last executing test programs:

1.166167923s ago: executing program 2 (id=8310):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="85000000070000006a0a00ff000000000c00000000000000950000000000000018100000", @ANYRES32, @ANYBLOB="000000000000000005000000000000009500000000000000b1f8306e05d1e4aab009c16b5c05077115d0749619ca39f89974785ae0619b77c6585f678ac92a3b6b4148f56b43c3dd75d75f97c8f92f60a2def458df05e2fbfb3e849b2b3cffd4f29446ae60dd76654b2639b2bc14350706214a6ab7a712d4317fbc3ca01d0d3ed6110b3775903141a5091a4d3db8eb335414fbdb288aba73aaf6d18000a3a2a069cf7f9402e1425bb6bc370576aa1faea0fe222671ecf99038fce8dba53dcb11f87cca"], &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d)
bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)={@ifindex, r1, 0x11}, 0xa)
bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)=ANY=[], 0x10)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="14000000100001000000e7472cbcbbb7b541000a70000000060a010400000000000000000200000344000480400001800e000100627974656f726465720000002c000280080001400000000908000240000000000800044000000000080003400000008108000540000000040900010073797a30000000000900020073797a32"], 0x98}}, 0x0)

1.07622638s ago: executing program 0 (id=8311):
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0x4, 0x0, &(0x7f0000000000)="259a53f2", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x80, &(0x7f0000000000)=""/4103, &(0x7f0000001080)=0x1007)
r0 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000240)={0x0, 0xfdcd, &(0x7f0000000440)={0x0, 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x10)
sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x80)
bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x1, 0x4, 0x2, 0x9, 0x40}, 0x50)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
recvmmsg(r1, &(0x7f0000001b00)=[{{&(0x7f00000004c0)=@rc, 0x80, &(0x7f0000001a80)}, 0x9}], 0x1, 0x100, &(0x7f0000001b40))
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48)
r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="140100002f00011b00000000ecdbdf2501"], 0x114}], 0x1, 0x0, 0x0, 0x4}, 0x20000000)
recvfrom(r5, 0x0, 0x0, 0x42, 0x0, 0x0)
r6 = socket$rds(0x15, 0x5, 0x0)
r7 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
close(r7)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
unshare(0x20000400)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x8bc, 0x10000, @value=r7}, 0x28)
setsockopt$RDS_GET_MR_FOR_DEST(r6, 0x114, 0x7, &(0x7f0000000100)={@vsock={0x28, 0x0, 0x2710, @my=0x1}, {0x0}, 0x0}, 0xa0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
bpf$BPF_PROG_DETACH(0x8, &(0x7f00000010c0)={@map=r3, r4, 0x5}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r3}, &(0x7f00000006c0), &(0x7f0000000700)=r2}, 0x20)
sendmsg$inet(r1, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3)
gettid()
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0), 0xc)

1.074199534s ago: executing program 2 (id=8313):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000040)={0x84, @broadcast, 0x4e21, 0x3, 'rr\x00', 0x1, 0x10000004, 0x8}, 0x2c)
r2 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'wrr\x00', 0x23, 0x81, 0x5}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x4e23, 0x10000, 0x1cb, 0x12d61, 0x12d58}}, 0x44)
setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010100, 0x4e24, 0x3, 'lc\x00', 0x8, 0x323b, 0x55}, {@remote, 0x4e23, 0x10000, 0x0, 0x12d5c, 0x12d4c}}, 0x44)
sendmsg$sock(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev, 0xfffffeec}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @byteorder={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_BYTEORDER_SREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x78}}, 0x0)

996.105748ms ago: executing program 2 (id=8314):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10)
setsockopt$inet_int(r1, 0x0, 0x14, &(0x7f0000000240)=0xfffffeff, 0x4)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[], 0xc3}, 0x1, 0x100000000000000, 0x0, 0x4014040}, 0x0)
r2 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000008c0)=ANY=[@ANYBLOB="380000001800010000000000000000000200140000000009000c0000060015000400000014001680100008800c000380"], 0x38}}, 0x0)
sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000400100004112200a4e2000001"], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240), &(0x7f0000000580), 0x2000cc0, r3}, 0x38)
r4 = socket$netlink(0x10, 0x3, 0x0)
r5 = socket(0x10, 0x803, 0x0)
r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800c30000000000001000000010000000020000000000000020000001070000002000000100"], 0x0, 0x2a}, 0x28)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0)
r7 = socket(0x40000000015, 0x5, 0x0)
setsockopt$sock_int(r7, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x4)
bind$inet(r7, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10)
recvmmsg(r7, &(0x7f0000005400)=[{{0x0, 0x0, 0x0}, 0x2}, {{&(0x7f0000003140)=@generic, 0x80, &(0x7f0000003640)=[{&(0x7f00000031c0)=""/130, 0x82}, {&(0x7f0000003280)=""/131, 0x83}, {&(0x7f0000003340)=""/108, 0x6c}, {0x0}], 0x4, &(0x7f00000036c0)=""/234, 0xea}, 0x1}, {{&(0x7f00000037c0)=@alg, 0x80, &(0x7f0000003f00)=[{&(0x7f0000003840)=""/34, 0x22}, {&(0x7f0000003880)=""/203, 0xcb}, {&(0x7f0000003980)=""/212, 0xd4}, {&(0x7f0000003a80)=""/32, 0x20}, {&(0x7f0000003ac0)=""/168, 0xa8}, {&(0x7f0000003b80)=""/227, 0xe3}, {&(0x7f0000003c80)=""/88, 0x58}, {&(0x7f0000003d00)=""/185, 0xb9}, {&(0x7f0000003dc0)=""/70, 0x46}, {&(0x7f0000003e40)=""/147, 0x93}], 0xa, &(0x7f0000003fc0)=""/155, 0x9b}, 0x43f}, {{&(0x7f0000004080)=@generic, 0x80, &(0x7f0000004380)=[{&(0x7f0000004100)=""/111, 0x6f}, {&(0x7f0000004180)=""/170, 0xaa}, {&(0x7f0000004240)=""/50, 0x32}, {&(0x7f0000004280)=""/151, 0x97}, {&(0x7f0000004340)=""/25, 0x19}], 0x5, &(0x7f0000004400)=""/4096, 0x1000}, 0x400}], 0x4, 0x60010000, 0x0)
sendto$inet(r7, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10)
getsockname$packet(r5, &(0x7f0000000600)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000640)=ANY=[@ANYRESDEC=r7, @ANYRES32=r8, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000)
r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES32=r9], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001180)={0x3, 0x4, 0x4, 0xa, 0x0, r9, 0x10002, '\x00', r8, r6, 0x800004}, 0x50)
r10 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000b00)=@bpf_ext={0x1c, 0x25, &(0x7f0000000600)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9e, 0x0, 0x0, 0x0, 0x937}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@generic={0x3, 0x7, 0x0, 0x2, 0x4}, @exit, @printk={@llx}, @cb_func={0x18, 0xa, 0x4, 0x0, 0x3}, @printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000740)='GPL\x00', 0x101, 0x0, 0x0, 0x40f00, 0x6, '\x00', r8, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000940)={0x8, 0x2}, 0x8, 0x10, &(0x7f0000000980)={0x2, 0xd, 0x400, 0x2}, 0x10, 0x1580, 0xffffffffffffffff, 0x3, &(0x7f0000000a80), &(0x7f0000000ac0)=[{0x2, 0x5, 0x3, 0xb}, {0x4, 0x4, 0xe, 0xa}, {0x3, 0x2, 0x0, 0x8}], 0x10, 0x5}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x0, &(0x7f0000000480)="00d0954942b108d5185389ebdd8a5036c2fa43f51c5afb9821984d", 0x0, 0x0, 0x0, 0x8}, 0x31)
bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x18, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280), 0x0, 0x1, r3}, 0x38)

901.020359ms ago: executing program 2 (id=8316):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)={0x38, r2, 0x1, 0x70bd2d, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x81, 0x200, 0x153e, 0x6, 0x3, 0x9, 0x6, 0x5]}}]}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x4000040)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @byteorder={{0xe}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x6c}}, 0x0)

897.254759ms ago: executing program 2 (id=8318):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
accept(r0, &(0x7f0000000140)=@l2tp6={0xa, 0x0, 0x0, @remote}, &(0x7f00000001c0)=0x80)
bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000010000000000000000000000711217000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94)
r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cgroup.controllers\x00', 0x0, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94)
r4 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000500)={r3, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x4, 0x600, 0x1}}, 0x20)
r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000080)={r4}, 0x8)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
r7 = syz_init_net_socket$llc(0x1a, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48)
recvmmsg(r7, &(0x7f00000040c0)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x2102, &(0x7f00000042c0))
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1d, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d", @ANYRESHEX=r8], 0x0, 0x1, 0x0, 0x0, 0x41000, 0x45, '\x00', 0x0, @fallback=0x10, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r5, 0x0, 0x0, 0x0, 0x0, 0xffeffffc}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
unshare(0x20000400)
r10 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_bt_hci(r10, 0x400448c9, 0x0)
bind$bt_hci(r10, &(0x7f0000000080)={0x1f, 0xffff, 0x2}, 0x6)
r11 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_buf(r11, 0x29, 0x3e, &(0x7f0000000040)="d84f", 0x2)
sendto$inet6(r11, &(0x7f0000000800)="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", 0x5a3, 0x0, &(0x7f0000000080)={0xa, 0x5e20, 0x9, @mcast2}, 0x1c)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r12=>0xffffffffffffffff, <r13=>0xffffffffffffffff})
write$cgroup_pid(r13, 0x0, 0x0)
recvmsg$unix(r12, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r9, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50)
sendmsg$NL80211_CMD_RELOAD_REGDB(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x14, r6, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004)
socket(0x400000000010, 0x3, 0x0)

216.008355ms ago: executing program 0 (id=8327):
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195}, 0x70)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a70000000060a010400000000000000000200000344000480400001800e000100627974656f726465720000002c00028008000140000000130800024000000000080004400000009b080003400000000108000540000000020900010073797a30000000000900020073797a32"], 0x98}}, 0x44800)

215.700908ms ago: executing program 1 (id=8328):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
setsockopt$inet_opts(r1, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) (async)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
connect$inet(r1, &(0x7f0000000100)={0x2, 0x4e23, @broadcast}, 0x10)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x70, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x44, 0x4, 0x0, 0x1, [{0x40, 0x1, 0x0, 0x1, @byteorder={{0xe}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_BYTEORDER_OP={0x8}, @NFTA_BYTEORDER_DREG={0x8, 0x2, 0x1, 0x0, 0xd}, @NFTA_BYTEORDER_LEN={0x8}, @NFTA_BYTEORDER_SIZE={0x8, 0x5, 0x1, 0x0, 0x9}, @NFTA_BYTEORDER_SREG={0x8, 0x1, 0x1, 0x0, 0xb}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x98}}, 0x0) (async)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x70, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x44, 0x4, 0x0, 0x1, [{0x40, 0x1, 0x0, 0x1, @byteorder={{0xe}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_BYTEORDER_OP={0x8}, @NFTA_BYTEORDER_DREG={0x8, 0x2, 0x1, 0x0, 0xd}, @NFTA_BYTEORDER_LEN={0x8}, @NFTA_BYTEORDER_SIZE={0x8, 0x5, 0x1, 0x0, 0x9}, @NFTA_BYTEORDER_SREG={0x8, 0x1, 0x1, 0x0, 0xb}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x98}}, 0x0)

151.893917ms ago: executing program 0 (id=8329):
syz_emit_ethernet(0xfc1, &(0x7f00000001c0)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0xfb3, 0x0, 0x0, 0x0, 0x84, 0x0, @empty, @broadcast}, "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"}}}}, 0x0)
r0 = socket$l2tp6(0xa, 0x2, 0x73)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="e80000006c00010029bd7000fcdbdf2500000000", @ANYRES32=r0, @ANYBLOB="001000008000000008000f002000000014003500726f7365300000000000000000000000a40034801400350070696d367265673000000020000000000400350076657468305f6d614176746170000000140035006d61637674617030020000000000000014003500677265300000000000000000000000001400350076657468305f746f5f626174616476001400350001657468315f6d6163767461700000001400350067726530000000000000000000000000140035006261746164765f736c6176655f31000008000f"], 0xe8}, 0x1, 0x0, 0x0, 0x800}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000011c0)=ANY=[@ANYBLOB="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"], 0x98}}, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000007000000040000000000000e0300000000000000000000000000000d04000000000000000000000400000000040000000000000f03000000006100302e"], 0x0, 0x53}, 0x28)
unshare(0x10000000)

151.224257ms ago: executing program 1 (id=8330):
r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000600), 0x80, 0x0)
ioctl$PTP_PIN_GETFUNC(r0, 0x541b, &(0x7f0000000640)={'\x00', 0x2, 0x2, 0x1})

150.611604ms ago: executing program 0 (id=8331):
r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000004c0), 0x2eac00, 0x0)
r1 = accept$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000280)=0x14)
sendmsg$AUDIT_TRIM(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4030008}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x10, 0x3f6, 0x100, 0x70bd25, 0x25dfdbff, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0xc001}, 0x40)
r2 = socket(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x2)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0xfffffffe, 0x8}}]}}]}, 0x48}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newtfilter={0x68, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1, 0x4}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x38, 0x2, [@TCA_CGROUP_ACT={0x34}]}}]}, 0x68}}, 0x0)
setsockopt$packet_drop_memb(r1, 0x107, 0x2, &(0x7f00000002c0)={r4, 0x1, 0x6, @multicast}, 0x10)
ioctl$PTP_PIN_GETFUNC(r0, 0x541b, &(0x7f0000000640)={'\x00', 0x2, 0x2, 0x1})
ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f0000000480)={r1, 0xfc, 0x9, 0x8})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f00000018c0)={0x0, ""/256, <r5=>0x0})
ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, &(0x7f00000006c0)={r5, 0x5c4})

148.446427ms ago: executing program 1 (id=8332):
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000900080000000000000007000000691168000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

87.384524ms ago: executing program 1 (id=8333):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0) (async, rerun: 64)
r2 = socket$unix(0x1, 0x5, 0x0) (rerun: 64)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x5, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000780)=@newtfilter={0x94, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r3, {0x0, 0xfff2}, {}, {0xa, 0x6}}, [@filter_kind_options=@f_flower={{0xb}, {0x64, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x8, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x4, 0x21}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x58, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x54, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x9}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x2a, 0x3, 0x5}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0xfff2}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x3}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x8001}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x5}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0xad}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x0, 0x3, 0x9}]}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x22044028}, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @byteorder={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_BYTEORDER_SREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x78}}, 0x0)

87.217718ms ago: executing program 0 (id=8334):
openat$ptp0(0xffffffffffffff9c, &(0x7f0000000600), 0x80, 0x45)

37.539805ms ago: executing program 0 (id=8335):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000006c0)=@newchain={0x24, 0x64, 0x200, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x3, 0x9}, {0x8, 0x7}, {0xfff2, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x24000040)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=@newtaction={0x64, 0x30, 0x1, 0x0, 0x25dfdbfc, {}, [{0x50, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x2a, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x7}, 0x2d}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=@newlink={0x40, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'wlan0\x00'}, @IFLA_ADDRESS={0xa, 0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000000}, 0x1000000)
sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
preadv(r0, &(0x7f00000007c0)=[{&(0x7f0000000240)=""/67, 0x43}, {&(0x7f00000006c0)=""/160, 0xa0}, {&(0x7f0000000780)=""/56, 0x38}], 0x3, 0x80, 0x20)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$MPTCP_PM_CMD_GET_ADDR(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB="010f000000000000000003000000080004"], 0x1c}}, 0x0)
sendmsg$MPTCP_PM_CMD_REMOVE(r1, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x80, 0x0, 0x0, 0x70bd25, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x54, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xd}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9b}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0xf}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x6}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x7}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x8}]}, 0x80}, 0x1, 0x0, 0x0, 0x800}, 0x4000010)
bind$bt_hci(r3, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6)
writev(r3, &(0x7f00000001c0)=[{&(0x7f0000000140)="ddac4a45", 0x4}, {0x0}], 0x2)
r5 = socket(0x2000000000000021, 0x2, 0x10000000000002)
connect$rxrpc(r5, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x8, @multicast2}}, 0x24)
sendmmsg(r5, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0xe000}, 0x5}], 0x1, 0x0)
recvmmsg(r5, &(0x7f0000000d00), 0xf000, 0x10002, 0x0)
connect$rxrpc(r5, &(0x7f00000001c0)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e20, @broadcast}}, 0x24)
r6 = socket$unix(0x1, 0x2, 0x0)
bind$unix(r6, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x6e)
r7 = socket$unix(0x1, 0x2, 0x0)
bind$unix(r7, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x1c)
sendto$unix(r7, 0x0, 0x0, 0x40000, &(0x7f0000000040)=@abs={0x1, 0x0, 0x4e20}, 0x6e)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYRESHEX], 0xa0}, 0x1, 0x0, 0x0, 0x4c090}, 0xc000)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000680)={&(0x7f0000000000), 0xc, &(0x7f0000000640)={&(0x7f0000000440)={0x1f8, 0xb, 0x6, 0x5, 0x0, 0x0, {0x3, 0x0, 0x3}, [@IPSET_ATTR_ADT={0x3c, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010102}}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x2}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x24}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x8}}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x1d0}, @IPSET_ATTR_DATA={0x5c, 0x7, 0x0, 0x1, [@IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x9}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x9}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e24}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x4}, @IPSET_ATTR_IP2_TO={0xc, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010102}}, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0x101}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x1}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x8}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x5a}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x4}, @IPSET_ATTR_ADT={0x48, 0x8, 0x0, 0x1, [{0x18, 0x7, 0x0, 0x1, @IPSET_ATTR_IFACE={0x14, 0x17, 'xfrm0\x00'}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PROTO={0x5, 0x7, 0x6}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x725}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x9}}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x2}, @IPSET_ATTR_ADT={0x38, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0x7}}, {0x18, 0x7, 0x0, 0x1, @IPSET_ATTR_IFACE={0x14, 0x17, 'dummy0\x00'}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_ETHER={0xa, 0x11, @local}}]}, @IPSET_ATTR_DATA={0x6c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @local}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x70}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x6}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x3}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e20}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @local}}, @IPSET_ATTR_NAMEREF={0x9, 0x13, 'syz0\x00'}, @IPSET_ATTR_NAMEREF={0x9, 0x13, 'syz1\x00'}]}, @IPSET_ATTR_ADT={0x3c, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAME={0x9, 0x12, 'syz1\x00'}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e20}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x7}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x100000001}}]}]}, 0x1f8}, 0x1, 0x0, 0x0, 0x20000000}, 0x4020)
sendmsg$NFT_BATCH(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x68, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x3c, 0x4, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, @byteorder={{0xe}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_BYTEORDER_SREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_BYTEORDER_DREG={0x8}, @NFTA_BYTEORDER_LEN={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_BYTEORDER_SIZE={0x8, 0x5, 0x1, 0x0, 0x9}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x90}, 0x1, 0x0, 0x0, 0x20044054}, 0x0)

36.521232ms ago: executing program 1 (id=8336):
r0 = socket(0x15, 0x5, 0x0) (async)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r2 = socket$inet6(0xa, 0x2, 0x0) (async, rerun: 64)
r3 = socket$inet6(0xa, 0x2, 0x0) (rerun: 64)
setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4)
bind$inet6(r3, &(0x7f0000000040)={0xa, 0xe22}, 0x1c)
bind$inet6(r2, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) (async)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 32)
r5 = socket$igmp(0x2, 0x3, 0x2) (rerun: 32)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'bond0\x00', <r6=>0x0})
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000980)={0x6, 0x3, &(0x7f00000005c0)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r6}, 0x94) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000002000000000000000101000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000c94763a00000000000000bf91000000000000b7020000000000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000300)='syzkaller\x00', 0xb95, 0x0, 0x0, 0x41100, 0x0, '\x00', r6, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1c00000}, 0x94) (async)
sendmsg$NFT_BATCH(r4, &(0x7f0000002c80)={0x0, 0x0, &(0x7f0000002c40)={&(0x7f0000003180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a01080000e0030000000e02000000090001007300803000000000080002400000000214000000110001"], 0x50}}, 0x0) (async)
sendmsg$NFT_MSG_GETSET(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="200000000a0a01020000000000000000020000000900010073"], 0x20}}, 0x4000000)
getsockopt(r0, 0x200000000114, 0x271f, 0x0, &(0x7f0000000000)) (async)
socket$packet(0x11, 0x3, 0x300) (async, rerun: 32)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 32)
sendmsg$NFT_BATCH(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000030900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a320000000074000000060a010400000000000000000100000208000b40000000004c000480340001800b000100657874686472000024000280080001400000000c080003400000000208000440000000220500020007000000140001800e0001da404502ec6cf94765720000000900010073797a3000000000140000001100010000000000000000000700000a"], 0xe8}, 0x1, 0x0, 0x0, 0x24000040}, 0x0)

35.966859ms ago: executing program 1 (id=8337):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 32)
r1 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32)
r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), r1)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000140)={'wg2\x00', <r3=>0x0})
r4 = socket$netlink(0x10, 0x3, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32)
r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) (rerun: 32)
sendmsg$IPVS_CMD_NEW_DAEMON(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)={0x58, r6, 0x1, 0x4, 0x1, {}, [@IPVS_CMD_ATTR_DAEMON={0x44, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'vcan0\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x48c1}, 0x0)
sendmsg$IPVS_CMD_GET_INFO(r4, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x2c, r6, 0x20, 0x70bd28, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x280a}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x40084) (async, rerun: 64)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000027cd400646d4e5fd000000000000"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) (rerun: 64)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000180)={r7, 0xffffffffffffffff, 0x12, 0x0, @void}, 0x10) (async)
sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000840)=ANY=[@ANYBLOB="e0100000", @ANYRES16=r2, @ANYBLOB="0500000003000000000001000000060006004e240000901008809005008024000100d1732899f611cd8994034d7f413dc957630e5493c285aca40065cb6311be696b24000100000000000000000000000000000000000000000000000000000000000000000024000200fcbefe9641719404cc5c9ab2766dd4793e367b0ea55e65e2e3416ac9d4e68841240002001171ee8da334a5099295af229a5d237a7f4102f01f28b34347d6cbbe135d83ec24000100975c9d81c983c8209ee781254b899f8ed925ae9f0923c23c62f53c57cdbf691cb40409807c000080060001000a00000014000200000000000000000000000000000000010500030002000000060001000200000008000200ac1414aa0500030001000000060001000a00000014000200ff0100000000000000000000000000010500030001000000060001000200000008000200e00000010500030000000000f4000080060001000a00000014000200fc0000000000000000000000000000000500030001000000060001000a00000014000200fc0200000000000000000000000000010500030000000000060001000200000008000200e00000020500030003000000060001000200000008000200000000000500030000000000060001000200000008000200ac1414bb0500030001000000060001000200000008000200ac1414bb0500030000000000060001000a00000014000200000000000000000000000000000000010500030002000000060001000a00000014000200fc0200000000000000000000000000000500030003000000340000800600010002000000080002000a0101010500030004000000060001000200000008000200ac1414aa050003000300000064000080060001000a00000014000200200100000000000000000000000000000500030002000000060001000200000008000200ac1414aa0500030001000000060001000a00000014000200ff010000000000000000000000000001050003000200000094000080060001000200000008000200ac1e00010500030002000000060001000200000008000200e00000010500030002000000060001000a00000014000200fc0000000000000000000000000000000500030002000000060001000200000008000200000000000500030003000000060001000a00000014000200fe80000000000000000000000000000e050003000000000040000080060001000a00000014000200fc0200000000000000000000000000000500030002000000060001000200000008000200ac1414aa050003000000000064000080060001000a00000014000200200100000000000000000000000000020500030001000000060001000a00000014000200fc02000000000000000000000000000105000300020000000600010002000000080002000a010100050003000200000070000080060001000a00000014000200ff0200000000000000000000000000010500030000000000060001000a00000014000200000000000000000000000000000000000500030002000000060001000a0000001400020000000000000000000000000000000001050003000000000000010080060001000a00000014000200ff0200000000000000000000000000010500030000000000060001000200000008000200000000000500030003000000060001000200000008000200640101000500030002000000060001000200000008000200640101010500030001000000060001000200000008000200ac1414aa0500030002000000060001000a00000014000200fe8000000000000000000000000000bb05000300020000000600010002000000080002007f0000010500030002000000060001000a00000014000200fc0200000000000000000000000000010500030003000000060001000200000008000200640101010500030001000000240002005da952055e5857d673cddd36909746c80efa3ff95c317de1063db32bc80a0b3e1803008024000100f44da367a88ee6564f020211456727082f5cebee8b1bf5eb7337341b459b39220600050005000000e802098058000080060001000200000008000200ac1e00010500030001000000060001000a00000014000200000000000000000000000000000000010500030000000000060001000200000008000200ffffffff05000300010000007c000080060001000a00000014000200000000000000000000000000000000010500030002000000060001000200000008000200ac1414bb0500030002000000060001000a000000140002000000000000000000000000000000000105000300020000000600010002000000080002000a0101010500030003000000f4000080060001000a0000001400020000000000000000000000ffffac1414aa0500030003000000060001000200000008000200ac1414aa05000300000000000600010002000000080002000a01010205000300020000000600010002000000080002007f00000105000300000000000600010002000000080002000a0101010500030003000000060001000200000008000200e00000010500030003000000060001000a00000014000200fc01000000000000000000000000000005000300010000000600010002000000080002000a0101000500030000000000060001000200000008000200ac1e0101050003000200000094000080060001000a00000014000200fc0200000000000000000000000000010500030002000000060001000a00000014000200ff0100000000000000000000000000010500030001000000060001000200000008000200e00000010500030002000000060001000200000008000200ac1414bb0500030001000000060001000200000008000200ffffffff050003000200000088000080060001000a00000014000200fe8000000000000000000000000000aa0500030001000000060001000200000008000200ac1414aa0500030002000000060001000a00000014000200fe8800000000000000000000000001010500030002000000060001000a00000014000200ff02000000000000000000000000000105000300020000007c000080200004000a004e2100000006fc0100000000000000000000000000010400000008000a000100000024000100f44da367a88ee6564f020211456727082f5debee8b1bf5eb7337341b459b3922080003000300000024000200379aa288b2244a5b504ba04bea45625d328fb93b62e607a1b2e4da2f7f76a549780000800800030001000000080003000400000024000100f44da367a88ee6564f020211456727082f5cebee8b1bf5eb7337341b459b3922080003000000000024000100d1732899f611cd8994034d7f413dc957630e5493c285aca40065cb6311be696b1400040002004e22000000000000000000000000e4060080dc020980f4000080060001000a00000014000200000000000000000000000000000000000500030002000000060001000a00000014000200fc0000000000000000000000000000000500030001000000060001000200000008000200ffffffff0500030001000000060001000200000008000200ac1e00010500030001000000060001000200000008000200e000000105000300020000000600010002000000080002007f0000010500030002000000060001000a00000014000200000000000000000000000000000000010500030001000000060001000a00000014000200fc010000000000000000000000000001050003000300000034000080060001000200000008000200640101000500030001000000060001000200000008000200ac1414bb050003000200000000010080060001000a00000014000200200100000000000000000000000000010500030000000000060001000200000008000200e000000205000300020000000600010002000000080002006401010005000300020000000600010002000000080002007f00000105000300010000000600010002000000080002007f0000010500030001000000060001000a00000014000200fe8000000000000000000000000000bb0500030000000000060001000200000008000200ffffffff0500030000000000060001000200000008000200e00000010500030003000000060001000a00000014000200fc0100000000000000000000000000010500030000000000940000800600010002000000080002006401010005000300010000000600010002000000080002006401010205000300000000000600010002000000080002007f0000010500030003000000060001000200000008000200e00000020500030003000000060001000200000008000200ac1414120500030002000000060001000200000008000200ac14142d05000300020000001c000080060001000200000008000200ffffffff05000300030000000800030002000000200004000a004e2000000005fc010000000000000000000000000001000000009403098094000080060001000a0000001400020000000000000000000000ffffac1414bb0500030003000000060001000a00000014000200fe8800000000000000000000000000010500030002000000060001000a00000014000200ff0100000000000000000000000000010500030003000000060001000a00000014000200fe880000000000000000000000000101050003000100000064000080060001000a00000014000200fe8000000000000000000000000000bb0500030000000000060001000200000008000200ac1414bb0500030001000000060001000a0000001400020000000000000000000000ffffe00000020500030003000000f4000080060001000200000008000200000000000500030001000000060001000a00000014000200000000000000000000000000000000010500030003000000060001000200000008000200ac1414aa0500030001000000060001000a00000014000200fe80000000000000000000000000003e05000300010000000600010002000000080002007f0000010500030001000000060001000a00000014000200ff0200000000000000000000000000010500030001000000060001000a00000014000200000000000000000000000000000000010500030000000000060001000200000008000200e0000001050003000000000058000080060001000a00000014000200fe8000000000000000000000000000bb0500030000000000060001000200000008000200ac1414410500030010000000060001000200000008000200ac1e00010500030001000000f4000080060001000200000008000200640101000500030002000000060001000a00000014000200200100000000000000000000000000000500030000000000060001000a00000014000200fc0200000000000000000000000000010500030003000000060001000a00000014000200fe8000000000000000000000000000aa0500030003000000060001000200000008000200ac1414aa0500030000000000060001000200000008000200000000000500030000000000060001000200000008000200ac1414270500030000000000060001000a0000001400020020010000000000000000000000000002050003000100000058000080060001000200000008000200ac1414aa0500030001000000060001000a00000014000200fe8000000000000000000000000000140500030000000000060001000200000008000200e0000001050003000000000024000100d1732899f611cd8994034d7f413dc957630e5493c285aca40065cb6311be696b240002000f1b8b82264208ab1a2dce776c03b9f348f500ef8e7606466943f5ba2ae2881e0c0000800800030006000000060006004e24000008000100", @ANYRES32=r3, @ANYBLOB="240003"], 0x10e0}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async)
r8 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) (async)
r9 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) (async, rerun: 64)
bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, <r10=>0x0}, 0x8) (async, rerun: 64)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
r12 = syz_genetlink_get_family_id$gtp(&(0x7f0000000000), r11)
r13 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r13) (async)
getsockname$packet(r13, &(0x7f0000000180)={0x11, 0x0, <r14=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14)
sendmsg$nl_route(r13, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newlink={0x38, 0x10, 0x437, 0x800000, 0x0, {0x0, 0x0, 0x0, r14, 0x504c3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD0={0x8, 0x1, @udp6}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000c014}, 0x0) (async)
sendmsg$GTP_CMD_DELPDP(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)={0x30, r12, 0x3, 0x70bd29, 0xe, {}, [@GTPA_LINK={0x8, 0x1, r14}, @GTPA_VERSION={0x8}, @GTPA_TID={0xc, 0x3, 0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x44800}, 0x20000000) (async)
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000080)=r10, 0x4) (async)
r15 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=r10, 0x4)
bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000040)={r15, r9, 0x0, r8}, 0x10) (async)
r16 = socket(0x22, 0x5, 0x4)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r17=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r17, 0x8933, &(0x7f0000000340)={'wg1\x00', <r18=>0x0})
sendmsg$nl_route_sched(r16, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x38, 0x24, 0xd0f, 0xfffffffd, 0x25dfdbfe, {0x60, 0x0, 0x0, r18, {0x0, 0xa}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8}, {0xc, 0x2, [@TCA_PIE_TUPDATE={0x8, 0x8, 0xffffffff}]}}]}, 0x38}}, 0x0)

0s ago: executing program 2 (id=8338):
r0 = socket(0x10, 0x3, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000140)={0x6}, 0x10)
write(r0, &(0x7f0000000000)="1c0000001a005f0214f9f407000904001f000000ff02000200000000", 0x1c)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="340000001000ffff25bd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="350e05002300000000000000000865035f3aae19a45a2f7d7404000280f6d0ef25500785df0c0d5a7bf37400"/54], 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x4008000)
write$tun(0xffffffffffffffff, 0x0, 0x0)
syz_genetlink_get_family_id$gtp(&(0x7f0000000080), r0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
r5 = socket(0x10, 0x3, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r5)
getsockname$packet(r5, &(0x7f00000002c0)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800)
sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@delchain={0x24, 0x64, 0xf31, 0xfffffffe, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0x2}, {0xfff3, 0x3}, {0xa, 0x1b}}}, 0x24}, 0x1, 0x0, 0x0, 0x40054}, 0x4804)
sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a70000000060a010400000000000000000200000344000480400001800e000100627974656f726465720000002c00028008000140000000130800024000000000080004400000009b080003400000000108000540000000020900010073797a30000000000900020073797a32"], 0x98}}, 0x44800)

kernel console output (not intermixed with test programs):

e
[  239.187601][T16105] netlink: 'syz.2.4434': attribute type 1 has an invalid length.
[  239.192696][T16105] netlink: 244 bytes leftover after parsing attributes in process `syz.2.4434'.
[  239.364238][T16111] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4437'.
[  239.368636][T16111] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4437'.
[  239.384229][T16111] batadv0: entered promiscuous mode
[  239.386533][T16111] batadv0: entered allmulticast mode
[  239.390027][T16111] 8021q: adding VLAN 0 to HW filter on device batadv0
[  239.550945][T16127] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4445'.
[  239.645636][T16135] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4445'.
[  239.787555][T16139] batadv_slave_0: Caught tx_queue_len zero misconfig
[  240.429499][T16131] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  240.526777][T16162] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4457'.
[  240.613692][T16158] lo speed is unknown, defaulting to 1000
[  242.352834][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  242.833011][T16257] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  243.129191][   T34] audit: type=1804 audit(1778622210.186:11): pid=16281 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.4507" name="/newroot/1342/cgroup.controllers" dev="tmpfs" ino=6777 res=1 errno=0
[  243.148908][   T34] audit: type=1800 audit(1778622210.186:12): pid=16281 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.4507" name="cgroup.controllers" dev="tmpfs" ino=6777 res=0 errno=0
[  243.157876][   T34] audit: type=1804 audit(1778622210.196:13): pid=16281 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.4507" name="/newroot/1342/cgroup.controllers" dev="tmpfs" ino=6777 res=1 errno=0
[  243.168658][T16284] netlink: 'syz.2.4506': attribute type 13 has an invalid length.
[  243.173273][T16284] netlink: 'syz.2.4506': attribute type 17 has an invalid length.
[  243.233311][T16287] __nla_validate_parse: 5 callbacks suppressed
[  243.233336][T16287] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4506'.
[  243.265959][T16284] 8021q: adding VLAN 0 to HW filter on device bond0
[  243.331854][T16284] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  243.336393][T16284] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  243.345191][T16284] veth0_virt_wifi: left allmulticast mode
[  243.351322][T16284] virt_wifi0: default qdisc (pfifo_fast) fail, fallback to noqueue
[  243.356700][T16284] veth1_vlan: left promiscuous mode
[  243.365421][T16284] vlan0: left promiscuous mode
[  243.369379][T16284] veth1_vlan: entered promiscuous mode
[  243.376385][T16284] veth1_macvtap: left promiscuous mode
[  243.382723][T16284] veth0_macvtap: left promiscuous mode
[  243.386158][T16284] veth0_macvtap: entered promiscuous mode
[  243.396352][T16284] veth1_macvtap: entered promiscuous mode
[  243.410297][T16284] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  243.422159][T16284] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  243.432189][T16284] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  243.506989][T16284] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue
[  243.526447][T16284] 8021q: adding VLAN 0 to HW filter on device bond1
[  243.535601][T16284] 8021q: adding VLAN 0 to HW filter on device bond2
[  243.543052][T16284] 8021q: adding VLAN 0 to HW filter on device bond3
[  243.547878][T16284] 8021q: adding VLAN 0 to HW filter on device bond4
[  243.557297][T16284] 8021q: adding VLAN 0 to HW filter on device bond5
[  243.576593][T16284] bond6: left promiscuous mode
[  243.578876][T16284] bond6: left allmulticast mode
[  243.581730][T16284] 8021q: adding VLAN 0 to HW filter on device bond6
[  243.596935][T16284] batadv0: left promiscuous mode
[  243.600215][T16284] batadv0: left allmulticast mode
[  243.612047][   T31] lo speed is unknown, defaulting to 1000
[  243.616250][   T31] syz2: Port: 1 Link ACTIVE
[  243.710599][ T5686] bridge0: entered promiscuous mode
[  243.749808][   T12] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  243.755076][   T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  243.767828][   T12] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  243.770996][   T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  243.783441][   T12] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  243.786694][   T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  243.793933][   T12] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  243.797190][   T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  243.823797][ T5759] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  243.829844][T16300] netlink: 'syz.0.4515': attribute type 21 has an invalid length.
[  243.840069][T16300] netlink: 128 bytes leftover after parsing attributes in process `syz.0.4515'.
[  243.845705][T16300] netlink: 'syz.0.4515': attribute type 4 has an invalid length.
[  243.848772][T16300] netlink: 'syz.0.4515': attribute type 5 has an invalid length.
[  243.852942][T16300] netlink: 3 bytes leftover after parsing attributes in process `syz.0.4515'.
[  244.023974][T16317] netlink: 'syz.1.4522': attribute type 16 has an invalid length.
[  244.064817][T16320] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4523'.
[  244.066957][T16321] tipc: Resetting bearer <eth:team0>
[  244.068123][T16320] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4523'.
[  244.082138][T16321] tipc: Disabling bearer <eth:team0>
[  244.096300][T16321] team0 (unregistering): Port device geneve1 removed
[  244.106746][T16321] team0 (unregistering): Port device vlan0 removed
[  245.275025][T16362] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4543'.
[  245.377417][T16370] netlink: 224 bytes leftover after parsing attributes in process `syz.0.4546'.
[  245.385276][T16370] netlink: 2 bytes leftover after parsing attributes in process `syz.0.4546'.
[  245.421129][T16372] netlink: 'syz.1.4548': attribute type 3 has an invalid length.
[  245.593362][T16386] batadv_slave_0: entered promiscuous mode
[  245.598059][T16385] batadv_slave_0: left promiscuous mode
[  245.679498][T16391] netlink: 'syz.0.4557': attribute type 20 has an invalid length.
[  245.951091][ T1116] wlan1: Trigger new scan to find an IBSS to join
[  246.537735][T16451] syzkaller1: entered promiscuous mode
[  246.543801][T16451] syzkaller1: entered allmulticast mode
[  247.289186][T16455] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.4585'.
[  247.372185][T16459] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4587'.
[  247.775019][T16500] : entered allmulticast mode
[  247.785181][T16497] : left allmulticast mode
[  247.868533][T16506] netlink: 'syz.2.4608': attribute type 29 has an invalid length.
[  247.871862][T16506] bond0: option lacp_active: mode dependency failed, not supported in mode balance-rr(0)
[  248.031670][    C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  248.416460][T16557] syzkaller1: entered promiscuous mode
[  248.418475][T16557] syzkaller1: entered allmulticast mode
[  248.468594][T16559] lo speed is unknown, defaulting to 1000
[  248.905760][T16589] __nla_validate_parse: 5 callbacks suppressed
[  248.905783][T16589] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4645'.
[  249.242365][T16610] netlink: 'syz.0.4655': attribute type 22 has an invalid length.
[  249.245040][T16610] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4655'.
[  249.322192][T16610] netlink: 'syz.0.4655': attribute type 22 has an invalid length.
[  249.327328][T16610] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4655'.
[  249.859458][T16662] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4680'.
[  249.951102][   T37] wlan1: Trigger new scan to find an IBSS to join
[  249.951268][  T581] wlan1: Trigger new scan to find an IBSS to join
[  250.104449][T16677] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  250.172637][T16685] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  250.336672][T16697] syzkaller1: entered promiscuous mode
[  250.339104][T16697] syzkaller1: entered allmulticast mode
[  250.385667][T16699] netlink: 'syz.1.4697': attribute type 6 has an invalid length.
[  250.699771][T16732] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4714'.
[  250.706000][T16732] netlink: 'syz.0.4714': attribute type 7 has an invalid length.
[  250.708878][T16732] netlink: 'syz.0.4714': attribute type 8 has an invalid length.
[  250.711649][T16732] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4714'.
[  250.764693][T16738] netlink: 'syz.2.4717': attribute type 4 has an invalid length.
[  250.775693][T16739] netlink: 'syz.0.4716': attribute type 1 has an invalid length.
[  250.894139][   T26] wlan1: Creating new IBSS network, BSSID 00:8d:ff:ff:00:00
[  251.310096][T16766] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4729'.
[  251.317540][T16766] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4729'.
[  251.346892][T16770] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4731'.
[  251.481271][T16780] : renamed from wg2 (while UP)
[  251.844809][T16810] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  251.937646][T16815] xfrm0: Caught tx_queue_len zero misconfig
[  251.941196][T16815] netem: change failed
[  252.157662][T16828] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4754'.
[  252.687358][T16859] lo speed is unknown, defaulting to 1000
[  252.814816][T16871] gretap0: entered promiscuous mode
[  252.817108][T16871] vlan3: entered promiscuous mode
[  253.004635][ T1116] wlan1: Trigger new scan to find an IBSS to join
[  253.123390][T16885] team3: entered promiscuous mode
[  253.129791][T16885] team3: entered allmulticast mode
[  253.136899][T16885] 8021q: adding VLAN 0 to HW filter on device team3
[  253.308986][T16898] netlink: 'syz.0.4783': attribute type 10 has an invalid length.
[  253.652065][T16919] netlink: 'syz.2.4792': attribute type 1 has an invalid length.
[  253.966040][T16938] __nla_validate_parse: 5 callbacks suppressed
[  253.966061][T16938] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4800'.
[  254.487376][T16946] bond6: option arp_validate: mode dependency failed, not supported in mode 802.3ad(4)
[  254.493794][T16946] bond6 (unregistering): Released all slaves
[  254.572976][T16950] netlink: 256 bytes leftover after parsing attributes in process `syz.1.4804'.
[  254.576047][T16950] netlink: 256 bytes leftover after parsing attributes in process `syz.1.4804'.
[  254.694889][T16956] netlink: 316 bytes leftover after parsing attributes in process `syz.1.4807'.
[  254.808288][T16962] tipc: Enabled bearer <eth:ipvlan0>, priority 31
[  255.213606][T16987] netlink: 148 bytes leftover after parsing attributes in process `syz.1.4821'.
[  255.356728][T16996] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4825'.
[  255.359955][T16996] netlink: 7 bytes leftover after parsing attributes in process `syz.1.4825'.
[  255.972661][   T26] wlan1: Trigger new scan to find an IBSS to join
[  256.111245][ T5001] Bluetooth: hci2: Opcode 0x0401 failed: -110
[  256.114466][ T5607] Bluetooth: hci2: command 0x0406 tx timeout
[  256.148973][T16993] tipc: Failed to remove unknown binding: 66,1,1/2665871578:596746443/596746444
[  256.152772][T16993] tipc: Failed to remove unknown binding: 66,1,1/2665871578:596746443/596746444
[  256.433831][    C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  256.647968][T17030] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4836'.
[  257.472510][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  257.477233][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  257.480861][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  257.484211][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  257.487628][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  257.491034][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  257.573144][  T791] wlan1: Creating new IBSS network, BSSID 52:c7:d3:f0:f3:ac
[  257.996307][T17061] pimreg: entered allmulticast mode
[  258.001753][T17060] pimreg: left allmulticast mode
[  258.424181][T17077] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4857'.
[  258.576641][T17004] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  258.763828][T17096] syzkaller0: entered promiscuous mode
[  258.765935][T17096] syzkaller0: entered allmulticast mode
[  258.910940][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  258.984924][T17112] syzkaller1: entered promiscuous mode
[  258.988628][T17112] syzkaller1: entered allmulticast mode
[  258.991973][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  259.027569][T17115] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16)
[  259.031732][T17115] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  259.197805][T17129] netlink: 52 bytes leftover after parsing attributes in process `syz.1.4880'.
[  259.250453][T17121] tipc: Resetting bearer <eth:syzkaller0>
[  259.408041][T17145] netlink: 104 bytes leftover after parsing attributes in process `syz.1.4884'.
[  259.818529][T17197] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only
[  259.845831][T17197] vcan0: tx drop: invalid da for name 0xfffffffffffffffd
[  259.849277][ T5334] IPVS: starting estimator thread 0...
[  259.940933][T17199] IPVS: using max 82 ests per chain, 196800 per kthread
[  260.591001][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  260.640621][T17231] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4913'.
[  260.945949][ T1381] ieee802154 phy0 wpan0: encryption failed: -22
[  260.962649][   T55] block nbd0: Receive control failed (result -32)
[  261.067538][    T9] lo speed is unknown, defaulting to 1000
[  261.071807][    T9] syz2: Port: 1 Link DOWN
[  261.874084][T17300] bridge_slave_1: Caught tx_queue_len zero misconfig
[  261.882491][T17300] sch_fq: defrate 8 ignored.
[  261.957369][T17306] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4950'.
[  262.452947][T17339] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4965'.
[  263.473113][T17377] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4984'.
[  263.516118][T17379] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4985'.
[  263.539628][T17379] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4985'.
[  263.721042][    C1] net_ratelimit: 8 callbacks suppressed
[  263.721057][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  263.726889][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  263.730411][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  263.733910][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  263.737286][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  263.740599][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  263.794615][T17387] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.4989'.
[  264.107980][    C1] vcan0: j1939_tp_rxtimer: 0xffff888110ff0400: rx timeout, send abort
[  264.114110][    C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888110ff0400: 0x20000: (3) A timeout occurred and this is the connection abort to close the session.
[  264.311305][T17408] dvmrp0: entered allmulticast mode
[  264.411562][T17418] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5002'.
[  264.558865][T17436] netlink: 34 bytes leftover after parsing attributes in process `syz.1.5011'.
[  264.603225][T17438] netlink: 388 bytes leftover after parsing attributes in process `syz.1.5012'.
[  264.843264][T17462] netlink: 156 bytes leftover after parsing attributes in process `syz.2.5023'.
[  265.260441][T17470] sctp: [Deprecated]: syz.2.5026 (pid 17470) Use of int in max_burst socket option deprecated.
[  265.260441][T17470] Use struct sctp_assoc_value instead
[  266.402723][T17492] netlink: 'syz.2.5036': attribute type 6 has an invalid length.
[  266.546766][T17500] netlink: 140 bytes leftover after parsing attributes in process `syz.0.5039'.
[  266.655459][T17515] netlink: 'syz.0.5044': attribute type 66 has an invalid length.
[  266.700176][T17521] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5042'.
[  266.707044][T17521] netem: incorrect ge model size
[  266.712422][T17521] netem: change failed
[  266.734531][T17521] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5042'.
[  266.760678][T17507] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  266.766952][T17507] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  266.771624][T17507] netdevsim netdevsim1 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  266.828128][T17507] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  266.832398][T17507] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  266.836711][T17507] netdevsim netdevsim1 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  266.840948][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  266.841070][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  266.847205][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  266.849894][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  266.888548][T17507] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  266.893101][T17507] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  266.896884][T17507] netdevsim netdevsim1 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  266.927522][T17507] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  266.931297][T17507] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  266.934499][T17507] netdevsim netdevsim1 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  266.996498][ T5759] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  267.003248][ T5759] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 256 - 0
[  267.010944][ T5759] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 6081 - 0
[  267.020676][ T5759] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  267.024398][ T5759] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 256 - 0
[  267.027669][ T5759] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 6081 - 0
[  267.041389][ T5759] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  267.044903][ T5759] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 256 - 0
[  267.048228][ T5759] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 6081 - 0
[  267.056912][ T5759] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  267.060384][ T5759] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 256 - 0
[  267.063953][ T5759] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 6081 - 0
[  267.241830][T17545] netlink: 'syz.1.5055': attribute type 9 has an invalid length.
[  267.291453][T17545] netlink: 'syz.1.5055': attribute type 3 has an invalid length.
[  267.294889][T17545] netlink: 'syz.1.5055': attribute type 3 has an invalid length.
[  268.062204][T17569] netlink: 76 bytes leftover after parsing attributes in process `syz.0.5064'.
[  268.181269][T17580] netlink: 72 bytes leftover after parsing attributes in process `syz.1.5070'.
[  268.591499][   T26] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  268.634644][T17605] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5080'.
[  269.397234][T17635] bridge0: entered allmulticast mode
[  269.400338][T17635] bridge0: left allmulticast mode
[  269.514881][T17642] rdma_op ffff8881125939f0 conn xmit_rdma 0000000000000000
[  269.803735][T17665] __nla_validate_parse: 3 callbacks suppressed
[  269.803746][T17665] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5105'.
[  269.875371][T17673] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5110'.
[  269.950947][    C1] net_ratelimit: 8 callbacks suppressed
[  269.950957][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  269.955457][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  269.958003][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  269.960588][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  269.963828][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  269.966816][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  270.036786][T17695] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5120'.
[  270.060064][T17699] Timeout policy `syz1' can only be used by L3 protocol number 41216
[  270.177653][T17715] netlink: 'syz.2.5130': attribute type 3 has an invalid length.
[  270.207282][T17715] block nbd2: NBD_DISCONNECT
[  270.232842][T17715] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000
[  270.238403][T17715] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6
[  270.245429][T17715] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008
[  270.269403][T17715] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[  270.416641][T17737] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5140'.
[  270.514847][T17747] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5145'.
[  270.892636][T17786] netlink: 'syz.2.5164': attribute type 1 has an invalid length.
[  270.895127][T17786] netlink: 244 bytes leftover after parsing attributes in process `syz.2.5164'.
[  271.112790][T17811] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  271.194615][T17817] netlink: 'syz.2.5180': attribute type 1 has an invalid length.
[  271.225921][T17817] bond7: entered promiscuous mode
[  271.228912][T17817] 8021q: adding VLAN 0 to HW filter on device bond7
[  271.239873][T17817] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5180'.
[  271.244215][T17817] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5180'.
[  271.294420][T17817] bond7: (slave bridge0): making interface the new active one
[  271.314038][T17817] bridge0: entered promiscuous mode
[  271.323877][T17817] bond7: (slave bridge0): Enslaving as an active interface with an up link
[  271.347484][T17823] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5181'.
[  271.616944][T17852] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  271.755280][T17865] lo speed is unknown, defaulting to 1000
[  271.788936][T17865] netlink: 192 bytes leftover after parsing attributes in process `syz.0.5201'.
[  271.932907][T17875] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  271.985157][T17879] lo speed is unknown, defaulting to 1000
[  272.031844][T17883] netlink: 'syz.0.5208': attribute type 322 has an invalid length.
[  272.638807][T17917] netlink: 'syz.2.5223': attribute type 10 has an invalid length.
[  273.009269][T17941] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  273.072134][    C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  273.076627][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  273.711627][  T581] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  273.948212][T18013] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks
[  274.593044][T18058] bond7: Unable to set peer notification delay as MII monitoring is disabled
[  274.605367][T18058] bond7 (unregistering): Released all slaves
[  275.029219][T18093] hmac(sha2: entered promiscuous mode
[  275.071776][T18096] __nla_validate_parse: 15 callbacks suppressed
[  275.071795][T18096] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5306'.
[  275.085683][T18096] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5306'.
[  275.094817][T18098] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  275.121692][T18103] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5309'.
[  275.758705][T18134] net_ratelimit: 7 callbacks suppressed
[  275.758729][T18134] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  275.947434][T18141] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5327'.
[  276.117405][T18156] af_packet: tpacket_rcv: packet too big, clamped from 1 to 4294967272. macoff=96
[  276.191135][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  276.194589][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  276.197796][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  276.200776][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  276.203538][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  276.206069][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  277.305662][T18244] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic
[  277.490615][T18260] netlink: 'syz.0.5380': attribute type 10 has an invalid length.
[  277.495768][T18260] netlink: 'syz.0.5380': attribute type 10 has an invalid length.
[  277.952642][T18318] mac80211_hwsim hwsim4 syzkaller0: left promiscuous mode
[  277.955075][T18318] mac80211_hwsim hwsim4 syzkaller0: left allmulticast mode
[  278.771100][T18339] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5416'.
[  278.774033][T18339] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5416'.
[  278.777155][T18339] netlink: 'syz.1.5416': attribute type 20 has an invalid length.
[  279.015981][T18361] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5427'.
[  279.064367][T18361] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5427'.
[  279.304924][T18379] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5435'.
[  279.320984][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  279.324444][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  279.327206][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  279.429190][T18393] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5440'.
[  279.473380][  T581] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  279.612344][T18407] xt_recent: hitcount (33554435) is larger than allowed maximum (65535)
[  279.625259][T18407] netlink: 'syz.1.5446': attribute type 1 has an invalid length.
[  279.659014][T18407] 8021q: adding VLAN 0 to HW filter on device bond7
[  279.948777][T18427] netlink: 'syz.1.5453': attribute type 1 has an invalid length.
[  279.987272][T18427] 8021q: adding VLAN 0 to HW filter on device bond8
[  280.168132][T18445] lo speed is unknown, defaulting to 1000
[  280.405888][T18465] dvmrp1: tun_chr_ioctl cmd 1074025677
[  280.410647][T18465] dvmrp1: linktype set to 0
[  280.640504][T18473] x9: renamed from bridge_slave_0 (while UP)
[  280.920056][T18506] netlink: 'syz.0.5489': attribute type 4 has an invalid length.
[  280.929405][T18506] netlink: 224 bytes leftover after parsing attributes in process `syz.0.5489'.
[  281.011133][T18510] netlink: 52 bytes leftover after parsing attributes in process `syz.0.5491'.
[  281.638836][T18514] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5494'.
[  281.664186][T18514] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5494'.
[  281.667142][T18514] netlink: 348 bytes leftover after parsing attributes in process `syz.1.5494'.
[  281.670116][T18514] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5494'.
[  281.673382][T18514] netlink: 348 bytes leftover after parsing attributes in process `syz.1.5494'.
[  281.676543][T18514] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5494'.
[  281.863180][T18518] nbd1: detected capacity change from 0 to 63
[  281.873606][   T56] block nbd1: Receive control failed (result -32)
[  281.876236][T18526] block nbd1: Receive control failed (result -32)
[  281.878476][T18401] block nbd1: Send control failed (result -32)
[  281.883736][T18401] block nbd1: Request send failed, requeueing
[  281.904714][ T1063] block nbd1: Dead connection, failed to find a fallback
[  281.908526][ T1063] block nbd1: shutting down sockets
[  281.912097][ T1063] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  281.918156][ T1063] Buffer I/O error on dev nbd1, logical block 0, async page read
[  281.924043][T18401] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  281.943478][T18401] Buffer I/O error on dev nbd1, logical block 1, async page read
[  281.947110][T18401] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  281.954456][T18401] Buffer I/O error on dev nbd1, logical block 2, async page read
[  281.960437][T18401] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  281.965240][T18401] Buffer I/O error on dev nbd1, logical block 3, async page read
[  281.968802][T18401] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  281.974052][T18401] Buffer I/O error on dev nbd1, logical block 0, async page read
[  281.977548][T18401] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  281.981501][T18401] Buffer I/O error on dev nbd1, logical block 1, async page read
[  281.985562][T18401] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  281.990628][T18401] Buffer I/O error on dev nbd1, logical block 2, async page read
[  281.999315][T18401] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  282.002726][T18401] Buffer I/O error on dev nbd1, logical block 3, async page read
[  282.005689][T18401] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  282.009091][T18538] bond0: entered promiscuous mode
[  282.010921][T18401] Buffer I/O error on dev nbd1, logical block 0, async page read
[  282.016080][T18538] bond_slave_0: entered promiscuous mode
[  282.016814][T18401] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  282.024005][T18538] bond_slave_1: entered promiscuous mode
[  282.024953][T18401] Buffer I/O error on dev nbd1, logical block 1, async page read
[  282.041018][T18401] ldm_validate_partition_table(): Disk read failed.
[  282.045910][T18401] Dev nbd1: unable to read RDB block 0
[  282.048940][T18401]  nbd1: unable to read partition table
[  282.063243][T18401] ldm_validate_partition_table(): Disk read failed.
[  282.068161][T18401] Dev nbd1: unable to read RDB block 0
[  282.077094][T18401]  nbd1: unable to read partition table
[  282.111130][ T5001] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  282.224568][T18554] netlink: 'syz.2.5508': attribute type 9 has an invalid length.
[  282.227976][T18554] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.5508'.
[  282.441153][    C1] net_ratelimit: 10 callbacks suppressed
[  282.441171][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  282.447059][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  282.450636][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  282.454137][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  282.457638][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  282.464406][   T33] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  283.056356][T18607] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5529'.
[  283.181412][   T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  283.312066][  T791] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  283.317946][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  283.481318][   T33] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  283.564573][T18645] IPVS: sync thread started: state = MASTER, mcast_ifn = vcan0, syncid = 0, id = 0
[  283.714065][T18658] netlink: 'syz.2.5548': attribute type 33 has an invalid length.
[  283.784783][T18664] mac80211_hwsim hwsim6 syzkaller0: left promiscuous mode
[  283.788072][T18664] mac80211_hwsim hwsim6 syzkaller0: left allmulticast mode
[  283.896438][T18672] netlink: 'syz.2.5555': attribute type 1 has an invalid length.
[  284.457215][T18735] mac80211_hwsim hwsim4 syzkaller0: entered promiscuous mode
[  284.460411][T18735] mac80211_hwsim hwsim4 syzkaller0: entered allmulticast mode
[  284.816779][T18755] lo speed is unknown, defaulting to 1000
[  285.240337][   T26] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  285.669894][T18819] bridge0: port 2(bridge_slave_1) entered disabled state
[  285.679139][T18819] team_slave_0: left promiscuous mode
[  285.685307][T18819] team_slave_1: left promiscuous mode
[  285.740220][T18819] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  285.748508][T18819] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  285.781825][T18819] tipc: Resetting bearer <eth:ipvlan0>
[  285.844213][T18819] bond2: left allmulticast mode
[  285.847609][T18819] ip6gretap1: left allmulticast mode
[  285.850879][T18819] bond2: left promiscuous mode
[  285.853021][T18819] ip6gretap1: left promiscuous mode
[  285.933729][   T13] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  285.943265][   T13] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 256 - 0
[  285.953275][   T13] netdevsim netdevsim1 eth0: unset [1, 1] type 2 family 0 port 6081 - 0
[  285.963452][   T13] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  285.971560][   T13] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 256 - 0
[  285.977681][   T13] netdevsim netdevsim1 eth1: unset [1, 1] type 2 family 0 port 6081 - 0
[  285.990651][   T13] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  285.999126][   T13] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 256 - 0
[  286.003882][   T13] netdevsim netdevsim1 eth2: unset [1, 1] type 2 family 0 port 6081 - 0
[  286.008022][   T13] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  286.012033][   T13] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 256 - 0
[  286.015877][   T13] netdevsim netdevsim1 eth3: unset [1, 1] type 2 family 0 port 6081 - 0
[  286.350294][T18840] __nla_validate_parse: 8 callbacks suppressed
[  286.350315][T18840] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5630'.
[  286.373881][T18836] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  286.381085][T18836] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  286.499277][T18836] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  286.504760][T18836] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  286.652073][T18836] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  286.656601][T18836] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  286.744373][T18836] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  286.748369][T18836] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  286.856108][ T5662] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  286.858937][ T5662] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  286.900865][ T5662] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  286.904256][ T5662] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  286.907785][ T5662] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  286.911531][ T5662] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  286.915215][ T5662] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  286.921567][ T5662] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  287.146554][T18845] tipc: Trying to set illegal importance in message
[  287.186783][T18848] netlink: 'syz.2.5633': attribute type 1 has an invalid length.
[  287.192779][T18848] netlink: 224 bytes leftover after parsing attributes in process `syz.2.5633'.
[  287.419940][T18854] lo speed is unknown, defaulting to 1000
[  287.535570][T18868] netlink: 76 bytes leftover after parsing attributes in process `syz.2.5641'.
[  287.602651][T18854] vlan4: entered promiscuous mode
[  287.696801][T18875] net_ratelimit: 5 callbacks suppressed
[  287.696817][T18875] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2
[  287.703738][T18875] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2
[  287.706140][T18875] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2
[  287.708975][T18875] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2
[  287.711605][T18875] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2
[  287.714044][T18875] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2
[  287.716502][T18875] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2
[  287.718792][T18875] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2
[  287.721227][T18875] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2
[  287.723577][T18875] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2
[  287.749514][T18876] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5645'.
[  287.766605][T18876] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5645'.
[  287.786379][T18876] netlink: 348 bytes leftover after parsing attributes in process `syz.2.5645'.
[  287.800948][T18876] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5645'.
[  287.831932][T18876] netlink: 348 bytes leftover after parsing attributes in process `syz.2.5645'.
[  287.845261][T18876] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5645'.
[  287.938676][T18885] netlink: 48 bytes leftover after parsing attributes in process `syz.0.5646'.
[  288.185782][T18891] sch_tbf: burst 255 is lower than device syzkaller0 mtu (313) !
[  288.308950][T18891] mac80211_hwsim hwsim6 syzkaller0: entered promiscuous mode
[  288.312026][T18891] mac80211_hwsim hwsim6 syzkaller0: entered allmulticast mode
[  288.399817][T18906] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  288.716511][T18929] netlink: 'syz.1.5669': attribute type 1 has an invalid length.
[  289.625099][T18974] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  289.629327][T18974] syzkaller0: entered promiscuous mode
[  289.631448][T18974] syzkaller0: entered allmulticast mode
[  289.657492][T18974] tipc: Resetting bearer <eth:syzkaller0>
[  289.664031][T18973] tipc: Resetting bearer <eth:syzkaller0>
[  289.689288][T18973] tipc: Disabling bearer <eth:syzkaller0>
[  289.908020][T18990] tunl0: Caught tx_queue_len zero misconfig
[  289.973268][T18996] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  290.828339][T18998] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  290.992828][ T1113] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  291.383980][T19035] __nla_validate_parse: 4 callbacks suppressed
[  291.383995][T19035] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5713'.
[  291.631332][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  292.694054][T19072] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  292.697409][T19072] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  292.774380][T19072] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  292.788778][T19072] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  292.870663][T19072] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  292.878947][T19072] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  292.955435][T19072] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  292.961997][T19072] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  293.059303][ T5662] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  293.064341][ T5662] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  293.080511][T17398] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  293.094786][T17398] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  293.111778][   T12] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  293.114484][   T12] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  293.135630][   T12] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  293.141624][   T12] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  293.355275][T19102] net_ratelimit: 3319 callbacks suppressed
[  293.355286][T19102] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  293.830519][T19145] netlink: 48 bytes leftover after parsing attributes in process `syz.1.5762'.
[  294.010281][T19163] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  294.014540][T19163] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  294.048385][T19163] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  294.053672][T19163] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  294.104008][T19163] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  294.107787][T19163] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  294.155411][T19163] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  294.159701][T19163] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  294.525089][T19199] netlink: 10 bytes leftover after parsing attributes in process `syz.1.5786'.
[  294.650247][T19211] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  294.742748][T19224] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5798'.
[  295.500684][T19289] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5827'.
[  295.508216][T19289] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5827'.
[  295.521019][T19289] netlink: 58 bytes leftover after parsing attributes in process `syz.1.5827'.
[  295.998571][ T5611] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0
[  296.022987][ T5611] CPU: 1 UID: 0 PID: 5611 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[  296.023000][ T5611] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  296.023006][ T5611] Call Trace:
[  296.023009][ T5611]  <TASK>
[  296.023030][ T5611]  dump_stack_lvl+0xe8/0x150
[  296.023044][ T5611]  dump_header+0xd3/0x4c0
[  296.023057][ T5611]  oom_kill_process+0x3ab/0x970
[  296.023069][ T5611]  out_of_memory+0x106c/0x1410
[  296.023078][ T5611]  ? try_charge_memcg+0xbb9/0x1570
[  296.023116][ T5611]  ? __pfx___mutex_lock+0x10/0x10
[  296.023127][ T5611]  ? __pfx_out_of_memory+0x10/0x10
[  296.023135][ T5611]  ? do_raw_spin_unlock+0x4d/0x210
[  296.023150][ T5611]  try_charge_memcg+0xc77/0x1570
[  296.023168][ T5611]  ? __pfx_try_charge_memcg+0x10/0x10
[  296.023186][ T5611]  ? charge_memcg+0x23/0x2b0
[  296.023197][ T5611]  charge_memcg+0x1a2/0x2b0
[  296.023208][ T5611]  __mem_cgroup_charge+0x25/0x80
[  296.023218][ T5611]  filemap_add_folio+0x152/0x530
[  296.023230][ T5611]  __filemap_get_folio_mpol+0x500/0xb00
[  296.023244][ T5611]  filemap_fault+0x98e/0x1300
[  296.023258][ T5611]  ? __pfx_filemap_fault+0x10/0x10
[  296.023269][ T5611]  ? __pfx_filemap_map_pages+0x10/0x10
[  296.023283][ T5611]  __do_fault+0x138/0x2a0
[  296.023295][ T5611]  ? do_pte_missing+0x125b/0x33f0
[  296.023304][ T5611]  do_pte_missing+0x2093/0x33f0
[  296.023319][ T5611]  ? handle_mm_fault+0xee/0x3170
[  296.023330][ T5611]  handle_mm_fault+0x1bd7/0x3170
[  296.023344][ T5611]  ? handle_mm_fault+0xee/0x3170
[  296.023356][ T5611]  ? __pfx_handle_mm_fault+0x10/0x10
[  296.023364][ T5611]  ? lock_vma_under_rcu+0x45a/0x500
[  296.023383][ T5611]  do_user_addr_fault+0xa73/0x1340
[  296.023394][ T5611]  ? rcu_is_watching+0x15/0xb0
[  296.023403][ T5611]  ? trace_page_fault_user+0x84/0x1e0
[  296.023412][ T5611]  exc_page_fault+0x6a/0xc0
[  296.023423][ T5611]  asm_exc_page_fault+0x26/0x30
[  296.023431][ T5611] RIP: 0033:0x7f8762c6adf4
[  296.023440][ T5611] Code: 85 62 0a 00 00 48 b8 db 34 b6 d7 82 de 1b 43 48 f7 a4 24 98 00 00 00 48 8b 05 c0 a9 ed 00 48 69 8c 24 90 00 00 00 e8 03 00 00 <8b> 78 08 48 8b 44 24 18 48 c1 ea 12 4c 8b 0d b9 a8 ed 00 48 01 d1
[  296.023447][ T5611] RSP: 002b:00007fff91b03120 EFLAGS: 00010202
[  296.023455][ T5611] RAX: 0000001b33124000 RBX: 00000000000010ae RCX: 0000000000048058
[  296.023460][ T5611] RDX: 000000000b4e98af RSI: 00007fff91b031b0 RDI: 0000000000000001
[  296.023465][ T5611] RBP: 00007fff91b0315c R08: 000000002b220254 R09: 3fffffffffffffff
[  296.023470][ T5611] R10: 4000000000000000 R11: 0000000000000246 R12: 0000000000001388
[  296.023474][ T5611] R13: 00000000000927c0 R14: 0000000000048055 R15: 00007fff91b031b0
[  296.023486][ T5611]  </TASK>
[  296.024108][ T5611] memory: usage 307200kB, limit 307200kB, failcnt 2249
[  296.031476][ T1113] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  296.124504][ T5611] memory+swap: usage 307288kB, limit 9007199254740988kB, failcnt 0
[  296.127373][ T5611] kmem: usage 307176kB, limit 9007199254740988kB, failcnt 0
[  296.130018][ T5611] Memory cgroup stats for /syz2:
[  296.130596][ T5611] cache 0
[  296.134471][ T5611] rss 0
[  296.135833][ T5611] rss_huge 0
[  296.137310][ T5611] shmem 0
[  296.138545][ T5611] mapped_file 0
[  296.139896][ T5611] dirty 0
[  296.141799][ T5611] writeback 0
[  296.143250][ T5611] workingset_refault_anon 4
[  296.145072][ T5611] workingset_refault_file 0
[  296.146917][ T5611] swap 90112
[  296.148211][ T5611] swapcached 147456
[  296.149598][ T5611] pgpgin 172995
[  296.160818][ T5611] pgpgout 172989
[  296.162066][ T5611] pgfault 352542
[  296.167038][ T5611] pgmajfault 3
[  296.168152][ T5611] inactive_anon 4096
[  296.172893][ T5611] active_anon 20480
[  296.180174][ T5611] inactive_file 0
[  296.181682][ T5611] active_file 0
[  296.182969][ T5611] unevictable 0
[  296.184508][ T5611] hierarchical_memory_limit 314572800
[  296.186627][ T5611] hierarchical_memsw_limit 9223372036854771712
[  296.189117][ T5611] total_cache 0
[  296.204239][ T5611] total_rss 0
[  296.205545][ T5611] total_rss_huge 0
[  296.211316][ T5611] total_shmem 0
[  296.214276][ T5611] total_mapped_file 0
[  296.217755][ T5611] total_dirty 0
[  296.219024][ T5611] total_writeback 0
[  296.220434][ T5611] total_workingset_refault_anon 4
[  296.223200][ T5611] total_workingset_refault_file 0
[  296.225703][ T5611] total_swap 90112
[  296.227026][ T5611] total_swapcached 147456
[  296.228507][ T5611] total_pgpgin 172996
[  296.229810][ T5611] total_pgpgout 172990
[  296.233386][ T5611] total_pgfault 352544
[  296.234758][ T5611] total_pgmajfault 3
[  296.236110][ T5611] total_inactive_anon 4096
[  296.237575][ T5611] total_active_anon 20480
[  296.238899][ T5611] total_inactive_file 0
[  296.240224][ T5611] total_active_file 0
[  296.242028][ T5611] total_unevictable 0
[  296.243404][ T5611] anon_cost 0
[  296.244546][ T5611] file_cost 0
[  296.246914][ T5611] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.5815,pid=19264,uid=0
[  296.254058][ T5611] Memory cgroup out of memory: Killed process 19264 (syz.2.5815) total-vm:102160kB, anon-rss:1252kB, file-rss:21580kB, shmem-rss:0kB, UID:0 pgtables:120kB oom_score_adj:1000
[  296.546915][ T5662] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  296.549632][ T5662] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  296.565014][ T5662] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  296.575827][ T5662] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  296.589545][ T5662] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  296.596835][ T5662] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  296.618335][ T5662] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  296.624588][ T5662] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  296.626414][T19339] xt_hashlimit: size too large, truncated to 1048576
[  296.730040][T19353] netlink: 'syz.0.5853': attribute type 2 has an invalid length.
[  296.776264][T19357] netlink: 'syz.0.5855': attribute type 10 has an invalid length.
[  296.781233][T19357] netlink: 16154 bytes leftover after parsing attributes in process `syz.0.5855'.
[  298.649092][T19413] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  298.655810][T19413] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  298.707434][T19413] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  298.710857][T19413] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  298.717581][T19420] lo speed is unknown, defaulting to 1000
[  298.758572][T19413] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  298.762693][T19413] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  298.810875][T19413] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  298.817458][T19413] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  299.559011][ T5662] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  299.567602][ T5662] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  299.577918][ T5662] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  299.582098][ T5662] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  299.596363][ T5662] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  299.600996][ T5662] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  299.634377][ T5662] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  299.642598][ T5662] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  300.002723][T19500] netlink: 76 bytes leftover after parsing attributes in process `syz.0.5915'.
[  300.054992][T19504] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  300.097190][T19504] tipc: Resetting bearer <eth:syzkaller0>
[  300.408743][T19521] netlink: 5 bytes leftover after parsing attributes in process `syz.0.5925'.
[  300.412079][T19521] netlink: 5 bytes leftover after parsing attributes in process `syz.0.5925'.
[  300.488618][ T5684] hsr0: entered promiscuous mode
[  300.494880][T19527] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5928'.
[  300.966503][T19546] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5937'.
[  301.873552][  T581] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  301.946880][T19618] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5971'.
[  301.959572][T19618] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5971'.
[  302.225819][T19643] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5982'.
[  302.333888][   T34] audit: type=1804 audit(1778622269.396:14): pid=19651 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.5986" name="/newroot/2062/cgroup.controllers" dev="tmpfs" ino=10408 res=1 errno=0
[  302.345209][   T34] audit: type=1800 audit(1778622269.406:15): pid=19651 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.5986" name="cgroup.controllers" dev="tmpfs" ino=10408 res=0 errno=0
[  302.442944][T19661] "syz.1.5991" (19661) uses obsolete ecb(arc4) skcipher
[  302.496438][T19665] netlink: 3 bytes leftover after parsing attributes in process `syz.2.5993'.
[  302.500251][T19665] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5993'.
[  302.503932][T19665] netlink: 3 bytes leftover after parsing attributes in process `syz.2.5993'.
[  302.507232][T19665] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5993'.
[  302.509862][T19665] netlink: 3 bytes leftover after parsing attributes in process `syz.2.5993'.
[  302.593135][T19669] netlink: 'syz.1.5995': attribute type 1 has an invalid length.
[  302.617082][T19669] bond9: entered promiscuous mode
[  302.620652][T19669] 8021q: adding VLAN 0 to HW filter on device bond9
[  302.644373][T19669] 8021q: adding VLAN 0 to HW filter on device bond9
[  302.647093][T19669] bond9: (slave vti0): The slave device specified does not support setting the MAC address
[  302.651136][T19669] bond9: (slave vti0): Setting fail_over_mac to active for active-backup mode
[  302.658324][T19669] bond9: (slave vti0): making interface the new active one
[  302.661511][T19669] vti0: entered promiscuous mode
[  302.665594][T19669] bond9: (slave vti0): Enslaving as an active interface with an up link
[  303.341165][T19740] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6024'.
[  303.403090][T19744] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6027'.
[  303.469150][T19750] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  304.184423][T19799] xt_l2tp: missing protocol rule (udp|l2tpip)
[  304.480582][T19827] netlink: 'syz.1.6066': attribute type 46 has an invalid length.
[  304.911541][ T5607] Bluetooth: hci2: command 0x0406 tx timeout
[  304.915819][ T5001] Bluetooth: hci2: Opcode 0x0401 failed: -110
[  304.943199][T19872] netlink: 'syz.2.6087': attribute type 1 has an invalid length.
[  304.974093][T19872] bond8: entered promiscuous mode
[  304.975900][T19872] 8021q: adding VLAN 0 to HW filter on device bond8
[  304.987920][T19872] 8021q: adding VLAN 0 to HW filter on device bond8
[  304.990252][T19872] bond8: (slave wireguard0): The slave device specified does not support setting the MAC address
[  304.994796][T19872] bond8: (slave wireguard0): Setting fail_over_mac to active for active-backup mode
[  305.001197][T19872] bond8: (slave wireguard0): making interface the new active one
[  305.003682][T19872] wireguard0: entered promiscuous mode
[  305.006398][T19872] bond8: (slave wireguard0): Enslaving as an active interface with an up link
[  305.081067][    C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  305.631317][T19881] syz.2.6091 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000
[  305.671236][T19881] CPU: 0 UID: 0 PID: 19881 Comm: syz.2.6091 Not tainted syzkaller #0 PREEMPT(full) 
[  305.671275][T19881] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  305.671285][T19881] Call Trace:
[  305.671291][T19881]  <TASK>
[  305.671298][T19881]  dump_stack_lvl+0xe8/0x150
[  305.671324][T19881]  dump_header+0xd3/0x4c0
[  305.671348][T19881]  oom_kill_process+0x3ab/0x970
[  305.671371][T19881]  out_of_memory+0x106c/0x1410
[  305.671388][T19881]  ? try_charge_memcg+0xbb9/0x1570
[  305.671410][T19881]  ? __pfx___mutex_lock+0x10/0x10
[  305.671431][T19881]  ? __pfx_out_of_memory+0x10/0x10
[  305.671447][T19881]  ? do_raw_spin_unlock+0x4d/0x210
[  305.671477][T19881]  try_charge_memcg+0xc77/0x1570
[  305.671514][T19881]  ? __pfx_try_charge_memcg+0x10/0x10
[  305.671533][T19881]  ? percpu_ref_tryget+0x15/0x180
[  305.671571][T19881]  ? charge_memcg+0x23/0x2b0
[  305.671594][T19881]  charge_memcg+0x1a2/0x2b0
[  305.671616][T19881]  ? mem_cgroup_swapin_charge_folio+0x33/0x390
[  305.671636][T19881]  mem_cgroup_swapin_charge_folio+0x262/0x390
[  305.671659][T19881]  __swap_cache_prepare_and_add+0xdc/0x700
[  305.671683][T19881]  ? page_rmappable_folio+0x9a/0x170
[  305.671712][T19881]  swap_cache_alloc_folio+0xf1/0x240
[  305.671734][T19881]  swap_cluster_readahead+0x355/0x670
[  305.671756][T19881]  ? __pfx_swap_cluster_readahead+0x10/0x10
[  305.671785][T19881]  ? get_vma_policy+0x27b/0x3c0
[  305.671809][T19881]  swapin_readahead+0x196/0xc50
[  305.671830][T19881]  ? swap_table_get+0x1e/0x260
[  305.671851][T19881]  ? __pfx_swapin_readahead+0x10/0x10
[  305.671870][T19881]  ? swap_table_get+0x1e/0x260
[  305.671886][T19881]  ? swap_table_get+0x1e/0x260
[  305.671899][T19881]  ? swap_table_get+0x1e/0x260
[  305.671916][T19881]  ? swap_table_get+0x216/0x260
[  305.671934][T19881]  ? swap_cache_get_folio+0x2e4/0x2f0
[  305.671956][T19881]  do_swap_page+0x555/0x5120
[  305.671979][T19881]  ? __pte_offset_map+0x29/0x240
[  305.671999][T19881]  ? __pte_offset_map+0x29/0x240
[  305.672059][T19881]  ? do_swap_page+0x128/0x5120
[  305.672075][T19881]  ? __pfx_do_swap_page+0x10/0x10
[  305.672089][T19881]  ? __pte_offset_map+0x1ae/0x240
[  305.672110][T19881]  ? pte_offset_map_rw_nolock+0xea/0x160
[  305.672131][T19881]  handle_mm_fault+0x12d2/0x3170
[  305.672161][T19881]  ? handle_mm_fault+0xee/0x3170
[  305.672185][T19881]  ? __pfx_handle_mm_fault+0x10/0x10
[  305.672200][T19881]  ? lock_vma_under_rcu+0x45a/0x500
[  305.672243][T19881]  do_user_addr_fault+0xa73/0x1340
[  305.672301][T19881]  ? rcu_is_watching+0x15/0xb0
[  305.672321][T19881]  ? trace_page_fault_user+0x84/0x1e0
[  305.672338][T19881]  exc_page_fault+0x6a/0xc0
[  305.672362][T19881]  asm_exc_page_fault+0x26/0x30
[  305.672378][T19881] RIP: 0033:0x7f8762c6a750
[  305.672395][T19881] Code: c4 4c 0f 42 e0 83 3d 7a d6 3a 00 00 0f 8e d9 fd ff ff e8 f3 7d fe ff 49 39 c4 0f 82 82 00 00 00 66 2e 0f 1f 84 00 00 00 00 00 <69> 3d 3e af ed 00 e8 03 00 00 48 8d 1d 3f b8 3a 00 e8 8a 31 13 00
[  305.672409][T19881] RSP: 002b:00007fff91b02f20 EFLAGS: 00010206
[  305.672425][T19881] RAX: 000000000004a92b RBX: 00007f8763017da0 RCX: 000000000004a768
[  305.672436][T19881] RDX: 00000000000001c3 RSI: 00007fff91b02f00 RDI: 0000000000000001
[  305.672445][T19881] RBP: 00007f8763017da0 R08: 000000001ae973f5 R09: 3fffffffffffffff
[  305.672455][T19881] R10: 4000000000000000 R11: 0000000000000246 R12: 000000000004aa7e
[  305.672465][T19881] R13: 00007f8763015fac R14: 000000000004a76f R15: 00007fff91b03020
[  305.672491][T19881]  </TASK>
[  305.817125][T19881] memory: usage 307200kB, limit 307200kB, failcnt 2446
[  305.820270][T19881] memory+swap: usage 307288kB, limit 9007199254740988kB, failcnt 0
[  305.824079][T19881] kmem: usage 307176kB, limit 9007199254740988kB, failcnt 0
[  305.827098][T19881] Memory cgroup stats for /syz2:
[  305.827330][T19881] cache 0
[  305.830387][T19881] rss 0
[  305.831615][T19881] rss_huge 0
[  305.832858][T19881] shmem 0
[  305.834037][T19881] mapped_file 0
[  305.835512][T19881] dirty 0
[  305.836647][T19881] writeback 0
[  305.838113][T19881] workingset_refault_anon 17
[  305.839890][T19881] workingset_refault_file 1
[  305.842748][T19881] swap 90112
[  305.844678][T19881] swapcached 270336
[  305.846473][T19881] pgpgin 190677
[  305.847855][T19881] pgpgout 190671
[  305.849306][T19881] pgfault 385232
[  305.850865][T19881] pgmajfault 18
[  305.852277][T19881] inactive_anon 0
[  305.853737][T19881] active_anon 24576
[  305.855280][T19881] inactive_file 0
[  305.856840][T19881] active_file 0
[  305.858584][T19881] unevictable 0
[  305.860346][T19881] hierarchical_memory_limit 314572800
[  305.863143][T19881] hierarchical_memsw_limit 9223372036854771712
[  305.865716][T19881] total_cache 0
[  305.867170][T19881] total_rss 0
[  305.868541][T19881] total_rss_huge 0
[  305.870040][T19881] total_shmem 0
[  305.871565][T19881] total_mapped_file 0
[  305.873181][T19881] total_dirty 0
[  305.874577][T19881] total_writeback 0
[  305.876055][T19881] total_workingset_refault_anon 17
[  305.878112][T19881] total_workingset_refault_file 1
[  305.880408][T19881] total_swap 90112
[  305.882207][T19881] total_swapcached 270336
[  305.884212][T19881] total_pgpgin 190678
[  305.886034][T19881] total_pgpgout 190672
[  305.887774][T19881] total_pgfault 385234
[  305.889469][T19881] total_pgmajfault 18
[  305.891684][T19881] total_inactive_anon 0
[  305.893293][T19881] total_active_anon 24576
[  305.895034][T19881] total_inactive_file 0
[  305.896714][T19881] total_active_file 0
[  305.898522][T19881] total_unevictable 0
[  305.900222][T19881] anon_cost 0
[  305.901797][T19881] file_cost 0
[  305.903285][T19881] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.6091,pid=19881,uid=0
[  305.909788][T19881] Memory cgroup out of memory: Killed process 19881 (syz.2.6091) total-vm:102160kB, anon-rss:1252kB, file-rss:21580kB, shmem-rss:0kB, UID:0 pgtables:120kB oom_score_adj:1000
[  306.502297][T19929] veth1_macvtap: Caught tx_queue_len zero misconfig
[  306.684413][T19941] netlink: 'syz.2.6114': attribute type 21 has an invalid length.
[  306.688701][T19941] IPv6: NLM_F_CREATE should be specified when creating new route
[  306.698052][T19941] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  306.701414][T19941] IPv6: NLM_F_CREATE should be set when creating new route
[  306.704899][T19941] IPv6: NLM_F_CREATE should be set when creating new route
[  306.708288][T19941] IPv6: NLM_F_CREATE should be set when creating new route
[  306.820307][T19948] syzkaller0: entered promiscuous mode
[  306.822698][T19948] syzkaller0: entered allmulticast mode
[  307.029909][T19958] 8021q: adding VLAN 0 to HW filter on device bond9
[  307.113947][T19968] IPv6: sit2: Disabled Multicast RS
[  307.187481][T19977] __nla_validate_parse: 5 callbacks suppressed
[  307.187492][T19977] netlink: 148 bytes leftover after parsing attributes in process `syz.1.6130'.
[  307.290406][T19988] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6133'.
[  307.631678][ T1113] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  308.109199][T20002] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6140'.
[  308.185346][    T9] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  308.321072][    T9] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  309.240256][T20027] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6151'.
[  309.270538][T20027] 8021q: adding VLAN 0 to HW filter on device bond6
[  309.288700][T20027] 8021q: adding VLAN 0 to HW filter on device bond7
[  309.296047][T20027] bond6: (slave bond7): Enslaving as an active interface with an up link
[  309.300928][T20027] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6151'.
[  309.339694][T20027] bond6 (unregistering): (slave bond7): Releasing backup interface
[  309.350040][T20027] bond6 (unregistering): Released all slaves
[  309.744224][T20052] xt_hashlimit: size too large, truncated to 1048576
[  310.706477][T20118] netlink: 36 bytes leftover after parsing attributes in process `syz.1.6193'.
[  310.709433][T20118] netlink: 36 bytes leftover after parsing attributes in process `syz.1.6193'.
[  310.713212][T20118] netlink: 31 bytes leftover after parsing attributes in process `syz.1.6193'.
[  310.723997][T20119] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  310.752057][T20119] syzkaller0: entered promiscuous mode
[  310.754338][T20119] syzkaller0: entered allmulticast mode
[  310.757159][T20119] tipc: Resetting bearer <eth:syzkaller0>
[  310.765344][T20116] tipc: Resetting bearer <eth:syzkaller0>
[  310.908566][T20131] netlink: 104 bytes leftover after parsing attributes in process `syz.1.6199'.
[  312.357551][ T5607] Bluetooth: hci2: command 0x0406 tx timeout
[  312.651919][T20116] tipc: Disabling bearer <eth:syzkaller0>
[  312.660037][    T9] tipc: Node number set to 796272997
[  312.671618][ T1113] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  312.992667][T20171] netlink: 204 bytes leftover after parsing attributes in process `syz.0.6219'.
[  312.997030][T20171] netlink: 84 bytes leftover after parsing attributes in process `syz.0.6219'.
[  313.005282][T20173] netlink: 'syz.2.6218': attribute type 1 has an invalid length.
[  313.013543][T20173] netlink: 224 bytes leftover after parsing attributes in process `syz.2.6218'.
[  313.093192][T20179] netlink: 'syz.2.6222': attribute type 2 has an invalid length.
[  313.097023][T20179] netlink: 'syz.2.6222': attribute type 1 has an invalid length.
[  313.145832][T20185] netlink: 'syz.2.6225': attribute type 1 has an invalid length.
[  313.330315][T20202] 8021q: VLANs not supported on gre0
[  313.357892][T20204] netlink: 228 bytes leftover after parsing attributes in process `syz.1.6233'.
[  313.793126][T20239] sock: sock_timestamping_bind_phc: sock not bind to device
[  314.006922][T20255] lo speed is unknown, defaulting to 1000
[  314.045812][T20255] netlink: 'syz.1.6258': attribute type 1 has an invalid length.
[  314.377185][T20271] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6264'.
[  314.428839][T20275] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6266'.
[  314.680681][T20297] netlink: 104 bytes leftover after parsing attributes in process `syz.0.6277'.
[  316.113295][T20357] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6303'.
[  316.251805][T20370] x_tables: duplicate underflow at hook 3
[  316.470370][T20396] netlink: 'syz.0.6319': attribute type 30 has an invalid length.
[  316.515314][T20398] netlink: 108 bytes leftover after parsing attributes in process `syz.2.6320'.
[  316.689391][T20414] netlink: 100 bytes leftover after parsing attributes in process `syz.0.6328'.
[  317.151414][T20442] lo speed is unknown, defaulting to 1000
[  317.429313][T20450] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  317.439621][T20450] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  317.499594][T20453] tipc: Resetting bearer <eth:ipvlan0>
[  317.513768][T20453] tipc: Resetting bearer <eth:ipvlan0>
[  317.522735][T20453] tipc: Resetting bearer <eth:syzkaller0>
[  317.619594][T20456] x9: renamed from bridge_slave_0 (while UP)
[  317.871852][ T1113] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  318.023851][T20491] __nla_validate_parse: 2 callbacks suppressed
[  318.023873][T20491] netlink: 56 bytes leftover after parsing attributes in process `syz.0.6359'.
[  318.663690][T20524] 5n: entered promiscuous mode
[  321.029851][T20678] bridge9: entered promiscuous mode
[  321.032299][T20678] bridge9: entered allmulticast mode
[  321.036523][T20678] team0: Port device bridge9 added
[  321.049229][T20678] bridge0: port 3(team0) entered blocking state
[  321.052499][T20678] bridge0: port 3(team0) entered disabled state
[  321.057482][T20678] team0: entered allmulticast mode
[  321.059320][T20678] team_slave_0: entered allmulticast mode
[  321.064114][T20678] team_slave_1: entered allmulticast mode
[  321.081051][T20678] team0: left allmulticast mode
[  321.085714][T20678] team_slave_0: left allmulticast mode
[  321.089269][T20678] team_slave_1: left allmulticast mode
[  321.169014][T20687] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6436'.
[  321.175339][T20687] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6436'.
[  321.184593][T20687] netlink: 'syz.0.6436': attribute type 12 has an invalid length.
[  321.190087][T20687] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6436'.
[  321.195286][T20687] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6436'.
[  321.200319][T20687] netlink: 'syz.0.6436': attribute type 12 has an invalid length.
[  321.276445][T20691] lo speed is unknown, defaulting to 1000
[  321.326656][T20696] netlink: 79 bytes leftover after parsing attributes in process `syz.1.6440'.
[  321.487976][T20706] netlink: 'syz.2.6445': attribute type 4 has an invalid length.
[  321.612506][T20721] netlink: 44 bytes leftover after parsing attributes in process `syz.1.6450'.
[  321.617282][T20721] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6450'.
[  321.620452][T20721] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6450'.
[  321.623528][T20721] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6450'.
[  322.416052][T20810] netlink: 'syz.0.6495': attribute type 27 has an invalid length.
[  322.685639][T20842] batman_adv: batadv0: adding TT local entry 1e:15:3b:e9:dc:af to non-existent VLAN 1303
[  322.937780][T20866] lo speed is unknown, defaulting to 1000
[  323.005036][T20874] netlink: 'syz.0.6523': attribute type 1 has an invalid length.
[  323.021172][T20874] netlink: 'syz.0.6523': attribute type 1 has an invalid length.
[  323.030196][T20874] netlink: 'syz.0.6523': attribute type 8 has an invalid length.
[  323.033053][T20866] __nla_validate_parse: 8 callbacks suppressed
[  323.033062][T20866] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6520'.
[  323.051060][T20866] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6520'.
[  323.635395][ T1116] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  324.256838][T20945] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  324.266419][ T5686] lo speed is unknown, defaulting to 1000
[  324.268436][ T5686] syz2: Port: 1 Link ACTIVE
[  324.519056][T20975] lo speed is unknown, defaulting to 1000
[  324.994119][T21009] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6581'.
[  325.886690][T20998] bond7: left promiscuous mode
[  325.888908][T20998] bridge0: left promiscuous mode
[  325.905332][T20998] bond8: left promiscuous mode
[  325.909871][T20998] wireguard0: left promiscuous mode
[  325.934684][ T5686] lo speed is unknown, defaulting to 1000
[  325.941216][T21004] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  325.944603][ T5686] syz2: Port: 1 Link DOWN
[  325.965281][    T9] syz0: Port: 1 Link DOWN
[  325.989329][ T5662] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  325.994734][ T5662] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  326.003935][ T5662] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  326.020960][ T5662] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  326.033808][T21016] netlink: 'syz.2.6582': attribute type 1 has an invalid length.
[  326.037445][ T5662] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  326.044226][ T5662] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  326.047732][ T5662] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  326.052994][ T5662] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  326.291896][T21041] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6593'.
[  326.295050][T21041] netlink: 108 bytes leftover after parsing attributes in process `syz.0.6593'.
[  326.599587][T21067] netlink: 'syz.0.6605': attribute type 6 has an invalid length.
[  327.151643][T21085] netem: incorrect gi model size
[  327.153533][T21085] netem: change failed
[  327.802143][T21109] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6625'.
[  327.895071][T21114] veth0: Caught tx_queue_len zero misconfig
[  328.016312][T21123] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6631'.
[  328.320602][T21144] netlink: set zone limit has 4 unknown bytes
[  328.573358][T21178] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6658'.
[  328.578012][T21178] netlink: 168 bytes leftover after parsing attributes in process `syz.0.6658'.
[  328.583775][T21178] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6658'.
[  328.697840][T21187] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6661'.
[  328.803579][T21197] netlink: 'syz.0.6665': attribute type 4 has an invalid length.
[  329.110248][T21237] netem: incorrect ge model size
[  329.115323][T21237] netem: change failed
[  329.216415][T21252] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  329.345225][T21263] IPVS: Unknown mcast interface: bridge_slave_0
[  329.736082][T21297] netlink: 'syz.1.6712': attribute type 2 has an invalid length.
[  329.888098][T21309] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6719'.
[  329.925843][T21309] 8021q: adding VLAN 0 to HW filter on device bond10
[  329.963223][T21309] bond10: (slave veth13): Enslaving as an active interface with an up link
[  330.001698][T21309] veth15: entered allmulticast mode
[  330.013167][T21309] bond10: (slave veth15): Enslaving as an active interface with an up link
[  330.031960][T21309] bond10 (unregistering): (slave veth13): Releasing backup interface
[  330.047995][T21309] bond10 (unregistering): (slave veth15): Releasing backup interface
[  330.054959][T21309] bond10 (unregistering): Released all slaves
[  330.252106][T21346] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6736'.
[  330.596163][T21373] netlink: 11 bytes leftover after parsing attributes in process `syz.2.6749'.
[  330.600131][T21373] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6749'.
[  330.905300][T21388] : renamed from bond0
[  331.363066][T21416] syzkaller1: entered promiscuous mode
[  331.365559][T21416] syzkaller1: entered allmulticast mode
[  331.396272][T21418] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  331.566628][T21436] veth0_to_batadv: entered allmulticast mode
[  331.572482][T21436] A link change request failed with some changes committed already. Interface veth0_to_batadv may have been left with an inconsistent configuration, please check.
[  331.700219][T21446] xt_hashlimit: size too large, truncated to 1048576
[  332.452224][T21451] netlink: 'syz.0.6783': attribute type 29 has an invalid length.
[  333.006742][T21493] netlink: 424 bytes leftover after parsing attributes in process `syz.2.6801'.
[  333.010513][T21493] netlink: 'syz.2.6801': attribute type 1 has an invalid length.
[  333.483620][T21504] bond0: (slave bond_slave_1): Device is not bonding slave
[  333.486607][T21504] bond0: option active_slave: invalid value (bond_slave_1)
[  333.829577][T21504] bond0 (unregistering): Released all slaves
[  334.133935][T21529] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6817'.
[  334.165076][T21531] nbd: must specify a size in bytes for the device
[  334.174537][T21531] block nbd1: NBD_DISCONNECT
[  334.177024][T21531] block nbd1: Send disconnect failed -32
[  334.181704][T21531] block nbd1: Send disconnect failed -32
[  334.312261][T21549] netlink: 244 bytes leftover after parsing attributes in process `syz.0.6824'.
[  334.316109][T21548] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  334.476330][T21567] netlink: 76 bytes leftover after parsing attributes in process `syz.2.6833'.
[  334.505487][T21571] xt_TCPMSS: Only works on TCP SYN packets
[  334.855145][T21599] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6848'.
[  334.859098][T21599] batman_adv: batadv0: Removing interface: batadv_slave_1
[  335.225840][T21638] sctp: [Deprecated]: syz.0.6864 (pid 21638) Use of int in maxseg socket option.
[  335.225840][T21638] Use struct sctp_assoc_value instead
[  335.868243][T21674] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6880'.
[  335.874013][T21674] netlink: 72 bytes leftover after parsing attributes in process `syz.0.6880'.
[  335.886352][T21674] vlan3: entered allmulticast mode
[  335.888652][T21674] veth0_to_bond: entered allmulticast mode
[  336.636118][T21731] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6905'.
[  336.649495][T21731] vlan5: entered promiscuous mode
[  336.883580][T21763] netlink: 'syz.2.6919': attribute type 19 has an invalid length.
[  337.875425][T21834] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6945'.
[  337.985345][T21840] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6948'.
[  337.988693][T21840] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6948'.
[  338.234712][T21856] bond0: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0)
[  338.239069][T21856] bond0 (unregistering): Released all slaves
[  338.344388][T21865] pim6reg1: entered promiscuous mode
[  338.346646][T21865] pim6reg1: entered allmulticast mode
[  338.510476][T21865] tipc: Trying to set illegal importance in message
[  338.549136][T21881] netlink: 'syz.0.6964': attribute type 8 has an invalid length.
[  338.567289][T21881] veth1_to_team: entered promiscuous mode
[  338.576821][T21881] gretap0: entered promiscuous mode
[  338.581866][T21881] veth1_to_team: left promiscuous mode
[  338.589133][T21881] gretap0: left promiscuous mode
[  338.747149][T21899] lo speed is unknown, defaulting to 1000
[  339.115620][T21918] netlink: 'syz.1.6979': attribute type 30 has an invalid length.
[  339.312610][T21936] netlink: 'syz.1.6991': attribute type 11 has an invalid length.
[  339.336643][T21940] __nla_validate_parse: 3 callbacks suppressed
[  339.336657][T21940] netlink: 48 bytes leftover after parsing attributes in process `syz.2.6990'.
[  339.398711][T21945] netlink: 'syz.2.6993': attribute type 309 has an invalid length.
[  339.454648][T21949] sctp: [Deprecated]: syz.0.6995 (pid 21949) Use of struct sctp_assoc_value in delayed_ack socket option.
[  339.454648][T21949] Use struct sctp_sack_info instead
[  339.752445][T21989] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7013'.
[  339.755404][T21989] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7013'.
[  340.089969][T22008] nicvf0: tun_chr_ioctl cmd 2148553947
[  340.195690][T22010] veth15: entered promiscuous mode
[  340.227628][T22012] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  340.383137][T22020] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7022'.
[  342.702969][T21978] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  343.282204][T22088] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048)
[  343.358490][T22094] 8021q: adding VLAN 0 to HW filter on device 
[  343.398886][T22094] veth0_to_batadv: left allmulticast mode
[  343.408289][T22094] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  343.413532][T22094] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  343.423150][T22094] veth1_vlan: left promiscuous mode
[  343.426445][T22094] veth0_vlan: left promiscuous mode
[  343.429385][T22094] veth0_vlan: entered promiscuous mode
[  343.435503][T22094] veth1_vlan: entered promiscuous mode
[  343.444217][T22094] veth1_macvtap: left promiscuous mode
[  343.448630][T22094] veth0_macvtap: left promiscuous mode
[  343.452787][T22094] veth0_macvtap: entered promiscuous mode
[  343.456443][T22094] veth1_macvtap: entered promiscuous mode
[  343.538801][T22094] 8021q: adding VLAN 0 to HW filter on device bond1
[  343.547711][T22094] 8021q: adding VLAN 0 to HW filter on device bond2
[  343.555878][T22094] 8021q: adding VLAN 0 to HW filter on device bond3
[  343.560090][T22094] 8021q: adding VLAN 0 to HW filter on device bond4
[  343.569338][T22094] 8021q: adding VLAN 0 to HW filter on device bond5
[  343.583402][T22094] 8021q: adding VLAN 0 to HW filter on device bond6
[  343.593638][T22094] 8021q: adding VLAN 0 to HW filter on device batadv0
[  343.599359][T22094] 8021q: adding VLAN 0 to HW filter on device bond7
[  343.613180][T22094] 8021q: adding VLAN 0 to HW filter on device eth0
[  343.618087][T22094] 8021q: adding VLAN 0 to HW filter on device eth1
[  343.623273][T22094] 8021q: adding VLAN 0 to HW filter on device eth2
[  343.628105][T22094] 8021q: adding VLAN 0 to HW filter on device eth3
[  343.636298][T22094] 8021q: adding VLAN 0 to HW filter on device bond8
[  343.640047][T22094] 8021q: adding VLAN 0 to HW filter on device bond9
[  343.644419][   T33] lo speed is unknown, defaulting to 1000
[  343.647419][   T33] syz2: Port: 1 Link ACTIVE
[  343.705760][   T13] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  343.708797][   T13] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  343.714156][   T13] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  343.716904][   T13] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  343.722878][    T9] syz0: Port: 1 Link ACTIVE
[  343.733892][   T13] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  343.740156][   T13] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  343.743407][   T13] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  343.746309][   T13] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  343.765966][ T5662] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  343.769650][ T5662] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  343.800479][ T5686] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  343.814344][ T5686] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured!
[  343.999472][T22128] hm3): entered promiscuous mode
[  344.011325][ T5686] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  344.213020][T22147] netlink: 'syz.2.7073': attribute type 1 has an invalid length.
[  344.254948][T22147] bond0: entered promiscuous mode
[  344.258904][T22147] 8021q: adding VLAN 0 to HW filter on device bond0
[  344.269003][T22147] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7073'.
[  344.273785][T22147] bond0: entered allmulticast mode
[  344.288029][T22147] bond0: (slave bridge5): making interface the new active one
[  344.291184][T22147] bridge5: entered promiscuous mode
[  344.293045][T22147] bridge5: entered allmulticast mode
[  344.295634][T22147] bond0: (slave bridge5): Enslaving as an active interface with an up link
[  344.308145][T22153] netlink: 'syz.1.7074': attribute type 1 has an invalid length.
[  344.528118][T22158] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7076'.
[  344.591931][T22158] : entered promiscuous mode
[  344.597181][T22162] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7076'.
[  344.611620][T22162] openvswitch: : Dropping previously announced user features
[  344.781920][T22182] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7083'.
[  345.551332][   T12] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured!
[  345.557583][   T12] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured!
[  345.953008][   T37] wlan1: Trigger new scan to find an IBSS to join
[  346.051026][T11394] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured!
[  346.324925][T22247] netlink: 'syz.1.7109': attribute type 61 has an invalid length.
[  346.584411][T22278] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7123'.
[  346.587296][T22278] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7123'.
[  346.685430][T22289] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7128'.
[  346.713854][T22291] pim6reg: entered allmulticast mode
[  346.719534][T22291] pim6reg: left allmulticast mode
[  346.843463][T22301] netlink: 'syz.0.7134': attribute type 4 has an invalid length.
[  346.847810][T22301] netlink: 'syz.0.7134': attribute type 4 has an invalid length.
[  347.791213][    C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  348.055596][T22356] IPv6: NLM_F_CREATE should be specified when creating new route
[  348.058888][T22356] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  348.061840][T22356] IPv6: NLM_F_CREATE should be set when creating new route
[  348.064874][T22356] IPv6: NLM_F_CREATE should be set when creating new route
[  348.067776][T22356] IPv6: NLM_F_CREATE should be set when creating new route
[  348.073604][T22356] netlink: 'syz.0.7160': attribute type 10 has an invalid length.
[  348.078376][T22356] netlink: 'syz.0.7160': attribute type 10 has an invalid length.
[  348.123521][T22362] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  348.660271][T22391] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7173'.
[  348.667698][T22391] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7173'.
[  348.676928][T22391] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7173'.
[  348.682174][T22391] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7173'.
[  348.691836][T22391] erspan0: left promiscuous mode
[  348.711192][T22391] bond0: left promiscuous mode
[  348.713120][T22391] bond_slave_0: left promiscuous mode
[  348.719226][T22391] bond_slave_1: left promiscuous mode
[  348.726834][T22391] 8021q: adding VLAN 0 to HW filter on device bond0
[  348.733941][T22391] 8021q: adding VLAN 0 to HW filter on device team0
[  348.745080][T22391] 8021q: adding VLAN 0 to HW filter on device batadv0
[  348.786189][T22391] batman_adv: batadv0: Interface activated: batadv_slave_0
[  348.794707][T22391] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  348.798992][T22391] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  348.808548][T22391] veth1_vlan: left promiscuous mode
[  348.812407][T22391] veth0_vlan: left promiscuous mode
[  348.815005][T22391] veth0_vlan: entered promiscuous mode
[  348.819202][T22391] veth1_vlan: entered promiscuous mode
[  348.823325][T22391] tipc: Resetting bearer <eth:ipvlan0>
[  348.825234][T22391] tipc: Resetting bearer <eth:ipvlan0>
[  348.827593][T22391] veth1_macvtap: left promiscuous mode
[  348.829823][T22391] veth0_macvtap: left promiscuous mode
[  348.832836][T22391] veth0_macvtap: entered promiscuous mode
[  348.835197][T22391] veth1_macvtap: entered promiscuous mode
[  348.839234][T22391] bridge0: port 1(vlan3) entered blocking state
[  348.841605][T22391] bridge0: port 1(vlan3) entered forwarding state
[  348.849617][T22391] 8021q: adding VLAN 0 to HW filter on device bond1
[  348.855778][T22391] erspan0: entered promiscuous mode
[  348.859746][T22391] mac80211_hwsim hwsim6 syzkaller0: left promiscuous mode
[  348.863141][T22391] mac80211_hwsim hwsim6 syzkaller0: left allmulticast mode
[  348.865957][T22391] tipc: Resetting bearer <eth:syzkaller0>
[  348.868359][T22391] tipc: Resetting bearer <eth:syzkaller0>
[  348.871285][T22391] geneve4: left promiscuous mode
[  348.874101][T22391] batadv1: left promiscuous mode
[  348.876121][T22391] batadv1: left allmulticast mode
[  348.878858][T22391] 8021q: adding VLAN 0 to HW filter on device batadv1
[  348.885018][T22391] 8021q: adding VLAN 0 to HW filter on device bond2
[  348.888308][T22391] bond2: entered allmulticast mode
[  348.890540][T22391] ip6gretap1: entered allmulticast mode
[  348.893688][T22391] bond2: entered promiscuous mode
[  348.895802][T22391] ip6gretap1: entered promiscuous mode
[  348.898174][T22391] macvlan2: left promiscuous mode
[  348.899802][T22391] bond2: left promiscuous mode
[  348.901766][T22391] ip6gretap1: left promiscuous mode
[  348.903664][T22391] macvlan2: left allmulticast mode
[  348.905266][T22391] bond2: left allmulticast mode
[  348.906835][T22391] ip6gretap1: left allmulticast mode
[  348.909477][T22391] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  348.912560][  T791] wlan1: Trigger new scan to find an IBSS to join
[  348.916049][T22391] ip6gretap1: entered promiscuous mode
[  348.920419][T22391] geneve5: left promiscuous mode
[  348.925096][T22391] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode
[  348.934293][T22391] team1: left promiscuous mode
[  348.935906][T22391] team1: left allmulticast mode
[  348.937774][T22391] 8021q: adding VLAN 0 to HW filter on device team1
[  348.940576][T22391] team2: left promiscuous mode
[  348.942482][T22391] team2: left allmulticast mode
[  348.944223][T22391] 8021q: adding VLAN 0 to HW filter on device team2
[  348.956097][T22391] bond3: left promiscuous mode
[  348.957848][T22391] wireguard0: left promiscuous mode
[  348.960132][T22391] 8021q: adding VLAN 0 to HW filter on device bond3
[  348.964570][T22391] geneve6: left promiscuous mode
[  348.967669][T22391] 8021q: adding VLAN 0 to HW filter on device bond4
[  348.971504][T22391] 8021q: adding VLAN 0 to HW filter on device bond5
[  348.975743][T22391] ip6erspan1: left allmulticast mode
[  348.984046][T22391] 8021q: adding VLAN 0 to HW filter on device bond6
[  348.987999][T22391] 8021q: adding VLAN 0 to HW filter on device batadv2
[  348.992336][T22391] 8021q: adding VLAN 0 to HW filter on device macvlan5
[  348.995571][T22391] team3: left promiscuous mode
[  348.997367][T22391] team3: left allmulticast mode
[  348.999234][T22391] 8021q: adding VLAN 0 to HW filter on device team3
[  349.005890][T22391] 8021q: adding VLAN 0 to HW filter on device eth0
[  349.009012][T22391] 8021q: adding VLAN 0 to HW filter on device eth1
[  349.012395][T22391] 8021q: adding VLAN 0 to HW filter on device eth2
[  349.015885][T22391] 8021q: adding VLAN 0 to HW filter on device eth3
[  349.033427][T22391] A link change request failed with some changes committed already. Interface vxlan1 may have been left with an inconsistent configuration, please check.
[  349.046065][   T26] bridge0: port 2(bridge_slave_1) entered blocking state
[  349.051927][   T26] bridge0: port 2(bridge_slave_1) entered forwarding state
[  349.087962][   T26] tipc: Resetting bearer <eth:syzkaller0>
[  349.111036][    T9] team_slave_0: entered promiscuous mode
[  349.113381][    T9] team_slave_1: entered promiscuous mode
[  349.127137][ T5662] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  349.136449][ T5662] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  349.140467][ T5662] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 256 - 0
[  349.144802][ T5662] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  349.148216][ T5662] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  349.158433][ T5662] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 256 - 0
[  349.180050][T22403] syzkaller0: entered promiscuous mode
[  349.189092][T22403] syzkaller0: entered allmulticast mode
[  349.197361][ T5662] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  349.205332][ T5662] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  349.209003][ T5662] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 256 - 0
[  349.253965][ T5662] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  349.257549][ T5662] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  349.261491][ T5662] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 256 - 0
[  349.349849][T11394] ip6_tunnel: ip6erspan1 xmit: Local address not yet configured!
[  349.514080][T22434] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap2
[  349.525069][T22434] batman_adv: batadv0: Adding interface: ip6gretap2
[  349.527819][T22434] batman_adv: batadv0: The MTU of interface ip6gretap2 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  349.539492][T22434] batman_adv: batadv0: Interface activated: ip6gretap2
[  349.654369][T22445] macvlan6: entered promiscuous mode
[  349.656297][T22445] macvlan6: entered allmulticast mode
[  349.658534][T22445] gretap0: entered allmulticast mode
[  349.681312][   T12] ip6_tunnel: ip6erspan1 xmit: Local address not yet configured!
[  349.870982][    C0] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured!
[  349.872795][   T12] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  349.889361][   T12] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  349.901377][   T33] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  350.028142][T22479] netlink: 'syz.1.7211': attribute type 3 has an invalid length.
[  350.273126][    T9] ip6_tunnel: ip6erspan1 xmit: Local address not yet configured!
[  350.595519][   T33] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  350.672987][   T33] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  350.751862][T17398] ip6_tunnel: ip6erspan1 xmit: Local address not yet configured!
[  351.104875][T22522] __nla_validate_parse: 120 callbacks suppressed
[  351.104889][T22522] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.7228'.
[  351.384909][T22542] xfrm1: entered allmulticast mode
[  351.871335][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  351.874571][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  351.877373][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  351.880468][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  351.883872][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  351.887125][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  351.890327][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  351.893544][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  351.896821][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  351.950869][  T791] wlan1: Trigger new scan to find an IBSS to join
[  352.138204][T22563] lo speed is unknown, defaulting to 1000
[  352.863578][   T41] wlan1: Creating new IBSS network, BSSID 00:8d:ff:ff:00:00
[  353.290304][T22629] tipc: Enabled bearer <eth:vcan0>, priority 10
[  353.766851][T22655] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  353.819700][T22659] netlink: 76 bytes leftover after parsing attributes in process `syz.2.7290'.
[  353.946874][T22660] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  353.957263][T22660] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  354.041037][T22672] netlink: 132 bytes leftover after parsing attributes in process `syz.1.7295'.
[  354.058168][T22674] IPVS: set_ctl: invalid protocol: 46 127.0.0.1:20001
[  354.099202][T22677] tipc: Resetting bearer <eth:syzkaller0>
[  354.510982][    C1] ip6_tnl_xmit_ctl: 3 callbacks suppressed
[  354.511003][    C1] ip6_tunnel: ip6erspan1 xmit: Local address not yet configured!
[  354.728211][T22728] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  354.861137][T22740] netem: change failed
[  354.869823][T22740] mac80211_hwsim hwsim6 syzkaller0: entered promiscuous mode
[  354.877080][T22740] mac80211_hwsim hwsim6 syzkaller0: entered allmulticast mode
[  354.881642][T22740] tipc: Resetting bearer <eth:syzkaller0>
[  355.144353][T22769] lo speed is unknown, defaulting to 1000
[  355.169863][T22772] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7343'.
[  355.383372][T22792] netem: change failed
[  355.429033][T22797] netlink: 'syz.1.7353': attribute type 21 has an invalid length.
[  355.434256][T22797] netlink: 'syz.1.7353': attribute type 7 has an invalid length.
[  355.466782][T22802] netem: change failed
[  355.630897][    C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  355.951034][    C1] net_ratelimit: 10 callbacks suppressed
[  355.951049][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  355.956731][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  355.959548][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  355.962480][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  355.965197][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  355.967927][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  355.970540][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  355.973341][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  356.144832][T22841] lo speed is unknown, defaulting to 1000
[  356.149445][T22843] netlink: 84 bytes leftover after parsing attributes in process `syz.0.7372'.
[  356.174085][T22843] netlink: 84 bytes leftover after parsing attributes in process `syz.0.7372'.
[  356.177852][T22843] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check.
[  356.773444][T22873] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7384'.
[  356.873022][T22882] netlink: 'syz.0.7389': attribute type 1 has an invalid length.
[  356.885328][T22886] netlink: 'syz.2.7391': attribute type 1 has an invalid length.
[  356.888123][T22886] netlink: 1 bytes leftover after parsing attributes in process `syz.2.7391'.
[  356.915272][T22882] bond6: entered promiscuous mode
[  356.918194][T22882] 8021q: adding VLAN 0 to HW filter on device bond6
[  356.958402][T22890] 8021q: adding VLAN 0 to HW filter on device bond8
[  356.970243][T22890] bond6: (slave bond8): making interface the new active one
[  356.973480][T22890] bond8: entered promiscuous mode
[  356.976364][T22890] bond6: (slave bond8): Enslaving as an active interface with an up link
[  357.063197][T22902] syzkaller1: entered promiscuous mode
[  357.065207][T22902] syzkaller1: entered allmulticast mode
[  357.721388][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  358.192923][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  358.201130][    C0] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured!
[  358.254649][T22972] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7428'.
[  358.257723][T22972] netlink: 7 bytes leftover after parsing attributes in process `syz.0.7428'.
[  358.864908][T23010] netlink: 236 bytes leftover after parsing attributes in process `syz.2.7446'.
[  358.867885][T23010] netlink: 236 bytes leftover after parsing attributes in process `syz.2.7446'.
[  358.944671][T23017] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7449'.
[  358.948393][T23017] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7449'.
[  358.960218][T23017] team_slave_0: left promiscuous mode
[  358.962995][T23017] team_slave_1: left promiscuous mode
[  358.996389][T23017] team0 (unregistering): Port device team_slave_0 removed
[  359.011361][T23017] team0 (unregistering): Port device team_slave_1 removed
[  359.022441][T23017] team0 (unregistering): Port device macvlan2 removed
[  359.029493][T23017] team0 (unregistering): Port device bridge9 removed
[  359.038877][T11394] ip6gretap1: left promiscuous mode
[  360.108821][T23096] x_tables: ip6_tables: eui64 match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT/FORWARD
[  360.284495][T23109] syzkaller0: entered promiscuous mode
[  360.286953][T23109] syzkaller0: entered allmulticast mode
[  360.302355][T23111] netlink: 'syz.1.7482': attribute type 1 has an invalid length.
[  360.873110][T23139] lo speed is unknown, defaulting to 1000
[  361.391088][    C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  361.515135][T23166] mac80211_hwsim hwsim6 syzkaller0: left promiscuous mode
[  361.518040][T23166] mac80211_hwsim hwsim6 syzkaller0: left allmulticast mode
[  361.521919][T23166] tipc: Resetting bearer <eth:syzkaller0>
[  361.603980][T23174] __nla_validate_parse: 4 callbacks suppressed
[  361.604000][T23174] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7511'.
[  361.699720][T23181] xt_cluster: you have exceeded the maximum number of cluster nodes (524288 > 32)
[  361.705054][T23181] netlink: 40 bytes leftover after parsing attributes in process `syz.2.7514'.
[  361.719852][T23181] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7514'.
[  361.723028][T23181] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7514'.
[  361.942555][T23198] netlink: 'syz.0.7521': attribute type 1 has an invalid length.
[  362.022824][T23202] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7523'.
[  362.031136][    C1] ip6_tunnel: ip6erspan1 xmit: Local address not yet configured!
[  362.044735][T23202] bond9: option ad_actor_sys_prio: invalid value (0)
[  362.046915][T23202] bond9: option ad_actor_sys_prio: allowed values 1 - 65535
[  362.057115][T23202] bond9 (unregistering): Released all slaves
[  362.170488][T23213] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  362.591046][    C1] net_ratelimit: 57 callbacks suppressed
[  362.591061][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  362.595781][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  362.599343][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  362.602082][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  362.604619][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  362.607512][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  362.610318][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  362.621721][T23220] netlink: 240 bytes leftover after parsing attributes in process `syz.1.7528'.
[  363.044441][T23238] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7536'.
[  363.049045][T23238] netlink: 60 bytes leftover after parsing attributes in process `syz.0.7536'.
[  363.052891][T23238] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7536'.
[  363.744116][T23276] mac80211_hwsim hwsim6 syzkaller0: entered promiscuous mode
[  363.750872][T23276] mac80211_hwsim hwsim6 syzkaller0: entered allmulticast mode
[  363.761441][T23276] tipc: Resetting bearer <eth:syzkaller0>
[  363.943157][T23288] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7560'.
[  363.990632][T23291] sctp: [Deprecated]: syz.1.7562 (pid 23291) Use of int in max_burst socket option deprecated.
[  363.990632][T23291] Use struct sctp_assoc_value instead
[  364.065380][T23295] lo speed is unknown, defaulting to 1000
[  364.166199][T23302] netlink: 'syz.2.7565': attribute type 58 has an invalid length.
[  364.495392][T23321] netlink: 'syz.1.7573': attribute type 1 has an invalid length.
[  364.503428][T23321] netlink: 'syz.1.7573': attribute type 1 has an invalid length.
[  365.199369][T23379] tipc: Resetting bearer <eth:syzkaller0>
[  365.237203][T23379] tipc: Resetting bearer <eth:syzkaller0>
[  365.812904][T23426] bond0: (slave bridge1): Releasing backup interface
[  365.832110][T23426] bridge1: left allmulticast mode
[  365.884937][T23426] bond1: (slave bond2): Releasing backup interface
[  365.892771][T23426] bond2: left promiscuous mode
[  365.915735][T23426] bond4: (slave veth7): Releasing active interface
[  365.931685][    T9] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  365.937672][T23426] bond5: (slave bridge5): Releasing backup interface
[  365.947204][T23426] bridge5: left promiscuous mode
[  365.954153][T23426] bridge5: left allmulticast mode
[  365.986040][T23426] bond6: (slave bond8): Releasing backup interface
[  365.993610][T23426] bond8: left promiscuous mode
[  366.141828][T23451] hsr0: entered promiscuous mode
[  366.166722][T23453] netlink: 'syz.0.7622': attribute type 1 has an invalid length.
[  366.171013][T23453] NCSI netlink: No device for ifindex 0
[  366.483135][    T9] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  366.501996][T23471] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  366.511513][T23471] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  366.762570][T23503] netlink: 'syz.2.7642': attribute type 6 has an invalid length.
[  366.769336][T23501] tipc: Resetting bearer <eth:syzkaller0>
[  366.814604][    T9] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  366.906504][T23507] netlink: 'syz.2.7644': attribute type 3 has an invalid length.
[  367.089559][T23515] __nla_validate_parse: 6 callbacks suppressed
[  367.089579][T23515] netlink: 774 bytes leftover after parsing attributes in process `syz.2.7648'.
[  367.423997][    T9] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  367.902587][T23569] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7671'.
[  368.440218][T23600] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7684'.
[  368.607618][T23609] syzkaller0: entered promiscuous mode
[  368.610051][T23609] syzkaller0: entered allmulticast mode
[  368.736677][T23600] bridge0: port 1(vlan3) entered disabled state
[  368.738891][T23600] bridge0: port 2(bridge_slave_1) entered disabled state
[  368.746508][T23600] tipc: Resetting bearer <eth:vcan0>
[  368.964884][T23600] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  369.133035][T23600] tipc: Resetting bearer <eth:ipvlan0>
[  369.296001][T23600] mac80211_hwsim hwsim6 syzkaller0: left promiscuous mode
[  369.301275][T23600] mac80211_hwsim hwsim6 syzkaller0: left allmulticast mode
[  369.719580][T23600] bond9: left promiscuous mode
[  369.722721][T23600] vti0: left promiscuous mode
[  369.769069][T23600] bridge9: left allmulticast mode
[  369.774855][T23600] veth15: left allmulticast mode
[  369.783063][T23600] batman_adv: batadv0: Interface deactivated: ip6gretap2
[  369.794669][T23600] macvlan6: left promiscuous mode
[  369.799751][T23600] macvlan6: left allmulticast mode
[  369.826653][   T12] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  369.829895][   T12] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  369.834164][   T12] netdevsim netdevsim1 eth0: unset [1, 1] type 2 family 0 port 256 - 0
[  369.837797][   T12] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  369.841660][   T12] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  369.845009][   T12] netdevsim netdevsim1 eth1: unset [1, 1] type 2 family 0 port 256 - 0
[  369.882877][   T12] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  369.885659][   T12] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  369.888704][   T12] netdevsim netdevsim1 eth2: unset [1, 1] type 2 family 0 port 256 - 0
[  369.892174][   T12] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  369.895197][   T12] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  369.897959][   T12] netdevsim netdevsim1 eth3: unset [1, 1] type 2 family 0 port 256 - 0
[  370.376828][T23661] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7704'.
[  370.462076][T23665] tipc: Resetting bearer <eth:syzkaller0>
[  370.498786][T23667] mac80211_hwsim hwsim6 syzkaller0: entered promiscuous mode
[  370.506005][T23667] mac80211_hwsim hwsim6 syzkaller0: entered allmulticast mode
[  370.591059][T23607] Bluetooth: hci2: command 0x0406 tx timeout
[  370.998994][T23715] netlink: 36 bytes leftover after parsing attributes in process `syz.0.7725'.
[  371.030503][T23718] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7727'.
[  371.176240][T23730] batadv_slave_0: entered promiscuous mode
[  371.181489][T23729] batadv_slave_0: left promiscuous mode
[  371.631201][    C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  372.565156][T23791] sch_tbf: burst 185 is lower than device syzkaller0 mtu (313) !
[  372.586331][T23794] netlink: 44 bytes leftover after parsing attributes in process `syz.2.7764'.
[  372.783152][T23817] netlink: 132 bytes leftover after parsing attributes in process `syz.2.7775'.
[  372.905682][T23830] openvswitch: netlink: VXLAN extension message has 4 unknown bytes.
[  372.983521][T23838] netlink: 268 bytes leftover after parsing attributes in process `syz.0.7785'.
[  372.986452][T23838] netlink: 136 bytes leftover after parsing attributes in process `syz.0.7785'.
[  372.989252][T23838] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7785'.
[  373.218073][T23860] erspan0: left promiscuous mode
[  373.230946][T23860] 8021q: adding VLAN 0 to HW filter on device bond0
[  373.238187][T23860] 8021q: adding VLAN 0 to HW filter on device batadv0
[  373.276176][T23860] batman_adv: batadv0: Interface activated: batadv_slave_0
[  373.283936][T23860] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  373.287368][T23860] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  373.292752][T23860] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  373.305100][ T1113] bridge0: port 2(bridge_slave_1) entered blocking state
[  373.307542][ T1113] bridge0: port 2(bridge_slave_1) entered forwarding state
[  373.360308][T23870] x_tables: duplicate underflow at hook 4
[  373.380031][T23867] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  373.411526][   T33] lo speed is unknown, defaulting to 1000
[  373.415040][   T33] syz2: Port: 1 Link DOWN
[  373.456667][T23877] bridge10: entered promiscuous mode
[  373.562330][T23893] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7811'.
[  373.566687][T23894] syzkaller1: entered promiscuous mode
[  373.572627][T23894] syzkaller1: entered allmulticast mode
[  373.713015][T23910] veth1_to_team: Caught tx_queue_len zero misconfig
[  374.027450][T23933] xt_NFQUEUE: number of queues (3633) out of range (got 69161)
[  374.190966][    C0] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured!
[  374.243564][T23955] IPVS: set_ctl: invalid protocol: 136 172.30.0.3:20005
[  374.729637][T23985] netlink: 240 bytes leftover after parsing attributes in process `syz.2.7851'.
[  374.734128][T23985] netlink: 56 bytes leftover after parsing attributes in process `syz.2.7851'.
[  374.777043][T23987] pim6reg1: entered promiscuous mode
[  374.781378][T23987] pim6reg1: entered allmulticast mode
[  375.585529][T24015] netlink: 128 bytes leftover after parsing attributes in process `syz.0.7864'.
[  375.702948][T24021] vxcan2: entered allmulticast mode
[  376.338118][T24057] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7884'.
[  376.342929][T24057] netlink: 'syz.1.7884': attribute type 1 has an invalid length.
[  376.350567][T24057] netlink: 'syz.1.7884': attribute type 1 has an invalid length.
[  376.394640][T24066] netlink: 'syz.1.7888': attribute type 6 has an invalid length.
[  376.419239][T24069] pimreg9: entered allmulticast mode
[  378.153536][T24177] __nla_validate_parse: 4 callbacks suppressed
[  378.153556][T24177] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7938'.
[  378.188855][T24177] netlink: 'syz.0.7938': attribute type 10 has an invalid length.
[  378.482805][T24200] netlink: 'syz.2.7949': attribute type 1 has an invalid length.
[  378.510667][T24200] bond10: (slave bridge7): making interface the new active one
[  378.516228][T24200] bond10: (slave bridge7): Enslaving as an active interface with an up link
[  378.544213][T24200] netlink: 44 bytes leftover after parsing attributes in process `syz.2.7949'.
[  378.555802][T24200] bond10: entered promiscuous mode
[  378.560189][T24200] bridge7: entered promiscuous mode
[  378.564022][T24200] bond10: entered allmulticast mode
[  378.568333][T24200] bridge7: entered allmulticast mode
[  378.571763][T24200] 8021q: adding VLAN 0 to HW filter on device bond10
[  378.916680][T24242] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  378.956815][T24247] netlink: 'syz.0.7970': attribute type 3 has an invalid length.
[  379.394157][T24280] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7986'.
[  379.614646][T24292] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7991'.
[  379.948147][T24313] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  379.955806][T24313] syzkaller0: entered promiscuous mode
[  379.960200][T24313] syzkaller0: entered allmulticast mode
[  380.016553][T24313] tipc: Resetting bearer <eth:syzkaller0>
[  380.026963][T24312] tipc: Resetting bearer <eth:syzkaller0>
[  380.060261][T24312] tipc: Disabling bearer <eth:syzkaller0>
[  380.067429][T24317] veth0_to_hsr: Caught tx_queue_len zero misconfig
[  380.177412][T24323] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8006'.
[  380.183191][T24321] smbdirect: ib_dev[syz0] removed
[  380.191899][T24323] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8006'.
[  380.236564][T24321] bond11 (unregistering): Released all slaves
[  380.247919][T24327] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8007'.
[  380.335969][T24333] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  380.339694][T24333] syzkaller0: entered promiscuous mode
[  380.342990][T24333] syzkaller0: entered allmulticast mode
[  380.363724][T24333] tipc: Resetting bearer <eth:syzkaller0>
[  380.367076][T24330] tipc: Resetting bearer <eth:syzkaller0>
[  380.386016][T24330] tipc: Disabling bearer <eth:syzkaller0>
[  380.491337][T24340] veth7: entered promiscuous mode
[  381.454631][T24417] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8046'.
[  381.458103][T24417] netlink: 'syz.0.8046': attribute type 30 has an invalid length.
[  381.531821][T24417] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8046'.
[  381.543748][T24417] netlink: 'syz.0.8046': attribute type 30 has an invalid length.
[  381.564776][T24425] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8050'.
[  381.730528][T24436] netlink: 'syz.1.8055': attribute type 1 has an invalid length.
[  381.734557][T24436] netlink: 'syz.1.8055': attribute type 2 has an invalid length.
[  381.740346][T24436] netlink: 'syz.1.8055': attribute type 1 has an invalid length.
[  381.747718][T24436] netlink: 'syz.1.8055': attribute type 2 has an invalid length.
[  381.900641][T24449] netlink: 'syz.0.8061': attribute type 33 has an invalid length.
[  382.226096][T24471] netlink: 'syz.0.8070': attribute type 1 has an invalid length.
[  382.255061][T24473] openvswitch: netlink: Message has 4 unknown bytes.
[  382.255664][T24471] vti0: entered promiscuous mode
[  383.573314][T24520] __nla_validate_parse: 8 callbacks suppressed
[  383.573327][T24520] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8092'.
[  383.606070][T24525] syzkaller0: entered promiscuous mode
[  383.608060][T24525] syzkaller0: entered allmulticast mode
[  383.662504][T24528] xt_hashlimit: size too large, truncated to 1048576
[  383.664807][T24528] xt_hashlimit: max too large, truncated to 1048576
[  383.783259][T24542] openvswitch: netlink: Unexpected mask (mask=20440, allowed=10048)
[  384.242384][T24566] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8111'.
[  384.432305][T24583] vlan5: entered promiscuous mode
[  384.434054][T24583] : entered promiscuous mode
[  385.107804][T24625] tipc: Trying to set illegal importance in message
[  385.389758][T24650] netlink: 'syz.2.8151': attribute type 32 has an invalid length.
[  385.522443][T24661] mac80211_hwsim hwsim18 wlan0: entered promiscuous mode
[  385.525373][T24661] mac80211_hwsim hwsim18 wlan0: entered allmulticast mode
[  385.528547][T24661] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  385.584985][T24666] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1500) !
[  385.595650][T24666] syzkaller0: entered promiscuous mode
[  385.601020][T24666] syzkaller0: entered allmulticast mode
[  385.651095][T24673] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8162'.
[  385.762276][T24676] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8163'.
[  385.826497][T24682] syzkaller0: entered promiscuous mode
[  385.830861][T24682] syzkaller0: entered allmulticast mode
[  385.841785][T24682] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  385.852662][T24680] tipc: Resetting bearer <eth:syzkaller0>
[  385.900659][T24680] tipc: Disabling bearer <eth:syzkaller0>
[  386.039540][T24706] geneve7: entered allmulticast mode
[  386.045227][   T12] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 20001 - 0
[  386.054478][   T12] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 20001 - 0
[  386.066152][   T12] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 20001 - 0
[  386.073900][   T12] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 20001 - 0
[  386.149354][T24720] batadv_slave_0: entered allmulticast mode
[  386.156823][T24720] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check.
[  387.373416][T24767] openvswitch: netlink: Actions may not be safe on all matching packets
[  387.529056][T24789] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8212'.
[  387.592492][T24795] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  387.599076][T24795] x_tables: duplicate underflow at hook 1
[  387.635758][T24797] openvswitch: netlink: Tunnel attr 3 has unexpected len 0 expected 1
[  387.684149][T24797] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  387.687249][T24797] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  387.700940][T24802] netlink: 'syz.1.8219': attribute type 3 has an invalid length.
[  387.704874][T24801] netem: change failed
[  387.781012][T24797] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  387.785208][T24797] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  387.872817][T24797] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  387.877710][T24797] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  387.961328][T24797] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  387.965225][T24797] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  388.065459][   T12] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  388.068367][   T12] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  388.082959][   T12] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  388.088494][   T12] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  388.102796][   T12] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  388.105707][   T12] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  388.120053][   T12] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  388.124045][   T12] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  388.315473][T24847] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8235'.
[  388.325093][T24847] netlink: 32 bytes leftover after parsing attributes in process `syz.1.8235'.
[  388.329495][T24847] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8235'.
[  388.337190][T24847] netlink: 32 bytes leftover after parsing attributes in process `syz.1.8235'.
[  388.346924][T24849] syzkaller1: entered promiscuous mode
[  388.349291][T24849] syzkaller1: entered allmulticast mode
[  388.357367][T24849] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8236'.
[  391.494889][T24864] lo speed is unknown, defaulting to 1000
[  391.675539][T24888] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  391.803991][T24895] netlink: 'syz.1.8247': attribute type 1 has an invalid length.
[  391.806760][T24895] __nla_validate_parse: 1 callbacks suppressed
[  391.806768][T24895] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8247'.
[  391.814168][T24895] netlink: 76 bytes leftover after parsing attributes in process `syz.1.8247'.
[  392.543773][T24897] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8248'.
[  392.549054][T24897] netlink: 'syz.0.8248': attribute type 7 has an invalid length.
[  392.621377][T24897] block nbd1: server does not support multiple connections per device.
[  392.631641][T24897] block nbd1: shutting down sockets
[  392.655062][T24902] erspan0: entered promiscuous mode
[  392.674138][T24904] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8251'.
[  392.678810][T24904] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-:/": -EINTR
[  392.780249][T24917] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8255'.
[  393.086770][T24944] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8261'.
[  395.804455][T24919] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  395.911541][T24965] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8266'.
[  395.925831][T24969] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8267'.
[  395.936809][T24969] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8267'.
[  396.114130][T24988] bond9: entered promiscuous mode
[  396.116112][T24988] 8021q: adding VLAN 0 to HW filter on device bond9
[  396.126613][T24988] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  396.548137][T25021] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8286'.
[  396.557387][T25021] bond0: entered promiscuous mode
[  396.559571][T25021] bond_slave_0: entered promiscuous mode
[  396.563456][T25021] bond_slave_1: entered promiscuous mode
[  396.567137][T25021] bond0: left promiscuous mode
[  396.569200][T25021] bond_slave_0: left promiscuous mode
[  396.572616][T25021] bond_slave_1: left promiscuous mode
[  396.703165][T25032] batman_adv: batadv0: Adding interface: dummy0
[  396.705305][T25032] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  396.713522][T25032] batman_adv: batadv0: Interface activated: dummy0
[  396.725196][T25032] batadv0: mtu less than device minimum
[  396.727598][T25032] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  396.732292][T25032] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  396.735945][T25032] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  396.739628][T25032] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  396.743351][T25032] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  396.747043][T25032] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  396.751985][T25032] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  396.755766][T25032] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  396.759396][T25032] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  396.843661][T25038] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8291'.
[  399.672514][T25028] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  399.787010][T25051] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8295'.
[  399.853545][T25056] netlink: 'syz.2.8296': attribute type 1 has an invalid length.
[  399.875816][T25056] 8021q: adding VLAN 0 to HW filter on device bond11
[  399.950479][T25067] syzkaller1: entered promiscuous mode
[  399.961182][T25067] syzkaller1: entered allmulticast mode
[  399.966066][T25066] PF_CAN: dropped non conform CAN skbuff: dev type 280, len 324
[  400.069723][T25082] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8303'.
[  400.187419][T25100] netlink: 10 bytes leftover after parsing attributes in process `syz.1.8309'.
[  400.239645][T25105] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8311'.
[  400.243857][T25105] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8311'.
[  400.275856][T25109] syzkaller1: entered promiscuous mode
[  400.278126][T25109] syzkaller1: entered allmulticast mode
[  400.312897][T25111] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8314'.
[  400.582705][T25134] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  400.585907][T25134] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  400.789838][T25139] lo speed is unknown, defaulting to 1000
[  400.900604][T25147] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8324'.
[  400.930243][T25148] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8324'.
[  401.277064][T25179] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8335'.
[  401.301839][T25126] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  401.383507][T25185] 
[  401.384428][T25185] ======================================================
[  401.386678][T25185] WARNING: possible circular locking dependency detected
[  401.389093][T25185] syzkaller #0 Not tainted
[  401.390925][T25185] ------------------------------------------------------
[  401.393332][T25185] syz.1.8337/25185 is trying to acquire lock:
[  401.395234][T25185] ffffffff8ea85520 (fs_reclaim){+.+.}-{0:0}, at: __kmalloc_noprof+0x9d/0x760
[  401.397949][T25185] 
[  401.397949][T25185] but task is already holding lock:
[  401.400246][T25185] ffff88819f0e5360 (k-sk_lock-AF_INET6){+.+.}-{0:0}, at: start_sync_thread+0x1376/0x2860
[  401.403377][T25185] 
[  401.403377][T25185] which lock already depends on the new lock.
[  401.403377][T25185] 
[  401.406725][T25185] 
[  401.406725][T25185] the existing dependency chain (in reverse order) is:
[  401.409694][T25185] 
[  401.409694][T25185] -> #7 (k-sk_lock-AF_INET6){+.+.}-{0:0}:
[  401.412301][T25185]        lock_sock_nested+0x41/0x100
[  401.414035][T25185]        mptcp_connect+0x4c3/0x830
[  401.415730][T25185]        __inet_stream_connect+0x25a/0xdd0
[  401.417652][T25185]        inet_stream_connect+0x66/0xa0
[  401.419455][T25185]        __sys_connect+0x312/0x450
[  401.421072][T25185]        __x64_sys_connect+0x7a/0x90
[  401.422780][T25185]        do_syscall_64+0x15f/0xf80
[  401.424496][T25185]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  401.426580][T25185] 
[  401.426580][T25185] -> #6 (sk_lock-AF_INET6){+.+.}-{0:0}:
[  401.429421][T25185]        lock_sock_nested+0x41/0x100
[  401.431358][T25185]        inet_shutdown+0x6a/0x390
[  401.433241][T25185]        nbd_mark_nsock_dead+0x2e9/0x560
[  401.435030][T25185]        sock_shutdown+0x15e/0x260
[  401.436749][T25185]        nbd_clear_sock+0x24/0x170
[  401.438399][T25185]        nbd_config_put+0x2dd/0x580
[  401.440076][T25185]        nbd_genl_connect+0x19d5/0x1cf0
[  401.441902][T25185]        genl_family_rcv_msg_doit+0x22a/0x330
[  401.443869][T25185]        genl_rcv_msg+0x61c/0x7a0
[  401.445526][T25185]        netlink_rcv_skb+0x232/0x4b0
[  401.447306][T25185]        genl_rcv+0x28/0x40
[  401.448765][T25185]        netlink_unicast+0x75c/0x8e0
[  401.450480][T25185]        netlink_sendmsg+0x813/0xb40
[  401.452217][T25185]        ____sys_sendmsg+0x972/0x9f0
[  401.453910][T25185]        ___sys_sendmsg+0x2a5/0x360
[  401.455590][T25185]        __x64_sys_sendmsg+0x1bd/0x2a0
[  401.457413][T25185]        do_syscall_64+0x15f/0xf80
[  401.459061][T25185]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  401.461123][T25185] 
[  401.461123][T25185] -> #5 (&nsock->tx_lock){+.+.}-{4:4}:
[  401.463589][T25185]        __mutex_lock+0x1a3/0x1550
[  401.465244][T25185]        nbd_queue_rq+0x37b/0x1100
[  401.466944][T25185]        blk_mq_dispatch_rq_list+0xa70/0x1910
[  401.468950][T25185]        __blk_mq_sched_dispatch_requests+0xdcc/0x1600
[  401.471109][T25185]        blk_mq_sched_dispatch_requests+0xd7/0x190
[  401.473208][T25185]        blk_mq_run_hw_queue+0x348/0x4f0
[  401.475019][T25185]        blk_mq_dispatch_list+0xd16/0xe10
[  401.476782][T25185]        blk_mq_flush_plug_list+0x48d/0x570
[  401.478620][T25185]        __blk_flush_plug+0x3ed/0x4d0
[  401.480276][T25185]        __submit_bio+0x28d/0x580
[  401.481781][T25185]        submit_bio_noacct_nocheck+0x2f4/0xa40
[  401.483676][T25185]        block_read_full_folio+0x599/0x830
[  401.485474][T25185]        filemap_read_folio+0x137/0x3b0
[  401.487179][T25185]        do_read_cache_folio+0x358/0x590
[  401.488918][T25185]        read_part_sector+0xb6/0x2b0
[  401.490573][T25185]        adfspart_check_ICS+0xb1/0x960
[  401.492272][T25185]        bdev_disk_changed+0x817/0x1770
[  401.494029][T25185]        blkdev_get_whole+0x380/0x510
[  401.495752][T25185]        bdev_open+0x31e/0xd30
[  401.497302][T25185]        blkdev_open+0x470/0x610
[  401.498845][T25185]        do_dentry_open+0x785/0x14e0
[  401.500577][T25185]        vfs_open+0x3b/0x340
[  401.502084][T25185]        path_openat+0x2e08/0x3860
[  401.503716][T25185]        do_file_open+0x23e/0x4a0
[  401.505504][T25185]        do_sys_openat2+0x113/0x200
[  401.507098][T25185]        __x64_sys_openat+0x138/0x170
[  401.508781][T25185]        do_syscall_64+0x15f/0xf80
[  401.510459][T25185]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  401.512423][T25185] 
[  401.512423][T25185] -> #4 (&cmd->lock){+.+.}-{4:4}:
[  401.514603][T25185]        __mutex_lock+0x1a3/0x1550
[  401.516215][T25185]        nbd_queue_rq+0xc6/0x1100
[  401.517770][T25185]        blk_mq_dispatch_rq_list+0xa70/0x1910
[  401.519672][T25185]        __blk_mq_sched_dispatch_requests+0xdcc/0x1600
[  401.521759][T25185]        blk_mq_sched_dispatch_requests+0xd7/0x190
[  401.523745][T25185]        blk_mq_run_hw_queue+0x348/0x4f0
[  401.525480][T25185]        blk_mq_dispatch_list+0xd16/0xe10
[  401.527228][T25185]        blk_mq_flush_plug_list+0x48d/0x570
[  401.529038][T25185]        __blk_flush_plug+0x3ed/0x4d0
[  401.530687][T25185]        __submit_bio+0x28d/0x580
[  401.532263][T25185]        submit_bio_noacct_nocheck+0x2f4/0xa40
[  401.534153][T25185]        block_read_full_folio+0x599/0x830
[  401.535955][T25185]        filemap_read_folio+0x137/0x3b0
[  401.537665][T25185]        do_read_cache_folio+0x358/0x590
[  401.539392][T25185]        read_part_sector+0xb6/0x2b0
[  401.541009][T25185]        adfspart_check_ICS+0xb1/0x960
[  401.542705][T25185]        bdev_disk_changed+0x817/0x1770
[  401.544419][T25185]        blkdev_get_whole+0x380/0x510
[  401.546154][T25185]        bdev_open+0x31e/0xd30
[  401.547662][T25185]        blkdev_open+0x470/0x610
[  401.549220][T25185]        do_dentry_open+0x785/0x14e0
[  401.550893][T25185]        vfs_open+0x3b/0x340
[  401.552369][T25185]        path_openat+0x2e08/0x3860
[  401.553994][T25185]        do_file_open+0x23e/0x4a0
[  401.555666][T25185]        do_sys_openat2+0x113/0x200
[  401.557280][T25185]        __x64_sys_openat+0x138/0x170
[  401.558969][T25185]        do_syscall_64+0x15f/0xf80
[  401.560556][T25185]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  401.562592][T25185] 
[  401.562592][T25185] -> #3 (set->srcu){.+.+}-{0:0}:
[  401.564871][T25185]        __synchronize_srcu+0xca/0x300
[  401.566848][T25185]        elevator_switch+0x1e8/0x7a0
[  401.568560][T25185]        elevator_change+0x2cc/0x450
[  401.570221][T25185]        elevator_set_default+0x36c/0x430
[  401.572011][T25185]        blk_register_queue+0x3e9/0x4e0
[  401.573719][T25185]        __add_disk+0x677/0xd50
[  401.575248][T25185]        add_disk_fwnode+0xfb/0x480
[  401.576858][T25185]        nbd_dev_add+0x72c/0xb50
[  401.578448][T25185]        nbd_init+0x168/0x1f0
[  401.579913][T25185]        do_one_initcall+0x250/0x870
[  401.581557][T25185]        do_initcall_level+0x104/0x190
[  401.583252][T25185]        do_initcalls+0x59/0xa0
[  401.584735][T25185]        kernel_init_freeable+0x2a6/0x3e0
[  401.586561][T25185]        kernel_init+0x1d/0x1d0
[  401.588118][T25185]        ret_from_fork+0x514/0xb70
[  401.589706][T25185]        ret_from_fork_asm+0x1a/0x30
[  401.591456][T25185] 
[  401.591456][T25185] -> #2 (&q->elevator_lock){+.+.}-{4:4}:
[  401.593949][T25185]        __mutex_lock+0x1a3/0x1550
[  401.595578][T25185]        elevator_change+0x1b3/0x450
[  401.597465][T25185]        elevator_set_none+0xb5/0x140
[  401.599077][T25185]        blk_mq_update_nr_hw_queues+0x5e7/0x1a60
[  401.601218][T25185]        nbd_start_device+0x17f/0xb10
[  401.602949][T25185]        nbd_genl_connect+0x165b/0x1cf0
[  401.604875][T25185]        genl_family_rcv_msg_doit+0x22a/0x330
[  401.607215][T25185]        genl_rcv_msg+0x61c/0x7a0
[  401.608989][T25185]        netlink_rcv_skb+0x232/0x4b0
[  401.610867][T25185]        genl_rcv+0x28/0x40
[  401.612322][T25185]        netlink_unicast+0x75c/0x8e0
[  401.613973][T25185]        netlink_sendmsg+0x813/0xb40
[  401.615643][T25185]        ____sys_sendmsg+0x972/0x9f0
[  401.617603][T25185]        ___sys_sendmsg+0x2a5/0x360
[  401.619642][T25185]        __x64_sys_sendmsg+0x1bd/0x2a0
[  401.621767][T25185]        do_syscall_64+0x15f/0xf80
[  401.623768][T25185]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  401.626275][T25185] 
[  401.626275][T25185] -> #1 (&q->q_usage_counter(io)#50){++++}-{0:0}:
[  401.629142][T25185]        blk_alloc_queue+0x546/0x680
[  401.630788][T25185]        __blk_mq_alloc_disk+0x197/0x390
[  401.632537][T25185]        nbd_dev_add+0x499/0xb50
[  401.634063][T25185]        nbd_init+0x168/0x1f0
[  401.635590][T25185]        do_one_initcall+0x250/0x870
[  401.637679][T25185]        do_initcall_level+0x104/0x190
[  401.639809][T25185]        do_initcalls+0x59/0xa0
[  401.641719][T25185]        kernel_init_freeable+0x2a6/0x3e0
[  401.643752][T25185]        kernel_init+0x1d/0x1d0
[  401.645335][T25185]        ret_from_fork+0x514/0xb70
[  401.646983][T25185]        ret_from_fork_asm+0x1a/0x30
[  401.648638][T25185] 
[  401.648638][T25185] -> #0 (fs_reclaim){+.+.}-{0:0}:
[  401.650988][T25185]        __lock_acquire+0x15a5/0x2cf0
[  401.652664][T25185]        lock_acquire+0x106/0x350
[  401.654330][T25185]        fs_reclaim_acquire+0x71/0x100
[  401.656104][T25185]        __kmalloc_noprof+0x9d/0x760
[  401.657788][T25185]        sock_kmalloc+0xd6/0x160
[  401.659459][T25185]        __ipv6_sock_mc_join+0x408/0x750
[  401.661150][T25185]        start_sync_thread+0x139a/0x2860
[  401.663002][T25185]        ip_vs_genl_set_daemon+0x6cd/0x860
[  401.664913][T25185]        genl_family_rcv_msg_doit+0x22a/0x330
[  401.666997][T25185]        genl_rcv_msg+0x61c/0x7a0
[  401.668818][T25185]        netlink_rcv_skb+0x232/0x4b0
[  401.670776][T25185]        genl_rcv+0x28/0x40
[  401.672398][T25185]        netlink_unicast+0x75c/0x8e0
[  401.674448][T25185]        netlink_sendmsg+0x813/0xb40
[  401.676533][T25185]        ____sys_sendmsg+0x972/0x9f0
[  401.678403][T25185]        ___sys_sendmsg+0x2a5/0x360
[  401.679994][T25185]        __x64_sys_sendmsg+0x1bd/0x2a0
[  401.681774][T25185]        do_syscall_64+0x15f/0xf80
[  401.683543][T25185]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  401.685721][T25185] 
[  401.685721][T25185] other info that might help us debug this:
[  401.685721][T25185] 
[  401.689010][T25185] Chain exists of:
[  401.689010][T25185]   fs_reclaim --> sk_lock-AF_INET6 --> k-sk_lock-AF_INET6
[  401.689010][T25185] 
[  401.693106][T25185]  Possible unsafe locking scenario:
[  401.693106][T25185] 
[  401.695494][T25185]        CPU0                    CPU1
[  401.697142][T25185]        ----                    ----
[  401.698838][T25185]   lock(k-sk_lock-AF_INET6);
[  401.700313][T25185]                                lock(sk_lock-AF_INET6);
[  401.702461][T25185]                                lock(k-sk_lock-AF_INET6);
[  401.704674][T25185]   lock(fs_reclaim);
[  401.705933][T25185] 
[  401.705933][T25185]  *** DEADLOCK ***
[  401.705933][T25185] 
[  401.708427][T25185] 4 locks held by syz.1.8337/25185:
[  401.710028][T25185]  #0: ffffffff8fe3f8c8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  401.712542][T25185]  #1: ffffffff8fdd0300 (rtnl_mutex){+.+.}-{4:4}, at: start_sync_thread+0x1c4/0x2860
[  401.715476][T25185]  #2: ffff88810ef5ed50 (ipvs->sync_mutex){+.+.}-{4:4}, at: start_sync_thread+0x1d5/0x2860
[  401.718521][T25185]  #3: ffff88819f0e5360 (k-sk_lock-AF_INET6){+.+.}-{0:0}, at: start_sync_thread+0x1376/0x2860
[  401.721616][T25185] 
[  401.721616][T25185] stack backtrace:
[  401.723538][T25185] CPU: 1 UID: 0 PID: 25185 Comm: syz.1.8337 Not tainted syzkaller #0 PREEMPT(full) 
[  401.723549][T25185] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  401.723553][T25185] Call Trace:
[  401.723559][T25185]  <TASK>
[  401.723563][T25185]  dump_stack_lvl+0xe8/0x150
[  401.723574][T25185]  print_circular_bug+0x2e1/0x300
[  401.723585][T25185]  check_noncircular+0x12e/0x150
[  401.723596][T25185]  __lock_acquire+0x15a5/0x2cf0
[  401.723604][T25185]  ? reacquire_held_locks+0x104/0x190
[  401.723612][T25185]  ? release_sock+0x2f/0x260
[  401.723623][T25185]  ? __kmalloc_noprof+0x9d/0x760
[  401.723632][T25185]  lock_acquire+0x106/0x350
[  401.723639][T25185]  ? __kmalloc_noprof+0x9d/0x760
[  401.723648][T25185]  ? __inet6_bind+0x399/0xf60
[  401.723657][T25185]  fs_reclaim_acquire+0x71/0x100
[  401.723667][T25185]  ? __kmalloc_noprof+0x9d/0x760
[  401.723676][T25185]  __kmalloc_noprof+0x9d/0x760
[  401.723687][T25185]  ? sock_kmalloc+0xd6/0x160
[  401.723694][T25185]  sock_kmalloc+0xd6/0x160
[  401.723702][T25185]  __ipv6_sock_mc_join+0x408/0x750
[  401.723711][T25185]  ? __local_bh_enable_ip+0xd0/0x130
[  401.723719][T25185]  start_sync_thread+0x139a/0x2860
[  401.723732][T25185]  ? __pfx_sync_thread_backup+0x10/0x10
[  401.723744][T25185]  ? __pfx_start_sync_thread+0x10/0x10
[  401.723753][T25185]  ? __nla_validate_parse+0x2480/0x2dc0
[  401.723763][T25185]  ? ____sys_sendmsg+0x972/0x9f0
[  401.723773][T25185]  ? ___sys_sendmsg+0x2a5/0x360
[  401.723786][T25185]  ? nla_memcpy+0x5b/0xc0
[  401.723797][T25185]  ip_vs_genl_set_daemon+0x6cd/0x860
[  401.723805][T25185]  ? __pfx_ip_vs_genl_set_daemon+0x10/0x10
[  401.723816][T25185]  ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0
[  401.723825][T25185]  ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0
[  401.723834][T25185]  genl_family_rcv_msg_doit+0x22a/0x330
[  401.723843][T25185]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  401.723852][T25185]  ? bpf_lsm_capable+0x9/0x20
[  401.723860][T25185]  ? security_capable+0x7e/0x2c0
[  401.723869][T25185]  genl_rcv_msg+0x61c/0x7a0
[  401.723878][T25185]  ? __pfx_genl_rcv_msg+0x10/0x10
[  401.723885][T25185]  ? __pfx_ip_vs_genl_set_daemon+0x10/0x10
[  401.723892][T25185]  ? __pfx_ref_tracker_free+0x10/0x10
[  401.723903][T25185]  netlink_rcv_skb+0x232/0x4b0
[  401.723913][T25185]  ? __pfx_genl_rcv_msg+0x10/0x10
[  401.723920][T25185]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  401.723932][T25185]  ? down_read+0x270/0x2e0
[  401.723940][T25185]  ? genl_rcv+0xd/0x40
[  401.723947][T25185]  genl_rcv+0x28/0x40
[  401.723953][T25185]  netlink_unicast+0x75c/0x8e0
[  401.723963][T25185]  netlink_sendmsg+0x813/0xb40
[  401.723975][T25185]  ? __pfx_netlink_sendmsg+0x10/0x10
[  401.723985][T25185]  ? aa_sock_msg_perm+0xf1/0x1b0
[  401.723995][T25185]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  401.724005][T25185]  ____sys_sendmsg+0x972/0x9f0
[  401.724015][T25185]  ? __might_fault+0xaf/0x130
[  401.724025][T25185]  ? __pfx_____sys_sendmsg+0x10/0x10
[  401.724037][T25185]  ? import_iovec+0x73/0xa0
[  401.724047][T25185]  ___sys_sendmsg+0x2a5/0x360
[  401.724057][T25185]  ? __lock_acquire+0x6b5/0x2cf0
[  401.724065][T25185]  ? __pfx____sys_sendmsg+0x10/0x10
[  401.724075][T25185]  ? futex_wait+0x2a2/0x390
[  401.724089][T25185]  ? __fget_files+0x2a/0x420
[  401.724097][T25185]  ? __fget_files+0x3a0/0x420
[  401.724107][T25185]  __x64_sys_sendmsg+0x1bd/0x2a0
[  401.724117][T25185]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  401.724129][T25185]  ? rcu_is_watching+0x15/0xb0
[  401.724138][T25185]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  401.724145][T25185]  do_syscall_64+0x15f/0xf80
[  401.724152][T25185]  ? trace_irq_disable+0x3b/0x140
[  401.724164][T25185]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  401.724171][T25185] RIP: 0033:0x7f12db79cdd9
[  401.724208][T25185] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  401.724219][T25185] RSP: 002b:00007f12dc705028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  401.724234][T25185] RAX: ffffffffffffffda RBX: 00007f12dba15fa0 RCX: 00007f12db79cdd9
[  401.724242][T25185] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000046
[  401.724250][T25185] RBP: 00007f12db832d69 R08: 0000000000000000 R09: 0000000000000000
[  401.724257][T25185] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  401.724264][T25185] R13: 00007f12dba16038 R14: 00007f12dba15fa0 R15: 00007fffbd11cab8
[  401.724278][T25185]  </TASK>
[  401.887098][T25195] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0
[  404.921264][    C0] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured!
[  405.551143][    C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
