last executing test programs:

1.065132443s ago: executing program 1 (id=6321):
socket$nl_generic(0x10, 0x3, 0x10)
connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4e22, 0xcc15, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x9}, 0x1c)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
pipe(0x0)
splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0xf3a, 0x0)
mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz0\x00', 0x1ff)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x275a, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700)
r3 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10)
connect$inet(r3, &(0x7f0000000140)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10)
writev(r3, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x11)
shutdown(r3, 0x1)
write$cgroup_int(r2, &(0x7f0000000200)=0x10001, 0x12)
sendfile(r2, r1, 0x0, 0xf03a0005)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a44, 0x1700)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000740)=ANY=[@ANYBLOB="40000000090601020000000000000000000000000900020073797a310000000005000100070000001800078008000140ff"], 0x40}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084)
write$cgroup_type(r5, &(0x7f00000000c0), 0x9)
sendfile(r5, r4, 0x0, 0x10000)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xb, 0x6, &(0x7f0000000040)=ANY=[@ANYBLOB="060000000000000069114b000000000085d32d41b89755a1772076c3a8adbe8110000002000000850000008c00000095000000000000006933a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70)

1.058707586s ago: executing program 2 (id=6323):
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
bind$nfc_llcp(r0, &(0x7f0000000080)={0x27, 0x0, 0x0, 0x3, 0xfc, 0x6, "750538d1ee602ec4802a04ea7cdcd151bb2cd9893bc31fa0718336d9bd4e17076db9ad1f6a120d8be6d7f81cd81ec27529d14a2300000000b740a5418d69d0", 0x10000000000000}, 0x60)
r1 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000d80)={'veth0_to_bond\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}}, 0x4)
sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000001280)={&(0x7f00000003c0)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0xd3, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0xb, 0xfff1}, {0xffff, 0xffff}, {0xc, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000080)
bind$nfc_llcp(r1, &(0x7f0000001040)={0x27, 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x0, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x4000000000a}, 0x60)
r5 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
bind$nfc_llcp(r5, &(0x7f0000000180)={0x27, 0x0, 0x0, 0x7, 0x0, 0x6, "750538d1ee602ec4802a04ea7cdcd151bb2cd9893bc31f80718336d9bd3517076db9ad1f6a120d8be6d7f81cd81ec275000386e7d95f0669b740a5418d69d0", 0x1000000000003c}, 0x60)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='@\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="9d07070006060400200012800b0001006272696467650000100002800c002e000000000013699385"], 0x40}, 0x1, 0x0, 0x0, 0x24040054}, 0x8000)

989.54523ms ago: executing program 2 (id=6325):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000000140)={0x1040, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x1014, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x1004, 0x4, "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"/4096}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x7ffd}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}]}]}, 0x1040}}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
pipe(&(0x7f00000000c0)={<r3=>0xffffffffffffffff})
r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r3)
sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000480)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="091429bd555cc085cfa1b6369f07c03ac0ce7000fcdbdf254ede9e790e0001006e657464454827472dda7a1fa83cf2b6a7657673696d0000000faf04006e657464657673696d3000000800030002"], 0x54}, 0x1, 0x0, 0x0, 0x40}, 0x40)

900.76852ms ago: executing program 2 (id=6327):
r0 = socket(0xa, 0x3, 0x3a)
getsockopt$nfc_llcp(r0, 0x3a, 0x1, 0x0, 0x20000000)
recvmsg(0xffffffffffffffff, 0x0, 0x40000020)
socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0xedc623580215bdcd, 0x12, r3, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000040)={0x50, r5, 0x800, 0xfffffffc, 0x25dfdbff, {0x1e}, [{@pci={{0x8}, {0x11}}, {0x8, 0x3e, 0x1}, {0xc}, {0xc}}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000081}, 0x10)
r6 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r6, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c)
sendto$inet6(r6, 0x0, 0x0, 0x2409c8c1, &(0x7f0000000240)={0xa, 0x4e20, 0x6, @mcast1}, 0x1c)
sendto$inet6(r6, &(0x7f0000000e80)="0d0ad7c36d6617110e434332d6ac582208222cfb7c37ce1148f448455bc37f5f70c92774dcb201629979039d7c8943b207e5bdf9ab8eed9ace110469c51f4f211dd9fad815eb5b273ac04e1edc679bcdf0a0d24482de5454be9003cb80714a95e136bb704ee58e707d1e69b3c3a1c2c37f9c0402e14abdeb32086a49aff25e5c0f0131d59b4783316b9fa2c71c51ce76942d5f519145c9e3bf0d4182b4a62970b2ce81d35a7afc8384b387b8e21f2051d90d92323a710cabe5275d335b64453e759251a140de480541d8dd7662a14296a59eba99b95bfdf5b22992c323865b471d13ad79867e2692fd4eece299a81e2b33336b6801f51c2ae8d73e4df90c9bd70cd535b72cbdf67754acdc44b3780450308d9c5527c3314eb7b2cc38b61e96403a30a8ba0c8a357aa04d3c62bc51bcf55cf214f44a909b29c30c18c3a43c86472612086664a80f2aa8490e58352732acb96eb46deab42895d1957a6029ad86e7a5ced6bde89c158aaee721954beeebe5973059007f7dd5459029af6d3f1d73d35f07d19b7cedfc80d1d7ef37f8b113f564afd0f093202929fef43e788619ca522c7f679dd2f27949d879b4dab46581a0e054b4ed1db37e43f528748b56ec5a54b7af198d4ae551046f7814fe3a5cbc1cc7cb6655fc198939b049f3c02443148c588e34d6ebef81096b4e48f468016d2bde0828664c0874d71e2d88b3bc04079d4a504255a83c3f07a4f1c3e5a4c66f55f36e51e344392487c8299d8d1bfb568780c0d57df48990cb5d6b35c3f7445f80312186d8598faf61072d4eefc961fb5a7e72b971c8f94a8346effd27362cee8d72a98b55e317de280d2d63ee83ca7140b7913122d402c536d914c8510c81d08f0ad1c952f5b7ad5e7ef72d7c58cb4d5bafbea535b381df6ebe94c62cf782cf7ab81c017c296a88ca91d641b45748d230cf5e87e5dbee4764ea4d131ae022e6bbf3ffc3ea7b264737d9db44354bfffa63d79bc403d3ac23fb615edc382d18b0daf1bbb2fbd708d1830ddac1c3f098b8cb1ef9a0019d804bf5d953110f12f3b9a8b9b7e0c61cb5d34116add1fc9a92721ffa5fdc83e1488cf88aa6e56ad2dd55e0aadd827cc7b4e7242f01241f49e905e5e7451092c28c3f6560a6a0002e5d91fc253a5a8fd8f27e42f4f02f5849528b7d93df9b0c568022acaff410e797e88d2f8eeadbba66e423335b843df734d203fa62a861b712da8f33d5ea721767871aa2cd53e659e505507de9a54d7e6fa3c20bbfb28cd6dd2b314dabbb59e9ce15c0a94ec3b3efc54eaaa27bd7576a687dcaf58dc182662539943014a02e76dc89f48c9f83cc7199038418f965ad3dc866098b89cabcac8691b0f51ffb71902337e49293309c4480a8f1b32411cc1b55a0ec0fe2c2572fe9d488a25bfc12ba74048e1d7beee93321c7aa49ea17cb9728dc46e5272154b3b995feacbacb8885621b335274af4df9365f8c8121ff323b572d320c8fc46acd6218b9579d43005e7b0506ccb14d9a0dac4cc6efaf5366c44342eaea8b5a11457f5afbea913ce4975ab67e6a85bc46e714ca5741da38a7cceb9e85d77fd03f83f7a5ecc7241e69e2bda327f769b48ba5f13662585c72778d12bd0e9a62a3d0dbe376d1aee81e6845c2cf23f42c458ae5668c8d387bf9ab224bc9703f1c08347be810d2f19278fe8d97560b3c9f1816667d0461a25e778eb1404dcaac1ed0a6a0745f3a5d2dc1b6babf98f5135d531cb26334ef2fec4c78c95b7193935139664fc65f17b047eb3dc39e251ba52ce33f8099719f1a789db1690347355e7b02d4c522692b9597fd31abb90f973ae4eb0bd0d900cdd887ff01d4845d7f0aee39b220a65a5aeee0fd386054070723c841c042d5339cc6325f07f0f733d124c6524f388ef7419f42c06278b8fceaa3a16b202dfb539b129762397e29cdd679ca6240272fa0c3e2e8c0a27aaa407f30b4024d0638dfca1bc9483db3ccc2880f", 0x5c6, 0x6d91fb6102d8910c, 0x0, 0xfffffffffffffe38)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000009c0)=@newtaction={0x6c, 0x30, 0x1, 0x0, 0x0, {}, [{0x58, 0x1, [@m_mpls={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_MPLS_PROTO={0x6, 0x4, 0x8864}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0)
sendto$inet6(r6, 0x0, 0x0, 0x40000, 0x0, 0x0)
recvfrom(r6, &(0x7f0000001a80)=""/4043, 0xffffffffffffff9b, 0x12, 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000840)={'batadv_slave_0\x00', <r8=>0x0})
r9 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6b, '\x00', r8, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94)
r10 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r10, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', <r11=>0x0})
sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="200000001100010025bd7000ffdbdf2500000000", @ANYRES32=r11], 0x20}, 0x1, 0x0, 0x0, 0xc881}, 0x8080)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)=ANY=[@ANYBLOB="340000001000010027bd70000000000000000000", @ANYRES32=r2, @ANYBLOB="004100000000000014002b8008000100", @ANYRES32=r9], 0x34}}, 0x4008000)

548.886881ms ago: executing program 0 (id=6332):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_GET(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000001f0000540000000e0001006e657464657673696d0000000f0002"], 0x34}}, 0x0)
sendmsg$DEVLINK_CMD_GET(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000040)={0x14, r4, 0x1, 0x0, 0x0, {0x54}}, 0x14}}, 0x880)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8000}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x98, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x70, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x38, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x1}, @NFTA_BITWISE_MASK={0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x10c}}, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x50, 0x10, 0x439, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21801, 0x6536d5ef40a93735}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x2}, @IFLA_GRE_ERSPAN_HWID={0x6, 0x18, 0x8}, @IFLA_GRE_ERSPAN_DIR={0x5, 0x17, 0x1}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x410c0}, 0x4000020)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', <r6=>0x0})
sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090d2000000000f0ff000700000008000300", @ANYRES32=r6, @ANYBLOB="0800051d000000001400060076657468115f746f5f7465616d0000000400cc000800050009000000140004"], 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x0)

548.197012ms ago: executing program 0 (id=6333):
r0 = socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'erspan0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5000000010000100"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000300012800b00010065727370616e000020000280040012000500160002000000060018"], 0x50}}, 0x4080)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="94eb010018000000000000000c0000000c000000020000000010040000000000000500000000"], &(0x7f0000000100)=""/141, 0x26, 0x8d, 0x1, 0x7}, 0x28)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xb, &(0x7f0000000100)=ANY=[@ANYBLOB="180800ec0c00000000000000000000001801000020"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x72, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000003c0)=ANY=[@ANYRESHEX=r1, @ANYRES32, @ANYRES8=r4], 0x68}}, 0x0)
r5 = socket$igmp6(0xa, 0x3, 0x2)
r6 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r5, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}})
write$tun(r4, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0x72)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r7)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r8)
sendmsg$TIPC_CMD_ENABLE_BEARER(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000240)={'syzkaller0\x00', @multicast})
r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x200504, 0x0)
close(r10)
r11 = socket$unix(0x1, 0x5, 0x0)
r12 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r13=>0x0})
sendmsg$nl_route_sched(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r13, {0x0, 0xb}, {0xffff, 0xf}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x3, 0x7, 0x6361, 0x5, 0xffffffff, 0x5}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0xd}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x240080c1}, 0x0)
sendmsg$nl_route_sched(r12, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x80000, {0x0, 0x0, 0x0, r13, {0x0, 0x6}, {0xffe4, 0xb}, {0xfff3, 0x7}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x3, 0x7}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2404c0f1}, 0x6008000)
ioctl$SIOCSIFHWADDR(r10, 0x8922, &(0x7f0000002280)={'macsec0\x00', @random="2b0100004ec6"})

420.348982ms ago: executing program 0 (id=6334):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="5801000040000701feffffff00000000017c0000040042800c00018006000600800a0000340102802e011480080007"], 0x158}, 0x1, 0x0, 0x0, 0x48815}, 0xc000)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000a80), r1)
sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x1c, r3, 0x1, 0x70bd29, 0x25dfdbff, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0xc0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20004001}, 0x4000018)
sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000005c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x68, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_EXPRESSIONS={0x18, 0x12, 0x0, 0x1, [{0x5b, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x4}}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x130}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0xfffffffd}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x90}, 0x1, 0x0, 0x0, 0x4044050}, 0x4000000)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x9, &(0x7f0000000140)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x5}, @call={0x85, 0x0, 0x0, 0xf}, @generic={0x7e, 0x0, 0x8}, @initr0={0x18, 0x0, 0x0, 0x0, 0xfffffffd}, @exit]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, 0x8, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94)
sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000880)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000840)={&(0x7f0000000680)={0x188, 0x0, 0x400, 0x70bd25, 0x25dfdbfd, {}, [@TIPC_NLA_NODE={0x50, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x4b, 0x4, {'gcm(aes)\x00', 0x23, "4a00caafa1ea39e2e145a2d7d4a21fba07e353b434af978d195237f192deb25e6815b6"}}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}]}, @TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x8000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x400}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x200}]}, @TIPC_NLA_SOCK={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x80}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x10000}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x101}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x80000001}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x80000000}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_NODE={0x1c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7f2}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_MEDIA={0x24, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_LINK={0x58, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x188}, 0x1, 0x0, 0x0, 0x4000000}, 0x11)

319.8361ms ago: executing program 0 (id=6335):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000100)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32, @ANYBLOB="0c0099000080000030000000140004006e69637666300000000000000000000008000500060000000c00178004000700"], 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x40048a4)
write$tun(r0, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x20}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0xf5ff, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0xfe, 0x0, 0x18, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2, 0xfffd, 0x88000}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0x4e)

208.752506ms ago: executing program 0 (id=6336):
r0 = socket$kcm(0x10, 0x2, 0x10)
socket(0x2b, 0x1, 0x1)
r1 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$inet_int(r1, 0x0, 0xf, 0x0, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(anubis)\x00'}, 0x58)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)={0x5c, 0x2, 0x6, 0x101, 0x0, 0x0, {0xa}, [@IPSET_ATTR_REVISION={0x5, 0x4, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0xffffffff}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xe54a}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}]}, 0x5c}}, 0x80)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000980)="ad56b6c5820fae9d6dcd3292ea54c7beef915d8024d9bf002e1207f1a0ecdc4d968692617e96b868a32e", 0x2a)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a00000709000100"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x44004000)
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xe, 0x4, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x8}, [@generic={0x91, 0x1, 0x1, 0x75}]}, 0x0, 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94)
sendmsg$NFT_BATCH(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x80, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x801}, [@NFTA_RULE_EXPRESSIONS={0x54, 0x4, 0x0, 0x1, [{0x50, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x40, 0x2, 0x0, 0x1, [@NFTA_TARGET_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TARGET_INFO={0x2c, 0x3, "7339f2f10455afb9fdd672bad09dfb78c7699c74e891a0c700"/40}, @NFTA_TARGET_NAME={0x8, 0x1, 'TEE\x00'}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x14, 0x3, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x7}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xbc}, 0x1, 0x0, 0x0, 0x4000851}, 0x24000840)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000100)=[@in6={0xa, 0x0, 0x0, @loopback}, @in6={0xa, 0x0, 0xffffffff, @private0}], 0x38)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r1, 0x84, 0x65, &(0x7f0000000440)=[@in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}], 0x10)
r5 = socket$netlink(0x10, 0x3, 0x0)
ioctl$XFS_IOC_PATH_TO_HANDLE(r5, 0xc0385869, &(0x7f0000000200)={<r6=>r5, &(0x7f00000000c0)='[\\[\xd3!%]#!\x00', 0x400000, &(0x7f0000000140)={@align, {0xfffd, 0xff00, 0xc3, 0x5}}, 0xffff4919, &(0x7f0000000180), &(0x7f00000001c0)=0x3})
ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r1, 0x8982, &(0x7f0000000080)={0x7, 'ip6tnl0\x00', {0x8}, 0x4})
r7 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000240), 0xffffffffffffffff)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$key(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000300)={0x2, 0x6, 0x0, 0x0, 0x1e, 0x0, 0x70bd2a, 0x25dfdbff, [@sadb_x_nat_t_type={0x1, 0x14, 0x7}, @sadb_x_filter={0x5, 0x1a, @in=@multicast1, @in6=@dev={0xfe, 0x80, '\x00', 0x18}, 0xa, 0x0, 0x14}, @sadb_x_policy={0x8, 0x12, 0x4, 0x4, 0x0, 0x6e6bb7, 0x4, {0x6, 0x6c, 0xd, 0x9, 0x0, 0xaf, 0x0, @in=@rand_addr=0x64010100, @in=@empty}}, @sadb_spirange={0x2, 0x10, 0x4d4, 0x4d2}, @sadb_x_sa2={0x2, 0x13, 0x7f, 0x0, 0x0, 0x70bd2a, 0x3507}, @sadb_spirange={0x2, 0x10, 0x4d6, 0x4d5}, @sadb_x_policy={0x8, 0x12, 0x2, 0x3, 0x0, 0x6e6bbf, 0x7, {0x6, 0x33, 0x0, 0x0, 0x0, 0x24c2, 0x0, @in=@local, @in6=@private2}}]}, 0xf0}}, 0x4044040)
r9 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), r6)
sendmsg$ETHTOOL_MSG_WOL_SET(r8, &(0x7f0000000fc0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000f80)={&(0x7f0000001000)={0x484, r9, 0x300, 0x70bd28, 0x25dfdbfe, {}, [@ETHTOOL_A_WOL_SOPASS={0x38, 0x3, "a969141a78a79178a924497a4296951119a5bdbdc632ca6a09e594456ceda257fff650dfcac60e5b8ed90593f56225a7c24afe09"}, @ETHTOOL_A_WOL_MODES={0x11c, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xffffff01}, @ETHTOOL_A_BITSET_BITS={0x108, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, ':!\x00'}]}, {0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, 'hash:net\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8001}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xb}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'aead\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xd67}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '%\x00'}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1ff}]}, {0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, 'hasJ\xa2a`\xee+'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x40}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x149ee07a}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'aead\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x10, 0x2, 'gcm(anubis)\x00'}]}]}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x3}]}, @ETHTOOL_A_WOL_SOPASS={0x1a, 0x3, "7683b09de8c1bbae7bf938a944f0f1d5aba7613724ba"}, @ETHTOOL_A_WOL_SOPASS={0xa9, 0x3, "7c40883e1f8d6be52ab657ef5feb837611c0943cd72f5f7bd654f6943293d2ab6b2dc18c37f3d94a8b9d5232e2b30e7032360611f556d20ed185977fb9729a79b6a01ad709c574f91dae50f68b1284094f629b1725bcff21e8d825865bbc7fbe8dedd19db46dd359d976042938192341652e8959ee01606930fbb1e00fc8129ae597da080c8edd87f3e2f96b7da6bc05e0fbefde9b52e104e2cae96a8040ea1c9182bee63c"}, @ETHTOOL_A_WOL_SOPASS={0x88, 0x3, "9ff61dd4bb19ebb9af19fec4154a8f9bcf0955a296e57eda6ae24e8b316c888a0ffaeea427584f6345d55f3ebcd5e1056d8f4dd9f95de4647c7f1390530b92ef4e40a8bff6a60b0296badb5618739f33c609d7d4ecb6355a2ef507ad9b31c695c702bb0ae2b55c6a67dfbc250acea8ac2714f54a2ce29130f133d763ea08f24a395d7b7a"}, @ETHTOOL_A_WOL_MODES={0x19c, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xff}, @ETHTOOL_A_BITSET_VALUE={0x53, 0x4, "b0b5075102a248d940f36bf6b6351ca21149c946624d697430b34d5b6eb186c9f66c8bf69d3f0c3cd4188a98a25be03672dce10bc94f0796f1e010a62fa234fffde14a97ebb84043f2eef1b11e75ce"}, @ETHTOOL_A_BITSET_BITS={0x13c, 0x3, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xb8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8001000}, @ETHTOOL_A_BITSET_BIT_NAME={0x10, 0x2, 'gcm(anubis)\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xf, 0x2, '{}.(\x04s+.^-\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xc30}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, 'mptcp_pm\x00'}]}, {0x4}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, '[\\[\xd3!%]#!\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '%\\\\*\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, '[\\[\xd3!%]#!\x00'}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, '[\\[\xd3!%]#!\x00'}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, '-}+%#O&@%\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x81}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1000}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x65}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '\\*&\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '/\x00'}]}]}]}, @ETHTOOL_A_WOL_MODES={0x30, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x24, 0x3, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xe7e}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x1}]}]}, 0x484}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000091)
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r10, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWRULE={0x68, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x3c, 0x4, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, @dynset={{0xb}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_DYNSET_OP={0x8}, @NFTA_DYNSET_SET_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_DYNSET_FLAGS={0x8, 0x9, 0x1, 0x0, 0x2}, @NFTA_DYNSET_SREG_KEY={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x90}}, 0x0)
r11 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_WOL_GET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x20, r11, 0x1, 0x70bd28, 0x25dfdbff, {0x1b}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4048810}, 0x30000800)
sendmsg$MPTCP_PM_CMD_SET_LIMITS(r7, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000580)=ANY=[@ANYRESHEX, @ANYRES16=r0, @ANYBLOB="01002dbd7000ffdbdf250500000008000200080000000800030004000008"], 0x24}, 0x1, 0x0, 0x0, 0x880}, 0xa50d9986120403c7)

204.239299ms ago: executing program 1 (id=6337):
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)}, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x8100)
socket$alg(0x26, 0x5, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x5, 0x7, 0xb3}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000884)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f0000000380)={'ip6_vti0\x00', &(0x7f0000000300)={'syztnl0\x00', r4, 0x2f, 0x0, 0x3, 0xed91, 0x10, @remote, @local, 0x1, 0x7800, 0x80000001}})
r7 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newqdisc={0x48, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r8, {0x6}, {}, {0xfff2, 0x1}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x2, '\x00', 0x9, 0x0, 0x3, 0xfffffffd}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4040098}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newqdisc={0x48, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r4, {0x10}, {0x6}, {0xfff2, 0x1}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x2, '\x00', 0x9, 0x0, 0x3, 0xfffffffd}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4040098}, 0x880)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r9 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r9, 0x107, 0xf, &(0x7f0000000100)=0x4207, 0x4)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', <r10=>0x0})
r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r11, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r12 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r12, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local})
write$tun(r11, &(0x7f0000000280)={@void, @void, @eth={@broadcast, @local, @val={@void, {0x8100, 0x0, 0x1, 0x2}}, {@mpls_uc={0x8847, {[], @ipv6=@tipc_packet={0xe, 0x6, "74dd16", 0x2c, 0x6, 0x0, @remote, @loopback, {[], @payload_mcast={{{{{{0x2c, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x2, 0x7, 0x0, 0x1, 0x8, 0x4, 0x1, 0x9, 0x3, 0x2, 0x4e24, 0x4e24}, 0x3, 0x3}, 0x3, 0x2}, 0x2}}}}}}}}}}, 0x66)
sendto$packet(r9, &(0x7f00000002c0)="05031400d3fc140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x88a8, r10, 0x1, 0x0, 0x6, @multicast}, 0x14)

131.865853ms ago: executing program 0 (id=6338):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000300)={0x7c9, 0x7, 0x19, 0x2, 0xfffffff0})
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r2=>0x0})
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x25dfdc02, {0x0, 0x0, 0x74, r2, 0x10800, 0x45007}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x0)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10)
syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @random="50a245d5cde0", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @broadcast}, @timestamp_reply={0x12, 0x0, 0x0, 0xe000, 0x2}}}}}, 0x0)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3)
sendmmsg$inet(r0, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000b80)="f77d2b5dd5f7d74f0748cf3d2cf218d644566a14103b1c7dd35fd2951bd022f10f2dc7f4ce0d8ac5f4abaca4b97b706153756913b7dd48248b5bfb10460019248bf238743fa2aeb5bef21ce832db670920dc5e911ef2ad63e849901d1001129dbacbfd4924d7545517fd18b5d29978f32a5b5c81755cb89cc0490958ba3211eb99df5cdbbc0f9c941aaa1495893dada02d8188acd26b5afd7476413f322c8f79de769debb56343f3eded2dca93ed6641e50fe595e1e0dbe84ed0f70abb4ed2dfb6648df7dbbd18fa5533a6b0acc138c81a8acbcb2fb79a7d", 0xd8}, {&(0x7f0000000140)="89a713c2ca38d36f526284d93c6628738a19795b93d3094bc466d4aeef8fd28b41a1bae573446d2c98031cfb", 0x2c}], 0x2}}, {{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000640)='B', 0x1}], 0x1}}], 0x2, 0x2090)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000100)={'wlan0\x00'})
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r4, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000000}, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$nl_route(r5, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[@ANYBLOB="6800000010001fff00000000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0000000088520300400012800b000100697036746e6c00003000028014000300fe8000000000000000000000000000aa08000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="050009"], 0x68}, 0x1, 0x0, 0x0, 0x2000c014}, 0x4000080)
syz_emit_ethernet(0xba, &(0x7f0000000680)={@local, @broadcast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "081200", 0x84, 0x2b, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, @local, {[@srh={0x3a, 0xe, 0x2, 0x7, 0x0, 0x0, 0x0, [@mcast1, @local, @private0={0xfc, 0x0, '\x00', 0x1}, @private1={0xfc, 0x1, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @loopback}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}]}], {0x0, 0x0, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x100, @void}}}}}}}}, 0x0)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4)
sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x1000803c, 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x828}, 0xc, &(0x7f0000000400)={&(0x7f0000000040)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_DELCHAIN={0x5c, 0x5, 0xa, 0x5, 0x0, 0x0, {0x3, 0x0, 0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_TYPE={0xa, 0x7, 'route\x00'}, @NFTA_CHAIN_TYPE={0xa, 0x7, 'route\x00'}, @NFTA_CHAIN_TYPE={0xa, 0x7, 'route\x00'}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x5}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffc}, @NFTA_CHAIN_COUNTERS={0x4}]}, @NFT_MSG_NEWFLOWTABLE={0x2c, 0x16, 0xa, 0x3, 0x0, 0x0, {0x3, 0x0, 0x7}, [@NFTA_FLOWTABLE_HOOK={0x18, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x5}, @NFTA_FLOWTABLE_HOOK_DEVS={0x4}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}]}, @NFT_MSG_NEWTABLE={0x108, 0x0, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_USERDATA={0x7b, 0x6, "ad4e2b216695bd10b8faea07433da99dba841bea50f7ca2ee32c444c202c986d9c8a17367e8d07ee65124416462d3e261b48d9d9cd83216aa8cd162c5ad7001db504dbe635df3998a3ad63a38897ee1435b625045fc5d100c8f4d17ad6039c22b15437fde89fc9040c81046f26970ce2b17f0cdcd3a69b"}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_USERDATA={0x2f, 0x6, "2cafb0dceaea0ce3021998515ea197f49fbcbc489458a235f3ff7e5015a23eb50afdba2dc0d02bd7849d46"}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELFLOWTABLE={0x9c, 0x18, 0xa, 0x801, 0x0, 0x0, {0x5, 0x0, 0xa}, [@NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x5c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'macvlan1\x00'}, {0x14, 0x1, 'macsec0\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'syzkaller0\x00'}, {0x14, 0x1, 'veth0_virt_wifi\x00'}]}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}]}, @NFT_MSG_DELSET={0x14, 0xb, 0xa, 0x801, 0x0, 0x0, {0x0, 0x0, 0xa}}, @NFT_MSG_NEWSET={0x48, 0x9, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x6}, [@NFTA_SET_EXPRESSIONS={0x4}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x1}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x7}, @NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x9}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x2b0}, 0x1, 0x0, 0x0, 0x8800}, 0x811)

131.195087ms ago: executing program 1 (id=6339):
socket$inet6_sctp(0xa, 0x5, 0x84)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff)
socket$nl_route(0x10, 0x3, 0x0)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
openat$cgroup_ro(r0, &(0x7f0000000240)='cgroup.controllers\x00', 0x275a, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42901, 0x0)
socket$kcm(0x11, 0x2, 0x0)
socket$kcm(0x2, 0x3, 0x84)
socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000380)={0x29e9c931, 0x3, 0x0, 0x4}, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000010c0)=ANY=[@ANYBLOB="200000001600010a00000000000000040a0000000c0000800800", @ANYRES16=r1], 0x20}, 0x1, 0x0, 0x0, 0x200c0801}, 0x0)

74.727714ms ago: executing program 1 (id=6340):
r0 = socket$qrtr(0x2a, 0x2, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x2c, 0x25, 0x101, 0x70bd22, 0xfffffffc, {0xa}, [@typed={0x16, 0x10d, 0x0, 0x0, @str='\x00\xaf\xec#6m\xb2\xb9J,C\xcbh\x06\x8d\x98e$'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4048957}, 0x0)
connect$qrtr(r0, &(0x7f0000000000)={0x2a, 0x0, 0x7ffe}, 0xc)
bind$qrtr(r0, &(0x7f00000000c0)={0x2a, 0x1, 0x2}, 0xc)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x13, r2, 0x7ca8e000)
setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000200)={0x11, @multicast1, 0x4e20, 0x2, 'sh\x00', 0x2, 0x0, 0x3b}, 0x2c)
setsockopt$inet_icmp_ICMP_FILTER(r2, 0x1, 0x1, &(0x7f0000000100)={0x7f8}, 0x4)
ioctl$XFS_IOC_COMMIT_RANGE(r0, 0x40585883, &(0x7f0000000040)={r0, 0x0, 0x2, 0x101, 0x1, 0x2, [0x3, 0x8000000000000, 0x3, 0x80000000, 0x8, 0xf4]})

74.536447ms ago: executing program 2 (id=6341):
socket$inet_tcp(0x2, 0x1, 0x0)
socket$rds(0x15, 0x5, 0x0)

74.256701ms ago: executing program 1 (id=6342):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c000280080001400000000014000180090001006cdbf807"], 0xe4}}, 0x20050840)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000001200000000000000000a20000000000a03000000000000000000070000040900010073797a30000000008c000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d48001280140001800c000100636f756e7465720004000280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008000001800b6fcf1a22796e736574000008000340000001"], 0xd4}}, 0x0)
bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000000)={@cgroup=r1, r1, 0x2e}, 0x20)
close(0x4)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)=@bridge_newneigh={0x38, 0x1c, 0x1, 0x70bd29, 0x25dfdbfb, {0xa, 0x0, 0x0, 0x0, 0x80, 0x8f, 0xa}, [@NDA_LLADDR={0xa, 0x2, @random="79125908f2a0"}, @NDA_VLAN={0x6, 0x5, 0x1}, @NDA_VNI={0x8, 0x7, 0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x91}, 0x4040000)

8.724878ms ago: executing program 2 (id=6343):
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0xe, 0x3, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x53}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000740)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002cbd7000ffdbdf250c000000180001801400020076657468315f746f5f687372000000001c00038018000380140001800800010002000000050002000000000005ae51f22f8f8437ced2d130344f4a31d247d3be81cd9ba49bbbb2f9dcba89ab21efaba8139299ea9bde5c6dff0e50fde71f555bff94a0f05308340cdf88fa736382944fd74d8a56bc3fc5ca204004ebe2d0136df785c7db5e13ab9e3fc50deca5aef83bb05202b5b1fbbd759e6b434fe1eea892780ad783f103ab8ee112b0e546512ae3fe40cf38a8e4122aa3a57e724d1be67d3c9b4ad6f95f710bf6b9f4d5c5f454b186a4fa890054175627b9930fa84d9f164129"], 0x48}, 0x1, 0x0, 0x0, 0x818}, 0x20000004)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000140)={&(0x7f0000000080), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r2, 0x300, 0x70bd25, 0x25dfdbfd, {}, [@ETHTOOL_A_COALESCE_RATE_SAMPLE_INTERVAL={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20041040}, 0x20010)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0xe, 0x3, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x53}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff) (async)
sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000740)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002cbd7000ffdbdf250c000000180001801400020076657468315f746f5f687372000000001c00038018000380140001800800010002000000050002000000000005ae51f22f8f8437ced2d130344f4a31d247d3be81cd9ba49bbbb2f9dcba89ab21efaba8139299ea9bde5c6dff0e50fde71f555bff94a0f05308340cdf88fa736382944fd74d8a56bc3fc5ca204004ebe2d0136df785c7db5e13ab9e3fc50deca5aef83bb05202b5b1fbbd759e6b434fe1eea892780ad783f103ab8ee112b0e546512ae3fe40cf38a8e4122aa3a57e724d1be67d3c9b4ad6f95f710bf6b9f4d5c5f454b186a4fa890054175627b9930fa84d9f164129"], 0x48}, 0x1, 0x0, 0x0, 0x818}, 0x20000004) (async)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000140)={&(0x7f0000000080), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r2, 0x300, 0x70bd25, 0x25dfdbfd, {}, [@ETHTOOL_A_COALESCE_RATE_SAMPLE_INTERVAL={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20041040}, 0x20010) (async)

3.180812ms ago: executing program 1 (id=6344):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0xe7be759}, @TCA_TBF_PARMS={0x28, 0x1, {{0x0, 0x2, 0x2, 0x6, 0x6, 0x1}, {0x5, 0x1, 0x1, 0xa, 0xd3d, 0x1}, 0x26, 0x4b3b, 0x19c5}}]}}]}, 0x60}}, 0x0)
r0 = socket(0x11, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000005c0)={'ip6gretap0\x00', <r1=>0x0})
bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @remote}, 0x14)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xa, 0x4, 0xa, 0x80, 0x140}, 0x50)
bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x4, 0x6, @multicast}, 0x14)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201})
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x1, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5b5d}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @mcast1}]}]}, @IFLA_ALT_IFNAME={0x14, 0x35, 'wg1\x00'}]}, 0x50}}, 0x44)
r4 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local})
write$tun(r2, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001981100fc000018c6ba35000000000000000700ff020000000000000000000000000001"], 0xfdef)
sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)={0x108, 0x0, 0x2, 0x301, 0x0, 0x0, {0x7, 0x0, 0x2}, [@CTA_EXPECT_NAT={0xe8, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_TUPLE={0x68, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x17}}, {0x8, 0x2, @private=0xa010100}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010101}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}]}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x64, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x2a}}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @rand_addr=0x64010102}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}]}, @CTA_EXPECT_NAT={0xc, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}]}]}, 0x108}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000)
r5 = socket(0x10, 0x803, 0x0)
recvmmsg(r5, &(0x7f0000003440)=[{{0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000880)=""/164, 0xa4}], 0x1}, 0x1}, {{&(0x7f0000000b40)=@ll, 0x80, &(0x7f0000002140)=[{&(0x7f0000000bc0)=""/203, 0xcb}, {&(0x7f0000000cc0)=""/133, 0x85}, {&(0x7f0000000d80)=""/228, 0xe4}, {&(0x7f0000000e80)=""/160, 0xa0}, {&(0x7f0000000f40)=""/70, 0x46}, {&(0x7f0000001fc0)=""/31, 0x1f}, {&(0x7f0000002000)=""/113, 0x71}, {&(0x7f0000002080)=""/147, 0x93}], 0x8, &(0x7f00000021c0)=""/236, 0xec}, 0x7}, {{&(0x7f00000022c0)=@caif=@rfm, 0x80, &(0x7f00000027c0)=[{&(0x7f0000002340)=""/206, 0xce}, {&(0x7f0000002440)=""/252, 0xfc}, {&(0x7f0000002540)=""/153, 0x99}, {&(0x7f0000002600)=""/1, 0x1}, {&(0x7f0000002640)=""/23, 0x17}, {&(0x7f0000002680)=""/2, 0x2}, {&(0x7f00000026c0)}, {&(0x7f0000002700)=""/155, 0x9b}], 0x8, &(0x7f0000002840)=""/31, 0x1f}, 0xc}, {{&(0x7f0000002880)=@xdp, 0x80, &(0x7f0000002900)}, 0x3}, {{&(0x7f0000002940)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, 0x80, &(0x7f0000002d40)=[{&(0x7f00000029c0)=""/180, 0xb4}, {&(0x7f0000002a80)=""/98, 0x62}, {&(0x7f0000002b00)=""/221, 0xdd}, {&(0x7f00000000c0)=""/43, 0x2b}, {&(0x7f0000002c40)=""/54, 0x36}, {&(0x7f0000002c80)=""/48, 0x30}, {&(0x7f0000002cc0)=""/70, 0x46}], 0x7, &(0x7f0000002dc0)=""/5, 0x5}, 0x3}, {{&(0x7f0000002e00)=@sco={0x1f, @fixed}, 0x80, &(0x7f0000003380)=[{&(0x7f0000002e80)=""/211, 0xd3}, {&(0x7f0000002f80)=""/181, 0xb5}, {&(0x7f0000003040)=""/62, 0x3e}, {&(0x7f00000030c0)=""/199, 0xc7}, {&(0x7f00000031c0)=""/7, 0x7}, {&(0x7f0000003200)=""/28, 0x1c}, {&(0x7f0000003240)=""/48, 0x30}, {&(0x7f0000003280)=""/196, 0xc4}], 0x8, &(0x7f0000003400)=""/18, 0x12}, 0x7}], 0x6, 0x10000, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
r7 = openat$cgroup_devices(r6, &(0x7f0000000080)='devices.allow\x00', 0x2, 0x0)
write$cgroup_devices(r7, &(0x7f0000000380)=ANY=[@ANYBLOB='b *:* r\n)'], 0xa)
sendto(r5, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r5, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400})

0s ago: executing program 2 (id=6345):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=@newsa={0x104, 0x10, 0x7, 0x0, 0x0, {{@in6=@mcast2, @in=@empty, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x0, 0x0, 0x2}, {0x3, 0x200000, 0x7}, {0x40000, 0x0, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in6=@remote}]}, 0x104}}, 0x0)
r1 = socket(0x10, 0x3, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff)
ioctl$NILFS_IOCTL_DELETE_CHECKPOINT(r0, 0x40086e81, &(0x7f00000002c0)=0xa)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_REQ_SET_REG(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)={0x1c, r2, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040803}, 0x4000010)
mmap(&(0x7f0000c61000/0x4000)=nil, 0x4000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0)
r4 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f0000000140)={&(0x7f0000000000)=""/64, 0x1128000, 0x1000, 0x4}, 0x20)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'macvtap0\x00', <r5=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000001c00010029bd7000ffdbdf2507000000", @ANYRES32=r5, @ANYBLOB="80007f0a0a0002"], 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x4040004)
sendmmsg(r1, &(0x7f0000000000), 0x400000000000235, 0x0)
ioctl$BTRFS_IOC_SEND(0xffffffffffffffff, 0x40489426, &(0x7f0000000240)={{r1}, 0x1, &(0x7f0000000200)=[0x3]})
connect$l2tp(r1, &(0x7f0000000000)={0x2, 0x0, @rand_addr=0x64010101, 0xa0}, 0x10)
sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[@ANYBLOB="040100001a"], 0x104}}, 0x0)

kernel console output (not intermixed with test programs):

gistering): Released all slaves
[  234.342168][T15772] netlink: 'syz.1.3353': attribute type 2 has an invalid length.
[  234.353796][T15773] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  234.447805][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  235.434691][T15813] bond32: option xmit_hash_policy: invalid value (10)
[  235.439433][T15813] bond32 (unregistering): Released all slaves
[  235.487791][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  235.843786][T15865] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  235.860842][T15865] veth7: entered promiscuous mode
[  236.053670][T15881] IPVS: Unknown mcast interface: vcan0
[  236.135690][T15889] bond32 (unregistering): Released all slaves
[  236.192470][T15893] syzkaller0: entered promiscuous mode
[  236.194463][T15893] syzkaller0: entered allmulticast mode
[  236.525694][T15895] erspan0: left allmulticast mode
[  236.527798][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  236.647496][ T7265] syz0: Port: 1 Link DOWN
[  236.647778][ T5648] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  236.652957][ T5648] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  236.658043][ T5648] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  236.663688][ T5648] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  236.666888][ T5648] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  236.672788][ T5648] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  236.676899][ T5648] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  236.681505][ T5648] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  236.771135][T15907] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  236.773783][T15907] syzkaller0: entered promiscuous mode
[  236.775549][T15907] syzkaller0: entered allmulticast mode
[  236.795170][T15907] tipc: Resetting bearer <eth:syzkaller0>
[  236.818817][T15907] tipc: Resetting bearer <eth:syzkaller0>
[  236.839741][T15907] tipc: Disabling bearer <eth:syzkaller0>
[  236.857363][T15915] __nla_validate_parse: 87 callbacks suppressed
[  236.857381][T15915] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3396'.
[  236.898940][T15917] bond0: option arp_validate: invalid value (55553)
[  236.899203][   T13] bond0: (slave bond_slave_0): interface is now down
[  236.905756][   T13] bond0: (slave bond_slave_1): interface is now down
[  236.914315][   T13] bond0: now running without any active interface!
[  236.916969][T15919] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3397'.
[  236.996251][T15928] netlink: 'syz.2.3401': attribute type 10 has an invalid length.
[  236.999352][T15928] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3401'.
[  237.002448][T15931] netlink: 'syz.2.3401': attribute type 10 has an invalid length.
[  237.005087][T15931] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3401'.
[  237.165440][T15940] netlink: 'syz.1.3404': attribute type 10 has an invalid length.
[  237.288001][T15948] bond16 (unregistering): Released all slaves
[  237.319696][T15950] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3408'.
[  237.414169][T15952] pimreg: left allmulticast mode
[  237.416450][T15952] dvmrp8: left allmulticast mode
[  237.466961][T15955] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3409'.
[  237.524034][T15957] syzkaller0: entered promiscuous mode
[  237.526383][T15957] syzkaller0: entered allmulticast mode
[  237.559938][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  237.685114][T15961] netlink: 'syz.2.3412': attribute type 13 has an invalid length.
[  237.820963][T15961] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3412'.
[  238.013154][T15979] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3420'.
[  238.016630][T15979] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3420'.
[  238.020367][T15979] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3420'.
[  238.173031][T15982] ip6tnl0: Caught tx_queue_len zero misconfig
[  238.182889][T15982] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  238.213511][T16002] netlink: 'syz.1.3428': attribute type 2 has an invalid length.
[  238.216093][T16002] netlink: 'syz.1.3428': attribute type 11 has an invalid length.
[  238.386445][T16004] ip6_vti0 speed is unknown, defaulting to 1000
[  238.583075][T16004] lo speed is unknown, defaulting to 1000
[  238.597804][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  239.103315][T16058] netlink: 'syz.0.3437': attribute type 1 has an invalid length.
[  239.264487][T16073] netlink: 'syz.1.3443': attribute type 21 has an invalid length.
[  239.271065][T16073] netlink: 'syz.1.3443': attribute type 6 has an invalid length.
[  239.327982][T16084] openvswitch: netlink: Unexpected mask (mask=200240, allowed=10048)
[  239.525106][T16110] netlink: zone id is out of range
[  239.532219][T16110] netlink: zone id is out of range
[  239.533967][T16110] netlink: zone id is out of range
[  239.535609][T16110] netlink: zone id is out of range
[  239.537252][T16110] netlink: zone id is out of range
[  239.544733][T16110] netlink: zone id is out of range
[  239.613069][T16122] bond17: (slave lo): Releasing backup interface
[  239.619556][T16122] bond17: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed
[  239.694390][T16137] syzkaller0: entered promiscuous mode
[  239.697924][T16137] syzkaller0: entered allmulticast mode
[  239.842776][T16146] bond37: invalid ARP target 0.0.0.0 specified for addition
[  239.845424][T16146] bond37: option arp_ip_target: invalid value (0)
[  239.849217][T16146] bond37 (unregistering): Released all slaves
[  239.961510][T16172] pim6reg1: entered promiscuous mode
[  239.963392][T16172] pim6reg1: entered allmulticast mode
[  240.117545][T16189] syzkaller0: entered promiscuous mode
[  240.122111][T16189] syzkaller0: entered allmulticast mode
[  240.186252][T16191] batadv_slave_0: entered promiscuous mode
[  240.191211][T16190] batadv_slave_0: left promiscuous mode
[  240.380078][T16202] ip6_vti0 speed is unknown, defaulting to 1000
[  240.505343][T16202] lo speed is unknown, defaulting to 1000
[  240.793728][T16241] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode
[  240.796280][T16241] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode
[  240.843088][T16248] bond0: option arp_validate: invalid value (55553)
[  240.885272][T16250] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1514) !
[  240.945386][T16252] bond16: option lacp_active: mode dependency failed, not supported in mode balance-rr(0)
[  240.955968][T16252] bond16 (unregistering): Released all slaves
[  241.052404][T16250] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  241.384827][T16267] ipip1: entered promiscuous mode
[  241.509519][T16289] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  241.736756][T16315] bond0: option arp_validate: invalid value (55553)
[  241.849520][T16327] xt_l2tp: missing protocol rule (udp|l2tpip)
[  242.015305][T16339] __nla_validate_parse: 36 callbacks suppressed
[  242.015324][T16339] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3519'.
[  242.061187][T16347] netlink: 80 bytes leftover after parsing attributes in process `syz.1.3522'.
[  242.095349][T16353] netlink: 456 bytes leftover after parsing attributes in process `syz.1.3524'.
[  242.227781][T16349] ip6_vti0 speed is unknown, defaulting to 1000
[  242.306654][T16349] lo speed is unknown, defaulting to 1000
[  242.324983][T16367] bond0: option arp_validate: invalid value (55553)
[  242.486912][T16378] netlink: 248 bytes leftover after parsing attributes in process `syz.2.3530'.
[  242.615408][T16387] netlink: 'syz.0.3535': attribute type 4 has an invalid length.
[  242.632913][T16387] netlink: 'syz.0.3535': attribute type 8 has an invalid length.
[  242.636414][T16387] netlink: 'syz.0.3535': attribute type 1 has an invalid length.
[  242.639479][T16387] netlink: 164 bytes leftover after parsing attributes in process `syz.0.3535'.
[  242.647927][T16387] NCSI netlink: No device for ifindex 0
[  242.757785][    C1] net_ratelimit: 400 callbacks suppressed
[  242.757798][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  242.794535][T16408] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3542'.
[  242.877392][T16418] netlink: 104 bytes leftover after parsing attributes in process `syz.0.3546'.
[  242.886663][T16418] veth0_macvtap: Caught tx_queue_len zero misconfig
[  242.958365][T16421] netlink: 'syz.2.3547': attribute type 1 has an invalid length.
[  242.964103][T16421] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3547'.
[  242.970071][T16420] netlink: 'syz.2.3547': attribute type 1 has an invalid length.
[  242.979821][T16420] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3547'.
[  243.058284][T16429] x_tables: unsorted entry at hook 3
[  243.072055][T16429] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3548'.
[  243.206957][T16447] netlink: 'syz.2.3554': attribute type 3 has an invalid length.
[  243.594074][T16498] openvswitch: netlink: Message has 243 unknown bytes.
[  243.608000][T16498] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  243.797499][T16510] bond31: (slave lo): Releasing backup interface
[  243.800368][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  243.805558][T16510] bond31: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed
[  243.811322][T16510] bond37: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  243.820186][T16510] bond37: (slave lo): Enslaving as an active interface with an up link
[  243.823392][T16510] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check.
[  243.835412][T16512] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check.
[  243.847482][T16510] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  243.851144][T16512] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  243.855011][T16510] team0: entered promiscuous mode
[  243.856740][T16510] geneve1: entered promiscuous mode
[  243.858875][T16510] bridge7: entered promiscuous mode
[  243.860776][T16510] bridge8: entered promiscuous mode
[  243.862745][T16510] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  243.918857][T16516] netlink: 'syz.0.3578': attribute type 1 has an invalid length.
[  243.942620][T16516] bond38: (slave bridge14): Enslaving as a backup interface with an up link
[  243.951071][T16516] macvlan4: entered promiscuous mode
[  243.953119][T16516] macvlan4: entered allmulticast mode
[  243.956313][T16516] bond38: entered promiscuous mode
[  243.958477][T16516] bridge14: entered promiscuous mode
[  243.961352][T16516] 8021q: adding VLAN 0 to HW filter on device macvlan4
[  243.964330][T16516] bond38: left promiscuous mode
[  243.966045][T16516] bridge14: left promiscuous mode
[  244.214558][T16536] bond0: option arp_validate: invalid value (55553)
[  244.296087][T16546] netlink: Unknown conntrack attr (0)
[  244.499487][T16572] dummy0: left allmulticast mode
[  244.684167][T16588] : Caught tx_queue_len zero misconfig
[  244.695100][T16604] netlink: 'syz.1.3607': attribute type 1 has an invalid length.
[  244.731887][T16604] 8021q: adding VLAN 0 to HW filter on device bond32
[  244.751139][T16604] bond32: (slave geneve4): making interface the new active one
[  244.754746][T16604] bond32: (slave geneve4): Enslaving as an active interface with an up link
[  244.763924][ T5664] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  244.772558][ T5664] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  244.783118][ T5664] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  244.794429][ T5664] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  244.837829][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  244.899039][T16620] IPVS: sh: FWM 3 0x00000003 - no destination available
[  244.934858][T16628] netlink: 'syz.2.3612': attribute type 1 has an invalid length.
[  244.998484][T16636] bond0: option arp_validate: invalid value (55553)
[  245.130891][T16650] mac80211_hwsim hwsim5 syzkaller0: left promiscuous mode
[  245.133271][T16650] mac80211_hwsim hwsim5 syzkaller0: left allmulticast mode
[  245.660615][T16693] pimreg: entered allmulticast mode
[  245.663269][T16693] pimreg: left allmulticast mode
[  246.520019][T16729] netlink: 'syz.1.3646': attribute type 12 has an invalid length.
[  246.555608][T16734] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode
[  246.559079][T16734] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode
[  246.702326][T16747] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  246.929364][T16765] IPVS: length: 15 != 8
[  247.101597][T16773] __nla_validate_parse: 32 callbacks suppressed
[  247.101614][T16773] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3660'.
[  247.279309][T16779] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3661'.
[  247.464847][T16786] netlink: 108 bytes leftover after parsing attributes in process `syz.1.3664'.
[  247.477982][T16786] netlink: 108 bytes leftover after parsing attributes in process `syz.1.3664'.
[  247.591853][T16794] tipc: Trying to set illegal importance in message
[  247.622709][T16782] ip6_vti0 speed is unknown, defaulting to 1000
[  247.843782][T16798] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3666'.
[  247.851134][T16782] lo speed is unknown, defaulting to 1000
[  247.950236][T16802] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3667'.
[  247.953899][T16802] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3667'.
[  247.967784][    C1] net_ratelimit: 76 callbacks suppressed
[  247.967797][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  248.345128][T16824] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3673'.
[  248.444417][T16829] IPv6: sit2: Disabled Multicast RS
[  248.569170][T16834] validate_nla: 2 callbacks suppressed
[  248.569191][T16834] netlink: 'syz.1.3677': attribute type 1 has an invalid length.
[  248.614703][T16834] bond33: entered promiscuous mode
[  248.617395][T16834] 8021q: adding VLAN 0 to HW filter on device bond33
[  248.637007][T16834] macvtap1: entered allmulticast mode
[  248.647202][T16834] bond33: (slave bridge13): making interface the new active one
[  248.650391][T16834] bridge13: entered promiscuous mode
[  248.653706][T16834] bond33: (slave bridge13): Enslaving as an active interface with an up link
[  248.745820][T16839] dummy0: mtu less than device minimum
[  248.817248][T16840] netlink: 14 bytes leftover after parsing attributes in process `syz.1.3679'.
[  249.007786][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  249.166742][T16847] syzkaller0: entered promiscuous mode
[  249.169925][T16847] syzkaller0: entered allmulticast mode
[  249.567828][ T5666] page_pool_release_retry() stalled pool shutdown: id 42, 1 inflight 60 sec
[  249.816691][T16863] bond39: Unable to set peer notification delay as MII monitoring is disabled
[  249.821421][T16863] bond39 (unregistering): Released all slaves
[  250.035265][T16885] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3691'.
[  250.073704][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  250.290853][T16904] macvtap0: entered promiscuous mode
[  250.363456][T16910] netlink: 'syz.1.3701': attribute type 27 has an invalid length.
[  250.366430][T16913] bond0: option arp_validate: invalid value (55553)
[  250.484221][T16925] syzkaller1: entered promiscuous mode
[  250.486352][T16925] syzkaller1: entered allmulticast mode
[  250.504374][T16927] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  250.598461][T16944] bond0: option arp_validate: invalid value (55553)
[  250.665774][T16947] syzkaller0: entered promiscuous mode
[  250.673569][T16947] syzkaller0: entered allmulticast mode
[  250.681417][T16949] syzkaller1: entered promiscuous mode
[  250.686155][T16949] syzkaller1: entered allmulticast mode
[  250.794009][T16957] netlink: 'syz.2.3719': attribute type 1 has an invalid length.
[  250.857905][T16961] netlink: 'syz.2.3719': attribute type 29 has an invalid length.
[  250.861418][T16961] netlink: 'syz.2.3719': attribute type 29 has an invalid length.
[  251.077972][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  251.131425][T16984] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  251.324079][T17014] syzkaller0: entered promiscuous mode
[  251.326044][T17014] syzkaller0: entered allmulticast mode
[  251.497023][T17029] openvswitch: netlink: Flow key attr not present in new flow.
[  252.121659][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  252.916573][T17044] __nla_validate_parse: 13 callbacks suppressed
[  252.916593][T17044] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3749'.
[  253.130392][T17054] dvmrp6: entered allmulticast mode
[  253.168364][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  253.218754][T17057] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check.
[  253.230904][T17054] xt_connbytes: Forcing CT accounting to be enabled
[  253.418794][T17061] bond0: option arp_validate: invalid value (55553)
[  253.828398][T17067] ip6_vti0 speed is unknown, defaulting to 1000
[  253.912529][T17067] lo speed is unknown, defaulting to 1000
[  254.197770][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  254.253786][T17082] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3759'.
[  254.295044][T17084] syzkaller1: left promiscuous mode
[  254.296933][T17084] syzkaller1: left allmulticast mode
[  254.370931][T17088] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3762'.
[  254.435901][T17088] 8021q: adding VLAN 0 to HW filter on device bond16
[  254.471688][T17099] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3764'.
[  254.474654][T17099] openvswitch: netlink: Flow key attr not present in new flow.
[  254.537385][T17106] dummy0: Caught tx_queue_len zero misconfig
[  254.545034][T17106] netlink: 148 bytes leftover after parsing attributes in process `syz.2.3767'.
[  254.646718][T17116] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.3772'.
[  254.666474][T17118] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3773'.
[  254.674774][T17118] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  254.705566][T17122] netlink: 'syz.2.3775': attribute type 13 has an invalid length.
[  254.708949][T17122] netlink: 'syz.2.3775': attribute type 17 has an invalid length.
[  254.771697][T17122] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check.
[  254.879556][T17141] netlink: 'syz.1.3781': attribute type 1 has an invalid length.
[  254.882213][T17141] netlink: 'syz.1.3781': attribute type 4 has an invalid length.
[  254.884767][T17141] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.3781'.
[  254.890173][T17141] netlink: 'syz.1.3781': attribute type 1 has an invalid length.
[  254.893375][T17141] netlink: 'syz.1.3781': attribute type 4 has an invalid length.
[  254.896128][T17143] xt_TCPMSS: Only works on TCP SYN packets
[  254.896349][T17141] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.3781'.
[  255.070230][T17165] bond12: (slave dummy0): Releasing backup interface
[  255.074725][T17165] dummy0: left allmulticast mode
[  255.094749][T17165] bridge_slave_0: left allmulticast mode
[  255.096717][T17165] bridge_slave_0: left promiscuous mode
[  255.100207][T17165] bridge0: port 1(bridge_slave_0) entered disabled state
[  255.105774][T17165] bridge_slave_1: left allmulticast mode
[  255.107999][T17165] bridge0: port 2(bridge_slave_1) entered disabled state
[  255.115764][T17165] bond0: (slave bond_slave_0): Releasing backup interface
[  255.120438][T17165] bond_slave_0: left allmulticast mode
[  255.126297][T17165] bond0: (slave bond_slave_1): Releasing backup interface
[  255.129964][T17165] bond_slave_1: left allmulticast mode
[  255.141818][T17165] team0: Port device team_slave_0 removed
[  255.147189][T17165] team0: Port device team_slave_1 removed
[  255.153685][T17165] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  255.156537][T17165] batman_adv: batadv0: Removing interface: batadv_slave_0
[  255.162592][T17165] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  255.183510][T17170] ip6gre2: entered allmulticast mode
[  255.190024][T17170] team0: Refused to change device type
[  255.247744][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  255.379153][T17176] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3794'.
[  255.403985][T17176] bond17 (unregistering): Released all slaves
[  255.599456][T17187] bond0: entered promiscuous mode
[  255.602283][T17187] batadv0: entered promiscuous mode
[  255.605307][T17187] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network
[  255.611612][T17187] 8021q: adding VLAN 0 to HW filter on device hsr1
[  255.617035][T17187] bond0: left promiscuous mode
[  255.620185][T17187] batadv0: left promiscuous mode
[  256.002885][T17208] netlink: 'syz.1.3803': attribute type 1 has an invalid length.
[  256.002926][T17210] netlink: 'syz.1.3803': attribute type 1 has an invalid length.
[  256.015950][T17208] netlink: 'syz.1.3803': attribute type 2 has an invalid length.
[  256.018556][T17210] netlink: 'syz.1.3803': attribute type 2 has an invalid length.
[  256.028723][T17196] openvswitch: netlink: Flow key attr not present in new flow.
[  256.235331][T17211] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  256.287764][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  256.467226][   T33] audit: type=1804 audit(1778596463.545:5): pid=17267 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.3815" name="/newroot/1234/cgroup.controllers" dev="tmpfs" ino=6304 res=1 errno=0
[  256.470630][T17257] bond17: (slave vxcan5): The slave device specified does not support setting the MAC address
[  256.487988][   T33] audit: type=1800 audit(1778596463.545:6): pid=17267 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.3815" name="cgroup.controllers" dev="tmpfs" ino=6304 res=0 errno=0
[  256.491268][T17257] bond17: (slave vxcan5): Error -95 calling set_mac_address
[  256.845366][T17305] geneve0: entered promiscuous mode
[  256.876860][T17305] smc: removing net device wlan0 with user defined pnetid SYZ0
[  257.030485][T17319] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  257.928302][T17398] __nla_validate_parse: 10 callbacks suppressed
[  257.928315][T17398] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3854'.
[  258.152756][   T13] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  258.159605][   T13] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  258.168271][   T13] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  258.171383][   T13] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  258.320688][T17402] ip6_vti0 speed is unknown, defaulting to 1000
[  258.333579][T17411] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3858'.
[  258.367816][    C1] net_ratelimit: 1 callbacks suppressed
[  258.367836][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  258.412768][T17415] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3860'.
[  258.429743][T17402] lo speed is unknown, defaulting to 1000
[  258.837009][T17454] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3874'.
[  258.879243][T17458] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3875'.
[  259.094917][T17478] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3876'.
[  259.407883][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  259.450054][T17497] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3878'.
[  259.453232][T17497] netlink: 43 bytes leftover after parsing attributes in process `syz.1.3878'.
[  259.456155][T17497] netlink: 43 bytes leftover after parsing attributes in process `syz.1.3878'.
[  259.547377][T17511] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3881'.
[  259.695467][T17523] tc_dump_action: action bad kind
[  259.704003][T17523] xt_hashlimit: size too large, truncated to 1048576
[  259.841676][T17529] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  259.845228][T17529] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  259.893837][T17531] pim6reg0: tun_chr_ioctl cmd 1074025675
[  259.899988][T17534] validate_nla: 9 callbacks suppressed
[  259.899999][T17534] netlink: 'syz.2.3886': attribute type 39 has an invalid length.
[  259.907829][T17531] pim6reg0: persist disabled
[  259.943824][T17534] hsr_slave_0 (unregistering): left promiscuous mode
[  260.194698][T17552] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  260.437866][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  260.769199][T17575] 8021q: adding VLAN 0 to HW filter on device bond34
[  260.784535][T17578] netlink: 'syz.2.3900': attribute type 3 has an invalid length.
[  261.213641][T17611] bond35: option coupled_control: mode dependency failed, not supported in mode balance-rr(0)
[  261.219598][T17611] bond35 (unregistering): Released all slaves
[  261.240051][T17613] hma(kX: entered promiscuous mode
[  261.257915][T17615] tap0: tun_chr_ioctl cmd 1075343107
[  261.260378][T17615] tap0: tun_chr_ioctl cmd 1074025681
[  261.415480][T17625] netlink: 'syz.0.3917': attribute type 1 has an invalid length.
[  261.487830][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  261.736491][T17652] x_tables: arp_tables: NFQUEUE target: not valid for this family
[  261.804315][T17655] set match dimension is over the limit!
[  261.810966][T17655] A link change request failed with some changes committed already. Interface vxcan0 may have been left with an inconsistent configuration, please check.
[  262.527791][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  262.724126][T17736] openvswitch: netlink: Key 0 has unexpected len 4 expected 0
[  262.729149][T17736] netlink: 'syz.1.3955': attribute type 13 has an invalid length.
[  262.914169][T17756] mac80211_hwsim hwsim2 syzkaller0: Caught tx_queue_len zero misconfig
[  263.076675][T17767] __nla_validate_parse: 20 callbacks suppressed
[  263.076710][T17767] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3967'.
[  263.082430][T17767] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3967'.
[  263.085515][T17767] netlink: 'syz.1.3967': attribute type 4 has an invalid length.
[  263.167411][T17773] netlink: 88 bytes leftover after parsing attributes in process `syz.2.3970'.
[  263.180926][T17778] veth0_virt_wifi: Caught tx_queue_len zero misconfig
[  263.210493][T17780] lo: Caught tx_queue_len zero misconfig
[  263.266706][T17785] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3974'.
[  263.567729][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  263.744527][T17801] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3978'.
[  264.318827][T17824] netlink: 'syz.2.3986': attribute type 1 has an invalid length.
[  264.336762][T17824] 8021q: adding VLAN 0 to HW filter on device bond18
[  264.555548][T17833] ip6tnl0: Caught tx_queue_len zero misconfig
[  264.567977][T17833] sch_tbf: burst 3 is lower than device ip6tnl0 mtu (1280) !
[  264.597794][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  264.729522][T17848] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3992'.
[  264.739947][T17852] 8021q: VLANs not supported on lo
[  264.780646][T17854] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3995'.
[  264.913071][T17862] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3998'.
[  265.006491][T17868] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1514) !
[  265.010763][T17868] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4001'.
[  265.126660][T17879] netlink: 'syz.0.4004': attribute type 1 has an invalid length.
[  265.146797][T17879] bond39: entered promiscuous mode
[  265.152314][T17879] 8021q: adding VLAN 0 to HW filter on device bond39
[  265.163136][T17879] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4004'.
[  265.491737][T17899] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  265.637907][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  265.772625][T17924] netlink: 'syz.2.4018': attribute type 11 has an invalid length.
[  266.502539][T17939] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  266.687923][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  266.781323][T17950] netlink: 'syz.2.4025': attribute type 4 has an invalid length.
[  266.792778][T17947] netlink: 'syz.2.4025': attribute type 4 has an invalid length.
[  266.958078][T17967] netlink: 'syz.1.4031': attribute type 1 has an invalid length.
[  267.159877][T17967] ip6_vti0 speed is unknown, defaulting to 1000
[  267.309871][T17967] lo speed is unknown, defaulting to 1000
[  267.606309][T17993] netlink: 'syz.0.4036': attribute type 1 has an invalid length.
[  267.717819][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  267.796837][T18017] sit0: Caught tx_queue_len zero misconfig
[  267.844330][T18023] xt_l2tp: invalid flags combination: 0
[  268.161186][T18056] __nla_validate_parse: 6 callbacks suppressed
[  268.161199][T18056] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4054'.
[  268.184455][T18056] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4054'.
[  268.193069][T18056] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4054'.
[  268.204749][T18056] netlink: 'syz.2.4054': attribute type 5 has an invalid length.
[  268.294630][T18069] netlink: 'syz.1.4060': attribute type 1 has an invalid length.
[  268.305355][T18068] netlink: 'syz.2.4059': attribute type 1 has an invalid length.
[  268.319618][T18068] netlink: 248 bytes leftover after parsing attributes in process `syz.2.4059'.
[  268.545228][T18090] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4065'.
[  268.590887][T18091] team0: left promiscuous mode
[  268.593071][T18091] geneve1: left promiscuous mode
[  268.601225][T18091] bridge7: left promiscuous mode
[  268.608131][T18091] bridge8: left promiscuous mode
[  268.613410][T18091] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  268.652807][T18095] openvswitch: netlink: IPv4 tunnel dst address is zero
[  268.661895][T18095] netlink: 9 bytes leftover after parsing attributes in process `syz.1.4067'.
[  268.665755][T18095] netlink: 9 bytes leftover after parsing attributes in process `syz.1.4067'.
[  268.679741][T18095] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4067'.
[  268.767865][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  268.793188][T18107] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4071'.
[  268.852264][T18111] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4072'.
[  269.398860][T18139] netlink: 'syz.2.4084': attribute type 153 has an invalid length.
[  269.807773][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  269.849521][T18164] ip6_vti0 speed is unknown, defaulting to 1000
[  269.867169][T18195] ip6t_REJECT: ECHOREPLY is not supported
[  270.002732][T18164] lo speed is unknown, defaulting to 1000
[  270.637020][T18241] ip6t_srh: unknown srh invflags 4000
[  270.663758][T18243] nftables ruleset with unbound set
[  270.803006][T18252] netlink: 'syz.0.4114': attribute type 39 has an invalid length.
[  270.847725][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  270.986914][T18272] netlink: 'syz.1.4123': attribute type 30 has an invalid length.
[  271.024916][T18272] bond36: option arp_missed_max: mode dependency failed, not supported in mode 802.3ad(4)
[  271.034491][T18272] bond36 (unregistering): Released all slaves
[  271.535041][T18296] syzkaller1: entered promiscuous mode
[  271.541062][T18296] syzkaller1: entered allmulticast mode
[  271.551013][T18300] bond0: option arp_validate: invalid value (55553)
[  271.887892][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  272.917962][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  273.967928][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  275.007876][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  276.047808][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  277.078063][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  278.127941][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  279.157879][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  280.198253][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  281.237813][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  282.277833][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  282.282092][T18308] __nla_validate_parse: 10 callbacks suppressed
[  282.282108][T18308] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.4135'.
[  282.296548][T18309] pim6reg: entered allmulticast mode
[  282.658622][T18345] bridge0: port 2(vlan7) entered blocking state
[  282.661034][T18345] bridge0: port 2(vlan7) entered disabled state
[  282.663593][T18345] vlan7: entered allmulticast mode
[  282.665401][T18345] bridge0: entered allmulticast mode
[  282.670851][T18345] vlan7: left allmulticast mode
[  282.672593][T18345] bridge0: left allmulticast mode
[  282.680828][T18347] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4150'.
[  282.735762][T18351] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4152'.
[  282.745516][T18351] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4152'.
[  282.753751][T18351] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4152'.
[  282.762615][T18353] IPVS: Error connecting to the multicast addr
[  282.789519][T18356] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4155'.
[  282.801588][T18358] netlink: 228 bytes leftover after parsing attributes in process `syz.0.4155'.
[  282.810473][T18359] netlink: 228 bytes leftover after parsing attributes in process `syz.0.4155'.
[  282.900689][T18370] netlink: 14 bytes leftover after parsing attributes in process `syz.0.4159'.
[  282.905307][T18370] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4159'.
[  282.955125][T18376] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  282.973788][T18378] bond0: option arp_validate: invalid value (55553)
[  282.979596][T18378] openvswitch: netlink: IP tunnel TTL not specified.
[  283.208723][T18389] bond40: entered promiscuous mode
[  283.210864][T18389] 8021q: adding VLAN 0 to HW filter on device bond40
[  283.317895][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  283.345987][T18396] batman_adv: batadv0: Adding interface: vlan7
[  283.348453][T18396] batman_adv: batadv0: Not using interface vlan7 (retrying later): interface not active
[  283.486372][T18408] syzkaller1: entered promiscuous mode
[  283.488468][T18408] syzkaller1: entered allmulticast mode
[  283.543733][T18418] tunl0: Caught tx_queue_len zero misconfig
[  283.657284][T18415] xt_recent: Unsupported userspace flags (000000b1)
[  283.660418][T18427] block nbd1: Unsupported socket: should be TCP or UNIX.
[  283.760785][T18431] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  284.057874][   T33] audit: type=1800 audit(1778596491.135:7): pid=18479 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.4194" name="memory.events" dev="tmpfs" ino=7768 res=0 errno=0
[  284.073035][   T33] audit: type=1800 audit(1778596491.145:8): pid=18480 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.4194" name="memory.events" dev="tmpfs" ino=7768 res=0 errno=0
[  284.180678][T18494] veth1_to_team: Caught tx_queue_len zero misconfig
[  284.263543][T18500] xt_hashlimit: max too large, truncated to 1048576
[  284.357889][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  285.167980][T18583] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  285.187082][T18583] 8021q: adding VLAN 0 to HW filter on device bond41
[  285.200422][T18583] netlink: 'syz.0.4225': attribute type 2 has an invalid length.
[  285.339472][T18587] ip6_vti0 speed is unknown, defaulting to 1000
[  285.360715][T18601] netlink: 'syz.2.4230': attribute type 4 has an invalid length.
[  285.385049][T18603] netlink: 'syz.0.4229': attribute type 3 has an invalid length.
[  285.407882][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  285.473654][T18587] lo speed is unknown, defaulting to 1000
[  285.493243][T18614] pim6reg: left allmulticast mode
[  285.856760][T18653] netlink: 'syz.0.4246': attribute type 28 has an invalid length.
[  285.884916][T18653] openvswitch: netlink: Flow actions attr not present in new flow.
[  286.103661][T18672] netlink: 'syz.1.4255': attribute type 2 has an invalid length.
[  286.110623][T18672] netlink: 'syz.1.4255': attribute type 9 has an invalid length.
[  286.356577][T18696] netlink: 'syz.1.4260': attribute type 83 has an invalid length.
[  286.437807][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  286.712251][T18728] openvswitch: netlink: Flow key attr not present in new flow.
[  286.716027][T18728] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter'
[  286.936895][T18735] netlink: 'syz.0.4272': attribute type 5 has an invalid length.
[  287.344952][T18752] __nla_validate_parse: 32 callbacks suppressed
[  287.344963][T18752] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4275'.
[  287.477932][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  287.553179][T18772] syzkaller0: entered promiscuous mode
[  287.555044][T18772] syzkaller0: entered allmulticast mode
[  287.561439][T18772] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4278'.
[  287.564380][T18772] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4278'.
[  287.569746][T18772] 0: reclassify loop, rule prio 0, protocol 800
[  287.660800][T18774] x_tables: duplicate underflow at hook 2
[  287.863894][T18780] netlink: 'syz.2.4281': attribute type 6 has an invalid length.
[  287.896016][T18785] bond0: option arp_validate: invalid value (55553)
[  288.081104][T18802] netem: change failed
[  288.132224][T18811] bond0: option arp_validate: invalid value (55553)
[  288.168553][T18815] netlink: 830 bytes leftover after parsing attributes in process `syz.1.4292'.
[  288.231871][T18824] netlink: 27 bytes leftover after parsing attributes in process `syz.0.4297'.
[  288.286579][T18827] bond0: option arp_validate: invalid value (55553)
[  288.348637][T18836] ip6t_REJECT: ECHOREPLY is not supported
[  288.351830][T18836] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4302'.
[  288.441687][T18842] hm3): entered promiscuous mode
[  288.447356][T18844] sctp: [Deprecated]: syz.0.4304 (pid 18844) Use of int in max_burst socket option.
[  288.447356][T18844] Use struct sctp_assoc_value instead
[  288.517810][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  288.562373][T18860] bond0: option arp_validate: invalid value (55553)
[  288.603406][T18863] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4309'.
[  288.640279][T18863] bond42 (unregistering): Released all slaves
[  288.662241][T18872] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4309'.
[  288.667967][T18874] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4311'.
[  288.731710][T18881] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  288.741596][T18881] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4314'.
[  288.768380][T18884] bond0: option arp_validate: invalid value (55553)
[  288.774535][T18881] netlink: 'syz.1.4314': attribute type 29 has an invalid length.
[  288.980986][T18908] bond0: option arp_validate: invalid value (55553)
[  289.012611][T18909] syzkaller0: entered promiscuous mode
[  289.014959][T18909] syzkaller0: entered allmulticast mode
[  289.185053][T18920] syzkaller1: entered promiscuous mode
[  289.186871][T18920] syzkaller1: entered allmulticast mode
[  289.568079][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  290.031480][T18968] openvswitch: netlink: Unknown nsh attribute 0
[  290.082933][T18978] mac80211_hwsim hwsim5 syzkaller0: left promiscuous mode
[  290.085986][T18978] mac80211_hwsim hwsim5 syzkaller0: left allmulticast mode
[  290.198055][T18991] openvswitch: netlink: VXLAN extension 307 out of range max 1
[  290.289081][T19002] xt_CT: No such helper "netbios-ns"
[  290.607830][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  290.751167][T19055] IPVS: sh: FWM 3 0x00000003 - no destination available
[  290.753961][T19055] IPVS: sh: FWM 3 0x00000003 - no destination available
[  290.812542][T19059] bond36: option primary: mode dependency failed, not supported in mode balance-rr(0)
[  290.818403][T19059] bond36 (unregistering): Released all slaves
[  291.630934][T19079] bond0: option arp_validate: invalid value (55553)
[  291.647824][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  292.029483][T19104] openvswitch: netlink: nsh attribute has 4 unknown bytes.
[  292.072383][T19110] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  292.075467][T19110] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  292.173343][T19120] bond36: option packets_per_slave: invalid value (1048582)
[  292.175890][T19120] bond36: option packets_per_slave: allowed values 0 - 65535
[  292.180266][T19120] bond36 (unregistering): Released all slaves
[  292.191477][T19118] syzkaller0: entered promiscuous mode
[  292.193504][T19118] syzkaller0: entered allmulticast mode
[  292.199145][T19118] netlink: 'syz.2.4388': attribute type 3 has an invalid length.
[  292.382438][T19139] netlink: 'syz.2.4395': attribute type 1 has an invalid length.
[  292.390023][T19140] gretap3: entered allmulticast mode
[  292.524985][T19150] 8021q: adding VLAN 0 to HW filter on device ipvlan0
[  292.677872][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  292.804568][T19161] veth0_macvtap: entered allmulticast mode
[  292.972962][T19174] syzkaller1: entered promiscuous mode
[  292.974960][T19174] syzkaller1: entered allmulticast mode
[  293.226475][T19189] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  293.245259][T19189] __nla_validate_parse: 23 callbacks suppressed
[  293.245276][T19189] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4408'.
[  293.367898][T19210] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4411'.
[  293.417606][T19206] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode
[  293.420488][T19206] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode
[  293.547559][T19224] xt_hashlimit: size too large, truncated to 1048576
[  293.551828][T19224] xt_hashlimit: max too large, truncated to 1048576
[  293.594646][T19224] syzkaller1: left promiscuous mode
[  293.597088][T19224] syzkaller1: left allmulticast mode
[  293.616771][T19228] bond43: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0)
[  293.621878][T19228] bond43 (unregistering): Released all slaves
[  293.721040][T19235] netlink: 4768 bytes leftover after parsing attributes in process `syz.1.4419'.
[  293.724552][T19235] netlink: 'syz.1.4419': attribute type 1 has an invalid length.
[  293.743006][T19235] 8021q: adding VLAN 0 to HW filter on device bond36
[  293.757763][T19235] bond36: (slave geneve5): making interface the new active one
[  293.761555][T19235] bond36: (slave geneve5): Enslaving as an active interface with an up link
[  293.793830][T19238] netlink: 'syz.1.4420': attribute type 8 has an invalid length.
[  293.796421][T19238] netlink: 'syz.1.4420': attribute type 4 has an invalid length.
[  293.932827][T19249] netlink: 'syz.1.4425': attribute type 28 has an invalid length.
[  294.018611][T19253] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4426'.
[  294.562967][T19274] ip6_vti0 speed is unknown, defaulting to 1000
[  294.645190][T19274] lo speed is unknown, defaulting to 1000
[  294.757830][    C1] net_ratelimit: 1 callbacks suppressed
[  294.757916][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  294.834597][T19282] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4434'.
[  294.844392][T19282] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4434'.
[  295.051405][T19290] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4438'.
[  295.373875][T19306] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  295.807831][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  295.966286][T19329] bond0: option arp_validate: invalid value (55553)
[  296.047203][T19335] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4452'.
[  296.169987][T19346] bond0: option arp_validate: invalid value (55553)
[  296.208062][T19348] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4458'.
[  296.209606][T19349] netlink: 228 bytes leftover after parsing attributes in process `syz.1.4456'.
[  296.304922][T19343] ip6_vti0 speed is unknown, defaulting to 1000
[  296.396032][T19343] lo speed is unknown, defaulting to 1000
[  296.656614][T19374] pim6reg: entered allmulticast mode
[  296.697029][T19383] netlink: 'syz.0.4461': attribute type 3 has an invalid length.
[  296.847886][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  296.921429][T19393] netlink: 'syz.0.4463': attribute type 1 has an invalid length.
[  297.088892][T19415] openvswitch: netlink: IPv4 frag type 127 is out of range max 2
[  297.162775][T19422] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  297.166970][T19422] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  297.210838][T19428] bond0: Caught tx_queue_len zero misconfig
[  297.295632][T19435] netlink: 'syz.2.4478': attribute type 2 has an invalid length.
[  297.299186][T19435] netlink: 'syz.2.4478': attribute type 1 has an invalid length.
[  297.301840][T19435] netlink: 'syz.2.4478': attribute type 1 has an invalid length.
[  297.370210][T19440] netlink: 'syz.2.4480': attribute type 61 has an invalid length.
[  297.372852][T19440] netlink: 'syz.2.4480': attribute type 62 has an invalid length.
[  297.539042][T19447] sctp: [Deprecated]: syz.1.4482 (pid 19447) Use of int in max_burst socket option.
[  297.539042][T19447] Use struct sctp_assoc_value instead
[  297.678210][T19464] IPVS: set_ctl: invalid protocol: 94 172.20.20.187:20001
[  297.741356][T19467] smc: adding net device wlan0 with user defined pnetid SYZ0
[  297.887828][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  298.570955][T19524] ip6_vti0 speed is unknown, defaulting to 1000
[  298.594729][T19527] xt_hashlimit: max too large, truncated to 1048576
[  298.675767][T19524] lo speed is unknown, defaulting to 1000
[  298.779268][T19535] mac80211_hwsim hwsim59 wlan0: entered promiscuous mode
[  298.807807][T19535] netlink: 'syz.2.4507': attribute type 1 has an invalid length.
[  298.814807][T19535] netlink: 'syz.2.4507': attribute type 1 has an invalid length.
[  298.819836][T19535] __nla_validate_parse: 11 callbacks suppressed
[  298.819850][T19535] netlink: 264 bytes leftover after parsing attributes in process `syz.2.4507'.
[  298.826146][T19535] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4507'.
[  298.832509][T19535] netlink: 'syz.2.4507': attribute type 1 has an invalid length.
[  298.840337][T19535] netlink: 'syz.2.4507': attribute type 1 has an invalid length.
[  298.849620][T19535] netlink: 264 bytes leftover after parsing attributes in process `syz.2.4507'.
[  298.858115][T19535] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4507'.
[  298.917973][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  298.941233][T19546] openvswitch: netlink: IP tunnel dst address not specified
[  299.039337][T19556] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4512'.
[  299.075844][   T33] audit: type=1804 audit(1778596506.155:9): pid=19555 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.4513" name="/newroot/1476/cgroup.controllers" dev="tmpfs" ino=7540 res=1 errno=0
[  299.108273][   T33] audit: type=1800 audit(1778596506.155:10): pid=19555 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.4513" name="cgroup.controllers" dev="tmpfs" ino=7540 res=0 errno=0
[  299.166568][T19558] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4514'.
[  299.223172][T19562] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4514'.
[  299.233247][T19561] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4515'.
[  299.289525][T19558] team1: entered promiscuous mode
[  299.298316][T19558] team1: entered allmulticast mode
[  299.304335][T19558] 8021q: adding VLAN 0 to HW filter on device team1
[  299.322489][T19562] team2 (uninitialized): Failed to send options change via netlink (err -105)
[  299.363037][T19562] team2: entered promiscuous mode
[  299.365087][T19562] team2: entered allmulticast mode
[  299.368958][T19562] 8021q: adding VLAN 0 to HW filter on device team2
[  299.429667][T19573] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4518'.
[  299.433487][T19573] syz_tun: entered allmulticast mode
[  299.497966][T19577] SET target dimension over the limit!
[  299.530892][T19579] netlink: 'syz.1.4521': attribute type 1 has an invalid length.
[  299.545059][T19579] 8021q: adding VLAN 0 to HW filter on device bond37
[  299.560822][T19579] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4521'.
[  299.614203][T19579] bond37: (slave batadv1): Opening slave failed
[  299.772265][T19585] mac80211_hwsim hwsim2 syzkaller0: left promiscuous mode
[  299.774799][T19585] mac80211_hwsim hwsim2 syzkaller0: left allmulticast mode
[  299.911891][T19594] netem: change failed
[  299.957795][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  300.022987][T19605] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  300.254900][T19628] 8021q: VLANs not supported on nicvf0
[  300.404118][T19645] nbd: must specify an index to disconnect
[  300.408619][T19645] block nbd0: NBD_DISCONNECT
[  300.410243][T19645] block nbd0: Send disconnect failed -32
[  300.412583][T19645] block nbd0: Send disconnect failed -32
[  300.416862][T19645] block nbd0: shutting down sockets
[  300.449285][T19645] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1514) !
[  301.007851][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  302.037903][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  303.087791][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  304.117833][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  305.168774][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  306.197801][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  307.247952][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  308.277886][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  309.317911][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  310.357917][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  311.397958][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  311.427036][T19660] __nla_validate_parse: 6 callbacks suppressed
[  311.427047][T19660] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4551'.
[  311.521790][T19678] netlink: 4124 bytes leftover after parsing attributes in process `syz.1.4558'.
[  311.597492][T19684] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4560'.
[  311.603961][T19686] validate_nla: 3 callbacks suppressed
[  311.603977][T19686] netlink: 'syz.0.4562': attribute type 1 has an invalid length.
[  312.035962][T19718] netlink: 'syz.2.4575': attribute type 1 has an invalid length.
[  312.045442][T19720] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4576'.
[  312.048703][T19720] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4576'.
[  312.052089][T19720] netlink: 'syz.1.4576': attribute type 1 has an invalid length.
[  312.054649][T19720] nbd: illegal input index 871591272
[  312.075459][T19718] gretap3: entered allmulticast mode
[  312.085340][T19718] bond20: (slave gretap3): making interface the new active one
[  312.092940][T19718] bond20: (slave gretap3): Enslaving as an active interface with an up link
[  312.116067][T19729] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4578'.
[  312.122997][T19729] netlink: 'syz.1.4578': attribute type 1 has an invalid length.
[  312.158464][T19729] gretap2: entered allmulticast mode
[  312.162453][T19729] bond38: (slave gretap2): making interface the new active one
[  312.165598][T19729] bond38: (slave gretap2): Enslaving as an active interface with an up link
[  312.169933][T19733] ip6t_REJECT: TCP_RESET illegal for non-tcp
[  312.241108][T19738] netlink: 'syz.0.4579': attribute type 3 has an invalid length.
[  312.437855][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  312.503139][T19756] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4586'.
[  312.633996][T19768] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4589'.
[  312.637442][T19768] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4589'.
[  312.643820][T19763] netlink: 76 bytes leftover after parsing attributes in process `syz.2.4588'.
[  312.676466][T19773] netlink: 'syz.2.4591': attribute type 1 has an invalid length.
[  312.679463][T19773] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  312.892844][T19788] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1500) !
[  313.094746][   T13] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  313.099708][   T13] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  313.103361][   T13] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  313.106527][   T13] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  313.384618][T19831] netlink: 'syz.0.4607': attribute type 1 has an invalid length.
[  313.477800][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  313.529913][T19847] netlink: 'syz.2.4612': attribute type 21 has an invalid length.
[  313.533081][T19847] netlink: 'syz.2.4612': attribute type 4 has an invalid length.
[  313.705909][T19856] syzkaller0: entered promiscuous mode
[  313.708412][T19856] syzkaller0: entered allmulticast mode
[  313.713548][T19856] tc action pedit 'at' offset -2147483647 out of bounds
[  313.717354][T19856] tc action pedit 'at' offset -2147483647 out of bounds
[  313.719799][T19856] tc action pedit 'at' offset -2147483647 out of bounds
[  313.722212][T19856] tc action pedit 'at' offset -2147483647 out of bounds
[  313.724521][T19856] tc action pedit 'at' offset -2147483647 out of bounds
[  313.726722][T19856] tc action pedit 'at' offset -2147483647 out of bounds
[  313.729358][T19856] tc action pedit 'at' offset -2147483647 out of bounds
[  313.732141][T19856] tc action pedit 'at' offset -2147483647 out of bounds
[  313.734411][T19856] tc action pedit 'at' offset -2147483647 out of bounds
[  313.736636][T19856] tc action pedit 'at' offset -2147483647 out of bounds
[  313.739281][T19856] 0: reclassify loop, rule prio 0, protocol 800
[  313.939219][T19869] syzkaller1: entered promiscuous mode
[  313.941070][T19869] syzkaller1: entered allmulticast mode
[  313.962573][T19858] ip6_vti0 speed is unknown, defaulting to 1000
[  314.041960][T19858] lo speed is unknown, defaulting to 1000
[  314.213002][T19883] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  314.517842][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  314.684319][T19915] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  314.838021][    C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  314.941841][T19946] netlink: 'syz.1.4644': attribute type 4 has an invalid length.
[  314.951887][T19946] bond0: ARP target 170.170.170.170 is already present
[  314.957962][T19946] bond0: option arp_ip_target: invalid value (2863311530)
[  314.975655][T19946] bridge15: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms)
[  315.023000][T19956] wg2: Caught tx_queue_len zero misconfig
[  315.045985][T19960] IPVS: sync thread started: state = BACKUP, mcast_ifn = bridge0, syncid = 1, id = 0
[  315.056330][T19956] nbd: must specify at least one socket
[  315.165565][   T33] audit: type=1804 audit(1778596522.245:11): pid=19966 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.4652" name="/newroot/1513/cgroup.controllers" dev="tmpfs" ino=7730 res=1 errno=0
[  315.184045][   T33] audit: type=1800 audit(1778596522.245:12): pid=19966 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.4652" name="cgroup.controllers" dev="tmpfs" ino=7730 res=0 errno=0
[  315.523560][T20004] bond39: Invalid ad_actor_system MAC address.
[  315.525715][T20004] bond39: option ad_actor_system: invalid value (7)
[  315.531222][T20004] bond39 (unregistering): Released all slaves
[  315.557852][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  315.560674][T20000] bond22: up delay (1) is not a multiple of miimon (100), value rounded to 0 ms
[  315.574027][T20000] bond22: down delay (128) is not a multiple of miimon (100), value rounded to 100 ms
[  315.825423][T20034] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  315.877946][    C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  315.933889][T20044] x_tables: ip_tables: time.0 match: invalid size 24 (kernel) != (user) 40
[  316.214036][T20056] 8021q: adding VLAN 0 to HW filter on device bond24
[  316.231795][T20056] bond23: (slave bond24): making interface the new active one
[  316.239755][T20056] bond23: (slave bond24): Enslaving as an active interface with an up link
[  316.607868][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  316.620119][T20089] __nla_validate_parse: 23 callbacks suppressed
[  316.620133][T20089] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4693'.
[  316.625291][T20089] team_slave_1: Caught tx_queue_len zero misconfig
[  316.700125][T20093] vlan0: entered promiscuous mode
[  316.738766][T20095] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4696'.
[  316.751538][T20095] netlink: 240 bytes leftover after parsing attributes in process `syz.0.4696'.
[  316.755211][T20095] validate_nla: 6 callbacks suppressed
[  316.755230][T20095] netlink: 'syz.0.4696': attribute type 9 has an invalid length.
[  316.993520][T20124] netlink: 160 bytes leftover after parsing attributes in process `syz.0.4704'.
[  317.108845][T20126] ip6_vti0 speed is unknown, defaulting to 1000
[  317.224737][T20126] lo speed is unknown, defaulting to 1000
[  317.410323][T20158] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4712'.
[  317.443271][T20158] syzkaller0: entered promiscuous mode
[  317.445197][T20158] syzkaller0: entered allmulticast mode
[  317.641771][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  318.680356][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  318.949987][T20172] 8021q: adding VLAN 0 to HW filter on device ipvlan0
[  318.982632][T20176] sctp: [Deprecated]: syz.0.4718 (pid 20176) Use of struct sctp_assoc_value in delayed_ack socket option.
[  318.982632][T20176] Use struct sctp_sack_info instead
[  319.014043][T20182] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4717'.
[  319.175785][T20191] netlink: 10 bytes leftover after parsing attributes in process `syz.2.4722'.
[  319.358185][T20203] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4727'.
[  319.397126][T20203] 8021q: adding VLAN 0 to HW filter on device bond25
[  319.451719][T20203] 8021q: adding VLAN 0 to HW filter on device bond26
[  319.456715][T20203] bond25: (slave bond26): Enslaving as an active interface with an up link
[  319.504060][T20216] x_tables: duplicate underflow at hook 2
[  319.521917][T20203] bridge8: entered promiscuous mode
[  319.526699][T20203] bridge8: entered allmulticast mode
[  319.534469][T20203] team0: Port device bridge8 added
[  319.549293][T20203] bridge9: entered promiscuous mode
[  319.551012][T20203] bridge9: entered allmulticast mode
[  319.561082][T20203] team0: Port device bridge9 added
[  319.727790][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  319.987100][T20253] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4743'.
[  320.022422][T20253] syzkaller0: entered promiscuous mode
[  320.028970][T20253] syzkaller0: entered allmulticast mode
[  320.138483][T20255] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4744'.
[  320.757860][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  321.728978][T20369] __nla_validate_parse: 13 callbacks suppressed
[  321.729004][T20369] netlink: 56 bytes leftover after parsing attributes in process `syz.1.4782'.
[  321.807819][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  321.974022][T20384] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported
[  322.001815][T20386] netlink: 88 bytes leftover after parsing attributes in process `syz.1.4788'.
[  322.292031][T20400] netlink: 'syz.0.4791': attribute type 105 has an invalid length.
[  322.366816][T20406] vlan8: entered promiscuous mode
[  322.368797][T20406] geneve1: entered promiscuous mode
[  322.370684][T20406] vlan8: entered allmulticast mode
[  322.372394][T20406] geneve1: entered allmulticast mode
[  322.536503][T20414] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4798'.
[  322.567279][T20416] netlink: 'syz.0.4799': attribute type 62 has an invalid length.
[  322.670091][T20420] xt_hashlimit: max too large, truncated to 1048576
[  322.737562][T20422] netlink: 72 bytes leftover after parsing attributes in process `syz.0.4802'.
[  322.847876][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  322.886976][T20429] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4803'.
[  322.941758][T20438] netlink: 732 bytes leftover after parsing attributes in process `syz.0.4806'.
[  322.945456][T20438] netlink: 732 bytes leftover after parsing attributes in process `syz.0.4806'.
[  323.221289][T20457] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4813'.
[  323.227357][T20457] bond0: entered promiscuous mode
[  323.229985][T20457] netdevsim netdevsim1 netdevsim0: entered promiscuous mode
[  323.235845][T20457] bond0: left promiscuous mode
[  323.237531][T20457] netdevsim netdevsim1 netdevsim0: left promiscuous mode
[  323.355866][T20466] netlink: 'syz.1.4817': attribute type 1 has an invalid length.
[  323.378148][T20466] 8021q: adding VLAN 0 to HW filter on device bond39
[  323.635017][T20482] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4821'.
[  323.673436][T20486] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4822'.
[  323.774180][T20498] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  323.777437][T20498] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  323.887840][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  324.176213][T20506] netlink: 'syz.0.4830': attribute type 2 has an invalid length.
[  324.222615][   T33] audit: type=1804 audit(1778596531.305:13): pid=20508 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.4831" name="/newroot/1582/memory.events" dev="tmpfs" ino=8084 res=1 errno=0
[  324.231056][   T33] audit: type=1800 audit(1778596531.305:14): pid=20508 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.4831" name="memory.events" dev="tmpfs" ino=8084 res=0 errno=0
[  324.265555][T20510] bond0: option arp_validate: invalid value (55553)
[  324.918114][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  324.936300][T20557] bridge20: entered promiscuous mode
[  324.939305][T20557] bridge20: entered allmulticast mode
[  324.944017][T20557] team0: Port device bridge20 added
[  325.052624][T20571] netlink: 'syz.2.4855': attribute type 9 has an invalid length.
[  325.078226][T20571] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check.
[  325.439773][T20619] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes.
[  325.443324][T20619] netlink: 'syz.0.4866': attribute type 1 has an invalid length.
[  325.475968][T20624] tc_dump_action: action bad kind
[  325.484644][T20615] pim6reg1: entered promiscuous mode
[  325.490521][T20615] pim6reg1: entered allmulticast mode
[  325.928743][T20678] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  325.957837][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  325.976489][T20678] openvswitch: netlink: Flow key attr not present in new flow.
[  325.979771][T20673] netlink: 'syz.2.4880': attribute type 7 has an invalid length.
[  325.986137][T20673] netlink: 'syz.2.4880': attribute type 8 has an invalid length.
[  326.240071][T20695] ip6_vti0 speed is unknown, defaulting to 1000
[  326.380439][T20695] lo speed is unknown, defaulting to 1000
[  326.584141][T20717] bond43: option coupled_control: mode dependency failed, not supported in mode balance-rr(0)
[  326.590469][T20717] bond43 (unregistering): Released all slaves
[  326.661114][T20726] ip6tnl6: entered allmulticast mode
[  326.765652][T20730] pimreg: left allmulticast mode
[  326.771649][T20731] __nla_validate_parse: 24 callbacks suppressed
[  326.771666][T20731] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4893'.
[  326.842442][T20733] netlink: 'syz.2.4894': attribute type 1 has an invalid length.
[  326.845604][T20733] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4894'.
[  326.967351][T20740] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4898'.
[  326.997806][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  327.151539][T20760] netlink: 15672 bytes leftover after parsing attributes in process `syz.0.4901'.
[  327.155544][T20760] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4901'.
[  327.162527][T20760] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4901'.
[  327.172686][T20760] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4901'.
[  327.327317][T20770] IPVS: set_ctl: invalid protocol: 46 172.20.20.187:20002
[  327.330718][T20770] IPVS: ip_vs_add_dest(): server weight less than zero
[  327.505653][T20777] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4904'.
[  327.519792][T20777] netlink: 'syz.2.4904': attribute type 5 has an invalid length.
[  327.522954][T20777] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4904'.
[  327.850541][T20785] xt_recent: Unsupported userspace flags (000000b1)
[  327.919550][T20789] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4910'.
[  327.965166][T20791] 8021q: VLANs not supported on nlmon0
[  328.037838][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  328.179559][T20804] netlink: 'syz.1.4915': attribute type 1 has an invalid length.
[  328.370317][T20831] netlink: 'syz.0.4923': attribute type 3 has an invalid length.
[  328.541890][T20848] netlink: 'syz.1.4930': attribute type 1 has an invalid length.
[  328.592302][T20853] mac80211_hwsim hwsim2 syzkaller0: entered promiscuous mode
[  328.603212][T20853] mac80211_hwsim hwsim2 syzkaller0: entered allmulticast mode
[  328.610487][T20853] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  328.824767][T20877] netlink: 'syz.2.4940': attribute type 4 has an invalid length.
[  329.041440][T20906] netlink: 'syz.2.4947': attribute type 11 has an invalid length.
[  329.077784][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  329.095831][T20913] syz2: rxe_newlink: already configured on ip6_vti0
[  330.108829][T20943] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  330.117879][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  330.144475][T20943] tap0: tun_chr_ioctl cmd 1074025692
[  330.291091][T20954] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR
[  330.372879][T20972] netlink: 'syz.0.4965': attribute type 2 has an invalid length.
[  330.381710][T20972] netlink: 'syz.0.4965': attribute type 1 has an invalid length.
[  330.435972][T20978] netlink: 'syz.2.4967': attribute type 4 has an invalid length.
[  330.447219][T20978] netlink: 'syz.2.4967': attribute type 4 has an invalid length.
[  330.477372][T20980] netlink: 'syz.0.4966': attribute type 13 has an invalid length.
[  330.496242][T20980] batman_adv: batadv0: Interface activated: vlan7
[  330.499946][T20980] gretap0: refused to change device tx_queue_len
[  330.502464][T20980] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  330.762526][T21000] pim6reg: left allmulticast mode
[  330.956490][T21016] syzkaller0: entered promiscuous mode
[  330.959068][T21016] syzkaller0: entered allmulticast mode
[  331.031731][T21020] x_tables: duplicate underflow at hook 2
[  331.167787][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  331.279258][T21039] tipc: Failed to remove unknown binding: 66,1,1/3758096385:560662417/560662419
[  331.422781][T21058] bond27: option miimon: invalid value (18446744073709551607)
[  331.425595][T21058] bond27: option miimon: allowed values 0 - 2147483647
[  331.428962][T21058] bond27 (unregistering): Released all slaves
[  331.876055][T21108] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  331.882034][T21108] syzkaller0: mtu less than device minimum
[  331.887036][T21105] xt_hashlimit: overflow, try lower: 281474976710656/6
[  331.914385][T21105] __nla_validate_parse: 23 callbacks suppressed
[  331.914402][T21105] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5010'.
[  331.932027][T21105] macvlan4: entered allmulticast mode
[  331.934297][T21105] gretap0: entered allmulticast mode
[  331.952399][T21112] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5013'.
[  331.996515][T21114] xt_CT: You must specify a L4 protocol and not use inversions on it
[  332.003790][T21114] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5014'.
[  332.044446][T21122] xt_hashlimit: size too large, truncated to 1048576
[  332.197827][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  332.204382][T21122] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check.
[  332.315631][T21147] veth0_to_bond: Caught tx_queue_len zero misconfig
[  332.364407][T21153] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.5024'.
[  332.497241][T21165] netlink: 404 bytes leftover after parsing attributes in process `syz.0.5026'.
[  332.508121][T21165] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5026'.
[  332.519250][T21165] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5026'.
[  332.523137][T21165] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5026'.
[  332.540131][T21167] validate_nla: 5 callbacks suppressed
[  332.540142][T21167] netlink: 'syz.2.5027': attribute type 1 has an invalid length.
[  332.553445][T21167] xt_CT: You must specify a L4 protocol and not use inversions on it
[  332.564109][T21169] netlink: 'syz.0.5028': attribute type 1 has an invalid length.
[  332.591300][T21169] bond44: (slave vxcan3): The slave device specified does not support setting the MAC address
[  332.595044][T21169] bond44: (slave vxcan3): Error -95 calling set_mac_address
[  332.898765][T21186] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5034'.
[  332.910765][T21190] netlink: 64 bytes leftover after parsing attributes in process `syz.1.5036'.
[  332.923188][T21190] syzkaller1: entered promiscuous mode
[  332.925548][T21190] syzkaller1: entered allmulticast mode
[  333.014536][T21195] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  333.244971][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  333.550830][T21265] bond0: option arp_validate: invalid value (55553)
[  333.568177][T21262] bond40: (slave vcan0): refused to change device type
[  333.666427][T21278] xt_time: unknown flags 0xf4
[  333.719271][T21287] bond0: option arp_validate: invalid value (55553)
[  333.735952][T21289] netlink: 'syz.1.5066': attribute type 9 has an invalid length.
[  333.898129][T21320] netlink: zone id is out of range
[  333.905890][T21320] netlink: get zone limit has 4 unknown bytes
[  333.915912][T21323] netlink: 'syz.0.5075': attribute type 1 has an invalid length.
[  333.962084][T21326] bond0: option arp_validate: invalid value (55553)
[  334.090623][T21338] netlink: 'syz.2.5081': attribute type 32 has an invalid length.
[  334.105480][T21338] bond27: Setting coupled_control to off (0)
[  334.109691][T21336] IPVS: set_ctl: invalid protocol: 92 172.20.20.170:20002
[  334.277879][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  334.435407][T21349] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 0
[  334.446404][T21356] netlink: 'syz.1.5086': attribute type 14 has an invalid length.
[  334.664659][T21367] syzkaller1: left promiscuous mode
[  334.666546][T21367] syzkaller1: left allmulticast mode
[  334.776670][T21378] bond0: option arp_validate: invalid value (55553)
[  334.845508][T21383] netlink: 'syz.1.5097': attribute type 1 has an invalid length.
[  334.946480][T21397] netlink: 'syz.0.5099': attribute type 18 has an invalid length.
[  334.949736][T21397] netlink: 'syz.0.5099': attribute type 18 has an invalid length.
[  335.029255][T21402] syzkaller0: entered promiscuous mode
[  335.035899][T21402] syzkaller0: entered allmulticast mode
[  335.178895][T21413] bond0: option arp_validate: invalid value (55553)
[  335.318672][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  335.370770][T21417] ip6_vti0 speed is unknown, defaulting to 1000
[  335.452973][T21417] lo speed is unknown, defaulting to 1000
[  335.539511][T21435] netlink: 'syz.2.5112': attribute type 1 has an invalid length.
[  335.607240][T21438] bond0: option arp_validate: invalid value (55553)
[  335.916803][T21450] syzkaller1: entered promiscuous mode
[  335.919432][T21450] syzkaller1: entered allmulticast mode
[  336.084195][   T33] audit: type=1804 audit(1778596543.165:15): pid=21452 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.5119" name="/newroot/1706/cgroup.controllers" dev="tmpfs" ino=8727 res=1 errno=0
[  336.096588][   T33] audit: type=1800 audit(1778596543.165:16): pid=21452 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.5119" name="cgroup.controllers" dev="tmpfs" ino=8727 res=0 errno=0
[  336.132832][T21456] bond0: option arp_validate: invalid value (55553)
[  336.364196][T21469] sctp: [Deprecated]: syz.0.5127 (pid 21469) Use of int in maxseg socket option.
[  336.364196][T21469] Use struct sctp_assoc_value instead
[  336.367880][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  336.594645][T21483] batman_adv: batadv0: Adding interface: ipvlan4
[  336.596729][T21483] batman_adv: batadv0: The MTU of interface ipvlan4 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  336.606059][T21483] batman_adv: batadv0: Interface activated: ipvlan4
[  336.662910][T21485] tap0: tun_chr_ioctl cmd 1074025692
[  336.665806][T21485] vcan0: Caught tx_queue_len zero misconfig
[  336.743731][T21487] tipc: Bearer <udp:syz0>: already 2 bearers with priority 26
[  336.746956][T21487] tipc: Bearer <udp:syz0>: trying with adjusted priority
[  336.750444][T21487] tipc: Enabling of bearer <udp:syz0> rejected, max 3 bearers permitted
[  337.127586][T21509] __nla_validate_parse: 39 callbacks suppressed
[  337.127599][T21509] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5142'.
[  337.164586][T21512] bond0: option arp_validate: invalid value (55553)
[  337.244227][T21502] ip6_vti0 speed is unknown, defaulting to 1000
[  337.357706][T21502] lo speed is unknown, defaulting to 1000
[  337.397965][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  337.705672][T21527] Cannot find del_set index 4 as target
[  337.905720][T21532] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5149'.
[  337.940690][T21534] bond0: option arp_validate: invalid value (55553)
[  338.160345][T21553] netlink: 76 bytes leftover after parsing attributes in process `syz.1.5153'.
[  338.372402][T21563] syzkaller1: entered promiscuous mode
[  338.375983][T21563] syzkaller1: entered allmulticast mode
[  338.437922][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  338.537184][T21576] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  338.587370][T21578] netlink: 'syz.0.5162': attribute type 8 has an invalid length.
[  338.725301][T21580] bond0: option arp_validate: invalid value (55553)
[  338.824799][T21587] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5165'.
[  338.827860][T21588] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5165'.
[  338.827889][T21588] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5165'.
[  338.843451][T21587] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5165'.
[  339.479559][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  340.162331][T21586] netlink: 76 bytes leftover after parsing attributes in process `syz.1.5164'.
[  340.225276][T21596] netlink: 'syz.0.5168': attribute type 1 has an invalid length.
[  340.270897][T21602] netlink: 'syz.0.5171': attribute type 1 has an invalid length.
[  340.272088][T21603] netlink: 'syz.0.5171': attribute type 1 has an invalid length.
[  340.304435][T21601] bond0: Error: Cannot enslave bond to itself.
[  340.314633][T21607] dvmrp0: entered allmulticast mode
[  340.319163][T21601] bond8: entered allmulticast mode
[  340.322872][T21601] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5170'.
[  340.479976][T21614] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5174'.
[  340.517954][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  340.667605][T21631] openvswitch: netlink: Flow actions attr not present in new flow.
[  340.716359][T21637] sctp: [Deprecated]: syz.2.5183 (pid 21637) Use of int in maxseg socket option.
[  340.716359][T21637] Use struct sctp_assoc_value instead
[  340.876692][T21653] netlink: 'syz.2.5185': attribute type 1 has an invalid length.
[  340.879988][T21653] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  341.335313][T21687] bridge22: entered promiscuous mode
[  341.396515][T21698] bond0: Removing last arp target with arp_interval on
[  341.540553][T21699] netlink: 'syz.0.5202': attribute type 10 has an invalid length.
[  341.543128][T21699] ipvlan0: entered allmulticast mode
[  341.544829][T21699] veth0_vlan: entered allmulticast mode
[  341.551637][T21699] team0: Device ipvlan0 failed to register rx_handler
[  341.568123][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  341.673361][T21718] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  341.846012][T21739] xt_l2tp: v2 sid > 0xffff: 8388608
[  341.973485][T21741] netlink: 'syz.0.5213': attribute type 1 has an invalid length.
[  341.980620][T21743] openvswitch: netlink: Unknown VXLAN extension attribute 0
[  342.184195][T21761] __nla_validate_parse: 9 callbacks suppressed
[  342.184229][T21761] netlink: 44 bytes leftover after parsing attributes in process `syz.0.5220'.
[  342.192596][T21761] smc: net device wlan0 erased user defined pnetid SYZ0
[  342.195585][T21761] smc: ib device syz0 ibport 2 erased user defined pnetid SYZ2
[  342.209352][T21761] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.5220'.
[  342.235790][T21763] syzkaller0: entered promiscuous mode
[  342.238255][T21763] syzkaller0: entered allmulticast mode
[  342.302457][T21767] xt_recent: hitcount (33554435) is larger than allowed maximum (65535)
[  342.342642][T21771] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5224'.
[  342.346645][T21772] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5224'.
[  342.422322][T21779] netlink: 156 bytes leftover after parsing attributes in process `syz.1.5226'.
[  342.430444][T21779] openvswitch: netlink: Missing key (keys=40, expected=200000)
[  342.448947][T21780] IPVS: Scheduler module ip_vs_sip not found
[  342.570313][T21792] syzkaller0: entered promiscuous mode
[  342.572087][T21792] syzkaller0: entered allmulticast mode
[  342.597804][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  342.810063][T21801] syzkaller0: entered allmulticast mode
[  342.819673][T21801] ip6t_REJECT: TCP_RESET illegal for non-tcp
[  343.424617][T21817] netlink: 540 bytes leftover after parsing attributes in process `syz.0.5237'.
[  343.431097][T21817] netlink: 540 bytes leftover after parsing attributes in process `syz.0.5237'.
[  343.521063][T21828] netlink: 'syz.1.5241': attribute type 3 has an invalid length.
[  343.523574][T21828] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5241'.
[  343.548404][T21833] xt_CT: No such helper "netbios-ns"
[  343.550944][T21831] xt_CT: No such helper "netbios-ns"
[  343.584639][T21828] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5241'.
[  343.647794][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  343.745425][T21849] netlink: 45 bytes leftover after parsing attributes in process `syz.0.5248'.
[  343.892532][T21851] x9: renamed from bridge_slave_0
[  344.644150][T21901] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  344.677725][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  344.751558][T21901] ip6_vti0 speed is unknown, defaulting to 1000
[  344.839482][T21901] lo speed is unknown, defaulting to 1000
[  345.095343][T21911] tipc: Enabled bearer <eth:macvlan1>, priority 10
[  345.308323][T21921] netlink: 'syz.1.5274': attribute type 1 has an invalid length.
[  345.326477][T21921] bond41: entered promiscuous mode
[  345.329853][T21921] 8021q: adding VLAN 0 to HW filter on device bond41
[  345.360679][T21921] bond41: (slave bridge16): making interface the new active one
[  345.363368][T21921] bridge16: entered promiscuous mode
[  345.365748][T21921] bond41: (slave bridge16): Enslaving as an active interface with an up link
[  345.455107][T21928] veth15: entered promiscuous mode
[  345.505727][T21933] xt_recent: hitcount (33554435) is larger than allowed maximum (65535)
[  345.695530][T21955] bridge17: entered promiscuous mode
[  345.701494][T21955] bridge17: entered allmulticast mode
[  345.727778][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  345.875724][T21957] netlink: 'syz.1.5287': attribute type 1 has an invalid length.
[  345.911810][T21959] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  346.507344][T21967] SET target dimension over the limit!
[  346.516989][T21967] netlink: 'syz.0.5291': attribute type 1 has an invalid length.
[  346.546146][T21971] netlink: 'syz.0.5293': attribute type 1 has an invalid length.
[  346.695931][T21979] atomic_op ffff8881a9ccf998 conn xmit_atomic 0000000000000000
[  346.734797][T21981] x_tables: duplicate underflow at hook 2
[  346.757865][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  346.892014][T21999] batadv0: entered promiscuous mode
[  346.895332][T21999] batadv0: left promiscuous mode
[  347.797836][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  347.941576][T22021] sctp: [Deprecated]: syz.0.5310 (pid 22021) Use of struct sctp_assoc_value in delayed_ack socket option.
[  347.941576][T22021] Use struct sctp_sack_info instead
[  348.179837][T22035] __nla_validate_parse: 15 callbacks suppressed
[  348.179856][T22035] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5315'.
[  348.194625][T22027] ip6_vti0 speed is unknown, defaulting to 1000
[  348.255757][T22041] netlink: 152 bytes leftover after parsing attributes in process `syz.0.5317'.
[  348.275742][T22027] lo speed is unknown, defaulting to 1000
[  348.837913][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  348.950805][T22057] openvswitch: netlink: Missing key (keys=40, expected=2000)
[  349.253921][T22061] ip6_vti0 speed is unknown, defaulting to 1000
[  349.348734][T22061] lo speed is unknown, defaulting to 1000
[  349.411619][T22070] syzkaller1: entered promiscuous mode
[  349.413487][T22070] syzkaller1: entered allmulticast mode
[  349.598622][T22081] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5331'.
[  349.776400][T22093] netlink: 48 bytes leftover after parsing attributes in process `syz.0.5336'.
[  349.780922][T22093] netlink: 'syz.0.5336': attribute type 11 has an invalid length.
[  349.784529][T22093] team_slave_1: entered promiscuous mode
[  349.877920][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  349.880109][T22101] netlink: 312 bytes leftover after parsing attributes in process `syz.0.5337'.
[  349.888518][T22097] netlink: 80 bytes leftover after parsing attributes in process `syz.0.5337'.
[  349.903498][T22102] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  349.923997][T22102] tipc: Resetting bearer <eth:syzkaller0>
[  350.060959][T22116] netlink: 128 bytes leftover after parsing attributes in process `syz.1.5343'.
[  350.063851][T22116] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  350.238570][T22136] xt_hashlimit: size too large, truncated to 1048576
[  350.290831][T22138] x_tables: duplicate underflow at hook 3
[  350.917904][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  351.052729][T22144] netlink: del zone limit has 8 unknown bytes
[  351.230809][T22161] netlink: 'syz.1.5356': attribute type 1 has an invalid length.
[  351.233211][T22156] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5354'.
[  351.246950][T22161] bond42: entered promiscuous mode
[  351.250982][T22161] 8021q: adding VLAN 0 to HW filter on device bond42
[  351.369973][T22174] sctp: [Deprecated]: syz.0.5361 (pid 22174) Use of int in max_burst socket option.
[  351.369973][T22174] Use struct sctp_assoc_value instead
[  351.372535][T22175] Bluetooth: hci0: Opcode 0x080f failed: -22
[  351.375485][T22174] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5361'.
[  351.375677][T22174] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5361'.
[  351.474245][T22186] netlink: 'syz.1.5365': attribute type 1 has an invalid length.
[  351.498246][T22186] 8021q: adding VLAN 0 to HW filter on device bond43
[  351.515902][T22186] 8021q: adding VLAN 0 to HW filter on device batadv2
[  351.520551][T22186] bond43: (slave batadv2): making interface the new active one
[  351.523652][T22186] bond43: (slave batadv2): Enslaving as an active interface with an up link
[  351.563081][T22191] mac80211_hwsim hwsim2 syzkaller0: left allmulticast mode
[  351.735089][T22199] mac80211_hwsim hwsim2 syzkaller0: entered allmulticast mode
[  351.775519][T22201] netlink: 'syz.1.5372': attribute type 11 has an invalid length.
[  351.883565][T22212] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  351.967881][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  352.024156][T22220] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  352.026738][T22220] syzkaller0: entered promiscuous mode
[  352.029157][T22220] syzkaller0: entered allmulticast mode
[  352.043183][T22220] tipc: Resetting bearer <eth:syzkaller0>
[  352.051387][T22219] tipc: Resetting bearer <eth:syzkaller0>
[  352.069047][T22219] tipc: Disabling bearer <eth:syzkaller0>
[  352.222791][T22225] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  352.248022][T22225] syzkaller0: entered promiscuous mode
[  352.250009][T22225] syzkaller0: entered allmulticast mode
[  352.261832][T22225] tipc: Resetting bearer <eth:syzkaller0>
[  352.268534][T22224] tipc: Resetting bearer <eth:syzkaller0>
[  352.998510][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  353.708861][T22224] tipc: Disabling bearer <eth:syzkaller0>
[  353.845132][T22256] bond0: option arp_validate: invalid value (55553)
[  353.874158][T22259] __nla_validate_parse: 4 callbacks suppressed
[  353.874169][T22259] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5392'.
[  353.938656][T22267] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5393'.
[  353.989051][T22273] netlink: 'syz.2.5395': attribute type 2 has an invalid length.
[  353.998703][T22273] netlink: 'syz.2.5395': attribute type 2 has an invalid length.
[  354.047729][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  354.065373][T22281] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5399'.
[  354.310895][T22298] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5403'.
[  354.342556][T10370] block nbd0: Receive control failed (result -32)
[  354.345392][   T54] block nbd0: Receive control failed (result -32)
[  354.627135][T22332] syzkaller0: entered promiscuous mode
[  354.630814][T22332] syzkaller0: entered allmulticast mode
[  354.992465][T22367] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5424'.
[  355.014441][T22367] 8021q: adding VLAN 0 to HW filter on device bond28
[  355.020323][T22370] veth1_to_hsr: Caught tx_queue_len zero misconfig
[  355.023617][T22367] team0: Device bond28 is up. Set it down before adding it as a team port
[  355.087785][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  355.189422][T22389] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5431'.
[  355.378411][T22412] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5438'.
[  355.386449][T22414] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5439'.
[  355.564643][T22435] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5445'.
[  355.569717][T22435] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5445'.
[  356.118115][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  356.623970][T22466] bond44: entered promiscuous mode
[  356.626513][T22466] 8021q: adding VLAN 0 to HW filter on device bond44
[  356.650390][T22469] syzkaller0: entered promiscuous mode
[  356.656225][T22469] syzkaller0: entered allmulticast mode
[  356.855046][T22498] bond0: option arp_validate: invalid value (55553)
[  356.907146][T22507] xt_hashlimit: invalid rate
[  357.044585][T22519] netlink: 'syz.0.5470': attribute type 7 has an invalid length.
[  357.167769][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  357.564470][T22540] netlink: 'syz.0.5477': attribute type 1 has an invalid length.
[  357.653348][T22547] netlink: 'syz.0.5480': attribute type 1 has an invalid length.
[  357.799189][T22557] netlink: 'syz.0.5484': attribute type 10 has an invalid length.
[  358.198173][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  358.863555][T22597] ipip3: entered promiscuous mode
[  358.865881][T22599] bond0: option arp_validate: invalid value (55553)
[  359.247169][T22632] __nla_validate_parse: 14 callbacks suppressed
[  359.247182][T22632] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5505'.
[  359.247848][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  359.354994][T22646] netlink: 64 bytes leftover after parsing attributes in process `syz.1.5511'.
[  359.365191][T22646] syzkaller1: entered promiscuous mode
[  359.367567][T22646] syzkaller1: entered allmulticast mode
[  359.406629][T22648] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5512'.
[  359.411763][T22648] netlink: 52 bytes leftover after parsing attributes in process `syz.2.5512'.
[  359.416832][T22648] netlink: 352 bytes leftover after parsing attributes in process `syz.2.5512'.
[  359.425024][T22648] netlink: 52 bytes leftover after parsing attributes in process `syz.2.5512'.
[  359.447275][T22653] netlink: 312 bytes leftover after parsing attributes in process `syz.1.5513'.
[  359.453238][T22653] netlink: 80 bytes leftover after parsing attributes in process `syz.1.5513'.
[  359.483116][T22657] syzkaller1: left promiscuous mode
[  359.487074][T22657] syzkaller1: left allmulticast mode
[  359.519514][T22659] netlink: 'syz.2.5516': attribute type 1 has an invalid length.
[  359.523419][T22659] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5516'.
[  359.529512][T22661] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5517'.
[  359.635199][T22673] xt_l2tp: v2 doesn't support IP mode
[  359.870824][T22691] bond29: entered promiscuous mode
[  360.039061][T22701] IPVS: Scheduler module ip_vs_sip not found
[  360.309145][T22732] netlink: 'syz.2.5542': attribute type 1 has an invalid length.
[  360.382475][T22740] netlink: 'syz.0.5545': attribute type 1 has an invalid length.
[  361.426855][T22822] syzkaller0: entered promiscuous mode
[  361.429403][T22822] syzkaller0: entered allmulticast mode
[  361.728642][T22854] veth0: Caught tx_queue_len zero misconfig
[  361.917297][T22875] xt_cgroup: xt_cgroup: no path or classid specified
[  361.956390][T22882] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  362.026663][T22897] sctp: [Deprecated]: syz.1.5590 (pid 22897) Use of struct sctp_assoc_value in delayed_ack socket option.
[  362.026663][T22897] Use struct sctp_sack_info instead
[  362.037496][T22897] netlink: 'syz.1.5590': attribute type 11 has an invalid length.
[  362.081596][T22900] netlink: 'syz.1.5591': attribute type 18 has an invalid length.
[  362.319781][T22924] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 8
[  362.422384][T22934] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate.
[  362.426233][T22935] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate.
[  362.492761][T22939] bond0: option arp_validate: invalid value (55553)
[  362.757518][T22953] syzkaller0: entered promiscuous mode
[  362.759710][T22953] syzkaller0: entered allmulticast mode
[  362.865747][T22959] bond48: Unable to set peer notification delay as MII monitoring is disabled
[  362.875139][T22959] bond48 (unregistering): Released all slaves
[  363.400671][T23003] bond0: option arp_validate: invalid value (55553)
[  363.491437][T23015] openvswitch: netlink: EtherType 0 is less than min 600
[  363.554682][T23019] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  363.622700][T23024] openvswitch: netlink: IPv4 tun info is not correct
[  363.699776][T23035] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  363.878461][T23047] bond0: option arp_validate: invalid value (55553)
[  363.880730][T23049] netlink: 'syz.0.5645': attribute type 28 has an invalid length.
[  363.970772][T23063] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR
[  364.016729][T23077] openvswitch: netlink: Tunnel attr 78 out of range max 16
[  364.195061][T23095] sctp: [Deprecated]: syz.1.5658 (pid 23095) Use of struct sctp_assoc_value in delayed_ack socket option.
[  364.195061][T23095] Use struct sctp_sack_info instead
[  364.312360][T23108] __nla_validate_parse: 27 callbacks suppressed
[  364.312376][T23108] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5663'.
[  364.345601][T23108] netlink: 'syz.1.5663': attribute type 1 has an invalid length.
[  364.349178][T23108] netlink: 'syz.1.5663': attribute type 1 has an invalid length.
[  364.351832][T23108] netlink: 264 bytes leftover after parsing attributes in process `syz.1.5663'.
[  364.354754][T23108] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5663'.
[  364.361468][T23108] netlink: 'syz.1.5663': attribute type 1 has an invalid length.
[  364.364426][T23108] netlink: 'syz.1.5663': attribute type 1 has an invalid length.
[  364.367196][T23108] netlink: 264 bytes leftover after parsing attributes in process `syz.1.5663'.
[  364.373390][T23108] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5663'.
[  364.384079][T23115] netlink: 76 bytes leftover after parsing attributes in process `syz.0.5665'.
[  364.487007][T23125] syzkaller1: entered promiscuous mode
[  364.493689][T23125] syzkaller1: entered allmulticast mode
[  364.536289][T23116] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check.
[  364.579504][T23133] netlink: 'syz.1.5669': attribute type 1 has an invalid length.
[  364.671552][T23139] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  364.685808][T23144] netlink: 212324 bytes leftover after parsing attributes in process `syz.1.5673'.
[  364.733312][T23146] Cannot find del_set index 8192 as target
[  364.772043][T23146] netlink: 44 bytes leftover after parsing attributes in process `syz.0.5674'.
[  364.836437][T23160] sctp: [Deprecated]: syz.0.5679 (pid 23160) Use of struct sctp_assoc_value in delayed_ack socket option.
[  364.836437][T23160] Use struct sctp_sack_info instead
[  364.924889][T23166] netlink: 208240 bytes leftover after parsing attributes in process `syz.1.5682'.
[  364.992926][T23170] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5683'.
[  364.996806][T23171] netem: change failed
[  365.851866][T23185] sctp: [Deprecated]: syz.2.5687 (pid 23185) Use of struct sctp_assoc_value in delayed_ack socket option.
[  365.851866][T23185] Use struct sctp_sack_info instead
[  365.952124][T23195] netlink: 'syz.1.5690': attribute type 16 has an invalid length.
[  365.954747][T23195] netlink: 'syz.1.5690': attribute type 17 has an invalid length.
[  365.978670][T23198] netlink: 'syz.2.5691': attribute type 1 has an invalid length.
[  366.496707][T23239] ip6_vti0 speed is unknown, defaulting to 1000
[  366.574213][T23239] lo speed is unknown, defaulting to 1000
[  367.458544][T23275] bond45: Removing last ns target with arp_interval on
[  367.537165][T23291] bond0: option arp_validate: invalid value (55553)
[  367.587626][T23300] geneve6: entered promiscuous mode
[  367.593393][T13572] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  367.597995][T13572] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  367.601545][T13572] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  367.604169][T13572] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  367.767433][T23317] sctp: [Deprecated]: syz.1.5728 (pid 23317) Use of struct sctp_assoc_value in delayed_ack socket option.
[  367.767433][T23317] Use struct sctp_sack_info instead
[  368.189752][T23363] sctp: [Deprecated]: syz.0.5745 (pid 23363) Use of struct sctp_assoc_value in delayed_ack socket option.
[  368.189752][T23363] Use struct sctp_sack_info instead
[  368.263725][T23370] ip6gretap0: entered allmulticast mode
[  368.369747][T23387] sctp: [Deprecated]: syz.2.5754 (pid 23387) Use of struct sctp_assoc_value in delayed_ack socket option.
[  368.369747][T23387] Use struct sctp_sack_info instead
[  368.430549][T23375] bond48 (unregistering): Released all slaves
[  368.634766][T23403] blkio.reset_stats is deprecated
[  368.798719][T23410] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) !
[  368.872712][T23414] sctp: [Deprecated]: syz.0.5762 (pid 23414) Use of struct sctp_assoc_value in delayed_ack socket option.
[  368.872712][T23414] Use struct sctp_sack_info instead
[  369.021485][T23432] bond36: entered allmulticast mode
[  369.034549][T23432] dvmrp8: entered allmulticast mode
[  369.041366][T23431] bond36: left allmulticast mode
[  369.062747][T23436] sctp: [Deprecated]: syz.1.5770 (pid 23436) Use of struct sctp_assoc_value in delayed_ack socket option.
[  369.062747][T23436] Use struct sctp_sack_info instead
[  369.103659][T23440] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  369.128283][T23440] can: request_module (can-proto-0) failed.
[  369.128860][T23442] mac80211_hwsim hwsim5 syzkaller0: left promiscuous mode
[  369.132852][T23442] mac80211_hwsim hwsim5 syzkaller0: left allmulticast mode
[  369.201416][T23453] bond46 (unregistering): Released all slaves
[  369.269481][T23456] sctp: [Deprecated]: syz.0.5777 (pid 23456) Use of struct sctp_assoc_value in delayed_ack socket option.
[  369.269481][T23456] Use struct sctp_sack_info instead
[  369.277355][T23456] sctp: [Deprecated]: syz.0.5777 (pid 23456) Use of struct sctp_assoc_value in delayed_ack socket option.
[  369.277355][T23456] Use struct sctp_sack_info instead
[  369.323070][T23466] sctp: [Deprecated]: syz.1.5779 (pid 23466) Use of struct sctp_assoc_value in delayed_ack socket option.
[  369.323070][T23466] Use struct sctp_sack_info instead
[  369.418650][T23474] __nla_validate_parse: 21 callbacks suppressed
[  369.418662][T23474] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5782'.
[  369.424573][T23479] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5784'.
[  369.588998][T23492] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode
[  369.598874][T23492] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode
[  369.726985][T23507] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5797'.
[  369.865712][T23528] netlink: 'syz.2.5804': attribute type 1 has an invalid length.
[  369.869602][T23528] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  369.920498][T23536] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5805'.
[  369.943454][T23536] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5805'.
[  369.996440][T23543] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5806'.
[  370.150981][T23559] netlink: 'syz.0.5812': attribute type 1 has an invalid length.
[  370.155806][T23559] netlink: 224 bytes leftover after parsing attributes in process `syz.0.5812'.
[  370.203665][T23564] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) !
[  370.238910][T23567] netlink: 14 bytes leftover after parsing attributes in process `syz.0.5814'.
[  370.313025][T23575] netlink: 76 bytes leftover after parsing attributes in process `syz.0.5815'.
[  370.342360][T23581] netlink: 211856 bytes leftover after parsing attributes in process `syz.2.5817'.
[  370.663022][T23621] veth1_to_team: entered promiscuous mode
[  370.667409][T23621] veth1_to_team: left promiscuous mode
[  370.927265][T23649] sctp: [Deprecated]: syz.1.5835 (pid 23649) Use of struct sctp_assoc_value in delayed_ack socket option.
[  370.927265][T23649] Use struct sctp_sack_info instead
[  370.938345][T23651] netlink: 'syz.0.5836': attribute type 12 has an invalid length.
[  370.945391][T23653] netlink: 'syz.2.5837': attribute type 30 has an invalid length.
[  371.309391][T23689] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  371.429902][T23705] geneve4: entered promiscuous mode
[  371.436196][T23705] geneve4: entered allmulticast mode
[  371.588672][T23720] bridge18: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms)
[  371.864241][T23749] netlink: 'syz.0.5872': attribute type 8 has an invalid length.
[  371.902193][T23754] bond0: option arp_validate: invalid value (55553)
[  372.138625][T23780] bond0: option arp_validate: invalid value (55553)
[  372.302745][T23798] bond0: option arp_validate: invalid value (55553)
[  372.527295][T23820] sctp: [Deprecated]: syz.2.5897 (pid 23820) Use of struct sctp_assoc_value in delayed_ack socket option.
[  372.527295][T23820] Use struct sctp_sack_info instead
[  372.536457][T23820] netlink: 'syz.2.5897': attribute type 11 has an invalid length.
[  372.574417][T23825] netlink: 'syz.0.5898': attribute type 2 has an invalid length.
[  372.665323][T23834] netlink: 'syz.0.5903': attribute type 1 has an invalid length.
[  372.680061][T23834] 8021q: adding VLAN 0 to HW filter on device bond48
[  372.694722][T23834] bond48 (unregistering): Released all slaves
[  372.787939][T23846] sctp: [Deprecated]: syz.2.5906 (pid 23846) Use of struct sctp_assoc_value in delayed_ack socket option.
[  372.787939][T23846] Use struct sctp_sack_info instead
[  373.019569][T23866] sctp: [Deprecated]: syz.0.5914 (pid 23866) Use of struct sctp_assoc_value in delayed_ack socket option.
[  373.019569][T23866] Use struct sctp_sack_info instead
[  373.146764][T23879] openvswitch: netlink: Flow actions attr not present in new flow.
[  373.156772][T23872] netlink: 'syz.0.5917': attribute type 4 has an invalid length.
[  373.189286][T23883] mac80211_hwsim hwsim2 syzkaller0: left promiscuous mode
[  373.191775][T23883] mac80211_hwsim hwsim2 syzkaller0: left allmulticast mode
[  373.201033][T23886] xt_TCPMSS: Only works on TCP SYN packets
[  373.227976][T23888] netlink: 'syz.1.5922': attribute type 20 has an invalid length.
[  373.234801][ T5648] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  373.238524][ T5648] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  373.241505][ T5648] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  373.246797][ T5648] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  373.393555][T23907] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  373.725380][T23932] IPVS: set_ctl: invalid protocol: 43 10.1.1.0:20001
[  373.773450][T23934] bond47: option miimon: invalid value (18446744073709551607)
[  373.776006][T23934] bond47: option miimon: allowed values 0 - 2147483647
[  373.779582][T23934] bond47 (unregistering): Released all slaves
[  373.872924][T23938] bond47: option ad_actor_sys_prio: mode dependency failed, not supported in mode broadcast(3)
[  373.880449][T23938] bond47 (unregistering): Released all slaves
[  374.511833][T24009] __nla_validate_parse: 99 callbacks suppressed
[  374.511845][T24009] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5962'.
[  374.555708][T24014] netlink: 7064 bytes leftover after parsing attributes in process `syz.0.5964'.
[  374.617956][T24022] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5966'.
[  374.623005][T24022] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5966'.
[  374.716753][T24032] bond47: option ad_actor_sys_prio: mode dependency failed, not supported in mode broadcast(3)
[  374.725098][T24032] bond47 (unregistering): Released all slaves
[  374.774327][T24038] x_tables: duplicate underflow at hook 1
[  374.792064][T24038] IPVS: set_ctl: invalid protocol: 135 255.255.255.255:20000
[  374.803915][T24032] netlink: 100 bytes leftover after parsing attributes in process `syz.1.5969'.
[  374.846508][T24044] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5974'.
[  374.853044][T24044] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5974'.
[  374.904656][T24048] validate_nla: 8 callbacks suppressed
[  374.904667][T24048] netlink: 'syz.1.5976': attribute type 4 has an invalid length.
[  374.910137][T24048] netlink: 17 bytes leftover after parsing attributes in process `syz.1.5976'.
[  374.943663][T24049] netlink: 'syz.0.5975': attribute type 13 has an invalid length.
[  374.979946][T24049] mac80211_hwsim hwsim5 syzkaller0: Caught tx_queue_len zero misconfig
[  374.996052][T24049] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5975'.
[  375.042334][T24054] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  375.049122][T24054] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  375.101446][T24060] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5979'.
[  375.186744][T24060] batman_adv: batadv0: Interface deactivated: vlan7
[  375.211971][T24060] team_slave_1: left promiscuous mode
[  375.214580][T24060] vlan0: left promiscuous mode
[  375.216468][T24060] ipvlan0: left allmulticast mode
[  375.218270][T24060] veth0_vlan: left allmulticast mode
[  375.220454][T24060] macvtap0: left promiscuous mode
[  375.224407][T24060] mac80211_hwsim hwsim5 syzkaller0: left promiscuous mode
[  375.226728][T24060] mac80211_hwsim hwsim5 syzkaller0: left allmulticast mode
[  375.235639][T24060] bond36: left promiscuous mode
[  375.275721][T24060] bond39: left promiscuous mode
[  375.289979][T24060] bond40: left promiscuous mode
[  375.300774][T24060] vlan8: left promiscuous mode
[  375.304141][T24060] geneve1: left promiscuous mode
[  375.305829][T24060] vlan8: left allmulticast mode
[  375.307454][T24060] geneve1: left allmulticast mode
[  375.313440][T24060] bridge20: left promiscuous mode
[  375.317844][T24060] bridge20: left allmulticast mode
[  375.333523][T24060] batman_adv: batadv0: Interface deactivated: ipvlan4
[  375.342262][T24060] bridge22: left promiscuous mode
[  375.345138][T24060] veth15: left promiscuous mode
[  375.357038][T24060] ipip3: left promiscuous mode
[  375.365046][T24060] geneve6: left promiscuous mode
[  375.411798][ T5664] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  375.418212][ T5664] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  375.424203][ T5664] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  375.431055][ T5664] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  375.499768][T24084] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode
[  375.502296][T24084] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode
[  375.505214][T24086] netlink: 'syz.2.5985': attribute type 1 has an invalid length.
[  375.520289][T24086] bond31: entered promiscuous mode
[  375.522488][T24086] 8021q: adding VLAN 0 to HW filter on device bond31
[  375.543684][T24086] 8021q: adding VLAN 0 to HW filter on device bond31
[  375.546127][T24086] bond31: (slave wireguard2): The slave device specified does not support setting the MAC address
[  375.550232][T24086] bond31: (slave wireguard2): Setting fail_over_mac to active for active-backup mode
[  375.556681][T24086] bond31: (slave wireguard2): making interface the new active one
[  375.560337][T24086] wireguard2: entered promiscuous mode
[  375.563325][T24086] bond31: (slave wireguard2): Enslaving as an active interface with an up link
[  375.731858][T24102] bond0: option arp_validate: invalid value (55553)
[  375.784126][T24105] netlink: 'syz.2.5993': attribute type 11 has an invalid length.
[  375.874594][T24108] hsr_slave_1: left promiscuous mode
[  375.955093][T24115] lo speed is unknown, defaulting to 1000
[  375.958330][T24115] lo speed is unknown, defaulting to 1000
[  375.961313][T24115] lo speed is unknown, defaulting to 1000
[  375.964107][T24115] smbdirect: ib_dev[sy2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000
[  375.986107][T24119] bond0: option arp_validate: invalid value (55553)
[  375.988074][T24115] smbdirect: ib_dev[sy2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6
[  376.003125][T24115] smbdirect: ib_dev[sy2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008
[  376.022471][T24120] : renamed from lo
[  376.025687][T24115] infiniband sy2: RDMA CMA: cma_listen_on_dev, error -98
[  376.066591][T24115]  speed is unknown, defaulting to 1000
[  376.072758][T24115]  speed is unknown, defaulting to 1000
[  376.076667][T24115]  speed is unknown, defaulting to 1000
[  376.134683][T24132] ksmbd: Unknown IPC event: 1, ignore.
[  376.200325][T24137] mac80211_hwsim hwsim2 syzkaller0: entered promiscuous mode
[  376.203575][T24137] mac80211_hwsim hwsim2 syzkaller0: entered allmulticast mode
[  376.246099][T24139] netlink: 'syz.2.6005': attribute type 21 has an invalid length.
[  376.253022][T24139] netlink: 'syz.2.6005': attribute type 1 has an invalid length.
[  377.280380][T24171] x_tables: duplicate underflow at hook 1
[  377.373155][T24178] bond0: option arp_validate: invalid value (55553)
[  377.536561][T24180] ip6_vti0 speed is unknown, defaulting to 1000
[  377.624512][T24180] lo speed is unknown, defaulting to 1000
[  377.636931][T24192] netlink: 'syz.1.6021': attribute type 1 has an invalid length.
[  377.710591][T24180]  speed is unknown, defaulting to 1000
[  378.104647][T24222] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  378.635232][T24261] syzkaller1: entered promiscuous mode
[  378.639353][T24261] syzkaller1: entered allmulticast mode
[  378.765246][T24269] mac80211_hwsim hwsim59 syzkaller0: entered promiscuous mode
[  378.769481][T24269] mac80211_hwsim hwsim59 syzkaller0: entered allmulticast mode
[  378.808765][T24271] netlink: 'syz.1.6047': attribute type 1 has an invalid length.
[  378.855091][T24275] netlink: 'syz.0.6049': attribute type 13 has an invalid length.
[  378.923926][T24284] bond0: option arp_validate: invalid value (55553)
[  379.097911][T24293] netlink: 'syz.2.6055': attribute type 4 has an invalid length.
[  379.875701][T24321] __nla_validate_parse: 19 callbacks suppressed
[  379.875715][T24321] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6064'.
[  380.049251][T24336] netlink: 'syz.2.6069': attribute type 1 has an invalid length.
[  380.089099][T24336] bond32: entered promiscuous mode
[  380.091546][T24336] 8021q: adding VLAN 0 to HW filter on device bond32
[  380.105078][T24336] 8021q: adding VLAN 0 to HW filter on device bond32
[  380.111717][T24336] bond32: (slave ip6gre2): The slave device specified does not support setting the MAC address
[  380.115556][T24336] bond32: (slave ip6gre2): Setting fail_over_mac to active for active-backup mode
[  380.124781][T24336] bond32: (slave ip6gre2): making interface the new active one
[  380.127971][T24336] ip6gre2: entered promiscuous mode
[  380.130882][T24336] bond32: (slave ip6gre2): Enslaving as an active interface with an up link
[  380.206696][T24340] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6072'.
[  380.210026][T24340] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6072'.
[  380.270364][T24340] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6072'.
[  380.396551][T24367] ip6tnl0: Caught tx_queue_len zero misconfig
[  380.429496][T24365] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.6080'.
[  380.516094][T24379] netlink: 'syz.2.6085': attribute type 1 has an invalid length.
[  380.519732][T24379] netlink: 'syz.2.6085': attribute type 3 has an invalid length.
[  380.533006][T24380] bond48: option arp_validate: mode dependency failed, not supported in mode 802.3ad(4)
[  380.537466][T24380] bond48 (unregistering): Released all slaves
[  380.793031][T24401] netlink: 'syz.1.6093': attribute type 1 has an invalid length.
[  380.798909][T24401] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6093'.
[  380.801989][T24401] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6093'.
[  380.826478][T24403] netlink: 56 bytes leftover after parsing attributes in process `syz.2.6094'.
[  380.830407][T24403] netlink: 212336 bytes leftover after parsing attributes in process `syz.2.6094'.
[  380.834396][T24403] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6094'.
[  381.024706][T24421] netlink: 'syz.2.6102': attribute type 11 has an invalid length.
[  381.098255][T24416] ip6_vti0 speed is unknown, defaulting to 1000
[  381.188109][T24430] netlink: 'syz.2.6105': attribute type 28 has an invalid length.
[  381.202259][T24416] lo speed is unknown, defaulting to 1000
[  381.762638][T24416]  speed is unknown, defaulting to 1000
[  381.765354][T24437] tipc: Enabling of bearer <eth:macvlan1> rejected, max 3 bearers permitted
[  382.080211][T24448] block nbd2: server does not support multiple connections per device.
[  382.085857][T24448] block nbd2: shutting down sockets
[  382.610163][T24460] netlink: 'syz.1.6117': attribute type 3 has an invalid length.
[  382.613970][T24460] netlink: 'syz.1.6117': attribute type 3 has an invalid length.
[  382.769280][T24472] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  382.949842][T24481] sctp: [Deprecated]: syz.1.6125 (pid 24481) Use of struct sctp_assoc_value in delayed_ack socket option.
[  382.949842][T24481] Use struct sctp_sack_info instead
[  382.958556][T24481] netlink: 'syz.1.6125': attribute type 10 has an invalid length.
[  383.346288][T24503] bond0: option arp_validate: invalid value (55553)
[  383.381350][T24507] netlink: 'syz.0.6134': attribute type 1 has an invalid length.
[  383.911923][T24566] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  384.136872][T24593] PKCS7: Unknown OID: [4] (bad)
[  384.141345][T24593] PKCS7: Only support pkcs7_signedData type
[  384.146527][T24597] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  384.154637][T24593] geneve1: Caught tx_queue_len zero misconfig
[  384.173837][T24597] tipc: Resetting bearer <eth:syzkaller0>
[  384.181733][T24597] ipip2: entered promiscuous mode
[  384.197929][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  384.203345][T24601] NCSI netlink: No device for ifindex 813332851
[  384.441418][T24631] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  384.466038][T24633] Cannot find set identified by id 3 to match
[  384.516063][T24642] Unsupported ieee802154 address type: 0
[  384.564173][T24646] bond0: option arp_validate: invalid value (55553)
[  384.584165][T24648] syzkaller1: entered allmulticast mode
[  385.186303][T24728] validate_nla: 6 callbacks suppressed
[  385.186320][T24728] netlink: 'syz.1.6200': attribute type 1 has an invalid length.
[  385.237975][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  385.301242][T24750] __nla_validate_parse: 18 callbacks suppressed
[  385.301255][T24750] netlink: 144 bytes leftover after parsing attributes in process `syz.0.6208'.
[  385.359188][T24758] xt_CT: You must specify a L4 protocol and not use inversions on it
[  385.361714][T24758] netlink: 'syz.1.6204': attribute type 21 has an invalid length.
[  385.395198][T24758] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6204'.
[  385.704451][T24783] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6217'.
[  385.723770][T24785] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6218'.
[  385.831425][T24797] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT
[  385.987307][T24801] bond37: (slave lo): Releasing backup interface
[  385.998970][T24801] bond37: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed
[  386.005477][T24801] bond49: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  386.013054][T24801] bond49: (slave lo): Enslaving as an active interface with an up link
[  386.015982][T24801] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check.
[  386.206556][T24834] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6232'.
[  386.277843][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  386.305202][T24841] A link change request failed with some changes committed already. Interface bond1 may have been left with an inconsistent configuration, please check.
[  386.323881][T24845] netlink: 312 bytes leftover after parsing attributes in process `syz.0.6236'.
[  386.329118][T24845] netlink: 80 bytes leftover after parsing attributes in process `syz.0.6236'.
[  386.474335][T24871] netlink: 'syz.0.6245': attribute type 11 has an invalid length.
[  386.518760][T24869] veth0_macvtap: left allmulticast mode
[  386.522535][T24869] bond7: left promiscuous mode
[  386.524204][T24869] bond8: left promiscuous mode
[  386.525818][T24869] bond9: left promiscuous mode
[  386.528516][T24869] gre2: left promiscuous mode
[  386.531248][T24869] bond12: left allmulticast mode
[  386.533056][T24869] bond13: left promiscuous mode
[  386.534875][T24869] bond14: left allmulticast mode
[  386.536749][T24869] ip6tnl4: left allmulticast mode
[  386.539066][T24869] vlan1: left allmulticast mode
[  386.541252][T24869] bond0: left allmulticast mode
[  386.543223][T24869] ipip1: left promiscuous mode
[  386.544958][T24869] geneve0: left promiscuous mode
[  386.546609][T24869] mac80211_hwsim hwsim59 wlan0: left promiscuous mode
[  386.549553][T24885] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6246'.
[  386.549990][T24869] gretap3: left allmulticast mode
[  386.555034][T24869] bridge8: left promiscuous mode
[  386.556593][T24869] bridge8: left allmulticast mode
[  386.558859][T24869] bridge9: left promiscuous mode
[  386.560428][T24869] bridge9: left allmulticast mode
[  386.565983][T24869] bond29: left promiscuous mode
[  386.570803][T24869] ip6gretap0: left allmulticast mode
[  386.573276][T24869] mac80211_hwsim hwsim59 syzkaller0: left promiscuous mode
[  386.575894][T24869] mac80211_hwsim hwsim59 syzkaller0: left allmulticast mode
[  386.578996][T24869] bond31: left promiscuous mode
[  386.580686][T24869] wireguard2: left promiscuous mode
[  386.593591][T24869] bond32: left promiscuous mode
[  386.595297][T24869] ip6gre2: left promiscuous mode
[  386.600644][T24887] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6246'.
[  386.613827][T24869] ipip2: left promiscuous mode
[  386.682076][T24891] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6249'.
[  386.699476][T24894] mac80211_hwsim hwsim59 syzkaller0: entered promiscuous mode
[  386.702528][T24894] mac80211_hwsim hwsim59 syzkaller0: entered allmulticast mode
[  386.755998][T24909] x_tables: ip6_tables: DNPT target: used from hooks FORWARD, but only usable from PREROUTING/OUTPUT
[  386.862665][T24920] syzkaller1: left allmulticast mode
[  387.061754][T24947] netlink: 'syz.0.6268': attribute type 11 has an invalid length.
[  387.211147][T24965] lo: Caught tx_queue_len zero misconfig
[  387.243006][T24970] netlink: 'syz.2.6276': attribute type 11 has an invalid length.
[  387.317919][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  387.347699][T24975] netlink: 'syz.2.6278': attribute type 4 has an invalid length.
[  387.522529][T24975] ip6_vti0 speed is unknown, defaulting to 1000
[  387.626025][T24975] lo speed is unknown, defaulting to 1000
[  387.720294][T24975]  speed is unknown, defaulting to 1000
[  387.876218][T25008] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check.
[  388.367805][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  388.390122][T25027] ip6_vti0 speed is unknown, defaulting to 1000
[  388.440017][T25037] netlink: 'syz.0.6301': attribute type 1 has an invalid length.
[  388.515263][T25027] lo speed is unknown, defaulting to 1000
[  388.645993][T25047] gretap0: entered promiscuous mode
[  388.649999][T25047] erspan0: left promiscuous mode
[  388.657518][T25047] syz_tun: left allmulticast mode
[  388.664612][T25047] 8021q: adding VLAN 0 to HW filter on device bond0
[  388.685593][T25047] 0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  388.689789][T25047] 0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  388.693380][T25047] 0: left allmulticast mode
[  388.694935][T25047] hsr_slave_0: left allmulticast mode
[  388.697453][T25047] hsr_slave_1: left allmulticast mode
[  388.702316][T25047] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  388.707771][ T5666]  speed is unknown, defaulting to 1000
[  388.711879][ T5666] sy2: Port: 1 Link ACTIVE
[  388.731915][ T5424] syz0: Port: 1 Link ACTIVE
[  388.734906][T25027]  speed is unknown, defaulting to 1000
[  388.738424][T25047] ip6gre0: Caught tx_queue_len zero misconfig
[  388.812700][T25054] bridge0: port 2(syz_tun) entered blocking state
[  388.815610][T25054] bridge0: port 2(syz_tun) entered disabled state
[  388.819129][T25054] syz_tun: entered allmulticast mode
[  388.823027][T25054] syz_tun: entered promiscuous mode
[  388.825623][T25054] bridge0: port 2(syz_tun) entered blocking state
[  388.828488][T25054] bridge0: port 2(syz_tun) entered listening state
[  389.149952][T25079] bond0: option arp_validate: invalid value (55553)
[  389.375007][T25101] netlink: 'syz.0.6322': attribute type 3 has an invalid length.
[  389.407834][    C1] net_ratelimit: 1 callbacks suppressed
[  389.407846][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  389.646812][T25120] ip6_vti0: entered promiscuous mode
[  389.820264][T25127] bond0: option arp_validate: invalid value (55553)
[  389.862922][T25129] netlink: 'syz.0.6332': attribute type 11 has an invalid length.
[  389.904415][T25131] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  390.010203][T25133] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  390.308538][T25143] netlink: 'syz.1.6339': attribute type 11 has an invalid length.
[  390.339431][T25146] __nla_validate_parse: 68 callbacks suppressed
[  390.339443][T25146] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6338'.
[  390.437849][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  390.463980][T25160] 
[  390.464948][T25160] ======================================================
[  390.467066][T25160] WARNING: possible circular locking dependency detected
[  390.469152][T25160] syzkaller #0 Not tainted
[  390.471084][T25160] ------------------------------------------------------
[  390.473772][T25160] syz.2.6345/25160 is trying to acquire lock:
[  390.475757][T25160] ffff88810fee88e0 (&resv_map->rw_sema){++++}-{4:4}, at: __get_user_pages+0x5e4/0x2720
[  390.478806][T25160] 
[  390.478806][T25160] but task is already holding lock:
[  390.481132][T25160] ffff8881b5eaf178 (&mm->mmap_lock){++++}-{4:4}, at: xdp_umem_pin_pages+0xca/0x340
[  390.484258][T25160] 
[  390.484258][T25160] which lock already depends on the new lock.
[  390.484258][T25160] 
[  390.487804][T25160] 
[  390.487804][T25160] the existing dependency chain (in reverse order) is:
[  390.490939][T25160] 
[  390.490939][T25160] -> #8 (&mm->mmap_lock){++++}-{4:4}:
[  390.494002][T25160]        __might_fault+0xcb/0x130
[  390.495613][T25160]        _copy_from_user+0x28/0xb0
[  390.497334][T25160]        csum_and_copy_from_iter_full+0x1e7/0x1f00
[  390.499480][T25160]        ip_generic_getfrag+0x149/0x2d0
[  390.501427][T25160]        __ip6_append_data+0x39cd/0x3f60
[  390.503244][T25160]        ip6_append_data+0x10f/0x280
[  390.505289][T25160]        rawv6_sendmsg+0x12d3/0x18e0
[  390.507375][T25160]        ____sys_sendmsg+0x80a/0x9f0
[  390.509231][T25160]        ___sys_sendmsg+0x2a5/0x360
[  390.511290][T25160]        __x64_sys_sendmsg+0x1bd/0x2a0
[  390.513401][T25160]        do_syscall_64+0x15f/0xf80
[  390.515268][T25160]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  390.517373][T25160] 
[  390.517373][T25160] -> #7 (sk_lock-AF_INET6){+.+.}-{0:0}:
[  390.519812][T25160]        lock_sock_nested+0x41/0x100
[  390.521644][T25160]        inet_shutdown+0x6a/0x390
[  390.523185][T25160]        nbd_mark_nsock_dead+0x2e9/0x560
[  390.525008][T25160]        sock_shutdown+0x15e/0x260
[  390.526662][T25160]        nbd_clear_sock+0x24/0x170
[  390.528471][T25160]        nbd_config_put+0x2dd/0x580
[  390.530539][T25160]        nbd_genl_connect+0x19d5/0x1cf0
[  390.532849][T25160]        genl_family_rcv_msg_doit+0x22a/0x330
[  390.535350][T25160]        genl_rcv_msg+0x61c/0x7a0
[  390.537385][T25160]        netlink_rcv_skb+0x232/0x4b0
[  390.539523][T25160]        genl_rcv+0x28/0x40
[  390.541343][T25160]        netlink_unicast+0x75c/0x8e0
[  390.543426][T25160]        netlink_sendmsg+0x813/0xb40
[  390.545486][T25160]        ____sys_sendmsg+0x972/0x9f0
[  390.547478][T25160]        ___sys_sendmsg+0x2a5/0x360
[  390.549210][T25160]        __x64_sys_sendmsg+0x1bd/0x2a0
[  390.551330][T25160]        do_syscall_64+0x15f/0xf80
[  390.553400][T25160]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  390.556014][T25160] 
[  390.556014][T25160] -> #6 (&nsock->tx_lock){+.+.}-{4:4}:
[  390.559146][T25160]        __mutex_lock+0x1a3/0x1550
[  390.561215][T25160]        nbd_queue_rq+0x37b/0x1100
[  390.563273][T25160]        blk_mq_dispatch_rq_list+0xa70/0x1910
[  390.565679][T25160]        __blk_mq_sched_dispatch_requests+0xdcc/0x1600
[  390.568439][T25160]        blk_mq_sched_dispatch_requests+0xd7/0x190
[  390.570955][T25160]        blk_mq_run_hw_queue+0x348/0x4f0
[  390.573212][T25160]        blk_mq_dispatch_list+0xd16/0xe10
[  390.575514][T25160]        blk_mq_flush_plug_list+0x48d/0x570
[  390.577674][T25160]        __blk_flush_plug+0x3ed/0x4d0
[  390.579831][T25160]        __submit_bio+0x28d/0x580
[  390.581808][T25160]        submit_bio_noacct_nocheck+0x2f4/0xa40
[  390.584230][T25160]        block_read_full_folio+0x599/0x830
[  390.586581][T25160]        filemap_read_folio+0x137/0x3b0
[  390.588759][T25160]        do_read_cache_folio+0x358/0x590
[  390.590672][T25160]        read_part_sector+0xb6/0x2b0
[  390.592632][T25160]        adfspart_check_ICS+0xb1/0x960
[  390.594410][T25160]        bdev_disk_changed+0x817/0x1770
[  390.596531][T25160]        blkdev_get_whole+0x380/0x510
[  390.598690][T25160]        bdev_open+0x31e/0xd30
[  390.600620][T25160]        blkdev_open+0x470/0x610
[  390.602603][T25160]        do_dentry_open+0x785/0x14e0
[  390.604756][T25160]        vfs_open+0x3b/0x340
[  390.606595][T25160]        path_openat+0x2e08/0x3860
[  390.608648][T25160]        do_file_open+0x23e/0x4a0
[  390.610712][T25160]        do_sys_openat2+0x113/0x200
[  390.612870][T25160]        __x64_sys_openat+0x138/0x170
[  390.615096][T25160]        do_syscall_64+0x15f/0xf80
[  390.617177][T25160]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  390.619811][T25160] 
[  390.619811][T25160] -> #5 (&cmd->lock){+.+.}-{4:4}:
[  390.622753][T25160]        __mutex_lock+0x1a3/0x1550
[  390.624864][T25160]        nbd_queue_rq+0xc6/0x1100
[  390.626826][T25160]        blk_mq_dispatch_rq_list+0xa70/0x1910
[  390.629187][T25160]        __blk_mq_sched_dispatch_requests+0xdcc/0x1600
[  390.631875][T25160]        blk_mq_sched_dispatch_requests+0xd7/0x190
[  390.634305][T25160]        blk_mq_run_hw_queue+0x348/0x4f0
[  390.636518][T25160]        blk_mq_dispatch_list+0xd16/0xe10
[  390.638803][T25160]        blk_mq_flush_plug_list+0x48d/0x570
[  390.641223][T25160]        __blk_flush_plug+0x3ed/0x4d0
[  390.643417][T25160]        __submit_bio+0x28d/0x580
[  390.645501][T25160]        submit_bio_noacct_nocheck+0x2f4/0xa40
[  390.648025][T25160]        block_read_full_folio+0x599/0x830
[  390.650426][T25160]        filemap_read_folio+0x137/0x3b0
[  390.652679][T25160]        do_read_cache_folio+0x358/0x590
[  390.654999][T25160]        read_part_sector+0xb6/0x2b0
[  390.657188][T25160]        adfspart_check_ICS+0xb1/0x960
[  390.659485][T25160]        bdev_disk_changed+0x817/0x1770
[  390.661811][T25160]        blkdev_get_whole+0x380/0x510
[  390.664030][T25160]        bdev_open+0x31e/0xd30
[  390.665602][T25160]        blkdev_open+0x470/0x610
[  390.667197][T25160]        do_dentry_open+0x785/0x14e0
[  390.669276][T25160]        vfs_open+0x3b/0x340
[  390.671205][T25160]        path_openat+0x2e08/0x3860
[  390.673293][T25160]        do_file_open+0x23e/0x4a0
[  390.675337][T25160]        do_sys_openat2+0x113/0x200
[  390.677503][T25160]        __x64_sys_openat+0x138/0x170
[  390.679755][T25160]        do_syscall_64+0x15f/0xf80
[  390.681845][T25160]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  390.684457][T25160] 
[  390.684457][T25160] -> #4 (set->srcu){.+.+}-{0:0}:
[  390.687286][T25160]        __synchronize_srcu+0xca/0x300
[  390.689535][T25160]        elevator_switch+0x1e8/0x7a0
[  390.691759][T25160]        elevator_change+0x2cc/0x450
[  390.693951][T25160]        elevator_set_default+0x36c/0x430
[  390.696285][T25160]        blk_register_queue+0x3e9/0x4e0
[  390.698554][T25160]        __add_disk+0x677/0xd50
[  390.700565][T25160]        add_disk_fwnode+0xfb/0x480
[  390.702705][T25160]        nbd_dev_add+0x72c/0xb50
[  390.704713][T25160]        nbd_init+0x168/0x1f0
[  390.706622][T25160]        do_one_initcall+0x250/0x870
[  390.708840][T25160]        do_initcall_level+0x104/0x190
[  390.711075][T25160]        do_initcalls+0x59/0xa0
[  390.713076][T25160]        kernel_init_freeable+0x2a6/0x3e0
[  390.715410][T25160]        kernel_init+0x1d/0x1d0
[  390.717452][T25160]        ret_from_fork+0x514/0xb70
[  390.719594][T25160]        ret_from_fork_asm+0x1a/0x30
[  390.721782][T25160] 
[  390.721782][T25160] -> #3 (&q->elevator_lock){+.+.}-{4:4}:
[  390.724871][T25160]        __mutex_lock+0x1a3/0x1550
[  390.726889][T25160]        elevator_change+0x1b3/0x450
[  390.729016][T25160]        elevator_set_none+0xb5/0x140
[  390.731231][T25160]        blk_mq_update_nr_hw_queues+0x5e7/0x1a60
[  390.733873][T25160]        nbd_start_device+0x17f/0xb10
[  390.736085][T25160]        nbd_genl_connect+0x165b/0x1cf0
[  390.738396][T25160]        genl_family_rcv_msg_doit+0x22a/0x330
[  390.740892][T25160]        genl_rcv_msg+0x61c/0x7a0
[  390.742923][T25160]        netlink_rcv_skb+0x232/0x4b0
[  390.745047][T25160]        genl_rcv+0x28/0x40
[  390.746947][T25160]        netlink_unicast+0x75c/0x8e0
[  390.749092][T25160]        netlink_sendmsg+0x813/0xb40
[  390.751252][T25160]        ____sys_sendmsg+0x972/0x9f0
[  390.753449][T25160]        ___sys_sendmsg+0x2a5/0x360
[  390.755578][T25160]        __x64_sys_sendmsg+0x1bd/0x2a0
[  390.757825][T25160]        do_syscall_64+0x15f/0xf80
[  390.760028][T25160]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  390.762656][T25160] 
[  390.762656][T25160] -> #2 (&q->q_usage_counter(io)#49){++++}-{0:0}:
[  390.766137][T25160]        blk_alloc_queue+0x546/0x680
[  390.768272][T25160]        __blk_mq_alloc_disk+0x197/0x390
[  390.770589][T25160]        nbd_dev_add+0x499/0xb50
[  390.772614][T25160]        nbd_init+0x168/0x1f0
[  390.774559][T25160]        do_one_initcall+0x250/0x870
[  390.776708][T25160]        do_initcall_level+0x104/0x190
[  390.778991][T25160]        do_initcalls+0x59/0xa0
[  390.780983][T25160]        kernel_init_freeable+0x2a6/0x3e0
[  390.783299][T25160]        kernel_init+0x1d/0x1d0
[  390.785255][T25160]        ret_from_fork+0x514/0xb70
[  390.787305][T25160]        ret_from_fork_asm+0x1a/0x30
[  390.789444][T25160] 
[  390.789444][T25160] -> #1 (fs_reclaim){+.+.}-{0:0}:
[  390.792106][T25160]        fs_reclaim_acquire+0x71/0x100
[  390.794349][T25160]        kmem_cache_alloc_noprof+0x40/0x650
[  390.796801][T25160]        __anon_vma_prepare+0xcb/0x4a0
[  390.799032][T25160]        __vmf_anon_prepare+0xe1/0x1b0
[  390.801257][T25160]        hugetlb_no_page+0x399/0x2100
[  390.803453][T25160]        hugetlb_fault+0x747/0x1510
[  390.805583][T25160]        handle_mm_fault+0x2007/0x3170
[  390.807834][T25160]        __get_user_pages+0x1683/0x2720
[  390.810099][T25160]        populate_vma_page_range+0x2be/0x3c0
[  390.812557][T25160]        __mm_populate+0x25f/0x390
[  390.814660][T25160]        vm_mmap_pgoff+0x3aa/0x4f0
[  390.816694][T25160]        ksys_mmap_pgoff+0x586/0x760
[  390.818874][T25160]        do_syscall_64+0x15f/0xf80
[  390.821021][T25160]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  390.823615][T25160] 
[  390.823615][T25160] -> #0 (&resv_map->rw_sema){++++}-{4:4}:
[  390.826785][T25160]        __lock_acquire+0x15a5/0x2cf0
[  390.828962][T25160]        lock_acquire+0x106/0x350
[  390.831020][T25160]        down_read+0x47/0x2e0
[  390.832908][T25160]        __get_user_pages+0x5e4/0x2720
[  390.835027][T25160]        __gup_longterm_locked+0x3db/0x1630
[  390.837390][T25160]        pin_user_pages+0x9d/0xd0
[  390.839441][T25160]        xdp_umem_pin_pages+0x11b/0x340
[  390.841597][T25160]        xdp_umem_create+0x631/0x8b0
[  390.843669][T25160]        xsk_setsockopt+0x860/0x990
[  390.845750][T25160]        do_sock_setsockopt+0x17c/0x1b0
[  390.847948][T25160]        __x64_sys_setsockopt+0x13d/0x1b0
[  390.850184][T25160]        do_syscall_64+0x15f/0xf80
[  390.852259][T25160]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  390.854832][T25160] 
[  390.854832][T25160] other info that might help us debug this:
[  390.854832][T25160] 
[  390.858760][T25160] Chain exists of:
[  390.858760][T25160]   &resv_map->rw_sema --> sk_lock-AF_INET6 --> &mm->mmap_lock
[  390.858760][T25160] 
[  390.863999][T25160]  Possible unsafe locking scenario:
[  390.863999][T25160] 
[  390.866947][T25160]        CPU0                    CPU1
[  390.869062][T25160]        ----                    ----
[  390.871123][T25160]   rlock(&mm->mmap_lock);
[  390.872888][T25160]                                lock(sk_lock-AF_INET6);
[  390.875638][T25160]                                lock(&mm->mmap_lock);
[  390.878217][T25160]   rlock(&resv_map->rw_sema);
[  390.880106][T25160] 
[  390.880106][T25160]  *** DEADLOCK ***
[  390.880106][T25160] 
[  390.883296][T25160] 2 locks held by syz.2.6345/25160:
[  390.885342][T25160]  #0: ffff88801f3516b0 (&xs->mutex){+.+.}-{4:4}, at: xsk_setsockopt+0x6d2/0x990
[  390.888981][T25160]  #1: ffff8881b5eaf178 (&mm->mmap_lock){++++}-{4:4}, at: xdp_umem_pin_pages+0xca/0x340
[  390.892937][T25160] 
[  390.892937][T25160] stack backtrace:
[  390.895318][T25160] CPU: 0 UID: 0 PID: 25160 Comm: syz.2.6345 Not tainted syzkaller #0 PREEMPT(full) 
[  390.895336][T25160] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  390.895344][T25160] Call Trace:
[  390.895353][T25160]  <TASK>
[  390.895362][T25160]  dump_stack_lvl+0xe8/0x150
[  390.895386][T25160]  print_circular_bug+0x2e1/0x300
[  390.895405][T25160]  check_noncircular+0x12e/0x150
[  390.895423][T25160]  __lock_acquire+0x15a5/0x2cf0
[  390.895437][T25160]  ? mt_find+0x481/0x630
[  390.895456][T25160]  ? mt_find+0x186/0x630
[  390.895479][T25160]  ? __pfx_mt_find+0x10/0x10
[  390.895497][T25160]  ? __get_user_pages+0x5e4/0x2720
[  390.895511][T25160]  lock_acquire+0x106/0x350
[  390.895524][T25160]  ? __get_user_pages+0x5e4/0x2720
[  390.895541][T25160]  down_read+0x47/0x2e0
[  390.895552][T25160]  ? __get_user_pages+0x5e4/0x2720
[  390.895564][T25160]  __get_user_pages+0x5e4/0x2720
[  390.895583][T25160]  ? lruvec_stat_mod_folio+0x6e/0x3e0
[  390.895599][T25160]  __gup_longterm_locked+0x3db/0x1630
[  390.895615][T25160]  ? xdp_umem_pin_pages+0xca/0x340
[  390.895632][T25160]  pin_user_pages+0x9d/0xd0
[  390.895646][T25160]  xdp_umem_pin_pages+0x11b/0x340
[  390.895660][T25160]  xdp_umem_create+0x631/0x8b0
[  390.895676][T25160]  xsk_setsockopt+0x860/0x990
[  390.895688][T25160]  ? __pfx_xsk_setsockopt+0x10/0x10
[  390.895701][T25160]  ? __fget_files+0x2a/0x420
[  390.895713][T25160]  ? aa_sock_opt_perm+0xff/0x1a0
[  390.895766][T25160]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  390.895785][T25160]  ? __pfx_xsk_setsockopt+0x10/0x10
[  390.895798][T25160]  do_sock_setsockopt+0x17c/0x1b0
[  390.895842][T25160]  __x64_sys_setsockopt+0x13d/0x1b0
[  390.895859][T25160]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  390.895873][T25160]  do_syscall_64+0x15f/0xf80
[  390.895889][T25160]  ? trace_irq_disable+0x3b/0x140
[  390.895910][T25160]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  390.895923][T25160] RIP: 0033:0x7f78c579cdd9
[  390.895939][T25160] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  390.895949][T25160] RSP: 002b:00007f78c6664028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  390.895964][T25160] RAX: ffffffffffffffda RBX: 00007f78c5a15fa0 RCX: 00007f78c579cdd9
[  390.895974][T25160] RDX: 0000000000000004 RSI: 000000000000011b RDI: 0000000000000006
[  390.895981][T25160] RBP: 00007f78c5832d69 R08: 0000000000000020 R09: 0000000000000000
[  390.895989][T25160] R10: 0000200000000140 R11: 0000000000000246 R12: 0000000000000000
[  390.895997][T25160] R13: 00007f78c5a16038 R14: 00007f78c5a15fa0 R15: 00007ffc6699e918
[  390.896011][T25160]  </TASK>
[  391.487785][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  392.527788][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  393.557889][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  394.597876][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  395.637889][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  396.687818][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  397.717771][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  398.767750][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  399.807809][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
