last executing test programs:

6.652638139s ago: executing program 1 (id=16982):
r0 = socket$kcm(0x2, 0x200000000000001, 0x106)
sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0xfc, 0x0}, 0x30004001)
socket$kcm(0x10, 0x2, 0x4)
syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
socket(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r1}, &(0x7f0000000240), &(0x7f0000000280)=r2}, 0x20)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000080)="b9ff05760a03076804268c989e14", 0x0, 0x10503, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)

5.708565665s ago: executing program 1 (id=16983):
sendmmsg(0xffffffffffffffff, &(0x7f0000002b40), 0x0, 0x8000)
socketpair(0x26, 0x800, 0x6, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, 0x0, 0x0)
r1 = socket$inet_sctp(0x2, 0x5, 0x84)
close(r1)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, 0x0, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0)
close(r3)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
ioctl$TUNSETOFFLOAD(r3, 0xc004743e, 0x110e22fff7)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="bc"], 0x50)
close(r3)

3.72958516s ago: executing program 1 (id=16998):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r0, 0x220c)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r1, 0x3)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r2, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r3, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r5, &(0x7f0000000540)={0xa, 0x4e22, 0x7651, @empty, 0x200}, 0x1c)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r6, 0x7)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r7, 0x0)
listen(r4, 0xffffffff)
r8 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$DCCPDIAG_GETSOCK(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c00000012000301000000000000000000009db7000000000000010004000000000000000000000000000000000000000000000000000000691d0f76e77044d1eb94e56239e4"], 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x800)

3.470477798s ago: executing program 1 (id=17004):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r0, 0x0, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r2)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x2004c8d8)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x20004055)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x40000000000009f, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350076657468305f746f5f626f6e6400000008000a00", @ANYRES32=r3], 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x8000)
sendmsg$nl_route(r1, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000000c0)=@setlink={0x2c, 0x13, 0x5, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r3, 0x312}, [@IFLA_ADDRESS={0xa, 0x1, @remote}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x42)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket(0x1, 0x803, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00030000000000001c0012800c0001006d6163766c616e000c000280080001000800000008000500", @ANYRES32=r7, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r7], 0x4c}}, 0x884)

2.824473123s ago: executing program 3 (id=17013):
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_mreqn(r0, 0x0, 0x23, 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000010c30000000003000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000116608000000000000180000000000000000000000000010009500000000000000360a020000000001180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xa, 0xff5c, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x78)
r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
write$tun(r2, &(0x7f0000000800)=ANY=[], 0x141)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x30, r2, 0x8)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700)
mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0xe, 0x12, r3, 0x952de000)
r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x6, [@func_proto, @typedef={0x0, 0x0, 0x0, 0x10, 0x4}, @volatile={0x0, 0x0, 0x0, 0x9, 0x3}]}, {0x0, [0x0, 0x0, 0x0, 0x61]}}, 0x0, 0x42}, 0x28)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000080)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x0, '\x00', 0x0, r4, 0x1, 0x3}, 0x48)
r5 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff)
recvmsg(0xffffffffffffffff, 0x0, 0x400002e1)
sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01002dbd7000000000000100000008000600e0000001050004000100000008000b"], 0x2c}, 0x1, 0x0, 0x0, 0x20048091}, 0x0)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1, 0xf, &(0x7f00000001c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_WOL_SET(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0)

2.481299021s ago: executing program 3 (id=17017):
r0 = socket(0x10, 0x3, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000900), 0xa0002, 0x0)
close(r1)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
ioctl$TUNSETVNETLE(r1, 0x400454dc, 0xfffffffffffffffe)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x803, 0x0)
ioctl$XFS_IOC_FD_TO_HANDLE(r4, 0xc038586a, &(0x7f0000000300)={<r5=>r0, &(0x7f00000001c0)=')]\x00', 0x200000, &(0x7f0000000240)={@align=0x3, {0x7, 0x1c0, 0x4, 0x2c0000000000}}, 0x0, &(0x7f0000000280), &(0x7f00000002c0)=0x4})
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000480)={r5, 0x58, &(0x7f0000000400)}, 0x10)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r6, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{}, 0x3548, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}}}]}, 0x78}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, {}, {}, {0x8}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}}, 0x0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000100e1ff0000000000000000850000008a00000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$IPSET_CMD_FLUSH(r7, &(0x7f0000002180)={0x0, 0x0, &(0x7f0000002140)={&(0x7f0000002100)={0x28, 0x4, 0x6, 0x301, 0x0, 0x0, {0x2, 0x0, 0x8}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000820}, 0x20040000)

2.322743799s ago: executing program 1 (id=17018):
r0 = socket$kcm(0x2, 0x200000000000001, 0x106)
sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0xfc, 0x0}, 0x30004001)
socket$kcm(0x10, 0x2, 0x4)
syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
socket(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket(0x10, 0x803, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r1}, &(0x7f0000000240), &(0x7f0000000280)=r2}, 0x20)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000080)="b9ff05760a03076804268c989e14", 0x0, 0x10503, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)

2.267098696s ago: executing program 2 (id=17019):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0x9, 0x6, 0x8, 0x8, 0x2, 0xffffffffffffffff, 0x3}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x57, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040), &(0x7f00000004c0), 0xce, r0}, 0x38)
r1 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r2=>0x0})
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="c4000000190001000000000000000000ff0200000000000000000000000000010000000000000000000000000000000080000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="002bb7000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000010000000000000000000000000000000000000000000500000000000000000000000000000000000000000000000000000000000000000000000000000000000a00100001"], 0xc4}}, 0x0)
sendmsg$nl_xfrm(r3, &(0x7f00000000c0)={0x0, 0xa00, &(0x7f0000000080)={&(0x7f0000000040)=@flushpolicy={0x1c, 0x1d, 0x1, 0x0, 0x0, "", [@policy_type={0xa, 0x10, {0x1}}]}, 0x1c}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000e40)=@newqdisc={0x40, 0x24, 0x3fe3aa0262d8c583, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xf}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x6}}]}, 0x40}, 0x1, 0x0, 0x0, 0xc083}, 0x2000400c)
r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$TIPC_NL_LINK_GET(r1, &(0x7f0000000400)={&(0x7f0000000000), 0xc, &(0x7f00000003c0)={&(0x7f0000000280)={0xf8, r4, 0xfc8dfd1ecbc555a8, 0x70bd2a, 0x25dfdbff, {}, [@TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8000}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}, @TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x4}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xff}]}, @TIPC_NLA_SOCK={0xa8, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4b39}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x259e}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xb}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x40}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x931}, @TIPC_NLA_SOCK_CON={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x10001}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3ff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x10000}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}]}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}]}]}, 0xf8}, 0x1, 0x0, 0x0, 0x4004}, 0x240004c1)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff)
r7 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$sock_int(r7, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4)
bind$inet6(r7, &(0x7f0000000080)={0xa, 0x4e20, 0x9, @ipv4={'\x00', '\xff\xff', @empty}, 0x1000d}, 0x1c)
sendmsg$TIPC_NL_KEY_SET(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000004c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100000000000000000017000000540006803c00040067636d286165732900000000000000000000000000000000000000000000000014000000e3de3d7b4cd07ec3ee777de774fc7987cca41989140003"], 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x4008014)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)

2.262816684s ago: executing program 3 (id=17020):
socket$inet_sctp(0x2, 0x1, 0x84)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet_mptcp(0x2, 0x1, 0x106)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x1, 0x803, 0x0)
socket$inet_smc(0x2b, 0x1, 0x0)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000004c0)='ns/uts\x00')
socket$can_bcm(0x1d, 0x2, 0x2)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42901, 0x0)
socket$kcm(0x2, 0xa, 0x2)
socket$packet(0x11, 0x3, 0x300)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100))
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000600)={'team0\x00', <r4=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x44}}, 0x0)

2.063596082s ago: executing program 2 (id=17022):
r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0)
bind$llc(r0, &(0x7f0000000140)={0x1a, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x10)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, 0x0, &(0x7f0000000080))
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000180)={'batadv0\x00', <r5=>0x0})
sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x3c, r4, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x2}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x3}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20008040}, 0x4000)
write$cgroup_int(r2, &(0x7f0000000000), 0xffffff6a)
sendfile(r0, r2, 0x0, 0xffffffff000)
r6 = socket(0x15, 0x80005, 0x0)
sendmsg$kcm(r6, &(0x7f0000001240)={&(0x7f0000000000)=@llc={0x1a, 0x303, 0x0, 0xff, 0x40, 0x5, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2e}}, 0x80, 0x0}, 0x4000000)
recvmmsg(r0, &(0x7f0000000640), 0x3fffffffffffce3, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ieee802154(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$IEEE802154_START_REQ(r7, 0x0, 0x0)

2.062680962s ago: executing program 3 (id=17023):
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000001600)={0x1, 0x6}, 0x4)
unshare(0x20000400)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x3, 0x5, &(0x7f00000006c0)=ANY=[], 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4040)
pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r2, 0x0, 0x0)
setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000040)=[{0x28, 0x0, 0xd, 0xfffff034}, {0x6, 0x0, 0x2, 0xffffffff}]}, 0x10)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x33, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001700)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x2e0, 0xe40, 0x2b0, &(0x7f0000000100)="b9ff0b078059268cb89e14f086dd2de0ffff206000000001000aac14140ce060000d49e832f0", 0x0, 0x28e, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000f80)={'wlan1\x00', &(0x7f0000000f40)=@ethtool_stats})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0xc00, 0xb, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b", 0x0, 0x4002000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
ioctl$BTRFS_IOC_BALANCE(0xffffffffffffffff, 0x5000940c, 0x0)

1.856729229s ago: executing program 0 (id=17026):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x275a, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
pwritev(r1, &(0x7f0000000100)=[{&(0x7f0000000040)="8e", 0x1}], 0x1, 0x4008001, 0x80)
close(r1)
socket$kcm(0x29, 0x2, 0x0)
sendfile(r1, r0, 0x0, 0xf03a0005)
bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94)
syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r1)

1.659996877s ago: executing program 4 (id=17028):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
sendmmsg$inet6(r0, &(0x7f0000000f00)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x1000, @private1}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000080)="9a", 0x1}], 0x1}}], 0x1, 0x4004851)
setsockopt(r0, 0x84, 0x14, &(0x7f0000000040), 0x0)
r1 = accept4(0xffffffffffffffff, &(0x7f0000000140)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x0, 0x81000)
setsockopt$SO_TIMESTAMP(r1, 0x1, 0x3f, 0x0, 0x0)
r2 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000040))
r3 = socket$inet6(0xa, 0x2, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r4 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$gtp(&(0x7f0000000c80), r4)
syz_init_net_socket$x25(0x9, 0x5, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000980)={<r5=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r5, 0x8924, &(0x7f00000002c0)={'macsec0\x00', @random="0100061f8145"})
getsockname$packet(r4, &(0x7f0000000040)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0xd)
sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="640000001000370403000000ffffffff00000000", @ANYRES32=r6, @ANYBLOB="0b1b050000000000440012800b00010069703667726500003400028008000100", @ANYRES32, @ANYBLOB="14000600fe8000000000000000000000000000aa1400070000000000000000000000000000bb"], 0x64}, 0x1, 0x0, 0x0, 0x48810}, 0x4000010)
sendmmsg$inet(r3, &(0x7f0000000440)=[{{&(0x7f0000000000)={0x2, 0x4e24, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="100000000000000029000000070000001c000000000000000000000008000000", @ANYRES32=r6], 0x30}}], 0x1, 0xc0)

1.38596832s ago: executing program 2 (id=17029):
socket$nl_route(0x10, 0x3, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}, {0xd, 0xf}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x4, 0x7, 0x1f45, 0x4, 0x7ff}, 0x4, 0x1, 0x0, 0x7, 0x2ff, 0xb, 0x1a, 0x1c, 0x4, 0x7131d5f9, {0x7, 0x80000001, 0x7, 0x81, 0x3, 0xf70a}}}}]}, 0x78}}, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0)
close(r5)
socket$netlink(0x10, 0x3, 0x0)
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}})
r6 = socket$kcm(0x11, 0x3, 0x0)
r7 = socket(0x400000000010, 0x3, 0x0)
r8 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002940)=@newtfilter={0xe8c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r9, {0x1, 0x4}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_matchall={{0xd}, {0xe58, 0x2, [@TCA_MATCHALL_ACT={0xe54, 0x2, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x2, 0x9, 0x4, 0x6}, 0x1, 0xfb}, [{0x2, 0x9c, 0x81, 0x6, 0x2, 0x7}, {0x1, 0x6, 0x4, 0x3, 0xfffffffd, 0x81}, {0x1, 0x1, 0x8, 0x101, 0x3}, {0x3, 0x3, 0x0, 0x7, 0x5, 0x4}, {0xf, 0x7, 0x694, 0x51, 0x8001}, {0x3, 0x8004, 0xc, 0x101, 0x3, 0x84b5}, {0x9c, 0x4, 0x8, 0x2, 0x487, 0x8}, {0x1, 0x10000, 0x5, 0x4, 0x3, 0x8000}, {0x7, 0x9, 0x1ff, 0x8, 0x2, 0x7fff}, {0x439356e7, 0x609, 0x16, 0xfffffffc, 0x10000, 0x6}, {0x5, 0x3, 0x8, 0x3, 0x400000, 0xffffffff}, {0x685, 0x0, 0x7, 0x7, 0x8, 0x5}, {0x5, 0x8, 0x9, 0x5, 0xfffff000, 0x7}, {0x768d, 0xcd, 0x8, 0x7, 0x5, 0x9}, {0x1, 0xfffffffb, 0x6, 0x7, 0x7ff, 0x6}, {0xfffffffb, 0x3, 0xfffffffa, 0x6, 0x2}, {0xfffff9fd, 0x9, 0xa5f, 0xa, 0x5, 0x2}, {0x6, 0x9, 0x167, 0x2, 0x71, 0xa2}, {0x140, 0x2, 0xc, 0x8, 0x87, 0x60}, {0x5, 0xa, 0x2, 0x4, 0x3, 0x2000}, {0x32d, 0x8, 0x7fff, 0x4, 0x8, 0x6}, {0x8, 0x200, 0x58fe, 0x7ff, 0x4, 0x3}, {0x101, 0xd, 0x101, 0x1, 0x3, 0x8}, {0x0, 0x3, 0x1ff, 0x7437ec78, 0x2, 0x9}, {0xffffffff, 0x1, 0x9, 0x0, 0x1, 0x4}, {0xc, 0xe, 0x0, 0x3, 0x8, 0x81}, {0x3, 0x3, 0x6, 0xe, 0x0, 0x80}, {0xd, 0x0, 0x7ff, 0x0, 0x80000000, 0x2}, {0x4, 0xb, 0x6c5f1878, 0x57c4, 0x8, 0x25ff}, {0x4, 0xd, 0x1fadd976, 0x3071, 0x0, 0x1}, {0x5, 0x800, 0x3, 0x3, 0x3, 0x9}, {0x9, 0x1ff, 0x1000, 0x9c, 0x1, 0x7}, {0x9, 0x1000d76, 0x6, 0xdc2, 0xa16a, 0x2}, {0x1ff, 0x5, 0x7, 0x2, 0x2, 0x1}, {0x1, 0x32158142, 0x0, 0x8, 0x6, 0x7}, {0xe, 0x4, 0x9000, 0x2, 0x2, 0x7f}, {0x3, 0x2ec74d53, 0x0, 0x0, 0x8, 0x2}, {0x5, 0xfff, 0xffffff13, 0x9, 0x6, 0x6}, {0x1, 0x6, 0x3, 0x4, 0xffb, 0xc}, {0x6, 0x6, 0x1ff, 0x8, 0x7ff, 0x8001}, {0x4, 0xffffffff, 0x0, 0xfffff740, 0x4, 0x4}, {0xffff, 0x5, 0x7, 0xac, 0xf}, {0x5, 0x3, 0x6, 0x1000, 0xd8fe, 0x8001}, {0x2000000d, 0x3, 0x80000000, 0x0, 0xffffff81, 0x7ff}, {0xfffffffb, 0x2, 0x1ff, 0xf9, 0xffff8001, 0x800000}, {0x0, 0x6, 0x7ffc, 0x9, 0x500, 0x7}, {0x1, 0xffffffff, 0x834, 0x7, 0x0, 0x3}, {0x7fff, 0x6, 0x0, 0x2002, 0x2, 0x8}, {0xf61, 0x101, 0x9, 0x2, 0x80000000, 0x7fff}, {0xc6, 0x4, 0x8, 0x2, 0xffff, 0x20000000}, {0x0, 0x5, 0x1, 0xffff, 0x3, 0x3}, {0x8, 0x10001, 0x9f98, 0x1, 0x8, 0x66a}, {0xfff, 0x6, 0x8, 0x80000001, 0x0, 0x7f}, {0x8, 0x6, 0x7f, 0x2, 0x3, 0xb}, {0x4, 0x4b, 0x0, 0x1, 0x7f, 0x7fffffff}, {0xfff, 0x47e4, 0x1, 0x0, 0x80000001, 0x9}, {0x4, 0x9, 0x7, 0x406, 0x3e6b7592, 0x5}, {0x9, 0x9, 0x1, 0x9, 0x0, 0x2}, {0x8, 0x80000001, 0x7fff, 0xb2d9, 0xfffffffe, 0x8}, {0x80000001, 0x9, 0x5202, 0x2, 0x53ce, 0x3}, {0x6, 0x7, 0x8, 0x8, 0x7f, 0x80000000}, {0xfffffff9, 0x9, 0x6, 0x6, 0x9, 0x83}, {0xfffffffd, 0x8, 0x6, 0x5, 0x3, 0x8f}, {0x741, 0x0, 0x9, 0x7fffffff, 0x2, 0x200}, {0x401, 0x2, 0x8, 0x4, 0x4, 0xc6e9}, {0x1, 0x2d73, 0x400, 0x5, 0x9f17, 0xffffff7f}, {0x2, 0x8401, 0x2b00, 0xfffff57b, 0xfffffc00, 0xd}, {0x3, 0x4, 0xc52b, 0x9, 0x5, 0xff}, {0x0, 0x4, 0x401, 0x0, 0x1, 0x9}, {0x8, 0x4, 0x1, 0x2, 0x10, 0x1}, {0x20000ff, 0x8, 0x6, 0x5, 0xff}, {0x2, 0xb15ce2d, 0x80000001, 0xbeab, 0x8, 0x5}, {0x3, 0x8, 0x3, 0x7, 0x8, 0x4}, {0xfff, 0x9, 0x6, 0x3, 0x100, 0x57}, {0x9, 0x5, 0x4, 0x3, 0xa, 0x2}, {0xb3, 0xe, 0x3, 0x7e8, 0x7, 0x9}, {0x400000ff, 0xc, 0x5, 0x10001, 0x6, 0x6}, {0x2, 0x8f, 0x9, 0xffffff46, 0x84, 0x80000000}, {0x9, 0x2, 0xfffffffc, 0x0, 0xd50, 0x3}, {0xd203, 0x7, 0x1, 0x10000, 0x43, 0x1ff}, {0x4, 0x3ff, 0xffffffff, 0x1, 0x5, 0x100}, {0x1ff, 0x3, 0x7ff, 0xfffffff8, 0x1ff, 0x9}, {0x7, 0xd, 0x80003ff, 0x1, 0x7, 0x4}, {0x0, 0x6, 0x0, 0x9, 0xffff0001, 0xcca}, {0x7, 0x1, 0xfffffff1, 0x3ff, 0x100, 0x4}, {0x3, 0x9, 0x0, 0xed4, 0x4, 0x6}, {0x9, 0x7, 0x8001, 0x7, 0x5, 0x2}, {0x3, 0xfff, 0x9, 0x5, 0xb5, 0x3}, {0x0, 0x1, 0x1, 0x5, 0xffffff01, 0xfff}, {0x7, 0x5, 0x2, 0x2, 0x0, 0xfffff9de}, {0x5, 0xffffffff, 0xe6b, 0xb, 0xb, 0x4}, {0x1d, 0xffffff10, 0x1, 0x2, 0xff, 0x52e2}, {0x0, 0x1, 0x0, 0x7, 0xdb, 0x5}, {0x7, 0x2, 0x9, 0x8, 0xa, 0x100}, {0x81, 0x4, 0x988, 0x20, 0x0, 0x7}, {0xdc03, 0x7, 0x402c, 0x8, 0xfffffff9, 0x4}, {0xa, 0xfffffffe, 0x1, 0x1ff, 0x1ff, 0xc1b7}, {0xa24b, 0x947d, 0x40, 0x4, 0x9, 0x2}, {0x9, 0x401, 0xa89, 0x5ef, 0x9, 0x8}, {0x4, 0x7fff, 0x0, 0x4, 0x7fffffff}, {0x3, 0xb8c, 0x6, 0x21761f6a, 0xfffffffe, 0x4}, {0xfff, 0xda, 0x1f, 0x4, 0x8, 0x5}, {0x8, 0x10, 0x100, 0x0, 0xfffffff7, 0x43}, {0xfffff000, 0x8, 0xe96, 0x9, 0x9, 0x34b0}, {0x4, 0x8, 0x8, 0x3, 0x6cf4, 0xc}, {0x3, 0x3, 0x7, 0x4, 0xbe, 0x81}, {0x4, 0x800, 0x0, 0x5, 0x8, 0xfa2f}, {0x10, 0x5e20, 0x81, 0x2, 0x8, 0x6}, {0x9, 0x2, 0x6, 0x4, 0xf, 0x5}, {0x100, 0x1, 0xffffffff, 0xffffffff, 0x9, 0x74}, {0x4, 0x4, 0x8, 0x1, 0x0, 0x3}, {0xfffffff8, 0xfffffffb, 0xffffffff, 0x62f, 0x401, 0x30564e0}, {0x9a2f, 0x800, 0x8, 0x1, 0x7}, {0x20000002, 0x2, 0x800, 0x200, 0x9, 0x3}, {0x7, 0x6, 0x8936, 0xdcb, 0x8, 0x2}, {0x6, 0x80000000, 0x8, 0xe, 0xfffffffa, 0x8de3}, {0x0, 0x9, 0x8, 0xfff, 0x6, 0x1ff}, {0x8195, 0x2, 0x1000}, {0x1, 0x50, 0xff, 0x9e0f, 0x5, 0x6}, {0x7fff, 0x6, 0x0, 0x5, 0x8000, 0x3}, {0x7ff, 0x9, 0xa, 0x6, 0xb, 0xe77}, {0x1, 0x5e12, 0x3, 0xfffffffa, 0x2, 0x80000001}, {0xffffff8c, 0x2, 0x1, 0x1, 0x4, 0x5}, {0x4, 0x7, 0x104, 0x78d, 0xffffcff9, 0x9}, {0x2001, 0xe, 0x7, 0x2, 0x2, 0x207f}, {0x10, 0x5, 0xfffffffa, 0xff, 0x80000, 0xfff}, {0x1, 0x7ff, 0x696e, 0xa, 0x49d, 0xb}, {0x9bf4, 0x0, 0x5, 0x3, 0x3, 0x1000}], [{0x1, 0x1}, {0x2}, {0x5}, {0x2}, {0x1, 0x745e81639ff0f356}, {0x4}, {0x5}, {0x3}, {0x3}, {}, {0x3}, {0x4}, {0x0, 0x1}, {0x2}, {0x2}, {}, {0x3}, {0x0, 0x1}, {0x2, 0x1}, {0x4}, {0x3, 0x1}, {0x1}, {0x2, 0x1}, {0x2}, {0x3, 0x1}, {0x2}, {0x3}, {0x2}, {0x1, 0x1}, {0x1}, {0x1}, {0x5}, {0x4}, {0x5, 0x1}, {0x5, 0x1}, {}, {0x4, 0x1}, {0x2, 0x1}, {0x4}, {0x1, 0x1}, {0x5}, {0xa}, {0x3, 0x1}, {0x3}, {0x2, 0x1}, {0x3}, {0x4, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x2}, {0x4}, {0x4, 0x1}, {0x4}, {0x4}, {0x2, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x2}, {0x1, 0x1}, {0x3, 0x1}, {0x5}, {0x3, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x3}, {0x6}, {0xa}, {0x3, 0x1}, {}, {0x1, 0x1}, {0x1}, {0x4, 0x1}, {0x5}, {0x3}, {0x3, 0x1}, {0x4}, {0x0, 0x1}, {0x5}, {0x6}, {0x2}, {0xb82e57098c7a44ef}, {0x3, 0x1}, {0x1}, {0x0, 0x1}, {0x4}, {0x1, 0x1}, {0x1}, {0x0, 0x1}, {0x4}, {0x4}, {0x0, 0x1}, {0x2}, {0x4, 0x1}, {0x1}, {0x1, 0x1}, {0x2}, {0x3}, {0x1, 0x1}, {}, {0x4, 0x1}, {0x3}, {0x1}, {0x1}, {0x5}, {0x3, 0x1}, {0x4}, {0x3, 0x1}, {0x0, 0x1}, {0x4}, {0x4, 0x1}, {0x1}, {0x5, 0x1}, {0x4}, {0x0, 0x1}, {0x3}, {0x1}, {0x0, 0x1}, {0x4}], 0x1}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0xe8c}, 0x1, 0x0, 0x0, 0x10}, 0x0)
sendmsg$kcm(r6, &(0x7f0000002900)={&(0x7f0000000500)=@xdp={0x2c, 0x8, r4, 0x10c}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000380)="da", 0x14}], 0x1}, 0x4000880)

953.405068ms ago: executing program 0 (id=17030):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x3}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
setsockopt$XDP_TX_RING(0xffffffffffffffff, 0x11b, 0x3, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
setsockopt$XDP_UMEM_FILL_RING(0xffffffffffffffff, 0x11b, 0x5, 0x0, 0x0)
bind$xdp(0xffffffffffffffff, 0x0, 0x0)
r4 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', <r5=>0x0})
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0x7fffe, {0x0, 0x0, 0x0, r5, {0x0, 0xf}, {0x1, 0xb}, {0x4, 0x1}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_SPLIT_GSO={0x8}, @TCA_CAKE_WASH={0x8, 0xd, 0x1}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4048800}, 0x400c000)
sendto$packet(r4, &(0x7f00000002c0)="05031c00d3fc140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14)

855.223769ms ago: executing program 4 (id=17031):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x3, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x5, 0x8}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x0, 0x3, {0x5, 0x2, 0x6}}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000880)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=@newqdisc={0x434, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r6, {0x8}, {}, {0x5, 0x1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x0, 0x62b9, 0x5, 0xfffffff7, 0x5, 0x3, 0xe1cb, 0x5, 0x1, 0x3, 0x0, 0x1, 0x2, 0x6, 0xacd, 0x0, 0x364, 0x1, 0x2, 0xffffff44, 0x3, 0x2, 0x8, 0x3, 0x6, 0xffffffc0, 0xb, 0x688, 0xffff, 0x0, 0x2, 0xfffffeff, 0x0, 0xb, 0x5, 0x0, 0x5, 0xffffadc0, 0x8001, 0xf, 0x1, 0x8d2a00, 0x8, 0xf, 0x4ba, 0x1, 0x80, 0xffff, 0x1, 0x7, 0x0, 0x400, 0xe5, 0x93, 0x2, 0x45a5, 0x8, 0x6, 0x4, 0x0, 0x59, 0x3, 0x80, 0x9, 0x5, 0x9, 0x5, 0x3, 0x9, 0x2, 0x3, 0x4, 0x7f, 0x101, 0xde, 0x10, 0x7, 0x6, 0x7f, 0xfff, 0x6, 0x9, 0xf7, 0x5, 0x2, 0x81, 0x0, 0x6, 0x7, 0x1, 0x437, 0x6, 0x3, 0x2, 0x7000000, 0x5, 0x9, 0xecc, 0x6, 0x4, 0x8, 0x400, 0x7a5, 0x9, 0x9, 0x0, 0x9, 0x8, 0x0, 0x3, 0x7ff, 0x5, 0x6, 0x4, 0x7, 0x10, 0x4001d1da, 0x8, 0xbdb, 0x1, 0x8, 0x8001, 0xe3c8, 0xffffffff, 0xd, 0x6, 0x4, 0x9, 0x7fffffff, 0x3, 0xb8b4, 0x723, 0x15, 0x9367, 0x81, 0x400000, 0x9, 0x6, 0x75, 0x1ff, 0xc695, 0x4, 0xf, 0x7, 0x3, 0x0, 0x3ff, 0x8000, 0xff, 0x4, 0x0, 0x6496, 0x7f, 0x3, 0x0, 0xf528, 0x6, 0x80000000, 0x6, 0x157b, 0x7, 0x40, 0x1, 0x10001, 0x3, 0x9, 0x2, 0x98de, 0x2450, 0x86d, 0x2, 0x7, 0x7, 0xfffffffa, 0x800, 0xfffffffb, 0x4, 0xb6, 0x5, 0x7fff, 0x9f4c, 0x1, 0x8, 0xe, 0x11d, 0x7fff, 0xf, 0x8, 0x3, 0xa, 0x9, 0x9, 0x2, 0x4, 0x2, 0x8, 0x5, 0x5, 0x401, 0x9, 0x4b8, 0xa78, 0xec8, 0x1, 0xfffffffa, 0x80020000, 0x0, 0x0, 0x7f, 0x8c1, 0x5, 0xfffffffa, 0x6, 0x175b, 0x7fffffff, 0x4, 0x4, 0xffff8001, 0x8001, 0xffff, 0x5, 0x0, 0x401, 0x5, 0x10, 0x7fff, 0xffffff00, 0x3, 0x8, 0x9268, 0x80000000, 0x2, 0x7, 0x4, 0x3, 0x4, 0xced, 0x5, 0xa524, 0x7, 0x81f, 0x3, 0x10, 0x80, 0x1ff, 0x1109, 0x9, 0x1, 0x0, 0x2, 0x0, 0x8, 0x3, 0x3, 0x6, 0x4]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0x2004009c}, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
r8 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newqdisc={0x48, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r9, {0xffff}, {}, {0x2, 0xc}}, [@qdisc_kind_options=@q_cbq={{0x8}, {0x1c, 0x2, [@TCA_CBS_PARMS={0x18, 0x1, {0x81, '\x00', 0xfffff000, 0x31, 0x3, 0x581}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40098}, 0x0)
r10 = socket$nl_route(0x10, 0x3, 0x0)
r11 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r12=>0x0})
sendmsg$nl_route_sched(r10, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=@newqdisc={0x58, 0x28, 0x4ee4e6a52ff56541, 0x5001, 0xfffffdfc, {0x0, 0x0, 0x0, r12, {0x2}, {0x0, 0xfff1}, {0x4, 0xfff2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x0, 0xdb, 0x7ff, 0x2, 0x9, 0x6, 0x2, 0xfffffffb, 0xc00000}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40098}, 0x4000000)

844.40436ms ago: executing program 3 (id=17032):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
r5 = socket$unix(0x1, 0x1, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x14, 0x2, [@TCA_HHF_ADMIT_BYTES={0x8, 0x5, 0x1}, @TCA_HHF_EVICT_TIMEOUT={0x8, 0x6, 0x2}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
close(r4)
socket$nl_route(0x10, 0x3, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0xc369d000)
ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)

799.957721ms ago: executing program 1 (id=17033):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="0000000000004a641c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x1, 0x803, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c0000001000030425bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="0005000082180000140012800b00010062726964676500000400028008000a00", @ANYRES32=r5], 0x3c}, 0x1, 0x0, 0x0, 0x24000804}, 0x8000)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket(0x1, 0x803, 0x0)
r8 = socket$netlink(0x10, 0x3, 0x0)
r9 = socket(0x10, 0x803, 0x8)
sendmsg$IPVS_CMD_SET_INFO(r9, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x60, &(0x7f0000000300)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c00000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800b0001006772657461700000240002800800070064010100060003001008000008001500700f0d0008000700ac1414bb08000a00", @ANYRES32=r10], 0x5c}}, 0x40)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, <r11=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00030000000000001c0012800c0001006d6163766c616e000c000280080001000800000008000500", @ANYRES32=r11, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r11], 0x4c}}, 0x884)

730.372395ms ago: executing program 2 (id=17034):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
close(r1)
r2 = socket(0x28, 0x5, 0x0)
r3 = socket(0x28, 0x5, 0x0)
bind$vsock_stream(r3, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10)
listen(r3, 0x4)
connect$vsock_stream(r2, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r4}, &(0x7f0000000000), &(0x7f0000000080)=r1}, 0x20)
recvmsg$kcm(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x2000)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r5, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
listen(r2, 0x7697)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r6, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50)

582.784579ms ago: executing program 4 (id=17035):
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
r0 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r0, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x3, {0x42}}, 0x10)
r1 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r0, &(0x7f0000000100)=@name={0x1e, 0x2, 0x3, {{0x42}, 0x4}}, 0x10)
bind$tipc(r1, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r2)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r3, 0xc004743e, 0x110e22fff6)
ioctl$TUNSETOFFLOAD(r2, 0x400454d0, 0x12)
bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10)
r4 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r4, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10)
setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000140)={0x41, 0x1}, 0x10)
bind$tipc(r0, 0x0, 0x0)
close(r0)

570.826356ms ago: executing program 0 (id=17036):
r0 = socket$kcm(0x11, 0x3, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7001})
r2 = socket(0x400000000010, 0x3, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x104, 0xe}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0)
close(r5)
r6 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
r8 = socket(0x400000000010, 0x3, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000022c0)=@newtfilter={0x74, 0x2c, 0xd3f, 0x30bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0xc, 0xfff3}, {}, {0x8, 0x10}}, [@filter_kind_options=@f_basic={{0xa}, {0x44, 0x2, [@TCA_BASIC_POLICE={0x40, 0x4, [@TCA_POLICE_TBF={0x3c, 0x1, {0x7, 0x5, 0xfffffff8, 0x95, 0x6, {0x9, 0x2, 0x400, 0x1, 0x5b40}, {0x9e, 0x0, 0x3, 0x7fff, 0x2, 0xff}, 0x800, 0x0, 0x56db}}]}]}}]}, 0x74}, 0x1, 0x0, 0x0, 0x10}, 0x8080)
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r9 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r10=>0x0})
setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000600), 0x56)
sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r10, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0)

452.523602ms ago: executing program 2 (id=17037):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084)
sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=@newtfilter={0x64, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0xb, 0x8}, {}, {0x8, 0xc}}, [@filter_kind_options=@f_u32={{0x8}, {0x38, 0x2, [@TCA_U32_SEL={0x34, 0x5, {0x5, 0x6, 0x2, 0xfffd, 0x7, 0x9, 0x4, 0x8, [{0x0, 0x575e, 0x6, 0x9}, {0x1, 0xf, 0xfffffffe, 0xd5bd}]}}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000)
r7 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
r9 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0)
close(r9)
socket$unix(0x1, 0x5, 0x0)
ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}})
r10 = socket$kcm(0x11, 0x3, 0x0)
sendmsg$kcm(r10, &(0x7f0000002900)={&(0x7f0000000500)=@xdp={0x2c, 0x8, r8, 0x10c}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000380)="da", 0x5dc}], 0x1}, 0x4000880)

366.379489ms ago: executing program 0 (id=17038):
sendmmsg(0xffffffffffffffff, &(0x7f0000002b40), 0x0, 0x8000)
socketpair(0x26, 0x800, 0x6, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, 0x0, 0x0)
r1 = socket$inet_sctp(0x2, 0x5, 0x84)
close(r1)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, 0x0, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0)
close(r3)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
ioctl$TUNSETOFFLOAD(r3, 0xc004743e, 0x110e22fff7)
ioctl$TUNGETVNETLE(r3, 0x40047451, &(0x7f0000000180))
close(r3)

250.406275ms ago: executing program 4 (id=17039):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_buf(r0, 0x6, 0x8, 0x0, 0x0)
getsockopt$inet_tcp_int(r0, 0x6, 0x8, 0x0, &(0x7f0000001b80))
bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x1e, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xae, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1400000004000000040000000400010014000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\t'], 0x50)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000000900010073797a300000000040000000030a09020000000000000000020000000900010073797a30000000000900030073797a3200000000140004800800014000000000080002400000000014000000110001"], 0x88}}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000005c0)='cpu.stat\x00', 0x275a, 0x0)
preadv(r2, &(0x7f00000001c0)=[{&(0x7f0000000280)=""/93, 0x5d}], 0x1, 0xa, 0x6c8)
r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x1}, 0x28)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r3, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

179.606583ms ago: executing program 4 (id=17040):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084)
sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=@newtfilter={0x64, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0xb, 0x8}, {}, {0x8, 0xc}}, [@filter_kind_options=@f_u32={{0x8}, {0x38, 0x2, [@TCA_U32_SEL={0x34, 0x5, {0x5, 0x6, 0x2, 0xfffd, 0x7, 0x9, 0x4, 0x8, [{0x0, 0x575e, 0x6, 0x9}, {0x1, 0xf, 0xfffffffe, 0xd5bd}]}}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000)
r7 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
r9 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0)
close(r9)
socket$unix(0x1, 0x5, 0x0)
ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}})
sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x4040000)
r10 = socket$kcm(0x11, 0x3, 0x0)
sendmsg$kcm(r10, &(0x7f0000002900)={&(0x7f0000000500)=@xdp={0x2c, 0x8, r8, 0x10c}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000380)="da", 0x5dc}], 0x1}, 0x4000880)

152.689715ms ago: executing program 2 (id=17041):
socket(0x40000000015, 0x5, 0x0)
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000040)="5766b1b827f6003300", 0x10)
listen(r0, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f0000000200)=0x2, 0x43)
shutdown(r0, 0x0)
socket(0xf, 0x5, 0x2000000)
r1 = socket(0x28, 0x5, 0x0)
socket(0x10, 0x3, 0x0)
listen(r1, 0x4)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000002c0), 0x4)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x8, 0x400000f, 0x4, 0x0, 0x7fffffff}, 0x0, 0x0)
sendmsg$inet(r2, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x20000216}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f0000000300)="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", 0xcb3}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0)
recvmsg$unix(r3, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x2}, 0x40000300)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)

98.129046ms ago: executing program 0 (id=17042):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0600000004000000080000000b00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000400000000000000"], 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="6a0ac4ff000000027110ad00000000009500000000000000"], &(0x7f0000000480)='GPL\x00'}, 0x80)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {0xa}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xfffffffa}]}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x10}, 0x8800)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b70300000000ff80850000002d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000380)={r2}, 0xc)
socket$nl_xfrm(0x10, 0x3, 0x6)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, 0x0, 0x0)
r4 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x18, 0x140a, 0xd01, 0x70bd2b, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x9040}, 0xc010)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000800)=@updpolicy={0xb8, 0x14, 0xfd3649826d894c67, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0)
r6 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000240)={0x0, r6}, 0x8)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_int(r7, 0x1, 0xf, &(0x7f0000000180)=0x20800001, 0x4)
bind$inet6(r7, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0xf, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41000}, 0x94)

2.36836ms ago: executing program 4 (id=17043):
r0 = socket$kcm(0x2, 0x200000000000001, 0x106)
sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0xfc, 0x0}, 0x30004001)
socket$kcm(0x10, 0x2, 0x4)
syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
socket(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket(0x10, 0x803, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r1}, &(0x7f0000000240), &(0x7f0000000280)=r2}, 0x20)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000080)="b9ff05760a03076804268c989e14", 0x0, 0x10503, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)

1.675081ms ago: executing program 0 (id=17044):
r0 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0)
getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=@newlink={0x48, 0x10, 0x439, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, r1, 0x9801}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @gre={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @remote}, @IFLA_GRE_IGNORE_DF={0x5, 0x13, 0x1}, @IFLA_GRE_PMTUDISC={0x5}]}}}]}, 0x48}}, 0x0)
r4 = socket$igmp(0x2, 0x3, 0x2)
r5 = socket(0x10, 0x803, 0x2)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r5)
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x12, 0x4, 0x4, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x50)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$NBD_CMD_CONNECT(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000000100000008000100400000000c000200700f0000000000000c00060003000000000000000a000a00272d5d29212b0000140007"], 0x6c}}, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14)
sendmsg$inet(r4, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2, 0x4e24, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r8, @dev={0xac, 0x14, 0x14, 0x3c}, @dev={0xac, 0x14, 0x14, 0x12}}}}], 0x20}, 0x0)

0s ago: executing program 3 (id=17045):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94)
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000040)='GPL\x00'}, 0x94)
syz_emit_ethernet(0x3e, &(0x7f0000000000)={@random="4be88fa3027b", @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x8, 0x3a, 0x1, @local, @loopback, {[], @echo_request={0x80, 0x0, 0x0, 0x71, 0x7}}}}}}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@local, 0x3, 0x1, 0x0, 0x8}, 0x0)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3)
ioctl$FS_IOC_GETFSLABEL(r1, 0x400452c8, &(0x7f0000000100))
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="a013000040000701fcffffff00000100017c0000040042800c00018006000600801c00007c13028078131480731315806f1301"], 0x13a0}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000)
r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000ac0), 0xffffffffffffffff)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$ETHTOOL_MSG_PAUSE_SET(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000780)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100d2f2d16eb32902ce2f0000000c00018008"], 0x20}}, 0x0)
sendmsg$ETHTOOL_MSG_FEATURES_SET(r3, &(0x7f0000000ac0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000780)={0x2cc, r4, 0x8, 0x70bd26, 0x25dfdbfe, {}, [@ETHTOOL_A_FEATURES_WANTED={0x2b8, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x154, 0x3, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '/\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '/#\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'GPL\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}]}, {0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x11, 0x2, '\'{[[[!!${]*)\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '+\xcc%\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '&-\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6c48}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x800}]}, {0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x800}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_NAME={0x19, 0x2, '}-\\}T+(]([-\\-($/{$!&\x00'}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffffd}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '\xaa\xaa\xaa\xaa\xaa'}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '\xaa\xaa\xaa\xaa\xaa'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '\xaa\xaa\xaa\xaa\xaa'}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xd7}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}]}]}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x3}, @ETHTOOL_A_BITSET_VALUE={0xe1, 0x4, "a3e577f878981792f4472a180430b3fca585302be9adcdce3791c24caa901df117f515e07780a59688d8c6f9c3a4d9584ad24a22202e333232d815a59c402a3479f3f64633909cdf309ae2d9c7ad09088626f7a4d91783de956a88e0a802c5eb74fb9c8cf885aad64fd66bee2b8581633449dc8314ccaa52340c2a83168b078ce15b92c1ed6785ad6e122bad92d7da597433083010089049afc54a93f4f23add184c0e6b91af2c385b225b4137920a2cc6810c9918e2a65be7f59dc5cd9eb18e187e0b6ca8c8aa253348a3c9de1ae6d6c71f2019a7f4eb6300bcddbcef"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x9}, @ETHTOOL_A_BITSET_MASK={0x2b, 0x5, "813f449bbd8f96fac5caf0f3240f60c328df568be2e3818ced8d5b0c59d2901a36a0f723698803"}, @ETHTOOL_A_BITSET_BITS={0x40, 0x3, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '\xef=]\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '[^$\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x559}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}]}]}, 0x2cc}, 0x1, 0x0, 0x0, 0x4008044}, 0x0)
r6 = socket(0x40000000015, 0x5, 0x0)
bind$inet6(r6, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendto$inet6(r6, 0x0, 0x100000, 0x0, &(0x7f0000000040)={0xa, 0x1, 0xfffffffc, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xe79}, 0x1c)
sendto$inet(r2, &(0x7f0000000100)="1ce0", 0xffeb, 0x0, &(0x7f0000001100)={0x2, 0x0, @private}, 0x10)
recvmmsg(r2, &(0x7f0000003ac0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40000120, 0x0)

kernel console output (not intermixed with test programs):

tover after parsing attributes in process `syz.4.15156'.
[  919.547003][ T1010] batman_adv: batadv2: IGMP Querier appeared
[  920.344433][ T8127] netlink: 24 bytes leftover after parsing attributes in process `syz.0.15167'.
[  920.515244][ T8130] netlink: 4 bytes leftover after parsing attributes in process `syz.0.15167'.
[  922.031399][ T8142] netlink: 80 bytes leftover after parsing attributes in process `syz.0.15172'.
[  922.072906][ T8142] netlink: 8 bytes leftover after parsing attributes in process `syz.0.15172'.
[  922.140797][ T8144] netlink: 28 bytes leftover after parsing attributes in process `syz.2.15173'.
[  922.182881][ T8146] netlink: 'syz.3.15174': attribute type 2 has an invalid length.
[  922.191203][ T8146] netlink: 'syz.3.15174': attribute type 3 has an invalid length.
[  922.848548][ T8186] netlink: 20 bytes leftover after parsing attributes in process `syz.1.15186'.
[  923.032068][ T8161] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  923.581066][ T8225] netlink: 'syz.4.15198': attribute type 1 has an invalid length.
[  923.627052][ T8225] 8021q: adding VLAN 0 to HW filter on device bond15
[  923.675493][ T8225] bond15: (slave veth19): Enslaving as an active interface with a down link
[  923.717221][ T8225] netlink: 'syz.4.15198': attribute type 10 has an invalid length.
[  923.725444][ T8225] netlink: 40 bytes leftover after parsing attributes in process `syz.4.15198'.
[  923.738065][ T8225] 
: entered promiscuous mode
[  923.750383][ T8225] bond13: (slave 
): Releasing active interface
[  923.941700][ T8237] syzkaller1: entered promiscuous mode
[  923.947881][ T8237] syzkaller1: entered allmulticast mode
[  924.111299][ T8251] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode
[  924.124521][ T8250] sock: sock_set_timeout: `syz.3.15202' (pid 8250) tries to set negative timeout
[  924.235615][ T8213] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  924.334607][ T8261] netlink: 16 bytes leftover after parsing attributes in process `syz.0.15204'.
[  924.411742][ T8265] veth0_to_hsr: Caught tx_queue_len zero misconfig
[  924.422677][ T8265] netlink: 44 bytes leftover after parsing attributes in process `syz.2.15207'.
[  924.674318][ T8277] netlink: 12 bytes leftover after parsing attributes in process `syz.3.15211'.
[  925.069573][ T8281] virt_wifi0 speed is unknown, defaulting to 1000
[  925.110212][ T8291] tun0: tun_chr_ioctl cmd 1074812118
[  925.132866][ T8291] tun0: tun_chr_ioctl cmd 1074033169
[  925.215001][ T8296] ieee802154 phy0 wpan0: encryption failed: -126
[  925.285906][ T8303] netlink: 12 bytes leftover after parsing attributes in process `syz.0.15220'.
[  925.310165][ T8299] bond21: option ad_user_port_key: invalid value (65535)
[  925.326559][ T8299] bond21: option ad_user_port_key: allowed values 0 - 1023
[  925.341026][ T8299] bond21 (unregistering): Released all slaves
[  925.709649][ T8320] syzkaller0: entered promiscuous mode
[  925.715272][ T8320] syzkaller0: entered allmulticast mode
[  925.726365][ T8320] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  925.734831][ T8320] tipc: Resetting bearer <eth:syzkaller0>
[  925.786006][ T8320] tipc: Disabling bearer <eth:syzkaller0>
[  925.903718][ T8325] netlink: 8 bytes leftover after parsing attributes in process `syz.4.15227'.
[  925.960685][ T8327] Bluetooth: hci0: Opcode 0x0401 failed: -22
[  926.488245][ T8348] openvswitch: netlink: Message has 512 unknown bytes.
[  927.035292][ T8380] geneve5: entered promiscuous mode
[  927.043223][T28073] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  927.045997][ T8380] __nla_validate_parse: 5 callbacks suppressed
[  927.046013][ T8380] netlink: 104 bytes leftover after parsing attributes in process `syz.4.15248'.
[  927.064734][T28073] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  927.109362][T28073] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  927.126619][T28073] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  927.300933][ T8355] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  927.360568][ T8392] netlink: 12 bytes leftover after parsing attributes in process `syz.2.15250'.
[  928.085610][ T8412] syzkaller1: entered promiscuous mode
[  928.106814][ T8412] syzkaller1: entered allmulticast mode
[  928.121691][ T8414] 
: left promiscuous mode
[  928.145555][ T8414] mac80211_hwsim hwsim2 wlan0: left allmulticast mode
[  928.160851][ T8414] gre1: left allmulticast mode
[  928.166817][ T8414] erspan1: left allmulticast mode
[  928.172488][ T8414] ip6gre1: left allmulticast mode
[  928.180474][ T8414] bond4: left allmulticast mode
[  928.186119][ T8414] ip6gre3: left allmulticast mode
[  928.192833][ T8414] vlan2: left allmulticast mode
[  928.198164][ T8414] bond0: left allmulticast mode
[  928.203238][ T8414] bond_slave_0: left allmulticast mode
[  928.209248][ T8414] bond_slave_1: left allmulticast mode
[  928.215306][ T8414] ip6tnl7: left allmulticast mode
[  928.223570][ T8414] mac80211_hwsim hwsim3 syzkaller0: left promiscuous mode
[  928.231412][ T8414] mac80211_hwsim hwsim3 syzkaller0: left allmulticast mode
[  928.240632][ T8414] xfrm1: left allmulticast mode
[  928.247161][ T8414] bridge6: left allmulticast mode
[  928.293524][ T8414] geneve5: left promiscuous mode
[  928.356105][T28073] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  928.365000][T28073] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  928.397340][T28073] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  928.418861][T28073] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  928.667490][ T8428] erspan0: left promiscuous mode
[  928.727893][ T8428] bond15: (slave syz_tun): unknown ethtool speed (143) for port 1 (set it to 0)
[  928.737032][ T8428] bond15: (slave syz_tun): speed changed to 0 on port 1
[  928.809046][ T8428] 8021q: adding VLAN 0 to HW filter on device team0
[  928.967752][ T8428] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  929.399282][ T8435] netlink: 'syz.4.15264': attribute type 29 has an invalid length.
[  930.667347][ T8469] xt_policy: output policy not valid in PREROUTING and INPUT
[  931.277693][ T8473] tipc: Resetting bearer <eth:syzkaller0>
[  931.284089][ T8473] syzkaller0: left promiscuous mode
[  931.292940][ T8473] syzkaller0: left allmulticast mode
[  931.327434][ T8473] bond8: left promiscuous mode
[  931.332422][ T8473] erspan2: left promiscuous mode
[  931.348195][ T8473] bond8: left allmulticast mode
[  931.379783][ T8473] erspan2: left allmulticast mode
[  931.395766][ T8473] bond9: left promiscuous mode
[  931.443306][ T8473] bond11: left promiscuous mode
[  931.453560][ T8473] bond11: left allmulticast mode
[  931.462870][ T8473] bridge10: left promiscuous mode
[  931.473822][ T8473] bridge10: left allmulticast mode
[  931.484902][ T8473] bond12: left promiscuous mode
[  931.508731][ T1319] ieee802154 phy0 wpan0: encryption failed: -22
[  931.526918][ T8473] ipvlan3: left allmulticast mode
[  931.534159][ T8473] bond13: left allmulticast mode
[  931.583142][ T8479] syzkaller0: entered promiscuous mode
[  931.694276][ T8479] syzkaller0: entered allmulticast mode
[  931.738121][ T8488] bond16: entered promiscuous mode
[  932.202162][ T8505] xt_CT: You must specify a L4 protocol and not use inversions on it
[  932.202975][ T8505] netlink: 'syz.2.15287': attribute type 21 has an invalid length.
[  932.422848][ T8516] netlink: 'syz.2.15293': attribute type 1 has an invalid length.
[  932.465938][ T8516] 8021q: adding VLAN 0 to HW filter on device bond21
[  932.501127][ T8516] bond21: (slave veth33): Enslaving as an active interface with a down link
[  932.528847][ T8516] erspan0: left promiscuous mode
[  932.544508][ T8516] 8021q: adding VLAN 0 to HW filter on device team0
[  932.552095][ T8516] dummy0: left promiscuous mode
[  932.560363][ T8516] 8021q: adding VLAN 0 to HW filter on device 
60ªX¹¦À
[  932.583990][ T8516] batman_adv: 
60ªX¹¦À: Interface activated: batadv_slave_0
[  932.593297][ T8516] batman_adv: 
60ªX¹¦À: Interface activated: batadv_slave_1
[  932.604459][ T8516] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  932.615075][ T8516] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  932.632393][ T8516] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  932.699671][ T8519] 8021q: adding VLAN 0 to HW filter on device batadv2
[  932.709401][ T8519] bond21: (slave batadv2): making interface the new active one
[  932.720350][ T8519] batadv2: entered promiscuous mode
[  932.725999][ T8519] bond21: (slave batadv2): Enslaving as an active interface with an up link
[  933.076111][ T8536] batman_adv: 
60ªX¹¦À: Interface deactivated: batadv_slave_0
[  933.094157][ T8536] batman_adv: 
60ªX¹¦À: Interface deactivated: batadv_slave_1
[  933.129856][ T8536] vlan0: left promiscuous mode
[  933.139295][ T8536] bond0: left promiscuous mode
[  933.144709][ T8536] macvlan2: left promiscuous mode
[  933.150862][ T8536] macvlan2: left allmulticast mode
[  933.158703][ T8536] macsec1: left allmulticast mode
[  933.189169][ T8536] +
: left promiscuous mode
[  933.193867][ T8536] +
: left allmulticast mode
[  933.201594][ T8536] bond5: left promiscuous mode
[  933.207163][ T8536] bridge4: left promiscuous mode
[  933.212383][ T8536] bridge4: left allmulticast mode
[  933.218296][ T8536] bridge5: left promiscuous mode
[  933.223473][ T8536] bridge5: left allmulticast mode
[  933.228932][ T8536] bond10: left promiscuous mode
[  933.233941][ T8536] veth1: left promiscuous mode
[  933.241001][ T8536] bond12: left promiscuous mode
[  933.245898][ T8536] ipip0: left promiscuous mode
[  933.255827][ T8536] gretap3: left allmulticast mode
[  933.278920][ T8536] bond15: left promiscuous mode
[  933.283906][ T8536] veth21: left promiscuous mode
[  933.324971][ T8536] bond20: left allmulticast mode
[  933.331116][ T8536] geneve6: left promiscuous mode
[  933.361916][   T55] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  933.376783][   T55] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 34443 - 0
[  933.402512][   T55] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  933.430714][   T55] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 34443 - 0
[  933.468510][   T55] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  933.496996][   T55] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 34443 - 0
[  933.521045][   T55] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  933.539369][   T55] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 34443 - 0
[  934.108776][ T8576] netlink: 12 bytes leftover after parsing attributes in process `syz.2.15311'.
[  934.879373][ T8581] virt_wifi0 speed is unknown, defaulting to 1000
[  935.407025][ T8596] erspan0: left promiscuous mode
[  935.457841][ T8606] netlink: 192 bytes leftover after parsing attributes in process `syz.0.15315'.
[  935.467522][ T8606] netlink: 8 bytes leftover after parsing attributes in process `syz.0.15315'.
[  935.485871][ T8596] 8021q: adding VLAN 0 to HW filter on device bond0
[  935.518641][ T8596] 8021q: adding VLAN 0 to HW filter on device batadv0
[  935.575855][ T8596] veth1_to_batadv: left promiscuous mode
[  935.584075][ T8596] batman_adv: batadv0: Interface activated: batadv_slave_1
[  935.599833][ T8596] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  935.615664][ T8596] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  935.738830][ T1010] bridge0: port 1(bridge_slave_0) entered blocking state
[  935.746034][ T1010] bridge0: port 1(bridge_slave_0) entered listening state
[  935.767468][ T1010] bridge0: port 2(bridge_slave_1) entered blocking state
[  935.774681][ T1010] bridge0: port 2(bridge_slave_1) entered listening state
[  935.919071][ T8602] virt_wifi0 speed is unknown, defaulting to 1000
[  936.450350][ T8640] netlink: 8 bytes leftover after parsing attributes in process `syz.4.15321'.
[  936.880596][ T8660] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN
[  937.057242][ T8673] netlink: 'syz.2.15328': attribute type 11 has an invalid length.
[  937.125989][ T8673] 8021q: adding VLAN 0 to HW filter on device team0
[  937.137688][ T8673] 8021q: adding VLAN 0 to HW filter on device 
60ªX¹¦À
[  937.171996][ T8673] batman_adv: 
60ªX¹¦À: Interface activated: batadv_slave_0
[  937.183385][ T8673] batman_adv: 
60ªX¹¦À: Interface activated: batadv_slave_1
[  937.213792][ T8673] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  937.225004][ T8673] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  937.240818][ T8673] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  937.539927][ T8689] netlink: 'syz.1.15330': attribute type 1 has an invalid length.
[  937.579616][ T8694] netlink: 52 bytes leftover after parsing attributes in process `syz.3.15334'.
[  937.600082][ T8694] netlink: 76 bytes leftover after parsing attributes in process `syz.3.15334'.
[  937.614712][ T8694] netlink: 52 bytes leftover after parsing attributes in process `syz.3.15334'.
[  937.984807][ T8708] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  938.002512][ T8708] syzkaller0: entered promiscuous mode
[  938.011952][ T8708] syzkaller0: entered allmulticast mode
[  938.042420][ T8708] tipc: Resetting bearer <eth:syzkaller0>
[  938.100495][ T8707] tipc: Resetting bearer <eth:syzkaller0>
[  938.169350][ T8707] tipc: Disabling bearer <eth:syzkaller0>
[  938.235817][ T8716] netlink: 'syz.4.15342': attribute type 4 has an invalid length.
[  938.272294][ T8716] netlink: 'syz.4.15342': attribute type 4 has an invalid length.
[  938.440588][ T8725] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode
[  938.455038][ T8725] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode
[  938.614352][ T8732] geneve6: entered promiscuous mode
[  938.622351][T28084] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  938.647649][T28084] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  938.666149][T28084] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  938.722033][T28084] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  939.454658][ T8754] netlink: 'syz.0.15360': attribute type 1 has an invalid length.
[  939.562087][ T8754] 8021q: adding VLAN 0 to HW filter on device bond16
[  939.653544][ T8759] netlink: 24 bytes leftover after parsing attributes in process `syz.4.15361'.
[  939.672431][ T8754] netlink: 'syz.0.15360': attribute type 10 has an invalid length.
[  939.695629][ T8754] netlink: 40 bytes leftover after parsing attributes in process `syz.0.15360'.
[  939.719167][ T8756] bond16: (slave veth21): Enslaving as an active interface with a down link
[  939.731420][ T8761] netlink: 'syz.3.15362': attribute type 11 has an invalid length.
[  939.740112][ T8757] bond16: (slave dummy0): making interface the new active one
[  939.758891][ T8757] bond16: (slave dummy0): Enslaving as an active interface with an up link
[  939.806658][ T8754] dummy0: entered promiscuous mode
[  939.814574][ T8754] bond16: (slave dummy0): Releasing active interface
[  939.920602][ T8763] 8021q: adding VLAN 0 to HW filter on device bond0
[  939.929518][ T8763] 8021q: adding VLAN 0 to HW filter on device team0
[  939.940087][ T1643] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  939.960068][ T8763] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  939.993922][ T8763] bridge_slave_0: entered promiscuous mode
[  940.032981][ T8763] batman_adv: netdevsim0: Interface activated: batadv_slave_1
[  940.053193][ T8763] 0·: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  940.076356][ T8763] 0·: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  940.107382][ T8763] A link change request failed with some changes committed already. Interface ªªªªª! may have been left with an inconsistent configuration, please check.
[  940.125926][ T8759] netlink: 16 bytes leftover after parsing attributes in process `syz.4.15361'.
[  940.556799][ T3915] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  940.849436][T28084] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  941.907209][T28084] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  941.916948][T28084] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  942.493394][ T8813] netlink: 180 bytes leftover after parsing attributes in process `syz.2.15378'.
[  942.497796][ T3915] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  942.807703][ T8823] netlink: 8 bytes leftover after parsing attributes in process `syz.2.15382'.
[  943.213832][ T8775] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  943.401101][ T8843] netlink: 'syz.3.15390': attribute type 4 has an invalid length.
[  943.408522][ T8846] netlink: 24 bytes leftover after parsing attributes in process `syz.2.15393'.
[  943.452485][ T8848] netlink: 'syz.3.15390': attribute type 4 has an invalid length.
[  944.104053][ T8884] netlink: 12 bytes leftover after parsing attributes in process `syz.4.15402'.
[  944.836285][ T8914] netlink: 12 bytes leftover after parsing attributes in process `syz.3.15409'.
[  945.016001][ T8927] netlink: 1319 bytes leftover after parsing attributes in process `syz.2.15414'.
[  945.322219][ T8936] netlink: 40 bytes leftover after parsing attributes in process `syz.2.15428'.
[  945.389818][ T8941] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  945.420274][ T8943] IPv6: NLM_F_CREATE should be specified when creating new route
[  945.459485][ T8941] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  945.538690][ T8948] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  945.687568][ T8953] netlink: 'syz.0.15423': attribute type 1 has an invalid length.
[  945.732781][ T8953] 8021q: adding VLAN 0 to HW filter on device bond17
[  945.741482][ T8955] bond17: down delay (1) is not a multiple of miimon (100), value rounded to 0 ms
[  945.753878][ T8955] bond17: option ad_user_port_key: mode dependency failed, not supported in mode balance-alb(6)
[  945.785732][ T8953] bond17: (slave ip6gretap1): making interface the new active one
[  945.797003][ T8953] bond17: (slave ip6gretap1): Enslaving as an active interface with an up link
[  946.146791][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  946.166176][ T8965] syzkaller0: entered promiscuous mode
[  946.178275][ T8965] syzkaller0: entered allmulticast mode
[  946.329742][ T8973] netlink: 12 bytes leftover after parsing attributes in process `syz.3.15433'.
[  946.532780][ T8983] netlink: 1319 bytes leftover after parsing attributes in process `syz.3.15435'.
[  946.572152][ T8985] netlink: 12 bytes leftover after parsing attributes in process `syz.4.15436'.
[  947.473403][ T9019] netlink: 'syz.4.15446': attribute type 1 has an invalid length.
[  947.495043][ T9019] netlink: 'syz.4.15446': attribute type 2 has an invalid length.
[  947.533763][ T9024] netlink: 12 bytes leftover after parsing attributes in process `syz.2.15447'.
[  948.517947][ T9076] virt_wifi0 speed is unknown, defaulting to 1000
[  949.070950][ T9101] netlink: 24 bytes leftover after parsing attributes in process `syz.2.15464'.
[  949.117122][T10600] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  949.147814][ T9104] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  949.293283][ T9108] syzkaller0: entered promiscuous mode
[  949.304213][ T9108] syzkaller0: entered allmulticast mode
[  949.397211][T10599] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  949.848736][ T9140] netlink: 4768 bytes leftover after parsing attributes in process `syz.2.15468'.
[  949.859684][ T9140] netlink: 4768 bytes leftover after parsing attributes in process `syz.2.15468'.
[  950.252625][ T9151] netlink: 'syz.0.15472': attribute type 11 has an invalid length.
[  953.388901][ T9174] xt_CT: No such helper "syz1"
[  954.313302][ T9214] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  954.359756][ T9220] netlink: 12 bytes leftover after parsing attributes in process `syz.1.15487'.
[  954.411626][ T9220] 8021q: adding VLAN 0 to HW filter on device bond11
[  954.490691][ T9228] netlink: 'syz.2.15492': attribute type 39 has an invalid length.
[  954.547562][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  954.612467][ T9232] netlink: 'syz.1.15496': attribute type 1 has an invalid length.
[  954.658027][ T9232] bond12: entered promiscuous mode
[  954.665724][ T9232] 8021q: adding VLAN 0 to HW filter on device bond12
[  954.760864][ T9232] bond12: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  954.773985][ T9232] bond12: (slave ipvlan2): The slave device specified does not support setting the MAC address
[  954.785573][ T9232] bond12: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode
[  954.811810][ T9243] netlink: 20 bytes leftover after parsing attributes in process `syz.4.15498'.
[  954.835416][ T9243] netlink: 20 bytes leftover after parsing attributes in process `syz.4.15498'.
[  954.852716][ T9245] IPv6: sit5: Disabled Multicast RS
[  954.953840][ T9237] bond12: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  955.017273][ T9237] bond12: (slave ipvlan2): The slave device specified does not support setting the MAC address
[  955.200796][ T9261] netlink: 12 bytes leftover after parsing attributes in process `syz.4.15506'.
[  955.310282][ T9263] virt_wifi0 speed is unknown, defaulting to 1000
[  955.834464][ T9290] sctp: [Deprecated]: syz.3.15515 (pid 9290) Use of struct sctp_assoc_value in delayed_ack socket option.
[  955.834464][ T9290] Use struct sctp_sack_info instead
[  955.914991][ T9293] syzkaller0: entered promiscuous mode
[  955.921635][ T9293] syzkaller0: entered allmulticast mode
[  956.502432][ T9325] netlink: 12 bytes leftover after parsing attributes in process `syz.4.15526'.
[  958.369980][ T9372] tipc: Failed to remove unknown binding: 66,0,0/2886997007:869141385/869141387
[  958.379649][ T9372] tipc: Failed to remove unknown binding: 66,0,0/2886997007:869141385/869141386
[  958.390225][ T9372] tipc: Failed to remove unknown binding: 66,0,0/2886997007:869141385/869141387
[  958.405354][ T9372] tipc: Failed to remove unknown binding: 66,0,0/2886997007:869141385/869141386
[  959.389373][ T9320] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  959.641036][ T9388] netlink: 24 bytes leftover after parsing attributes in process `syz.3.15539'.
[  959.806691][ T9391] netlink: 4 bytes leftover after parsing attributes in process `syz.3.15539'.
[  960.385970][ T9395] netlink: 56 bytes leftover after parsing attributes in process `syz.2.15541'.
[  960.493897][ T9400] netlink: 4 bytes leftover after parsing attributes in process `syz.1.15543'.
[  960.561296][ T9402] netlink: 14 bytes leftover after parsing attributes in process `syz.2.15544'.
[  960.581645][ T9408] netlink: 4 bytes leftover after parsing attributes in process `syz.1.15543'.
[  960.610391][ T9400] team1: entered promiscuous mode
[  960.615618][ T9400] team1: entered allmulticast mode
[  960.621699][ T9400] 8021q: adding VLAN 0 to HW filter on device team1
[  960.687971][ T9408] team2: entered promiscuous mode
[  960.693350][ T9408] team2: entered allmulticast mode
[  960.702116][ T9408] 8021q: adding VLAN 0 to HW filter on device team2
[  960.918621][T10599] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  961.034644][ T9424] tipc: Failed to remove unknown binding: 66,0,0/1073741825:3721068661/3721068663
[  961.056146][ T9424] tipc: Failed to remove unknown binding: 66,0,0/1073741825:3721068661/3721068662
[  961.080508][ T9424] tipc: Failed to remove unknown binding: 66,0,0/1073741825:3721068661/3721068663
[  961.098947][ T9424] tipc: Failed to remove unknown binding: 66,0,0/1073741825:3721068661/3721068662
[  961.988972][T10599] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  962.091654][ T9454] RDS: rds_bind could not find a transport for ::fcff:ffff:8000:0:20:0, load rds_tcp or rds_rdma?
[  962.928506][ T9469] netlink: 24 bytes leftover after parsing attributes in process `syz.2.15566'.
[  962.955425][ T9467] netlink: 128 bytes leftover after parsing attributes in process `syz.3.15565'.
[  962.978160][ T9467] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  963.199960][ T9478] netlink: 'syz.4.15569': attribute type 4 has an invalid length.
[  963.273342][ T9479] netlink: 'syz.4.15569': attribute type 4 has an invalid length.
[  963.464357][ T9488] netlink: 192 bytes leftover after parsing attributes in process `syz.2.15571'.
[  963.489628][ T9484] virt_wifi0 speed is unknown, defaulting to 1000
[  963.512601][ T9488] netlink: 8 bytes leftover after parsing attributes in process `syz.2.15571'.
[  964.421054][ T9519] lo: Caught tx_queue_len zero misconfig
[  964.447299][ T9519] sch_tbf: burst 1023 is lower than device lo mtu (1294) !
[  965.689554][ T9541] syzkaller0: entered promiscuous mode
[  965.695217][ T9541] syzkaller0: entered allmulticast mode
[  966.011441][ T9537] netlink: 180 bytes leftover after parsing attributes in process `syz.1.15584'.
[  966.069607][    C1] bridge0: port 2(bridge_slave_1) entered learning state
[  966.078647][    C1] bridge0: port 1(bridge_slave_0) entered learning state
[  966.514788][ T9575] SET target dimension over the limit!
[  966.919829][ T9587] mac80211_hwsim hwsim3 syzkaller0: left promiscuous mode
[  966.950851][ T9587] mac80211_hwsim hwsim3 syzkaller0: left allmulticast mode
[  967.111869][ T9591] syzkaller0: entered promiscuous mode
[  967.123819][ T9594] netlink: 8 bytes leftover after parsing attributes in process `syz.4.15597'.
[  967.126571][ T9591] syzkaller0: entered allmulticast mode
[  967.216999][ T9596] netlink: 'syz.3.15598': attribute type 1 has an invalid length.
[  967.333685][ T9599] netlink: 200 bytes leftover after parsing attributes in process `syz.2.15601'.
[  967.388468][ T9603] netlink: 64 bytes leftover after parsing attributes in process `syz.1.15599'.
[  968.020491][ T9622] veth1_to_hsr: Caught tx_queue_len zero misconfig
[  968.498774][ T9643] netlink: 'syz.0.15615': attribute type 4 has an invalid length.
[  968.522245][ T9643] netlink: 'syz.0.15615': attribute type 4 has an invalid length.
[  968.564900][ T9645] netlink: 'syz.3.15617': attribute type 13 has an invalid length.
[  968.619073][ T1643] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  968.647700][ T9647] netlink: 'syz.4.15616': attribute type 11 has an invalid length.
[  968.753555][ T9648] syzkaller0: left promiscuous mode
[  968.765997][ T9648] syzkaller0: left allmulticast mode
[  968.864632][ T9654] syzkaller0: entered promiscuous mode
[  968.870536][ T9654] syzkaller0: entered allmulticast mode
[  969.066739][ T1643] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  969.211566][ T9667] netlink: 'syz.1.15624': attribute type 83 has an invalid length.
[  969.561631][ T9681] netlink: 4 bytes leftover after parsing attributes in process `syz.2.15629'.
[  969.875590][ T9688] syzkaller0: entered promiscuous mode
[  969.882798][ T9688] syzkaller0: entered allmulticast mode
[  970.546794][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  972.510794][ T9718] netlink: 8 bytes leftover after parsing attributes in process `syz.3.15637'.
[  972.521567][ T9726] netlink: 48 bytes leftover after parsing attributes in process `syz.4.15640'.
[  972.734630][ T9744] syzkaller0: Caught tx_queue_len zero misconfig
[  972.772081][ T9744] syzkaller0: entered promiscuous mode
[  972.780792][ T9744] syzkaller0: entered allmulticast mode
[  972.904118][ T9749] netlink: 'syz.0.15648': attribute type 1 has an invalid length.
[  972.906638][ T9751] netlink: 'syz.3.15649': attribute type 11 has an invalid length.
[  973.025059][ T9749] bond18: (slave bridge18): making interface the new active one
[  973.034829][ T9749] bond18: (slave bridge18): Enslaving as an active interface with an up link
[  973.083143][ T9749] netlink: 44 bytes leftover after parsing attributes in process `syz.0.15648'.
[  973.111213][ T9749] bond18: entered promiscuous mode
[  973.124774][ T9749] bridge18: entered promiscuous mode
[  973.137249][ T9749] bond18: entered allmulticast mode
[  973.142613][ T9749] bridge18: entered allmulticast mode
[  973.159696][ T9749] 8021q: adding VLAN 0 to HW filter on device bond18
[  973.301490][ T9764] netlink: 'syz.0.15653': attribute type 1 has an invalid length.
[  973.438974][ T9768] 8021q: adding VLAN 0 to HW filter on device bond20
[  973.449031][ T9768] bond19: (slave bond20): making interface the new active one
[  973.464429][ T9768] bond19: (slave bond20): Enslaving as an active interface with an up link
[  973.493633][ T9771] netlink: 28 bytes leftover after parsing attributes in process `syz.0.15653'.
[  973.554983][ T9764] bond19: (slave gretap3): Enslaving as a backup interface with an up link
[  973.604041][ T9771] 8021q: adding VLAN 0 to HW filter on device bond19
[  973.928826][T28068] bond0: (slave 
4
5�ÿ): link status definitely up, 10000 Mbps full duplex
[  973.942019][T28068] bond0: active interface up!
[  974.062502][ T9787] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode
[  974.089014][ T9787] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode
[  974.230469][ T9794] netlink: 44 bytes leftover after parsing attributes in process `syz.3.15661'.
[  974.286922][ T9795] virt_wifi0 speed is unknown, defaulting to 1000
[  974.906105][ T9818] netlink: 12 bytes leftover after parsing attributes in process `syz.0.15670'.
[  975.627650][ T9848] virt_wifi0 speed is unknown, defaulting to 1000
[  975.675838][ T9850] virt_wifi0 speed is unknown, defaulting to 1000
[  975.872922][ T9860] team0: Port device team_slave_0 removed
[  975.942024][ T9860] team0: Port device team_slave_1 removed
[  975.963808][ T9860] batman_adv: 
60ªX¹¦À: Interface deactivated: batadv_slave_0
[  975.979551][ T9860] batman_adv: 
60ªX¹¦À: Removing interface: batadv_slave_0
[  976.018964][ T9860] batman_adv: 
60ªX¹¦À: Interface deactivated: batadv_slave_1
[  976.029905][ T9860] batman_adv: 
60ªX¹¦À: Removing interface: batadv_slave_1
[  976.045246][ T9860] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  977.385551][ T9900] syzkaller0: entered promiscuous mode
[  977.392651][ T9900] syzkaller0: entered allmulticast mode
[  977.833893][ T9915] netlink: 272 bytes leftover after parsing attributes in process `syz.0.15700'.
[  978.973248][ T9936] netlink: 'syz.2.15707': attribute type 3 has an invalid length.
[  978.987730][ T9936] netlink: 'syz.2.15707': attribute type 3 has an invalid length.
[  979.410879][ T9960] siw: device registration error -23
[  979.693580][ T9883] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  979.864563][ T9966] netlink: 24 bytes leftover after parsing attributes in process `syz.0.15722'.
[  979.916226][ T9966] netlink: 24 bytes leftover after parsing attributes in process `syz.0.15722'.
[  980.080604][ T9973] virt_wifi0 speed is unknown, defaulting to 1000
[  980.305027][ T9980] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  980.808286][T10003] syzkaller0: entered promiscuous mode
[  980.813892][T10003] syzkaller0: entered allmulticast mode
[  980.906716][T10009] smbdirect: ib_dev[syz0] removed
[  981.145584][T10019] netlink: 4 bytes leftover after parsing attributes in process `syz.0.15742'.
[  981.170592][T10019] team1: entered promiscuous mode
[  981.175707][T10019] team1: entered allmulticast mode
[  981.181529][T10019] 8021q: adding VLAN 0 to HW filter on device team1
[  981.250955][T10024] syzkaller0: entered promiscuous mode
[  981.257089][T10024] syzkaller0: entered allmulticast mode
[  981.650101][T10042] netlink: 64 bytes leftover after parsing attributes in process `syz.0.15749'.
[  981.698178][T10042] syzkaller1: entered promiscuous mode
[  981.717935][T10042] syzkaller1: entered allmulticast mode
[  984.227384][T10026] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  985.092806][T10093] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  985.105690][T10095] netlink: 'syz.0.15762': attribute type 39 has an invalid length.
[  985.132536][T10092] tipc: Disabling bearer <eth:syzkaller0>
[  985.495223][T10116] syzkaller0: entered promiscuous mode
[  985.501186][T10116] syzkaller0: entered allmulticast mode
[  985.600848][T10126] netlink: 8 bytes leftover after parsing attributes in process `syz.4.15771'.
[  985.615366][T10126] bond0: option arp_interval: invalid value (18446744072967730723)
[  985.627038][T10126] bond0: option arp_interval: allowed values 0 - 2147483647
[  985.910744][T10146] netlink: 'syz.4.15779': attribute type 1 has an invalid length.
[  985.966712][T10144] syzkaller0: entered promiscuous mode
[  985.972426][T10144] syzkaller0: entered allmulticast mode
[  986.000565][T10146] bond17: (slave veth23): Enslaving as an active interface with a down link
[  986.043972][T10146] bond17: (slave vlan5): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  988.126546][T10097] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  988.331032][T10171] xt_CT: You must specify a L4 protocol and not use inversions on it
[  989.111116][T10175] batman_adv: netdevsim0: Interface deactivated: batadv_slave_1
[  989.138893][T10175] tipc: Resetting bearer <eth:syzkaller0>
[  989.327649][T10205] block nbd11: server does not support multiple connections per device.
[  989.344387][T10205] block nbd11: shutting down sockets
[  989.418118][T10212] netlink: 24 bytes leftover after parsing attributes in process `syz.0.15796'.
[  989.503279][T10215] netlink: 'syz.2.15797': attribute type 1 has an invalid length.
[  989.552307][T10215] 8021q: adding VLAN 0 to HW filter on device bond22
[  989.569029][T10222] bond22: up delay (136) is not a multiple of miimon (100), value rounded to 100 ms
[  989.580921][T10222] bond22: entered allmulticast mode
[  989.605181][T10218] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  989.660571][T10220] netlink: 4 bytes leftover after parsing attributes in process `syz.0.15799'.
[  989.671841][T10215] bond22: (slave ip6gretap1): Enslaving as an active interface with an up link
[  989.922378][T10242] 8021q: adding VLAN 0 to HW filter on device bond22
[  989.933295][T10242] bond21: (slave bond22): Enslaving as an active interface with an up link
[  990.004374][T10246] tipc: Invalid UDP bearer configuration
[  990.004429][T10246] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  990.110114][T10253] netlink: 'syz.0.15808': attribute type 1 has an invalid length.
[  990.222676][T10257] netlink: 'syz.4.15809': attribute type 11 has an invalid length.
[  990.237897][T10257] netlink: 224 bytes leftover after parsing attributes in process `syz.4.15809'.
[  990.252200][T10256] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  990.342597][T10263] netlink: 24 bytes leftover after parsing attributes in process `syz.4.15812'.
[  991.219028][T10290] nbd: couldn't find a device at index 0
[  992.163479][T10327] syzkaller0: entered promiscuous mode
[  992.176602][T10327] syzkaller0: entered allmulticast mode
[  992.296340][T10331] netlink: 68 bytes leftover after parsing attributes in process `syz.3.15832'.
[  992.337237][T10331] netlink: 4 bytes leftover after parsing attributes in process `syz.3.15832'.
[  992.541161][T10342] netlink: 24 bytes leftover after parsing attributes in process `syz.2.15836'.
[  992.620591][T10346] netlink: 14 bytes leftover after parsing attributes in process `syz.3.15837'.
[  992.662104][T10350] netlink: 'syz.4.15838': attribute type 11 has an invalid length.
[  992.723082][T10354] netlink: 'syz.4.15838': attribute type 11 has an invalid length.
[  992.780887][T10355] syzkaller0: entered promiscuous mode
[  992.787328][T10355] syzkaller0: entered allmulticast mode
[  992.843578][T10350] veth1_vlan: left promiscuous mode
[  992.853202][T10350] veth0_vlan: left promiscuous mode
[  992.869971][T10350] veth0_vlan: entered promiscuous mode
[  992.878956][T10350] veth1_vlan: entered promiscuous mode
[  992.906180][T10350] A link change request failed with some changes committed already. Interface geneve2 may have been left with an inconsistent configuration, please check.
[  992.923373][T10359] netlink: 8 bytes leftover after parsing attributes in process `syz.2.15842'.
[  992.935019][T10359] netlink: 8 bytes leftover after parsing attributes in process `syz.2.15842'.
[  992.949075][ T1319] ieee802154 phy0 wpan0: encryption failed: -22
[  993.219534][T10373] netlink: 'syz.0.15846': attribute type 1 has an invalid length.
[  993.244586][T10373] netlink: 'syz.0.15846': attribute type 2 has an invalid length.
[  993.402610][T10381] netlink: 12 bytes leftover after parsing attributes in process `syz.3.15849'.
[  993.448208][T10381] bond14: entered promiscuous mode
[  993.453863][T10381] 8021q: adding VLAN 0 to HW filter on device bond14
[  993.476216][T10381] vlan4: entered allmulticast mode
[  993.486970][T10381] bond14: entered allmulticast mode
[  994.048435][T10399] syzkaller0: entered promiscuous mode
[  994.058967][T10399] syzkaller0: entered allmulticast mode
[  994.250806][T10402] syzkaller0: entered promiscuous mode
[  994.350664][T10402] syzkaller0: entered allmulticast mode
[  994.568478][T10405] bridge0: port 2(bridge_slave_1) entered disabled state
[  994.576134][T10405] bridge0: port 1(bridge_slave_0) entered disabled state
[  994.729777][T10405] tipc: Resetting bearer <eth:wg1>
[  994.868325][T10405] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  995.100779][T10405] mac80211_hwsim hwsim3 syzkaller0: left promiscuous mode
[  995.108098][T10405] mac80211_hwsim hwsim3 syzkaller0: left allmulticast mode
[  995.124642][T10405] bond16: left promiscuous mode
[  995.130398][T10405] geneve6: left promiscuous mode
[  995.241279][T28073] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  995.266711][T28073] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  995.309986][T28073] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  995.331478][T28073] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  995.816333][T10444] netlink: 24 bytes leftover after parsing attributes in process `syz.2.15873'.
[  996.810703][T10489] syzkaller0: entered promiscuous mode
[  996.816316][T10489] syzkaller0: entered allmulticast mode
[  996.838516][T10489] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  996.849782][T10488] tipc: Resetting bearer <eth:syzkaller0>
[  996.879556][T10488] tipc: Disabling bearer <eth:syzkaller0>
[  996.898173][T10495] pimreg: entered allmulticast mode
[  997.565630][T10513] netlink: 4 bytes leftover after parsing attributes in process `syz.3.15895'.
[  998.252463][T10537] netlink: 'syz.4.15905': attribute type 1 has an invalid length.
[  998.268810][T10537] netlink: 'syz.4.15905': attribute type 2 has an invalid length.
[  998.899753][T10527] bond22: left allmulticast mode
[  998.948454][T10542] tipc: Resetting bearer <eth:wg1>
[  999.256031][T10557] syzkaller0: entered promiscuous mode
[  999.271201][T10557] syzkaller0: entered allmulticast mode
[  999.328939][T10567] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode
[  999.347700][T10567] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode
[ 1002.829504][T10616] netlink: 4 bytes leftover after parsing attributes in process `syz.2.15918'.
[ 1002.904334][T10624] xt_TCPMSS: Only works on TCP SYN packets
[ 1004.390528][T10685] syzkaller0: entered promiscuous mode
[ 1004.398260][T10685] syzkaller0: entered allmulticast mode
[ 1004.412028][T10685] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1004.452210][T10684] tipc: Resetting bearer <eth:syzkaller0>
[ 1004.489770][T10687] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[ 1004.516997][T10687] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[ 1004.531963][T10684] tipc: Disabling bearer <eth:syzkaller0>
[ 1004.955252][T10675] syzkaller1: entered promiscuous mode
[ 1004.981976][T10675] syzkaller1: entered allmulticast mode
[ 1005.008620][T10701] syzkaller0: entered promiscuous mode
[ 1005.014320][T10701] syzkaller0: entered allmulticast mode
[ 1005.053857][T10701] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1005.068818][T10700] tipc: Resetting bearer <eth:syzkaller0>
[ 1005.102433][T10700] tipc: Disabling bearer <eth:syzkaller0>
[ 1005.310519][T10725] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1005.945560][T10735] netlink: 8 bytes leftover after parsing attributes in process `syz.4.15948'.
[ 1006.062533][T10742] netlink: 4 bytes leftover after parsing attributes in process `syz.4.15950'.
[ 1006.184164][T10748] syzkaller0: entered promiscuous mode
[ 1006.191781][T10752] netlink: 8 bytes leftover after parsing attributes in process `syz.4.15954'.
[ 1006.201833][T10748] syzkaller0: entered allmulticast mode
[ 1006.207995][T10752] netlink: 24 bytes leftover after parsing attributes in process `syz.4.15954'.
[ 1006.217418][T10752] netlink: 24 bytes leftover after parsing attributes in process `syz.4.15954'.
[ 1006.242276][T10747] netlink: 4 bytes leftover after parsing attributes in process `syz.3.15952'.
[ 1006.543171][T10766] netlink: 4 bytes leftover after parsing attributes in process `syz.0.15959'.
[ 1006.730214][T10779] netlink: 8 bytes leftover after parsing attributes in process `syz.0.15964'.
[ 1006.893113][T10788] syzkaller0: entered promiscuous mode
[ 1006.899451][T10788] syzkaller0: entered allmulticast mode
[ 1006.970607][T10790] netlink: 149 bytes leftover after parsing attributes in process `syz.3.15968'.
[ 1007.210023][T10803] syzkaller0: entered promiscuous mode
[ 1007.215807][T10803] syzkaller0: entered allmulticast mode
[ 1007.461617][T10813] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2
[ 1007.524825][T10813] batman_adv: batadv0: Adding interface: gretap2
[ 1007.531520][T10813] batman_adv: batadv0: The MTU of interface gretap2 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1568 would solve the problem.
[ 1007.558053][T10813] batman_adv: batadv0: Interface activated: gretap2
[ 1007.586610][T10821] syzkaller0: left promiscuous mode
[ 1007.597835][T10821] syzkaller0: left allmulticast mode
[ 1007.614047][T10818] tap0: tun_chr_ioctl cmd 2148553947
[ 1008.524778][T10849] syzkaller0: entered promiscuous mode
[ 1008.536909][T10849] syzkaller0: entered allmulticast mode
[ 1008.719705][T10864] syzkaller0: entered promiscuous mode
[ 1008.725296][T10864] syzkaller0: entered allmulticast mode
[ 1008.973474][T10870] netlink: 4 bytes leftover after parsing attributes in process `syz.4.15994'.
[ 1008.989285][T10873] netlink: 12 bytes leftover after parsing attributes in process `syz.0.15995'.
[ 1009.045182][T10875] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[ 1009.079883][T10873] bond23: entered promiscuous mode
[ 1009.092985][T10873] bond23: entered allmulticast mode
[ 1009.285389][T10891] netlink: 'syz.2.16001': attribute type 1 has an invalid length.
[ 1009.403341][T10891] 8021q: adding VLAN 0 to HW filter on device bond24
[ 1009.417217][T10891] bond23: (slave bond24): making interface the new active one
[ 1009.426115][T10891] bond23: (slave bond24): Enslaving as an active interface with an up link
[ 1009.450023][T10896] bond23: (slave gretap5): Enslaving as a backup interface with an up link
[ 1009.475044][T10901] 8021q: adding VLAN 0 to HW filter on device bond23
[ 1009.493706][T10899] syzkaller0: entered promiscuous mode
[ 1009.507619][T10899] syzkaller0: entered allmulticast mode
[ 1009.654996][T10905] syzkaller0: entered promiscuous mode
[ 1009.673524][T10905] syzkaller0: entered allmulticast mode
[ 1009.689108][T10907] syzkaller0: entered promiscuous mode
[ 1009.706702][T10907] syzkaller0: entered allmulticast mode
[ 1009.820299][T10911] syzkaller0: entered promiscuous mode
[ 1009.825878][T10911] syzkaller0: entered allmulticast mode
[ 1009.842921][T10911] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1009.861175][T10910] tipc: Resetting bearer <eth:syzkaller0>
[ 1009.919809][T10910] tipc: Disabling bearer <eth:syzkaller0>
[ 1010.214776][T10934] netlink: 28 bytes leftover after parsing attributes in process `syz.2.16017'.
[ 1010.851653][T10955] netlink: 'syz.4.16026': attribute type 1 has an invalid length.
[ 1010.939877][T10955] 8021q: adding VLAN 0 to HW filter on device bond18
[ 1010.997989][T10957] bond18: (slave veth0_to_bond): Enslaving as an active interface with a down link
[ 1011.040288][T10955] bond18: entered promiscuous mode
[ 1011.055455][T10955] bond18: entered allmulticast mode
[ 1011.158246][T10955] macvlan5: entered promiscuous mode
[ 1011.163717][T10955] macvlan5: entered allmulticast mode
[ 1011.174034][T10955] 8021q: adding VLAN 0 to HW filter on device macvlan5
[ 1011.203947][T10962] syzkaller0: entered promiscuous mode
[ 1011.214569][T10962] syzkaller0: entered allmulticast mode
[ 1011.225247][T10968] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1011.264243][T10965] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[ 1011.277693][T10961] tipc: Resetting bearer <eth:syzkaller0>
[ 1011.304726][T10961] tipc: Disabling bearer <eth:syzkaller0>
[ 1011.784420][T10996] netlink: 'syz.2.16038': attribute type 1 has an invalid length.
[ 1011.801037][T10990] mac80211_hwsim hwsim3 syzkaller0: left promiscuous mode
[ 1011.817834][T10990] mac80211_hwsim hwsim3 syzkaller0: left allmulticast mode
[ 1011.936378][T10996] bond25: (slave geneve7): making interface the new active one
[ 1011.951721][T10996] bond25: (slave geneve7): Enslaving as an active interface with an up link
[ 1011.976235][T10999] bond25 (unregistering): (slave geneve7): Releasing active interface
[ 1011.989702][T10999] bond25 (unregistering): Released all slaves
[ 1012.042125][T10975] netlink: 60 bytes leftover after parsing attributes in process `syz.3.16031'.
[ 1012.044043][T11003] syzkaller0: entered promiscuous mode
[ 1012.066630][T11003] syzkaller0: entered allmulticast mode
[ 1012.101028][T10975] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[ 1012.462237][T11027] netlink: 36 bytes leftover after parsing attributes in process `syz.2.16046'.
[ 1012.847238][T11046] syzkaller0: entered promiscuous mode
[ 1012.858966][T11046] syzkaller0: entered allmulticast mode
[ 1013.738399][T11066] syzkaller0: entered promiscuous mode
[ 1013.744075][T11066] syzkaller0: entered allmulticast mode
[ 1013.856288][T11072] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode
[ 1013.863945][T11072] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode
[ 1014.061702][T11084] netlink: 'syz.0.16065': attribute type 1 has an invalid length.
[ 1014.141700][T11094] bond24: (slave bridge20): Enslaving as a backup interface with an up link
[ 1014.152636][T11096] netlink: 'syz.1.16068': attribute type 1 has an invalid length.
[ 1014.221757][T11096] 8021q: adding VLAN 0 to HW filter on device bond13
[ 1014.239730][T11084] macvlan0: entered promiscuous mode
[ 1014.245256][T11084] macvlan0: entered allmulticast mode
[ 1014.251949][T11084] bond24: entered promiscuous mode
[ 1014.257952][T11084] bridge20: entered promiscuous mode
[ 1014.264521][T11084] 8021q: adding VLAN 0 to HW filter on device macvlan0
[ 1014.272813][T11084] bond24: left promiscuous mode
[ 1014.278048][T11084] bridge20: left promiscuous mode
[ 1014.294879][T11099] pimreg: entered allmulticast mode
[ 1014.305209][T11100] bond13: (slave syz_tun): Enslaving as a backup interface with an up link
[ 1014.314813][T11104] netlink: 24 bytes leftover after parsing attributes in process `syz.3.16069'.
[ 1014.324424][T28078] bond13: Warning: No 802.3ad response from the link partner for any adapters in the bond
[ 1014.348943][T11096] bond13 (unregistering): (slave syz_tun): Removing an active aggregator
[ 1014.373680][T11096] bond13 (unregistering): (slave syz_tun): Releasing backup interface
[ 1014.385545][T11096] bond13 (unregistering): Released all slaves
[ 1015.514039][T11164] netlink: 'syz.0.16083': attribute type 83 has an invalid length.
[ 1015.692586][T11167] netlink: 12 bytes leftover after parsing attributes in process `syz.4.16086'.
[ 1015.820858][T11167] veth27: entered allmulticast mode
[ 1015.837919][T11167] bond19: (slave veth27): Enslaving as an active interface with an up link
[ 1015.879940][T11175] syzkaller0: entered promiscuous mode
[ 1015.898473][T11175] syzkaller0: entered allmulticast mode
[ 1015.928677][T11175] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1015.946117][T11171] tipc: Resetting bearer <eth:syzkaller0>
[ 1016.009814][T11171] tipc: Disabling bearer <eth:syzkaller0>
[ 1016.630423][T11208] syzkaller0: entered promiscuous mode
[ 1016.650922][T11208] syzkaller0: entered allmulticast mode
[ 1016.668785][T11208] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1016.811407][T11207] tipc: Resetting bearer <eth:syzkaller0>
[ 1016.871903][T11207] tipc: Disabling bearer <eth:syzkaller0>
[ 1017.023785][T11218] syzkaller0: entered promiscuous mode
[ 1017.029826][T11218] syzkaller0: entered allmulticast mode
[ 1017.121188][T11223] netlink: 12 bytes leftover after parsing attributes in process `syz.1.16098'.
[ 1018.479889][T11262] netlink: 'syz.3.16120': attribute type 12 has an invalid length.
[ 1018.490097][T11262] netlink: 8 bytes leftover after parsing attributes in process `syz.3.16120'.
[ 1018.504393][T11262] bond0: option primary_reselect: invalid value (4)
[ 1018.845701][T11277] syzkaller0: entered promiscuous mode
[ 1018.851968][T11277] syzkaller0: entered allmulticast mode
[ 1019.591403][T11296] syzkaller1: entered promiscuous mode
[ 1019.601451][T11296] syzkaller1: entered allmulticast mode
[ 1019.778004][T11298] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[ 1019.782091][T11306] sctp: [Deprecated]: syz.1.16137 (pid 11306) Use of struct sctp_assoc_value in delayed_ack socket option.
[ 1019.782091][T11306] Use struct sctp_sack_info instead
[ 1020.184564][T11324] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[ 1020.830053][T11334] sctp: [Deprecated]: syz.4.16147 (pid 11334) Use of struct sctp_assoc_value in delayed_ack socket option.
[ 1020.830053][T11334] Use struct sctp_sack_info instead
[ 1021.963565][T11360] netlink: 8 bytes leftover after parsing attributes in process `syz.3.16154'.
[ 1022.167602][T11362] netlink: 'syz.2.16156': attribute type 1 has an invalid length.
[ 1022.295209][T11369] netlink: 12 bytes leftover after parsing attributes in process `syz.2.16156'.
[ 1022.468714][T11362] bond25: (slave bridge19): making interface the new active one
[ 1022.489953][T11362] bond25: (slave bridge19): Enslaving as an active interface with an up link
[ 1022.522727][T11369] bond25: entered promiscuous mode
[ 1022.528382][T11369] bridge19: entered promiscuous mode
[ 1022.534109][T11369] bond25: entered allmulticast mode
[ 1022.540795][T11369] bridge19: entered allmulticast mode
[ 1022.548874][T11369] 8021q: adding VLAN 0 to HW filter on device bond25
[ 1022.563234][   T55] bond25: (slave bridge19): link status definitely down, disabling slave
[ 1022.606695][   T55] bridge19: left promiscuous mode
[ 1022.613368][   T55] bridge19: left allmulticast mode
[ 1022.623705][   T55] bond25: now running without any active interface!
[ 1022.793405][T11391] lo: Caught tx_queue_len zero misconfig
[ 1022.929925][T11399] syzkaller0: entered promiscuous mode
[ 1022.938040][T11399] syzkaller0: entered allmulticast mode
[ 1023.401708][T11416] netlink: 'syz.4.16173': attribute type 1 has an invalid length.
[ 1023.457098][T11416] 8021q: adding VLAN 0 to HW filter on device bond20
[ 1023.477356][T11416] bond20: (slave macvlan0): Enslaving as an active interface with a down link
[ 1023.676204][T11427] netlink: 8 bytes leftover after parsing attributes in process `syz.0.16177'.
[ 1023.805641][T11434] syzkaller0: entered promiscuous mode
[ 1023.812048][T11434] syzkaller0: entered allmulticast mode
[ 1024.213082][T11447] syzkaller0: entered promiscuous mode
[ 1024.219349][T11447] syzkaller0: entered allmulticast mode
[ 1024.461647][T11450] syzkaller0: entered promiscuous mode
[ 1024.469484][T11450] syzkaller0: entered allmulticast mode
[ 1029.204175][T11510] netlink: 56 bytes leftover after parsing attributes in process `syz.4.16199'.
[ 1029.260661][T11511] syzkaller0: entered promiscuous mode
[ 1029.281900][T11511] syzkaller0: entered allmulticast mode
[ 1029.400567][T11516] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1029.517300][T11516] syzkaller0: entered promiscuous mode
[ 1029.539834][T11516] syzkaller0: entered allmulticast mode
[ 1029.557900][T11516] tipc: Resetting bearer <eth:syzkaller0>
[ 1029.593361][T11528] syzkaller0: entered promiscuous mode
[ 1029.605798][T11528] syzkaller0: entered allmulticast mode
[ 1029.744628][T11515] tipc: Resetting bearer <eth:syzkaller0>
[ 1032.471010][T11515] tipc: Disabling bearer <eth:syzkaller0>
[ 1032.493223][ T1602] tipc: Node number set to 2737416421
[ 1033.682527][T11638] netlink: 'syz.2.16222': attribute type 1 has an invalid length.
[ 1033.730654][T11638] 8021q: adding VLAN 0 to HW filter on device bond26
[ 1033.821302][T11645] syzkaller0: entered promiscuous mode
[ 1033.828153][T11645] syzkaller0: entered allmulticast mode
[ 1034.340100][T11656] syzkaller0: entered promiscuous mode
[ 1034.353339][T11656] syzkaller0: entered allmulticast mode
[ 1034.882007][T11679] syzkaller0: entered promiscuous mode
[ 1034.889896][T11679] syzkaller0: entered allmulticast mode
[ 1035.291655][T11699] netlink: 'syz.3.16246': attribute type 11 has an invalid length.
[ 1035.345002][T11699] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1035.354115][T11699] 8021q: adding VLAN 0 to HW filter on device team0
[ 1035.368407][T10597] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[ 1035.387540][T11699] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 1035.418963][T11699] batman_adv: netdevsim0: Interface activated: batadv_slave_1
[ 1035.432980][T11699] 0·: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[ 1035.449615][T11699] 0·: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 1035.464645][T11699] ªªªªª!: default qdisc (pfifo_fast) fail, fallback to noqueue
[ 1035.473672][T11699] veth1_vlan: left promiscuous mode
[ 1035.479938][T11699] veth0_vlan: left promiscuous mode
[ 1035.486302][T11699] veth0_vlan: entered promiscuous mode
[ 1035.494199][T11699] veth1_vlan: entered promiscuous mode
[ 1035.502972][T11699] veth1_macvtap: left promiscuous mode
[ 1035.510028][T11699] veth0_macvtap: left promiscuous mode
[ 1035.517492][T11699] veth0_macvtap: entered promiscuous mode
[ 1035.535409][T11699] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue
[ 1035.550583][T11699] erspan1: default qdisc (pfifo_fast) fail, fallback to noqueue
[ 1035.560541][T11699] 8021q: adding VLAN 0 to HW filter on device bond1
[ 1035.575441][T11699] ip6gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue
[ 1035.592229][T11699] ip6gretap0: entered promiscuous mode
[ 1035.605192][T11699] batman_adv: netdevsim0: Interface activated: gretap3
[ 1035.615570][T11699] veth1_macvtap: entered promiscuous mode
[ 1035.624561][T11699] rose0: default qdisc (pfifo_fast) fail, fallback to noqueue
[ 1035.641607][T11699] A link change request failed with some changes committed already. Interface vxlan1 may have been left with an inconsistent configuration, please check.
[ 1035.657845][T11701] netlink: 'syz.1.16245': attribute type 8 has an invalid length.
[ 1035.668624][ T3915] bridge0: port 1(vlan3) entered blocking state
[ 1035.676048][ T3915] bridge0: port 1(vlan3) entered forwarding state
[ 1035.727965][T31142] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[ 1035.750511][T31142] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1035.766880][T31142] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 20003 - 0
[ 1035.778057][T31142] netdevsim netdevsim3 eth0: set [1, 2] type 2 family 0 port 37408 - 0
[ 1035.786573][T31142] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[ 1035.794832][T31142] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1035.804578][T31142] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 20003 - 0
[ 1035.819005][T31142] netdevsim netdevsim3 eth1: set [1, 2] type 2 family 0 port 37408 - 0
[ 1035.873608][T31142] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[ 1035.883284][T31142] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1035.892990][T31142] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 20003 - 0
[ 1035.923985][T31142] netdevsim netdevsim3 eth2: set [1, 2] type 2 family 0 port 37408 - 0
[ 1035.944302][T31142] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[ 1035.959450][T31142] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1035.968182][T31142] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 20003 - 0
[ 1035.976710][T31142] netdevsim netdevsim3 eth3: set [1, 2] type 2 family 0 port 37408 - 0
[ 1036.048372][T11708] syzkaller0: entered promiscuous mode
[ 1036.053918][T11708] syzkaller0: entered allmulticast mode
[ 1036.069438][T28076] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[ 1036.077882][T28076] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[ 1036.096724][ T3915] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[ 1036.327148][ T3915] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[ 1036.391917][ T3915] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[ 1036.490190][T11732] netlink: 'syz.1.16254': attribute type 1 has an invalid length.
[ 1036.949350][ T3915] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[ 1038.593873][T11732] workqueue: Failed to create a rescuer kthread for wq "bond13": -EINTR
[ 1038.672144][T11730] syzkaller0: entered promiscuous mode
[ 1038.691059][T11730] syzkaller0: entered allmulticast mode
[ 1038.734470][T11759] nbd: couldn't find a device at index 0
[ 1040.146810][    C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[ 1041.288511][T28076] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[ 1041.312972][T11796] 8021q: adding VLAN 0 to HW filter on device bond8
[ 1041.490016][T11803] syzkaller0: entered promiscuous mode
[ 1041.501235][T11803] syzkaller0: entered allmulticast mode
[ 1041.518304][T28078] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1041.527839][T11803] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1041.722680][T11811] netlink: 'syz.4.16272': attribute type 1 has an invalid length.
[ 1041.727625][T11799] infiniband syz1: set down
[ 1041.737576][T11799] infiniband syz1: added bond0
[ 1041.758833][T11811] 8021q: adding VLAN 0 to HW filter on device bond21
[ 1041.800083][T11799] smbdirect: ib_dev[syz1]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000
[ 1041.837767][T11799] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32
[ 1041.865738][T11799] smbdirect: ib_dev[syz1]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005
[ 1041.913726][T11811] bond21: (slave veth29): Enslaving as an active interface with a down link
[ 1041.956281][T11799] RDS/IB: syz1: added
[ 1041.961974][T11814] vlan5: entered allmulticast mode
[ 1041.967459][T11814] veth0_to_bond: entered allmulticast mode
[ 1041.973342][T11799] smc: adding ib device syz1 with port count 1
[ 1041.981971][T11814] veth0_to_bond: entered promiscuous mode
[ 1041.989343][T11799] smc:    ib device syz1 port 1 has no pnetid
[ 1041.998592][T11814] veth0_to_bond: left promiscuous mode
[ 1042.010654][T11814] bond21: (slave vlan5): Enslaving as an active interface with a down link
[ 1042.019507][T11818] netlink: 8 bytes leftover after parsing attributes in process `syz.3.16274'.
[ 1042.317087][T28085] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[ 1042.329759][T28085] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[ 1042.756977][T10597] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[ 1043.233433][T11837] xt_hashlimit: size too large, truncated to 1048576
[ 1043.498278][T11845] netlink: 'syz.2.16283': attribute type 1 has an invalid length.
[ 1043.620771][T11845] bond27: entered promiscuous mode
[ 1043.655006][T11845] 8021q: adding VLAN 0 to HW filter on device bond27
[ 1043.704025][T11849] bond27: (slave bridge20): making interface the new active one
[ 1043.713507][T11849] bridge20: entered promiscuous mode
[ 1043.721006][T11849] bond27: (slave bridge20): Enslaving as an active interface with an up link
[ 1043.764693][T11851] bond27: (slave ipvlan3): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[ 1043.791833][T11851] bond27: (slave ipvlan3): The slave device specified does not support setting the MAC address
[ 1045.383276][T11924] netlink: 4 bytes leftover after parsing attributes in process `syz.0.16304'.
[ 1046.079925][T11931] syzkaller0: entered promiscuous mode
[ 1046.086370][T11931] syzkaller0: entered allmulticast mode
[ 1046.214270][T11934] netlink: 12 bytes leftover after parsing attributes in process `syz.0.16308'.
[ 1046.227781][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[ 1046.359940][T11934] bond25: entered promiscuous mode
[ 1046.370038][T11934] bond25: entered allmulticast mode
[ 1046.496358][T11944] syzkaller0: entered promiscuous mode
[ 1046.506856][T11944] syzkaller0: entered allmulticast mode
[ 1046.573029][T11950] syzkaller0: entered promiscuous mode
[ 1046.579055][T11950] syzkaller0: entered allmulticast mode
[ 1046.739593][T11957] netlink: 24 bytes leftover after parsing attributes in process `syz.3.16316'.
[ 1047.215215][T11977] netlink: 24 bytes leftover after parsing attributes in process `syz.4.16325'.
[ 1047.540729][T11997] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[ 1047.792357][T12003] netlink: 20 bytes leftover after parsing attributes in process `syz.2.16333'.
[ 1048.209638][T12018] netlink: 12 bytes leftover after parsing attributes in process `syz.0.16339'.
[ 1048.239124][T12018] 8021q: adding VLAN 0 to HW filter on device bond26
[ 1048.259269][T12018] bond26: entered promiscuous mode
[ 1048.264575][T12018] bond26: entered allmulticast mode
[ 1048.271910][T12018] 8021q: adding VLAN 0 to HW filter on device bond26
[ 1048.281155][T12018] team0: Port device bond26 added
[ 1048.293438][T12018] team_slave_1: entered promiscuous mode
[ 1048.301950][T12018] team_slave_1: entered allmulticast mode
[ 1048.310693][T12018] bond26: (slave team_slave_1): Enslaving as an active interface with an up link
[ 1048.354270][T12022] veth0_macvtap: Caught tx_queue_len zero misconfig
[ 1048.387103][T12024] netlink: 24 bytes leftover after parsing attributes in process `syz.0.16341'.
[ 1048.465570][T12029] netlink: 24 bytes leftover after parsing attributes in process `syz.3.16344'.
[ 1048.477160][T12029] netlink: 24 bytes leftover after parsing attributes in process `syz.3.16344'.
[ 1048.626849][    C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[ 1048.776667][T12037] netlink: 'syz.4.16346': attribute type 40 has an invalid length.
[ 1048.796207][T12037] tipc: Resetting bearer <eth:syzkaller0>
[ 1049.118480][T12048] netlink: 'syz.2.16349': attribute type 1 has an invalid length.
[ 1049.127146][T12048] netlink: 'syz.2.16349': attribute type 8 has an invalid length.
[ 1049.140312][T12048] netlink: 8 bytes leftover after parsing attributes in process `syz.2.16349'.
[ 1049.150031][T12048] netlink: 24 bytes leftover after parsing attributes in process `syz.2.16349'.
[ 1049.257311][T12055] netlink: 8 bytes leftover after parsing attributes in process `syz.4.16352'.
[ 1049.289873][T12057] netlink: 4 bytes leftover after parsing attributes in process `syz.0.16353'.
[ 1049.473140][T12065] syzkaller0: entered promiscuous mode
[ 1049.479697][T12065] syzkaller0: entered allmulticast mode
[ 1049.729009][T12073] syzkaller0: entered promiscuous mode
[ 1049.735152][T12073] syzkaller0: entered allmulticast mode
[ 1050.043325][T12092] bond0: (slave wlan0): Error: Device is in use and cannot be enslaved
[ 1050.053944][T12091] wg2: Caught tx_queue_len zero misconfig
[ 1050.139542][T12096] syzkaller0: entered promiscuous mode
[ 1050.145189][T12096] syzkaller0: entered allmulticast mode
[ 1050.159756][T12096] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1050.168555][T12095] tipc: Resetting bearer <eth:syzkaller0>
[ 1050.208010][T12095] tipc: Disabling bearer <eth:syzkaller0>
[ 1050.785738][T12111] netlink: 'syz.2.16376': attribute type 1 has an invalid length.
[ 1050.902979][T12115] bond28: (slave veth43): Enslaving as an active interface with a down link
[ 1050.984528][T12111] bond28: (slave veth45): Enslaving as an active interface with a down link
[ 1051.003039][T12115] 8021q: adding VLAN 0 to HW filter on device bond28
[ 1051.387172][T12143] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[ 1051.926392][T12161] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[ 1051.944151][T12161] tipc: Resetting bearer <eth:syzkaller0>
[ 1051.952276][T12167] syzkaller0: entered promiscuous mode
[ 1051.958579][T12167] syzkaller0: entered allmulticast mode
[ 1052.084690][T12176] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) !
[ 1053.040390][T12199] __nla_validate_parse: 10 callbacks suppressed
[ 1053.040404][T12199] netlink: 140 bytes leftover after parsing attributes in process `syz.1.16410'.
[ 1054.065954][T12241] xt_ipcomp: unknown flags 1D
[ 1054.338015][T12214] syzkaller0: entered promiscuous mode
[ 1054.343585][T12214] syzkaller0: entered allmulticast mode
[ 1054.388148][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[ 1054.398690][ T1319] ieee802154 phy0 wpan0: encryption failed: -22
[ 1054.875557][T12164] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[ 1055.303478][ T5624] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0
[ 1055.336228][ T5624] CPU: 1 UID: 0 PID: 5624 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[ 1055.336264][ T5624] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 1055.336276][ T5624] Call Trace:
[ 1055.336283][ T5624]  <TASK>
[ 1055.336309][ T5624]  dump_stack_lvl+0xe8/0x150
[ 1055.336351][ T5624]  dump_header+0xd3/0x4b0
[ 1055.336425][ T5624]  oom_kill_process+0x3ab/0x970
[ 1055.336459][ T5624]  out_of_memory+0x1064/0x1480
[ 1055.336478][ T5624]  ? try_charge_memcg+0xbca/0x1590
[ 1055.336516][ T5624]  ? __pfx_out_of_memory+0x10/0x10
[ 1055.336537][ T5624]  ? do_raw_spin_unlock+0xf5/0x210
[ 1055.336587][ T5624]  try_charge_memcg+0xc74/0x1590
[ 1055.336623][ T5624]  ? __pfx_try_charge_memcg+0x10/0x10
[ 1055.336640][ T5624]  ? percpu_ref_tryget+0x15/0x180
[ 1055.336683][ T5624]  ? charge_memcg+0x20/0x2b0
[ 1055.336706][ T5624]  charge_memcg+0x19c/0x2b0
[ 1055.336729][ T5624]  __mem_cgroup_charge+0x25/0x80
[ 1055.336749][ T5624]  filemap_add_folio+0x151/0x530
[ 1055.336778][ T5624]  __filemap_get_folio_mpol+0x4ff/0x1000
[ 1055.336813][ T5624]  filemap_fault+0xa84/0x13b0
[ 1055.336850][ T5624]  ? __pfx_filemap_fault+0x10/0x10
[ 1055.336879][ T5624]  ? __pfx_filemap_map_pages+0x10/0x10
[ 1055.336918][ T5624]  __do_fault+0x138/0x2a0
[ 1055.336937][ T5624]  ? do_pte_missing+0x140c/0x34b0
[ 1055.336973][ T5624]  do_pte_missing+0x2215/0x34b0
[ 1055.337014][ T5624]  ? handle_mm_fault+0xec/0x3080
[ 1055.337043][ T5624]  handle_mm_fault+0x1b36/0x3080
[ 1055.337082][ T5624]  ? handle_mm_fault+0xec/0x3080
[ 1055.337116][ T5624]  ? __pfx_handle_mm_fault+0x10/0x10
[ 1055.337139][ T5624]  ? lock_vma_under_rcu+0x45a/0x500
[ 1055.337195][ T5624]  do_user_addr_fault+0xa4d/0x1340
[ 1055.337238][ T5624]  ? trace_page_fault_user+0x84/0x1e0
[ 1055.337263][ T5624]  exc_page_fault+0x6a/0xc0
[ 1055.337349][ T5624]  asm_exc_page_fault+0x26/0x30
[ 1055.337368][ T5624] RIP: 0033:0x7fa9d466ae74
[ 1055.337387][ T5624] Code: 85 62 0a 00 00 48 b8 db 34 b6 d7 82 de 1b 43 48 f7 a4 24 98 00 00 00 48 8b 05 40 a9 ed 00 48 69 8c 24 90 00 00 00 e8 03 00 00 <8b> 78 08 48 8b 44 24 18 48 c1 ea 12 4c 8b 0d 39 a8 ed 00 48 01 d1
[ 1055.337404][ T5624] RSP: 002b:00007ffd56d55dc0 EFLAGS: 00010206
[ 1055.337421][ T5624] RAX: 0000001b33e24000 RBX: 0000000000001d00 RCX: 0000000000101530
[ 1055.337434][ T5624] RDX: 000000000f4a73c2 RSI: 00007ffd56d55e50 RDI: 0000000000000001
[ 1055.337445][ T5624] RBP: 00007ffd56d55dfc R08: 000000003a547338 R09: 3fffffffffffffff
[ 1055.337458][ T5624] R10: 4000000000000000 R11: 0000000000000246 R12: 0000000000001388
[ 1055.337469][ T5624] R13: 00000000000927c0 R14: 0000000000101544 R15: 00007ffd56d55e50
[ 1055.337499][ T5624]  </TASK>
[ 1055.597419][ T5624] memory: usage 307200kB, limit 307200kB, failcnt 677
[ 1055.605463][ T5624] memory+swap: usage 307344kB, limit 9007199254740988kB, failcnt 0
[ 1055.613606][ T5624] kmem: usage 307136kB, limit 9007199254740988kB, failcnt 0
[ 1055.620968][ T5624] Memory cgroup stats for /syz0:
[ 1055.621377][ T5624] cache 0
[ 1055.727945][ T5624] rss 0
[ 1055.757975][ T5624] rss_huge 0
[ 1055.776175][ T5624] shmem 0
[ 1055.824304][ T5624] mapped_file 0
[ 1055.851099][ T5624] dirty 0
[ 1055.873484][ T5624] writeback 0
[ 1055.896124][ T5624] workingset_refault_anon 4
[ 1055.935216][ T5624] workingset_refault_file 0
[ 1055.960908][ T5624] swap 4096
[ 1055.983403][ T5624] swapcached 36864
[ 1056.006491][ T5624] pgpgin 126069
[ 1056.029318][ T5624] pgpgout 126065
[ 1056.055278][ T5624] pgfault 327332
[ 1056.083093][ T5624] pgmajfault 3
[ 1056.106598][ T5624] inactive_anon 8192
[ 1056.110576][ T5624] active_anon 8192
[ 1056.114546][ T5624] inactive_file 0
[ 1056.118929][ T5624] active_file 0
[ 1056.122486][ T5624] unevictable 0
[ 1056.141735][ T5624] hierarchical_memory_limit 314572800
[ 1056.147704][ T5624] hierarchical_memsw_limit 9223372036854771712
[ 1056.154139][ T5624] total_cache 0
[ 1056.158289][ T5624] total_rss 0
[ 1056.161737][ T5624] total_rss_huge 0
[ 1056.165694][ T5624] total_shmem 0
[ 1056.179364][ T5624] total_mapped_file 0
[ 1056.187080][ T5624] total_dirty 0
[ 1056.194190][ T5624] total_writeback 0
[ 1056.203697][ T5624] total_workingset_refault_anon 34
[ 1056.214858][ T5624] total_workingset_refault_file 1
[ 1056.225233][ T5624] total_swap 147456
[ 1056.232566][ T5624] total_swapcached 352256
[ 1056.242486][ T5624] total_pgpgin 315927
[ 1056.252669][ T5624] total_pgpgout 315911
[ 1056.262234][ T5624] total_pgfault 702406
[ 1056.271176][ T5624] total_pgmajfault 17
[ 1056.280765][ T5624] total_inactive_anon 45056
[ 1056.289977][ T5624] total_active_anon 20480
[ 1056.299268][ T5624] total_inactive_file 0
[ 1056.308202][ T5624] total_active_file 0
[ 1056.315789][ T5624] total_unevictable 0
[ 1056.324422][ T5624] anon_cost 0
[ 1056.331240][ T5624] file_cost 0
[ 1056.337560][ T5624] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0/syz0,task=syz.0.16418,pid=12231,uid=0
[ 1056.381018][ T5624] Memory cgroup out of memory: Killed process 12231 (syz.0.16418) total-vm:102496kB, anon-rss:1248kB, file-rss:22920kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000
[ 1059.378365][T12251] syzkaller0: entered promiscuous mode
[ 1059.383871][T12251] syzkaller0: entered allmulticast mode
[ 1059.650283][T12298] bond8: (slave lo): Releasing backup interface
[ 1059.673916][T12298] bond8: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed
[ 1059.711446][T12298] bond15: (slave syz_tun): Removing an active aggregator
[ 1059.721758][T12298] bond15: (slave syz_tun): Releasing backup interface
[ 1059.735794][T12298] bond26: (slave team_slave_1): Releasing backup interface
[ 1059.739045][T12306] netlink: 'syz.4.16433': attribute type 1 has an invalid length.
[ 1059.755595][T12298] team_slave_1: left allmulticast mode
[ 1059.767103][T12298] bond11: left allmulticast mode
[ 1059.772091][T12298] bond11: left promiscuous mode
[ 1059.779003][T12298] bridge0: port 1(bond11) entered disabled state
[ 1059.793302][T12298] bond0: (slave gretap2): Releasing active interface
[ 1059.811224][T12310] netlink: 14 bytes leftover after parsing attributes in process `syz.3.16431'.
[ 1059.821878][T12298] bond14: (slave veth17): Releasing backup interface
[ 1059.832670][T12298] bond16: (slave veth21): Releasing active interface
[ 1059.843662][T12298] bond17: (slave ip6gretap1): Releasing active interface
[ 1059.858790][T12298] bond18: (slave bridge18): Releasing active interface
[ 1059.865738][T12298] bridge18: left promiscuous mode
[ 1059.872013][T12298] bridge18: left allmulticast mode
[ 1059.886376][T12298] bond19: (slave bond20): Releasing backup interface
[ 1059.893199][T12298] bond19: (slave bond20): the permanent HWaddr of slave - fa:37:22:05:71:73 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[ 1059.912277][T12298] bond19: (slave gretap3): making interface the new active one
[ 1059.929525][T12298] bond19: (slave gretap3): Releasing backup interface
[ 1059.943995][T12298] bond21: (slave bond22): Releasing backup interface
[ 1059.955624][T12298] bond24: (slave bridge20): Releasing backup interface
[ 1059.969048][T12298] team0: Port device bond26 removed
[ 1060.038325][T12307] vlan5: entered allmulticast mode
[ 1060.044651][T12307] bond0: entered allmulticast mode
[ 1060.054779][T12307] �ÿ: entered allmulticast mode
[ 1060.093287][T12309] 8021q: adding VLAN 0 to HW filter on device bond23
[ 1060.111523][T12309] bond22: (slave bond23): making interface the new active one
[ 1060.121555][T12309] bond22: (slave bond23): Enslaving as an active interface with an up link
[ 1060.149400][T12310] bond0 (unregistering): (slave 
4
5�ÿ): Releasing backup interface
[ 1060.158875][T12310] �ÿ: left allmulticast mode
[ 1060.165107][T12310] bond0 (unregistering): Released all slaves
[ 1060.183414][T12311] bond22: (slave gretap4): Enslaving as a backup interface with an up link
[ 1060.343489][T12327] x_tables: ip6_tables: mh match: only valid for protocol 135
[ 1060.672240][T12334] syzkaller0: entered promiscuous mode
[ 1060.687319][T12334] syzkaller0: entered allmulticast mode
[ 1060.779330][T12338] netlink: 28 bytes leftover after parsing attributes in process `syz.4.16443'.
[ 1060.962034][T12343] netlink: 136 bytes leftover after parsing attributes in process `syz.4.16445'.
[ 1060.986560][T12343] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check.
[ 1060.990111][T12350] netlink: 12 bytes leftover after parsing attributes in process `syz.1.16446'.
[ 1061.034170][T12348] syzkaller0: entered promiscuous mode
[ 1061.041429][T12348] syzkaller0: entered allmulticast mode
[ 1061.312294][T12350] 8021q: adding VLAN 0 to HW filter on device bond13
[ 1061.323902][T12352] bond13: entered promiscuous mode
[ 1061.333794][T12352] bond13: entered allmulticast mode
[ 1061.340874][T12352] 8021q: adding VLAN 0 to HW filter on device bond13
[ 1061.356382][T12352] team0: Port device bond13 added
[ 1061.362488][T12358] netlink: 'syz.4.16449': attribute type 12 has an invalid length.
[ 1061.401342][T12359] team0: Port device bond13 removed
[ 1061.409543][T12359] bond13 (unregistering): Released all slaves
[ 1061.638600][T12374] netlink: 24 bytes leftover after parsing attributes in process `syz.1.16451'.
[ 1061.875547][T12373] syzkaller0: entered promiscuous mode
[ 1061.881394][T12373] syzkaller0: entered allmulticast mode
[ 1061.889935][T12383] xfrm0 speed is unknown, defaulting to 1000
[ 1061.893610][T12379] syzkaller0: entered promiscuous mode
[ 1061.906663][T12379] syzkaller0: entered allmulticast mode
[ 1061.920918][T12383] xfrm0 speed is unknown, defaulting to 1000
[ 1061.930355][T12383] xfrm0 speed is unknown, defaulting to 1000
[ 1062.325689][T12393] netlink: 4 bytes leftover after parsing attributes in process `syz.2.16456'.
[ 1062.504976][T12383] infiniband syz0: set down
[ 1062.509956][T12383] infiniband syz0: added xfrm0
[ 1062.532678][T12383] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR
[ 1062.539285][T12383] infiniband syz0: Couldn't open port 1
[ 1062.570904][T12383] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000
[ 1062.586252][T12383] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32
[ 1062.619416][T12383] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005
[ 1062.690605][T12383] RDS/IB: syz0: added
[ 1062.694689][T12383] smc: adding ib device syz0 with port count 1
[ 1062.702270][T12383] smc:    ib device syz0 port 1 has no pnetid
[ 1065.016631][ T3915] xfrm0 speed is unknown, defaulting to 1000
[ 1065.029015][T10597] xfrm0 speed is unknown, defaulting to 1000
[ 1065.041684][T12383] xfrm0 speed is unknown, defaulting to 1000
[ 1065.266684][    C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[ 1065.493165][T12383] xfrm0 speed is unknown, defaulting to 1000
[ 1065.539257][T12425] netlink: 64 bytes leftover after parsing attributes in process `syz.3.16464'.
[ 1065.997447][T12445] netlink: 24 bytes leftover after parsing attributes in process `syz.3.16469'.
[ 1066.156733][T12448] netlink: 4 bytes leftover after parsing attributes in process `syz.3.16469'.
[ 1066.193254][T12383] xfrm0 speed is unknown, defaulting to 1000
[ 1066.760719][T12383] xfrm0 speed is unknown, defaulting to 1000
[ 1067.108747][T12383] xfrm0 speed is unknown, defaulting to 1000
[ 1067.530074][T12458] syzkaller0: entered promiscuous mode
[ 1067.535695][T12458] syzkaller0: entered allmulticast mode
[ 1067.598924][T12464] netlink: 'syz.1.16475': attribute type 13 has an invalid length.
[ 1067.929915][T12480] netlink: 28 bytes leftover after parsing attributes in process `syz.3.16480'.
[ 1068.079239][T12471] netlink: 4 bytes leftover after parsing attributes in process `syz.4.16476'.
[ 1068.292665][T12486] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[ 1068.426032][   T29] audit: type=1107 audit(1782434948.693:13): pid=12500 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=''
[ 1068.441727][T12501] netlink: 'syz.3.16487': attribute type 1 has an invalid length.
[ 1068.450540][T12501] netlink: 4 bytes leftover after parsing attributes in process `syz.3.16487'.
[ 1068.562065][T12505] syzkaller0: entered promiscuous mode
[ 1068.568397][T12505] syzkaller0: entered allmulticast mode
[ 1068.575045][T12512] netlink: 'syz.3.16490': attribute type 11 has an invalid length.
[ 1068.877184][ T3913] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[ 1068.935030][T12516] A link change request failed with some changes committed already. Interface vxlan1 may have been left with an inconsistent configuration, please check.
[ 1068.953457][ T4592] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[ 1068.972917][T12525] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[ 1069.055391][T12530] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[ 1069.179997][T12536] netlink: 'syz.3.16497': attribute type 1 has an invalid length.
[ 1069.212615][T12536] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1069.243560][T12536] vlan5: entered promiscuous mode
[ 1069.251681][T12536] bond0: entered promiscuous mode
[ 1069.257448][T12536] vlan5: entered allmulticast mode
[ 1069.262709][T12536] bond0: entered allmulticast mode
[ 1069.278075][T12536] netlink: 44 bytes leftover after parsing attributes in process `syz.3.16497'.
[ 1069.300103][T12536] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1069.312781][T12536] bond0: (slave batadv0): making interface the new active one
[ 1069.320861][T12536] batadv0: entered promiscuous mode
[ 1069.326341][T12536] batadv0: entered allmulticast mode
[ 1069.338561][T12536] bond0: (slave batadv0): Enslaving as an active interface with an up link
[ 1069.587077][ T3913] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[ 1069.907149][ T4592] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[ 1070.481187][T12568] netlink: 108 bytes leftover after parsing attributes in process `syz.2.16504'.
[ 1070.678659][T12574] syzkaller0: entered promiscuous mode
[ 1070.695357][T12574] syzkaller0: entered allmulticast mode
[ 1070.726236][T12576] ip6gre3: entered promiscuous mode
[ 1070.738273][T12576] ip6gre3: entered allmulticast mode
[ 1070.752129][T12576] ip6_tunnel: ip6gre3 xmit: Local address not yet configured!
[ 1071.027033][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[ 1073.545413][T28073] ip6_tunnel: ip6gre3 xmit: Local address not yet configured!
[ 1073.554055][T28073] ip6_tunnel: ip6gre3 xmit: Local address not yet configured!
[ 1073.567176][ T3913] ip6_tunnel: ip6gre3 xmit: Local address not yet configured!
[ 1073.697469][ T4592] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[ 1073.829412][ T4592] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[ 1073.897390][ T4592] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[ 1073.910237][T12618] tipc: Resetting bearer <eth:syzkaller0>
[ 1073.916674][T10597] ip6_tunnel: ip6gre3 xmit: Local address not yet configured!
[ 1073.997122][ T4592] ip6_tunnel: ip6gre3 xmit: Local address not yet configured!
[ 1074.156546][T12634] syzkaller0: entered promiscuous mode
[ 1074.167576][T12634] syzkaller0: entered allmulticast mode
[ 1076.553824][T12660] netlink: 12 bytes leftover after parsing attributes in process `syz.0.16527'.
[ 1076.771136][T12650] xfrm0 speed is unknown, defaulting to 1000
[ 1076.908554][T12667] syzkaller0: entered promiscuous mode
[ 1076.935937][T12667] syzkaller0: entered allmulticast mode
[ 1077.273339][T12681] netlink: 20 bytes leftover after parsing attributes in process `syz.2.16536'.
[ 1077.349750][T12675] syzkaller1: entered promiscuous mode
[ 1077.355429][T12675] syzkaller1: entered allmulticast mode
[ 1077.445736][T12682] netlink: 'syz.1.16533': attribute type 13 has an invalid length.
[ 1077.526981][T12682] netlink: 'syz.1.16533': attribute type 17 has an invalid length.
[ 1077.666753][    C1] ip6_tnl_xmit_ctl: 2 callbacks suppressed
[ 1077.666772][    C1] ip6_tunnel: ip6gre3 xmit: Local address not yet configured!
[ 1078.522447][T12693] syzkaller0: entered promiscuous mode
[ 1078.528931][T12693] syzkaller0: entered allmulticast mode
[ 1078.593986][T12682] gretap0: left promiscuous mode
[ 1078.654288][T12682] 8021q: adding VLAN 0 to HW filter on device team0
[ 1078.669869][T12682] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1078.734960][T12682] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[ 1078.746199][T12682] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 1078.763073][T12682] virt_wifi0: default qdisc (pfifo_fast) fail, fallback to noqueue
[ 1078.774644][T12682] veth1_vlan: left promiscuous mode
[ 1078.782633][T12682] veth0_vlan: left promiscuous mode
[ 1078.791100][T12682] veth0_vlan: entered promiscuous mode
[ 1078.809091][T12682] veth1_vlan: entered promiscuous mode
[ 1078.823846][T12682] veth1_macvtap: left promiscuous mode
[ 1078.832768][T12682] veth0_macvtap: left promiscuous mode
[ 1078.851186][T12682] veth0_macvtap: entered promiscuous mode
[ 1078.863418][T12682] veth1_macvtap: entered promiscuous mode
[ 1078.876183][T12682] 8021q: adding VLAN 0 to HW filter on device bond1
[ 1078.885545][T12682] A link change request failed with some changes committed already. Interface geneve2 may have been left with an inconsistent configuration, please check.
[ 1079.096340][T28076] ip6_tunnel: syztnl0 xmit: Local address not yet configured!
[ 1079.146834][T12717] netlink: 12 bytes leftover after parsing attributes in process `syz.3.16541'.
[ 1079.276148][T12723] netlink: 'syz.0.16543': attribute type 2 has an invalid length.
[ 1079.345827][T12715] xfrm0 speed is unknown, defaulting to 1000
[ 1079.596830][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[ 1079.815334][T12732] mac80211_hwsim hwsim3 syzkaller0: left promiscuous mode
[ 1079.822821][T12732] mac80211_hwsim hwsim3 syzkaller0: left allmulticast mode
[ 1079.850976][T12734] syzkaller0: entered promiscuous mode
[ 1079.856976][T12734] syzkaller0: entered allmulticast mode
[ 1079.983249][T12738] netlink: 'syz.4.16550': attribute type 1 has an invalid length.
[ 1080.042567][T12738] bond24: entered promiscuous mode
[ 1080.062078][T12742] netlink: 28 bytes leftover after parsing attributes in process `syz.4.16550'.
[ 1080.072497][T12738] 8021q: adding VLAN 0 to HW filter on device bond24
[ 1080.095779][T12742] bond24: entered allmulticast mode
[ 1080.123722][T12738] bond24: (slave bridge20): making interface the new active one
[ 1080.150128][T12738] bridge20: entered promiscuous mode
[ 1080.157978][T12738] bridge20: entered allmulticast mode
[ 1080.176815][T12738] bond24: (slave bridge20): Enslaving as an active interface with an up link
[ 1080.626554][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[ 1080.863169][T12712] xfrm0 speed is unknown, defaulting to 1000
[ 1081.676694][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[ 1081.962954][T12707] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[ 1082.594789][T12787] xfrm0 speed is unknown, defaulting to 1000
[ 1082.706761][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[ 1082.786691][    C1] ip6_tunnel: syztnl0 xmit: Local address not yet configured!
[ 1082.962247][T12799] netlink: 'syz.3.16568': attribute type 13 has an invalid length.
[ 1083.097585][ T1601] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[ 1083.134490][ T1601] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[ 1083.177271][ T1601] ip6_tunnel: ip6gre3 xmit: Local address not yet configured!
[ 1083.196258][T12805] syzkaller0: Caught tx_queue_len zero misconfig
[ 1083.228308][ T1601] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[ 1083.246217][T12798] netlink: 4 bytes leftover after parsing attributes in process `syz.3.16568'.
[ 1083.407742][T12811] syzkaller0: entered promiscuous mode
[ 1083.414743][T12811] syzkaller0: entered allmulticast mode
[ 1083.551459][T12822] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode
[ 1083.562562][T12822] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode
[ 1083.656634][ T1602] ip6_tunnel: ip6gre3 xmit: Local address not yet configured!
[ 1083.746836][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[ 1084.150490][ T1602] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[ 1084.424513][T12841] IPVS: stopping backup sync thread 19403 ...
[ 1084.796531][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[ 1085.750166][    C1] ip6_tunnel: ip6gre3 xmit: Local address not yet configured!
[ 1085.833084][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[ 1086.180941][T12832] syzkaller0: entered promiscuous mode
[ 1086.187497][T12832] syzkaller0: entered allmulticast mode
[ 1086.352880][T12848] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[ 1086.451394][T12854] syzkaller0: entered promiscuous mode
[ 1086.465543][T12854] syzkaller0: entered allmulticast mode
[ 1086.731496][T12875] netlink: 'syz.4.16589': attribute type 1 has an invalid length.
[ 1086.834210][T12880] bond25: entered promiscuous mode
[ 1086.861401][T12880] bond25: entered allmulticast mode
[ 1086.876647][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[ 1086.888624][T12880] 8021q: adding VLAN 0 to HW filter on device bond25
[ 1087.019233][T12875] bridge21: entered promiscuous mode
[ 1087.024723][T12875] bridge21: entered allmulticast mode
[ 1087.042908][T12875] bond25: (slave bridge21): Enslaving as a backup interface with an up link
[ 1087.066890][T28080] bond25: Warning: No 802.3ad response from the link partner for any adapters in the bond
[ 1087.090110][T12880] bridge22: entered promiscuous mode
[ 1087.095650][T12880] bridge22: entered allmulticast mode
[ 1087.102084][T12880] bond25: (slave bridge22): Enslaving as a backup interface with a down link
[ 1087.197510][ T1010] bond25: Warning: No 802.3ad response from the link partner for any adapters in the bond
[ 1087.281694][T12902] tipc: Resetting bearer <eth:syzkaller0>
[ 1087.290864][T12902] batman_adv: batadv0: Interface deactivated: gretap2
[ 1087.508780][T12916] netlink: 12 bytes leftover after parsing attributes in process `syz.0.16594'.
[ 1087.532633][T12918] netlink: 'syz.1.16595': attribute type 2 has an invalid length.
[ 1087.540822][T12918] netlink: 'syz.1.16595': attribute type 11 has an invalid length.
[ 1087.549709][T12918] netlink: 132 bytes leftover after parsing attributes in process `syz.1.16595'.
[ 1087.582341][T12919] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[ 1087.644256][T12919] tipc: Resetting bearer <eth:syzkaller0>
[ 1087.906985][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[ 1087.923223][T12927] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[ 1087.998860][T12913] xfrm0 speed is unknown, defaulting to 1000
[ 1088.072917][T12933] netlink: 12 bytes leftover after parsing attributes in process `syz.4.16603'.
[ 1088.198679][T12933] 8021q: adding VLAN 0 to HW filter on device bond26
[ 1088.248354][T12933] netlink: 20 bytes leftover after parsing attributes in process `syz.4.16603'.
[ 1088.315003][T12939] bond26: (slave veth33): Enslaving as an active interface with an up link
[ 1088.413392][T12933] bond26: (slave bridge23): Enslaving as an active interface with an up link
[ 1088.727411][T12952] netlink: 'syz.4.16608': attribute type 1 has an invalid length.
[ 1088.847058][T12952] 8021q: adding VLAN 0 to HW filter on device bond27
[ 1088.946517][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[ 1088.955838][T12954] veth35: entered allmulticast mode
[ 1088.986696][T12954] bond27: (slave veth35): Enslaving as an active interface with an up link
[ 1089.138859][T12957] bond27 (unregistering): (slave veth35): Releasing backup interface
[ 1089.159209][T12957] bond27 (unregistering): Released all slaves
[ 1089.316253][T12965] netlink: 24 bytes leftover after parsing attributes in process `syz.3.16613'.
[ 1089.336005][T12965] netlink: 24 bytes leftover after parsing attributes in process `syz.3.16613'.
[ 1089.357340][T12965] netlink: 'syz.3.16613': attribute type 6 has an invalid length.
[ 1089.390598][T12965] syzkaller0: left promiscuous mode
[ 1089.398849][T12965] syzkaller0: left allmulticast mode
[ 1089.510583][T12969] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1089.570966][T10801] wlan1: No legacy rates in association response
[ 1089.608677][T12968] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1089.639285][T12973] netlink: 4 bytes leftover after parsing attributes in process `syz.1.16611'.
[ 1089.957150][T12977] netlink: 'syz.4.16617': attribute type 1 has an invalid length.
[ 1089.988223][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[ 1090.090449][T12985] ieee802154 phy0 wpan0: encryption failed: -126
[ 1090.098420][T12985] netlink: 8 bytes leftover after parsing attributes in process `syz.0.16619'.
[ 1090.230572][    C1] ip6_tunnel: syztnl0 xmit: Local address not yet configured!
[ 1090.301034][T12981] xfrm0 speed is unknown, defaulting to 1000
[ 1090.805828][T13003] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1090.822678][T13003] syzkaller0: entered promiscuous mode
[ 1090.838640][T13003] syzkaller0: entered allmulticast mode
[ 1090.863305][T13003] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) !
[ 1090.938703][T13008] netlink: 8 bytes leftover after parsing attributes in process `syz.2.16625'.
[ 1090.954903][T13003] tipc: Resetting bearer <eth:syzkaller0>
[ 1090.972900][T13002] tipc: Resetting bearer <eth:syzkaller0>
[ 1091.015474][T13002] tipc: Disabling bearer <eth:syzkaller0>
[ 1091.026522][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[ 1091.429364][T13026] syzkaller0: entered promiscuous mode
[ 1091.440751][T13026] syzkaller0: entered allmulticast mode
[ 1091.474576][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1091.485473][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1091.504038][T13026] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1091.517730][T13024] tipc: Resetting bearer <eth:syzkaller0>
[ 1091.555681][T13024] tipc: Disabling bearer <eth:syzkaller0>
[ 1092.066800][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[ 1092.286268][T13052] syzkaller0: entered promiscuous mode
[ 1092.292684][T13052] syzkaller0: entered allmulticast mode
[ 1092.417327][T13054] netlink: 4 bytes leftover after parsing attributes in process `syz.3.16638'.
[ 1092.522291][T13037] xfrm0 speed is unknown, defaulting to 1000
[ 1092.880924][T13061] syzkaller0: entered promiscuous mode
[ 1092.887358][T13061] syzkaller0: entered allmulticast mode
[ 1093.083983][T13074] syzkaller0: entered promiscuous mode
[ 1093.096496][T13074] syzkaller0: entered allmulticast mode
[ 1093.106967][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[ 1093.279360][T28076] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1093.287679][T28076] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1093.948444][T13088] netlink: 'syz.1.16646': attribute type 1 has an invalid length.
[ 1094.156886][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[ 1095.102626][T28080] wlan1: Trigger new scan to find an IBSS to join
[ 1095.196537][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[ 1095.577393][T13083] workqueue: Failed to create a rescuer kthread for wq "bond27": -EINTR
[ 1095.609793][T13088] workqueue: Failed to create a rescuer kthread for wq "bond13": -EINTR
[ 1095.849648][T13101] netlink: 'syz.3.16650': attribute type 3 has an invalid length.
[ 1096.175906][T13108] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[ 1096.236905][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[ 1096.289271][T13118] netlink: 8 bytes leftover after parsing attributes in process `syz.4.16655'.
[ 1096.562679][T13115] xfrm0 speed is unknown, defaulting to 1000
[ 1096.592914][T13121] syzkaller0: entered promiscuous mode
[ 1096.598841][T13121] syzkaller0: entered allmulticast mode
[ 1096.630965][    C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[ 1096.799990][T13127] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[ 1096.870046][T13127] team0: Mode changed to "loadbalance"
[ 1097.053183][T13137] netlink: 'syz.2.16663': attribute type 10 has an invalid length.
[ 1097.082519][T13139] syzkaller0: entered promiscuous mode
[ 1097.089787][T13139] syzkaller0: entered allmulticast mode
[ 1097.101080][T13135] netlink: 'syz.3.16662': attribute type 1 has an invalid length.
[ 1097.268542][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[ 1097.364390][T13145] block nbd4: reconnected socket
[ 1097.377539][ T4944] block nbd4: Receive control failed (result -32)
[ 1097.501196][T13155] netlink: 'syz.0.16668': attribute type 4 has an invalid length.
[ 1098.174617][ T1010] wlan1: Trigger new scan to find an IBSS to join
[ 1098.307330][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[ 1098.548566][T13188] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1098.631686][T13180] syzkaller0: entered promiscuous mode
[ 1098.644215][T13180] syzkaller0: entered allmulticast mode
[ 1099.356557][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[ 1100.136498][T28073] wlan1: Creating new IBSS network, BSSID 96:30:b7:55:74:d9
[ 1100.406824][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[ 1101.436592][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[ 1101.749175][    C1] ip6_tunnel: ip6gre3 xmit: Local address not yet configured!
[ 1101.778810][T13133] xfrm0 speed is unknown, defaulting to 1000
[ 1101.974231][T13224] syzkaller0: entered promiscuous mode
[ 1101.986846][T13224] syzkaller0: entered allmulticast mode
[ 1102.130419][T13232] netlink: 28 bytes leftover after parsing attributes in process `syz.2.16694'.
[ 1102.140085][T13232] netlink: 28 bytes leftover after parsing attributes in process `syz.2.16694'.
[ 1102.160811][T13232] syzkaller0: entered promiscuous mode
[ 1102.167002][T13229] netlink: 'syz.4.16685': attribute type 49 has an invalid length.
[ 1102.176000][T13232] syzkaller0: entered allmulticast mode
[ 1102.218931][T13235] netlink: 200 bytes leftover after parsing attributes in process `syz.0.16686'.
[ 1102.230388][T13235] netlink: 4 bytes leftover after parsing attributes in process `syz.0.16686'.
[ 1102.466928][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[ 1102.831134][T13241] syzkaller0: entered promiscuous mode
[ 1102.836854][T13241] syzkaller0: entered allmulticast mode
[ 1102.895053][T13247] netlink: 4 bytes leftover after parsing attributes in process `syz.2.16690'.
[ 1102.989167][T13252] netlink: 'syz.0.16691': attribute type 1 has an invalid length.
[ 1103.004990][T13252] netlink: 'syz.0.16691': attribute type 2 has an invalid length.
[ 1103.034021][T13252] rdma_rxe: rxe_newlink: failed to add lo
[ 1103.278224][T13268] netlink: 'syz.4.16699': attribute type 16 has an invalid length.
[ 1103.300099][T13263] syzkaller0: entered promiscuous mode
[ 1103.316919][T13263] syzkaller0: entered allmulticast mode
[ 1103.506510][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[ 1103.874423][T13284] mac80211_hwsim hwsim3 syzkaller0: left promiscuous mode
[ 1103.886586][T13284] mac80211_hwsim hwsim3 syzkaller0: left allmulticast mode
[ 1104.518343][T13295] netlink: 'syz.4.16707': attribute type 13 has an invalid length.
[ 1104.546844][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[ 1104.577442][T13300] netlink: 20 bytes leftover after parsing attributes in process `syz.4.16707'.
[ 1104.946617][    C1] ip6_tunnel: syztnl0 xmit: Local address not yet configured!
[ 1104.955609][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[ 1105.229170][T13321] netlink: 'syz.2.16711': attribute type 1 has an invalid length.
[ 1105.314000][T13321] 8021q: adding VLAN 0 to HW filter on device bond29
[ 1105.340842][T13323] vlan4: entered allmulticast mode
[ 1105.347307][T13323] bond29: entered allmulticast mode
[ 1105.561461][T13335] syzkaller0: left promiscuous mode
[ 1105.567532][T13335] syzkaller0: left allmulticast mode
[ 1105.587436][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[ 1105.657842][T13340] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[ 1105.667941][T13340] syzkaller0: entered promiscuous mode
[ 1105.673588][T13340] syzkaller0: entered allmulticast mode
[ 1106.019511][T13344] syzkaller0: entered promiscuous mode
[ 1106.025172][T13344] syzkaller0: entered allmulticast mode
[ 1106.271268][T13350] netlink: 'syz.3.16718': attribute type 10 has an invalid length.
[ 1106.309582][T13351] mac80211_hwsim hwsim3 syzkaller0: Caught tx_queue_len zero misconfig
[ 1106.337779][T13350] syz_tun: entered promiscuous mode
[ 1106.571847][T13361] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode
[ 1106.579591][T13361] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode
[ 1106.588061][T13363] syzkaller0: entered promiscuous mode
[ 1106.594023][T13363] syzkaller0: entered allmulticast mode
[ 1106.636805][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[ 1106.768552][T13369] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[ 1106.821704][T13370] tipc: Resetting bearer <eth:syzkaller0>
[ 1107.048485][T13378] netlink: 12 bytes leftover after parsing attributes in process `syz.4.16730'.
[ 1107.144012][T13378] bridge24: port 1(veth37) entered blocking state
[ 1107.151196][T13378] bridge24: port 1(veth37) entered disabled state
[ 1107.158253][T13378] veth37: entered allmulticast mode
[ 1107.165694][T13378] veth37: entered promiscuous mode
[ 1107.174758][T13381] bond18: (slave veth0_to_bond): Releasing active interface
[ 1107.186199][T13381] bridge24: port 2(veth0_to_bond) entered blocking state
[ 1107.195856][T13381] bridge24: port 2(veth0_to_bond) entered disabled state
[ 1107.211320][T13381] veth0_to_bond: entered promiscuous mode
[ 1107.235603][T13378] bridge24: port 3(veth39) entered blocking state
[ 1107.242322][T13378] bridge24: port 3(veth39) entered disabled state
[ 1107.249155][T13378] veth39: entered allmulticast mode
[ 1107.255813][T13378] veth39: entered promiscuous mode
[ 1107.284729][T13384] syzkaller0: entered promiscuous mode
[ 1107.291014][T13384] syzkaller0: entered allmulticast mode
[ 1107.377066][T13388] mac80211_hwsim hwsim3 syzkaller0: left promiscuous mode
[ 1107.384415][T13388] mac80211_hwsim hwsim3 syzkaller0: left allmulticast mode
[ 1107.488339][T13394] syzkaller0: entered promiscuous mode
[ 1107.494055][T13394] syzkaller0: entered allmulticast mode
[ 1107.503972][T13394] 0: reclassify loop, rule prio 0, protocol 800
[ 1107.676635][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[ 1108.430236][T13404] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode
[ 1108.447872][T13404] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode
[ 1108.514720][T13418] syzkaller0: entered promiscuous mode
[ 1108.520689][T13418] syzkaller0: entered allmulticast mode
[ 1108.649002][T13440] netlink: 12 bytes leftover after parsing attributes in process `syz.1.16745'.
[ 1108.728908][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[ 1109.747904][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[ 1110.796925][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[ 1111.600484][T13438] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[ 1111.826695][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[ 1111.838111][T13475] syzkaller0: entered promiscuous mode
[ 1111.858688][T13475] syzkaller0: entered allmulticast mode
[ 1111.939418][T13480] syzkaller0: entered promiscuous mode
[ 1111.945433][T13480] syzkaller0: entered allmulticast mode
[ 1112.199058][T13494] tipc: New replicast peer: 255.255.255.255
[ 1112.210455][T13494] tipc: Enabled bearer <udp:syz2>, priority 5
[ 1112.293967][T13499] syzkaller0: entered promiscuous mode
[ 1112.300039][T13499] syzkaller0: entered allmulticast mode
[ 1112.309313][T13497] syzkaller0: entered promiscuous mode
[ 1112.323561][T13497] syzkaller0: entered allmulticast mode
[ 1112.532699][T13512] netlink: 8 bytes leftover after parsing attributes in process `syz.3.16765'.
[ 1112.640906][T13515] syzkaller0: entered promiscuous mode
[ 1112.646535][T13515] syzkaller0: entered allmulticast mode
[ 1112.866820][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[ 1112.935580][T13533] syzkaller0: entered promiscuous mode
[ 1112.952778][T13533] syzkaller0: entered allmulticast mode
[ 1113.529183][T13528] syzkaller0: entered promiscuous mode
[ 1113.535559][T13528] syzkaller0: entered allmulticast mode
[ 1113.553860][T13551] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[ 1113.906854][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[ 1114.101269][T13570] syzkaller0: entered promiscuous mode
[ 1114.111755][T13570] syzkaller0: entered allmulticast mode
[ 1114.376699][T13576] netlink: 12 bytes leftover after parsing attributes in process `syz.1.16780'.
[ 1114.956846][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[ 1115.843348][ T1319] ieee802154 phy0 wpan0: encryption failed: -22
[ 1115.991157][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[ 1117.037534][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[ 1117.755476][T13576] workqueue: Failed to create a rescuer kthread for wq "bond13": -EINTR
[ 1117.820776][T13596] tipc: Resetting bearer <eth:syzkaller0>
[ 1117.939752][T13610] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1118.005114][T13610] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1118.043093][T13603] syzkaller0: left promiscuous mode
[ 1118.049038][T13603] syzkaller0: left allmulticast mode
[ 1118.066624][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[ 1118.079332][T13610] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1118.306640][T13619] syzkaller0: entered promiscuous mode
[ 1118.312950][T13619] syzkaller0: entered allmulticast mode
[ 1118.343404][T13621] netlink: 28 bytes leftover after parsing attributes in process `syz.0.16789'.
[ 1118.366520][T13621] netlink: 28 bytes leftover after parsing attributes in process `syz.0.16789'.
[ 1118.383730][T13621] syzkaller0: entered promiscuous mode
[ 1118.393275][T13621] syzkaller0: entered allmulticast mode
[ 1118.721908][T13629] syzkaller0: entered promiscuous mode
[ 1118.727709][T13629] syzkaller0: entered allmulticast mode
[ 1118.874935][T13648] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[ 1119.106919][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[ 1119.142494][T13654] sctp: [Deprecated]: syz.4.16798 (pid 13654) Use of struct sctp_assoc_value in delayed_ack socket option.
[ 1119.142494][T13654] Use struct sctp_sack_info instead
[ 1119.193719][T13653] syzkaller1: entered promiscuous mode
[ 1119.199907][T13653] syzkaller1: entered allmulticast mode
[ 1119.300424][T13657] syzkaller0: entered promiscuous mode
[ 1119.306123][T13657] syzkaller0: entered allmulticast mode
[ 1119.679492][T13672] syzkaller0: entered promiscuous mode
[ 1119.702940][T13672] syzkaller0: entered allmulticast mode
[ 1120.132807][T13694] netlink: 28 bytes leftover after parsing attributes in process `syz.2.16811'.
[ 1120.146886][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[ 1120.151760][T13694] netlink: 28 bytes leftover after parsing attributes in process `syz.2.16811'.
[ 1120.170266][T13694] tc action pedit 'at' offset 9 out of bounds
[ 1120.314415][T13699] sit0: entered promiscuous mode
[ 1120.336780][T13699] netlink: 'syz.4.16813': attribute type 1 has an invalid length.
[ 1120.349190][T13699] netlink: 1 bytes leftover after parsing attributes in process `syz.4.16813'.
[ 1120.474812][T13704] syzkaller0: entered promiscuous mode
[ 1120.492875][T13704] syzkaller0: entered allmulticast mode
[ 1120.689517][T13719] vlan0: entered promiscuous mode
[ 1120.750150][T13718] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1120.787707][T13718] syzkaller0: entered promiscuous mode
[ 1120.806787][T13718] syzkaller0: entered allmulticast mode
[ 1120.843783][T13718] tipc: Resetting bearer <eth:syzkaller0>
[ 1120.893319][T13717] tipc: Resetting bearer <eth:syzkaller0>
[ 1120.948887][T13717] tipc: Disabling bearer <eth:syzkaller0>
[ 1121.187051][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[ 1121.644624][T13754] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 1121.697562][T13754] netlink: 28 bytes leftover after parsing attributes in process `syz.1.16822'.
[ 1122.230154][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[ 1123.276750][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[ 1124.316974][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[ 1124.947749][T13769] netlink: 9 bytes leftover after parsing attributes in process `syz.2.16831'.
[ 1124.998753][T13765] veth1_macvtap: mtu less than device minimum
[ 1125.019367][T13777] netlink: 'syz.2.16831': attribute type 1 has an invalid length.
[ 1125.038849][T13777] netlink: 'syz.2.16831': attribute type 2 has an invalid length.
[ 1125.347266][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[ 1125.954028][T13823] team0: Port device xfrm0 added
[ 1125.999503][T13825] xt_hashlimit: size too large, truncated to 1048576
[ 1126.043972][T13829] xt_hashlimit: size too large, truncated to 1048576
[ 1126.069798][T13829] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6
[ 1126.202887][T13833] netlink: 'syz.3.16852': attribute type 4 has an invalid length.
[ 1126.396520][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[ 1126.458313][T13840] sch_tbf: burst 2 is lower than device syzkaller0 mtu (313) !
[ 1126.602443][T13843] mac80211_hwsim hwsim3 syzkaller0: left promiscuous mode
[ 1126.617105][T13843] mac80211_hwsim hwsim3 syzkaller0: left allmulticast mode
[ 1126.643239][T13843] tc action pedit 'at' offset 20 out of bounds
[ 1126.645233][T13846] tc action pedit offset 1073741824 out of bounds
[ 1126.661876][T13846] tc action pedit offset 1073741824 out of bounds
[ 1126.668394][T13846] tc action pedit offset 1073741824 out of bounds
[ 1126.674861][T13846] tc action pedit offset 1073741824 out of bounds
[ 1126.681520][T13846] tc action pedit offset 1073741824 out of bounds
[ 1126.687977][T13846] tc action pedit offset 1073741824 out of bounds
[ 1126.694453][T13846] tc action pedit offset 1073741824 out of bounds
[ 1126.700971][T13846] tc action pedit offset 1073741824 out of bounds
[ 1126.707457][T13846] tc action pedit offset 1073741824 out of bounds
[ 1126.710251][T13848] netlink: 'syz.1.16858': attribute type 1 has an invalid length.
[ 1126.713889][T13846] tc action pedit offset 1073741824 out of bounds
[ 1126.713928][T13846] TC_ACT_REPEAT abuse ?
[ 1126.746691][T13848] netlink: 'syz.1.16858': attribute type 2 has an invalid length.
[ 1126.921502][T13848] netlink: 36 bytes leftover after parsing attributes in process `syz.1.16858'.
[ 1126.933100][T13848] netlink: 24 bytes leftover after parsing attributes in process `syz.1.16858'.
[ 1126.949566][T13848] netlink: 4 bytes leftover after parsing attributes in process `syz.1.16858'.
[ 1126.960749][T13848] hsr_slave_0: left promiscuous mode
[ 1126.982910][T13848] hsr_slave_1: left promiscuous mode
[ 1127.011680][T13860] netlink: 4 bytes leftover after parsing attributes in process `syz.0.16862'.
[ 1127.056419][T13860] macvtap1: entered promiscuous mode
[ 1127.067814][T13860] syz_tun: entered promiscuous mode
[ 1127.073318][T13860] macvtap1: entered allmulticast mode
[ 1127.091426][T13865] syz_tun: left promiscuous mode
[ 1127.097236][T13865] macvtap1: left promiscuous mode
[ 1127.102306][T13865] macvtap1: left allmulticast mode
[ 1127.132042][T13867] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode
[ 1127.156845][T13867] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode
[ 1127.248200][T13875] netlink: 'syz.1.16866': attribute type 1 has an invalid length.
[ 1127.256601][T13875] netlink: 'syz.1.16866': attribute type 8 has an invalid length.
[ 1127.426954][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[ 1127.917260][T13898] tc action pedit unable to extract header offset for header type (0x4)
[ 1127.970465][T13900] x_tables: ip6_tables: cgroup match: used from hooks PREROUTING, but only valid from INPUT/OUTPUT/POSTROUTING
[ 1128.001172][T13900] nbd: socks must be embedded in a SOCK_ITEM attr
[ 1128.013949][T13900] netlink: 'syz.2.16875': attribute type 1 has an invalid length.
[ 1128.034321][T13900] netlink: 'syz.2.16875': attribute type 2 has an invalid length.
[ 1128.185596][T13907] netlink: 4 bytes leftover after parsing attributes in process `syz.2.16877'.
[ 1128.205841][T13901] udevd[13901]: inotify_add_watch(7, /dev/nbd11, 10) failed: No such file or directory
[ 1128.226957][ T4944] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[ 1128.378992][T13907] 8021q: adding VLAN 0 to HW filter on device bond30
[ 1128.466507][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[ 1128.515902][T13924] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[ 1128.527333][T13924] sch_tbf: burst 255 is lower than device syzkaller0 mtu (313) !
[ 1128.561954][T13925] A link change request failed with some changes committed already. Interface 
2
6±ÿ†ˆ¬hËdtÍ may have been left with an inconsistent configuration, please check.
[ 1128.696150][T13931] tc action pedit 'at' offset -4096 out of bounds
[ 1128.705256][T13931] tc action pedit 'at' offset -4096 out of bounds
[ 1128.711770][T13931] tc action pedit 'at' offset -4096 out of bounds
[ 1128.718243][T13931] tc action pedit 'at' offset -4096 out of bounds
[ 1128.724695][T13931] tc action pedit 'at' offset -4096 out of bounds
[ 1128.731178][T13931] tc action pedit 'at' offset -4096 out of bounds
[ 1128.737639][T13931] tc action pedit 'at' offset -4096 out of bounds
[ 1128.744066][T13931] tc action pedit 'at' offset -4096 out of bounds
[ 1128.750558][T13931] tc action pedit 'at' offset -4096 out of bounds
[ 1128.757166][T13931] TC_ACT_REPEAT abuse ?
[ 1128.770209][T13933] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[ 1128.939584][T13941] netlink: 'syz.4.16886': attribute type 29 has an invalid length.
[ 1129.059241][T13943] syzkaller0: entered promiscuous mode
[ 1129.065061][T13943] syzkaller0: entered allmulticast mode
[ 1129.443523][T13946] syzkaller0: entered promiscuous mode
[ 1129.450162][T13946] syzkaller0: entered allmulticast mode
[ 1129.506779][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[ 1129.614539][T13951] syzkaller0: entered promiscuous mode
[ 1129.623423][T13951] syzkaller0: entered allmulticast mode
[ 1129.783612][T13959] netlink: 'syz.0.16893': attribute type 17 has an invalid length.
[ 1130.546804][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[ 1131.596716][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[ 1131.746202][T13935] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[ 1131.826885][    C1] ip6_tunnel: ip6gre3 xmit: Local address not yet configured!
[ 1131.947131][T13976] netlink: 184 bytes leftover after parsing attributes in process `syz.4.16899'.
[ 1131.956879][T13976] netlink: 184 bytes leftover after parsing attributes in process `syz.4.16899'.
[ 1131.967378][T13976] netlink: 28 bytes leftover after parsing attributes in process `syz.4.16899'.
[ 1131.997337][T13976] netlink: 8 bytes leftover after parsing attributes in process `syz.4.16899'.
[ 1132.089939][T13985] syzkaller0: entered promiscuous mode
[ 1132.104209][T13985] syzkaller0: entered allmulticast mode
[ 1132.429666][T13996] netlink: 8 bytes leftover after parsing attributes in process `syz.2.16904'.
[ 1132.466660][    C1] ip6_tunnel: syztnl0 xmit: Local address not yet configured!
[ 1132.600976][T14001] syzkaller0: left promiscuous mode
[ 1132.607856][T14001] syzkaller0: left allmulticast mode
[ 1132.618525][T14001] tc action pedit offset must be on 32 bit boundaries
[ 1132.627564][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[ 1132.753791][T14008] IPVS: set_ctl: invalid protocol: 2 0.0.0.0:20004
[ 1132.833578][T14013] netlink: 8 bytes leftover after parsing attributes in process `syz.3.16908'.
[ 1132.863136][T14008] bond15: option packets_per_slave: mode dependency failed, not supported in mode balance-tlb(5)
[ 1132.897791][T14008] bond15 (unregistering): Released all slaves
[ 1133.180392][T14013] batman_adv: netdevsim0: Interface deactivated: batadv_slave_1
[ 1133.469915][T14013] bridge0: port 1(vlan3) entered disabled state
[ 1133.545377][T14013] batman_adv: netdevsim0: Interface deactivated: gretap3
[ 1133.571578][T14013] tipc: Resetting bearer <eth:syzkaller0>
[ 1133.626785][T28080] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[ 1133.635933][T28080] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1133.645795][T28080] netdevsim netdevsim3 eth0: unset [1, 1] type 2 family 0 port 20003 - 0
[ 1133.655138][T28080] netdevsim netdevsim3 eth0: unset [1, 2] type 2 family 0 port 37408 - 0
[ 1133.666251][T14039] ieee802154 phy0 wpan0: encryption failed: -126
[ 1133.667546][T28080] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[ 1133.673299][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[ 1133.681743][T28080] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1133.719578][T28080] netdevsim netdevsim3 eth1: unset [1, 1] type 2 family 0 port 20003 - 0
[ 1133.728433][T28080] netdevsim netdevsim3 eth1: unset [1, 2] type 2 family 0 port 37408 - 0
[ 1133.817919][T14027] syzkaller0: entered promiscuous mode
[ 1133.823565][T14027] syzkaller0: entered allmulticast mode
[ 1133.879135][T28080] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[ 1133.896585][T28080] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1133.913193][T28080] netdevsim netdevsim3 eth2: unset [1, 1] type 2 family 0 port 20003 - 0
[ 1133.936668][T28080] netdevsim netdevsim3 eth2: unset [1, 2] type 2 family 0 port 37408 - 0
[ 1133.947637][T28080] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[ 1133.962587][T28080] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1133.974629][T28080] netdevsim netdevsim3 eth3: unset [1, 1] type 2 family 0 port 20003 - 0
[ 1133.983581][T28080] netdevsim netdevsim3 eth3: unset [1, 2] type 2 family 0 port 37408 - 0
[ 1134.037123][   T29] audit: type=1804 audit(1782435014.313:14): pid=14043 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.16913" name="/newroot/3648/cgroup.controllers" dev="tmpfs" ino=18465 res=1 errno=0
[ 1134.087895][   T29] audit: type=1800 audit(1782435014.313:15): pid=14043 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.16913" name="cgroup.controllers" dev="tmpfs" ino=18465 res=0 errno=0
[ 1134.716505][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[ 1135.756901][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[ 1136.796657][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[ 1137.543698][T14077] netlink: 4 bytes leftover after parsing attributes in process `syz.4.16919'.
[ 1137.665316][T14073] netlink: 4 bytes leftover after parsing attributes in process `syz.4.16919'.
[ 1137.743602][T14087] netlink: 8 bytes leftover after parsing attributes in process `syz.2.16923'.
[ 1137.775859][T14085] tc action pedit offset must be on 32 bit boundaries
[ 1137.786769][    C1] tc action pedit offset must be on 32 bit boundaries
[ 1137.826790][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[ 1138.126677][    C1] tc action pedit offset must be on 32 bit boundaries
[ 1138.244131][T14109] vlan5: entered promiscuous mode
[ 1138.298236][T14113] bridge0: vlan filtering disabled, automatically disabling multicast vlan snooping
[ 1138.622258][T14129] netlink: 28 bytes leftover after parsing attributes in process `syz.2.16937'.
[ 1138.674178][T14132] macvlan0: entered promiscuous mode
[ 1138.683806][T14132] A link change request failed with some changes committed already. Interface macvlan0 may have been left with an inconsistent configuration, please check.
[ 1138.811010][T14136] syzkaller0: entered promiscuous mode
[ 1138.820889][T14136] syzkaller0: entered allmulticast mode
[ 1138.862595][T14141] veth0_to_hsr: Caught tx_queue_len zero misconfig
[ 1138.876533][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[ 1138.965853][T14141] netlink: 104 bytes leftover after parsing attributes in process `syz.3.16942'.
[ 1138.983191][T14148] syzkaller0: entered promiscuous mode
[ 1138.988890][T14148] syzkaller0: entered allmulticast mode
[ 1139.313215][T14160] syzkaller0: entered promiscuous mode
[ 1139.326740][T14160] syzkaller0: entered allmulticast mode
[ 1139.340653][T14163] syzkaller0: entered promiscuous mode
[ 1139.350646][T14163] syzkaller0: entered allmulticast mode
[ 1139.542988][T14167] syzkaller0: entered promiscuous mode
[ 1139.549245][T14167] syzkaller0: entered allmulticast mode
[ 1139.906770][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[ 1139.930806][T14186] netlink: 'syz.4.16955': attribute type 10 has an invalid length.
[ 1139.951839][T14186] netlink: 'syz.4.16955': attribute type 10 has an invalid length.
[ 1140.008575][T14186] bond0: (slave 
): Enslaving as an active interface with an up link
[ 1140.185932][T14189] pim6reg1: entered promiscuous mode
[ 1140.200566][T14189] pim6reg1: entered allmulticast mode
[ 1140.946521][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[ 1141.060875][T14205] team0: Port device xfrm0 removed
[ 1141.215120][T14226] netlink: 732 bytes leftover after parsing attributes in process `syz.2.16966'.
[ 1141.225653][T14226] netlink: 732 bytes leftover after parsing attributes in process `syz.2.16966'.
[ 1141.300757][T14231] netlink: 'syz.2.16966': attribute type 10 has an invalid length.
[ 1141.532517][T14231] team0: Port device dummy0 added
[ 1141.646867][T14217] syzkaller0: entered promiscuous mode
[ 1141.678964][T14217] syzkaller0: entered allmulticast mode
[ 1141.721084][T14247] netlink: 16 bytes leftover after parsing attributes in process `syz.3.16974'.
[ 1141.809816][T14251] netlink: 'syz.0.16975': attribute type 10 has an invalid length.
[ 1141.986873][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[ 1142.144721][T14257] syzkaller0: entered promiscuous mode
[ 1142.150482][T14257] syzkaller0: entered allmulticast mode
[ 1142.178319][T14248] syzkaller1: entered promiscuous mode
[ 1142.183870][T14248] syzkaller1: entered allmulticast mode
[ 1142.427248][T14273] netlink: 4 bytes leftover after parsing attributes in process `syz.4.16980'.
[ 1143.030767][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[ 1144.076666][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[ 1145.116511][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[ 1145.299198][T14293] A link change request failed with some changes committed already. Interface macvlan0 may have been left with an inconsistent configuration, please check.
[ 1145.318972][T14293] netlink: 24 bytes leftover after parsing attributes in process `syz.3.16987'.
[ 1145.332693][T14294] netlink: 8 bytes leftover after parsing attributes in process `syz.2.16985'.
[ 1145.379825][T14294] netlink: 20 bytes leftover after parsing attributes in process `syz.2.16985'.
[ 1145.558569][T14303] syz_tun: left promiscuous mode
[ 1145.583951][T14303] tipc: Resetting bearer <eth:syzkaller0>
[ 1145.613436][T14303] syzkaller0: left promiscuous mode
[ 1145.621964][T14303] syzkaller0: left allmulticast mode
[ 1145.638258][T14303] bond14: left promiscuous mode
[ 1145.643569][T14303] vlan4: left allmulticast mode
[ 1145.649219][T14303] bond14: left allmulticast mode
[ 1145.655195][T14303] vlan5: left promiscuous mode
[ 1145.661474][T14303] bond0: left promiscuous mode
[ 1145.668195][T14303] batadv0: left promiscuous mode
[ 1145.676122][T14303] vlan5: left allmulticast mode
[ 1145.681750][T14303] bond0: left allmulticast mode
[ 1145.687441][T14303] batadv0: left allmulticast mode
[ 1145.693072][T14303] ip6gre3: left promiscuous mode
[ 1145.700438][T14303] ip6gre3: left allmulticast mode
[ 1145.706146][T14311] netlink: 'syz.0.16992': attribute type 12 has an invalid length.
[ 1145.967697][T14324] syzkaller0: entered promiscuous mode
[ 1145.974060][T14324] syzkaller0: entered allmulticast mode
[ 1146.146867][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[ 1146.202775][T14329] syzkaller0: left promiscuous mode
[ 1146.208235][T14329] syzkaller0: left allmulticast mode
[ 1146.254281][T14331] netlink: 'syz.0.17000': attribute type 1 has an invalid length.
[ 1146.263238][T14331] netlink: 'syz.0.17000': attribute type 2 has an invalid length.
[ 1146.294434][T14333] syzkaller0: entered promiscuous mode
[ 1146.300921][T14333] syzkaller0: entered allmulticast mode
[ 1146.546319][T14341] netlink: 'syz.1.17004': attribute type 1 has an invalid length.
[ 1146.662899][T14341] 8021q: adding VLAN 0 to HW filter on device bond13
[ 1146.688868][T14352] bond13: (slave veth0_to_bond): making interface the new active one
[ 1146.717395][T14352] bond13: (slave veth0_to_bond): Enslaving as an active interface with an up link
[ 1146.730174][T14354] syzkaller0: entered promiscuous mode
[ 1146.736027][T14354] syzkaller0: entered allmulticast mode
[ 1146.961241][T14358] bond13: entered promiscuous mode
[ 1146.969248][T14358] veth0_to_bond: entered promiscuous mode
[ 1146.999553][T14358] bond13: entered allmulticast mode
[ 1147.047881][T14358] veth0_to_bond: entered allmulticast mode
[ 1147.072244][T14341] macvlan2: entered promiscuous mode
[ 1147.078279][T14341] macvlan2: entered allmulticast mode
[ 1147.087862][T14341] 8021q: adding VLAN 0 to HW filter on device macvlan2
[ 1147.144642][T14341] bond13: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of veth0_to_bond
[ 1147.184594][   T29] audit: type=1800 audit(1782435027.463:16): pid=14373 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.17013" name="memory.events" dev="tmpfs" ino=18018 res=0 errno=0
[ 1147.206708][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[ 1147.408509][T14380] netlink: 4 bytes leftover after parsing attributes in process `syz.3.17017'.
[ 1147.411664][T14381] syzkaller0: entered promiscuous mode
[ 1147.423698][T14381] syzkaller0: entered allmulticast mode
[ 1147.434590][T14380] netlink: 12 bytes leftover after parsing attributes in process `syz.3.17017'.
[ 1147.500289][T14377] syzkaller0: entered promiscuous mode
[ 1147.505965][T14377] syzkaller0: entered allmulticast mode
[ 1147.724403][T14393] tipc: Resetting bearer <eth:syzkaller0>
[ 1148.227027][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[ 1148.241993][T14420] ip6gre5: entered promiscuous mode
[ 1148.266525][T14420] ip6gre5: entered allmulticast mode
[ 1148.267874][T14422] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 1148.547916][T31142] ip6_tunnel: ip6gre5 xmit: Local address not yet configured!
[ 1148.555756][T31142] ip6_tunnel: ip6gre5 xmit: Local address not yet configured!
[ 1148.576988][ T1601] ip6_tunnel: ip6gre5 xmit: Local address not yet configured!
[ 1148.597557][T14424] tc action pedit offset must be on 32 bit boundaries
[ 1148.897403][T14426] syzkaller0: entered promiscuous mode
[ 1148.903153][T14426] syzkaller0: entered allmulticast mode
[ 1148.927076][ T1601] ip6_tunnel: ip6gre5 xmit: Local address not yet configured!
[ 1149.167055][T14434] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[ 1149.266522][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[ 1149.302053][T14444] syzkaller0: entered promiscuous mode
[ 1149.308464][T14444] syzkaller0: entered allmulticast mode
[ 1149.343500][T14445] tipc: Failed to remove unknown binding: 66,0,0/1073741825:323794069/323794071
[ 1149.368898][T14445] tipc: Failed to remove unknown binding: 66,0,0/1073741825:323794069/323794070
[ 1149.388233][T14445] tipc: Failed to remove unknown binding: 66,0,0/1073741825:323794069/323794071
[ 1149.416781][T14445] tipc: Failed to remove unknown binding: 66,0,0/1073741825:323794069/323794070
[ 1149.508282][ T4592] ip6_tunnel: ip6gre5 xmit: Local address not yet configured!
[ 1149.695147][T14453] mac80211_hwsim hwsim3 syzkaller0: left promiscuous mode
[ 1149.709576][T14453] mac80211_hwsim hwsim3 syzkaller0: left allmulticast mode
[ 1149.752992][T14457] netlink: 104 bytes leftover after parsing attributes in process `syz.0.17042'.
[ 1149.926835][T14469] netlink: 20 bytes leftover after parsing attributes in process `syz.0.17044'.
[ 1149.928036][T14468] netlink: 'syz.3.17045': attribute type 1 has an invalid length.
[ 1149.949974][T14468] netlink: 'syz.3.17045': attribute type 2 has an invalid length.
[ 1149.986220][T14469] 
[ 1149.988574][T14469] ======================================================
[ 1149.995597][T14469] WARNING: possible circular locking dependency detected
[ 1150.002670][T14469] syzkaller #0 Not tainted
[ 1150.007112][T14469] ------------------------------------------------------
[ 1150.014152][T14469] syz.0.17044/14469 is trying to acquire lock:
[ 1150.020312][T14469] ffff888033bc4018 (set->srcu){.+.+}-{0:0}, at: __synchronize_srcu+0xb5/0x2f0
[ 1150.029340][T14469] 
[ 1150.029340][T14469] but task is already holding lock:
[ 1150.036717][T14469] ffff88802a763d68 (&q->elevator_lock){+.+.}-{4:4}, at: elevator_change+0x1af/0x480
[ 1150.046251][T14469] 
[ 1150.046251][T14469] which lock already depends on the new lock.
[ 1150.046251][T14469] 
[ 1150.056664][T14469] 
[ 1150.056664][T14469] the existing dependency chain (in reverse order) is:
[ 1150.065689][T14469] 
[ 1150.065689][T14469] -> #6 (&q->elevator_lock){+.+.}-{4:4}:
[ 1150.073645][T14469]        __mutex_lock+0x19d/0x1550
[ 1150.078845][T14469]        elevator_change+0x1af/0x480
[ 1150.084159][T14469]        elevator_set_none+0xb5/0x140
[ 1150.089557][T14469]        blk_mq_update_nr_hw_queues+0x5ef/0x19f0
[ 1150.095981][T14469]        nbd_start_device+0x189/0xb30
[ 1150.101640][T14469]        nbd_genl_connect+0x1597/0x1c10
[ 1150.107204][T14469]        genl_family_rcv_msg_doit+0x233/0x340
[ 1150.113450][T14469]        genl_rcv_msg+0x614/0x7a0
[ 1150.118495][T14469]        netlink_rcv_skb+0x226/0x4a0
[ 1150.123798][T14469]        genl_rcv+0x28/0x40
[ 1150.128322][T14469]        netlink_unicast+0x7bb/0x940
[ 1150.133630][T14469]        netlink_sendmsg+0x813/0xb40
[ 1150.138934][T14469]        sock_sendmsg_nosec+0x13a/0x180
[ 1150.144575][T14469]        ____sys_sendmsg+0x54e/0x850
[ 1150.149879][T14469]        ___sys_sendmsg+0x2a5/0x360
[ 1150.155186][T14469]        __x64_sys_sendmsg+0x1b1/0x290
[ 1150.160704][T14469]        do_syscall_64+0x174/0x580
[ 1150.165924][T14469]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1150.172403][T14469] 
[ 1150.172403][T14469] -> #5 (&q->q_usage_counter(io)#57){++++}-{0:0}:
[ 1150.181501][T14469]        blk_alloc_queue+0x544/0x690
[ 1150.186814][T14469]        __blk_mq_alloc_disk+0x194/0x390
[ 1150.192464][T14469]        nbd_dev_add+0x494/0xb60
[ 1150.197417][T14469]        nbd_init+0x15f/0x1e0
[ 1150.202230][T14469]        do_one_initcall+0x250/0x870
[ 1150.207536][T14469]        do_initcall_level+0x10a/0x1a0
[ 1150.213088][T14469]        do_initcalls+0x59/0xa0
[ 1150.217969][T14469]        kernel_init_freeable+0x29d/0x3e0
[ 1150.223704][T14469]        kernel_init+0x1d/0x1d0
[ 1150.228573][T14469]        ret_from_fork+0x514/0xb70
[ 1150.233734][T14469]        ret_from_fork_asm+0x1a/0x30
[ 1150.239037][T14469] 
[ 1150.239037][T14469] -> #4 (fs_reclaim){+.+.}-{0:0}:
[ 1150.246269][T14469]        fs_reclaim_acquire+0x71/0x100
[ 1150.251750][T14469]        __kmalloc_cache_node_noprof+0x66/0x630
[ 1150.258016][T14469]        create_worker+0x112/0x7b0
[ 1150.263171][T14469]        workqueue_prepare_cpu+0xe4/0x170
[ 1150.268916][T14469]        cpuhp_invoke_callback+0x434/0x810
[ 1150.274778][T14469]        _cpu_up+0x2ce/0x5b0
[ 1150.279391][T14469]        cpu_up+0x1d2/0x220
[ 1150.283919][T14469]        cpuhp_bringup_mask+0xb2/0x1a0
[ 1150.289572][T14469]        cpuhp_bringup_cpus_parallel+0x109/0x120
[ 1150.295937][T14469]        bringup_nonboot_cpus+0x17/0x30
[ 1150.301506][T14469]        smp_init+0x32/0x110
[ 1150.306226][T14469]        kernel_init_freeable+0x27f/0x3e0
[ 1150.311969][T14469]        kernel_init+0x1d/0x1d0
[ 1150.316849][T14469]        ret_from_fork+0x514/0xb70
[ 1150.321981][T14469]        ret_from_fork_asm+0x1a/0x30
[ 1150.327294][T14469] 
[ 1150.327294][T14469] -> #3 (cpu_hotplug_lock){++++}-{0:0}:
[ 1150.335054][T14469]        cpus_read_lock+0x42/0x160
[ 1150.340328][T14469]        static_key_slow_inc+0x12/0x30
[ 1150.345807][T14469]        nbd_genl_reconfigure+0x1301/0x1e80
[ 1150.351727][T14469]        genl_family_rcv_msg_doit+0x233/0x340
[ 1150.357933][T14469]        genl_rcv_msg+0x614/0x7a0
[ 1150.362976][T14469]        netlink_rcv_skb+0x226/0x4a0
[ 1150.368282][T14469]        genl_rcv+0x28/0x40
[ 1150.372810][T14469]        netlink_unicast+0x7bb/0x940
[ 1150.378116][T14469]        netlink_sendmsg+0x813/0xb40
[ 1150.383508][T14469]        sock_sendmsg_nosec+0x13a/0x180
[ 1150.389334][T14469]        ____sys_sendmsg+0x54e/0x850
[ 1150.394640][T14469]        ___sys_sendmsg+0x2a5/0x360
[ 1150.399853][T14469]        __x64_sys_sendmsg+0x1b1/0x290
[ 1150.405322][T14469]        do_syscall_64+0x174/0x580
[ 1150.410446][T14469]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1150.416889][T14469] 
[ 1150.416889][T14469] -> #2 (&nsock->tx_lock){+.+.}-{4:4}:
[ 1150.424643][T14469]        __mutex_lock+0x19d/0x1550
[ 1150.429767][T14469]        nbd_queue_rq+0x373/0x1150
[ 1150.434893][T14469]        blk_mq_dispatch_rq_list+0x499/0x1990
[ 1150.441054][T14469]        __blk_mq_sched_dispatch_requests+0xd36/0x1580
[ 1150.447998][T14469]        blk_mq_sched_dispatch_requests+0xd7/0x190
[ 1150.454522][T14469]        blk_mq_run_work_fn+0x16c/0x300
[ 1150.460081][T14469]        process_scheduled_works+0xa8e/0x14e0
[ 1150.466172][T14469]        worker_thread+0xa47/0xfb0
[ 1150.471307][T14469]        kthread+0x388/0x470
[ 1150.475914][T14469]        ret_from_fork+0x514/0xb70
[ 1150.481043][T14469]        ret_from_fork_asm+0x1a/0x30
[ 1150.486430][T14469] 
[ 1150.486430][T14469] -> #1 (&cmd->lock){+.+.}-{4:4}:
[ 1150.493658][T14469]        __mutex_lock+0x19d/0x1550
[ 1150.498869][T14469]        nbd_queue_rq+0xc1/0x1150
[ 1150.503917][T14469]        blk_mq_dispatch_rq_list+0x499/0x1990
[ 1150.510018][T14469]        __blk_mq_sched_dispatch_requests+0xd36/0x1580
[ 1150.516882][T14469]        blk_mq_sched_dispatch_requests+0xd7/0x190
[ 1150.523396][T14469]        blk_mq_run_work_fn+0x16c/0x300
[ 1150.528963][T14469]        process_scheduled_works+0xa8e/0x14e0
[ 1150.535060][T14469]        worker_thread+0xa47/0xfb0
[ 1150.540193][T14469]        kthread+0x388/0x470
[ 1150.544804][T14469]        ret_from_fork+0x514/0xb70
[ 1150.549917][T14469]        ret_from_fork_asm+0x1a/0x30
[ 1150.555199][T14469] 
[ 1150.555199][T14469] -> #0 (set->srcu){.+.+}-{0:0}:
[ 1150.562310][T14469]        __lock_acquire+0x1520/0x2cf0
[ 1150.567674][T14469]        lock_sync+0x9d/0x120
[ 1150.572336][T14469]        __synchronize_srcu+0xc9/0x2f0
[ 1150.577785][T14469]        elevator_switch+0x1e8/0x7b0
[ 1150.583061][T14469]        elevator_change+0x2fa/0x480
[ 1150.588343][T14469]        elevator_set_default+0x375/0x440
[ 1150.594055][T14469]        blk_register_queue+0x3f3/0x4e0
[ 1150.599743][T14469]        __add_disk+0x6cb/0xe30
[ 1150.604598][T14469]        add_disk_fwnode+0xfb/0x4b0
[ 1150.609784][T14469]        nbd_dev_add+0x733/0xb60
[ 1150.614705][T14469]        nbd_genl_connect+0x992/0x1c10
[ 1150.620147][T14469]        genl_family_rcv_msg_doit+0x233/0x340
[ 1150.626443][T14469]        genl_rcv_msg+0x614/0x7a0
[ 1150.631506][T14469]        netlink_rcv_skb+0x226/0x4a0
[ 1150.636786][T14469]        genl_rcv+0x28/0x40
[ 1150.641282][T14469]        netlink_unicast+0x7bb/0x940
[ 1150.646551][T14469]        netlink_sendmsg+0x813/0xb40
[ 1150.651824][T14469]        sock_sendmsg_nosec+0x13a/0x180
[ 1150.657367][T14469]        ____sys_sendmsg+0x54e/0x850
[ 1150.662653][T14469]        ___sys_sendmsg+0x2a5/0x360
[ 1150.667861][T14469]        __x64_sys_sendmsg+0x1b1/0x290
[ 1150.673317][T14469]        do_syscall_64+0x174/0x580
[ 1150.678425][T14469]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1150.684834][T14469] 
[ 1150.684834][T14469] other info that might help us debug this:
[ 1150.684834][T14469] 
[ 1150.695049][T14469] Chain exists of:
[ 1150.695049][T14469]   set->srcu --> &q->q_usage_counter(io)#57 --> &q->elevator_lock
[ 1150.695049][T14469] 
[ 1150.708768][T14469]  Possible unsafe locking scenario:
[ 1150.708768][T14469] 
[ 1150.716227][T14469]        CPU0                    CPU1
[ 1150.721642][T14469]        ----                    ----
[ 1150.727005][T14469]   lock(&q->elevator_lock);
[ 1150.731586][T14469]                                lock(&q->q_usage_counter(io)#57);
[ 1150.739563][T14469]                                lock(&q->elevator_lock);
[ 1150.746678][T14469]   sync(set->srcu);
[ 1150.750565][T14469] 
[ 1150.750565][T14469]  *** DEADLOCK ***
[ 1150.750565][T14469] 
[ 1150.758780][T14469] 6 locks held by syz.0.17044/14469:
[ 1150.764554][T14469]  #0: ffffffff8fe5b2e8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[ 1150.772777][T14469]  #1: ffffffff8fe5b120 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[ 1150.781739][T14469]  #2: ffff888077bcc1c0 (&set->update_nr_hwq_lock){++++}-{4:4}, at: add_disk_fwnode+0xe7/0x4b0
[ 1150.792172][T14469]  #3: ffff88802a763df0 (&q->sysfs_lock){+.+.}-{4:4}, at: blk_register_queue+0x10d/0x4e0
[ 1150.802002][T14469]  #4: ffff88802a763878 (&q->q_usage_counter(queue)#53){+.+.}-{0:0}, at: elevator_change+0x194/0x480
[ 1150.813064][T14469]  #5: ffff88802a763d68 (&q->elevator_lock){+.+.}-{4:4}, at: elevator_change+0x1af/0x480
[ 1150.822891][T14469] 
[ 1150.822891][T14469] stack backtrace:
[ 1150.828771][T14469] CPU: 0 UID: 0 PID: 14469 Comm: syz.0.17044 Not tainted syzkaller #0 PREEMPT(full) 
[ 1150.828789][T14469] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 1150.828799][T14469] Call Trace:
[ 1150.828807][T14469]  <TASK>
[ 1150.828816][T14469]  dump_stack_lvl+0xe8/0x150
[ 1150.828836][T14469]  print_circular_bug+0x2e1/0x300
[ 1150.828857][T14469]  check_noncircular+0x12e/0x150
[ 1150.828878][T14469]  __lock_acquire+0x1520/0x2cf0
[ 1150.828894][T14469]  ? check_noncircular+0xda/0x150
[ 1150.828914][T14469]  ? lockdep_unlock+0x5d/0xd0
[ 1150.828926][T14469]  ? __lock_acquire+0x13e8/0x2cf0
[ 1150.828941][T14469]  ? __lock_acquire+0x13e8/0x2cf0
[ 1150.828958][T14469]  ? __synchronize_srcu+0xb5/0x2f0
[ 1150.828973][T14469]  lock_sync+0x9d/0x120
[ 1150.828987][T14469]  ? __synchronize_srcu+0xb5/0x2f0
[ 1150.829003][T14469]  __synchronize_srcu+0xc9/0x2f0
[ 1150.829019][T14469]  ? __pfx___synchronize_srcu+0x10/0x10
[ 1150.829033][T14469]  ? do_raw_spin_lock+0x12b/0x2f0
[ 1150.829056][T14469]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[ 1150.829144][T14469]  ? ktime_get_mono_fast_ns+0x2d2/0x2f0
[ 1150.829168][T14469]  ? synchronize_srcu+0x20a/0x260
[ 1150.829184][T14469]  elevator_switch+0x1e8/0x7b0
[ 1150.829205][T14469]  ? blk_mq_cancel_work_sync+0xa5/0xe0
[ 1150.829223][T14469]  elevator_change+0x2fa/0x480
[ 1150.829244][T14469]  ? do_raw_spin_unlock+0xf5/0x210
[ 1150.829265][T14469]  elevator_set_default+0x375/0x440
[ 1150.829288][T14469]  ? __pfx_elevator_set_default+0x10/0x10
[ 1150.829313][T14469]  ? disk_register_independent_access_ranges+0x2d8/0x380
[ 1150.829364][T14469]  ? blk_crypto_sysfs_register+0x11c/0x170
[ 1150.829430][T14469]  blk_register_queue+0x3f3/0x4e0
[ 1150.829454][T14469]  __add_disk+0x6cb/0xe30
[ 1150.829475][T14469]  add_disk_fwnode+0xfb/0x4b0
[ 1150.829494][T14469]  nbd_dev_add+0x733/0xb60
[ 1150.829513][T14469]  ? __pfx_nbd_dev_add+0x10/0x10
[ 1150.829536][T14469]  ? bpf_lsm_capable+0x9/0x20
[ 1150.829551][T14469]  ? security_capable+0x7e/0x2c0
[ 1150.829613][T14469]  ? radix_tree_lookup+0x25c/0x290
[ 1150.829680][T14469]  nbd_genl_connect+0x992/0x1c10
[ 1150.829700][T14469]  ? __pfx_nbd_genl_connect+0x10/0x10
[ 1150.829717][T14469]  ? rcu_is_watching+0x15/0xb0
[ 1150.829734][T14469]  ? trace_kmalloc+0x2a/0xf0
[ 1150.829757][T14469]  ? __kmalloc_noprof+0x396/0x720
[ 1150.829780][T14469]  ? __nla_parse+0x40/0x60
[ 1150.829827][T14469]  ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0
[ 1150.829849][T14469]  ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0
[ 1150.829873][T14469]  genl_family_rcv_msg_doit+0x233/0x340
[ 1150.829897][T14469]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[ 1150.829921][T14469]  ? __lock_acquire+0x683/0x2cf0
[ 1150.829939][T14469]  genl_rcv_msg+0x614/0x7a0
[ 1150.829962][T14469]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 1150.829982][T14469]  ? __pfx_nbd_genl_connect+0x10/0x10
[ 1150.830002][T14469]  netlink_rcv_skb+0x226/0x4a0
[ 1150.830019][T14469]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 1150.830039][T14469]  ? __pfx_netlink_rcv_skb+0x10/0x10
[ 1150.830060][T14469]  ? down_read+0x2be/0x330
[ 1150.830076][T14469]  genl_rcv+0x28/0x40
[ 1150.830094][T14469]  netlink_unicast+0x7bb/0x940
[ 1150.830112][T14469]  netlink_sendmsg+0x813/0xb40
[ 1150.830132][T14469]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1150.830150][T14469]  ? aa_sock_msg_perm+0xf1/0x1b0
[ 1150.830171][T14469]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1150.830187][T14469]  sock_sendmsg_nosec+0x13a/0x180
[ 1150.830209][T14469]  ____sys_sendmsg+0x54e/0x850
[ 1150.830226][T14469]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1150.830245][T14469]  ? import_iovec+0x73/0xa0
[ 1150.830261][T14469]  ___sys_sendmsg+0x2a5/0x360
[ 1150.830276][T14469]  ? __lock_acquire+0x683/0x2cf0
[ 1150.830292][T14469]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1150.830309][T14469]  ? futex_wait+0x2a2/0x390
[ 1150.830340][T14469]  ? __fget_files+0x2a/0x420
[ 1150.830360][T14469]  ? __fget_files+0x3a2/0x420
[ 1150.830377][T14469]  __x64_sys_sendmsg+0x1b1/0x290
[ 1150.830394][T14469]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[ 1150.830416][T14469]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1150.830432][T14469]  do_syscall_64+0x174/0x580
[ 1150.830445][T14469]  ? trace_irq_disable+0x3b/0x140
[ 1150.830465][T14469]  ? clear_bhb_loop+0x40/0x90
[ 1150.830481][T14469]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1150.830496][T14469] RIP: 0033:0x7fa9d479ce59
[ 1150.830511][T14469] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1150.830525][T14469] RSP: 002b:00007fa9d55fe028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1150.830542][T14469] RAX: ffffffffffffffda RBX: 00007fa9d4a16090 RCX: 00007fa9d479ce59
[ 1150.830553][T14469] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000009
[ 1150.830563][T14469] RBP: 00007fa9d4832e6f R08: 0000000000000000 R09: 0000000000000000
[ 1150.830572][T14469] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1150.830581][T14469] R13: 00007fa9d4a16128 R14: 00007fa9d4a16090 R15: 00007ffd56d55a58
[ 1150.830599][T14469]  </TASK>
[ 1151.306662][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[ 1151.509418][T14397] udevd[14397]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory
[ 1151.672631][T14479] netlink: 'syz.1.17033': attribute type 1 has an invalid length.
[ 1151.697484][T14479] bond14: (slave bridge6): making interface the new active one
[ 1151.705670][T14479] bond14: (slave bridge6): Enslaving as an active interface with an up link
[ 1151.726564][T14479] bond14: (slave gretap2): Enslaving as an active interface with an up link
[ 1151.743283][T14479] macvlan2: entered promiscuous mode
[ 1151.748750][T14479] macvlan2: entered allmulticast mode
[ 1151.754688][T14479] bond14: entered promiscuous mode
[ 1151.760539][T14479] bridge6: entered promiscuous mode
[ 1151.766786][T14479] 8021q: adding VLAN 0 to HW filter on device macvlan2
[ 1151.774454][T14479] bond14: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[ 1151.790909][T14479] bond14: left promiscuous mode
[ 1151.795850][T14479] bridge6: left promiscuous mode
[ 1152.396954][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[ 1153.026615][    C0] ip6_tunnel: ip6gre5 xmit: Local address not yet configured!
[ 1153.426536][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[ 1154.467215][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[ 1155.506737][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[ 1156.546951][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[ 1157.586752][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[ 1158.626879][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[ 1159.666797][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available