipc: Failed to remove unknown binding: 66,0,0/2886997007:921353651/921353653
[  688.461822][ T5558] tipc: Failed to remove unknown binding: 66,0,0/2886997007:921353651/921353652
[  688.477401][ T5558] tipc: Failed to remove unknown binding: 66,0,0/2886997007:921353651/921353653
[  688.481458][ T5558] tipc: Failed to remove unknown binding: 66,0,0/2886997007:921353651/921353652
[  688.542763][ T5576] netlink: 'syz.2.9550': attribute type 1 has an invalid length.
[  688.550097][ T5577] netlink: zone id is out of range
[  688.577341][ T5576] bond64: (slave vxcan3): The slave device specified does not support setting the MAC address
[  688.581026][ T5576] bond64: (slave vxcan3): Error -95 calling set_mac_address
[  688.646895][ T5576] bond64: (slave bridge47): Enslaving as an active interface with a down link
[  688.656512][ T5576] macvlan13: entered promiscuous mode
[  688.658352][ T5576] macvlan13: entered allmulticast mode
[  688.660490][ T5576] bond64: entered promiscuous mode
[  688.662548][ T5576] 8021q: adding VLAN 0 to HW filter on device macvlan13
[  688.666733][ T5576] bond64: left promiscuous mode
[  688.795667][ T5600] netlink: 36 bytes leftover after parsing attributes in process `syz.2.9558'.
[  688.859188][ T5609] sctp: [Deprecated]: syz.2.9560 (pid 5609) Use of int in max_burst socket option deprecated.
[  688.859188][ T5609] Use struct sctp_assoc_value instead
[  688.912388][ T5618] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9562'.
[  688.916867][ T5618] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9562'.
[  689.110709][ T5629] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9566'.
[  689.172735][ T5631] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9567'.
[  689.280187][ T5645] netlink: 16 bytes leftover after parsing attributes in process `syz.2.9570'.
[  689.341795][ T5647] netlink: get zone limit has 4 unknown bytes
[  689.456087][ T5662] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9574'.
[  689.461659][ T5664] ip6t_REJECT: TCP_RESET illegal for non-tcp
[  689.506614][ T5669] syzkaller1: entered promiscuous mode
[  689.508556][ T5669] syzkaller1: entered allmulticast mode
[  689.692114][ T5687] kthread_run failed with err -4
[  689.981169][ T5714]  speed is unknown, defaulting to 1000
[  690.164927][ T5719] syzkaller1: entered promiscuous mode
[  690.166851][ T5719] syzkaller1: entered allmulticast mode
[  690.298387][ T5721] mac80211_hwsim hwsim5 syzkaller0: left allmulticast mode
[  690.534739][ T5699] syz.1.9585 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000
[  690.546410][ T5699] CPU: 1 UID: 0 PID: 5699 Comm: syz.1.9585 Not tainted syzkaller #0 PREEMPT(full) 
[  690.546424][ T5699] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  690.546429][ T5699] Call Trace:
[  690.546433][ T5699]  <TASK>
[  690.546437][ T5699]  dump_stack_lvl+0xe8/0x150
[  690.546451][ T5699]  dump_header+0xd3/0x4c0
[  690.546464][ T5699]  oom_kill_process+0x3ab/0x970
[  690.546477][ T5699]  out_of_memory+0x106c/0x1410
[  690.546485][ T5699]  ? try_charge_memcg+0xbb9/0x1570
[  690.546497][ T5699]  ? __pfx___mutex_lock+0x10/0x10
[  690.546510][ T5699]  ? __pfx_out_of_memory+0x10/0x10
[  690.546518][ T5699]  ? do_raw_spin_unlock+0x4d/0x210
[  690.546533][ T5699]  try_charge_memcg+0xc77/0x1570
[  690.546550][ T5699]  ? __pfx_try_charge_memcg+0x10/0x10
[  690.546559][ T5699]  ? percpu_ref_tryget+0x15/0x180
[  690.546577][ T5699]  ? charge_memcg+0x23/0x2b0
[  690.546587][ T5699]  charge_memcg+0x1a2/0x2b0
[  690.546598][ T5699]  ? mem_cgroup_swapin_charge_folio+0x33/0x390
[  690.546607][ T5699]  mem_cgroup_swapin_charge_folio+0x262/0x390
[  690.546618][ T5699]  __swap_cache_prepare_and_add+0xdc/0x700
[  690.546629][ T5699]  ? page_rmappable_folio+0x9a/0x170
[  690.546644][ T5699]  swap_cache_alloc_folio+0xf1/0x240
[  690.546653][ T5699]  swap_cluster_readahead+0x355/0x670
[  690.546665][ T5699]  ? __pfx_swap_cluster_readahead+0x10/0x10
[  690.546678][ T5699]  ? get_vma_policy+0x27b/0x3c0
[  690.546692][ T5699]  swapin_readahead+0x196/0xc50
[  690.546707][ T5699]  ? swap_table_get+0x1e/0x260
[  690.546722][ T5699]  ? __pfx_swapin_readahead+0x10/0x10
[  690.546737][ T5699]  ? swap_table_get+0x1e/0x260
[  690.546750][ T5699]  ? swap_table_get+0x1e/0x260
[  690.546761][ T5699]  ? swap_table_get+0x1e/0x260
[  690.546773][ T5699]  ? swap_table_get+0x216/0x260
[  690.546785][ T5699]  ? swap_cache_get_folio+0x2e4/0x2f0
[  690.546800][ T5699]  do_swap_page+0x555/0x5120
[  690.546819][ T5699]  ? __pte_offset_map+0x29/0x240
[  690.546833][ T5699]  ? __pte_offset_map+0x29/0x240
[  690.546845][ T5699]  ? do_swap_page+0x128/0x5120
[  690.546853][ T5699]  ? __pfx_do_swap_page+0x10/0x10
[  690.546860][ T5699]  ? __pte_offset_map+0x1ae/0x240
[  690.546870][ T5699]  ? pte_offset_map_rw_nolock+0xea/0x160
[  690.546879][ T5699]  handle_mm_fault+0x12d2/0x3170
[  690.546894][ T5699]  ? handle_mm_fault+0xee/0x3170
[  690.546904][ T5699]  ? __pfx_handle_mm_fault+0x10/0x10
[  690.546912][ T5699]  ? lock_vma_under_rcu+0x45a/0x500
[  690.546931][ T5699]  do_user_addr_fault+0xa73/0x1340
[  690.546942][ T5699]  ? rcu_is_watching+0x15/0xb0
[  690.546951][ T5699]  ? trace_page_fault_user+0x84/0x1e0
[  690.546959][ T5699]  exc_page_fault+0x6a/0xc0
[  690.546970][ T5699]  asm_exc_page_fault+0x26/0x30
[  690.546978][ T5699] RIP: 0033:0x7f3ec7b57f38
[  690.546987][ T5699] Code: 75 40 a8 10 75 3c 41 51 4c 8d 9b 08 03 00 00 49 89 c9 48 89 f1 41 50 48 8b 74 24 20 49 89 d0 48 89 fa 4c 89 df e8 a8 56 00 00 <8b> 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00
[  690.546993][ T5699] RSP: 002b:00007ffd8e11a870 EFLAGS: 00010246
[  690.547001][ T5699] RAX: 0000000000000000 RBX: 000055558aa20500 RCX: 00007f3ec7b5d60e
[  690.547006][ T5699] RDX: 00007ffd8e11a8c0 RSI: 0000000000000000 RDI: 0000000000000000
[  690.547011][ T5699] RBP: 00007f3ec7e17da0 R08: 0000000000000000 R09: 0000000000000000
[  690.547015][ T5699] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000000a8937
[  690.547020][ T5699] R13: 00007f3ec7e1609c R14: 00000000000a86ee R15: 00007f3ec7e16090
[  690.547032][ T5699]  </TASK>
[  690.547036][ T5699] memory: usage 307200kB, limit 307200kB, failcnt 6395
[  690.676999][ T5699] memory+swap: usage 307396kB, limit 9007199254740988kB, failcnt 0
[  690.680466][ T5699] kmem: usage 307164kB, limit 9007199254740988kB, failcnt 0
[  690.693655][ T5699] Memory cgroup stats for /syz1:
[  690.693747][ T5699] cache 0
[  690.701368][ T5699] rss 0
[  690.704539][ T5699] rss_huge 0
[  690.705861][ T5699] shmem 0
[  690.713731][ T5699] mapped_file 0
[  690.715081][ T5699] dirty 0
[  690.716118][ T5699] writeback 0
[  690.717246][ T5699] workingset_refault_anon 16
[  690.718790][ T5699] workingset_refault_file 1986
[  690.720378][ T5699] swap 200704
[  690.721523][ T5699] swapcached 471040
[  690.722747][ T5699] pgpgin 402690
[  690.736070][ T5699] pgpgout 402681
[  690.739296][ T5699] pgfault 693836
[  690.740459][ T5699] pgmajfault 20
[  690.745128][ T5699] inactive_anon 8192
[  690.746415][ T5699] active_anon 28672
[  690.753748][ T5699] inactive_file 0
[  690.755029][ T5699] active_file 0
[  690.756295][ T5699] unevictable 0
[  690.757427][ T5699] hierarchical_memory_limit 314572800
[  690.763658][ T5699] hierarchical_memsw_limit 9223372036854771712
[  690.766315][ T5699] total_cache 0
[  690.767514][ T5699] total_rss 0
[  690.771130][ T5699] total_rss_huge 0
[  690.772349][ T5699] total_shmem 0
[  690.776944][ T5699] total_mapped_file 0
[  690.778247][ T5699] total_dirty 0
[  690.783635][ T5699] total_writeback 0
[  690.787293][ T5699] total_workingset_refault_anon 16
[  690.791356][ T5699] total_workingset_refault_file 1986
[  690.796712][ T5699] total_swap 200704
[  690.799777][ T5699] total_swapcached 471040
[  690.802939][ T5699] total_pgpgin 402695
[  690.806293][ T5699] total_pgpgout 402686
[  690.807623][ T5699] total_pgfault 693854
[  690.811474][ T5699] total_pgmajfault 20
[  690.812833][ T5699] total_inactive_anon 8192
[  690.819963][ T5699] total_active_anon 28672
[  690.823214][ T5699] total_inactive_file 0
[  690.826522][ T5699] total_active_file 0
[  690.828857][ T5699] total_unevictable 0
[  690.830244][ T5699] anon_cost 0
[  690.833591][ T5699] file_cost 0
[  690.834801][ T5699] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.9585,pid=5699,uid=0
[  690.840015][ T5699] Memory cgroup out of memory: Killed process 5699 (syz.1.9585) total-vm:102496kB, anon-rss:1248kB, file-rss:22924kB, shmem-rss:0kB, UID:0 pgtables:136kB oom_score_adj:1000
[  691.038798][ T5752] netlink: 'syz.1.9599': attribute type 11 has an invalid length.
[  691.473693][ T5791] syzkaller1: entered promiscuous mode
[  691.477757][ T5791] syzkaller1: entered allmulticast mode
[  691.757269][ T5816] netlink: 'syz.1.9616': attribute type 3 has an invalid length.
[  691.820818][ T5823] netlink: 'syz.1.9619': attribute type 1 has an invalid length.
[  691.936409][ T5827] syzkaller1: entered promiscuous mode
[  691.938911][ T5827] syzkaller1: entered allmulticast mode
[  692.126754][ T5834] netlink: 'syz.1.9622': attribute type 12 has an invalid length.
[  692.193945][ T5837] nbd: must specify a size in bytes for the device
[  692.382999][ T5845]  speed is unknown, defaulting to 1000
[  692.715715][ T5865] syzkaller0: entered promiscuous mode
[  692.719170][ T5865] syzkaller0: entered allmulticast mode
[  694.692091][ T5891] __nla_validate_parse: 10 callbacks suppressed
[  694.692101][ T5891] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.9638'.
[  694.698238][ T5892] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.9638'.
[  694.721493][ T5888] netlink: 'syz.0.9637': attribute type 15 has an invalid length.
[  694.803229][ T5909] SET target dimension over the limit!
[  694.806402][ T5909] SET target dimension over the limit!
[  694.856558][ T5892] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9638'.
[  695.507087][ T5888] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  695.600282][ T5918] xt_recent: hitcount (33554435) is larger than allowed maximum (65535)
[  695.653166][ T5921] ip6t_REJECT: TCP_RESET illegal for non-tcp
[  695.659877][ T5925] netlink: 'syz.0.9643': attribute type 6 has an invalid length.
[  695.692171][ T5918] IPVS: Scheduler module ip_vs_sip not found
[  695.766132][ T5936] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9648'.
[  695.771044][ T5936] openvswitch: : Dropping previously announced user features
[  696.604842][ T5997] xt_recent: hitcount (33554435) is larger than allowed maximum (65535)
[  696.611107][ T5997] netlink: 'syz.1.9653': attribute type 1 has an invalid length.
[  696.644685][ T5997] 8021q: adding VLAN 0 to HW filter on device bond64
[  696.739253][ T6016] xt_hashlimit: size too large, truncated to 1048576
[  696.802183][ T6023] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9657'.
[  696.807630][ T6023] syzkaller0: entered promiscuous mode
[  696.818658][ T6023] syzkaller0: entered allmulticast mode
[  696.886055][ T6017] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9657'.
[  696.958333][ T6026] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9659'.
[  697.067682][ T6040] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9661'.
[  697.208851][ T6051] x_tables: ip_tables: owner match: used from hooks PREROUTING, but only valid from OUTPUT/POSTROUTING
[  697.286478][ T6054] netlink: 148 bytes leftover after parsing attributes in process `syz.1.9667'.
[  697.320090][ T6060] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9669'.
[  697.989487][ T6089] bond65: entered allmulticast mode
[  698.325725][ T6111] ip6t_REJECT: TCP_RESET illegal for non-tcp
[  698.374040][ T6115] netlink: 'syz.0.9683': attribute type 1 has an invalid length.
[  698.394245][ T6115] bond66: entered promiscuous mode
[  698.396027][ T6115] bond66: entered allmulticast mode
[  698.397882][ T6115] 8021q: adding VLAN 0 to HW filter on device bond66
[  698.417336][ T6115] erspan2: entered allmulticast mode
[  698.421843][ T6115] bond66: (slave erspan2): making interface the new active one
[  698.424665][ T6115] erspan2: entered promiscuous mode
[  698.427404][ T6115] bond66: (slave erspan2): Enslaving as an active interface with an up link
[  698.558225][ T6144] netlink: 'syz.0.9691': attribute type 61 has an invalid length.
[  698.562495][ T6144] netlink: 'syz.0.9691': attribute type 62 has an invalid length.
[  698.643576][ T6150] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  698.657133][ T6151] syzkaller1: entered promiscuous mode
[  698.664284][ T6151] syzkaller1: entered allmulticast mode
[  698.786682][ T6164] netlink: Conntrack attr has 4 unknown bytes
[  698.801239][ T6164] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  699.825537][ T6176] xt_hashlimit: max too large, truncated to 1048576
[  699.828363][ T6176] xt_hashlimit: overflow, try lower: 2/0
[  701.678201][ T6184] vxcan0: entered allmulticast mode
[  701.689241][ T6183] vxcan0: entered allmulticast mode
[  701.696437][ T6188] netlink: 'syz.1.9703': attribute type 1 has an invalid length.
[  701.698918][ T6188] __nla_validate_parse: 6 callbacks suppressed
[  701.698925][ T6188] netlink: 216 bytes leftover after parsing attributes in process `syz.1.9703'.
[  701.813920][ T6199] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9707'.
[  701.825044][ T6199] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check.
[  701.830550][ T6199] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9707'.
[  701.834274][ T6199] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check.
[  702.030887][ T6220] netlink: 232 bytes leftover after parsing attributes in process `syz.0.9715'.
[  702.048165][ T6222] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9716'.
[  702.062357][ T5476] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  702.067286][ T6222] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9716'.
[  702.070909][ T5476] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  702.076551][ T5476] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  702.080254][ T5476] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  702.115154][ T6226] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9718'.
[  702.118959][ T6226] netlink: 'syz.0.9718': attribute type 11 has an invalid length.
[  702.165448][ T6226] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9718'.
[  702.169380][ T6226] netlink: 'syz.0.9718': attribute type 11 has an invalid length.
[  702.290008][ T6236] netlink: 76 bytes leftover after parsing attributes in process `syz.1.9722'.
[  702.290031][ T6235] netlink: 14 bytes leftover after parsing attributes in process `syz.0.9721'.
[  702.334974][ T6238] netlink: 'syz.0.9723': attribute type 1 has an invalid length.
[  702.556833][ T6277] netlink: 'syz.2.9733': attribute type 4 has an invalid length.
[  702.661024][ T6282] netlink: 'syz.0.9735': attribute type 4 has an invalid length.
[  702.672754][ T6282] netlink: 'syz.0.9735': attribute type 4 has an invalid length.
[  703.097604][ T6319] sock: sock_set_timeout: `syz.1.9745' (pid 6319) tries to set negative timeout
[  703.557672][ T6329] xt_l2tp: v2 tid > 0xffff: 37482740
[  703.559596][ T6330] xt_l2tp: v2 tid > 0xffff: 37482740
[  703.796114][ T6312] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  703.956738][ T6335] validate_nla: 1 callbacks suppressed
[  703.956754][ T6335] netlink: 'syz.1.9750': attribute type 2 has an invalid length.
[  704.049997][ T6350] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  704.057750][ T6350] netlink: 'syz.0.9754': attribute type 1 has an invalid length.
[  704.290279][ T6368] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  704.296241][ T6368] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 34490 - 0
[  704.301767][ T6368] netdevsim netdevsim0 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  704.364392][ T6353] xt_TCPMSS: Only works on TCP SYN packets
[  704.382742][ T6368] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  704.393062][ T6368] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 34490 - 0
[  704.399291][ T6368] netdevsim netdevsim0 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  704.463163][ T6368] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  704.467498][ T6368] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 34490 - 0
[  704.470815][ T6368] netdevsim netdevsim0 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  704.507472][ T6368] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  704.510690][ T6368] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 34490 - 0
[  704.514118][ T6368] netdevsim netdevsim0 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  704.599044][ T6388] block nbd2: reconnected socket
[  704.609125][ T5476] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  704.612740][T15176] block nbd2: Receive control failed (result -32)
[  704.613060][ T5476] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  704.622455][ T5476] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 34490 - 0
[  704.662127][ T6393] netlink: 'syz.2.9765': attribute type 13 has an invalid length.
[  704.666755][ T6069] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  704.671946][ T6069] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  704.678171][ T6069] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 34490 - 0
[  704.722671][ T5476] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  704.726540][ T5476] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  704.729765][ T5476] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 34490 - 0
[  704.738440][ T6399] Cannot find add_set index 2 as target
[  704.745331][ T5476] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  704.751591][ T5476] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  704.756207][ T5476] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 34490 - 0
[  704.784217][ T6402] openvswitch: netlink: Message has 195 unknown bytes.
[  704.881530][ T6421] syzkaller1: entered promiscuous mode
[  704.884659][ T6421] syzkaller1: entered allmulticast mode
[  705.000726][ T6433] x_tables: ip6_tables: dccp match: only valid for protocol 33
[  705.017586][ T6431] netlink: 'syz.0.9780': attribute type 1 has an invalid length.
[  705.052361][ T6435]  speed is unknown, defaulting to 1000
[  705.119399][ T6443] syzkaller1: entered promiscuous mode
[  705.126768][ T6443] syzkaller1: entered allmulticast mode
[  705.291104][   T34] audit: type=1800 audit(1778597471.280:85): pid=6459 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.9788" name=3A202E31323334352E2E2E2E2028313829207238203D2030783363333130303030300A202020202020323A202E31323334352E2E382E20283835292063616C6C2070632B360A202020202020333A202E2E2E2E2E2E2E2E382E2028313829207230203D203078313130303030303066666666666666660A202020202020353A202E2E2E2E2E2E2E2E382E202836362920696620773820733E2030783020676F746F2070632B300A202020202020363A202E2E2E2E2E2E2E2E2E2E20283138292072 dev="tmpfs" ino=16780 res=0 errno=0
[  705.513668][ T6489] --map-set only usable from mangle table
[  705.602848][ T6497] syzkaller1: entered promiscuous mode
[  705.606322][ T6497] syzkaller1: entered allmulticast mode
[  705.671319][ T6497] bridge_slave_0: left allmulticast mode
[  705.735934][ T6497] 0: left allmulticast mode
[  705.741143][ T6497] hsr_slave_0: left allmulticast mode
[  705.775467][ T6497] vlan0: left promiscuous mode
[  705.777088][ T6497] geneve1: left promiscuous mode
[  705.779914][ T6497] mac80211_hwsim hwsim7 syzkaller0: left promiscuous mode
[  705.782176][ T6497] mac80211_hwsim hwsim7 syzkaller0: left allmulticast mode
[  705.785820][ T6497] geneve2: left promiscuous mode
[  705.787976][ T6497] vlan3: left promiscuous mode
[  705.789575][ T6497] bond14: left promiscuous mode
[  705.791326][ T6497] vlan3: left allmulticast mode
[  705.792953][ T6497] bond14: left allmulticast mode
[  705.796380][ T6497] bond17: left promiscuous mode
[  705.798028][ T6497] bond17: left allmulticast mode
[  705.799926][ T6497] bond18: left promiscuous mode
[  705.801565][ T6497] bridge18: left promiscuous mode
[  705.803835][ T6497] bridge19: left promiscuous mode
[  705.805699][ T6497] bond18: left allmulticast mode
[  705.807487][ T6497] bridge18: left allmulticast mode
[  705.809264][ T6497] bridge19: left allmulticast mode
[  705.811472][ T6497] vlan4: left allmulticast mode
[  705.813098][ T6497] bond20: left allmulticast mode
[  705.815747][ T6497] bond21: left promiscuous mode
[  705.818045][ T6497] batadv2: left promiscuous mode
[  705.819926][ T6497] batadv2: left allmulticast mode
[  705.822010][ T6497] ip6gretap3: left promiscuous mode
[  705.824279][ T6497] ip6gretap3: left allmulticast mode
[  705.826235][ T6497] bond24: left promiscuous mode
[  705.827927][ T6497] bond24: left allmulticast mode
[  705.829970][ T6497] vlan5: left promiscuous mode
[  705.831729][ T6497] bond25: left promiscuous mode
[  705.834184][ T6497] bridge23: left promiscuous mode
[  705.836109][ T6497] vlan5: left allmulticast mode
[  705.837850][ T6497] bond25: left allmulticast mode
[  705.839502][ T6497] bridge23: left allmulticast mode
[  705.841499][ T6497] bond26: left promiscuous mode
[  705.843197][ T6497] bond26: left allmulticast mode
[  705.845630][ T6497] veth7: left allmulticast mode
[  705.847736][ T6497] veth9: left allmulticast mode
[  705.849776][ T6497] bond27: left promiscuous mode
[  705.851634][ T6497] bond27: left allmulticast mode
[  705.854282][ T6497] bond28: left promiscuous mode
[  705.856496][ T6497] sit4: left allmulticast mode
[  705.858330][ T6497] macvlan1: left promiscuous mode
[  705.860056][ T6497] macvlan1: left allmulticast mode
[  705.862100][ T6497] veth13: left promiscuous mode
[  705.865499][ T6497] vti1: left promiscuous mode
[  705.867416][ T6497] ip6gre3: left allmulticast mode
[  705.869629][ T6497] bond39: left promiscuous mode
[  705.871812][ T6497] ip6gre4: left promiscuous mode
[  705.874216][ T6497] ip6gre4: left allmulticast mode
[  705.876631][ T6497] ip6tnl4: left allmulticast mode
[  705.878832][ T6497] ipip3: left promiscuous mode
[  705.880888][ T6497] gretap0: left promiscuous mode
[  705.882849][ T6497] gretap0: left allmulticast mode
[  705.885208][ T6497] ip6erspan0: left allmulticast mode
[  705.887843][ T6497] bond45: left promiscuous mode
[  705.889784][ T6497] bond46: left promiscuous mode
[  705.892061][ T6497] sit6: left promiscuous mode
[  705.894111][ T6497] veth19: left allmulticast mode
[  705.896563][ T6497] bond47: left promiscuous mode
[  705.898392][ T6497] vti2: left promiscuous mode
[  705.900157][ T6497] bond48: left promiscuous mode
[  705.901864][ T6497] bond48: left allmulticast mode
[  705.904664][ T6497] bridge0: left allmulticast mode
[  705.907470][ T6497] bridge35: left promiscuous mode
[  705.909230][ T6497] bridge35: left allmulticast mode
[  705.911405][ T6497] bond53: left promiscuous mode
[  705.921858][ T6497] geneve5: left promiscuous mode
[  705.928140][ T6497] bond55: left promiscuous mode
[  705.931616][ T6497] vcan0: left promiscuous mode
[  705.960758][ T6497] bond57: left promiscuous mode
[  705.969489][ T6497] bond58: left allmulticast mode
[  705.977965][ T6497] bond60: left promiscuous mode
[  705.982155][ T6497] bond61: left promiscuous mode
[  705.984614][ T6497] vcan1: left promiscuous mode
[  705.986431][ T6497] vcan1: left allmulticast mode
[  705.993150][ T6497] bond62: left promiscuous mode
[  706.011773][ T6497] vlan6: left allmulticast mode
[  706.015316][ T6497] bond0: left allmulticast mode
[  706.017569][ T6497] bridge8: left allmulticast mode
[  706.022458][ T6497] bond65: left allmulticast mode
[  706.035924][ T6497] bond66: left promiscuous mode
[  706.039920][ T6497] erspan2: left promiscuous mode
[  706.041651][ T6497] bond66: left allmulticast mode
[  706.046728][ T6497] erspan2: left allmulticast mode
[  706.053929][ T6497] syzkaller1: left promiscuous mode
[  706.056265][ T6497] syzkaller1: left allmulticast mode
[  706.063564][ T6496] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  706.067422][ T6498] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1520) !
[  706.069872][ T6496] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  706.078739][T17395] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  706.083627][T17395] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  706.086803][T17395] netdevsim netdevsim0 eth0: unset [1, 1] type 2 family 0 port 34490 - 0
[  706.102375][T17395] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  706.105980][T17395] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  706.108697][T17395] netdevsim netdevsim0 eth1: unset [1, 1] type 2 family 0 port 34490 - 0
[  706.111501][T17395] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  706.115641][T17395] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  706.118471][T17395] netdevsim netdevsim0 eth2: unset [1, 1] type 2 family 0 port 34490 - 0
[  706.121126][T17395] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  706.124611][T17395] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  706.127363][T17395] netdevsim netdevsim0 eth3: unset [1, 1] type 2 family 0 port 34490 - 0
[  706.257635][ T6505] netlink: 'syz.2.9800': attribute type 1 has an invalid length.
[  706.284027][ T6505] bond66: entered promiscuous mode
[  706.286682][ T6505] 8021q: adding VLAN 0 to HW filter on device bond66
[  706.378556][ T6512] xt_cgroup: xt_cgroup: no path or classid specified
[  706.417858][ T6515] netlink: 'syz.2.9804': attribute type 1 has an invalid length.
[  706.444032][ T6515] 8021q: adding VLAN 0 to HW filter on device bond67
[  706.473469][ T6515] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode
[  706.495283][ T6515] vlan13: entered allmulticast mode
[  706.497047][ T6515] bond67: entered allmulticast mode
[  706.506183][ T6521] syzkaller1: entered promiscuous mode
[  706.507879][ T6521] syzkaller1: entered allmulticast mode
[  706.548560][ T6523] netlink: 'syz.2.9808': attribute type 1 has an invalid length.
[  706.571008][ T6523] 8021q: adding VLAN 0 to HW filter on device bond68
[  706.587650][ T6523] vlan16: entered allmulticast mode
[  706.589346][ T6523] bond68: entered allmulticast mode
[  706.658912][ T6530] netlink: 'syz.2.9811': attribute type 1 has an invalid length.
[  706.681460][ T6530] 8021q: adding VLAN 0 to HW filter on device bond69
[  706.692544][ T6530] vlan17: entered promiscuous mode
[  706.694401][ T6530] bond69: entered promiscuous mode
[  706.696355][ T6530] vlan17: entered allmulticast mode
[  706.698043][ T6530] bond69: entered allmulticast mode
[  706.704045][ T6530] __nla_validate_parse: 17 callbacks suppressed
[  706.704053][ T6530] netlink: 44 bytes leftover after parsing attributes in process `syz.2.9811'.
[  706.815581][ T6543] xt_hashlimit: size too large, truncated to 1048576
[  706.958849][ T6553] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9819'.
[  707.080864][ T6578] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9824'.
[  707.091334][ T6578] netlink: 'syz.1.9824': attribute type 1 has an invalid length.
[  707.899054][ T6576] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  707.995145][ T6586] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9826'.
[  708.020635][ T6586] sit3: entered promiscuous mode
[  708.077952][ T6590] netlink: 32 bytes leftover after parsing attributes in process `syz.2.9828'.
[  708.140515][ T6600] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9830'.
[  708.157668][ T6602] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9831'.
[  708.178339][ T6602] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9831'.
[  708.181532][T17395] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  708.190438][T17395] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  708.194995][T17395] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  708.199253][T17395] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  708.492547][ T6644] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9844'.
[  708.521340][ T6641] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9843'.
[  708.554832][ T6641] bond67: (slave bridge48): Enslaving as an active interface with an up link
[  708.695689][ T6656] syzkaller1: entered promiscuous mode
[  708.697963][ T6656] syzkaller1: entered allmulticast mode
[  708.742980][ T6660] bond68: option arp_validate: mode dependency failed, not supported in mode 802.3ad(4)
[  708.747516][ T6660] bond68 (unregistering): Released all slaves
[  709.005044][ T6685] syzkaller1: entered promiscuous mode
[  709.007143][ T6685] syzkaller1: entered allmulticast mode
[  709.319710][ T6709] netlink: 'syz.2.9864': attribute type 2 has an invalid length.
[  709.326691][ T6708] syzkaller0: entered promiscuous mode
[  709.328821][ T6708] syzkaller0: entered allmulticast mode
[  709.332659][ T6708] 0: reclassify loop, rule prio 0, protocol 800
[  709.340553][ T6708] netlink: del zone limit has 8 unknown bytes
[  709.378390][ T6711] erspan0: entered promiscuous mode
[  709.380564][ T6711] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  709.388223][ T6710] erspan0: left promiscuous mode
[  709.423473][ T6714] veth38: entered allmulticast mode
[  709.598520][ T6741] netlink: 'syz.1.9874': attribute type 7 has an invalid length.
[  709.601253][ T6741] netlink: 'syz.1.9874': attribute type 7 has an invalid length.
[  709.860181][ T6763] netlink: 'syz.0.9883': attribute type 4 has an invalid length.
[  709.883728][ T6765] syz.0.9884: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  709.888524][ T6765] CPU: 0 UID: 0 PID: 6765 Comm: syz.0.9884 Not tainted syzkaller #0 PREEMPT(full) 
[  709.888536][ T6765] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  709.888540][ T6765] Call Trace:
[  709.888544][ T6765]  <TASK>
[  709.888549][ T6765]  dump_stack_lvl+0xe8/0x150
[  709.888561][ T6765]  warn_alloc+0x249/0x340
[  709.888578][ T6765]  ? stack_trace_save+0xa9/0x100
[  709.888591][ T6765]  ? __pfx_warn_alloc+0x10/0x10
[  709.888602][ T6765]  ? kasan_save_track+0x4f/0x80
[  709.888611][ T6765]  ? kasan_save_track+0x3e/0x80
[  709.888619][ T6765]  ? __kasan_kmalloc+0x93/0xb0
[  709.888628][ T6765]  ? __kmalloc_cache_noprof+0x31c/0x660
[  709.888638][ T6765]  ? xskq_create+0x56/0x170
[  709.888647][ T6765]  ? xsk_setsockopt+0x54c/0x990
[  709.888654][ T6765]  ? do_sock_setsockopt+0x17c/0x1b0
[  709.888663][ T6765]  ? __x64_sys_setsockopt+0x13d/0x1b0
[  709.888672][ T6765]  ? do_syscall_64+0x15f/0xf80
[  709.888682][ T6765]  __vmalloc_node_range_noprof+0x132/0x1750
[  709.888703][ T6765]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  709.888715][ T6765]  ? __kasan_kmalloc+0x93/0xb0
[  709.888726][ T6765]  vmalloc_user_noprof+0xad/0xe0
[  709.888736][ T6765]  ? xskq_create+0xbf/0x170
[  709.888745][ T6765]  xskq_create+0xbf/0x170
[  709.888754][ T6765]  xsk_init_queue+0x8a/0xe0
[  709.888764][ T6765]  xsk_setsockopt+0x54c/0x990
[  709.888773][ T6765]  ? __pfx_xsk_setsockopt+0x10/0x10
[  709.888781][ T6765]  ? __pfx_aa_sk_perm+0x10/0x10
[  709.888792][ T6765]  ? aa_sock_opt_perm+0xff/0x1a0
[  709.888802][ T6765]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  709.888812][ T6765]  ? __pfx_xsk_setsockopt+0x10/0x10
[  709.888821][ T6765]  do_sock_setsockopt+0x17c/0x1b0
[  709.888832][ T6765]  __x64_sys_setsockopt+0x13d/0x1b0
[  709.888842][ T6765]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  709.888870][ T6765]  do_syscall_64+0x15f/0xf80
[  709.888881][ T6765]  ? trace_irq_disable+0x3b/0x140
[  709.888895][ T6765]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  709.888902][ T6765] RIP: 0033:0x7f09ec99cdd9
[  709.888910][ T6765] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  709.888917][ T6765] RSP: 002b:00007f09ed8c6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  709.888926][ T6765] RAX: ffffffffffffffda RBX: 00007f09ecc15fa0 RCX: 00007f09ec99cdd9
[  709.888931][ T6765] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003
[  709.888936][ T6765] RBP: 00007f09eca32d69 R08: 0000000000000004 R09: 0000000000000000
[  709.888940][ T6765] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[  709.888945][ T6765] R13: 00007f09ecc16038 R14: 00007f09ecc15fa0 R15: 00007ffd14a5a428
[  709.888956][ T6765]  </TASK>
[  709.888958][ T6765] Mem-Info:
[  709.986478][ T6765] active_anon:5506 inactive_anon:0 isolated_anon:0
[  709.986478][ T6765]  active_file:15350 inactive_file:38566 isolated_file:0
[  709.986478][ T6765]  unevictable:1768 dirty:92 writeback:0
[  709.986478][ T6765]  slab_reclaimable:13440 slab_unreclaimable:138469
[  709.986478][ T6765]  mapped:18400 shmem:2347 pagetables:1078
[  709.986478][ T6765]  sec_pagetables:0 bounce:0
[  709.986478][ T6765]  kernel_misc_reclaimable:0
[  709.986478][ T6765]  free:1040771 free_pcp:24372 free_cma:0
[  710.004129][ T6765] Node 0 active_anon:8924kB inactive_anon:0kB active_file:31828kB inactive_file:130916kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:44488kB dirty:240kB writeback:0kB shmem:4656kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:8616kB pagetables:2316kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  710.016716][ T6765] Node 1 active_anon:13200kB inactive_anon:0kB active_file:29572kB inactive_file:23348kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:29112kB dirty:128kB writeback:0kB shmem:4732kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:9604kB pagetables:1996kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  710.017167][ T6766] openvswitch: netlink: Key type 29 is not supported
[  710.030894][ T6765] Node 0 DMA free:15360kB boost:0kB min:240kB low:300kB high:360kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  710.047063][ T6765] lowmem_reserve[]: 0 1587 2117 2117 2117
[  710.049284][ T6765] Node 0 DMA32 free:1417456kB boost:0kB min:25012kB low:31264kB high:37516kB reserved_highatomic:0KB free_highatomic:0KB active_anon:172kB inactive_anon:0kB active_file:24572kB inactive_file:192kB unevictable:0kB writepending:232kB zspages:0kB present:2080636kB managed:1625320kB mlocked:0kB bounce:0kB free_pcp:8920kB local_pcp:0kB free_cma:0kB
[  710.061845][ T6765] lowmem_reserve[]: 0 0 530 530 530
[  710.064610][ T6765] Node 0 Normal free:13728kB boost:0kB min:8512kB low:10640kB high:12768kB reserved_highatomic:0KB free_highatomic:0KB active_anon:8804kB inactive_anon:0kB active_file:7304kB inactive_file:130724kB unevictable:3536kB writepending:8kB zspages:0kB present:1572868kB managed:543152kB mlocked:0kB bounce:0kB free_pcp:4200kB local_pcp:3512kB free_cma:0kB
[  710.077279][ T6765] lowmem_reserve[]: 0 0 0 0 0
[  710.079198][ T6765] Node 1 Normal free:2716540kB boost:0kB min:56344kB low:70428kB high:84512kB reserved_highatomic:0KB free_highatomic:0KB active_anon:13200kB inactive_anon:0kB active_file:29572kB inactive_file:23348kB unevictable:3536kB writepending:128kB zspages:0kB present:3670012kB managed:3594684kB mlocked:0kB bounce:0kB free_pcp:105236kB local_pcp:32636kB free_cma:0kB
[  710.090829][ T6765] lowmem_reserve[]: 0 0 0 0 0
[  710.092647][ T6765] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  710.097343][ T6765] Node 0 DMA32: 758*4kB (UME) 959*8kB (UME) 828*16kB (UME) 649*32kB (UME) 384*64kB (UME) 185*128kB (UME) 92*256kB (UME) 37*512kB (UME) 68*1024kB (UM) 34*2048kB (UME) 279*4096kB (UM) = 1417520kB
[  710.104238][ T6765] Node 0 Normal: 462*4kB (UME) 254*8kB (UE) 183*16kB (U) 108*32kB (UM) 38*64kB (UM) 4*128kB (M) 0*256kB 1*512kB (M) 0*1024kB 0*2048kB 0*4096kB = 13720kB
[  710.109537][ T6765] Node 1 Normal: 1688*4kB (UME) 1929*8kB (UME) 2294*16kB (UM) 406*32kB (UM) 992*64kB (UME) 488*128kB (UME) 207*256kB (UM) 117*512kB (UME) 54*1024kB (UME) 52*2048kB (UME) 551*4096kB (UM) = 2729416kB
[  710.117603][ T6765] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  710.120787][ T6765] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  710.124104][ T6765] 56287 total pagecache pages
[  710.126709][ T6765] 5 pages in swap cache
[  710.128104][ T6765] Free swap  = 124976kB
[  710.129527][ T6765] Total swap = 124996kB
[  710.131075][ T6765] 1834877 pages RAM
[  710.132392][ T6765] 0 pages HighMem/MovableOnly
[  710.134456][ T6765] 390248 pages reserved
[  710.136342][ T6765] 0 pages cma reserved
[  710.258003][T17395] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  710.260657][T17395] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  710.263224][T17395] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  710.273570][T17395] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  710.326130][ T6783] sit8: entered promiscuous mode
[  710.776492][ T6828] netlink: 'syz.0.9901': attribute type 11 has an invalid length.
[  710.941915][ T6837] netlink: 'syz.0.9905': attribute type 1 has an invalid length.
[  710.962508][ T6837] 8021q: adding VLAN 0 to HW filter on device bond68
[  710.966447][ T6837] netlink: 'syz.0.9905': attribute type 1 has an invalid length.
[  710.969972][ T6837] netlink: 'syz.0.9905': attribute type 1 has an invalid length.
[  710.973155][ T6837] netlink: 'syz.0.9905': attribute type 1 has an invalid length.
[  710.976692][ T6837] netlink: 'syz.0.9905': attribute type 1 has an invalid length.
[  710.979420][ T6837] netlink: 'syz.0.9905': attribute type 1 has an invalid length.
[  711.188426][ T6857] ip6t_REJECT: TCP_RESET illegal for non-tcp
[  711.300471][ T6870] syzkaller0: entered promiscuous mode
[  711.306170][ T6870] syzkaller0: entered allmulticast mode
[  711.580797][ T6885] ip6t_REJECT: TCP_RESET illegal for non-tcp
[  711.797302][ T6908] ip6t_REJECT: TCP_RESET illegal for non-tcp
[  711.882493][ T6911] __nla_validate_parse: 54 callbacks suppressed
[  711.882505][ T6911] netlink: 108 bytes leftover after parsing attributes in process `syz.1.9932'.
[  712.012817][ T6926] ip6t_REJECT: TCP_RESET illegal for non-tcp
[  712.070477][ T6942] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.9940'.
[  712.220498][ T6949] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9943'.
[  712.765337][ T7008] xt_hashlimit: size too large, truncated to 1048576
[  713.396769][ T7048] xt_hashlimit: size too large, truncated to 1048576
[  713.612126][ T7056] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9969'.
[  713.651280][ T7056] 8021q: adding VLAN 0 to HW filter on device bond66
[  713.706981][ T7056] 8021q: adding VLAN 0 to HW filter on device bond67
[  713.718643][ T7063] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9969'.
[  713.725514][ T7056] bond66: (slave bond67): Enslaving as an active interface with an up link
[  713.764953][ T7063] bond66 (unregistering): (slave bond67): Releasing backup interface
[  713.793729][ T7063] bond66 (unregistering): Released all slaves
[  713.949512][ T7056] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9969'.
[  713.952707][ T7056] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9969'.
[  714.008280][ T7081] xt_hashlimit: size too large, truncated to 1048576
[  714.100928][ T7089] netlink: 40 bytes leftover after parsing attributes in process `syz.0.9978'.
[  714.140943][ T7091] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9979'.
[  714.157274][ T7093] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode
[  714.171530][ T7093] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode
[  714.239113][ T7093] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  714.258541][ T7099] x_tables: unsorted underflow at hook 2
[  714.275662][ T7099] bond70: entered promiscuous mode
[  714.277783][ T7099] 8021q: adding VLAN 0 to HW filter on device bond70
[  714.459203][ T7119] sctp: [Deprecated]: syz.0.9986 (pid 7119) Use of struct sctp_assoc_value in delayed_ack socket option.
[  714.459203][ T7119] Use struct sctp_sack_info instead
[  714.521311][ T7125] xt_hashlimit: size too large, truncated to 1048576
[  714.717447][ T7135] netlink: 144 bytes leftover after parsing attributes in process `syz.2.9992'.
[  714.846072][ T7141] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  714.929600][ T7149] syzkaller1: entered promiscuous mode
[  714.931633][ T7149] syzkaller1: entered allmulticast mode
[  715.228225][ T7166] smc: net device wlan0 applied user defined pnetid TYZ0
[  715.270522][ T7175] ip6t_REJECT: TCP_RESET illegal for non-tcp
[  715.447537][ T7187] openvswitch: netlink: IP tunnel dst address not specified
[  715.550388][ T7206] ip6t_REJECT: TCP_RESET illegal for non-tcp
[  715.609477][ T7210] ipt_REJECT: TCP_RESET invalid for non-tcp
[  715.612245][ T7210] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  715.619297][ T7210] syzkaller0: entered promiscuous mode
[  715.621163][ T7210] syzkaller0: entered allmulticast mode
[  715.644080][ T7210]  speed is unknown, defaulting to 1000
[  715.906839][ T7216] bridge0: port 1(batadv0) entered blocking state
[  715.911904][ T7216] bridge0: port 1(batadv0) entered disabled state
[  715.919060][ T7216] batadv0: entered allmulticast mode
[  715.925921][ T7216] batadv0: entered promiscuous mode
[  716.241291][ T5354] veth1_macvtap: entered allmulticast mode
[  716.404907][T12820] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled
[  716.410000][T12820] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled
[  716.443753][   T34] audit: type=1804 audit(1778597482.430:86): pid=7277 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.10036" name="/newroot/3153/memory.events" dev="tmpfs" ino=16108 res=1 errno=0
[  716.461673][   T34] audit: type=1800 audit(1778597482.430:87): pid=7277 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.10036" name="memory.events" dev="tmpfs" ino=16108 res=0 errno=0
[  716.566012][ T7284] xt_CT: You must specify a L4 protocol and not use inversions on it
[  716.571975][ T7284] validate_nla: 96 callbacks suppressed
[  716.571991][ T7284] netlink: 'syz.0.10038': attribute type 21 has an invalid length.
[  716.899667][ T7328] xt_hashlimit: size too large, truncated to 1048576
[  716.925623][ T7331] __nla_validate_parse: 15 callbacks suppressed
[  716.925639][ T7331] netlink: 7060 bytes leftover after parsing attributes in process `syz.0.10050'.
[  716.988734][ T7338] @0: renamed from bond_slave_1
[  717.135162][ T7348] syzkaller1: tun_chr_ioctl cmd 35108
[  717.250289][ T7357] netlink: 44 bytes leftover after parsing attributes in process `syz.2.10058'.
[  717.339561][ T7364] netlink: 180 bytes leftover after parsing attributes in process `syz.0.10061'.
[  717.365833][ T7366] netlink: 40 bytes leftover after parsing attributes in process `syz.0.10062'.
[  717.720990][ T7403] netlink: 24 bytes leftover after parsing attributes in process `syz.2.10070'.
[  717.738414][ T7403] bond71: entered promiscuous mode
[  717.740417][ T7403] 8021q: adding VLAN 0 to HW filter on device bond71
[  717.769725][ T7403] bond71 (unregistering): Released all slaves
[  717.936948][ T7424] ip6t_REJECT: TCP_RESET illegal for non-tcp
[  718.213829][ T7451] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10080'.
[  718.368167][ T7458] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10084'.
[  718.521336][ T7466] netlink: 20 bytes leftover after parsing attributes in process `syz.1.10088'.
[  718.712923][ T7472] openvswitch: netlink: Flow actions attr not present in new flow.
[  718.742211][ T7479] netlink: 'syz.2.10092': attribute type 13 has an invalid length.
[  718.831011][ T7489] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10093'.
[  718.841268][ T7489] netlink: 92 bytes leftover after parsing attributes in process `syz.2.10093'.
[  719.020095][ T7506] xt_recent: hitcount (33554432) is larger than allowed maximum (65535)
[  719.076240][ T7515] mac80211_hwsim hwsim5 syzkaller0: left promiscuous mode
[  719.080682][ T7515] mac80211_hwsim hwsim5 syzkaller0: left allmulticast mode
[  719.128414][ T7521] bond0: Caught tx_queue_len zero misconfig
[  719.225925][ T7523] hma(kX: entered promiscuous mode
[  719.253472][ T7538] ip6t_REJECT: TCP_RESET illegal for non-tcp
[  719.338248][ T7548] netlink: 'syz.1.10112': attribute type 4 has an invalid length.
[  720.764461][ T7626] mac80211_hwsim hwsim7 syzkaller0: left promiscuous mode
[  720.766971][ T7626] mac80211_hwsim hwsim7 syzkaller0: left allmulticast mode
[  721.542016][ T7659] xt_hashlimit: size too large, truncated to 1048576
[  724.001834][ T7648] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  724.066186][ T7667] __nla_validate_parse: 17 callbacks suppressed
[  724.066203][ T7667] netlink: 24 bytes leftover after parsing attributes in process `syz.2.10146'.
[  724.116613][ T7672] netlink: 211856 bytes leftover after parsing attributes in process `syz.0.10148'.
[  724.128403][ T7667] netlink: 'syz.2.10146': attribute type 1 has an invalid length.
[  724.204974][ T7676] netlink: 'syz.1.10151': attribute type 1 has an invalid length.
[  724.207699][ T7676] netlink: 248 bytes leftover after parsing attributes in process `syz.1.10151'.
[  724.212536][ T7676] netlink: 28 bytes leftover after parsing attributes in process `syz.1.10151'.
[  724.216902][ T7676] netlink: 'syz.1.10151': attribute type 30 has an invalid length.
[  724.239156][ T7678] ip6t_REJECT: TCP_RESET illegal for non-tcp
[  724.294158][ T7688] tipc: Trying to set illegal importance in message
[  724.349044][ T7694] syzkaller1: entered promiscuous mode
[  724.351327][ T7694] syzkaller1: entered allmulticast mode
[  724.719213][ T7720] ip6t_REJECT: TCP_RESET illegal for non-tcp
[  724.828986][ T7727] netlink: 27 bytes leftover after parsing attributes in process `syz.2.10163'.
[  724.845083][ T7727] netlink: 32 bytes leftover after parsing attributes in process `syz.2.10163'.
[  724.848774][ T7727] netlink: 32 bytes leftover after parsing attributes in process `syz.2.10163'.
[  724.852073][ T7727] netlink: 32 bytes leftover after parsing attributes in process `syz.2.10163'.
[  724.856017][ T7727] netlink: 32 bytes leftover after parsing attributes in process `syz.2.10163'.
[  724.857024][ T7728] netlink: 32 bytes leftover after parsing attributes in process `syz.2.10163'.
[  725.356371][ T7759] mac80211_hwsim hwsim5 syzkaller0: Caught tx_queue_len zero misconfig
[  725.360487][ T7759] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode
[  725.368364][ T7759] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode
[  725.677808][ T7783] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  725.681006][ T7783] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  725.765383][ T7793] lo: entered allmulticast mode
[  725.767849][ T7793] lo: left allmulticast mode
[  725.855286][ T7796] bridge50: entered promiscuous mode
[  726.422256][ T7806] bridge0: port 1(bridge_slave_0) entered disabled state
[  726.831169][ T7828] netlink: 'syz.2.10193': attribute type 10 has an invalid length.
[  726.926512][ T7839] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  726.936038][ T7839] tipc: Enabling of bearer <dth:s> rejected, media not registered
[  727.035653][   T34] audit: type=1804 audit(1778597493.020:88): pid=7847 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.10197" name="/newroot/3446/cgroup.controllers" dev="tmpfs" ino=17575 res=1 errno=0
[  727.047034][   T34] audit: type=1800 audit(1778597493.030:89): pid=7847 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.10197" name="cgroup.controllers" dev="tmpfs" ino=17575 res=0 errno=0
[  727.117963][ T7850] veth1_to_team: entered promiscuous mode
[  727.120710][ T7850] veth1_to_team: left promiscuous mode
[  727.375422][ T7863] netlink: 'syz.2.10202': attribute type 1 has an invalid length.
[  728.139274][ T7931] xt_hashlimit: size too large, truncated to 1048576
[  728.199907][ T7939] bond0: (slave wlan0): Error: Device is in use and cannot be enslaved
[  728.266136][ T7941] netlink: 'syz.2.10222': attribute type 3 has an invalid length.
[  728.393948][T15176] block nbd9: Receive control failed (result -32)
[  728.488128][ T7963] netlink: 'syz.0.10225': attribute type 1 has an invalid length.
[  728.502976][ T7963] netlink: 'syz.0.10225': attribute type 2 has an invalid length.
[  728.614193][ T7977] sctp: [Deprecated]: syz.1.10228 (pid 7977) Use of struct sctp_assoc_value in delayed_ack socket option.
[  728.614193][ T7977] Use struct sctp_sack_info instead
[  728.687356][ T7981] bond72: option all_slaves_active: invalid value (3)
[  728.690513][ T7981] bond72 (unregistering): Released all slaves
[  729.093186][ T8001] __nla_validate_parse: 56 callbacks suppressed
[  729.093197][ T8001] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10236'.
[  729.365213][ T8019] netlink: 'syz.2.10241': attribute type 89 has an invalid length.
[  729.438395][ T8023] netlink: 'syz.2.10242': attribute type 9 has an invalid length.
[  729.526187][ T8032] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes.
[  729.528921][ T8032] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  729.540608][ T8027] netlink: 20 bytes leftover after parsing attributes in process `syz.1.10243'.
[  729.635640][ T8048] ip6t_REJECT: TCP_RESET illegal for non-tcp
[  729.668149][ T8052] RDS: rds_bind could not find a transport for ::ffff:172.20.20.35, load rds_tcp or rds_rdma?
[  729.668860][ T8051] netlink: 211856 bytes leftover after parsing attributes in process `syz.0.10250'.
[  729.731748][ T8059] xt_hashlimit: size too large, truncated to 1048576
[  729.913029][ T8064]  speed is unknown, defaulting to 1000
[  729.952528][ T8065] xt_SECMARK: mode already set to 1 cannot mix with rules for mode 4
[  729.987529][ T8069] ip6t_REJECT: TCP_RESET illegal for non-tcp
[  730.145029][ T8075] netlink: 209616 bytes leftover after parsing attributes in process `syz.0.10258'.
[  730.221975][ T8078] netlink: 44 bytes leftover after parsing attributes in process `syz.0.10259'.
[  730.227933][ T8078] netlink: 'syz.0.10259': attribute type 1 has an invalid length.
[  730.231095][ T8078] netlink: 16150 bytes leftover after parsing attributes in process `syz.0.10259'.
[  730.288411][ T8081] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate.
[  730.349773][ T8086] openvswitch: netlink: IP tunnel TTL not specified.
[  730.948259][ T8091] syzkaller1: entered promiscuous mode
[  730.950111][ T8091] syzkaller1: entered allmulticast mode
[  731.050069][ T8097] syzkaller0: entered promiscuous mode
[  731.051912][ T8097] syzkaller0: entered allmulticast mode
[  731.223010][ T8100] netlink: 28 bytes leftover after parsing attributes in process `syz.0.10266'.
[  731.303020][ T8113] IPv6: Can't replace route, no match found
[  731.360867][ T8119] bond72: entered promiscuous mode
[  731.362906][ T8119] 8021q: adding VLAN 0 to HW filter on device bond72
[  731.372343][ T8121] workqueue: Failed to create a rescuer kthread for wq "bond73": -EINTR
[  731.402872][ T8127] netlink: 44 bytes leftover after parsing attributes in process `syz.2.10273'.
[  731.437941][ T8129] netlink: 28 bytes leftover after parsing attributes in process `syz.1.10274'.
[  731.440993][ T8129] netlink: 28 bytes leftover after parsing attributes in process `syz.1.10274'.
[  731.476042][ T8133] bond0: option arp_validate: invalid value (55553)
[  731.480236][ T8133] netlink: Unknown conntrack attr (0)
[  731.658969][ T8145] bond66: entered promiscuous mode
[  731.661074][ T8145] 8021q: adding VLAN 0 to HW filter on device bond66
[  732.321713][ T8151] netlink: 'syz.2.10282': attribute type 83 has an invalid length.
[  732.576753][ T8173] netlink: 'syz.2.10288': attribute type 1 has an invalid length.
[  732.806994][ T8188] block nbd10: Unsupported socket: should be TCP or UNIX.
[  733.006846][ T8200] netlink: 'syz.1.10296': attribute type 2 has an invalid length.
[  733.009609][ T8200] netlink: 'syz.1.10296': attribute type 8 has an invalid length.
[  733.494689][ T8202] IPVS: set_ctl: invalid protocol: 44 172.20.20.187:23
[  733.521999][ T8209] bridge: RTM_NEWNEIGH with invalid state 0x8
[  733.592448][ T8213] openvswitch: netlink: ufid size 32 bytes exceeds the range (1, 16)
[  733.596093][ T8213] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  733.806044][ T8230] openvswitch: netlink: Missing key (keys=40, expected=10000000)
[  734.031552][ T8261] workqueue: Failed to create a rescuer kthread for wq "bond73": -EINTR
[  734.216169][ T8280] ip6t_REJECT: TCP_RESET illegal for non-tcp
[  734.266760][ T8283] netlink: 'syz.0.10320': attribute type 2 has an invalid length.
[  734.369340][ T8298] block nbd0: reconnected socket
[  734.371687][ T8300] netlink: 'syz.0.10327': attribute type 1 has an invalid length.
[  734.378023][ T8298] nbd: socks must be embedded in a SOCK_ITEM attr
[  734.402835][T15176] block nbd0: Receive control failed (result -32)
[  734.539262][ T8318] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode
[  734.541941][ T8318] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode
[  734.887662][ T8358] ip6t_REJECT: TCP_RESET illegal for non-tcp
[  734.968181][ T8362] bond68: option resend_igmp: invalid value (2048)
[  734.971989][ T8362] bond68: option resend_igmp: allowed values 0 - 255
[  734.979494][ T8351] Cannot find del_set index 0 as target
[  734.979641][ T8362] bond68 (unregistering): Released all slaves
[  734.987725][   T34] audit: type=1800 audit(1778597500.980:90): pid=8356 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.10341" name="memory.events" dev="tmpfs" ino=18301 res=0 errno=0
[  735.088375][ T8376] xt_addrtype: ipv6 BLACKHOLE matching not supported
[  735.127145][ T8378] netlink: 'syz.1.10350': attribute type 1 has an invalid length.
[  735.136127][ T8381] ip6t_REJECT: TCP_RESET illegal for non-tcp
[  735.154794][ T8378] bond68: (slave vxcan1): The slave device specified does not support setting the MAC address
[  735.159976][ T8378] bond68: (slave vxcan1): Error -95 calling set_mac_address
[  735.171345][ T8383] __nla_validate_parse: 57 callbacks suppressed
[  735.171357][ T8383] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10352'.
[  735.209921][ T8386] tipc: Enabling of bearer <eth:lo> rejected, failed to enable media
[  735.254409][ T8388] dvmrp1: entered allmulticast mode
[  735.388923][ T8400]  speed is unknown, defaulting to 1000
[  735.472839][ T8404] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10358'.
[  735.481261][ T8404] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10358'.
[  735.619437][ T8419] netlink: 20 bytes leftover after parsing attributes in process `syz.0.10363'.
[  735.654620][ T8419] 
[  735.655446][ T8419] ======================================================
[  735.657708][ T8419] WARNING: possible circular locking dependency detected
[  735.660048][ T8419] syzkaller #0 Not tainted
[  735.661506][ T8419] ------------------------------------------------------
[  735.663948][ T8419] syz.0.10363/8419 is trying to acquire lock:
[  735.666332][ T8419] ffff88803f0ff198 (set->srcu){.+.+}-{0:0}, at: __synchronize_srcu+0xb6/0x300
[  735.669901][ T8419] 
[  735.669901][ T8419] but task is already holding lock:
[  735.672811][ T8419] ffff888109bed008 (&q->elevator_lock){+.+.}-{4:4}, at: elevator_change+0x1b3/0x450
[  735.676583][ T8419] 
[  735.676583][ T8419] which lock already depends on the new lock.
[  735.676583][ T8419] 
[  735.680371][ T8419] 
[  735.680371][ T8419] the existing dependency chain (in reverse order) is:
[  735.683206][ T8419] 
[  735.683206][ T8419] -> #6 (&q->elevator_lock){+.+.}-{4:4}:
[  735.685624][ T8419]        __mutex_lock+0x1a3/0x1550
[  735.687304][ T8419]        elevator_change+0x1b3/0x450
[  735.689024][ T8419]        elevator_set_none+0xb5/0x140
[  735.690803][ T8419]        blk_mq_update_nr_hw_queues+0x5e7/0x1a60
[  735.692881][ T8419]        nbd_start_device+0x17f/0xb10
[  735.695028][ T8419]        nbd_genl_connect+0x165b/0x1cf0
[  735.696977][ T8419]        genl_family_rcv_msg_doit+0x22a/0x330
[  735.699309][ T8419]        genl_rcv_msg+0x61c/0x7a0
[  735.701356][ T8419]        netlink_rcv_skb+0x232/0x4b0
[  735.703519][ T8419]        genl_rcv+0x28/0x40
[  735.705413][ T8419]        netlink_unicast+0x75c/0x8e0
[  735.707622][ T8419]        netlink_sendmsg+0x813/0xb40
[  735.709842][ T8419]        ____sys_sendmsg+0x972/0x9f0
[  735.712052][ T8419]        ___sys_sendmsg+0x2a5/0x360
[  735.714133][ T8419]        __x64_sys_sendmsg+0x1bd/0x2a0
[  735.716281][ T8419]        do_syscall_64+0x15f/0xf80
[  735.718355][ T8419]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  735.721014][ T8419] 
[  735.721014][ T8419] -> #5 (&q->q_usage_counter(io)#49){++++}-{0:0}:
[  735.724524][ T8419]        blk_alloc_queue+0x546/0x680
[  735.726724][ T8419]        __blk_mq_alloc_disk+0x197/0x390
[  735.728739][ T8419]        nbd_dev_add+0x499/0xb50
[  735.730419][ T8419]        nbd_init+0x168/0x1f0
[  735.731986][ T8419]        do_one_initcall+0x250/0x870
[  735.733892][ T8419]        do_initcall_level+0x104/0x190
[  735.735719][ T8419]        do_initcalls+0x59/0xa0
[  735.737253][ T8419]        kernel_init_freeable+0x2a6/0x3e0
[  735.739103][ T8419]        kernel_init+0x1d/0x1d0
[  735.740667][ T8419]        ret_from_fork+0x514/0xb70
[  735.742361][ T8419]        ret_from_fork_asm+0x1a/0x30
[  735.744177][ T8419] 
[  735.744177][ T8419] -> #4 (fs_reclaim){+.+.}-{0:0}:
[  735.746844][ T8419]        fs_reclaim_acquire+0x71/0x100
[  735.748947][ T8419]        __kmalloc_cache_node_noprof+0x46/0x6b0
[  735.751348][ T8419]        create_worker+0x113/0x7e0
[  735.752991][ T8419]        workqueue_prepare_cpu+0xe4/0x170
[  735.754868][ T8419]        cpuhp_invoke_callback+0x445/0x860
[  735.756664][ T8419]        _cpu_up+0x2ce/0x5b0
[  735.758081][ T8419]        cpu_up+0x1d2/0x220
[  735.759483][ T8419]        cpuhp_bringup_mask+0xb2/0x1a0
[  735.761213][ T8419]        cpuhp_bringup_cpus_parallel+0x109/0x120
[  735.763197][ T8419]        bringup_nonboot_cpus+0x17/0x30
[  735.764948][ T8419]        smp_init+0x32/0x110
[  735.766383][ T8419]        kernel_init_freeable+0x288/0x3e0
[  735.768161][ T8419]        kernel_init+0x1d/0x1d0
[  735.769729][ T8419]        ret_from_fork+0x514/0xb70
[  735.771361][ T8419]        ret_from_fork_asm+0x1a/0x30
[  735.773040][ T8419] 
[  735.773040][ T8419] -> #3 (cpu_hotplug_lock){++++}-{0:0}:
[  735.775506][ T8419]        cpus_read_lock+0x42/0x160
[  735.777185][ T8419]        static_key_slow_inc+0x12/0x30
[  735.778964][ T8419]        nbd_genl_reconfigure+0x132f/0x1ea0
[  735.780820][ T8419]        genl_family_rcv_msg_doit+0x22a/0x330
[  735.782853][ T8419]        genl_rcv_msg+0x61c/0x7a0
[  735.784471][ T8419]        netlink_rcv_skb+0x232/0x4b0
[  735.786169][ T8419]        genl_rcv+0x28/0x40
[  735.787655][ T8419]        netlink_unicast+0x75c/0x8e0
[  735.789360][ T8419]        netlink_sendmsg+0x813/0xb40
[  735.791061][ T8419]        ____sys_sendmsg+0x972/0x9f0
[  735.792927][ T8419]        ___sys_sendmsg+0x2a5/0x360
[  735.794709][ T8419]        __x64_sys_sendmsg+0x1bd/0x2a0
[  735.796483][ T8419]        do_syscall_64+0x15f/0xf80
[  735.798494][ T8419]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  735.801000][ T8419] 
[  735.801000][ T8419] -> #2 (&nsock->tx_lock){+.+.}-{4:4}:
[  735.803973][ T8419]        __mutex_lock+0x1a3/0x1550
[  735.806024][ T8419]        nbd_queue_rq+0x37b/0x1100
[  735.808044][ T8419]        blk_mq_dispatch_rq_list+0xa70/0x1910
[  735.810451][ T8419]        __blk_mq_sched_dispatch_requests+0xdcc/0x1600
[  735.813061][ T8419]        blk_mq_sched_dispatch_requests+0xd7/0x190
[  735.815585][ T8419]        blk_mq_run_hw_queue+0x348/0x4f0
[  735.817785][ T8419]        blk_mq_dispatch_list+0xd16/0xe10
[  735.820018][ T8419]        blk_mq_flush_plug_list+0x48d/0x570
[  735.822382][ T8419]        __blk_flush_plug+0x3ed/0x4d0
[  735.824555][ T8419]        __submit_bio+0x28d/0x580
[  735.826622][ T8419]        submit_bio_noacct_nocheck+0x2f4/0xa40
[  735.829088][ T8419]        block_read_full_folio+0x599/0x830
[  735.831342][ T8419]        filemap_read_folio+0x137/0x3b0
[  735.833657][ T8419]        do_read_cache_folio+0x358/0x590
[  735.835957][ T8419]        read_part_sector+0xb6/0x2b0
[  735.837907][ T8419]        adfspart_check_ICS+0xb1/0x960
[  735.839753][ T8419]        bdev_disk_changed+0x817/0x1770
[  735.841961][ T8419]        blkdev_get_whole+0x380/0x510
[  735.844096][ T8419]        bdev_open+0x31e/0xd30
[  735.846031][ T8419]        blkdev_open+0x470/0x610
[  735.847973][ T8419]        do_dentry_open+0x785/0x14e0
[  735.849638][ T8419]        vfs_open+0x3b/0x340
[  735.851058][ T8419]        path_openat+0x2e08/0x3860
[  735.852669][ T8419]        do_file_open+0x23e/0x4a0
[  735.854228][ T8419]        do_sys_openat2+0x113/0x200
[  735.855846][ T8419]        __x64_sys_openat+0x138/0x170
[  735.857456][ T8419]        do_syscall_64+0x15f/0xf80
[  735.858997][ T8419]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  735.861035][ T8419] 
[  735.861035][ T8419] -> #1 (&cmd->lock){+.+.}-{4:4}:
[  735.863286][ T8419]        __mutex_lock+0x1a3/0x1550
[  735.864869][ T8419]        nbd_queue_rq+0xc6/0x1100
[  735.866452][ T8419]        blk_mq_dispatch_rq_list+0xa70/0x1910
[  735.868294][ T8419]        __blk_mq_sched_dispatch_requests+0xdcc/0x1600
[  735.870554][ T8419]        blk_mq_sched_dispatch_requests+0xd7/0x190
[  735.872584][ T8419]        blk_mq_run_hw_queue+0x348/0x4f0
[  735.874518][ T8419]        blk_mq_dispatch_list+0xd16/0xe10
[  735.876666][ T8419]        blk_mq_flush_plug_list+0x48d/0x570
[  735.878756][ T8419]        __blk_flush_plug+0x3ed/0x4d0
[  735.880669][ T8419]        __submit_bio+0x28d/0x580
[  735.882478][ T8419]        submit_bio_noacct_nocheck+0x2f4/0xa40
[  735.884700][ T8419]        block_read_full_folio+0x599/0x830
[  735.886513][ T8419]        filemap_read_folio+0x137/0x3b0
[  735.888301][ T8419]        do_read_cache_folio+0x358/0x590
[  735.890532][ T8419]        read_part_sector+0xb6/0x2b0
[  735.892645][ T8419]        adfspart_check_ICS+0xb1/0x960
[  735.894768][ T8419]        bdev_disk_changed+0x817/0x1770
[  735.896964][ T8419]        blkdev_get_whole+0x380/0x510
[  735.898700][ T8419]        bdev_open+0x31e/0xd30
[  735.900176][ T8419]        blkdev_open+0x470/0x610
[  735.901708][ T8419]        do_dentry_open+0x785/0x14e0
[  735.903444][ T8419]        vfs_open+0x3b/0x340
[  735.904968][ T8419]        path_openat+0x2e08/0x3860
[  735.906693][ T8419]        do_file_open+0x23e/0x4a0
[  735.908265][ T8419]        do_sys_openat2+0x113/0x200
[  735.909943][ T8419]        __x64_sys_openat+0x138/0x170
[  735.911635][ T8419]        do_syscall_64+0x15f/0xf80
[  735.913372][ T8419]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  735.915505][ T8419] 
[  735.915505][ T8419] -> #0 (set->srcu){.+.+}-{0:0}:
[  735.918121][ T8419]        __lock_acquire+0x15a5/0x2cf0
[  735.920109][ T8419]        lock_sync+0x9d/0x120
[  735.921884][ T8419]        __synchronize_srcu+0xca/0x300
[  735.923893][ T8419]        elevator_switch+0x1e8/0x7a0
[  735.925882][ T8419]        elevator_change+0x2cc/0x450
[  735.927879][ T8419]        elevator_set_default+0x36c/0x430
[  735.930013][ T8419]        blk_register_queue+0x3e9/0x4e0
[  735.932059][ T8419]        __add_disk+0x677/0xd50
[  735.933892][ T8419]        add_disk_fwnode+0xfb/0x480
[  735.935838][ T8419]        nbd_dev_add+0x72c/0xb50
[  735.937703][ T8419]        nbd_genl_connect+0x962/0x1cf0
[  735.939702][ T8419]        genl_family_rcv_msg_doit+0x22a/0x330
[  735.941960][ T8419]        genl_rcv_msg+0x61c/0x7a0
[  735.943900][ T8419]        netlink_rcv_skb+0x232/0x4b0
[  735.945936][ T8419]        genl_rcv+0x28/0x40
[  735.947623][ T8419]        netlink_unicast+0x75c/0x8e0
[  735.949623][ T8419]        netlink_sendmsg+0x813/0xb40
[  735.951567][ T8419]        ____sys_sendmsg+0x972/0x9f0
[  735.953499][ T8419]        ___sys_sendmsg+0x2a5/0x360
[  735.955460][ T8419]        __x64_sys_sendmsg+0x1bd/0x2a0
[  735.957620][ T8419]        do_syscall_64+0x15f/0xf80
[  735.959649][ T8419]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  735.962048][ T8419] 
[  735.962048][ T8419] other info that might help us debug this:
[  735.962048][ T8419] 
[  735.965490][ T8419] Chain exists of:
[  735.965490][ T8419]   set->srcu --> &q->q_usage_counter(io)#49 --> &q->elevator_lock
[  735.965490][ T8419] 
[  735.970251][ T8419]  Possible unsafe locking scenario:
[  735.970251][ T8419] 
[  735.972800][ T8419]        CPU0                    CPU1
[  735.974675][ T8419]        ----                    ----
[  735.976508][ T8419]   lock(&q->elevator_lock);
[  735.978148][ T8419]                                lock(&q->q_usage_counter(io)#49);
[  735.980828][ T8419]                                lock(&q->elevator_lock);
[  735.982977][ T8419]   sync(set->srcu);
[  735.984355][ T8419] 
[  735.984355][ T8419]  *** DEADLOCK ***
[  735.984355][ T8419] 
[  735.987011][ T8419] 6 locks held by syz.0.10363/8419:
[  735.988866][ T8419]  #0: ffffffff8fe3f9a8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  735.991587][ T8419]  #1: ffffffff8fe3f7e0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  735.994307][ T8419]  #2: ffff8881186561c0 (&set->update_nr_hwq_lock){++++}-{4:4}, at: add_disk_fwnode+0xe7/0x480
[  735.997628][ T8419]  #3: ffff888109bed090 (&q->sysfs_lock){+.+.}-{4:4}, at: blk_register_queue+0x119/0x4e0
[  736.000612][ T8419]  #4: ffff888109becb18 (&q->q_usage_counter(queue)#54){+.+.}-{0:0}, at: elevator_change+0x198/0x450
[  736.003945][ T8419]  #5: ffff888109bed008 (&q->elevator_lock){+.+.}-{4:4}, at: elevator_change+0x1b3/0x450
[  736.006972][ T8419] 
[  736.006972][ T8419] stack backtrace:
[  736.008840][ T8419] CPU: 0 UID: 0 PID: 8419 Comm: syz.0.10363 Not tainted syzkaller #0 PREEMPT(full) 
[  736.008849][ T8419] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  736.008854][ T8419] Call Trace:
[  736.008859][ T8419]  <TASK>
[  736.008864][ T8419]  dump_stack_lvl+0xe8/0x150
[  736.008875][ T8419]  print_circular_bug+0x2e1/0x300
[  736.008886][ T8419]  check_noncircular+0x12e/0x150
[  736.008896][ T8419]  __lock_acquire+0x15a5/0x2cf0
[  736.008907][ T8419]  ? lockdep_unlock+0x5d/0xd0
[  736.008914][ T8419]  ? __lock_acquire+0x146e/0x2cf0
[  736.008922][ T8419]  ? __lock_acquire+0x146e/0x2cf0
[  736.008929][ T8419]  ? __synchronize_srcu+0xb6/0x300
[  736.008936][ T8419]  lock_sync+0x9d/0x120
[  736.008944][ T8419]  ? __synchronize_srcu+0xb6/0x300
[  736.008952][ T8419]  __synchronize_srcu+0xca/0x300
[  736.008960][ T8419]  ? do_raw_spin_lock+0x12b/0x2f0
[  736.008970][ T8419]  ? __pfx___synchronize_srcu+0x10/0x10
[  736.008978][ T8419]  ? kvm_clock_get_cycles+0x47/0x60
[  736.008990][ T8419]  ? ktime_get_mono_fast_ns+0x2d2/0x2f0
[  736.009001][ T8419]  ? synchronize_srcu+0x20d/0x270
[  736.009008][ T8419]  elevator_switch+0x1e8/0x7a0
[  736.009018][ T8419]  ? blk_mq_cancel_work_sync+0xa5/0xe0
[  736.009025][ T8419]  elevator_change+0x2cc/0x450
[  736.009034][ T8419]  ? do_raw_spin_unlock+0x4d/0x210
[  736.009044][ T8419]  elevator_set_default+0x36c/0x430
[  736.009053][ T8419]  ? __pfx_elevator_set_default+0x10/0x10
[  736.009064][ T8419]  ? disk_register_independent_access_ranges+0x2db/0x380
[  736.009073][ T8419]  ? blk_crypto_sysfs_register+0x11c/0x170
[  736.009082][ T8419]  blk_register_queue+0x3e9/0x4e0
[  736.009091][ T8419]  __add_disk+0x677/0xd50
[  736.009099][ T8419]  ? down_read+0x270/0x2e0
[  736.009107][ T8419]  add_disk_fwnode+0xfb/0x480
[  736.009115][ T8419]  nbd_dev_add+0x72c/0xb50
[  736.009123][ T8419]  ? __pfx_nbd_dev_add+0x10/0x10
[  736.009133][ T8419]  ? bpf_lsm_capable+0x9/0x20
[  736.009141][ T8419]  ? security_capable+0x7e/0x2c0
[  736.009150][ T8419]  ? radix_tree_lookup+0x25c/0x290
[  736.009160][ T8419]  nbd_genl_connect+0x962/0x1cf0
[  736.009167][ T8419]  ? __pfx___nla_validate_parse+0x10/0x10
[  736.009197][ T8419]  ? __pfx_nbd_genl_connect+0x10/0x10
[  736.009205][ T8419]  ? rcu_is_watching+0x15/0xb0
[  736.009215][ T8419]  ? trace_kmalloc+0x2a/0xf0
[  736.009226][ T8419]  ? __nla_parse+0x40/0x60
[  736.009237][ T8419]  ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0
[  736.009246][ T8419]  ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0
[  736.009255][ T8419]  genl_family_rcv_msg_doit+0x22a/0x330
[  736.009264][ T8419]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  736.009272][ T8419]  ? __lock_acquire+0x6b5/0x2cf0
[  736.009281][ T8419]  genl_rcv_msg+0x61c/0x7a0
[  736.009288][ T8419]  ? __pfx_genl_rcv_msg+0x10/0x10
[  736.009295][ T8419]  ? __pfx_nbd_genl_connect+0x10/0x10
[  736.009304][ T8419]  netlink_rcv_skb+0x232/0x4b0
[  736.009313][ T8419]  ? __pfx_genl_rcv_msg+0x10/0x10
[  736.009324][ T8419]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  736.009335][ T8419]  ? down_read+0x270/0x2e0
[  736.009341][ T8419]  ? genl_rcv+0xd/0x40
[  736.009347][ T8419]  genl_rcv+0x28/0x40
[  736.009353][ T8419]  netlink_unicast+0x75c/0x8e0
[  736.009363][ T8419]  netlink_sendmsg+0x813/0xb40
[  736.009373][ T8419]  ? __pfx_netlink_sendmsg+0x10/0x10
[  736.009383][ T8419]  ? aa_sock_msg_perm+0xf1/0x1b0
[  736.009391][ T8419]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  736.009401][ T8419]  ____sys_sendmsg+0x972/0x9f0
[  736.009412][ T8419]  ? __might_fault+0xaf/0x130
[  736.009422][ T8419]  ? __pfx_____sys_sendmsg+0x10/0x10
[  736.009432][ T8419]  ? import_iovec+0x73/0xa0
[  736.009442][ T8419]  ___sys_sendmsg+0x2a5/0x360
[  736.009451][ T8419]  ? __lock_acquire+0x6b5/0x2cf0
[  736.009459][ T8419]  ? __pfx____sys_sendmsg+0x10/0x10
[  736.009469][ T8419]  ? futex_wake+0x4ac/0x580
[  736.009482][ T8419]  ? __fget_files+0x2a/0x420
[  736.009490][ T8419]  ? __fget_files+0x3a0/0x420
[  736.009499][ T8419]  __x64_sys_sendmsg+0x1bd/0x2a0
[  736.009509][ T8419]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  736.009519][ T8419]  ? rcu_is_watching+0x15/0xb0
[  736.009528][ T8419]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  736.009535][ T8419]  do_syscall_64+0x15f/0xf80
[  736.009545][ T8419]  ? trace_irq_disable+0x3b/0x140
[  736.009555][ T8419]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  736.009562][ T8419] RIP: 0033:0x7f09ec99cdd9
[  736.009571][ T8419] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  736.009578][ T8419] RSP: 002b:00007f09ed8c6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  736.009586][ T8419] RAX: ffffffffffffffda RBX: 00007f09ecc15fa0 RCX: 00007f09ec99cdd9
[  736.009618][ T8419] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 000000000000000c
[  736.009624][ T8419] RBP: 00007f09eca32d69 R08: 0000000000000000 R09: 0000000000000000
[  736.009629][ T8419] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  736.009634][ T8419] R13: 00007f09ecc16038 R14: 00007f09ecc15fa0 R15: 00007ffd14a5a428
[  736.009643][ T8419]  </TASK>
[  736.210942][ T8426] netlink: 7 bytes leftover after parsing attributes in process `syz.2.10364'.
[  736.216780][ T8425] netlink: 20 bytes leftover after parsing attributes in process `syz.0.10363'.
[  736.222993][ T8419] netlink: 26 bytes leftover after parsing attributes in process `syz.0.10363'.
