last executing test programs:

1.2686802s ago: executing program 1 (id=18242):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="bc000000", @ANYRES16=r1, @ANYBLOB="8304000000000000000001000000a40002800c0001800800010006000000defe0180080001200500000008000100000000002c00018008000100020000000800010007000000080001000800000008000188a2000014000180080001000500000008000100030000003c000180080001000700000008000100070000000800010008000000080001000800000008000100010000000800010004fdff0008000100040000000400018004000180"], 0xbc}}, 0x8004)
socket$rxrpc(0x21, 0x2, 0x2)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000040))
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0xc)
socket$netlink(0x10, 0x3, 0x0)
ioctl$XFS_IOC_START_COMMIT(r2, 0x80585882, &(0x7f0000000240))
r3 = socket(0x18, 0x1, 0x46)
bind$inet(r3, &(0x7f00000000c0)={0x1d, 0x4e20, @loopback}, 0x10)
clock_gettime(0x0, &(0x7f0000000000))
r4 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r4, 0x0, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2800000010000108fdffffff0000000800000000", @ANYRES32=0x0, @ANYBLOB="000000002104000008001b0000000000"], 0x28}, 0x1, 0x0, 0x0, 0x4040000}, 0x8024)
r6 = socket(0x10, 0x2, 0x0)
setsockopt$inet6_group_source_req(r6, 0x29, 0x2e, &(0x7f0000000080)={0x6, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x4e20, 0xfffffffe, @empty, 0x8}}}, 0x108)
r7 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=@newqdisc={0xec, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xc3}, {}, {0xe, 0xd}}, [@TCA_STAB={0xa4, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x7, 0xf8, 0xff, 0x6, 0x2, 0xfffffffb, 0x800}}, {0x4}}, {{0x1c, 0x1, {0x0, 0xf, 0xb919, 0x1, 0x1, 0x80000001, 0xdd, 0x6}}, {0x10, 0x2, [0x6, 0xec8, 0x2, 0x2, 0x8d, 0x1]}}, {{0x1c, 0x1, {0x0, 0x6, 0x9, 0xed5f, 0x0, 0x4, 0x2, 0x4}}, {0xc, 0x2, [0x83, 0x7, 0x7, 0x2]}}, {{0x1c, 0x1, {0x3, 0xc, 0x3, 0x0, 0x1, 0x5, 0x7fffffff, 0x5}}, {0xe, 0x2, [0x6, 0x1000, 0x7, 0x3, 0x5]}}]}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x11}, {0x4, 0x1b}}]}]}, 0xfffffffffffffe62}}, 0x0)
readv(r4, &(0x7f0000000200)=[{&(0x7f0000001b80)=""/4096, 0x1000}], 0x1)
sendmsg$can_bcm(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[], 0x80}}, 0x0)
r8 = socket(0x10, 0x2, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r8, 0x10e, 0xc, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_route(0x10, 0x3, 0x0)
recvmsg(r9, &(0x7f0000001700)={0x0, 0x0, 0x0}, 0x0)

604.326383ms ago: executing program 0 (id=18253):
r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000001800)=ANY=[@ANYBLOB="0a00000016000000b30000007f"], 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xb, &(0x7f0000000100)=ANY=[@ANYBLOB="18030000000000000000000000000000851000000600000018100000", @ANYRES32=r0, @ANYBLOB="00000000000000000700000001000000180000000000010000000000000000009500000000000000970301000007000095"], &(0x7f0000000300)='syzkaller\x00'}, 0x94)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x4000000, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="020f0000050000000000efff0000000003000500000000007321fa"], 0x28}}, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r2, 0x6, 0x2a, &(0x7f0000000000)=0x100000001, 0x4)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="740000001000210400000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="adffa8886004000024001280090001007866726d000000001400028008000100010000000800020011000000050021000000000008000a00", @ANYRES32, @ANYBLOB='\n\x00:'], 0x74}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000200)={'vcan0\x00', <r3=>0x0})
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000580)={'syztnl1\x00', &(0x7f0000000500)={'syztnl0\x00', <r4=>0x0, 0x4, 0x4, 0xc, 0x80000001, 0x31, @ipv4={'\x00', '\xff\xff', @loopback}, @loopback, 0x8, 0x8, 0x3}})
connect$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x4e20, 0x2, @loopback, 0x101}, 0x1c)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f00000005c0)={'batadv_slave_1\x00', <r5=>0x0})
r6 = socket(0x10, 0x3, 0x0)
r7 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'ip6gretap0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x25dfdbff, {0x60, 0x0, 0x0, r8, {0x0, 0x4}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x1}]}}]}, 0x3c}}, 0x44040)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000600)={'wg0\x00', <r9=>0x0})
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000006c0)={'syztnl2\x00', &(0x7f0000000640)={'syztnl2\x00', <r10=>0x0, 0x29, 0x81, 0x7a, 0x53f, 0x3, @local, @remote, 0x7800, 0x7817}})
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000007c0)={'syztnl0\x00', &(0x7f0000000700)={'erspan0\x00', <r11=>0x0, 0x40, 0x700, 0x1, 0xff, {{0x1c, 0x4, 0x0, 0x22, 0x70, 0x65, 0x0, 0x3, 0x0, 0x0, @private=0xa010101, @rand_addr=0x64010100, {[@generic={0x112, 0xe, "606b690c8da91d50adb7f1c3"}, @generic={0x82, 0x8, "751d99303dae"}, @cipso={0x86, 0x46, 0x3, [{0x0, 0xa, "a838fb5b55b2df5b"}, {0x5, 0x11, "2b4297f37e40c37b8d6211cfd79944"}, {0x6, 0xf, "904616c427a5226bcd01980d45"}, {0x1, 0x12, "afe0e15710030dbc30f19d889392f3f5"}, {0x0, 0x4, 'EY'}]}]}}}}})
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000a40)={@initdev, @local, <r12=>0x0}, &(0x7f0000000a80)=0xc)
r13 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r14 = syz_genetlink_get_family_id$nfc(&(0x7f0000003400), r13)
sendmsg$NFC_CMD_START_POLL(r13, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000003500)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r14, @ANYBLOB="010025bd7000ffdbdf250600000008000100", @ANYRES32=0x0, @ANYBLOB="ffff000000000000"], 0x24}, 0x1, 0x0, 0x0, 0x4004}, 0x802)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000ac0)=@newtaction={0x248, 0x30, 0xffff, 0xfffffffe, 0x0, {}, [{0x234, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x5, 0x0, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x6}}}]]}, {0x4}, {0xc}, {0xc}}}, @m_mirred={0x1c4, 0x0, 0x0, 0x0, {{0xb}, {0x144, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x7, 0x3, 0x5}, 0x3, r3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x100, 0xc7d, 0xffffffffffffffff, 0x9, 0x1}, 0x2, r4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xb, 0x1, 0x8, 0x80000001, 0x9}, 0x1, r5}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xa, 0x3ff, 0x0, 0x3, 0x1}, 0x3, r8}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xb04, 0x1, 0x0, 0x90d, 0x9}, 0x2, r9}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x5, 0x9, 0x20000004, 0x4, 0x2}, 0x3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x7ff, 0xf290, 0x6, 0x5, 0xc028}, 0x3, r10}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x10cbb7d6, 0x9, 0x10000000, 0x9efe, 0x6}, 0x4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x4, 0xe, 0xffffffffffffffff, 0x200, 0xd}, 0x4, r11}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x247ec413, 0x8, 0x3, 0x3, 0x9}, 0x1, r12}}]}, {0x56, 0x6, "c653d89db1acd288b19d4c77aa14e5f5ac60ef12fc213079840642f123227a3a8699fd45965d1c9b3f44b07b026fa8941a484bdc7df3954066e2cc652048f34f20d990d7266e6436f7838162466516153908"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}]}]}, 0x248}}, 0x0)
r15 = socket$inet_tcp(0x2, 0x1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x1, 0x4, &(0x7f0000000d40)=ANY=[], &(0x7f0000000c40)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94)
ioctl$sock_inet_SIOCSARP(r15, 0x8955, &(0x7f00000003c0)={{0x2, 0x4e22, @empty}, {0x1, @multicast}, 0x7, {0x2, 0x4e20, @private=0xa0100fd}})
socket$netlink(0x10, 0x3, 0x0)
r16 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route_sched(r16, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=@newtaction={0x218, 0x30, 0x51b, 0x0, 0x0, {}, [{0x204, 0x1, [@m_skbmod={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24}, @TCA_SKBMOD_SMAC={0xa, 0x4, @multicast}, @TCA_SKBMOD_SMAC={0xa, 0x4, @broadcast}]}, {0x4, 0x14}, {0xc}, {0xc, 0x6}}}, @m_ct={0xa8, 0x0, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x100000}}]}, {0x68, 0x6, "9f9b3fc2ddc24af6f0e10a015de0eee6fc0900c6e7d94c24ec368c475d7486514b6d2677226afad90c7d6c3ad311a9dee1f031afe3919c34f8636d67f86e3ebd80589ce5f55db46e88a14f002788b194b3ccfdf8c4b86ba094bef19b3a0cddb8831b84bb"}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}, @m_tunnel_key={0xec, 0x0, 0x0, 0x0, {{0xf}, {0x54, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @mcast2}, @TCA_TUNNEL_KEY_PARMS={0x1c}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6}, @TCA_TUNNEL_KEY_NO_CSUM={0x5}]}, {0x69, 0x6, "9c52af17f462814d38170f632f883a02e6a90db7e490d2b8bd19fcb7872621f629a33220c9b5f21052aa40bb9616cbe2ae3debc7ea8dcc879c436c50c4b2e001d6b687516d71ee6b27e990693d6b67974963a28a690808e192e0ecf03e7f3535c9492c8e09"}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x218}}, 0x0)
sendmsg$nl_route(r16, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[], 0x4c}}, 0x4000894)

421.098322ms ago: executing program 0 (id=18256):
ioctl$XFS_IOC_AG_GEOMETRY(0xffffffffffffffff, 0xaf01, &(0x7f0000000040)={0x4, 0x10, 0x3, 0x0, 0xbb, 0xf, 0x3})

419.976042ms ago: executing program 0 (id=18258):
ioctl$XFS_IOC_AG_GEOMETRY(0xffffffffffffffff, 0x4008af00, &(0x7f0000000040)={0x4, 0x10, 0x3, 0x0, 0xbb, 0xf, 0x3})

416.118234ms ago: executing program 1 (id=18259):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$XFS_IOC_AG_GEOMETRY(r0, 0xaf01, &(0x7f0000000040)={0x4, 0x10, 0x3, 0x0, 0xbb, 0xf, 0x3})

341.478111ms ago: executing program 0 (id=18260):
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0)
r1 = socket(0xa, 0x5, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000b40)=@mangle={'mangle\x00', 0x64, 0x6, 0x640, 0x2c8, 0x3b8, 0x488, 0x3b8, 0x488, 0x570, 0x570, 0x570, 0x570, 0x570, 0x6, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @private0, [], [0xffffff00, 0x0, 0x0, 0x1f9814788dbf7ab2], 'veth1\x00', 'syz_tun\x00'}, 0x11e, 0xa8, 0x1d0, 0x1f000000, {0x0, 0x7}}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x0, 'unconfined\x00'}}}, {{@ipv6={@loopback, @dev, [], [], 'batadv_slave_0\x00', 'macvlan1\x00', {}, {}, 0x2b}, 0x0, 0xd0, 0xf8, 0x7400, {}, [@inet=@rpfilter={{0x28}, {0x8}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@mcast2, @ipv4=@local, 0x38, 0x20, 0x32}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x1, @ipv4=@multicast1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6a0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x4001, 0x3, 0x228, 0x0, 0xb, 0x148, 0x0, 0x148, 0x208, 0x240, 0x240, 0x208, 0x215, 0x3, 0x0, {[{{@ip={@local, @multicast1, 0x0, 0xffffff00, 'ip6erspan0\x00', 'nr0\x00', {}, {0xff}, 0x21, 0x0, 0x10}, 0x2e8, 0x70, 0xb8, 0x0, {0xff0f000000000000}}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x7, 0xab, 0x6, 'syz1\x00', {0x4}}}}, {{@ip={@broadcast, @remote, 0x0, 0x0, 'team0\x00', 'netpci0\x00', {}, {}, 0x0, 0x1}, 0xec010000, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x4, 0x5, 0x22000000, 0xfffffffa, '\x00', 'syz1\x00', {0x3}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x288)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$devlink(&(0x7f0000000300), 0xffffffffffffffff)
r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3)
ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=<r5=>0x0)
sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r5], 0x1c}}, 0x840)
write$nci(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="410404"], 0x7)
socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'lo\x00', <r8=>0x0})
sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="340000001400010000000000000000000a00a100", @ANYRES32=r8, @ANYBLOB="14000100fff1ffffffffffffff00000000000001080008000204"], 0x34}}, 0x0)
r9 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'lo\x00', <r10=>0x0})
sendmsg$nl_route(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000640)=ANY=[@ANYBLOB="3400000014000b032bbd7000fcdbdf250a281000", @ANYRES32=r10, @ANYBLOB="080008000604000014000100ff"], 0x34}, 0x1, 0x0, 0x0, 0x891}, 0x0)

340.344593ms ago: executing program 1 (id=18261):
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0ff010000ffdba4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d0f65acc0d06d1a1434e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622e03b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab0300817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c690220b87b20581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd713089856f756436303767d2e24f29e5dad9796edb697a8ad004eea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014751c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff22dc518afc9ffc2cc788bee1b47683db01a2f9398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa407e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae526aca54183fb01c73f979ca9857399537f5831808b0dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a0c93d47018c12e7ba8188a22e8b15c3e233db00002e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e4845535a8b90dfae158b94f50adab188dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeef0005b4896c7aabf4df517d90bdc01e73835d50200a90800c66ee2b1ad76dff9f9003f07000099d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987595ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e547f7ad33850d9feccd0111a2e3700845dee734fe7da3770845cf442d488afd80e17000000000000000000000000000000000000000000000000000005202000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a12489c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db08407081c6281e2d8429a8639034a75f4c7df3ea8fc2018d07af14915f29b719f54926fc32468f65bd06b4092140faed0c329be610c3082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b4c8787361f3289f86ae826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce1d9bc7ef3e3f40c14089c82759106f422582b42e3e8484ea5a6ad9aa520000afe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da357f9e93ce055019c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137ff47257f164391c672b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b5589829b6b0679b5d6fccbecfae5553d9950d48c774eaa35b24fce69a20d8bc410d9f48bf7eac90529cd6af061c9e53addddc620ce73c5d177e3d097159f2768636fc10276c6a0adc57483b3f7083f66b87ef296ee85e9bb70a3009a5d30f479e293a3302e11350ea857b37e76ca2f50378e4092ce2c574ad278b9b7b717c571afb2077b019fd9d89efd59b41f051ec5a8ff87ecc8df917a1e386d849fcd10e2f9ca52e02339c2f4666b0c545e25f1cd62421c28d25994be0cff7271a0dee38d7ac4ac736b090e1d29f981fd9086e4000000000000646174b55d251f7f8ca5ccc22a5efb33b237eff5597a3c3a5f3a9bb54abb40e54593e1a7ce4cfa17b3c3fe91c06363496341eae20dcc59b6179b32ddddef5c34000096a54c0c571a91878f61f74912e2299e5501d4d6943bfd74c856511726f0ac8f7d17f1c6b4451c1bcdc6b6e1700e4cd87709d97afc5423c96fa981873d4369b04bbf1fb9f68f17991540868e408201ad1a74179e489aa61f021a437a3fa935588be2068f7ff9b253106326fde795e530b93626cc68e06e602198724249b4445eef08401cd1a3e266db41474e69902e4d8f5da4e94cc36794258fd4032de7ab36bc24c5efd5c8495c1ccd580033c55725f2d60354f8ad5914a0155eaa743350ddb388f486b6de0549ef3b1b3c3b7d4d3a830ff39885776119408029be3788dd8422b1ab7b4c9d5b7d8682fd759c713108e1bdfc64b9121bbf07099def5c0ce3c861ae4b5cad8bba5a0b6059b9ef90c2f96a59320309e25df89484522bb1d6eaa92164f9e4042cb689a45a898354c17b08705205a9189772bcbcb6414e44b33a2470d3bc16f761c33f565b9da5e7991ad8482579cc1b16c1fcec815a5482ae8b1779c5e339971a6ec1217bcfd1ef24284de8a0a9f068f297037d6478c2434a9a18dcc6c7c791e444a79d7ce37f9cf2826b47ad8ca6a2fa254aa02cd098026798a6d336348af0fc11fa2809a5ebbe17ca4d0f889d518f64ee50f562b5fdb1f76d4a7fe14701f8ed0c6a55d66a6efea3e449e6b478abc5b196dd5308cb20c4e2a0bd702651bb39f10523102dcd8ece692159028f314e0d6bfa400475c6699fdc40efe0948e3cef7419a7f113134e5ee20fd87c4521ccfbd32d6f147f743d30866bdd86ca8bf0c7bcc475f4ed53517aaa51f1c151d859a7f0b53abd332c84bdad313e82ac3777a6f7f649ff8a25f6dfe09cb29213896b49a825257bf143e9fa3bbd47009e66fe5705b3ef2b40a182e408c680727d64e00e1ce508f8fd64ac6c84ccc28fc333067de63b9bb5daaa12ce60ee3779ded79651be69d2a413cd948a873dd7ad7017b150828cf100d3df8537f22aff58343c9ee966fceb594bbe10b911427f76a25a219be2f85287b7f83d323a30991067ad1369792166062085ff20c5fb9f6e4f78dd09c7d2d6ca3c8a5d0d26ccbe576f44a1bc94194817"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x38, r2, 0x1, 0x0, 0x2, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}]}, 0x38}}, 0x0)
r3 = syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff)
socket$nl_route(0x10, 0x3, 0x0) (async)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r6=>0x0})
sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2400000070000100000000000000000007000000", @ANYRES32=r6, @ANYBLOB="0c000280060001"], 0x24}}, 0x0) (async)
sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2400000070000100000000000000000007000000", @ANYRES32=r6, @ANYBLOB="0c000280060001"], 0x24}}, 0x0)
socket(0x10, 0x3, 0x0) (async)
r7 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000240)={0x1, 0x0, 0x0, 0x80}, 0x10)
write(r7, &(0x7f0000000000)="1c0000001a005f0214f9f407000904001f0000000040000000000000", 0x1c)
socket$netlink(0x10, 0x3, 0x0) (async)
r8 = socket$netlink(0x10, 0x3, 0x0)
r9 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r10=>0x0})
sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001300)=@newtfilter={0x984, 0x2c, 0x400, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, r10, {0xc, 0xc}, {0x6, 0x9}, {0xfff1, 0xfff1}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x68}}, @TCA_RATE={0x6, 0x5, {0x2, 0xb8}}, @TCA_RATE={0x6, 0x5, {0xc9, 0x6}}, @TCA_CHAIN={0x8, 0xb, 0x7f}, @filter_kind_options=@f_fw={{0x7}, {0x938, 0x2, [@TCA_FW_POLICE={0x87c, 0x2, [@TCA_POLICE_RATE64={0xc, 0x8, 0x2}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xf58}, @TCA_POLICE_RATE={0x404, 0x2, [0x8, 0x800, 0x2, 0xac2, 0xfffffff7, 0x8, 0x7, 0x4, 0x4, 0x80000000, 0x20, 0x1, 0x5, 0x7fffffff, 0x3, 0x0, 0x4, 0x1, 0x4, 0x8, 0x4, 0x70dc, 0x6, 0x9, 0x6, 0x5, 0x0, 0x1000, 0x4, 0x400, 0x5, 0x428, 0x79, 0x0, 0x5, 0x6, 0xffff, 0x3, 0x8000, 0x7, 0x0, 0x6, 0x7, 0x7fff, 0x99e, 0x2, 0x5, 0x0, 0x7fffffff, 0x0, 0x1, 0x6, 0x100, 0x5, 0xc19, 0xa, 0x2, 0x80, 0x3, 0x5a, 0xff, 0x6, 0x3, 0xaa54, 0x7, 0x9, 0x84, 0x0, 0xfff, 0x80, 0x5, 0x2, 0x80000000, 0x1000, 0x8, 0xd, 0x397, 0x8, 0x5445, 0xffffffff, 0x6, 0x2, 0x6, 0x7, 0x6, 0x2, 0x32e1, 0x0, 0x1c, 0x1000, 0xb, 0x8, 0x2, 0x0, 0x61493ec2, 0x5, 0x6, 0x5, 0x40, 0xffffffff, 0x80, 0xc2, 0xdd, 0x1, 0xfc, 0xc, 0x7, 0x1, 0x5, 0x4d70, 0x6, 0x2, 0x40, 0x1ff0000, 0x9, 0x3, 0x80000001, 0xffff7fff, 0x3, 0x10000, 0xe, 0xb5, 0x2, 0x6, 0x0, 0x1, 0x9, 0xd53, 0x9, 0xb, 0x6, 0x5, 0x1, 0xf7, 0x3, 0x8, 0xbb, 0x4, 0x9, 0x2, 0x5, 0x49f2, 0x2, 0xe6, 0xa, 0x0, 0x7, 0x3, 0x2, 0x3cf, 0x401, 0xe80, 0x80000000, 0x3, 0x2, 0x66, 0x400, 0xffffffff, 0x9, 0x0, 0x3, 0x5, 0x3, 0xaa0, 0x5, 0x2, 0x8020000, 0x81d, 0x1, 0x6, 0x4, 0x6, 0x101, 0x8, 0x0, 0xb89c, 0xfffffffe, 0x5, 0x18, 0x7, 0x675, 0x9, 0x0, 0x3, 0x6, 0xc000000, 0x52, 0x2, 0x3, 0x57da, 0x8, 0x4, 0x7, 0xa, 0x3, 0x4, 0x2, 0x9, 0x0, 0x6, 0xefd, 0x9, 0x30b, 0x2e, 0x9, 0x4869, 0x3f, 0x3ff, 0x5, 0x1, 0xfffffffb, 0xfffffff8, 0xe, 0xb, 0x1, 0x628c, 0x400, 0x10001, 0x8, 0x474, 0x5, 0x2, 0xffffffff, 0x8, 0x8000, 0x6, 0x8, 0x10000, 0x5, 0x98, 0x0, 0x7, 0x27c, 0x1, 0x3c2e, 0x10, 0x5, 0x4, 0x2, 0x4, 0x9148, 0x2, 0x3, 0x6, 0x4, 0x1, 0x10, 0x1, 0x7fffffff, 0x400, 0xfffff7ff, 0x7f, 0x8, 0x10000, 0x7, 0x3]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x1, 0x4, 0x400, 0x474, 0x1, {0x4, 0x0, 0x8, 0x51f, 0xe253}, {0x0, 0x0, 0x8001, 0x6, 0x3, 0x5}, 0x9, 0x8, 0xffffffff}}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x5}, @TCA_POLICE_RATE={0x404, 0x2, [0x3, 0x6, 0x1, 0xce, 0x6, 0x4, 0x5f24, 0x5cd0, 0x7fe0000, 0x44d, 0x9, 0x8, 0x800, 0x7f, 0x5, 0x4, 0xad8b, 0xf, 0x7ff, 0x1, 0x38, 0x6, 0x7ff, 0xd, 0x45aed3d1, 0x7, 0x7, 0x1000, 0x3, 0x0, 0x42, 0xffff, 0x7f, 0xffffff2a, 0x4000000, 0xfffffff7, 0x1, 0xfffffff7, 0x4, 0x0, 0x1, 0x3, 0x35cf5d5d, 0xe60, 0xe, 0x10000, 0x8, 0x3, 0xc, 0x7, 0x400, 0xffff, 0x4, 0x9, 0xfffff90d, 0x6, 0x6, 0x0, 0x3, 0x8001, 0x0, 0x7, 0x800, 0xa, 0xfffffff9, 0x10, 0x10000, 0xe, 0x3, 0x1, 0x0, 0x3, 0xffff8000, 0xfd, 0x9, 0x7095, 0x0, 0x7, 0x5, 0x800, 0x0, 0x7, 0x7ff, 0x1, 0x8, 0x3, 0x5, 0x7ff, 0x1e5, 0x7, 0xed4, 0x1ff, 0x81, 0x9, 0x9, 0x5, 0x5, 0x80000000, 0x1, 0x10001, 0x4, 0x4, 0x80000001, 0x2, 0x1, 0x8, 0x3, 0xb, 0x1, 0x8, 0xd, 0x19d, 0x7ff, 0x6, 0x80000001, 0x4b9, 0xbf8, 0x5, 0x5, 0x800, 0x3, 0x10001, 0x4, 0x1, 0x6f5, 0x2, 0x7f, 0x7, 0x2, 0x200, 0x9, 0xb, 0x7, 0x40, 0xa26, 0x6, 0x9, 0x1, 0xfffffff8, 0x0, 0x8001, 0x9, 0x3ff, 0x9, 0x9, 0xced, 0x5bcc, 0xf, 0x4, 0x4013, 0x9, 0xd, 0x1000, 0x241, 0xfff, 0x6, 0x6, 0x84e8, 0x4c, 0x8, 0x46, 0xd, 0x6, 0x7fffffff, 0x4, 0x6000, 0xc4, 0x5, 0x1, 0x100, 0x7, 0xdfd6, 0x80000001, 0x9, 0x8, 0x1, 0xd, 0x3, 0x7, 0x40, 0x7, 0x100, 0xa, 0x7, 0x5, 0x2, 0x0, 0x1000, 0x40, 0x1, 0x80008, 0x400, 0x1, 0x80, 0x6ea, 0xfff, 0xdc, 0xb, 0x7, 0x8, 0x5, 0x9, 0x6, 0x2, 0xfffffffd, 0x3, 0x1, 0x3, 0xd1, 0x1, 0x8, 0x9, 0x9, 0xd, 0x5, 0x6, 0x1ff, 0x2, 0x9, 0x63c4d52, 0x2, 0x8, 0xffffffff, 0x10001, 0x0, 0x2, 0xfffff733, 0x400, 0x100, 0x40, 0x4, 0xa15, 0x9, 0x7fffffff, 0x3, 0xf, 0x783, 0x10, 0x9, 0xd5, 0x8, 0x9, 0x0, 0xf, 0x0, 0x2, 0x7fff, 0x9a, 0x800, 0xd, 0xff, 0x7, 0x9, 0x0, 0x5, 0x7]}, @TCA_POLICE_RESULT={0x8, 0x5, 0xfffffff8}, @TCA_POLICE_RATE64={0xc, 0x8, 0xc}]}, @TCA_FW_CLASSID={0x8, 0x1, {0x2, 0x1}}, @TCA_FW_POLICE={0x9c, 0x2, [@TCA_POLICE_TBF={0x3c, 0x1, {0x8000, 0x0, 0x9, 0x9, 0x10b0534f, {0x6, 0x0, 0x2, 0x8, 0x2, 0x7d12}, {0xb, 0x1, 0x1, 0xe7, 0x0, 0x8001}, 0x589, 0x2800000, 0x2}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x741}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x6}, @TCA_POLICE_TBF={0x3c, 0x1, {0xffffffff, 0xd, 0x6, 0x1, 0x5, {0x2, 0x1, 0x3, 0x3, 0x401, 0x81c}, {0x1, 0x0, 0x1, 0xbe64, 0x22, 0xfffffff8}, 0x0, 0x8, 0x7}}, @TCA_POLICE_RATE64={0xc, 0x8, 0x3d2}]}, @TCA_FW_INDEV={0x14, 0x3, 'pimreg\x00'}]}}]}, 0x984}}, 0x20040084)
sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000140)=@newqdisc={0x94, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r10, {0xffff}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x5, 0x0, 0xf, 0x10, 0x2, 0x4, 0x2, 0xf, 0x2, 0x3, 0x7, 0x8, 0x4, 0x10, 0x4], 0x3, [0xb, 0x3, 0xad1e, 0x6002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0x4d, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x1, 0x9, 0x5, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x1]}}]}}, @TCA_RATE={0x6, 0x5, {0x1, 0x5}}]}, 0x94}, 0x1, 0x0, 0x0, 0x400dc}, 0x0)
bind$can_j1939(r7, &(0x7f0000000200)={0x1d, r10, 0x2, {0x1, 0x0, 0x1}, 0x1}, 0x18) (async)
bind$can_j1939(r7, &(0x7f0000000200)={0x1d, r10, 0x2, {0x1, 0x0, 0x1}, 0x1}, 0x18)
r11 = socket$packet(0x11, 0x3, 0x300)
r12 = socket(0x10, 0x2, 0x0)
sendmsg$nl_route(r12, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0)
getsockname$packet(r12, &(0x7f0000000140)={0x11, 0x0, <r13=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x56)
sendmsg$nl_route(r12, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB="4000000010003904000000000000000080040000", @ANYRES32=r13, @ANYBLOB="01980000000000002000128008000100736974001400028006000e000600000008000100", @ANYRES8=r12], 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x0)
sendto$packet(r11, &(0x7f0000000600)="05d936277c6f54220002097844ffcf8bd1846f7f83477ca1b278e3e4018a34844b9d62cbd7cd2a62", 0x28, 0x8c1, &(0x7f00000000c0)={0x11, 0x86dd, r13, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14)
sendmsg$TEAM_CMD_NOOP(r1, &(0x7f0000000540)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000500)={&(0x7f0000000380)={0x160, r3, 0x4, 0x70bd27, 0x25dfdbfe, {}, [{{0x8, 0x1, r6}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}, {{0x8, 0x1, r10}, {0xf8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r13}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}]}}]}, 0x160}, 0x1, 0x0, 0x0, 0x20000800}, 0x80)
ioctl$SIOCSIFHWADDR(r0, 0x8923, &(0x7f00000000c0)={'team_slave_1\x00', @remote}) (async)
ioctl$SIOCSIFHWADDR(r0, 0x8923, &(0x7f00000000c0)={'team_slave_1\x00', @remote})

263.663777ms ago: executing program 2 (id=18263):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x20, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x0, 0x3, 0x5}}]}, @action_gd=@TCA_ACT_TAB={0x43, 0x1, [{0x10, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3e}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x2004c8d8)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xa, 0x8}, {0xffff, 0x2}, {0x6, 0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x4, 0xc0000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x3, 0x1b}, {0x2, 0xe}, {0x0, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_LIMIT={0x8, 0x1, 0x101}, @TCA_FQ_PIE_ECN_PROB={0x8, 0x9, 0x3e}]}}]}, 0x44}}, 0x4814)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
shutdown(r0, 0x0)
recvmmsg(r0, &(0x7f0000001b00)=[{{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, 0x0}, 0x1}], 0x2, 0x40018022, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22e8a65c15}, 0x4008840)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), 0xffffffffffffffff)
sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f00000006c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="00032a0000080004000500"/22], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x8c5)
ioctl$sock_netdev_private(r1, 0x89f2, &(0x7f0000000400)="6b8d0033c28ffcf7f6f1d66db09ea87ae1122997003bff59b7ff2f79ba684c475431d55021057552a857b0bcb3dcf6688a74404a5c37aa9761ef2e403eeaefaa7365d3294bf70224b85dfe99901b9125461d8e4835dbf4236e77224a77b4be7e074cf35c1b40fb42bec34ce0f19573b0f9a0b0503c60f179bef536bf745a4c1b114b06883ded542c91e30fdab9f7be5b3b2871cd833cacc00192874926a29d7e5ea78a42d3583cb0b5e62e2febdeab9fe46f964f03e68b10353e30c80a1979459b19d7badd8de33fbab3bd2a5d82f02cd78e0170a01f88a145a989941e2342b9a3ef9c042256f793c34a5cc532a8e651781790")
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@bloom_filter={0x1e, 0x3, 0x0, 0x3, 0x1000, 0x1, 0x77220394, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5, 0x5, 0x5}, 0x50)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000600)={r3, &(0x7f0000000500)="9f6a85139bb416baa8066cc6e67686e155362c07870679cd55f19bd8e80faeffc9512e7de5d1faa100a76156814697cef22f669590bcc6ff1e0553c3bbacd3f9ed753337659d8bc96d2430259bb69549311c81aeb2bc1e69", &(0x7f0000000580)=""/80}, 0x20)
sendmsg$nl_generic(r1, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x70, 0x32, 0x100, 0x70bd29, 0x25dfdbfd, {0xc}, [@generic="27bd19911811ca86c559e5606c42e48c2c8a4c082e87dfa9700245277b8dd25264c90b2fe4e0efc74799ad4c965b9d2777cd0b7d252114c9e33c64d846955cc2a152c3055a1bd220fb0941b666af6f41b3b5356bc830acea8e8380ae"]}, 0x70}, 0x1, 0x0, 0x0, 0x4}, 0x10008080)
sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0)

214.921601ms ago: executing program 0 (id=18264):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$can_raw(0x1d, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000180)={'vxcan1\x00', <r2=>0x0})
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
connect$bt_l2cap(r3, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="0010000007d00100200012800b0001006272696467650000100002800c002300ffffffffffffffff"], 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x0)
bind$bt_hci(r3, &(0x7f0000000000)={0x1f, 0x2, 0x1}, 0x6)
bind$can_raw(r1, &(0x7f0000000200)={0x1d, r2}, 0x10)
r5 = socket$inet(0x2b, 0x801, 0x0)
setsockopt$inet_tcp_int(r5, 0x6, 0x2e, &(0x7f00000000c0)=0xb1e0, 0x4)
socket$can_raw(0x1d, 0x3, 0x1)
sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x24, 0x11, 0x839, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r2, {0x1, 0xf}, {0xf, 0xa}, {0x3, 0xfff3}}}, 0x24}}, 0x80)

126.717443ms ago: executing program 2 (id=18265):
ioctl$XFS_IOC_AG_GEOMETRY(0xffffffffffffffff, 0xaf01, &(0x7f0000000040)={0x4, 0x10, 0x3, 0x0, 0xbb, 0xf, 0x3})

126.519439ms ago: executing program 2 (id=18266):
r0 = socket$netlink(0x10, 0x3, 0x0)
clock_gettime(0x0, &(0x7f0000000100))
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@newlink={0x48, 0x10, 0xffffff1f, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x15482, 0x35288}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x29}]}}}, @IFLA_MTU={0x8, 0x4, 0x2000}]}, 0x48}}, 0x0)
socket$netlink(0x10, 0x3, 0x0) (async)
clock_gettime(0x0, &(0x7f0000000100)) (async)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@newlink={0x48, 0x10, 0xffffff1f, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x15482, 0x35288}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x29}]}}}, @IFLA_MTU={0x8, 0x4, 0x2000}]}, 0x48}}, 0x0) (async)

77.674522ms ago: executing program 1 (id=18267):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$XFS_IOC_AG_GEOMETRY(r0, 0xaf01, &(0x7f0000000040)={0x4, 0x10, 0x3, 0x0, 0xbb, 0xf, 0x3})

75.393133ms ago: executing program 0 (id=18268):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
shutdown(r0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r2, &(0x7f00000001c0)={0x2, 0x1, @local}, 0x10)
socket$vsock_stream(0x28, 0x1, 0x0)
socket$vsock_stream(0x28, 0x1, 0x0)
r3 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$SOCK_DIAG_BY_FAMILY(r3, &(0x7f00000065c0)={0x0, 0x0, &(0x7f0000006580)={&(0x7f0000004d00)=ANY=[@ANYBLOB="2800000016001102000000000000000028f0795161b20000000000"], 0x28}}, 0x0)
connect$inet(r2, &(0x7f0000000480)={0x2, 0x4e22, @multicast1}, 0x10)
sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x30, 0x10, 0x1, 0x70bd25, 0x25dfdbf9, {0x0, 0x0, 0x600, 0x0, 0x48815, 0x40103}, [@IFLA_GROUP={0x8}, @IFLA_TXQLEN={0x8, 0xd, 0x3}]}, 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x137b}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GENEVE_PORT={0x6, 0x5, 0x4e20}, @IFLA_GENEVE_COLLECT_METADATA={0x4}]}}}]}, 0x40}}, 0x40800)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x14, 0x2, 0x6, 0x201, 0xa, 0x0, {0x0, 0x0, 0x2000}}, 0x14}}, 0x40880)
r6 = socket(0x2b, 0x1, 0x1)
setsockopt$inet6_MCAST_MSFILTER(r6, 0x29, 0x30, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x20000)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000000c0)={'wg2\x00', 0x10})
r8 = socket$kcm(0x2, 0xa, 0x2)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000440)={0x0, 0xffff}, 0x8)
ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
r9 = socket$igmp6(0xa, 0x3, 0x2)
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r9, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}})
write$tun(r7, &(0x7f0000000340)={@val={0x0, 0x22f0}, @void, @eth={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @val={@void, {0x8100, 0x0, 0x0, 0x20}}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1}, {0x0, 0x17c1, 0x9c, 0x0, @wg=@initiation={0x1, 0x1, "626abd460020000000000079a700000040000000000000000000000000002000", "d89bc63b93b6d4092beb790344022cb8c49cc8022b5296be4673efd95df3fdc5a71ed1c7bc91dcf39f5550601185fa4a", "fcc815bc21b9e7be1497a9edd45189dacc307c357402a8c5a9c5b5b0", {"6cbc715d9569f2b2ee1cf210c588b607", "23e0cc4e1fdd8d6d18e2e9ee4939689f"}}}}}}}}, 0xc6)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, 0x0, 0x0)
sendto$inet(r0, &(0x7f00000004c0)='<', 0x381, 0x805, 0x0, 0x0)

75.270858ms ago: executing program 2 (id=18269):
ioctl$XFS_IOC_AG_GEOMETRY(0xffffffffffffffff, 0x4008af60, &(0x7f0000000040)={0x4, 0x10, 0x3, 0x0, 0xbb, 0xf, 0x3})

69.59987ms ago: executing program 1 (id=18270):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000000)={{r1, <r2=>0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000280)='%+9llu \x00'}, 0x7f)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r2, r1}, 0x4)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x16, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000341218007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r3, 0x0, 0xe, 0x0, &(0x7f0000000040)="f4b84de4115d64244a0e839e8971", 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
ioctl$XFS_IOC_AG_GEOMETRY(r0, 0xaf01, &(0x7f0000000040)={0x4, 0x10, 0x3, 0x0, 0xbb, 0xf, 0x3})
ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r2, 0x80489439, &(0x7f0000000200))

1.654518ms ago: executing program 2 (id=18271):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b80)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x6}]}]}, @NFT_MSG_DELFLOWTABLE={0x2c, 0x18, 0xa, 0x101, 0xb00, 0x0, {0x1, 0x0, 0x4}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x1}]}], {0x14, 0x10}}, 0xb4}}, 0x0)
ioctl$XFS_IOC_AG_GEOMETRY(r0, 0x4001af84, &(0x7f0000000040)={0x4, 0x10, 0x3, 0x0, 0xbb, 0xf, 0x3})

996.333µs ago: executing program 2 (id=18272):
socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (rerun: 32)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async)
ioctl$TUNSETLINK(r0, 0x400454cd, 0x6) (async, rerun: 32)
r1 = socket$kcm(0x2, 0xa, 0x2) (rerun: 32)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000001c0)={'syzkaller1\x00', @broadcast})
close(0x4)
sendmsg$kcm(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)="19da9ea1abf77614e9f301e2", 0xc}, {&(0x7f0000000080)="cbd307dd75a215f517251fdac7bd7bfef7c678cea38c0dd793c0641bc027e077c3548ccb0caf1e2a8333c4e22bf051b51a4314dd1f1d24cfd10af1f6d8fed656226998481d7cec9cd2b84efa53ca486252323de87b13b90d0d66cb7d1c8b8a1220cf1299e02b93b17210bf35195ba6429280f6928fa2f3841296609666f0508b4c5f23198457751f54840fcee6c121f1664fbc16b877497ba60df320b454333b4b59394496d4e1cdb3e9f2c7e8bffb013f184885e8e4840f968decd80c0d0e4b7e8ef8", 0xc3}], 0x2, &(0x7f0000000240)=[{0x20, 0x2d, 0x5, "f4d6f866cc9e90eb7d9c1f475202"}, {0x110, 0x10d, 0xf, "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"}, {0x88, 0x10b, 0x2, "bb76bcbff369733ca048038b52dd318cc8ef7579290272acaf4791f1e909aa6e1e856ff1e9f723e8650bb11897051238766cc3161ce77bcc89460add63a6977f04e0b2183302faec660a882a2be20b810f67f416473d8018a78b06160e23c2e1c34d1cbc4af1829ddcce8e85743cb878545a7ba0"}], 0x1b8}, 0x4)

0s ago: executing program 1 (id=18273):
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x7, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000fdffffff18000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000060000850000003800000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$nl_netfilter(0x10, 0x3, 0xc)
syz_extract_tcp_res(0x0, 0xe, 0x3c)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084)
ioctl$XFS_IOC_BULKSTAT(r2, 0x8040587f, &(0x7f0000001080)={{0x2517a50e, 0x3, 0x10, 0x8, 0x9}, &(0x7f0000000c00)=[{}, {}, {}, {}, {}, {}]})
r4 = socket$unix(0x1, 0x5, 0x0)
r5 = socket$kcm(0x11, 0x3, 0x0)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r6)
socket$tipc(0x1e, 0x2, 0x0)
ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000200)={'syzkaller0\x00', @broadcast})
r7 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000640)=@newtfilter={0x8c, 0x2c, 0xd27, 0x70bd26, 0x25dfdc00, {0x0, 0x0, 0x0, r8, {0xd, 0x4}, {}, {0x8, 0xfff2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x58, 0x2, [@TCA_MATCHALL_ACT={0x54, 0x2, [@m_tunnel_key={0x50, 0x1, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x7cff, 0x80000001, 0x8, 0x6, 0x1ff}, 0x2}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}]}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
socket$nl_route(0x10, 0x3, 0x0)
setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56)
sendmsg$kcm(r5, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r9, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000000)="27030200000214000e00002fb96dffff1144ee163cddcb000000800000827600000000000000", 0x26}, {&(0x7f00000004c0)="f058050000007f8f", 0x300}], 0x2}, 0x5)
r10 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="440000001000090400000000fdffffff00000000", @ANYRES32=0x0, @ANYBLOB="00000000000400002400128009000100626f6e64000000001400028004001f0004000000080007"], 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x4004090)

kernel console output (not intermixed with test programs):

 netlink: 12 bytes leftover after parsing attributes in process `syz.1.13682'.
[  647.911728][ T4981] netlink: 'syz.1.13690': attribute type 29 has an invalid length.
[  647.922625][ T4981] netlink: 'syz.1.13690': attribute type 29 has an invalid length.
[  647.979236][ T4983] netlink: 276 bytes leftover after parsing attributes in process `syz.1.13691'.
[  647.998465][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  649.038412][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  649.121013][ T5031] ip6_vti0 speed is unknown, defaulting to 1000
[  649.332983][ T5031] lo speed is unknown, defaulting to 1000
[  649.682345][ T5071] netlink: 20 bytes leftover after parsing attributes in process `syz.1.13723'.
[  650.098470][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  650.367155][ T5105] netlink: 'syz.0.13740': attribute type 29 has an invalid length.
[  650.505014][T26951] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  651.128372][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  651.170772][ T5125] syzkaller1: entered promiscuous mode
[  651.172490][ T5125] syzkaller1: entered allmulticast mode
[  651.210481][ T5126] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[  651.286951][ T5131] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  651.307253][ T5135] syzkaller1: entered promiscuous mode
[  651.311327][ T5135] syzkaller1: entered allmulticast mode
[  651.326896][ T5137] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  651.453070][ T5149] tipc: Bearer <udp:syz2>: already 2 bearers with priority 10
[  651.455357][ T5149] tipc: Bearer <udp:syz2>: trying with adjusted priority
[  651.457461][ T5149] tipc: Enabling of bearer <udp:syz2> rejected, max 3 bearers permitted
[  651.590418][ T5163] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13765'.
[  651.601672][ T5163] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13765'.
[  651.604258][ T5163] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  651.714879][ T5168] netlink: 40 bytes leftover after parsing attributes in process `syz.2.13767'.
[  651.818057][ T5176] netlink: 60 bytes leftover after parsing attributes in process `syz.2.13771'.
[  651.974507][ T5186] netlink: 68 bytes leftover after parsing attributes in process `syz.0.13776'.
[  652.158592][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  652.191724][ T5202] netlink: 'syz.0.13784': attribute type 1 has an invalid length.
[  652.915931][ T5235] netlink: 844 bytes leftover after parsing attributes in process `syz.2.13796'.
[  653.102659][ T5257] netlink: 'syz.1.13806': attribute type 1 has an invalid length.
[  653.208318][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  654.034903][ T5269] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13812'.
[  654.238553][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  654.500241][ T5327] netlink: 'syz.0.13834': attribute type 1 has an invalid length.
[  654.530169][ T5327] bond24: entered promiscuous mode
[  654.533304][ T5327] 8021q: adding VLAN 0 to HW filter on device bond24
[  654.562055][ T5327] 8021q: adding VLAN 0 to HW filter on device bond25
[  654.571636][ T5327] bond24: (slave bond25): making interface the new active one
[  654.574376][ T5327] bond25: entered promiscuous mode
[  654.577558][ T5327] bond24: (slave bond25): Enslaving as an active interface with an up link
[  654.850673][ T5374] netlink: 'syz.2.13852': attribute type 1 has an invalid length.
[  655.085941][ T5403] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  655.088262][ T5403] IPv6: NLM_F_CREATE should be set when creating new route
[  655.091018][ T5403] IPv6: NLM_F_CREATE should be set when creating new route
[  655.133536][ T5408] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13868'.
[  655.278349][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  655.407120][ T5443] netlink: 168 bytes leftover after parsing attributes in process `syz.1.13883'.
[  655.614931][ T5461] netlink: 72 bytes leftover after parsing attributes in process `syz.0.13890'.
[  655.677067][ T5470] siw: device registration error -23
[  655.947471][ T5485] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.13901'.
[  655.950948][ T5485] netlink: 12 bytes leftover after parsing attributes in process `syz.1.13901'.
[  655.977963][ T5498] netlink: 676 bytes leftover after parsing attributes in process `syz.0.13907'.
[  656.205294][ T5532] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13919'.
[  656.210815][ T5532] netlink: 348 bytes leftover after parsing attributes in process `syz.0.13919'.
[  656.215580][ T5532] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13919'.
[  656.220271][ T5532] netlink: 348 bytes leftover after parsing attributes in process `syz.0.13919'.
[  656.225963][ T5534] netlink: 'syz.2.13920': attribute type 9 has an invalid length.
[  656.318533][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  656.714073][ T5583] xt_CT: No such helper "netbios-ns"
[  657.368526][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  658.408423][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  659.194741][ T5630] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  659.438500][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  659.802929][ T5590] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  659.947743][ T5652] bond0: option arp_interval: mode dependency failed, not supported in mode balance-alb(6)
[  660.001836][ T5649] ip6_vti0 speed is unknown, defaulting to 1000
[  660.241165][ T5677] netlink: 'syz.1.13971': attribute type 2 has an invalid length.
[  660.248227][ T5677] netlink: 'syz.1.13971': attribute type 2 has an invalid length.
[  660.329721][ T5649] lo speed is unknown, defaulting to 1000
[  660.478636][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  661.066284][ T5732] mac80211_hwsim hwsim21 syzkaller0: entered promiscuous mode
[  661.070397][ T5732] mac80211_hwsim hwsim21 syzkaller0: entered allmulticast mode
[  661.518619][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  662.558539][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  663.536853][ T5706] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  663.598635][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  663.765727][ T5751] netlink: 'syz.2.13994': attribute type 10 has an invalid length.
[  663.769303][ T5751] __nla_validate_parse: 6 callbacks suppressed
[  663.769317][ T5751] netlink: 228 bytes leftover after parsing attributes in process `syz.2.13994'.
[  663.902164][ T5767] netlink: 'syz.0.13999': attribute type 49 has an invalid length.
[  663.945903][ T5771] netlink: 'syz.0.14001': attribute type 3 has an invalid length.
[  663.949309][ T5771] netlink: 8 bytes leftover after parsing attributes in process `syz.0.14001'.
[  664.192366][ T5790] netlink: 20 bytes leftover after parsing attributes in process `syz.2.14010'.
[  664.638548][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  664.653496][ T5813] netlink: 44 bytes leftover after parsing attributes in process `syz.1.14021'.
[  664.663245][ T5816] bridge: RTM_NEWNEIGH with unconfigured vlan 1 on bridge0
[  664.700827][ T5818] netlink: 24 bytes leftover after parsing attributes in process `syz.2.14022'.
[  664.707028][ T5818] netlink: 24 bytes leftover after parsing attributes in process `syz.2.14022'.
[  664.711047][ T5820] netlink: 'syz.1.14023': attribute type 16 has an invalid length.
[  665.329430][ T5879] netlink: 7060 bytes leftover after parsing attributes in process `syz.2.14048'.
[  665.393939][ T5889] netlink: 4 bytes leftover after parsing attributes in process `syz.2.14053'.
[  665.688416][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  665.766393][ T5929] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14071'.
[  665.834179][ T5937] netlink: 52 bytes leftover after parsing attributes in process `syz.2.14075'.
[  665.854639][ T5939] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  666.183256][ T5970] netlink: 'syz.2.14091': attribute type 13 has an invalid length.
[  666.316401][ T5970] batman_adv: batadv0: Interface deactivated: dummy0
[  666.728405][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  666.904890][ T5674] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  666.918440][ T5674] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  666.920910][ T5674] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  666.923470][ T5674] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  666.955870][   T34] audit: type=1804 audit(1778615308.707:20): pid=5992 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.14100" name="/newroot/4620/memory.events" dev="tmpfs" ino=23313 res=1 errno=0
[  667.254775][ T6025] netlink: 'syz.1.14115': attribute type 13 has an invalid length.
[  667.257181][ T6025] netlink: 'syz.1.14115': attribute type 11 has an invalid length.
[  667.768506][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  668.356111][ T6102] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  668.798545][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  668.989997][ T6165] ip6_vti0 speed is unknown, defaulting to 1000
[  669.211467][ T6181] IPv6: NLM_F_CREATE should be specified when creating new route
[  669.401622][ T6165] lo speed is unknown, defaulting to 1000
[  669.449235][ T6205] netem: change failed
[  669.507050][ T6209] netlink: 'syz.0.14190': attribute type 11 has an invalid length.
[  669.839088][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  669.981581][ T6240] ip6_vti0 speed is unknown, defaulting to 1000
[  670.024647][ T6252] xfrm0: entered allmulticast mode
[  670.351357][ T6272] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  670.526559][ T6240] lo speed is unknown, defaulting to 1000
[  670.888567][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  671.241594][ T6288] __nla_validate_parse: 7 callbacks suppressed
[  671.241606][ T6288] netlink: 4 bytes leftover after parsing attributes in process `syz.0.14218'.
[  671.582850][ T6300] netlink: 12 bytes leftover after parsing attributes in process `syz.2.14222'.
[  671.903024][ T6338] netlink: 8 bytes leftover after parsing attributes in process `syz.0.14240'.
[  671.928317][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  672.051000][ T6351] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[  672.083532][ T6355] netlink: 'syz.0.14247': attribute type 2 has an invalid length.
[  672.192050][ T6359] ip6_vti0 speed is unknown, defaulting to 1000
[  672.425241][ T6359] lo speed is unknown, defaulting to 1000
[  672.501778][ T6377] netlink: 16 bytes leftover after parsing attributes in process `syz.1.14256'.
[  672.663112][ T6382] sctp: [Deprecated]: syz.1.14258 (pid 6382) Use of int in max_burst socket option deprecated.
[  672.663112][ T6382] Use struct sctp_assoc_value instead
[  672.917106][ T6400] netlink: 277 bytes leftover after parsing attributes in process `syz.2.14267'.
[  672.968448][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  673.127186][ T6416] 8021q: adding VLAN 0 to HW filter on device ipvlan1
[  673.745073][ T6449] netlink: 40 bytes leftover after parsing attributes in process `syz.1.14291'.
[  673.998503][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  674.029079][ T6482] netlink: 'syz.2.14307': attribute type 29 has an invalid length.
[  674.032182][ T6482] netlink: 'syz.2.14307': attribute type 29 has an invalid length.
[  674.065802][ T6486] netlink: 'syz.2.14309': attribute type 15 has an invalid length.
[  674.287060][ T6497] netlink: 'syz.2.14314': attribute type 30 has an invalid length.
[  675.048293][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  675.737435][ T6508] netlink: 8 bytes leftover after parsing attributes in process `syz.0.14319'.
[  676.088368][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  676.392219][ T6497] workqueue: Failed to create a rescuer kthread for wq "bond30": -EINTR
[  676.419137][ T6510] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check.
[  676.821757][ T6546] ip6tnl3: entered allmulticast mode
[  676.883996][ T6552] 8021q: adding VLAN 0 to HW filter on device bond20
[  677.018384][   T34] audit: type=1804 audit(1778615318.767:21): pid=6569 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.14344" name="/newroot/4701/memory.events" dev="tmpfs" ino=23722 res=1 errno=0
[  677.029345][   T34] audit: type=1800 audit(1778615318.767:22): pid=6569 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.14344" name="memory.events" dev="tmpfs" ino=23722 res=0 errno=0
[  677.062376][ T6569] bond21: option lacp_active: mode dependency failed, not supported in mode balance-rr(0)
[  677.072906][ T6569] bond21 (unregistering): Released all slaves
[  677.128366][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  677.215995][ T6587] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  677.223023][ T6587] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  677.285561][ T6596] netlink: 168 bytes leftover after parsing attributes in process `syz.0.14353'.
[  677.855201][ T6643] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14375'.
[  677.948653][ T6653] netlink: 4 bytes leftover after parsing attributes in process `syz.0.14380'.
[  678.100770][ T6671] netlink: 'syz.0.14389': attribute type 10 has an invalid length.
[  678.103470][ T6671] netlink: 40 bytes leftover after parsing attributes in process `syz.0.14389'.
[  678.113571][ T6671] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check.
[  678.168462][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  678.346999][ T6684] rdma_rxe: rxe_newlink: failed to add bond0
[  678.515505][ T6696] openvswitch: netlink: Unexpected mask (mask=20440, allowed=10048)
[  678.524556][ T6696] netlink: 256 bytes leftover after parsing attributes in process `syz.1.14399'.
[  678.771479][ T6722] netlink: 80 bytes leftover after parsing attributes in process `syz.0.14404'.
[  678.805730][ T6726] netlink: 48 bytes leftover after parsing attributes in process `syz.0.14405'.
[  678.929816][ T6735] ip6gretap0: entered allmulticast mode
[  678.980822][ T6739] netlink: zone id is out of range
[  678.983868][ T6739] netlink: zone id is out of range
[  678.985952][ T6739] netlink: zone id is out of range
[  678.987956][ T6739] netlink: zone id is out of range
[  678.993507][ T6739] netlink: zone id is out of range
[  678.995562][ T6739] netlink: zone id is out of range
[  679.107117][ T6751] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14415'.
[  679.115540][ T6751] No such timeout policy "syz1"
[  679.181369][ T6759] netlink: 8 bytes leftover after parsing attributes in process `syz.0.14418'.
[  679.198393][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  679.245150][ T6763] ip6_vti0 speed is unknown, defaulting to 1000
[  679.505095][ T6789] xt_hashlimit: size too large, truncated to 1048576
[  679.556309][ T6763] lo speed is unknown, defaulting to 1000
[  679.844791][ T6802] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.14437'.
[  683.318152][ T6928] x_tables: unsorted underflow at hook 2
[  683.593787][ T6949] netlink: 'syz.0.14502': attribute type 13 has an invalid length.
[  683.746891][ T6960] netlink: 'syz.1.14507': attribute type 11 has an invalid length.
[  684.064380][ T6990] netlink: 'syz.1.14519': attribute type 10 has an invalid length.
[  684.070024][ T6990] netlink: 'syz.1.14519': attribute type 10 has an invalid length.
[  684.150006][ T7002] net_ratelimit: 2 callbacks suppressed
[  684.150018][ T7002] netlink: ct family unspecified
[  684.153530][ T7002] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  684.163714][ T7005] __nla_validate_parse: 3 callbacks suppressed
[  684.163724][ T7005] netlink: 240 bytes leftover after parsing attributes in process `syz.2.14526'.
[  684.171212][ T7005] netlink: 56 bytes leftover after parsing attributes in process `syz.2.14526'.
[  684.193282][ T7006] netlink: 40 bytes leftover after parsing attributes in process `syz.1.14527'.
[  684.280448][ T7019] netlink: 'syz.1.14534': attribute type 1 has an invalid length.
[  684.551337][ T7045] rdma_op ffff8881796309f0 conn xmit_rdma 0000000000000000
[  684.582624][ T7047] netlink: 44 bytes leftover after parsing attributes in process `syz.2.14544'.
[  684.626296][ T7051] netlink: 60 bytes leftover after parsing attributes in process `syz.2.14546'.
[  684.922484][ T7068] netlink: 'syz.2.14555': attribute type 13 has an invalid length.
[  684.925550][ T7068] netlink: 'syz.2.14555': attribute type 17 has an invalid length.
[  684.957710][ T7068] 8021q: adding VLAN 0 to HW filter on device 
[  684.962442][ T7068] batman_adv: batadv0: Interface activated: dummy0
[  684.965946][ T7068] 8021q: adding VLAN 0 to HW filter on device batadv0
[  685.006084][ T7068] veth1_vlan: left promiscuous mode
[  685.010503][ T7068] veth0_vlan: left promiscuous mode
[  685.012815][ T7068] veth0_vlan: entered promiscuous mode
[  685.017776][ T7068] veth1_vlan: entered promiscuous mode
[  685.022852][ T7068] veth1_macvtap: left promiscuous mode
[  685.025315][ T7068] veth0_macvtap: left promiscuous mode
[  685.039518][ T7068] veth0_macvtap: entered promiscuous mode
[  685.053111][ T7068] veth1_macvtap: entered promiscuous mode
[  685.057748][ T7068] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check.
[  685.092911][ T5661] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  685.097229][ T5661] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  685.104513][ T5661] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  685.109847][ T5661] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  685.123297][ T7072] mac80211_hwsim hwsim6 syzkaller0: Caught tx_queue_len zero misconfig
[  685.157860][ T7072] mac80211_hwsim hwsim6 syzkaller0: left promiscuous mode
[  685.160723][ T7072] mac80211_hwsim hwsim6 syzkaller0: left allmulticast mode
[  685.883877][ T7095] netlink: 320 bytes leftover after parsing attributes in process `syz.2.14566'.
[  685.977735][ T7099] xt_CT: You must specify a L4 protocol and not use inversions on it
[  686.089501][ T7105] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14571'.
[  686.218680][ T7115] syz_tun: entered promiscuous mode
[  686.222391][ T7115] vlan3: entered promiscuous mode
[  686.237128][ T7120] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14577'.
[  686.267255][ T7123] netlink: 52 bytes leftover after parsing attributes in process `syz.2.14579'.
[  686.332577][ T7125] IPVS: Error connecting to the multicast addr
[  686.388496][   T34] audit: type=1804 audit(1778615328.137:23): pid=7132 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.14583" name="/newroot/4758/memory.events" dev="tmpfs" ino=24012 res=1 errno=0
[  686.399935][   T34] audit: type=1800 audit(1778615328.147:24): pid=7132 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.14583" name="memory.events" dev="tmpfs" ino=24012 res=0 errno=0
[  686.414671][   T34] audit: type=1804 audit(1778615328.147:25): pid=7132 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.14583" name="/newroot/4758/memory.events" dev="tmpfs" ino=24012 res=1 errno=0
[  686.486208][ T7144] netlink: 830 bytes leftover after parsing attributes in process `syz.2.14589'.
[  687.276477][ T7216] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  687.347100][ T7223] netlink: 'syz.2.14623': attribute type 29 has an invalid length.
[  687.352936][ T7223] netlink: 'syz.2.14623': attribute type 29 has an invalid length.
[  688.526187][ T7310] netlink: 'syz.1.14662': attribute type 62 has an invalid length.
[  688.913800][ T7347] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048)
[  689.588787][ T7373] validate_nla: 1 callbacks suppressed
[  689.588797][ T7373] netlink: 'syz.1.14687': attribute type 21 has an invalid length.
[  689.592801][ T7373] __nla_validate_parse: 7 callbacks suppressed
[  689.592809][ T7373] netlink: 132 bytes leftover after parsing attributes in process `syz.1.14687'.
[  689.625733][ T7376] netlink: 'syz.1.14688': attribute type 15 has an invalid length.
[  689.934964][ T7400] netlink: 12 bytes leftover after parsing attributes in process `syz.1.14698'.
[  690.638557][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  690.865020][ T7422] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14707'.
[  690.923178][ T7423] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14707'.
[  690.935052][ T7423] netlink: 12 bytes leftover after parsing attributes in process `syz.2.14707'.
[  690.961911][ T1381] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  691.003819][ T7429] netlink: 32 bytes leftover after parsing attributes in process `syz.2.14710'.
[  691.061384][ T7436] netlink: 'syz.1.14713': attribute type 8 has an invalid length.
[  691.181657][ T7449] netlink: 116 bytes leftover after parsing attributes in process `syz.1.14718'.
[  691.334828][ T7467] netlink: 'syz.2.14727': attribute type 62 has an invalid length.
[  691.546586][ T7489] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14739'.
[  691.624566][ T7499] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  691.678443][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  691.807558][ T7508] netlink: 28 bytes leftover after parsing attributes in process `syz.1.14746'.
[  692.638151][ T7523] bond30: entered allmulticast mode
[  692.692703][ T7529] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14754'.
[  692.718440][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  693.349124][ T7567] IPv6: Can't replace route, no match found
[  693.351343][ T7567] IPv6: Can't replace route, no match found
[  693.667350][ T7591] netlink: 'syz.1.14780': attribute type 1 has an invalid length.
[  693.671674][ T7591] netlink: 'syz.1.14780': attribute type 1 has an invalid length.
[  693.758445][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  693.872995][ T7610] netlink: 'syz.1.14787': attribute type 5 has an invalid length.
[  694.643877][ T7668] __nla_validate_parse: 3 callbacks suppressed
[  694.643888][ T7668] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.14813'.
[  694.798737][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  695.115783][ T7646] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  695.181239][ T7685] x_tables: duplicate underflow at hook 3
[  695.613644][ T7704] bond24: (slave lo): Releasing backup interface
[  695.617706][ T7704] bond24: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed
[  695.630329][ T7704] batman_adv: batadv0: Interface deactivated: dummy0
[  695.632566][ T7704] batman_adv: batadv0: Removing interface: dummy0
[  695.646019][ T7704] bond22: (slave ip6gretap0): Releasing active interface
[  695.651678][ T7704] bond23: (slave batadv3): Releasing active interface
[  695.656090][ T7704] batman_adv: batadv0: Removing interface: gretap6
[  695.662234][ T7704] bond0: (slave bond27): Releasing backup interface
[  695.664593][ T7704] bond0: (slave bond27): the permanent HWaddr of slave - 66:cc:e9:44:43:49 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  695.670987][ T7704] bond27: left allmulticast mode
[  695.672937][ T7704] bond0: (slave gretap7): making interface the new active one
[  695.675636][ T7704] gretap7: entered allmulticast mode
[  695.682513][ T7704] bond0: (slave gretap7): Releasing backup interface
[  695.684969][ T7704] gretap7: left allmulticast mode
[  695.692447][ T7704] bond29: (slave bridge16): Releasing active interface
[  695.701911][T13321] lo speed is unknown, defaulting to 1000
[  695.703710][T13321] sqz0: Port: 1 Link DOWN
[  695.707388][T13321] lo speed is unknown, defaulting to 1000
[  695.838458][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  696.037605][ T7723] netlink: 'syz.1.14836': attribute type 13 has an invalid length.
[  696.102160][ T7723] mac80211_hwsim hwsim21 syzkaller0: Caught tx_queue_len zero misconfig
[  696.305238][ T7736] netlink: 32 bytes leftover after parsing attributes in process `syz.2.14842'.
[  696.339156][ T7738] netlink: 'syz.0.14843': attribute type 1 has an invalid length.
[  696.511514][ T7756] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14851'.
[  696.695926][ T7770] netlink: 'syz.1.14858': attribute type 61 has an invalid length.
[  696.725240][ T7771] netlink: 4 bytes leftover after parsing attributes in process `syz.2.14857'.
[  696.747755][ T7771] netlink: 4 bytes leftover after parsing attributes in process `syz.2.14857'.
[  696.755387][ T7771] netlink: 348 bytes leftover after parsing attributes in process `syz.2.14857'.
[  696.764758][ T7771] netlink: 4 bytes leftover after parsing attributes in process `syz.2.14857'.
[  696.775910][ T7771] netlink: 348 bytes leftover after parsing attributes in process `syz.2.14857'.
[  696.789940][ T7771] netlink: 4 bytes leftover after parsing attributes in process `syz.2.14857'.
[  696.878557][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  697.653502][ T7818] netlink: 12 bytes leftover after parsing attributes in process `syz.1.14878'.
[  697.917073][ T7834] sctp: [Deprecated]: syz.1.14886 (pid 7834) Use of struct sctp_assoc_value in delayed_ack socket option.
[  697.917073][ T7834] Use struct sctp_sack_info instead
[  697.923302][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  698.074586][ T7850] ip6_vti0: Caught tx_queue_len zero misconfig
[  698.115491][ T7855] netlink: 'syz.1.14896': attribute type 11 has an invalid length.
[  698.958407][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  699.384347][ T7891] netlink: 'syz.1.14910': attribute type 10 has an invalid length.
[  699.399233][ T7889] veth25: entered promiscuous mode
[  699.492866][ T7899] tipc: Enabling of bearer <ib:team0> rejected, max 3 bearers permitted
[  699.579282][ T7909] @0: renamed from bond_slave_1
[  699.998573][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  700.119251][ T7935] __nla_validate_parse: 2 callbacks suppressed
[  700.119266][ T7935] netlink: 4 bytes leftover after parsing attributes in process `syz.1.14930'.
[  700.587856][ T7963] batadv_slave_0: Caught tx_queue_len zero misconfig
[  700.682270][ T7970] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  700.685212][ T7970] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  700.977739][ T7985] tipc: Resetting bearer <eth:syzkaller0>
[  701.038567][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  701.336118][ T8007] netlink: 'syz.0.14961': attribute type 3 has an invalid length.
[  701.703718][ T8029] tunl0: Caught tx_queue_len zero misconfig
[  701.706272][ T8029] sch_fq: defrate 4294967293 ignored.
[  701.771538][ T8031] mac80211_hwsim hwsim6 syzkaller0: entered promiscuous mode
[  701.774094][ T8031] mac80211_hwsim hwsim6 syzkaller0: entered allmulticast mode
[  702.006653][ T8060] netlink: 'syz.1.14984': attribute type 13 has an invalid length.
[  702.078374][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  702.425192][ T8104] IPv6: NLM_F_CREATE should be specified when creating new route
[  702.429788][ T8104] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  702.432640][ T8104] IPv6: NLM_F_CREATE should be set when creating new route
[  702.435403][ T8104] IPv6: NLM_F_CREATE should be set when creating new route
[  702.438316][ T8104] IPv6: NLM_F_CREATE should be set when creating new route
[  702.852105][ T8133] netlink: 'syz.1.15017': attribute type 3 has an invalid length.
[  703.118441][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  703.277301][ T8174] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  703.388957][ T8183] netlink: 4 bytes leftover after parsing attributes in process `syz.1.15040'.
[  704.089544][ T8233] netlink: 12 bytes leftover after parsing attributes in process `syz.1.15061'.
[  704.105183][ T8233] netlink: 20 bytes leftover after parsing attributes in process `syz.1.15061'.
[  704.114088][ T8233] bond23: (slave bridge22): Enslaving as an active interface with an up link
[  704.120695][ T8233] netlink: 28 bytes leftover after parsing attributes in process `syz.1.15061'.
[  704.125107][ T8233] 8021q: adding VLAN 0 to HW filter on device bond23
[  704.158578][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  704.548368][ T8248] block nbd7: server does not support multiple connections per device.
[  704.551998][ T8248] block nbd7: shutting down sockets
[  705.208425][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  705.597441][ T8283] lo: Caught tx_queue_len zero misconfig
[  705.599734][ T8283] netlink: 8 bytes leftover after parsing attributes in process `syz.0.15081'.
[  705.602383][ T8283] sch_tbf: burst 0 is lower than device lo mtu (32783) !
[  706.238396][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  706.891122][ T8347] netlink: 8 bytes leftover after parsing attributes in process `syz.2.15110'.
[  707.214055][ T8379] ip6_vti0 speed is unknown, defaulting to 1000
[  707.278465][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  707.325941][ T8386] vlan0: entered promiscuous mode
[  707.533201][ T8379] lo speed is unknown, defaulting to 1000
[  708.318446][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  708.594861][ T8457] netlink: 'syz.2.15156': attribute type 3 has an invalid length.
[  709.225202][ T8486] netlink: 96 bytes leftover after parsing attributes in process `syz.1.15170'.
[  709.358669][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  709.636977][ T8506] netlink: 204 bytes leftover after parsing attributes in process `syz.2.15180'.
[  709.641432][ T8506] netlink: 12 bytes leftover after parsing attributes in process `syz.2.15180'.
[  709.644330][ T8506] tc_dump_action: action bad kind
[  709.926684][ T8540] netlink: 8 bytes leftover after parsing attributes in process `syz.1.15195'.
[  709.937564][ T8540] netlink: 'syz.1.15195': attribute type 8 has an invalid length.
[  709.961294][ T8540] geneve4: entered promiscuous mode
[  709.962923][ T8540] geneve4: entered allmulticast mode
[  709.965393][ T5661] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  709.968241][ T5661] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  709.971469][ T5661] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  709.976620][ T5661] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  710.398437][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  710.677811][ T8596] netlink: 'syz.2.15217': attribute type 25 has an invalid length.
[  710.682647][ T8596] netlink: 'syz.2.15217': attribute type 3 has an invalid length.
[  710.686117][ T8596] netlink: 132 bytes leftover after parsing attributes in process `syz.2.15217'.
[  710.890634][ T8623] netlink: 20 bytes leftover after parsing attributes in process `syz.0.15230'.
[  710.899482][ T8623] netlink: 24 bytes leftover after parsing attributes in process `syz.0.15230'.
[  711.006506][ T8638] netlink: 132 bytes leftover after parsing attributes in process `syz.1.15236'.
[  711.339380][ T8675] veth1_to_bridge: Caught tx_queue_len zero misconfig
[  711.342995][ T8675] netlink: 8 bytes leftover after parsing attributes in process `syz.1.15253'.
[  711.449126][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  712.233606][ T8751] ip6_vti0 speed is unknown, defaulting to 1000
[  712.478383][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  712.521142][ T8751] lo speed is unknown, defaulting to 1000
[  713.518364][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  713.919373][ T8855] ip6_vti0 speed is unknown, defaulting to 1000
[  714.269570][ T8856] netlink: 8 bytes leftover after parsing attributes in process `syz.0.15337'.
[  714.291370][ T8856] netlink: 24 bytes leftover after parsing attributes in process `syz.0.15337'.
[  714.374059][ T8875] veth0_virt_wifi: Caught tx_queue_len zero misconfig
[  714.389049][ T8855] lo speed is unknown, defaulting to 1000
[  714.439063][ T8879] netlink: 28 bytes leftover after parsing attributes in process `syz.2.15348'.
[  714.442032][ T8879] netlink: 7 bytes leftover after parsing attributes in process `syz.2.15348'.
[  714.558377][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  714.597538][ T8887] netlink: 'syz.1.15352': attribute type 1 has an invalid length.
[  714.665260][ T8887] 8021q: adding VLAN 0 to HW filter on device bond26
[  714.671544][ T8887] bond25: (slave bond26): making interface the new active one
[  714.675158][ T8887] bond25: (slave bond26): Enslaving as an active interface with an up link
[  715.223924][T26951] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  715.608426][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  715.898083][ T8924] veth0: entered promiscuous mode
[  715.905103][ T8924] bond0: entered promiscuous mode
[  715.911284][ T8923] bond0: left promiscuous mode
[  715.916277][ T8923] veth0: left promiscuous mode
[  716.601519][ T8966] netlink: 332 bytes leftover after parsing attributes in process `syz.1.15383'.
[  716.606934][ T8966] netlink: 'syz.1.15383': attribute type 9 has an invalid length.
[  716.610394][ T8966] netlink: 108 bytes leftover after parsing attributes in process `syz.1.15383'.
[  716.614277][ T8966] netlink: 32 bytes leftover after parsing attributes in process `syz.1.15383'.
[  716.638489][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  716.673598][ T8970] netlink: 4 bytes leftover after parsing attributes in process `syz.0.15385'.
[  716.683909][ T8970] netlink: 12 bytes leftover after parsing attributes in process `syz.0.15385'.
[  716.729349][ T8974] netlink: 'syz.1.15387': attribute type 3 has an invalid length.
[  716.796754][ T8982] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  716.913221][ T8996] netlink: 52 bytes leftover after parsing attributes in process `syz.1.15396'.
[  717.032129][ T9012] netlink: 148 bytes leftover after parsing attributes in process `syz.2.15406'.
[  717.234881][ T9030] netlink: 8 bytes leftover after parsing attributes in process `syz.2.15414'.
[  717.678455][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  717.876722][ T9089] bond31: option coupled_control: mode dependency failed, not supported in mode balance-rr(0)
[  717.891350][ T9089] bond31 (unregistering): Released all slaves
[  717.987853][ T9101] netlink: 'syz.1.15445': attribute type 2 has an invalid length.
[  718.283423][ T9124] netlink: 4 bytes leftover after parsing attributes in process `syz.2.15455'.
[  718.697226][ T9144] netlink: 28 bytes leftover after parsing attributes in process `syz.2.15463'.
[  718.718952][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  719.580790][ T9210] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  719.627405][ T9210] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  719.684886][ T9210] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  719.742680][ T9210] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  719.768503][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  719.831258][   T13] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  719.850512][   T13] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  719.880817][   T13] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  719.899888][   T13] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  720.808458][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  721.283486][ T9315] netlink: 'syz.1.15537': attribute type 3 has an invalid length.
[  721.793637][ T9337] __nla_validate_parse: 5 callbacks suppressed
[  721.793648][ T9337] netlink: 5 bytes leftover after parsing attributes in process `syz.1.15548'.
[  721.798134][ T9337] netlink: 5 bytes leftover after parsing attributes in process `syz.1.15548'.
[  721.848389][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  722.878636][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  723.065891][ T9388] netlink: 'syz.2.15569': attribute type 11 has an invalid length.
[  723.161707][ T9396] mac80211_hwsim hwsim6 syzkaller0: Caught tx_queue_len zero misconfig
[  723.535546][ T9419] netlink: 4 bytes leftover after parsing attributes in process `syz.2.15584'.
[  723.747322][ T9428] netlink: 240 bytes leftover after parsing attributes in process `syz.2.15587'.
[  723.919400][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  724.769835][ T9442] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  724.903720][ T9473] ip6_vti0 speed is unknown, defaulting to 1000
[  724.968518][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  725.156262][ T9473] lo speed is unknown, defaulting to 1000
[  726.008434][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  726.365223][ T9535] netlink: 14 bytes leftover after parsing attributes in process `syz.1.15630'.
[  726.404352][ T9537] netlink: 8 bytes leftover after parsing attributes in process `syz.1.15631'.
[  726.557766][ T9539] netlink: 'syz.1.15632': attribute type 1 has an invalid length.
[  726.560858][ T9539] netlink: 96 bytes leftover after parsing attributes in process `syz.1.15632'.
[  726.564316][ T9539] netlink: 1 bytes leftover after parsing attributes in process `syz.1.15632'.
[  726.567658][ T9539] netlink: 658 bytes leftover after parsing attributes in process `syz.1.15632'.
[  726.777966][ T9546] bond27 (unregistering): Released all slaves
[  727.048592][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  727.186920][ T9577] netlink: 'syz.2.15648': attribute type 39 has an invalid length.
[  727.234114][ T9579] netlink: 28 bytes leftover after parsing attributes in process `syz.1.15650'.
[  727.317564][ T9587] netlink: 72 bytes leftover after parsing attributes in process `syz.1.15654'.
[  727.328723][ T9587] netlink: 20 bytes leftover after parsing attributes in process `syz.1.15654'.
[  727.450681][ T9604] xfrm0: Caught tx_queue_len zero misconfig
[  727.453095][ T9604] netem: change failed
[  728.078418][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  728.321541][ T9672] netlink: 'syz.2.15688': attribute type 32 has an invalid length.
[  728.324204][ T9672] netlink: 8 bytes leftover after parsing attributes in process `syz.2.15688'.
[  728.340960][ T9672] bond31: option coupled_control: invalid value (12)
[  728.345178][ T9672] bond31 (unregistering): Released all slaves
[  728.895205][ T9707] xt_CT: You must specify a L4 protocol and not use inversions on it
[  729.114041][ T9727] netlink: 20 bytes leftover after parsing attributes in process `syz.1.15713'.
[  729.117086][ T9727] netlink: 'syz.1.15713': attribute type 4 has an invalid length.
[  729.128387][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  730.168304][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  730.265249][   T13] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  730.270049][   T13] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  730.273742][   T13] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  730.276635][   T13] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  730.526934][ T9792] bridge19: entered promiscuous mode
[  730.567494][ T9796] lo: Caught tx_queue_len zero misconfig
[  730.570615][ T9796] sch_tbf: burst 19872 is lower than device lo mtu (32783) !
[  730.960246][ T9845] ip6gretap4: entered promiscuous mode
[  731.031338][ T9853] x_tables: ip_tables: icmp match: only valid for protocol 1
[  731.198394][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  731.451037][ T9883] netlink: 'syz.2.15781': attribute type 1 has an invalid length.
[  731.498128][ T9883] 8021q: adding VLAN 0 to HW filter on device bond31
[  731.544606][ T9883] bond31: (slave veth41): Enslaving as an active interface with an up link
[  731.617342][ T9891] netlink: 'syz.2.15781': attribute type 1 has an invalid length.
[  731.625170][ T9891] 8021q: adding VLAN 0 to HW filter on device batadv4
[  731.631678][ T9891] bond31: (slave batadv4): Enslaving as an active interface with an up link
[  731.751829][ T9911] netem: change failed
[  731.806047][ T9919] netlink: 6024 bytes leftover after parsing attributes in process `syz.1.15795'.
[  731.809515][ T9917] netlink: 128 bytes leftover after parsing attributes in process `syz.0.15794'.
[  731.819025][ T9917] netlink: 20 bytes leftover after parsing attributes in process `syz.0.15794'.
[  731.849809][ T9921] netlink: 2 bytes leftover after parsing attributes in process `syz.1.15796'.
[  732.238374][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  732.540027][ T9943] nbd: must specify a size in bytes for the device
[  732.549533][ T9943] block nbd0: NBD_DISCONNECT
[  732.558373][ T9943] block nbd0: Send disconnect failed -32
[  732.568513][ T9943] block nbd0: shutting down sockets
[  732.589582][ T9949] netlink: 4 bytes leftover after parsing attributes in process `syz.2.15807'.
[  732.701021][ T9959] mac80211_hwsim hwsim6 syzkaller0: left promiscuous mode
[  732.704075][ T9959] mac80211_hwsim hwsim6 syzkaller0: left allmulticast mode
[  732.759417][ T9966] nbd: must specify a size in bytes for the device
[  733.211494][ T9978] netlink: 32 bytes leftover after parsing attributes in process `syz.0.15820'.
[  733.214144][ T9978] netlink: 32 bytes leftover after parsing attributes in process `syz.0.15820'.
[  733.272387][ T9981] veth1_to_team: Caught tx_queue_len zero misconfig
[  733.278523][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  733.461350][ T9995] netlink: 24 bytes leftover after parsing attributes in process `syz.1.15828'.
[  733.461659][ T9994] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.15827'.
[  733.497064][ T9999] pimreg: entered allmulticast mode
[  733.503440][ T9999] pimreg: left allmulticast mode
[  733.516664][T10001] netlink: 68 bytes leftover after parsing attributes in process `syz.1.15831'.
[  733.795571][T10018] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  733.811291][T10018] mac80211_hwsim hwsim6 syzkaller0: entered promiscuous mode
[  733.825954][T10018] mac80211_hwsim hwsim6 syzkaller0: entered allmulticast mode
[  734.066482][T10026] netlink: 12 bytes leftover after parsing attributes in process `syz.2.15841'.
[  734.197500][T10034] netem: change failed
[  734.246735][T10036] : renamed from veth0_to_bond
[  734.328465][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  734.406635][T10044] netlink: 8 bytes leftover after parsing attributes in process `syz.2.15850'.
[  734.474223][T10048] netlink: 32 bytes leftover after parsing attributes in process `syz.2.15852'.
[  734.652286][T10067] ip6_vti0 speed is unknown, defaulting to 1000
[  734.755759][T10077] x_tables: ip_tables: time.0 match: invalid size 24 (kernel) != (user) 40
[  734.961957][T10067] lo speed is unknown, defaulting to 1000
[  735.063336][T10091] ip6_vti0 speed is unknown, defaulting to 1000
[  735.358435][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  735.382285][T10091] lo speed is unknown, defaulting to 1000
[  736.317170][T10137] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  736.408630][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  736.434944][T10150] netlink: 24 bytes leftover after parsing attributes in process `syz.1.15895'.
[  737.438560][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  737.842988][T10230] tc_dump_action: action bad kind
[  737.850599][T10230] netlink: 80 bytes leftover after parsing attributes in process `syz.1.15930'.
[  738.085599][T10245] netlink: 203340 bytes leftover after parsing attributes in process `syz.0.15938'.
[  738.488335][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  738.955483][T10284] netlink: 12 bytes leftover after parsing attributes in process `syz.1.15952'.
[  739.000411][T26178] block nbd0: Receive control failed (result -1)
[  739.043130][T10288] netlink: 12 bytes leftover after parsing attributes in process `syz.2.15954'.
[  739.051877][T10288] tipc: Disabling bearer <udp:syz2>
[  739.450260][T10295] RDS: rds_bind could not find a transport for ::ffff:172.30.1.3, load rds_tcp or rds_rdma?
[  739.518384][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  740.306303][T10333] netlink: 'syz.2.15972': attribute type 1 has an invalid length.
[  740.308747][T10333] netlink: 96 bytes leftover after parsing attributes in process `syz.2.15972'.
[  740.422205][T10341] netlink: 12 bytes leftover after parsing attributes in process `syz.0.15976'.
[  740.426260][T10341] netlink: 28 bytes leftover after parsing attributes in process `syz.0.15976'.
[  740.430903][T10341] netlink: 12 bytes leftover after parsing attributes in process `syz.0.15976'.
[  740.434678][T10341] netlink: 28 bytes leftover after parsing attributes in process `syz.0.15976'.
[  740.439802][T10341] netlink: 36 bytes leftover after parsing attributes in process `syz.0.15976'.
[  740.558485][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  740.679911][T10359] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  741.608496][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  742.127192][T10430] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT
[  742.638419][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  743.483996][T10499] __nla_validate_parse: 2 callbacks suppressed
[  743.484012][T10499] netlink: 4 bytes leftover after parsing attributes in process `syz.0.16045'.
[  743.678426][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  744.718583][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  745.755084][T10485] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  745.758322][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  746.224939][T10550] netlink: 8 bytes leftover after parsing attributes in process `syz.1.16069'.
[  746.277436][T10558] netlink: 8 bytes leftover after parsing attributes in process `syz.2.16072'.
[  746.798337][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  746.977563][T10596] netlink: 'syz.2.16090': attribute type 1 has an invalid length.
[  746.981890][T10596] netlink: 'syz.2.16090': attribute type 2 has an invalid length.
[  746.991003][T10596] netlink: 'syz.2.16090': attribute type 1 has an invalid length.
[  746.994246][T10596] netlink: 'syz.2.16090': attribute type 2 has an invalid length.
[  747.058850][T10600] syzkaller1: tun_chr_ioctl cmd 35108
[  747.406520][T10604] xfrm0: left allmulticast mode
[  747.413359][T10604] vlan0: left promiscuous mode
[  747.427203][T10604] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check.
[  747.652249][T10622] ip6_vti0 speed is unknown, defaulting to 1000
[  747.686766][T10626] netlink: 24 bytes leftover after parsing attributes in process `syz.0.16101'.
[  747.693188][T10625] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  747.838344][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  747.932011][T10622] lo speed is unknown, defaulting to 1000
[  748.487740][T10651] netlink: 'syz.2.16113': attribute type 9 has an invalid length.
[  748.878496][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  749.064400][T10680] netlink: 'syz.0.16125': attribute type 2 has an invalid length.
[  749.557229][T10696] netlink: 4 bytes leftover after parsing attributes in process `syz.2.16132'.
[  749.792621][T10707] netlink: 76 bytes leftover after parsing attributes in process `syz.2.16136'.
[  749.918636][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  750.400299][T10556] syz.1.16071 invoked oom-killer: gfp_mask=0x408d40(GFP_NOFS|__GFP_ZERO|__GFP_NOFAIL|__GFP_ACCOUNT), order=0, oom_score_adj=1000
[  750.416809][T10556] CPU: 1 UID: 0 PID: 10556 Comm: syz.1.16071 Not tainted syzkaller #0 PREEMPT(full) 
[  750.416823][T10556] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  750.416829][T10556] Call Trace:
[  750.416833][T10556]  <TASK>
[  750.416837][T10556]  dump_stack_lvl+0xe8/0x150
[  750.416852][T10556]  dump_header+0xd3/0x4c0
[  750.416867][T10556]  oom_kill_process+0x3ab/0x970
[  750.416885][T10556]  out_of_memory+0x106c/0x1410
[  750.416895][T10556]  ? try_charge_memcg+0xbb9/0x1570
[  750.416908][T10556]  ? __pfx___mutex_lock+0x10/0x10
[  750.416925][T10556]  ? __pfx_out_of_memory+0x10/0x10
[  750.416933][T10556]  ? do_raw_spin_unlock+0x4d/0x210
[  750.416949][T10556]  try_charge_memcg+0xc77/0x1570
[  750.416969][T10556]  ? __pfx_try_charge_memcg+0x10/0x10
[  750.416997][T10556]  ? percpu_ref_tryget+0x15/0x180
[  750.417011][T10556]  ? __memcg_slab_post_alloc_hook+0x65b/0xe80
[  750.417024][T10556]  ? __memcg_slab_post_alloc_hook+0x65b/0xe80
[  750.417035][T10556]  ? __memcg_slab_post_alloc_hook+0x65b/0xe80
[  750.417044][T10556]  __memcg_slab_post_alloc_hook+0x84e/0xe80
[  750.417063][T10556]  ? alloc_buffer_head+0x2a/0x270
[  750.417076][T10556]  kmem_cache_alloc_noprof+0x347/0x650
[  750.417086][T10556]  ? alloc_buffer_head+0x2a/0x270
[  750.417096][T10556]  ? get_mem_cgroup_from_folio+0x57/0x2c0
[  750.417104][T10556]  ? kmem_cache_alloc_noprof+0x15a/0x650
[  750.417116][T10556]  alloc_buffer_head+0x2a/0x270
[  750.417127][T10556]  ? folio_alloc_buffers+0x17d/0x640
[  750.417140][T10556]  folio_alloc_buffers+0x19b/0x640
[  750.417154][T10556]  create_empty_buffers+0x3a/0x530
[  750.417166][T10556]  __block_write_begin_int+0x3c2/0x1910
[  750.417179][T10556]  ? __mark_inode_dirty+0x6ec/0x13b0
[  750.417194][T10556]  ? __pfx_ext4_da_get_block_prep+0x10/0x10
[  750.417208][T10556]  ? __pfx___block_write_begin_int+0x10/0x10
[  750.417221][T10556]  block_page_mkwrite+0x335/0x3d0
[  750.417229][T10556]  ? __pfx_ext4_da_get_block_prep+0x10/0x10
[  750.417242][T10556]  ext4_page_mkwrite+0xcf2/0x1150
[  750.417259][T10556]  ? __pfx_ext4_page_mkwrite+0x10/0x10
[  750.417274][T10556]  do_page_mkwrite+0x14d/0x310
[  750.417288][T10556]  do_pte_missing+0x6dc/0x33f0
[  750.417306][T10556]  ? handle_mm_fault+0xee/0x3170
[  750.417317][T10556]  handle_mm_fault+0x1bd7/0x3170
[  750.417334][T10556]  ? handle_mm_fault+0xee/0x3170
[  750.417346][T10556]  ? __pfx_handle_mm_fault+0x10/0x10
[  750.417383][T10556]  ? lock_mm_and_find_vma+0xa7/0x340
[  750.417397][T10556]  do_user_addr_fault+0x75b/0x1340
[  750.417415][T10556]  exc_page_fault+0x6a/0xc0
[  750.417426][T10556]  asm_exc_page_fault+0x26/0x30
[  750.417435][T10556] RIP: 0033:0x7f2d264656a8
[  750.417444][T10556] Code: be 08 00 00 00 48 89 ef 48 8d 50 ff 48 89 15 cf 00 ee 00 44 88 78 ff 44 8b 3d b4 00 ee 00 e8 2f 52 ff ff 48 8b 05 c0 00 ee 00 <44> 89 38 41 bf 04 00 00 00 48 83 c0 08 66 44 89 78 fc 83 05 af 00
[  750.417452][T10556] RSP: 002b:00007ffdc9d71d40 EFLAGS: 00010202
[  750.417460][T10556] RAX: 0000001b33b24218 RBX: 0000000000000026 RCX: 00000000003ffde8
[  750.417465][T10556] RDX: 0000001b33b24218 RSI: 0000000000000008 RDI: 00007f2d27345720
[  750.417471][T10556] RBP: 00007f2d27345720 R08: 0000000000000000 R09: 00007f2d26816038
[  750.417476][T10556] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000000
[  750.417480][T10556] R13: 0000000000000004 R14: 0000000000000000 R15: 0000000000000005
[  750.417494][T10556]  </TASK>
[  750.521154][T10556] memory: usage 307200kB, limit 307200kB, failcnt 3391
[  750.523750][T10556] memory+swap: usage 307388kB, limit 9007199254740988kB, failcnt 0
[  750.527470][T10556] kmem: usage 296476kB, limit 9007199254740988kB, failcnt 0
[  750.530869][T10556] Memory cgroup stats for /syz1:
[  750.531146][T10556] cache 4096
[  750.534211][T10556] rss 0
[  750.535244][T10556] rss_huge 0
[  750.536475][T10556] shmem 0
[  750.537601][T10556] mapped_file 0
[  750.541254][T10556] dirty 0
[  750.542192][T10556] writeback 0
[  750.543267][T10556] workingset_refault_anon 3
[  750.544667][T10556] workingset_refault_file 15
[  750.546035][T10556] swap 192512
[  750.547039][T10556] swapcached 212992
[  750.548722][T10556] pgpgin 476059
[  750.549847][T10556] pgpgout 473378
[  750.551026][T10556] pgfault 1007270
[  750.552237][T10556] pgmajfault 9
[  750.553333][T10556] inactive_anon 8491008
[  750.554634][T10556] active_anon 2224128
[  750.555821][T10556] inactive_file 0
[  750.556920][T10556] active_file 4096
[  750.558022][T10556] unevictable 0
[  750.559840][T10556] hierarchical_memory_limit 314572800
[  750.561456][T10556] hierarchical_memsw_limit 9223372036854771712
[  750.563320][T10556] total_cache 4096
[  750.564429][T10556] total_rss 0
[  750.565449][T10556] total_rss_huge 0
[  750.566502][T10556] total_shmem 0
[  750.567529][T10556] total_mapped_file 0
[  750.569379][T10556] total_dirty 0
[  750.570418][T10556] total_writeback 0
[  750.571643][T10556] total_workingset_refault_anon 3
[  750.573535][T10556] total_workingset_refault_file 15
[  750.575145][T10556] total_swap 192512
[  750.576375][T10556] total_swapcached 212992
[  750.577682][T10556] total_pgpgin 476059
[  750.579605][T10556] total_pgpgout 473378
[  750.580828][T10556] total_pgfault 1007274
[  750.582262][T10556] total_pgmajfault 9
[  750.583578][T10556] total_inactive_anon 8491008
[  750.586635][T10556] total_active_anon 2224128
[  750.588063][T10556] total_inactive_file 0
[  750.589744][T10556] total_active_file 4096
[  750.591265][T10556] total_unevictable 0
[  750.592607][T10556] anon_cost 0
[  750.593671][T10556] file_cost 0
[  750.594792][T10556] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.16071,pid=10556,uid=0
[  750.600482][T10556] Memory cgroup out of memory: Killed process 10556 (syz.1.16071) total-vm:102160kB, anon-rss:1244kB, file-rss:22540kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000
[  750.850757][T10718] tunl0: Caught tx_queue_len zero misconfig
[  750.958445][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  751.345043][T10753] netlink: 24 bytes leftover after parsing attributes in process `syz.1.16156'.
[  751.388819][T10753] netlink: 16 bytes leftover after parsing attributes in process `syz.1.16156'.
[  751.401956][T10753] netlink: 4 bytes leftover after parsing attributes in process `syz.1.16156'.
[  751.465685][T10760] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  751.682170][T10769] ip6_vti0 speed is unknown, defaulting to 1000
[  751.998449][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  752.170489][T10769] lo speed is unknown, defaulting to 1000
[  752.400206][ T1381] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  752.485479][T10807] netlink: 12 bytes leftover after parsing attributes in process `syz.0.16177'.
[  752.492482][T10805] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  752.495869][T10805] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  752.655123][T10800] tipc: Resetting bearer <eth:syzkaller0>
[  752.751679][T10810] netlink: 24 bytes leftover after parsing attributes in process `syz.1.16178'.
[  753.048514][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  753.261371][T10830] ip6_vti0 speed is unknown, defaulting to 1000
[  753.564449][T10830] lo speed is unknown, defaulting to 1000
[  753.999841][T10847] netlink: 8 bytes leftover after parsing attributes in process `syz.2.16189'.
[  754.078279][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  755.128407][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  756.100804][T10824] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  756.158510][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  756.271908][T10879] netlink: 16 bytes leftover after parsing attributes in process `syz.0.16203'.
[  756.286004][T10879] netlink: 16 bytes leftover after parsing attributes in process `syz.0.16203'.
[  756.505668][T10902] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  757.208466][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  757.754470][T10968] 8021q: adding VLAN 0 to HW filter on device 60X
[  757.779525][T10968] veth1_macvtap: left promiscuous mode
[  757.782271][T10968] veth0_macvtap: left promiscuous mode
[  757.784972][T10968] veth0_macvtap: entered promiscuous mode
[  757.790408][T10968] A link change request failed with some changes committed already. Interface wlan2 may have been left with an inconsistent configuration, please check.
[  757.967116][T10975] veth1_macvtap: renamed from vlan0 (while UP)
[  758.224016][T10998] netlink: 52 bytes leftover after parsing attributes in process `syz.0.16254'.
[  758.238333][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  758.250577][T10998] netlink: 40 bytes leftover after parsing attributes in process `syz.0.16254'.
[  758.260844][T11001] netlink: 12 bytes leftover after parsing attributes in process `syz.2.16255'.
[  758.273926][T11001] netlink: 580 bytes leftover after parsing attributes in process `syz.2.16255'.
[  758.279055][T10998] sctp: [Deprecated]: syz.0.16254 (pid 10998) Use of struct sctp_assoc_value in delayed_ack socket option.
[  758.279055][T10998] Use struct sctp_sack_info instead
[  759.288502][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  759.711552][T11083] netlink: 8 bytes leftover after parsing attributes in process `syz.2.16290'.
[  759.714769][T11083] netlink: 8 bytes leftover after parsing attributes in process `syz.2.16290'.
[  760.328319][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  760.466128][T11139] netlink: 20 bytes leftover after parsing attributes in process `syz.1.16315'.
[  760.600881][T11147] netlink: 'syz.0.16318': attribute type 9 has an invalid length.
[  760.603979][T11147] netlink: 'syz.0.16318': attribute type 11 has an invalid length.
[  760.610535][T11147] netlink: 190972 bytes leftover after parsing attributes in process `syz.0.16318'.
[  761.358783][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  761.970683][T11243] __nla_validate_parse: 2 callbacks suppressed
[  761.970694][T11243] netlink: 12 bytes leftover after parsing attributes in process `syz.0.16361'.
[  761.976642][T11243] netlink: 12 bytes leftover after parsing attributes in process `syz.0.16361'.
[  762.010909][T11249] netlink: 12 bytes leftover after parsing attributes in process `syz.0.16363'.
[  762.217389][T11264] netlink: 8 bytes leftover after parsing attributes in process `syz.0.16370'.
[  762.224248][T11264] netlink: 'syz.0.16370': attribute type 22 has an invalid length.
[  762.226943][T11264] netlink: 36 bytes leftover after parsing attributes in process `syz.0.16370'.
[  762.398350][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  762.409149][T11287] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check.
[  762.656929][T11306] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_bond, syncid = 0, id = 0
[  762.744033][T11311] SET target dimension over the limit!
[  763.077477][T11338] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  763.438452][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  764.010397][T11406] netlink: 8 bytes leftover after parsing attributes in process `syz.1.16432'.
[  764.013126][T11406] netlink: 8 bytes leftover after parsing attributes in process `syz.1.16432'.
[  764.017881][T11406] netlink: 116 bytes leftover after parsing attributes in process `syz.1.16432'.
[  764.070105][T11411] netlink: 'syz.0.16437': attribute type 1 has an invalid length.
[  764.074710][T11411] netlink: 'syz.0.16437': attribute type 2 has an invalid length.
[  764.084652][T11413] xt_TCPMSS: Only works on TCP SYN packets
[  764.121862][T11417] netlink: 4 bytes leftover after parsing attributes in process `syz.2.16438'.
[  764.129278][T11416] veth1_macvtap: Caught tx_queue_len zero misconfig
[  764.134843][T11416] netlink: 28 bytes leftover after parsing attributes in process `syz.1.16439'.
[  764.342250][T11440] bond27: up delay (2) is not a multiple of miimon (80), value rounded to 0 ms
[  764.353800][T11440] bond27: entered promiscuous mode
[  764.359464][T11440] 8021q: adding VLAN 0 to HW filter on device bond27
[  764.488463][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  765.160185][T11509] vlan0: entered promiscuous mode
[  765.162922][T11509] bridge0: entered promiscuous mode
[  765.228775][T32116] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  765.235986][T32116] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  765.245061][T32116] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  765.247721][T32116] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  765.527104][T11543] sch_tbf: burst 185 is lower than device syzkaller0 mtu (1514) !
[  765.530371][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  766.568346][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  766.643737][   T34] audit: type=1800 audit(1778615408.397:26): pid=11591 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.16516" name="memory.events" dev="tmpfs" ino=26222 res=0 errno=0
[  766.659757][   T34] audit: type=1804 audit(1778615408.417:27): pid=11591 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.16516" name="/newroot/5199/memory.events" dev="tmpfs" ino=26222 res=1 errno=0
[  766.827205][T11612] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  766.844197][T11612] syzkaller0: mtu less than device minimum
[  767.070904][T11628] __nla_validate_parse: 8 callbacks suppressed
[  767.070914][T11628] netlink: 8 bytes leftover after parsing attributes in process `syz.1.16532'.
[  767.598347][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  767.673202][T11660] netlink: 16 bytes leftover after parsing attributes in process `syz.1.16550'.
[  767.823263][T11672] bond28: option lacp_rate: invalid value (128)
[  767.833027][T11672] bond28 (unregistering): Released all slaves
[  768.113432][T11712] nicvf0: tun_chr_ioctl cmd 1074812117
[  768.132155][T11715] netlink: 'syz.0.16565': attribute type 1 has an invalid length.
[  768.295853][T11729] 8021q: adding VLAN 0 to HW filter on device 
[  768.301134][T11735] openvswitch: netlink: IPv6 tunnel dst address is zero
[  768.302691][T11729] 8021q: adding VLAN 0 to HW filter on device batadv0
[  768.325738][T11729] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  768.330893][ T5729] lo speed is unknown, defaulting to 1000
[  768.338532][ T5729] sqz0: Port: 1 Link ACTIVE
[  768.346625][   T24] lo speed is unknown, defaulting to 1000
[  768.638505][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  769.439291][T11776] erspan0: entered promiscuous mode
[  769.442070][T11775] erspan0: left promiscuous mode
[  769.624209][T11795] bond32: option lacp_active: mode dependency failed, not supported in mode balance-alb(6)
[  769.630362][T11795] bond32 (unregistering): Released all slaves
[  769.678336][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  770.202022][T11846] netlink: 20 bytes leftover after parsing attributes in process `syz.1.16619'.
[  770.718517][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  770.781382][T11882] netlink: 12 bytes leftover after parsing attributes in process `syz.0.16636'.
[  770.791898][T11884] netlink: 'syz.1.16637': attribute type 30 has an invalid length.
[  771.758445][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  772.584578][T11986] netlink: 12 bytes leftover after parsing attributes in process `syz.0.16684'.
[  772.798350][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  773.099869][T12015] ip6_vti0 speed is unknown, defaulting to 1000
[  773.473532][T12015] lo speed is unknown, defaulting to 1000
[  773.838434][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  774.049697][T12047] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0
[  774.352112][T12067] IPVS: set_ctl: invalid protocol: 94 255.255.255.255:20002
[  774.546151][T12082] netlink: 'syz.1.16711': attribute type 19 has an invalid length.
[  774.557980][T12082] netlink: 4 bytes leftover after parsing attributes in process `syz.1.16711'.
[  774.579650][T12082] netlink: 'syz.1.16711': attribute type 19 has an invalid length.
[  774.584002][T12082] netlink: 4 bytes leftover after parsing attributes in process `syz.1.16711'.
[  774.691378][T12093] ip6_vti0 speed is unknown, defaulting to 1000
[  774.852883][T12115] netlink: 8 bytes leftover after parsing attributes in process `syz.2.16727'.
[  774.857822][T12115] IPVS: Unknown mcast interface: veth0_to_bond
[  774.878593][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  774.981292][T12093] lo speed is unknown, defaulting to 1000
[  775.023898][T12128] bond31: (slave veth41): Releasing backup interface
[  775.026033][T12128] bond31: (slave veth41): the permanent HWaddr of slave - fa:b4:54:4c:cf:11 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  775.043298][T12128] bond31: (slave batadv4): Releasing backup interface
[  775.244465][T12145] netlink: 'syz.0.16742': attribute type 1 has an invalid length.
[  775.352741][T12156] "syz.0.16746" (12156) uses obsolete ecb(arc4) skcipher
[  775.532955][T12170] netlink: 'syz.2.16753': attribute type 1 has an invalid length.
[  775.918342][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  775.943415][T12198] bond0: (slave wlan0): Opening slave failed
[  776.047362][T12208] netlink: 'syz.1.16772': attribute type 1 has an invalid length.
[  776.063816][T12212] netlink: 8 bytes leftover after parsing attributes in process `syz.2.16771'.
[  776.171522][T12217] netlink: 4 bytes leftover after parsing attributes in process `syz.2.16771'.
[  776.267887][T12228] netlink: 24 bytes leftover after parsing attributes in process `syz.0.16779'.
[  776.326321][T12232] netlink: 'syz.0.16781': attribute type 1 has an invalid length.
[  776.968533][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  778.008735][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  778.105687][T12333] netlink: 8 bytes leftover after parsing attributes in process `syz.2.16811'.
[  778.153200][T12339] netlink: 'syz.0.16813': attribute type 1 has an invalid length.
[  778.222420][T12346] netlink: 12 bytes leftover after parsing attributes in process `syz.0.16817'.
[  778.225224][T12346] netlink: 8 bytes leftover after parsing attributes in process `syz.0.16817'.
[  778.277372][T12348] bond32: Unable to set down delay as MII monitoring is disabled
[  778.284795][T12348] bond32 (unregistering): Released all slaves
[  778.297733][T12350] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  778.405975][T12358] netlink: 16 bytes leftover after parsing attributes in process `syz.0.16821'.
[  778.413993][T12358] netlink: 12 bytes leftover after parsing attributes in process `syz.0.16821'.
[  778.417068][T12358] netlink: 12 bytes leftover after parsing attributes in process `syz.0.16821'.
[  778.460150][T12363] netlink: 'syz.0.16823': attribute type 8 has an invalid length.
[  778.471019][T12362] netlink: 32 bytes leftover after parsing attributes in process `syz.2.16822'.
[  779.038430][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  779.087668][T12397] netlink: 'syz.1.16836': attribute type 1 has an invalid length.
[  779.115781][T12397] bond28: entered promiscuous mode
[  779.118403][T12397] 8021q: adding VLAN 0 to HW filter on device bond28
[  779.143227][T12397] 8021q: adding VLAN 0 to HW filter on device bond28
[  779.145611][T12397] bond28: (slave wireguard0): The slave device specified does not support setting the MAC address
[  779.149239][T12397] bond28: (slave wireguard0): Setting fail_over_mac to active for active-backup mode
[  779.159973][T12397] bond28: (slave wireguard0): making interface the new active one
[  779.162939][T12397] wireguard0: entered promiscuous mode
[  779.166222][T12397] bond28: (slave wireguard0): Enslaving as an active interface with an up link
[  779.583272][T12433] netlink: 4 bytes leftover after parsing attributes in process `syz.0.16851'.
[  779.597109][T26951] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  779.847598][T12463] netlink: 8 bytes leftover after parsing attributes in process `syz.1.16866'.
[  780.017078][T12477] sctp: [Deprecated]: syz.1.16871 (pid 12477) Use of int in max_burst socket option.
[  780.017078][T12477] Use struct sctp_assoc_value instead
[  780.076433][T12482] netlink: 8 bytes leftover after parsing attributes in process `syz.1.16873'.
[  780.088551][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  780.321989][T12503] syzkaller1: entered promiscuous mode
[  780.327204][T12503] syzkaller1: entered allmulticast mode
[  780.715055][T12524] ip6_vti0 speed is unknown, defaulting to 1000
[  781.128452][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  781.143689][T12557] netlink: 'syz.0.16904': attribute type 2 has an invalid length.
[  781.204886][T12524] lo speed is unknown, defaulting to 1000
[  782.119365][T12564] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  782.166896][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  782.531637][T12613] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  782.567976][T12613] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  782.636905][T12613] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  782.691573][T12613] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  782.847170][T32116] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  782.890016][T32116] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  782.921773][T32116] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  782.953588][T32116] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  783.198721][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  783.920872][T12684] __nla_validate_parse: 4 callbacks suppressed
[  783.920916][T12684] netlink: 24 bytes leftover after parsing attributes in process `syz.2.16956'.
[  783.963699][T12674] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  783.975037][T12674] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  784.043560][T12690] netlink: 'syz.2.16959': attribute type 3 has an invalid length.
[  784.053578][T12692] netlink: 4 bytes leftover after parsing attributes in process `syz.0.16960'.
[  784.248311][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  784.818792][T12746] syz.2.16980: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  784.824309][T12746] CPU: 0 UID: 0 PID: 12746 Comm: syz.2.16980 Not tainted syzkaller #0 PREEMPT(full) 
[  784.824327][T12746] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  784.824335][T12746] Call Trace:
[  784.824341][T12746]  <TASK>
[  784.824348][T12746]  dump_stack_lvl+0xe8/0x150
[  784.824377][T12746]  warn_alloc+0x249/0x340
[  784.824397][T12746]  ? stack_trace_save+0xa9/0x100
[  784.824419][T12746]  ? __pfx_warn_alloc+0x10/0x10
[  784.824441][T12746]  ? kasan_save_track+0x4f/0x80
[  784.824457][T12746]  ? kasan_save_track+0x3e/0x80
[  784.824472][T12746]  ? __kasan_kmalloc+0x93/0xb0
[  784.824487][T12746]  ? __kmalloc_cache_noprof+0x31c/0x660
[  784.824503][T12746]  ? xskq_create+0x56/0x170
[  784.824518][T12746]  ? xsk_setsockopt+0x54c/0x990
[  784.824531][T12746]  ? do_sock_setsockopt+0x17c/0x1b0
[  784.824546][T12746]  ? __x64_sys_setsockopt+0x13d/0x1b0
[  784.824561][T12746]  ? do_syscall_64+0x15f/0xf80
[  784.824583][T12746]  __vmalloc_node_range_noprof+0x132/0x1750
[  784.824627][T12746]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  784.824642][T12746]  ? __kasan_kmalloc+0x93/0xb0
[  784.824655][T12746]  vmalloc_user_noprof+0xad/0xe0
[  784.824667][T12746]  ? xskq_create+0xbf/0x170
[  784.824677][T12746]  xskq_create+0xbf/0x170
[  784.824689][T12746]  xsk_init_queue+0x8a/0xe0
[  784.824700][T12746]  xsk_setsockopt+0x54c/0x990
[  784.824710][T12746]  ? __pfx_xsk_setsockopt+0x10/0x10
[  784.824719][T12746]  ? __pfx_aa_sk_perm+0x10/0x10
[  784.824730][T12746]  ? aa_sock_opt_perm+0xff/0x1a0
[  784.824742][T12746]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  784.824754][T12746]  ? __pfx_xsk_setsockopt+0x10/0x10
[  784.824763][T12746]  do_sock_setsockopt+0x17c/0x1b0
[  784.824776][T12746]  __x64_sys_setsockopt+0x13d/0x1b0
[  784.824788][T12746]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  784.824797][T12746]  do_syscall_64+0x15f/0xf80
[  784.824807][T12746]  ? trace_irq_disable+0x3b/0x140
[  784.824821][T12746]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  784.824866][T12746] RIP: 0033:0x7fe38f59cdd9
[  784.824875][T12746] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  784.824883][T12746] RSP: 002b:00007fe390503028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  784.824893][T12746] RAX: ffffffffffffffda RBX: 00007fe38f815fa0 RCX: 00007fe38f59cdd9
[  784.824899][T12746] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000007
[  784.824904][T12746] RBP: 00007fe38f632d69 R08: 0000000000000004 R09: 0000000000000000
[  784.824910][T12746] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[  784.824915][T12746] R13: 00007fe38f816038 R14: 00007fe38f815fa0 R15: 00007ffdec048418
[  784.824929][T12746]  </TASK>
[  784.824932][T12746] Mem-Info:
[  784.907080][T12746] active_anon:17774 inactive_anon:3920 isolated_anon:0
[  784.907080][T12746]  active_file:11021 inactive_file:38772 isolated_file:0
[  784.907080][T12746]  unevictable:1768 dirty:113 writeback:0
[  784.907080][T12746]  slab_reclaimable:12623 slab_unreclaimable:181011
[  784.907080][T12746]  mapped:18121 shmem:2367 pagetables:1133
[  784.907080][T12746]  sec_pagetables:0 bounce:0
[  784.907080][T12746]  kernel_misc_reclaimable:0
[  784.907080][T12746]  free:990428 free_pcp:30638 free_cma:0
[  784.921689][T12746] Node 0 active_anon:57400kB inactive_anon:10500kB active_file:27072kB inactive_file:55168kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:45108kB dirty:272kB writeback:0kB shmem:4672kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:5520kB pagetables:2052kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  784.933812][T12746] Node 1 active_anon:13696kB inactive_anon:5180kB active_file:17012kB inactive_file:99920kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:27376kB dirty:180kB writeback:0kB shmem:4796kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:9472kB pagetables:2580kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  784.946559][T12746] Node 0 DMA free:15360kB boost:0kB min:240kB low:300kB high:360kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  784.958461][T12746] lowmem_reserve[]: 0 1587 2117 2117 2117
[  784.960587][T12746] Node 0 DMA32 free:1144600kB boost:0kB min:25012kB low:31264kB high:37516kB reserved_highatomic:0KB free_highatomic:0KB active_anon:42340kB inactive_anon:10244kB active_file:23968kB inactive_file:216kB unevictable:0kB writepending:196kB zspages:0kB present:2080636kB managed:1625328kB mlocked:0kB bounce:0kB free_pcp:22920kB local_pcp:12952kB free_cma:0kB
[  784.971184][T12746] lowmem_reserve[]: 0 0 530 530 530
[  784.972951][T12746] Node 0 Normal free:7992kB boost:0kB min:8512kB low:10640kB high:12768kB reserved_highatomic:0KB free_highatomic:0KB active_anon:15228kB inactive_anon:256kB active_file:3104kB inactive_file:54952kB unevictable:3536kB writepending:76kB zspages:0kB present:1572868kB managed:543152kB mlocked:0kB bounce:0kB free_pcp:6844kB local_pcp:5052kB free_cma:0kB
[  784.984316][T12746] lowmem_reserve[]: 0 0 0 0 0
[  784.986926][T12746] Node 1 Normal free:2792704kB boost:0kB min:56344kB low:70428kB high:84512kB reserved_highatomic:0KB free_highatomic:0KB active_anon:13788kB inactive_anon:5180kB active_file:17012kB inactive_file:99920kB unevictable:3536kB writepending:180kB zspages:20kB present:3670012kB managed:3594684kB mlocked:0kB bounce:0kB free_pcp:91512kB local_pcp:31664kB free_cma:0kB
[  784.999051][T12746] lowmem_reserve[]: 0 0 0 0 0
[  785.000890][T12746] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  785.005426][T12746] Node 0 DMA32: 418*4kB (UME) 156*8kB (UME) 457*16kB (UME) 376*32kB (UME) 150*64kB (UME) 139*128kB (UE) 79*256kB (UME) 35*512kB (UME) 38*1024kB (UM) 25*2048kB (UME) 236*4096kB (UM) = 1144568kB
[  785.012297][T12746] Node 0 Normal: 6*4kB (UE) 2*8kB (UE) 93*16kB (U) 110*32kB (U) 46*64kB (U) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 7992kB
[  785.017269][T12746] Node 1 Normal: 2530*4kB (UM) 2513*8kB (UM) 1628*16kB (UM) 1283*32kB (UME) 828*64kB (UME) 627*128kB (UME) 350*256kB (UM) 167*512kB (UME) 101*1024kB (UME) 61*2048kB (UME) 527*4096kB (UM) = 2792624kB
[  785.025011][T12746] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  785.028561][T12746] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  785.032353][T12746] 52137 total pagecache pages
[  785.034886][T12746] 1 pages in swap cache
[  785.036615][T12746] Free swap  = 124988kB
[  785.038648][T12746] Total swap = 124996kB
[  785.040343][T12746] 1834877 pages RAM
[  785.041935][T12746] 0 pages HighMem/MovableOnly
[  785.043781][T12746] 390246 pages reserved
[  785.045362][T12746] 0 pages cma reserved
[  785.103605][T12763] netlink: 'syz.1.16987': attribute type 1 has an invalid length.
[  785.130886][T12765] netlink: 8 bytes leftover after parsing attributes in process `syz.2.16988'.
[  785.233637][T12777] netlink: 4 bytes leftover after parsing attributes in process `syz.1.16994'.
[  785.288355][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  785.462244][T12792] netlink: 20 bytes leftover after parsing attributes in process `syz.1.16999'.
[  785.826017][T12814] ip6_vti0 speed is unknown, defaulting to 1000
[  786.105011][T12829] netlink: 16 bytes leftover after parsing attributes in process `syz.1.17015'.
[  786.154474][T12814] lo speed is unknown, defaulting to 1000
[  786.305958][T12837] netlink: 4 bytes leftover after parsing attributes in process `syz.1.17019'.
[  786.318388][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  786.324225][T12837] netlink: 12 bytes leftover after parsing attributes in process `syz.1.17019'.
[  786.948294][T12872] netlink: 8 bytes leftover after parsing attributes in process `syz.1.17032'.
[  786.953916][T12869] bond29: option lacp_active: mode dependency failed, not supported in mode balance-rr(0)
[  786.961145][T12869] bond29 (unregistering): Released all slaves
[  786.966975][T12872] netlink: 12 bytes leftover after parsing attributes in process `syz.1.17032'.
[  787.358435][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  787.525796][T12892] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  787.532462][T12892] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  787.844027][T12909] tipc: Resetting bearer <eth:syzkaller0>
[  788.398518][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  788.636797][T12951] x_tables: duplicate underflow at hook 4
[  788.741987][T12957] netlink: 'syz.0.17066': attribute type 2 has an invalid length.
[  788.817493][T12963] sctp: [Deprecated]: syz.0.17069 (pid 12963) Use of struct sctp_assoc_value in delayed_ack socket option.
[  788.817493][T12963] Use struct sctp_sack_info instead
[  789.112663][T12985] xt_CT: No such helper "netbios-ns"
[  789.270211][T13001] __nla_validate_parse: 9 callbacks suppressed
[  789.270228][T13001] netlink: 20 bytes leftover after parsing attributes in process `syz.0.17086'.
[  789.275861][T13001] netlink: 8 bytes leftover after parsing attributes in process `syz.0.17086'.
[  789.429318][T13013] netlink: 'syz.2.17091': attribute type 7 has an invalid length.
[  789.438340][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  789.606982][T13024] netlink: 10 bytes leftover after parsing attributes in process `syz.2.17096'.
[  790.432018][T13039] openvswitch: netlink: IPv4 tun info is not correct
[  790.478401][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  790.684695][T13055] netlink: 'syz.0.17110': attribute type 1 has an invalid length.
[  790.742612][T13061] netlink: 28 bytes leftover after parsing attributes in process `syz.2.17113'.
[  790.842139][T13069] netlink: 8 bytes leftover after parsing attributes in process `syz.1.17117'.
[  791.157184][T13099] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6
[  791.507258][T13132] netlink: 'syz.1.17147': attribute type 1 has an invalid length.
[  791.510062][T13132] netlink: 224 bytes leftover after parsing attributes in process `syz.1.17147'.
[  791.528407][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  791.583810][T13139] netlink: 'syz.0.17151': attribute type 11 has an invalid length.
[  791.655715][T13147] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  791.726790][T13153] xt_hashlimit: size too large, truncated to 1048576
[  791.839195][T13153] netlink: 'syz.0.17158': attribute type 1 has an invalid length.
[  791.841494][T13153] netlink: 224 bytes leftover after parsing attributes in process `syz.0.17158'.
[  792.220923][T13183] bond0: option arp_validate: invalid value (55553)
[  792.301413][T13191] SET target dimension over the limit!
[  792.455176][T13207] netlink: 24 bytes leftover after parsing attributes in process `syz.2.17171'.
[  792.568322][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  793.447367][T13221] netlink: 156 bytes leftover after parsing attributes in process `syz.2.17178'.
[  793.529158][T13232] netlink: 'syz.0.17183': attribute type 2 has an invalid length.
[  793.608340][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  793.647711][T13241] netlink: 4 bytes leftover after parsing attributes in process `syz.1.17187'.
[  794.074307][T13268] ip6_vti0 speed is unknown, defaulting to 1000
[  794.336819][T13268] lo speed is unknown, defaulting to 1000
[  794.432404][T13292] netlink: 8 bytes leftover after parsing attributes in process `syz.2.17203'.
[  794.435098][T13292] bond0: Unable to set peer notification delay as MII monitoring is disabled
[  794.524561][T13297] netlink: 'syz.2.17205': attribute type 5 has an invalid length.
[  794.648511][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  795.480633][T13348] netlink: 'syz.0.17226': attribute type 2 has an invalid length.
[  795.504944][T13349] netlink: 240 bytes leftover after parsing attributes in process `syz.1.17222'.
[  795.688316][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  795.721913][T13357] netlink: 56 bytes leftover after parsing attributes in process `syz.0.17230'.
[  795.794819][T13361] netlink: 12 bytes leftover after parsing attributes in process `syz.0.17232'.
[  796.056202][T13371] ip6_vti0 speed is unknown, defaulting to 1000
[  796.544229][T13371] lo speed is unknown, defaulting to 1000
[  796.718399][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  796.810696][T13389] batman_adv: batadv0: Adding interface: dummy0
[  796.815280][T13389] batman_adv: batadv0: The MTU of interface dummy0 is too small (1280) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1312 would solve the problem.
[  796.842920][T13389] batman_adv: batadv0: Interface activated: dummy0
[  796.876021][T13389] batadv0: mtu less than device minimum
[  796.879439][T13389] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  796.884275][T13389] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  796.889221][T13389] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  796.894156][T13389] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  796.898994][T13389] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  796.903860][T13389] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  796.927310][T13393] mac80211_hwsim hwsim6 syzkaller0: left promiscuous mode
[  796.930851][T13393] mac80211_hwsim hwsim6 syzkaller0: left allmulticast mode
[  797.669710][T13451] netlink: 8 bytes leftover after parsing attributes in process `syz.2.17268'.
[  797.674539][T13451] netlink: 8 bytes leftover after parsing attributes in process `syz.2.17268'.
[  797.746258][T13461] pim6reg0: tun_chr_ioctl cmd 1074025675
[  797.748129][T13461] pim6reg0: persist disabled
[  798.131676][T13487] ip6_vti0 speed is unknown, defaulting to 1000
[  798.373447][T13487] lo speed is unknown, defaulting to 1000
[  798.620064][T13500] netlink: 44 bytes leftover after parsing attributes in process `syz.1.17286'.
[  798.809843][T13505] netlink: 4 bytes leftover after parsing attributes in process `syz.2.17288'.
[  798.855815][T13507] ip6_vti0 speed is unknown, defaulting to 1000
[  799.408113][T13529] netlink: 256 bytes leftover after parsing attributes in process `syz.1.17299'.
[  799.413044][T13529] netlink: 72 bytes leftover after parsing attributes in process `syz.1.17299'.
[  799.470973][T13533] netlink: 16 bytes leftover after parsing attributes in process `syz.1.17301'.
[  799.525158][T13507] lo speed is unknown, defaulting to 1000
[  799.848405][    C0] net_ratelimit: 17 callbacks suppressed
[  799.848415][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  799.853378][T13561] netlink: 'syz.1.17313': attribute type 11 has an invalid length.
[  800.244482][T13595] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  800.270469][T13595] tipc: Resetting bearer <eth:syzkaller0>
[  800.574783][T13618] netlink: 16 bytes leftover after parsing attributes in process `syz.1.17339'.
[  800.878414][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  800.886515][T13650] netlink: 76 bytes leftover after parsing attributes in process `syz.1.17354'.
[  801.179717][T13676] netlink: 4 bytes leftover after parsing attributes in process `syz.1.17365'.
[  801.187395][T13675] mac80211_hwsim hwsim6 syzkaller0: entered promiscuous mode
[  801.198256][T13675] mac80211_hwsim hwsim6 syzkaller0: entered allmulticast mode
[  801.323238][T13686] netlink: 28 bytes leftover after parsing attributes in process `syz.1.17371'.
[  801.403013][T13691] x_tables: arp_tables: NFQUEUE target: not valid for this family
[  801.524331][T13701] netlink: 'syz.0.17378': attribute type 1 has an invalid length.
[  801.579849][T13705] mac80211_hwsim hwsim6 syzkaller0: left promiscuous mode
[  801.582527][T13705] mac80211_hwsim hwsim6 syzkaller0: left allmulticast mode
[  801.918322][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  801.932095][T13737] netlink: 4 bytes leftover after parsing attributes in process `syz.2.17392'.
[  801.990687][T13739] IPv6: Can't replace route, no match found
[  802.692886][T13783] ip6_vti0 speed is unknown, defaulting to 1000
[  802.968298][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  803.221712][T13783] lo speed is unknown, defaulting to 1000
[  803.999476][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  804.255838][T13828] netlink: 8 bytes leftover after parsing attributes in process `syz.2.17433'.
[  804.561722][T13845] bond0: Caught tx_queue_len zero misconfig
[  805.048452][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  805.086222][T13882] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  805.235387][T13894] netlink: 'syz.2.17460': attribute type 29 has an invalid length.
[  805.240833][T13894] netlink: 'syz.2.17460': attribute type 29 has an invalid length.
[  805.244801][T13894] netlink: 500 bytes leftover after parsing attributes in process `syz.2.17460'.
[  805.978976][T13938] netlink: 8 bytes leftover after parsing attributes in process `syz.1.17480'.
[  806.078362][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  806.264680][T13956] 8021q: adding VLAN 0 to HW filter on device macvlan7
[  806.323703][T13961] netlink: 24 bytes leftover after parsing attributes in process `syz.0.17490'.
[  807.118473][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  807.917987][T14034] bond26: option mode: invalid value (254)
[  807.935047][T14034] bond26 (unregistering): Released all slaves
[  808.109164][T14052] netlink: 24 bytes leftover after parsing attributes in process `syz.1.17531'.
[  808.158399][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  808.268056][T14068] netlink: 4 bytes leftover after parsing attributes in process `syz.0.17535'.
[  808.674301][T14110] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.17556'.
[  809.198402][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  809.895020][T14162] netlink: 20 bytes leftover after parsing attributes in process `syz.1.17579'.
[  810.057952][T14174] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  810.248327][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  810.687619][T14206] netlink: 104 bytes leftover after parsing attributes in process `syz.2.17597'.
[  811.141954][T14216] Timeout policy `syz1' can only be used by L3 protocol number 1536
[  811.288446][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  811.350271][T14227] netlink: 16 bytes leftover after parsing attributes in process `syz.0.17606'.
[  811.424131][T14236] netlink: 8 bytes leftover after parsing attributes in process `syz.2.17611'.
[  811.513419][T14247] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  811.851900][T14284] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16)
[  811.860934][T14284] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  811.903136][T14286] netlink: 'syz.2.17632': attribute type 1 has an invalid length.
[  811.957785][T14286] bond32: (slave vxcan1): The slave device specified does not support setting the MAC address
[  811.961928][T14286] bond32: (slave vxcan1): Error -95 calling set_mac_address
[  812.048069][T14286] bond32: (slave bridge21): Enslaving as an active interface with a down link
[  812.072129][T14286] macvlan7: entered promiscuous mode
[  812.077507][T14286] macvlan7: entered allmulticast mode
[  812.081399][T14286] bond32: entered promiscuous mode
[  812.086843][T14286] 8021q: adding VLAN 0 to HW filter on device macvlan7
[  812.091468][T14286] bond32: left promiscuous mode
[  812.106958][T14294] ip6tnl0: Caught tx_queue_len zero misconfig
[  812.305995][T14301] veth0_macvtap: Caught tx_queue_len zero misconfig
[  812.316672][T14301] netlink: 24 bytes leftover after parsing attributes in process `syz.1.17638'.
[  812.328452][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  812.405053][T14308] netlink: 28 bytes leftover after parsing attributes in process `syz.1.17641'.
[  812.428642][T14308] ip6tnl0: Caught tx_queue_len zero misconfig
[  813.117706][T14346] netlink: 4 bytes leftover after parsing attributes in process `syz.1.17658'.
[  813.128519][T14346] netlink: 'syz.1.17658': attribute type 1 has an invalid length.
[  813.131672][T14346] netlink: 4 bytes leftover after parsing attributes in process `syz.1.17658'.
[  813.298555][T14360] netlink: 16 bytes leftover after parsing attributes in process `syz.0.17664'.
[  813.322206][T14360] bond26: option primary_reselect: invalid value (133)
[  813.331088][T14360] bond26 (unregistering): Released all slaves
[  813.358247][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  813.375048][T14368] netlink: 'syz.2.17667': attribute type 1 has an invalid length.
[  813.547947][T14382] netlink: 'syz.0.17674': attribute type 1 has an invalid length.
[  813.552561][T14382] netlink: 4 bytes leftover after parsing attributes in process `syz.0.17674'.
[  813.555214][T14382] netlink: 'syz.0.17674': attribute type 1 has an invalid length.
[  813.736339][T14401] netlink: 4 bytes leftover after parsing attributes in process `syz.0.17676'.
[  813.842843][ T1381] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  814.408291][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  814.514661][T14425] netlink: 'syz.0.17691': attribute type 10 has an invalid length.
[  814.566342][T14426] netlink: 'syz.0.17691': attribute type 10 has an invalid length.
[  815.134465][T14428] netlink: 'syz.2.17692': attribute type 3 has an invalid length.
[  815.137791][T14428] netlink: 'syz.2.17692': attribute type 1 has an invalid length.
[  815.142031][T14428] NCSI netlink: No device for ifindex 0
[  815.330825][T14445] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  815.337050][T14445] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  815.337387][T14442] ipip0: left promiscuous mode
[  815.340710][T14445] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  815.349227][T14442] gretap5: left promiscuous mode
[  815.350010][T14445] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  815.354200][T14445] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  815.354875][T14442] bond22: left promiscuous mode
[  815.357488][T14445] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  815.363803][T14442] veth23: left promiscuous mode
[  815.366100][T14445] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  815.366739][T14442] bond24: left promiscuous mode
[  815.371773][T14442] bond25: left promiscuous mode
[  815.374410][T14444] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  815.375070][T14442] veth25: left promiscuous mode
[  815.438345][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  815.810173][T14465] A link change request failed with some changes committed already. Interface wlan2 may have been left with an inconsistent configuration, please check.
[  816.015490][T14491] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  816.020623][T14485] smc: removing ib device syz2
[  816.109609][T14485] smbdirect: ib_dev[syz2] removed
[  816.134996][T14496] __nla_validate_parse: 3 callbacks suppressed
[  816.135072][T14496] netlink: 8 bytes leftover after parsing attributes in process `syz.2.17721'.
[  816.141953][T14496] tc_dump_action: action bad kind
[  816.391939][T14507] netlink: 320 bytes leftover after parsing attributes in process `syz.2.17725'.
[  816.653712][T14521] netlink: 8 bytes leftover after parsing attributes in process `syz.2.17732'.
[  816.787636][   T34] audit: type=1804 audit(1778615458.537:28): pid=14527 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.17735" name="/newroot/5821/memory.events" dev="tmpfs" ino=29370 res=1 errno=0
[  816.807769][   T34] audit: type=1800 audit(1778615458.537:29): pid=14527 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.17735" name="memory.events" dev="tmpfs" ino=29370 res=0 errno=0
[  816.828082][   T34] audit: type=1804 audit(1778615458.537:30): pid=14527 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.17735" name="/newroot/5821/memory.events" dev="tmpfs" ino=29370 res=1 errno=0
[  816.851334][T14531] af_packet: tpacket_rcv: packet too big, clamped from 1 to 4294967272. macoff=96
[  816.944158][T14544] netlink: 24 bytes leftover after parsing attributes in process `syz.0.17742'.
[  816.959906][T14544] netlink: 32 bytes leftover after parsing attributes in process `syz.0.17742'.
[  817.011316][T14551] netlink: 12 bytes leftover after parsing attributes in process `syz.1.17746'.
[  817.014843][T14551] netlink: 12 bytes leftover after parsing attributes in process `syz.1.17746'.
[  817.236610][T14572] netlink: 12 bytes leftover after parsing attributes in process `syz.0.17755'.
[  817.291866][T14572] 8021q: adding VLAN 0 to HW filter on device bond26
[  817.296844][T14574] bond26: option mode: unable to set because the bond device is up
[  817.597347][T14605] netlink: 8 bytes leftover after parsing attributes in process `syz.0.17769'.
[  817.755631][T14617] netlink: 24 bytes leftover after parsing attributes in process `syz.2.17774'.
[  817.897880][T14630] netlink: 'syz.0.17780': attribute type 1 has an invalid length.
[  818.445667][T14673] tap0: tun_chr_ioctl cmd 1074025680
[  819.379348][T14719] netlink: 'syz.2.17822': attribute type 3 has an invalid length.
[  820.210010][T14739] netlink: 'syz.2.17831': attribute type 27 has an invalid length.
[  820.638298][    C0] net_ratelimit: 43 callbacks suppressed
[  820.638316][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  820.645786][T14741] openvswitch: netlink: IP tunnel TTL not specified.
[  821.264248][T14777] xt_CT: You must specify a L4 protocol and not use inversions on it
[  821.678326][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  822.386519][T14847] __nla_validate_parse: 1 callbacks suppressed
[  822.386535][T14847] netlink: 20 bytes leftover after parsing attributes in process `syz.1.17881'.
[  822.396913][T14849] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  822.399826][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  822.471934][T14857] netlink: 288 bytes leftover after parsing attributes in process `syz.2.17886'.
[  822.533935][T14863] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  822.540824][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  822.557452][T14867] netlink: 'syz.1.17891': attribute type 1 has an invalid length.
[  822.562900][T14867] netlink: 'syz.1.17891': attribute type 1 has an invalid length.
[  822.572232][T14867] netlink: 9172 bytes leftover after parsing attributes in process `syz.1.17891'.
[  822.664298][T14873] netlink: 'syz.1.17894': attribute type 21 has an invalid length.
[  822.670870][T14873] netlink: 132 bytes leftover after parsing attributes in process `syz.1.17894'.
[  822.675406][T14873] netlink: 'syz.1.17894': attribute type 1 has an invalid length.
[  822.686151][T14873] xt_hashlimit: size too large, truncated to 1048576
[  822.718614][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  823.172938][T14915] tipc: Failed to remove unknown binding: 66,1,1/572551580:4065285927/4065285929
[  823.430899][T14939] netlink: 12 bytes leftover after parsing attributes in process `syz.2.17922'.
[  823.441189][   T41] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  823.446676][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  823.491375][T14942] netlink: 4 bytes leftover after parsing attributes in process `syz.1.17924'.
[  823.502078][T14942] netlink: 16 bytes leftover after parsing attributes in process `syz.1.17924'.
[  823.601881][T14934] lo speed is unknown, defaulting to 1000
[  823.937110][T14978] IPVS: Unknown mcast interface: bridge_slave_0
[  824.719764][   T34] audit: type=1804 audit(1778615466.467:31): pid=15033 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.17961" name="/newroot/6358/cgroup.controllers" dev="tmpfs" ino=32045 res=1 errno=0
[  824.738312][   T34] audit: type=1800 audit(1778615466.467:32): pid=15033 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.17961" name="cgroup.controllers" dev="tmpfs" ino=32045 res=0 errno=0
[  825.339612][T15076] netlink: 8 bytes leftover after parsing attributes in process `syz.2.17979'.
[  825.766388][T15101] netlink: 48 bytes leftover after parsing attributes in process `syz.2.17991'.
[  825.810105][T15103] netlink: 20 bytes leftover after parsing attributes in process `syz.0.17992'.
[  825.848356][    C0] net_ratelimit: 2 callbacks suppressed
[  825.848374][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  825.859860][T15107] netlink: 'syz.2.17994': attribute type 21 has an invalid length.
[  825.940736][T15114] netlink: 'syz.1.17997': attribute type 3 has an invalid length.
[  826.074548][T15125] mac80211_hwsim hwsim6 syzkaller0: entered promiscuous mode
[  826.077365][T15125] mac80211_hwsim hwsim6 syzkaller0: entered allmulticast mode
[  826.135080][T15130] netlink: 'syz.0.18004': attribute type 1 has an invalid length.
[  826.163255][T15130] 8021q: adding VLAN 0 to HW filter on device bond27
[  826.335749][T15142] openvswitch: netlink: Invalid VLAN frame
[  826.372580][T15146] sctp: [Deprecated]: syz.0.18010 (pid 15146) Use of struct sctp_assoc_value in delayed_ack socket option.
[  826.372580][T15146] Use struct sctp_sack_info instead
[  826.878329][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  827.383327][T15206] nbd: couldn't find device at index 1
[  827.393503][   T55] block nbd8: Receive control failed (result -32)
[  827.452893][T15219] __nla_validate_parse: 5 callbacks suppressed
[  827.452909][T15219] netlink: 16 bytes leftover after parsing attributes in process `syz.1.18042'.
[  827.807783][T15247] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  827.811221][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  827.918545][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  828.035543][T15269] netlink: 'syz.1.18064': attribute type 1 has an invalid length.
[  828.105387][T15272] xt_hashlimit: size too large, truncated to 1048576
[  828.109037][T15276] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  828.173156][T15283] xfrm0: entered allmulticast mode
[  828.182134][T15283] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check.
[  828.958377][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  829.038471][T15326] netlink: 'syz.0.18079': attribute type 1 has an invalid length.
[  829.083884][T15326] 8021q: adding VLAN 0 to HW filter on device bond28
[  829.114033][T15331] bridge0: entered allmulticast mode
[  829.181965][   T34] audit: type=1804 audit(1778615470.937:33): pid=15337 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.18082" name="/newroot/6407/cgroup.controllers" dev="tmpfs" ino=32295 res=1 errno=0
[  829.192185][   T34] audit: type=1800 audit(1778615470.947:34): pid=15337 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.18082" name="cgroup.controllers" dev="tmpfs" ino=32295 res=0 errno=0
[  829.200643][   T83] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  829.279677][T15341] syzkaller1: entered promiscuous mode
[  829.281704][T15341] syzkaller1: entered allmulticast mode
[  829.410409][T15352] bridge22: entered promiscuous mode
[  829.412252][T15352] bridge22: entered allmulticast mode
[  829.451732][T15352] bridge23: entered promiscuous mode
[  829.453491][T15352] bridge23: entered allmulticast mode
[  829.632157][T15362] netlink: 20 bytes leftover after parsing attributes in process `syz.2.18087'.
[  829.671433][T15360] lo speed is unknown, defaulting to 1000
[  829.951115][T15374] lo speed is unknown, defaulting to 1000
[  830.949759][T15384] netlink: 20 bytes leftover after parsing attributes in process `syz.0.18091'.
[  830.954785][T15384] netlink: 20 bytes leftover after parsing attributes in process `syz.0.18091'.
[  831.048399][    C0] net_ratelimit: 2 callbacks suppressed
[  831.048410][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  831.299504][T15406] netlink: 'syz.0.18097': attribute type 1 has an invalid length.
[  831.331990][T15417] netlink: 20 bytes leftover after parsing attributes in process `syz.0.18100'.
[  831.419980][T15424] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  831.470639][T15415] xt_cluster: you have exceeded the maximum number of cluster nodes (524288 > 32)
[  831.474843][T15415] netlink: 40 bytes leftover after parsing attributes in process `syz.1.18099'.
[  831.587427][T15434] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  831.653751][T15440] veth0_virt_wifi: entered allmulticast mode
[  831.746257][T15449] netlink: 'syz.2.18109': attribute type 49 has an invalid length.
[  831.747280][T15428] lo speed is unknown, defaulting to 1000
[  831.763874][T15448] veth0_to_bridge: entered promiscuous mode
[  831.778751][T15448] macvtap1: entered allmulticast mode
[  831.781923][T15448] veth0_to_bridge: entered allmulticast mode
[  831.793321][T15448] veth0_to_bridge: left allmulticast mode
[  831.795127][T15448] veth0_to_bridge: left promiscuous mode
[  832.088390][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  832.095141][T15466] netlink: 12 bytes leftover after parsing attributes in process `syz.0.18115'.
[  832.161629][T15470] netlink: 'syz.2.18114': attribute type 1 has an invalid length.
[  832.202479][T15471] netlink: 4 bytes leftover after parsing attributes in process `syz.0.18115'.
[  832.239958][T15459] netlink: 28 bytes leftover after parsing attributes in process `syz.2.18114'.
[  832.854184][T15468] bond29 (unregistering): Released all slaves
[  832.883457][T15470] workqueue: Failed to create a rescuer kthread for wq "bond33": -EINTR
[  832.974394][T15482] Cannot find map_set index 17 as target
[  833.038343][T15482] openvswitch: netlink: Key type 200 is out of range max 32
[  833.118353][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  833.180978][T15494] netlink: 'syz.2.18121': attribute type 1 has an invalid length.
[  833.200165][T15493] netlink: 28 bytes leftover after parsing attributes in process `syz.2.18121'.
[  833.207387][T15494] workqueue: Failed to create a rescuer kthread for wq "bond33": -EINTR
[  833.293209][T15507] netlink: 4 bytes leftover after parsing attributes in process `syz.1.18120'.
[  833.311231][T15496] netlink: 4 bytes leftover after parsing attributes in process `syz.1.18120'.
[  833.354719][T15514] netlink: 56 bytes leftover after parsing attributes in process `syz.2.18125'.
[  833.371722][T15514] netlink: 14 bytes leftover after parsing attributes in process `syz.2.18125'.
[  833.394226][T15514]  (unregistering): Released all slaves
[  833.537782][T15544] netlink: 'syz.0.18131': attribute type 2 has an invalid length.
[  833.558700][T15549] netlink: 'syz.2.18132': attribute type 1 has an invalid length.
[  833.633257][T15549] bond33: (slave bridge24): making interface the new active one
[  833.640641][T15549] bond33: (slave bridge24): Enslaving as an active interface with an up link
[  833.667946][T15549] netlink: 60 bytes leftover after parsing attributes in process `syz.2.18132'.
[  833.682178][T15558] bond0: Caught tx_queue_len zero misconfig
[  833.722375][T15558] netlink: 8 bytes leftover after parsing attributes in process `syz.1.18134'.
[  833.728257][T15558] netlink: 4 bytes leftover after parsing attributes in process `syz.1.18134'.
[  833.733875][T15558] netlink: 'syz.1.18134': attribute type 11 has an invalid length.
[  833.904519][T15563] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  833.912950][T15563] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  833.920254][T15563] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  833.926925][T15563] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  833.941521][T15553] lo speed is unknown, defaulting to 1000
[  833.956790][T15562] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  834.063927][T15568] netlink: 'syz.2.18137': attribute type 1 has an invalid length.
[  834.118318][T15568] 8021q: adding VLAN 0 to HW filter on device bond34
[  834.168396][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  834.191043][T15570] bond34: (slave veth47): Enslaving as an active interface with a down link
[  834.211423][T15568] 8021q: adding VLAN 0 to HW filter on device batadv5
[  834.227402][T15568] bond34: (slave batadv5): making interface the new active one
[  834.230792][T15568] batadv5: entered promiscuous mode
[  834.239081][T15568] bond34: (slave batadv5): Enslaving as an active interface with an up link
[  834.341387][T15552] lo speed is unknown, defaulting to 1000
[  834.409627][T15577] batadv0: entered promiscuous mode
[  834.425407][T15577] macsec5: entered promiscuous mode
[  834.427540][T15577] macsec5: entered allmulticast mode
[  834.435495][T15577] batadv0: entered allmulticast mode
[  834.440350][T15577] 8021q: adding VLAN 0 to HW filter on device macsec5
[  834.446704][T15577] batadv0: left allmulticast mode
[  834.450783][T15577] batadv0: left promiscuous mode
[  834.603046][T15585] netlink: 'syz.1.18141': attribute type 11 has an invalid length.
[  834.844278][T15596] netlink: 165 bytes leftover after parsing attributes in process `syz.1.18144'.
[  835.087622][T15605] netlink: 'syz.1.18146': attribute type 10 has an invalid length.
[  835.152047][T15607] veth0: entered promiscuous mode
[  835.203381][T15609] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  835.216069][T15609] mac80211_hwsim hwsim4 d: renamed from syzkaller0
[  835.235061][T15609] tipc: Disabling bearer <eth:syzkaller0>
[  835.266804][T15604] veth0: left promiscuous mode
[  835.392016][T15620] sch_tbf: burst 0 is lower than device sit0 mtu (1520) !
[  835.396849][T15620] netlink: 'syz.2.18150': attribute type 1 has an invalid length.
[  835.465628][T15624] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  835.596563][T15637] bond21: left allmulticast mode
[  835.714483][T15649] bond0: entered promiscuous mode
[  835.717916][T15649] bond0: left promiscuous mode
[  835.729390][T15654] netlink: 152 bytes leftover after parsing attributes in process `syz.1.18160'.
[  835.796879][T15651] batman_adv: batadv0: Interface deactivated: dummy0
[  835.951616][T15651] mac80211_hwsim hwsim4 d: left promiscuous mode
[  835.957521][T15651] mac80211_hwsim hwsim4 d: left allmulticast mode
[  835.960015][T15651] bridge14: left promiscuous mode
[  835.962032][T15651] veth35: left promiscuous mode
[  835.963735][T15651] ip6tnl6: left allmulticast mode
[  835.965280][T15651] vlan5: left allmulticast mode
[  835.966710][T15651] : left allmulticast mode
[  835.968746][T15651] veth39: left promiscuous mode
[  835.970379][T15651] vlan6: left allmulticast mode
[  835.971790][T15651] bond0: left allmulticast mode
[  835.973346][T15651] ip6gretap1: left promiscuous mode
[  835.975733][T15651] bond30: left allmulticast mode
[  835.977745][T15651] bridge19: left promiscuous mode
[  836.072690][T15651] bridge22: left promiscuous mode
[  836.075540][T15651] bridge22: left allmulticast mode
[  836.079568][T15651] bridge23: left promiscuous mode
[  836.086308][T15651] bridge23: left allmulticast mode
[  836.111889][T13321] lo speed is unknown, defaulting to 1000
[  836.114195][T13321] sqz0: Port: 1 Link DOWN
[  836.116771][ T5661] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  836.128648][ T5661] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  836.133329][T13321] lo speed is unknown, defaulting to 1000
[  836.133382][ T5661] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  836.142675][ T5661] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  836.238602][    C0] net_ratelimit: 8 callbacks suppressed
[  836.238618][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  836.343855][T15670] lo speed is unknown, defaulting to 1000
[  837.288545][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  837.292402][T15690] validate_nla: 1 callbacks suppressed
[  837.292412][T15690] netlink: 'syz.1.18169': attribute type 13 has an invalid length.
[  837.312557][T15690] netlink: 'syz.1.18169': attribute type 17 has an invalid length.
[  837.474254][T15690] 8021q: adding VLAN 0 to HW filter on device 60X
[  837.515896][T15690] veth0_virt_wifi: left allmulticast mode
[  837.527372][T15690] veth0_macvtap: left promiscuous mode
[  837.547443][T15690] veth0_macvtap: entered promiscuous mode
[  837.561793][T15690] A link change request failed with some changes committed already. Interface wlan2 may have been left with an inconsistent configuration, please check.
[  837.635604][T15693] bond35 (unregistering): Released all slaves
[  837.860783][T15709] netlink: 'syz.2.18173': attribute type 1 has an invalid length.
[  837.863468][T15709] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  837.960833][T15722] netlink: 'syz.2.18177': attribute type 1 has an invalid length.
[  837.964812][T15724] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  838.050020][T15732] SET target dimension over the limit!
[  838.052149][T15732] netlink: 'syz.1.18180': attribute type 21 has an invalid length.
[  838.056204][T15732] netlink: 'syz.1.18180': attribute type 4 has an invalid length.
[  838.145477][T15741] netlink: 'syz.0.18181': attribute type 13 has an invalid length.
[  838.148694][T15741] netlink: 'syz.0.18181': attribute type 17 has an invalid length.
[  838.318361][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  838.684554][T15741] xfrm0: left allmulticast mode
[  838.693337][T15741] veth1_vlan: left promiscuous mode
[  838.696429][T15741] veth0_vlan: left promiscuous mode
[  838.703223][T15741] veth0_vlan: entered promiscuous mode
[  838.710214][T15741] veth1_vlan: entered promiscuous mode
[  838.721935][T15741] 8021q: adding VLAN 0 to HW filter on device bond1
[  838.729402][T15741] A link change request failed with some changes committed already. Interface wlan2 may have been left with an inconsistent configuration, please check.
[  838.758748][   T13] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  838.762493][   T13] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  838.771269][   T13] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  838.777447][   T13] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  839.368431][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  840.398371][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  841.037214][T15727] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  841.153485][T15755] netlink: 'syz.2.18185': attribute type 13 has an invalid length.
[  841.156068][T15755] netlink: 'syz.2.18185': attribute type 17 has an invalid length.
[  841.180812][T15755] batman_adv: batadv0: Interface activated: dummy0
[  841.190214][T15755] 8021q: adding VLAN 0 to HW filter on device batadv0
[  841.197234][   T41] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  841.199832][   T41] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  841.226264][ T5426] lo speed is unknown, defaulting to 1000
[  841.228649][ T5426] sqz0: Port: 1 Link ACTIVE
[  841.230627][ T5426] lo speed is unknown, defaulting to 1000
[  841.268007][T15761] __nla_validate_parse: 11 callbacks suppressed
[  841.268022][T15761] netlink: 8 bytes leftover after parsing attributes in process `syz.1.18186'.
[  841.274438][T15761] netlink: 8 bytes leftover after parsing attributes in process `syz.1.18186'.
[  841.275758][T15763] netlink: 8 bytes leftover after parsing attributes in process `syz.0.18187'.
[  841.293415][T15763] netlink: 8 bytes leftover after parsing attributes in process `syz.0.18187'.
[  841.331853][T15766] bond17: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  841.341022][T15766] bond17: (slave lo): Enslaving as an active interface with an up link
[  841.354746][T15766] net_ratelimit: 4 callbacks suppressed
[  841.354756][T15766] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check.
[  841.364683][ T5729] lo speed is unknown, defaulting to 1000
[  841.369971][ T5729] lo speed is unknown, defaulting to 1000
[  841.375088][ T5426] lo speed is unknown, defaulting to 1000
[  841.448321][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  841.484332][T15780] xfrm0: entered promiscuous mode
[  841.496635][T15780] xfrm0: entered allmulticast mode
[  841.502961][T15780] netlink: 4 bytes leftover after parsing attributes in process `syz.0.18192'.
[  841.524390][T12379] netdevsim netdevsim0 eth0: set [0, 1] type 1 family 0 port 2816 - 0
[  841.524479][T15780] netlink: 4 bytes leftover after parsing attributes in process `syz.0.18192'.
[  841.531994][T12379] netdevsim netdevsim0 eth1: set [0, 1] type 1 family 0 port 2816 - 0
[  841.537700][T12379] netdevsim netdevsim0 eth2: set [0, 1] type 1 family 0 port 2816 - 0
[  841.595629][T12379] netdevsim netdevsim0 eth3: set [0, 1] type 1 family 0 port 2816 - 0
[  841.601668][T15771] lo speed is unknown, defaulting to 1000
[  841.640589][T15777] netlink: 380 bytes leftover after parsing attributes in process `syz.2.18191'.
[  841.647135][T15777] netlink: 380 bytes leftover after parsing attributes in process `syz.2.18191'.
[  841.657290][T15777] netlink: 22 bytes leftover after parsing attributes in process `syz.2.18191'.
[  841.733863][ T5729] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  841.844448][ T5729] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  841.898520][ T5729] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  841.959944][T15808] netlink: 12 bytes leftover after parsing attributes in process `syz.2.18198'.
[  842.050176][ T5729] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  842.116883][T15792] lo speed is unknown, defaulting to 1000
[  842.116935][ T5426] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  842.258522][ T5426] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  842.478461][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  842.478732][ T5729] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  842.700286][T15825] mac80211_hwsim hwsim21 syzkaller0: Caught tx_queue_len zero misconfig
[  842.779714][T15825] validate_nla: 7 callbacks suppressed
[  842.779726][T15825] netlink: 'syz.1.18202': attribute type 22 has an invalid length.
[  842.788002][T15825] netlink: 'syz.1.18202': attribute type 1 has an invalid length.
[  843.566417][T15856] bond35 (unregistering): Released all slaves
[  844.547198][T15867] netlink: 'syz.2.18211': attribute type 1 has an invalid length.
[  844.552168][T26951] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  846.285421][T15840] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  846.402899][T15877] __nla_validate_parse: 3 callbacks suppressed
[  846.402914][T15877] netlink: 20 bytes leftover after parsing attributes in process `syz.1.18213'.
[  846.414582][T15884] netlink: 4 bytes leftover after parsing attributes in process `syz.0.18214'.
[  846.467697][T15887] netlink: 8 bytes leftover after parsing attributes in process `syz.1.18216'.
[  846.483253][T15895] netlink: 12 bytes leftover after parsing attributes in process `syz.0.18217'.
[  846.638443][    C0] net_ratelimit: 10 callbacks suppressed
[  846.638462][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  846.647946][T15903] netlink: 40 bytes leftover after parsing attributes in process `syz.2.18220'.
[  846.664669][T15903] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  846.668453][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  846.779283][T15912] netlink: 124 bytes leftover after parsing attributes in process `syz.0.18221'.
[  846.806884][T15918] syzkaller0: entered promiscuous mode
[  846.809761][T15918] syzkaller0: entered allmulticast mode
[  846.810509][T15915] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  846.824432][T15915] netlink: 8 bytes leftover after parsing attributes in process `syz.2.18222'.
[  846.946996][T15922] netlink: 8 bytes leftover after parsing attributes in process `syz.0.18223'.
[  846.959467][T15922] xfrm0: left promiscuous mode
[  846.967547][T15922] A link change request failed with some changes committed already. Interface wlan2 may have been left with an inconsistent configuration, please check.
[  847.110211][T15931] netlink: 208 bytes leftover after parsing attributes in process `syz.0.18225'.
[  847.112976][T15931] netlink: 208 bytes leftover after parsing attributes in process `syz.0.18225'.
[  847.119767][   T41] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  847.123034][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  847.282934][T15951] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  847.287289][T15951] syzkaller0: entered promiscuous mode
[  847.289849][T15951] syzkaller0: entered allmulticast mode
[  847.301369][T15951] tipc: Resetting bearer <eth:syzkaller0>
[  847.309681][T15950] tipc: Resetting bearer <eth:syzkaller0>
[  847.331911][T15950] tipc: Disabling bearer <eth:syzkaller0>
[  847.375142][T15953] xfrm0: entered promiscuous mode
[  847.430075][T15961] SET target dimension over the limit!
[  847.452402][T15967] openvswitch: netlink: Message has 4 unknown bytes.
[  847.676972][T15996] netlink: 'syz.0.18245': attribute type 10 has an invalid length.
[  847.688513][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  847.737034][T15997] syzkaller0: entered promiscuous mode
[  847.738857][T15997] syzkaller0: entered allmulticast mode
[  847.741938][T32116] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  847.745229][T32116] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  847.749794][T32116] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  847.752292][T32116] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  847.787536][T15996] netlink: 'syz.0.18245': attribute type 10 has an invalid length.
[  847.908935][T16003] macsec0: entered promiscuous mode
[  847.911297][T16003] macsec0: left promiscuous mode
[  847.915009][T16003] netlink: 'syz.2.18246': attribute type 1 has an invalid length.
[  847.919852][T16003] netlink: 'syz.2.18246': attribute type 1 has an invalid length.
[  847.938571][T15999] nbd9: detected capacity change from 0 to 63
[  847.953158][T11961] block nbd9: Receive control failed (result -32)
[  847.957523][   T55] block nbd9: Receive control failed (result -32)
[  847.984206][T14938] block nbd9: Send control failed (result -32)
[  847.993737][T14938] block nbd9: Request send failed, requeueing
[  848.013412][   T98] block nbd9: Dead connection, failed to find a fallback
[  848.017990][   T98] block nbd9: shutting down sockets
[  848.022717][   T98] I/O error, dev nbd9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  848.029328][   T98] Buffer I/O error on dev nbd9, logical block 0, async page read
[  848.032784][T14938] I/O error, dev nbd9, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  848.036904][T14938] Buffer I/O error on dev nbd9, logical block 1, async page read
[  848.040708][T14938] I/O error, dev nbd9, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  848.044035][T14938] Buffer I/O error on dev nbd9, logical block 2, async page read
[  848.047115][T14938] I/O error, dev nbd9, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  848.050563][T14938] Buffer I/O error on dev nbd9, logical block 3, async page read
[  848.053224][T14938] I/O error, dev nbd9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  848.056835][T14938] Buffer I/O error on dev nbd9, logical block 0, async page read
[  848.060109][T14938] I/O error, dev nbd9, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  848.062882][T14938] Buffer I/O error on dev nbd9, logical block 1, async page read
[  848.065391][T14938] I/O error, dev nbd9, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  848.069076][T14938] Buffer I/O error on dev nbd9, logical block 2, async page read
[  848.071661][T14938] I/O error, dev nbd9, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  848.079244][T14938] Buffer I/O error on dev nbd9, logical block 3, async page read
[  848.086001][T14938] I/O error, dev nbd9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  848.089154][T14938] Buffer I/O error on dev nbd9, logical block 0, async page read
[  848.091682][T14938] I/O error, dev nbd9, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  848.094727][T14938] Buffer I/O error on dev nbd9, logical block 1, async page read
[  848.103937][T14938] ldm_validate_partition_table(): Disk read failed.
[  848.109537][T14938] Dev nbd9: unable to read RDB block 0
[  848.119859][T14938]  nbd9: unable to read partition table
[  848.141534][T14938] ldm_validate_partition_table(): Disk read failed.
[  848.145133][T14938] Dev nbd9: unable to read RDB block 0
[  848.148480][T14938]  nbd9: unable to read partition table
[  848.211570][T16021] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  848.271045][T16027] netlink: 'syz.0.18253': attribute type 58 has an invalid length.
[  848.328490][T16025] "syz.2.18254" (16025) uses obsolete ecb(arc4) skcipher
[  848.616194][T16054] netlink: 'syz.1.18261': attribute type 1 has an invalid length.
[  848.620595][T16062] : renamed from team_slave_1
[  848.914499][T16089] xfrm0: left promiscuous mode
[  848.953291][T16097] geneve6: entered promiscuous mode
[  848.955388][T16097] geneve6: entered allmulticast mode
[  848.984320][T16095] syzkaller1: entered promiscuous mode
[  848.986394][T16095] syzkaller1: entered allmulticast mode
[  848.993259][T32116] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 20000 - 0
[  848.996546][T32116] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 20000 - 0
[  849.001304][T32116] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 20000 - 0
[  849.004458][T32116] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 20000 - 0
[  849.004784][T16089] 
[  849.008225][T16089] ======================================================
[  849.010792][T16089] WARNING: possible circular locking dependency detected
[  849.013359][T16089] syzkaller #0 Not tainted
[  849.015143][T16089] ------------------------------------------------------
[  849.017671][T16089] syz.0.18268/16089 is trying to acquire lock:
[  849.019872][T16089] ffff888174b7d530 (&idev->mc_lock){+.+.}-{4:4}, at: ip6_mc_msfilter+0x236/0xf50
[  849.023219][T16089] 
[  849.023219][T16089] but task is already holding lock:
[  849.025923][T16089] ffff8881a7d0d360 (k-sk_lock-AF_INET6){+.+.}-{0:0}, at: do_ipv6_setsockopt+0x851/0x3150
[  849.029421][T16089] 
[  849.029421][T16089] which lock already depends on the new lock.
[  849.029421][T16089] 
[  849.033195][T16089] 
[  849.033195][T16089] the existing dependency chain (in reverse order) is:
[  849.036455][T16089] 
[  849.036455][T16089] -> #8 (k-sk_lock-AF_INET6){+.+.}-{0:0}:
[  849.039365][T16089]        lock_sock_nested+0x41/0x100
[  849.041323][T16089]        mptcp_sendmsg_fastopen+0x128/0x580
[  849.043560][T16089]        mptcp_sendmsg+0x1b0c/0x1dc0
[  849.045509][T16089]        ____sys_sendmsg+0x5c7/0x9f0
[  849.047472][T16089]        ___sys_sendmsg+0x2a5/0x360
[  849.049454][T16089]        __x64_sys_sendmsg+0x1bd/0x2a0
[  849.051453][T16089]        do_syscall_64+0x15f/0xf80
[  849.053293][T16089]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  849.055589][T16089] 
[  849.055589][T16089] -> #7 (sk_lock-AF_INET6){+.+.}-{0:0}:
[  849.058467][T16089]        lock_sock_nested+0x41/0x100
[  849.060492][T16089]        inet_shutdown+0x6a/0x390
[  849.062354][T16089]        nbd_mark_nsock_dead+0x2e9/0x560
[  849.064355][T16089]        sock_shutdown+0x15e/0x260
[  849.066275][T16089]        nbd_clear_sock+0x24/0x170
[  849.068142][T16089]        nbd_config_put+0x2dd/0x580
[  849.070066][T16089]        nbd_genl_connect+0x19d5/0x1cf0
[  849.072145][T16089]        genl_family_rcv_msg_doit+0x22a/0x330
[  849.074330][T16089]        genl_rcv_msg+0x61c/0x7a0
[  849.076226][T16089]        netlink_rcv_skb+0x232/0x4b0
[  849.078123][T16089]        genl_rcv+0x28/0x40
[  849.079790][T16089]        netlink_unicast+0x75c/0x8e0
[  849.081735][T16089]        netlink_sendmsg+0x813/0xb40
[  849.083711][T16089]        ____sys_sendmsg+0x972/0x9f0
[  849.085636][T16089]        ___sys_sendmsg+0x2a5/0x360
[  849.087562][T16089]        __x64_sys_sendmsg+0x1bd/0x2a0
[  849.089476][T16089]        do_syscall_64+0x15f/0xf80
[  849.091216][T16089]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  849.093567][T16089] 
[  849.093567][T16089] -> #6 (&nsock->tx_lock){+.+.}-{4:4}:
[  849.096471][T16089]        __mutex_lock+0x1a3/0x1550
[  849.098469][T16089]        nbd_queue_rq+0x37b/0x1100
[  849.100435][T16089]        blk_mq_dispatch_rq_list+0xa70/0x1910
[  849.102802][T16089]        __blk_mq_sched_dispatch_requests+0xdcc/0x1600
[  849.105433][T16089]        blk_mq_sched_dispatch_requests+0xd7/0x190
[  849.107931][T16089]        blk_mq_run_hw_queue+0x348/0x4f0
[  849.109989][T16089]        blk_mq_dispatch_list+0xd16/0xe10
[  849.112079][T16089]        blk_mq_flush_plug_list+0x48d/0x570
[  849.114311][T16089]        __blk_flush_plug+0x3ed/0x4d0
[  849.116331][T16089]        __submit_bio+0x28d/0x580
[  849.118179][T16089]        submit_bio_noacct_nocheck+0x2f4/0xa40
[  849.120429][T16089]        block_read_full_folio+0x599/0x830
[  849.122528][T16089]        filemap_read_folio+0x137/0x3b0
[  849.124519][T16089]        do_read_cache_folio+0x358/0x590
[  849.126539][T16089]        read_part_sector+0xb6/0x2b0
[  849.128369][T16089]        adfspart_check_ICS+0xb1/0x960
[  849.130368][T16089]        bdev_disk_changed+0x817/0x1770
[  849.132438][T16089]        blkdev_get_whole+0x380/0x510
[  849.134454][T16089]        bdev_open+0x31e/0xd30
[  849.136202][T16089]        blkdev_open+0x470/0x610
[  849.138035][T16089]        do_dentry_open+0x785/0x14e0
[  849.140015][T16089]        vfs_open+0x3b/0x340
[  849.141756][T16089]        path_openat+0x2e08/0x3860
[  849.143695][T16089]        do_file_open+0x23e/0x4a0
[  849.145534][T16089]        do_sys_openat2+0x113/0x200
[  849.147459][T16089]        __x64_sys_openat+0x138/0x170
[  849.149568][T16089]        do_syscall_64+0x15f/0xf80
[  849.151443][T16089]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  849.153694][T16089] 
[  849.153694][T16089] -> #5 (&cmd->lock){+.+.}-{4:4}:
[  849.156399][T16089]        __mutex_lock+0x1a3/0x1550
[  849.158356][T16089]        nbd_queue_rq+0xc6/0x1100
[  849.160345][T16089]        blk_mq_dispatch_rq_list+0xa70/0x1910
[  849.162742][T16089]        __blk_mq_sched_dispatch_requests+0xdcc/0x1600
[  849.165389][T16089]        blk_mq_sched_dispatch_requests+0xd7/0x190
[  849.167778][T16089]        blk_mq_run_hw_queue+0x348/0x4f0
[  849.169851][T16089]        blk_mq_dispatch_list+0xd16/0xe10
[  849.171957][T16089]        blk_mq_flush_plug_list+0x48d/0x570
[  849.174135][T16089]        __blk_flush_plug+0x3ed/0x4d0
[  849.176111][T16089]        __submit_bio+0x28d/0x580
[  849.177766][T16089]        submit_bio_noacct_nocheck+0x2f4/0xa40
[  849.179833][T16089]        block_read_full_folio+0x599/0x830
[  849.181948][T16089]        filemap_read_folio+0x137/0x3b0
[  849.183893][T16089]        do_read_cache_folio+0x358/0x590
[  849.185793][T16089]        read_part_sector+0xb6/0x2b0
[  849.187533][T16089]        adfspart_check_ICS+0xb1/0x960
[  849.189195][T16089]        bdev_disk_changed+0x817/0x1770
[  849.190997][T16089]        blkdev_get_whole+0x380/0x510
[  849.192799][T16089]        bdev_open+0x31e/0xd30
[  849.194399][T16089]        blkdev_open+0x470/0x610
[  849.196024][T16089]        do_dentry_open+0x785/0x14e0
[  849.197719][T16089]        vfs_open+0x3b/0x340
[  849.199239][T16089]        path_openat+0x2e08/0x3860
[  849.200848][T16089]        do_file_open+0x23e/0x4a0
[  849.202518][T16089]        do_sys_openat2+0x113/0x200
[  849.204216][T16089]        __x64_sys_openat+0x138/0x170
[  849.205929][T16089]        do_syscall_64+0x15f/0xf80
[  849.207667][T16089]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  849.209778][T16089] 
[  849.209778][T16089] -> #4 (set->srcu){.+.+}-{0:0}:
[  849.212176][T16089]        __synchronize_srcu+0xca/0x300
[  849.213980][T16089]        elevator_switch+0x1e8/0x7a0
[  849.215757][T16089]        elevator_change+0x2cc/0x450
[  849.217541][T16089]        elevator_set_default+0x36c/0x430
[  849.219453][T16089]        blk_register_queue+0x3e9/0x4e0
[  849.221331][T16089]        __add_disk+0x677/0xd50
[  849.223238][T16089]        add_disk_fwnode+0xfb/0x480
[  849.225017][T16089]        nbd_dev_add+0x72c/0xb50
[  849.226802][T16089]        nbd_init+0x168/0x1f0
[  849.228488][T16089]        do_one_initcall+0x250/0x870
[  849.230497][T16089]        do_initcall_level+0x104/0x190
[  849.232544][T16089]        do_initcalls+0x59/0xa0
[  849.234368][T16089]        kernel_init_freeable+0x2a6/0x3e0
[  849.236934][T16089]        kernel_init+0x1d/0x1d0
[  849.238703][T16089]        ret_from_fork+0x514/0xb70
[  849.240576][T16089]        ret_from_fork_asm+0x1a/0x30
[  849.242544][T16089] 
[  849.242544][T16089] -> #3 (&q->elevator_lock){+.+.}-{4:4}:
[  849.245377][T16089]        __mutex_lock+0x1a3/0x1550
[  849.247338][T16089]        elevator_change+0x1b3/0x450
[  849.249013][T16089]        elevator_set_none+0xb5/0x140
[  849.251634][T16089]        blk_mq_update_nr_hw_queues+0x5e7/0x1a60
[  849.254072][T16089]        nbd_start_device+0x17f/0xb10
[  849.256155][T16089]        nbd_genl_connect+0x165b/0x1cf0
[  849.258325][T16089]        genl_family_rcv_msg_doit+0x22a/0x330
[  849.260692][T16089]        genl_rcv_msg+0x61c/0x7a0
[  849.262685][T16089]        netlink_rcv_skb+0x232/0x4b0
[  849.264670][T16089]        genl_rcv+0x28/0x40
[  849.266463][T16089]        netlink_unicast+0x75c/0x8e0
[  849.268506][T16089]        netlink_sendmsg+0x813/0xb40
[  849.270563][T16089]        ____sys_sendmsg+0x972/0x9f0
[  849.272647][T16089]        ___sys_sendmsg+0x2a5/0x360
[  849.274621][T16089]        __x64_sys_sendmsg+0x1bd/0x2a0
[  849.276574][T16089]        do_syscall_64+0x15f/0xf80
[  849.278560][T16089]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  849.280891][T16089] 
[  849.280891][T16089] -> #2 (&q->q_usage_counter(io)#52){++++}-{0:0}:
[  849.283989][T16089]        blk_alloc_queue+0x546/0x680
[  849.285937][T16089]        __blk_mq_alloc_disk+0x197/0x390
[  849.288096][T16089]        nbd_dev_add+0x499/0xb50
[  849.290003][T16089]        nbd_init+0x168/0x1f0
[  849.291822][T16089]        do_one_initcall+0x250/0x870
[  849.293848][T16089]        do_initcall_level+0x104/0x190
[  849.295957][T16089]        do_initcalls+0x59/0xa0
[  849.297763][T16089]        kernel_init_freeable+0x2a6/0x3e0
[  849.299947][T16089]        kernel_init+0x1d/0x1d0
[  849.301766][T16089]        ret_from_fork+0x514/0xb70
[  849.303664][T16089]        ret_from_fork_asm+0x1a/0x30
[  849.305634][T16089] 
[  849.305634][T16089] -> #1 (fs_reclaim){+.+.}-{0:0}:
[  849.311396][T16089]        fs_reclaim_acquire+0x71/0x100
[  849.313448][T16089]        __kmalloc_cache_noprof+0x40/0x660
[  849.315702][T16089]        __ipv6_dev_mc_inc+0x44f/0xa50
[  849.317728][T16089]        ipv6_add_dev+0xe34/0x13a0
[  849.319628][T16089]        addrconf_notify+0x653/0x10b0
[  849.321662][T16089]        call_netdevice_register_net_notifiers+0x12a/0x560
[  849.324238][T16089]        register_netdevice_notifier+0x10b/0x440
[  849.326461][T16089]        addrconf_init+0xad/0x170
[  849.328369][T16089]        inet6_init+0x228/0x3f0
[  849.330230][T16089]        do_one_initcall+0x250/0x870
[  849.332222][T16089]        do_initcall_level+0x104/0x190
[  849.334203][T16089]        do_initcalls+0x59/0xa0
[  849.336058][T16089]        kernel_init_freeable+0x2a6/0x3e0
[  849.338175][T16089]        kernel_init+0x1d/0x1d0
[  849.339954][T16089]        ret_from_fork+0x514/0xb70
[  849.341902][T16089]        ret_from_fork_asm+0x1a/0x30
[  849.343851][T16089] 
[  849.343851][T16089] -> #0 (&idev->mc_lock){+.+.}-{4:4}:
[  849.346788][T16089]        __lock_acquire+0x15a5/0x2cf0
[  849.348739][T16089]        lock_acquire+0x106/0x350
[  849.350551][T16089]        __mutex_lock+0x1a3/0x1550
[  849.352443][T16089]        ip6_mc_msfilter+0x236/0xf50
[  849.354406][T16089]        ipv6_set_mcast_msfilter+0x25e/0x310
[  849.356686][T16089]        do_ipv6_setsockopt+0x12ee/0x3150
[  849.358822][T16089]        ipv6_setsockopt+0x59/0x170
[  849.360771][T16089]        smc_setsockopt+0x249/0xac0
[  849.362798][T16089]        do_sock_setsockopt+0x17c/0x1b0
[  849.364891][T16089]        __x64_sys_setsockopt+0x13d/0x1b0
[  849.367101][T16089]        do_syscall_64+0x15f/0xf80
[  849.369017][T16089]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  849.371437][T16089] 
[  849.371437][T16089] other info that might help us debug this:
[  849.371437][T16089] 
[  849.375210][T16089] Chain exists of:
[  849.375210][T16089]   &idev->mc_lock --> sk_lock-AF_INET6 --> k-sk_lock-AF_INET6
[  849.375210][T16089] 
[  849.380140][T16089]  Possible unsafe locking scenario:
[  849.380140][T16089] 
[  849.382948][T16089]        CPU0                    CPU1
[  849.384989][T16089]        ----                    ----
[  849.386934][T16089]   lock(k-sk_lock-AF_INET6);
[  849.388780][T16089]                                lock(sk_lock-AF_INET6);
[  849.391511][T16089]                                lock(k-sk_lock-AF_INET6);
[  849.394220][T16089]   lock(&idev->mc_lock);
[  849.395879][T16089] 
[  849.395879][T16089]  *** DEADLOCK ***
[  849.395879][T16089] 
[  849.398957][T16089] 2 locks held by syz.0.18268/16089:
[  849.401006][T16089]  #0: ffff88816e578ba8 (&smc->clcsock_release_lock){+.+.}-{4:4}, at: smc_setsockopt+0x18e/0xac0
[  849.404911][T16089]  #1: ffff8881a7d0d360 (k-sk_lock-AF_INET6){+.+.}-{0:0}, at: do_ipv6_setsockopt+0x851/0x3150
[  849.408710][T16089] 
[  849.408710][T16089] stack backtrace:
[  849.410939][T16089] CPU: 1 UID: 0 PID: 16089 Comm: syz.0.18268 Not tainted syzkaller #0 PREEMPT(full) 
[  849.410959][T16089] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  849.410970][T16089] Call Trace:
[  849.410980][T16089]  <TASK>
[  849.410990][T16089]  dump_stack_lvl+0xe8/0x150
[  849.411012][T16089]  print_circular_bug+0x2e1/0x300
[  849.411036][T16089]  check_noncircular+0x12e/0x150
[  849.411059][T16089]  __lock_acquire+0x15a5/0x2cf0
[  849.411103][T16089]  ? handle_mm_fault+0x275c/0x3170
[  849.411127][T16089]  ? ip6_mc_msfilter+0x236/0xf50
[  849.411145][T16089]  lock_acquire+0x106/0x350
[  849.411162][T16089]  ? ip6_mc_msfilter+0x236/0xf50
[  849.411184][T16089]  __mutex_lock+0x1a3/0x1550
[  849.411207][T16089]  ? ip6_mc_msfilter+0x236/0xf50
[  849.411222][T16089]  ? ref_tracker_alloc+0x35c/0x4c0
[  849.411245][T16089]  ? ref_tracker_free+0x693/0x840
[  849.411265][T16089]  ? ip6_mc_msfilter+0x236/0xf50
[  849.411281][T16089]  ? __pfx_ref_tracker_free+0x10/0x10
[  849.411299][T16089]  ? __pfx___mutex_lock+0x10/0x10
[  849.411324][T16089]  ? in6_dev_get+0x1a/0x290
[  849.411340][T16089]  ? in6_dev_get+0x1a/0x290
[  849.411358][T16089]  ip6_mc_msfilter+0x236/0xf50
[  849.411378][T16089]  ? rep_movs_alternative+0x75/0x90
[  849.411392][T16089]  ipv6_set_mcast_msfilter+0x25e/0x310
[  849.411418][T16089]  do_ipv6_setsockopt+0x12ee/0x3150
[  849.411445][T16089]  ? __pfx_do_ipv6_setsockopt+0x10/0x10
[  849.411470][T16089]  ? __mutex_trylock_common+0x158/0x260
[  849.411489][T16089]  ? __pfx___mutex_trylock_common+0x10/0x10
[  849.411509][T16089]  ? rcu_is_watching+0x15/0xb0
[  849.411528][T16089]  ? trace_contention_end+0x3d/0x140
[  849.411548][T16089]  ? __mutex_lock+0x319/0x1550
[  849.411570][T16089]  ? futex_wait+0x2a2/0x390
[  849.411589][T16089]  ? __lock_acquire+0x6b5/0x2cf0
[  849.411616][T16089]  ? smc_setsockopt+0x18e/0xac0
[  849.411639][T16089]  ? __pfx___mutex_lock+0x10/0x10
[  849.411662][T16089]  ipv6_setsockopt+0x59/0x170
[  849.411683][T16089]  ? __pfx_sock_common_setsockopt+0x10/0x10
[  849.411702][T16089]  smc_setsockopt+0x249/0xac0
[  849.411720][T16089]  ? __pfx_smc_setsockopt+0x10/0x10
[  849.411740][T16089]  ? aa_sock_opt_perm+0xff/0x1a0
[  849.411761][T16089]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  849.411780][T16089]  ? __pfx_smc_setsockopt+0x10/0x10
[  849.411798][T16089]  do_sock_setsockopt+0x17c/0x1b0
[  849.411821][T16089]  __x64_sys_setsockopt+0x13d/0x1b0
[  849.411842][T16089]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  849.411857][T16089]  do_syscall_64+0x15f/0xf80
[  849.411878][T16089]  ? trace_irq_disable+0x3b/0x140
[  849.411900][T16089]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  849.411915][T16089] RIP: 0033:0x7eff8339cdd9
[  849.411933][T16089] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  849.411948][T16089] RSP: 002b:00007eff815d5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  849.411965][T16089] RAX: ffffffffffffffda RBX: 00007eff83616090 RCX: 00007eff8339cdd9
[  849.411975][T16089] RDX: 0000000000000030 RSI: 0000000000000029 RDI: 000000000000000b
[  849.411984][T16089] RBP: 00007eff83432d69 R08: 0000000000020000 R09: 0000000000000000
[  849.411995][T16089] R10: 0000200000000500 R11: 0000000000000246 R12: 0000000000000000
[  849.412005][T16089] R13: 00007eff83616128 R14: 00007eff83616090 R15: 00007ffcc202e018
[  849.412023][T16089]  </TASK>
[  849.560654][T16092] bond31: Removing last ns target with arp_interval on
[  851.838303][    C0] net_ratelimit: 5 callbacks suppressed
[  851.838353][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  852.878510][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  852.879186][ T5734] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  852.884604][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  853.918329][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  854.968254][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  856.008310][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  857.048259][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  858.078493][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  858.639126][ T5734] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  858.642450][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
