last executing test programs:

4m49.272902478s ago: executing program 2 (id=12088):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$netlink(0x10, 0x3, 0x1)
bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r2 = socket$pptp(0x18, 0x1, 0x2)
bind$pptp(r2, &(0x7f0000000140)={0x18, 0x2, {0xffff, @dev={0xac, 0x14, 0x14, 0x1c}}}, 0x1e)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFULNL_MSG_CONFIG(r3, &(0x7f0000002340)={0x0, 0x0, &(0x7f0000002300)={&(0x7f0000000540)=ANY=[@ANYBLOB="4000000001040118cb8bb3e65c629f7165b9b601080005408863bb7080e4270000230105000100010000000800034000002fdb08000440000000030a0900000000000000000000fdccc941cb3242f45b16d07f6a392bb03f3aea0ee8c554a62a2cb513beae17627dc9a586a64606d15f99080000000000000087541046d3e64d18fde6be80eacbef756114ccf00d205407a5bd09dc8ac186a30ed8355b31814768848258229183a3e468f83814696e882f1096e9d9460100e3433d58346d15039f2ed6426ee12efd6e328f96270c4a4ae5b00c25915bdd8890634e4ac421a82c61278171d2a294b47b9fd571052e40d699b2c55698875d911afa0f957bd775ec045a3176cb8fe2137d5771c343fa71c685e67b7dacd0fc5cf6581c92507278012db8f5f23490453f59430205bc4691f485f460a37a37dcb2fe3b60d344d12d4fd63890e134"], 0x40}, 0x1, 0x0, 0x0, 0x20000800}, 0x4000)
bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x3, 0x4, &(0x7f0000000340)=ANY=[@ANYRESOCT], &(0x7f0000000000)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff6}, 0x94)
r4 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r4, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10)
setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10)
r5 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r5, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x5}}, 0x10)
setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x2, 0x1}, 0x10)
bind$tipc(r4, 0x0, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="180000002e00010026bdf000fcdbdf1b04000000040010"], 0x18}, 0x1, 0x0, 0x0, 0x4000d}, 0x404c014)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), r1)
close(0x3)
socket$nl_generic(0x10, 0x3, 0x10)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)}, 0x0)
r6 = socket$inet6_mptcp(0xa, 0x1, 0x106)
getsockopt$inet6_mptcp_buf(r6, 0x11c, 0x4, &(0x7f0000000000)=""/152, &(0x7f00000000c0)=0x98)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.current\x00', 0x275a, 0x0)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r7, 0x89f2, &(0x7f0000000300)={'syztnl1\x00', &(0x7f0000000280)={'ip6gre0\x00', <r8=>0x0, 0x2f, 0x7, 0x5, 0xa8f, 0x63, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x38}, 0x8, 0x10, 0xa, 0xffffffff}})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000720000018290000", @ANYBLOB="00000000fcffffff950000e3ff000000"], &(0x7f0000000000)='syzkaller\x00', 0x5, 0xfd5, &(0x7f0000001e00)=""/4053, 0x41000, 0x10, '\x00', r8, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x76}, 0x94)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r9=>0xffffffffffffffff})
pipe(&(0x7f0000000080)={<r10=>0xffffffffffffffff, <r11=>0xffffffffffffffff})
splice(r9, 0x0, r11, 0x0, 0x3, 0x7)
vmsplice(r10, &(0x7f0000000c40)=[{&(0x7f0000000180)='\r', 0x1}], 0x1, 0x6)
ioctl$sock_inet_udp_SIOCINQ(r11, 0x541b, 0x0)

4m49.002714697s ago: executing program 2 (id=12091):
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r2 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$OSF_MSG_ADD(r3, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000001880)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x268}, 0x1, 0x0, 0x0, 0x40}, 0x80)
write$tun(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="000086dd03000a000000142000006c07010033d43afffe800000000000000000000000000010ff020000000000000000000000000001"], 0x340a)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', <r4=>0x0})
connect$can_bcm(r0, &(0x7f00000000c0)={0x1d, r4}, 0x10)
r5 = socket(0x10, 0x803, 0x0)
r6 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', <r7=>0x0})
r8 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
bind(r8, &(0x7f0000000480)=@tipc=@id={0x1e, 0x3, 0x1, {0x4e23, 0x1}}, 0x80)
sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xb, 0xfff3}}}, 0x58}}, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000840)=@newtfilter={0x5c, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0x3}, {}, {0x4, 0xe}}, [@filter_kind_options=@f_u32={{0x8}, {0x30, 0x2, [@TCA_U32_CLASSID={0x8}, @TCA_U32_SEL={0x24, 0x5, {0xc, 0x7, 0x1, 0x3d3f, 0x0, 0xfff, 0x3, 0x58f, [{0xebd, 0x1, 0x206, 0x7}]}}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40}, 0x24040084)
sendmsg$can_bcm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001bc0)={0x1, 0x840, 0x800, {0x0, 0x2710}, {0x77359400}, {}, 0x1, @canfd={{0x0, 0x1, 0x1, 0x1}, 0x3f, 0x2, 0x0, 0x0, "ce6012e198d4a275f30c7a76ced776bcb73cf581648acaac9095323d45aaeab306611856f61d95a65039b79566cc2195c364a614b8e4c12138a77d4bd62ca783"}}, 0x80}, 0x1, 0x0, 0x0, 0x48485}, 0x0)
sendmsg$can_bcm(r0, &(0x7f0000001b00)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000022c0)=ANY=[@ANYBLOB="01000000670f00"/16, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="0000000001"], 0x80}, 0x1, 0x0, 0x0, 0xc080}, 0x11)
r9 = socket$nl_route(0x10, 0x3, 0x0)
r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="1802000024000000000000000a0000008500000027000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000120000850000007100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x40}, 0x94)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000009c0)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd25, 0x25dfdffd, {0x0, 0x0, 0x0, 0x0, {0x6}, {}, {0x8, 0x6}}}, 0x24}}, 0x20004811)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f0000000180)={'wlan1\x00', <r13=>0x0})
sendmsg$NL80211_CMD_FRAME(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r13, @ANYBLOB="0c00990000000200000000000800a00094090000080026009409000008002700000000000800a1"], 0x48}}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r10, 0x2f, 0x24, 0x0, &(0x7f0000000000)="d686a98a12501d53eef9016937ed101106f3023c6cc58b3cd97d7288310e3c8072dabb3a", 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="5c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000003500000280012800b00010067656e657665000018000280140007"], 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x2000000)

4m45.80118434s ago: executing program 2 (id=12095):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
r3 = socket(0x1d, 0x2, 0x6)
unshare(0x20000400)
r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x28)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f00000006c0)=ANY=[@ANYBLOB="180000000000000000000000000000000000000000000000927af70314580e473c3d399ff2fa2500d51bbcfb6fb570f231565feae44343862635b245ec55cecb8a179cfa5922154d0ae8be515020ff1d686009f1067aa4166255a59a9fb545f1eaafe4e1d87ddf5478a162d0e341f2b49b13efa16daef6ed804998ae4832a6d7ae16d3aa5251571268068f337f25438c9e145eb089b683bd"], &(0x7f0000000080)='GPL\x00', 0x5, 0xa8, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, r4, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x10}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={r5, 0x0, 0x0}, 0x10)
bind$tipc(r3, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x0, 0x4}, 0x4}}, 0x10)
sendmsg$nl_route_sched(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0)
getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r6, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=@deltclass={0x80, 0x29, 0x400, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0x8, 0xa}, {0xe, 0x4}, {0xffff, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x0, 0x3}}, @tclass_kind_options=@c_cbs={0x8}, @tclass_kind_options=@c_netem={0xa}, @TCA_RATE={0x6, 0x5, {0x5, 0x6}}, @tclass_kind_options=@c_clsact={0xb}, @TCA_RATE={0x6, 0x5, {0x8, 0x8}}, @TCA_RATE={0x6, 0x5, {0x0, 0x5}}, @TCA_RATE={0x6, 0x5, {0x3, 0x7}}, @TCA_RATE={0x6, 0x5, {0x6, 0x5a}}, @tclass_kind_options=@c_ingress={0xc}]}, 0x80}, 0x1, 0x0, 0x0, 0x24020000}, 0x4044080)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000640), 0xffffffffffffffff)
r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x46e303, 0x0)
ioctl$SIOCSIFHWADDR(r9, 0x8924, &(0x7f00000001c0)={'macvlan0\x00', @remote})
sendmsg$DEVLINK_CMD_RATE_SET(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000940)=ANY=[@ANYBLOB="a77e620dbcf840d306888f5300bfa30cb2fd5f208eaf75314a33442285bede5f34f160d7a6f3506d920359af0602aa12429040559f97f34058c09b2220377d1395cc8f8c181081eb98588070fd81b481fb7c5650c6ae9903cd3a0ad59d9a5ee4e775459411cd4df0bfea6d79683fe377cfd208a702c7903378ab8b3bc628fd32d29321172bdf5a53e18c609fca2dc18f6611e3ab4d0c49db4f4ba2d16815c84d30b43995eac25a", @ANYRES16=r8, @ANYBLOB="000200000000000000002c00000008005800030000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000800030003000000"], 0x44}}, 0x4000)
bind$packet(r0, &(0x7f0000000280)={0x11, 0x3, 0x0, 0x1, 0x5, 0x6, @remote}, 0x14)
r10 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r10, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc)
connect$inet6(r10, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r10, 0x6, 0x1f, &(0x7f00000002c0), 0x4)
setsockopt$inet6_tcp_TLS_TX(r10, 0x11a, 0x1, &(0x7f0000000180)=@gcm_256={{0x304}, "62df15266d13b90a", "82b80c51906c1b6a150f397901e5a6bad4dbd10dacc6f5869dacb29556d6cd12", "07383783", "30c4b3d53101eb75"}, 0x38)
bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="1e0000000000000004000000ff0000004000000082dd429cbd972c4de4de2d10c1a7e47da69bca6ec5e9474eaa9ff1a8a55a42c2f7ef4acf729052af2a88bcc3e78fc1a127a6fbea9594be1b89f1daf99fb0f245e868ee6c72414692b0d30429af6afc38d8856cb41e8c6c3b62ccda4196c0820d9a91bb0150641cc0b7c9d41562dee3185b5777c70ea9ba767fe28222a6a0a6aefc", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\t\x00'/28], 0x50)
ioctl$AUTOFS_IOC_FAIL(r0, 0x9361, 0x5)
setsockopt$inet6_tcp_TLS_TX(r10, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28)
sendto$inet6(r0, &(0x7f0000000800)="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", 0xfc13, 0x880, 0x0, 0xfffffffffffffef0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x10800, 0x0)

4m45.730154724s ago: executing program 2 (id=12097):
r0 = socket$inet6(0xa, 0x2, 0x3a)
r1 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r1, &(0x7f0000000140), 0x10)
sendmsg$can_bcm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0)
sendmsg$can_bcm(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x5, 0x901, 0x0, {}, {0x0, 0x2710}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "d7c139a0d4fe372efa7e8cdba3417665ffb2b92af56c860b29402f8111302ae84c15b9dd43bda8847acbe40605b5ee1c8f0676814afc7e9f0413567e592c7c15"}}, 0x80}}, 0x0)
sendmsg$can_bcm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000000c0)={0x5, 0x0, 0x0, {}, {0x0, 0xea60}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "a464357177330772"}}, 0x48}}, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x4e, &(0x7f0000000040)=0x9, 0x4)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000000c0)={0x3c, r3, 0x1, 0x70bd2c, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x2}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, {0x8}}, {0xc, 0x1, 0x0, 0x1, {0x8}}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x55ebfcb85a78e904}, 0x4)
bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e20, 0x7, @local, 0x5}, 0x1c)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={0x1c, 0x2e, 0x9, 0x70bd27, 0x25dfdbff, {0x4}, [@nested={0x8, 0x1a, 0x0, 0x1, [@nested={0x4, 0x4}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x84)

4m45.541032381s ago: executing program 2 (id=12101):
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22, 0x33, @mcast2, 0x2}, 0x1c)
connect$inet6(r0, &(0x7f00000002c0)={0x2, 0xffff, 0x0, @rand_addr=' \x01\x00'}, 0x1c)
r1 = socket$nl_sock_diag(0x10, 0x3, 0x4)
ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r1, 0x8983, &(0x7f0000001a80)={0x6, 'tunl0\x00', {0x2}, 0x5})
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r1, 0x8982, &(0x7f0000001ac0)={0x0, 'bridge_slave_1\x00', {0x4}, 0x5})

4m45.539696121s ago: executing program 2 (id=12102):
r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
ioctl$XFS_IOC_FSCOUNTS(r0, 0x80205871, &(0x7f0000000000)) (async)
getsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000040), &(0x7f0000000080)=0x4)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$inet_tcp_buf(r1, 0x6, 0x1c, &(0x7f00000000c0)=""/206, &(0x7f00000001c0)=0xce)
setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000200)='lp', 0x2)
r2 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000240)={0x28, 0x0, 0x2710, @host}, 0x10, 0x800)
ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r2, 0x40089413, &(0x7f0000000280)=0x8001)
r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r3, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x18, 0x140c, 0x300, 0x70bd29, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_RES_CQN={0x8, 0x3d, 0x2}]}, 0x18}, 0x1, 0x0, 0x0, 0x8000000}, 0x40000) (async)
ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r3, 0x8010661b, &(0x7f00000003c0)) (async)
connect(r3, &(0x7f0000000400)=@l2tp6={0xa, 0x0, 0xc6de, @private0={0xfc, 0x0, '\x00', 0x1}, 0x1, 0x4}, 0x80)
openat$tun(0xffffffffffffff9c, &(0x7f0000000480), 0x82000, 0x0) (async)
r4 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f0000000540)={&(0x7f00000004c0)=""/113, 0x100000, 0x800, 0xfffffffb}, 0x20) (async)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
socket$inet_sctp(0x2, 0x5, 0x84) (async, rerun: 32)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000580)='./cgroup.net/syz0\x00', 0x200002, 0x0) (rerun: 32)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000005c0)={r5, r6, 0xc, 0x0, @void}, 0x10)
ioctl$BTRFS_IOC_GET_DEV_STATS(r2, 0xc4089434, &(0x7f0000000600)={<r7=>0x0, 0x7ff, 0x0, [0x800, 0x7, 0x4, 0x9], [0x1, 0x9, 0x4, 0xfc, 0x7ff, 0x9, 0x7fffffff, 0x9, 0x3, 0x7, 0x73, 0x6, 0x3281, 0x3, 0xa, 0x6, 0x1000, 0x2a, 0x0, 0x7, 0x8000000000000001, 0x6, 0x3, 0x5, 0x1, 0x1, 0x8, 0x43d, 0x1ff, 0x101, 0x9, 0x3, 0x6, 0xd, 0x1, 0x1, 0xf, 0x8, 0x0, 0x0, 0x5, 0x6, 0x73, 0x8001, 0xa1, 0x76abb59b, 0x2, 0x3, 0xe, 0xf9, 0x5, 0x4, 0x4, 0x3, 0x1, 0x2, 0x8, 0x1, 0x7, 0x10, 0x2, 0x7f, 0x8, 0x101, 0xc17a, 0x3ef, 0x0, 0x8001, 0x4, 0x8, 0x5, 0x2a7, 0x8, 0x7ff, 0x2, 0x4, 0x6732ddb9, 0xc, 0x6, 0xa, 0xbb1, 0xc, 0x1, 0x2, 0x6, 0x6, 0x3921, 0x8, 0x2, 0x172, 0xd0, 0x485, 0x3, 0x400, 0x40, 0x1, 0x4, 0x6f0, 0x4d, 0x4, 0xffffffffffffff74, 0x8, 0x7fffffff, 0x5, 0x9, 0x4, 0xdfed, 0x0, 0x6, 0xfffffffffffffff7, 0xd02, 0x834, 0x80000001, 0x7, 0x1, 0x9, 0x1, 0x4, 0x9, 0x10, 0xdf]})
ioctl$BTRFS_IOC_SCRUB(r2, 0xc400941b, &(0x7f0000000a40)={r7, 0x0, 0x6, 0x1}) (async)
r8 = accept$netrom(0xffffffffffffffff, &(0x7f0000000e40)={{0x3, @bcast}, [@rose, @null, @null, @bcast, @bcast, @rose, @rose, @rose]}, &(0x7f0000000ec0)=0x48)
getpeername$netrom(r8, &(0x7f0000000f00)={{0x3, @default}, [@rose, @remote, @default, @remote, @default, @null, @rose, @rose]}, &(0x7f0000000f80)=0x48) (async, rerun: 32)
r9 = openat$cgroup_procs(r6, &(0x7f0000000fc0)='tasks\x00', 0x2, 0x0) (rerun: 32)
r10 = getpid()
write$cgroup_pid(r9, &(0x7f0000001000)=r10, 0x12)
sendmsg$NL80211_CMD_JOIN_OCB(0xffffffffffffffff, &(0x7f0000001140)={&(0x7f0000001040), 0xc, &(0x7f0000001100)={&(0x7f0000001080)={0x44, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x40}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xf}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x165}, @NL80211_ATTR_CENTER_FREQ2={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x40084}, 0x8000) (async)
r11 = accept4$netrom(0xffffffffffffffff, 0x0, &(0x7f0000001180), 0x80000)
getsockopt$netrom_NETROM_T4(r11, 0x103, 0x6, &(0x7f00000011c0)=0x9, &(0x7f0000001200)=0x4) (async)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001800)={0xffffffffffffffff, 0xe0, &(0x7f0000001700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000001540)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, &(0x7f0000001580)=[0x0], &(0x7f00000015c0)=[0x0], 0x0, 0xb7, &(0x7f0000001600)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000001640), &(0x7f0000001680), 0x8, 0xb9, 0x8, 0x8, &(0x7f00000016c0)}}, 0x10)

4m29.868423241s ago: executing program 32 (id=12102):
r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
ioctl$XFS_IOC_FSCOUNTS(r0, 0x80205871, &(0x7f0000000000)) (async)
getsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000040), &(0x7f0000000080)=0x4)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$inet_tcp_buf(r1, 0x6, 0x1c, &(0x7f00000000c0)=""/206, &(0x7f00000001c0)=0xce)
setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000200)='lp', 0x2)
r2 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000240)={0x28, 0x0, 0x2710, @host}, 0x10, 0x800)
ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r2, 0x40089413, &(0x7f0000000280)=0x8001)
r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r3, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x18, 0x140c, 0x300, 0x70bd29, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_RES_CQN={0x8, 0x3d, 0x2}]}, 0x18}, 0x1, 0x0, 0x0, 0x8000000}, 0x40000) (async)
ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r3, 0x8010661b, &(0x7f00000003c0)) (async)
connect(r3, &(0x7f0000000400)=@l2tp6={0xa, 0x0, 0xc6de, @private0={0xfc, 0x0, '\x00', 0x1}, 0x1, 0x4}, 0x80)
openat$tun(0xffffffffffffff9c, &(0x7f0000000480), 0x82000, 0x0) (async)
r4 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f0000000540)={&(0x7f00000004c0)=""/113, 0x100000, 0x800, 0xfffffffb}, 0x20) (async)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
socket$inet_sctp(0x2, 0x5, 0x84) (async, rerun: 32)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000580)='./cgroup.net/syz0\x00', 0x200002, 0x0) (rerun: 32)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000005c0)={r5, r6, 0xc, 0x0, @void}, 0x10)
ioctl$BTRFS_IOC_GET_DEV_STATS(r2, 0xc4089434, &(0x7f0000000600)={<r7=>0x0, 0x7ff, 0x0, [0x800, 0x7, 0x4, 0x9], [0x1, 0x9, 0x4, 0xfc, 0x7ff, 0x9, 0x7fffffff, 0x9, 0x3, 0x7, 0x73, 0x6, 0x3281, 0x3, 0xa, 0x6, 0x1000, 0x2a, 0x0, 0x7, 0x8000000000000001, 0x6, 0x3, 0x5, 0x1, 0x1, 0x8, 0x43d, 0x1ff, 0x101, 0x9, 0x3, 0x6, 0xd, 0x1, 0x1, 0xf, 0x8, 0x0, 0x0, 0x5, 0x6, 0x73, 0x8001, 0xa1, 0x76abb59b, 0x2, 0x3, 0xe, 0xf9, 0x5, 0x4, 0x4, 0x3, 0x1, 0x2, 0x8, 0x1, 0x7, 0x10, 0x2, 0x7f, 0x8, 0x101, 0xc17a, 0x3ef, 0x0, 0x8001, 0x4, 0x8, 0x5, 0x2a7, 0x8, 0x7ff, 0x2, 0x4, 0x6732ddb9, 0xc, 0x6, 0xa, 0xbb1, 0xc, 0x1, 0x2, 0x6, 0x6, 0x3921, 0x8, 0x2, 0x172, 0xd0, 0x485, 0x3, 0x400, 0x40, 0x1, 0x4, 0x6f0, 0x4d, 0x4, 0xffffffffffffff74, 0x8, 0x7fffffff, 0x5, 0x9, 0x4, 0xdfed, 0x0, 0x6, 0xfffffffffffffff7, 0xd02, 0x834, 0x80000001, 0x7, 0x1, 0x9, 0x1, 0x4, 0x9, 0x10, 0xdf]})
ioctl$BTRFS_IOC_SCRUB(r2, 0xc400941b, &(0x7f0000000a40)={r7, 0x0, 0x6, 0x1}) (async)
r8 = accept$netrom(0xffffffffffffffff, &(0x7f0000000e40)={{0x3, @bcast}, [@rose, @null, @null, @bcast, @bcast, @rose, @rose, @rose]}, &(0x7f0000000ec0)=0x48)
getpeername$netrom(r8, &(0x7f0000000f00)={{0x3, @default}, [@rose, @remote, @default, @remote, @default, @null, @rose, @rose]}, &(0x7f0000000f80)=0x48) (async, rerun: 32)
r9 = openat$cgroup_procs(r6, &(0x7f0000000fc0)='tasks\x00', 0x2, 0x0) (rerun: 32)
r10 = getpid()
write$cgroup_pid(r9, &(0x7f0000001000)=r10, 0x12)
sendmsg$NL80211_CMD_JOIN_OCB(0xffffffffffffffff, &(0x7f0000001140)={&(0x7f0000001040), 0xc, &(0x7f0000001100)={&(0x7f0000001080)={0x44, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x40}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xf}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x165}, @NL80211_ATTR_CENTER_FREQ2={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x40084}, 0x8000) (async)
r11 = accept4$netrom(0xffffffffffffffff, 0x0, &(0x7f0000001180), 0x80000)
getsockopt$netrom_NETROM_T4(r11, 0x103, 0x6, &(0x7f00000011c0)=0x9, &(0x7f0000001200)=0x4) (async)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001800)={0xffffffffffffffff, 0xe0, &(0x7f0000001700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000001540)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, &(0x7f0000001580)=[0x0], &(0x7f00000015c0)=[0x0], 0x0, 0xb7, &(0x7f0000001600)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000001640), &(0x7f0000001680), 0x8, 0xb9, 0x8, 0x8, &(0x7f00000016c0)}}, 0x10)

2.527794046s ago: executing program 0 (id=15544):
r0 = socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff})
ioctl$OCFS2_IOC_INFO(0xffffffffffffffff, 0x80106f05, &(0x7f000000c980)={&(0x7f000000c7c0)=[0x0, 0x0, &(0x7f0000000280)=@clustersize={{0x4f32494e, 0x1, 0x10, 0x80000000}}, 0x0, 0x0, 0x0, &(0x7f00000006c0)=@label={{0x4f32494e, 0x4, 0x10}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x32})
r2 = socket(0x11, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000005c0)={'ip6gretap0\x00', <r3=>0x0})
bind$packet(r2, &(0x7f0000000180)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @remote}, 0x14)
setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000000)=0xe9, 0x4)
sendmsg$netlink(r2, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000280)=ANY=[@ANYBLOB="3b844100c5dc2f"], 0xdd12}], 0x1}, 0x20040890)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000100)={'macsec0\x00', 0x100})
ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000240)={'macsec0\x00', 0x1})
sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
r5 = socket(0x2, 0x80805, 0x0)
r6 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r6, 0x0)
close(0x3)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000200)={<r7=>0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r6, 0x84, 0x7a, &(0x7f0000000340)={r7, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84)
sendmmsg$inet_sctp(r5, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0)
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r5, 0x84, 0x6c, &(0x7f0000000000)={r7}, &(0x7f0000000080)=0x8)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRESDEC=r1, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x40010)
r8 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet6_IPV6_XFRM_POLICY(r8, 0x29, 0x23, &(0x7f0000000b40)={{{@in=@broadcast, @in=@empty, 0x4e21, 0x4, 0x4e20, 0x0, 0x2}, {0x40, 0xae, 0xffffffff, 0x9, 0x9, 0x9, 0x9, 0x5}, {0x10000, 0x7, 0x8}, 0x2, 0x6e6bbf, 0x1, 0x2a515e8a9e1e315e, 0x1}, {{@in6=@loopback, 0x4d2, 0x3c}, 0xa, @in=@multicast2, 0x3503, 0x4, 0x0, 0x48, 0x54, 0x1ff, 0x1}}, 0xe8)
getpid()
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="54000000020601080000000000000000000000000c00078008000640000000000500010006000000050005000a00000005000400000000000900020073797a31000000000d000300686173683a6e6574"], 0x54}, 0x1, 0x0, 0x0, 0x48000}, 0x0)
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c0007801800018014000240"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)=ANY=[@ANYBLOB="6000000010001ffffcf9dc381058a5301bfffffddbdf2500", @ANYRES32=0x0, @ANYBLOB="0000010000000000240012800b000100677265746170000014a1ca8008000700e0000002060003002e500000080029009e18020008001300", @ANYRESDEC=r2, @ANYBLOB="0b002400cf5a694899541300"], 0x60}, 0x1, 0x0, 0x0, 0x20000000}, 0x800)

2.32100326s ago: executing program 0 (id=15546):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[], 0x18}}, 0x20004000)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0xf, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_MSG_GETSET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)={0x14, 0xa, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x40001}, 0x20000000)
close(0x3)
socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6(0xa, 0x1, 0x8010000000000084)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a50000000060a0b040000000000000000020000002400048020000180070001006374000014000280080002400000000f08000140000000020900010073797a30000000000900020073797a320000000014000000110001"], 0x78}}, 0x0)
bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e21, 0xb, @empty}, 0x1c)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}}, 0x1c)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty, 0xfffffffe}}, 0x80000, 0x0, 0x0, 0x0, 0xb3550aa4ba878396}, 0x9c)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000d00)=@nat={'nat\x00', 0x19, 0x1, 0x21e, [0x200000002300, 0x0, 0x0, 0x2000000024be, 0x2000000024ee], 0x20, 0x0, &(0x7f0000002300)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff01000000050000006b0000000016636169663000000000000000e3ff00007665746831000000000000000000000073797a5f74756e0039da0000f8ff0000000076657468310000000000000000001000aaaaaaaaaa3d000000ff00000180c2000003ff00ffffff00ae000000560100008e0100006f776e6572000000000000000000000000000000001800"/198, @ANYRES32, @ANYRES32, @ANYRES32=0xee00, @ANYRES32, @ANYBLOB="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"]}, 0x296)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newtaction={0x18, 0x30, 0xffff, 0x70bd29, 0x0, {}, [{0x4}]}, 0x18}}, 0x0)
getsockname$unix(0xffffffffffffffff, &(0x7f0000000000)=@abs, &(0x7f0000000080)=0x6e)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
syz_emit_ethernet(0x27, &(0x7f0000000140)=ANY=[@ANYBLOB="3e693200edf8aaab63f876a76c0cee145e4c67651dcaac"], 0x0)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/pid_for_children\x00')
unshare(0x6a040000)
socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000080)={0x84, @private=0xa010101, 0x15, 0x3, 'sh\x00', 0x2e, 0x5, 0x72}, 0x2c)
r3 = socket$kcm(0xa, 0x2, 0x0)
setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e20, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@loopback, 0x4e20, 0x10000, 0x2, 0x2}}, 0x44)
unshare(0x2010100)
sendmsg$sock(r3, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0)

1.592624977s ago: executing program 1 (id=15559):
r0 = socket(0x80000000000000a, 0x2, 0x0)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x8, 0x1, @dev={0xfe, 0x80, '\x00', 0x16}}}, {{0xa, 0x0, 0x0, @remote, 0xfffffffd}}}, 0x108)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x400}}, {{0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x24}}}}, 0x108)
r1 = accept4$unix(r0, &(0x7f0000000080), &(0x7f0000000100)=0x6e, 0x80000)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(r1, 0x8982, &(0x7f0000000180))
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0f000000040000000800000008"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0xc, &(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000070000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095000000000000"], 0x0, 0x3, 0x0, 0x0, 0x40f00, 0x62, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0xd, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0xe, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000001d711861000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, @sk_skb=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={0x0, 0x0}, 0x28)
r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}, 0x10)
r5 = socket(0x10, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'veth0_to_batadv\x00', <r6=>0x0})
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl1\x00', <r7=>r6, 0x4, 0x6, 0x4, 0x2, 0x47, @mcast1, @loopback, 0x1, 0x8, 0x3, 0x66}})
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000180)={'syztnl1\x00', r7, 0x0, 0x0, 0x0, 0x0, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast2}})
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r2, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x6e)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x4001, 0x0, 0x0)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0x801, 0xfffffffd, 0x8000000, {0x0, 0x0, 0x0, 0x0, 0x0, 0x404a3}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x5084)

1.479570826s ago: executing program 0 (id=15561):
r0 = socket(0x10, 0x3, 0x800000)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff})
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r2)
sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000380)={0x44, r3, 0x607, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x1}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x1}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x5}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x44}}, 0x20048840)
setsockopt$sock_attach_bpf(r1, 0x1, 0xa, &(0x7f0000000480), 0x4)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'sha384-avx\x00'}, 0x58)
r5 = accept4(r4, 0x0, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10)
recvmmsg(r5, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x6e, &(0x7f0000000380)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd6000000000382b00fc220000000000000000000000000000fe8000000000000000000000000000aa6700000000000000210074b941"], 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x1032, 0xffffffffffffffff, 0x21d67000)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={0x0, 0x0}, 0x28)
r6 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000900)=ANY=[@ANYRES64=r0, @ANYRES32=0x0, @ANYBLOB="0000000000000000300012800b000100697036746e6c00002000028014000300fe8000000000000000000000000000aa050009002900000008000400000001"], 0x58}, 0x1, 0x0, 0x0, 0x4c000}, 0x0)
r7 = socket$inet6(0xa, 0x800000000000002, 0x0)
setsockopt$inet_opts(r7, 0x0, 0xd, &(0x7f00000008c0)=';', 0x1)
setsockopt$SO_TIMESTAMPING(r7, 0x1, 0x41, &(0x7f0000000200)=0x632a, 0x4)
setsockopt$inet6_int(r7, 0x29, 0x31, &(0x7f0000000000)=0xb2, 0x4)
sendmmsg$inet6(r7, &(0x7f0000000e00)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c, 0x0}}], 0x1, 0x0)
recvmmsg(r7, &(0x7f0000003600)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/21, 0x15}, 0x7f}], 0x1, 0x12023, 0x0)
syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00')
r8 = socket$inet6(0xa, 0x3, 0x5)
setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000400)=@nat={'nat\x00', 0x1b, 0x5, 0x490, 0x0, 0x0, 0xffffffff, 0x0, 0x210, 0x570, 0x570, 0xffffffff, 0x570, 0x570, 0x5, 0x0, {[{{@uncond, 0x0, 0xa8, 0xf0}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x5, @ipv4=@multicast1, @ipv6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, @icmp_id=0x64, @port=0x4e22}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x34}, @dev={0xfe, 0x80, '\x00', 0x39}, [0xff000000, 0x0, 0x0, 0xff000000], [0x0, 0x0, 0xffffff00], 'bond_slave_0\x00', 'veth0_to_bond\x00', {0xff}, {}, 0xc65ec123d57cf83, 0x7, 0x8, 0x12}, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x11, @ipv4=@multicast1, @ipv4=@private=0xa010101, @port=0x4e20, @gre_key=0xabfc}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, [0xff000000, 0xffff00, 0xffffffff, 0xffffff00], [0xffffff00, 0xffffff00, 0xff000000, 0xffffffff], 'nicvf0\x00', 'veth1_to_hsr\x00', {0xff}, {}, 0x3c, 0x6, 0x1, 0x4}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv4=@broadcast, @ipv6=@private2={0xfc, 0x2, '\x00', 0x1}, @icmp_id=0x64, @port=0x4e20}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x8, @ipv4=@rand_addr=0x64010101, @ipv6=@mcast1, @port=0x4e21, @port=0x4e21}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4f0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0x4, &(0x7f0000000a00)=ANY=[@ANYBLOB="1802000075000000df760000000002000404820000000000000095000000000000006ad6d0909b85bd34b091a872b253f77de5af2cf12303016ad605ef58def168d46a87320c394b855871eb17e24885c55e1c9b03da130738efd79829ef75dc087fec180b6c92a89a11a6b814683478a62e27fdedfae1c4895dfda1c29f424ebdaec8146e208df55fb65f57df68709628f35cbe0285dda5bfb3f3680159a3e39000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x1e00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100000}, 0x94)

1.382507237s ago: executing program 1 (id=15562):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
sendmsg$OSF_MSG_ADD(0xffffffffffffffff, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000001880)={&(0x7f0000000a00)=ANY=[@ANYRES32, @ANYBLOB="2d6f8860a909279bdc15708f9966c45503b118b20146e803f51f8a841cb531612f51e7728c4c3538adfc98ce894de506ba1b50ac0d6b5cd70bfcd780082eb747e9496d5da8c2b2df52b7992a3705b5283312a1f460dd06a1445ba21776fa0136da7639885092171f1e0a6568302a0ae5eb5573b68e03073f06", @ANYRES8, @ANYRES8=r0, @ANYBLOB="b4bbdcd79c87a1d4611806888bcefd5c8b885ec18777f2797ab9d3b60b74af7fff335e510d984414fa9474d156e7fe259668ec9ad8c7ad5d3354484b708cf94d45f74a89c070425de1b2bde2d3ec86b8bdaaacb796a12e0bd8dcf4d4c98551b0f520bf802b36dac90da4274a5769fc7ab0425a279b67ce69b53d5bbd39fcea179e732775c92557b404bc6e210e79efe8040d27218e5902b258b52136c328d6f8f2742acecf7e21295763d2176100d12a5b30cfbca2d120d213dde85897dcd8d5706257c6eb0e38b7d3d4f1d41feaf078c44e22fc28198889", @ANYRESHEX=r0, @ANYRESOCT, @ANYRES64, @ANYRESOCT, @ANYRESDEC=r0], 0x268}, 0x1, 0x0, 0x0, 0x4050}, 0x0)
write$tun(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="000086dd03000a000000142000006c07010033d43afffe800000000004000000000000000010ff020000000000000000000000000001"], 0x340a)

1.213814594s ago: executing program 1 (id=15563):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x44}, 0x1, 0x0, 0x0, 0x8000010}, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x8000}, 0x8)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newspdinfo={0x1c, 0x24, 0x21, 0x0, 0x0, 0x0, [@XFRMA_SPD_IPV6_HTHRESH={0x6}]}, 0x1c}}, 0x0)
sendmmsg$inet6(r1, 0x0, 0x0, 0x0)
shutdown(r1, 0x1)
r3 = socket(0x10, 0x3, 0x0)
sendto$inet6(r3, &(0x7f0000000140), 0x0, 0x24040000, 0x0, 0x0)
getsockopt$bt_hci(r1, 0x84, 0x7f, &(0x7f0000000080)=""/4057, &(0x7f0000001180)=0xfd9)
r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000000), 0xffffffffffffffff)
r5 = socket(0x10, 0x803, 0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r1, 0x5)
setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r6, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000001580)=@generic={&(0x7f0000001540)='./file0\x00', 0x0, 0x18}, 0x18)
connect$inet6(r6, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c)
sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000001740)={&(0x7f00000015c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001700)={&(0x7f0000001780)={0xec, 0x0, 0x1, 0x5, 0x0, 0x0, {0xa, 0x0, 0x3}, [@CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x1002}, @CTA_ID={0x8}, @CTA_ID={0x8, 0xc, 0x1, 0x0, 0x3}, @CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x3}, @CTA_TUPLE_REPLY={0x84, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010101}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @multicast2}}}}]}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x402}, @CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}]}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x2000}]}, 0xec}, 0x1, 0x0, 0x0, 0x404c040}, 0xc004010)
mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0)
sendto$inet6(r6, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x56)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x5}, 0x48)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r8, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x501, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7}, 0x50)
sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="3800000010003704000080000000000000000000", @ANYRES32=0x0, @ANYBLOB="c30405000000db000000128008000100677470000c00028008000100", @ANYRES32, @ANYBLOB], 0x38}, 0x1, 0x0, 0x0, 0x2000c014}, 0x0)
sendmsg$GTP_CMD_GETPDP(r0, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001640)=ANY=[@ANYRES64=r5, @ANYRES16=r4, @ANYBLOB="310328bd7000fbdbdf250200"], 0x78}, 0x1, 0x0, 0x0, 0x4000000}, 0x44)

771.886009ms ago: executing program 3 (id=15566):
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0xf, &(0x7f0000000180)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x1}, {}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94)
r0 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'bridge_slave_0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r1, @ANYBLOB="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"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4)
setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000200)={0xffffffffffffffff, 0x4, 0x80, 0xfffffff4, @vifc_lcl_addr=@dev={0xac, 0x14, 0x14, 0x21}, @empty}, 0x10)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), r3)
sendmsg$NL80211_CMD_SET_REG(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000004001b0000000c00228059fe00800400008006002100", @ANYRESHEX], 0x28}, 0x1, 0x0, 0x0, 0x20000004}, 0x24040800)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000340)={'wlan1\x00', <r5=>0x0})
sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x58, r4, 0x122, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}]}, 0x58}, 0x1, 0x0, 0x0, 0x8000}, 0x24000084)
sendmsg$nl_route(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newlink={0x76, 0x10, 0x40d, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x200}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x5}, @IFLA_BOND_TLB_DYNAMIC_LB={0x5}]}}}]}, 0x44}}, 0x0)
r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000500), r0)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20000900}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x44, r6, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0xe}, @L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x1}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e22}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}]}, 0x44}, 0x1, 0x0, 0x0, 0x40044}, 0x4004015)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0xf, &(0x7f0000000180)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x1}, {}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) (async)
socket(0x10, 0x3, 0x0) (async)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'bridge_slave_0\x00'}) (async)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r1, @ANYBLOB="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"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4) (async)
setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000200)={0xffffffffffffffff, 0x4, 0x80, 0xfffffff4, @vifc_lcl_addr=@dev={0xac, 0x14, 0x14, 0x21}, @empty}, 0x10) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), r3) (async)
sendmsg$NL80211_CMD_SET_REG(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000004001b0000000c00228059fe00800400008006002100", @ANYRESHEX], 0x28}, 0x1, 0x0, 0x0, 0x20000004}, 0x24040800) (async)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000340)={'wlan1\x00'}) (async)
sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x58, r4, 0x122, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}]}, 0x58}, 0x1, 0x0, 0x0, 0x8000}, 0x24000084) (async)
sendmsg$nl_route(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newlink={0x76, 0x10, 0x40d, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x200}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x5}, @IFLA_BOND_TLB_DYNAMIC_LB={0x5}]}}}]}, 0x44}}, 0x0) (async)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000500), r0) (async)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20000900}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x44, r6, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0xe}, @L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x1}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e22}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}]}, 0x44}, 0x1, 0x0, 0x0, 0x40044}, 0x4004015) (async)

771.473725ms ago: executing program 1 (id=15567):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="48000000100001002abd7000ffdbdf2500080000", @ANYRES32=0x0, @ANYBLOB="00000000305b010014000300677265746170300000000000000000000c0016800800018004000c8008000400ff010000"], 0x48}, 0x1, 0x0, 0x0, 0xc1}, 0x800)

688.268802ms ago: executing program 1 (id=15568):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async)
setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) (async)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x0, &(0x7f0000000340)}, 0x10) (async)
bind$inet(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10) (async)
socket$packet(0x11, 0xa, 0x300)
r1 = socket$alg(0x26, 0x5, 0x0) (async)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000e40)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0x20}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @dup={{0x8}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, "ae"}]}], {0x14}}, 0xb8}}, 0x0) (async)
bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x45)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000280)=@newlink={0x3c, 0x29, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4, 0x0, 0x300, 0x8042}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x4}}}, @IFLA_LINK={0x8}]}, 0x3c}}, 0x0) (async)
r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
setsockopt$bt_BT_VOICE(r4, 0x112, 0xb, &(0x7f0000000000)=0x63, 0x2)
r5 = accept4(r1, 0x0, 0x0, 0x0) (async)
r6 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r6, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) (async)
bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) (async)
ioctl$AUTOFS_IOC_PROTOVER(r6, 0x80049363, &(0x7f0000000040)) (async)
r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000280), r0)
sendmsg$IPVS_CMD_GET_SERVICE(r5, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x24000}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x14, r7, 0x100, 0x70bd25, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000011}, 0x8044) (async)
setsockopt$sock_int(r1, 0x1, 0x2e, &(0x7f0000000100)=0x3, 0x4) (async)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x103420, 0x0) (async)
socket(0x400000000010, 0x3, 0x4) (async)
connect$inet(r6, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r6, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000200)={0x0, 0x29, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001000010029bd7000fddbdf2500000800", @ANYRES32=0x0, @ANYBLOB="211000000300000008001b00000000000800040000050000"], 0x30}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) (async)
setsockopt$inet_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f00000001c0), 0x4) (async)
sendto$inet(r6, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) (async)
recvfrom$inet(r6, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25)

602.548126ms ago: executing program 3 (id=15569):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[], 0x64}}, 0x24000000)

602.129069ms ago: executing program 1 (id=15570):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@getqdisc={0x24, 0x26, 0x52e, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x3, 0x10}, {0x8, 0xf}, {0xf, 0xa}}}, 0x24}}, 0x10)
r0 = socket$can_raw(0x1d, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vxcan1\x00', <r1=>0x0})
bind$can_raw(r0, &(0x7f00000005c0), 0x10)
read(r0, &(0x7f00000027c0)=""/4073, 0xfe9)
sendmsg$can_raw(r0, &(0x7f0000000240)={&(0x7f0000000780)={0x1d, r1}, 0x10, &(0x7f00000003c0)={&(0x7f0000000500)=@can={{0x2, 0x0, 0x1, 0x1}, 0x1, 0x3f57955e7be81d83, 0x0, 0x0, "f97003b8750e5566"}, 0x10}}, 0x4000040)
sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)=ANY=[@ANYBLOB="60b80000", @ANYRES16, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32, @ANYRES16], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x4c14)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0200"], 0x50)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={r3, 0x58}, 0x55)
setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, &(0x7f0000000480)={'filter\x00', 0x104, 0x4, 0x3c0, 0x0, 0xe8, 0xe8, 0x2d8, 0x2d8, 0x2d8, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@local}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'dvmrp0\x00', 'macvlan0\x00'}, 0xc0, 0xe8}, @unspec=@NFQUEUE1={0x28}}, {{@arp={@loopback, @multicast2, 0x0, 0x0, 0x0, 0x0, {@mac=@local}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pim6reg0\x00', 'veth0\x00'}, 0xc0, 0x108}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xe8}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x410)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c0000001000daf3715ede9ef24200007a000000", @ANYRES32=0x0, @ANYBLOB="00000000081000001c0012800b00010062726964676500000c000280040018"], 0x3c}, 0x1, 0x0, 0x0, 0x34001843}, 0x4004000)
r4 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000000)={0xfffffff8}, 0x10)
write(r4, &(0x7f00000000c0)="240000001e005f0214fffffffffffff807000000b800000000000000080008000d00a600", 0x24)
getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r4, 0x84, 0xc, &(0x7f0000000040), &(0x7f00000000c0)=0x4)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840)
r5 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000140), 0x2, 0x0)
ioctl$FAT_IOCTL_GET_VOLUME_ID(r5, 0x80047213, &(0x7f00000001c0))
r6 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0)

520.756185ms ago: executing program 3 (id=15571):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x5c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9, 0x1}, {0x4}, {0xe, 0xd}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x401}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}, @TCA_INGRESS_BLOCK={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x90}, 0x4000c00)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0x200, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x10, 0xe}, {0xd, 0xffff}, {0x9, 0x3}}, [@qdisc_kind_options=@q_pie={{0x8}, {0xc, 0x2, [@TCA_PIE_ALPHA={0x8, 0x4, 0x8}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2008085}, 0x4041)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000040000100feffffffffdbdf25017c0000040042800c00018006000600800a000014000280100017800c0001"], 0x38}, 0x1, 0x0, 0x0, 0x48815}, 0x800c000)
r3 = socket$unix(0x1, 0x1, 0x0)
r4 = socket$kcm(0x11, 0x3, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084)
r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x800, 0x0)
close(r8)
socket$inet6_tcp(0xa, 0x1, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040))
r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_bt_hci(r9, 0x800448d2, &(0x7f0000000040))
ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r10=>0x0})
setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56)
sendmsg$kcm(r4, &(0x7f0000000000)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r10, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="27030200084014000e00002fb96dffff1144ee163cddcb000000800000827600000000000000", 0x26}, {&(0x7f0000000780)="f058050000007f8f", 0x4012}], 0x2}, 0x5)

518.967945ms ago: executing program 0 (id=15572):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYRES32=r0], 0x58}}, 0x4000)

460.458569ms ago: executing program 0 (id=15573):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
unshare(0x2020600)
r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000700)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x7, [@struct={0x4, 0x1, 0x0, 0x4, 0x1, 0x2, [{0x5, 0x3, 0x1000000}]}, @volatile={0x0, 0x0, 0x0, 0x9, 0x2}, @restrict={0x0, 0x0, 0x0, 0xb, 0x2}]}, {0x0, [0x61, 0x0, 0x30, 0x2e, 0x61]}}, 0x0, 0x4f}, 0x28)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11000000040000000400000002"], 0x50)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000000000000b704000000000000850000003300000095"], &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r4, 0x2000012, 0xe, 0x0, &(0x7f0000000280)="63ec33c9e9b98600000000000000", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, 0x0, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@can_delroute={0x58, 0x19, 0x2, 0x70bd28, 0x25dfdbfc, {0x1d, 0x1, 0x4}, [@CGW_LIM_HOPS={0x5, 0xd, 0x86}, @CGW_CS_XOR={0x8, 0x5, {0x1, 0xffffffffffffffff, 0x4, 0x4}}, @CGW_SRC_IF={0x8}, @CGW_FILTER={0xc, 0xb, {{0x4, 0x1, 0x1, 0x1}, {0x4, 0x0, 0x1, 0x1}}}, @CGW_FILTER={0xc, 0xb, {{0x0, 0x0, 0x1, 0x1}, {0x81, 0x0, 0x1, 0x1}}}, @CGW_FILTER={0xc, 0xb, {{0x2, 0x1, 0x0, 0x1}, {0x2, 0x0, 0x1, 0x1}}}, @CGW_CS_XOR={0x8, 0x5, {0xfffffffffffffff9, 0x4, 0x6, 0xb7}}]}, 0x58}}, 0x0)
r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0xe, &(0x7f0000000100)=@raw=[@call={0x85, 0x0, 0x0, 0x22}, @exit, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffff7}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @jmp={0x5, 0x0, 0x4, 0xa, 0xb, 0xfffffffffffffff4, 0x4}, @map_idx={0x18, 0x0, 0x5, 0x0, 0xc}], &(0x7f0000000880)='GPL\x00', 0x801, 0x0, 0x0, 0x40f00, 0x12, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f0000000300)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000340)={0x1, 0x3, 0x2, 0x8}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10000}, 0x94)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000440)={'batadv0\x00', <r6=>0x0})
ioctl$XFS_IOC_PATH_TO_HANDLE(r2, 0xc0385869, &(0x7f00000006c0)={<r7=>r2, &(0x7f0000000000)='GPL\x00', 0x801, &(0x7f0000000600)={@align=0x8, {0x27a, 0xb163, 0x7ff, 0xee04}}, 0x100, &(0x7f0000000640), &(0x7f0000000680)=0x3})
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000580)={@cgroup=r7, 0x20, 0x1, 0x8, &(0x7f0000000480)=[0x0], 0x1, 0x0, &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000500)=[0x0], &(0x7f0000000540)=[0x0, 0x0, 0x0], <r8=>0x0}, 0x40)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r5, r6, 0x25, 0xa, @val=@netkit={@void, @value, @void, @void, r8}}, 0x1c)
bind$alg(r7, &(0x7f00000008c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha512-ssse3\x00'}, 0x58)
r9 = socket$l2tp6(0xa, 0x2, 0x73)
sendmsg$NFNL_MSG_ACCT_NEW(r7, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x38, 0x0, 0x7, 0xe01, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x2}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x78d3}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0xb7}]}, 0x38}, 0x1, 0x0, 0x0, 0x20004010}, 0x4000000)
sendto$l2tp6(r9, &(0x7f0000000180)="f4da7f27e31c425bceb72412569adea3151f1901fd111971d61c0b8ed053dd307c655131656015c5ec26df41d8f684a3aa27b46281f7be2dbf1682db968b5fed09527626d24c7b7ba32bcea1eea36e16340d089587a0383a7287d8481bbc69c4b379790e0cfbe25ad760c255884714cc57ada6973d0efc38cb43d8b8", 0x7c, 0x8004, &(0x7f0000000200)={0xa, 0x0, 0x2, @empty, 0x72f}, 0x20)

412.236196ms ago: executing program 0 (id=15574):
unshare(0x6a040000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x102})
syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
socket$netlink(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
socketpair(0x26, 0x20000000000001, 0xffffffff, &(0x7f0000000240)={<r2=>0xffffffffffffffff})
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14)
sendmsg$nl_route_sched(r1, &(0x7f0000006280)={0x0, 0x0, 0x0}, 0x0)
ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1)
socket$nl_route(0x10, 0x3, 0x0)
getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@ipv4={'\x00', '\xff\xff', @loopback}, 0x1, 0x2, 0x0, 0xd, 0x4101}, 0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
writev(0xffffffffffffffff, &(0x7f0000000180)=[{}], 0x1)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r4)
r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x4, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0xffffffff}}, 0x0, 0x5, 0x23, 0x0, 0x0, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
ioctl$TUNSETOFFLOAD(r5, 0xc004743e, 0x110e22fff6)
ioctl$TUNGETVNETLE(r4, 0x4010744d, &(0x7f0000000180))
ioctl$FS_IOC_GETFSLABEL(r3, 0x400452c8, &(0x7f0000000100))
r6 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0x7, &(0x7f0000000040)={0x800, 0xe09b, 0x8, 0x2}, 0x10)
sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x24, 0x68, 0x309, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}, @NHA_ID={0x8, 0x1, 0x1}]}, 0x24}}, 0x0)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000700)={'wlan1\x00'})

151.85718ms ago: executing program 3 (id=15575):
r0 = socket$nl_route(0x10, 0x3, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000001104000000002e"], 0x0, 0x37}, 0x20)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'gretap0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB="4c00000010000104fcfffffffbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="431f07000b02000008000a00", @ANYRES32=r1, @ANYBLOB="08000500", @ANYRES32=r1, @ANYBLOB="1c0012800b0001006970766c616e"], 0x4c}, 0x1, 0x0, 0x0, 0x2004d808}, 0x40050)

62.23999ms ago: executing program 3 (id=15576):
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, 0x0, 0x0, 0x8, 0x0, 0x0, 0x41000}, 0x94)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450)
bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x32752275d7d1e3ca, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000050000008500000006"], 0x0, 0x349, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000000)={'macvlan0\x00', @random="bdbd67c12945"})
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], 0x0}, 0x94)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd"], 0xfdef)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYRES64=r0], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000100001000000000000dfff000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000004000038008000140000000002c0003801400010067656e65766530000000000000000000140001006c6f0000000000000000000000000000080002"], 0xb4}}, 0x0)
socket$kcm(0x29, 0x5, 0x0)
r3 = socket(0x2b, 0x80801, 0x1)
setsockopt$IP6T_SO_SET_ADD_COUNTERS(r3, 0x29, 0x41, 0x0, 0x58)
r4 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r5)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(0x3)
close(0xffffffffffffffff)
close(0xffffffffffffffff)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a50000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000000140c0009800800014000000081480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c0001808eae4ed7d10300000800034000000001140000001100010000000000000000000100000a"], 0xc0}, 0x1, 0x0, 0x0, 0x4000854}, 0x40)
sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000007c0)=ANY=[@ANYBLOB="1400000000000000000500000a400000000c0a010100230000000000000a0000060900020073797a31000000000900010073793a310000000014000380100000800c00018006000100d1030000140000001100010000000000000084ea0100000a000000000000004a64689606447696890ad070f0aaf9458f", @ANYRESHEX=r6], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x20000040)
connect$can_bcm(r4, &(0x7f0000000140), 0x30)

0s ago: executing program 3 (id=15577):
r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
sendmsg$802154_dgram(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x7, 0x0, 0x0, 0x40}, 0x2080)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)={0x3c, r2, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0xfc}, @ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4044851}, 0x0)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000580)={0x0, @in6={{0xa, 0x4e22, 0x1, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x7e}}, 0x0, 0x0, 0x3fc, 0x0, 0xd2}, 0x9c)
r4 = socket$inet6(0xa, 0x2, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFULNL_MSG_CONFIG(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB="240000000104010200000180000000000000000008000540000000000500010001"], 0x24}}, 0x0) (async)
sendmsg$NFULNL_MSG_CONFIG(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB="240000000104010200000180000000000000000008000540000000000500010001"], 0x24}}, 0x0)
sendmsg$NFULNL_MSG_CONFIG(r5, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000280)={0x24, 0x1, 0x4, 0x5, 0x0, 0x0, {}, [@NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x3}, @NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x24}}, 0x0)
setsockopt$sock_int(r3, 0x1, 0x28, &(0x7f00000000c0)=0x100, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x13, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"/1423], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x49, 0x10, &(0x7f0000000340)}, 0x42)
setsockopt$inet6_MCAST_JOIN_GROUP(r4, 0x29, 0x6, &(0x7f0000000500)={0x7, {{0x29, 0x0, 0xb000000, @remote, 0x1000004}}}, 0x88)
bind$inet6(r4, &(0x7f0000000300)={0xa, 0x4e23, 0x80, @loopback, 0x3}, 0x1c)
setsockopt$inet_sctp6_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f0000000000)={0x0, 0x1, 0x8001, 0x6}, 0x10)
socket$nl_xfrm(0x10, 0x3, 0x6) (async)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000800)=@newsa={0x16c, 0x10, 0x1, 0x0, 0x0, {{@in=@private, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x16}, {@in6=@loopback, 0x4d2, 0x6c}, @in=@local, {0x0, 0x0, 0x0, 0x1}, {}, {}, 0x0, 0x0, 0x2, 0x1}, [@lifetime_val={0x24, 0x9, {0x7, 0x7ff, 0x100000000, 0x9}}, @algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @replay_val={0x10, 0xa, {0x70bd26, 0x70bd2a, 0x200}}]}, 0x16c}}, 0x0)
sendto$inet6(r3, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
socket$nl_route(0x10, 0x3, 0x0) (async)
r7 = socket$nl_route(0x10, 0x3, 0x0)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000100)={0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000180)=0x20) (async)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000100)={0x7, [<r8=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000180)=0x20)
r9 = socket$netlink(0x10, 0x3, 0x10)
r10 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r10, 0x84, 0x76, 0x0, &(0x7f0000000040)) (async)
getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r10, 0x84, 0x76, 0x0, &(0x7f0000000040))
r11 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), r9)
sendmsg$TIPC_NL_MON_GET(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x14, r11, 0x1, 0x9, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x80)
setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f00000001c0)={r8, @in={{0x2, 0x4e21, @multicast1}}}, 0x84) (async)
setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f00000001c0)={r8, @in={{0x2, 0x4e21, @multicast1}}}, 0x84)
sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="2800000010000108feffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="080000002f1c060008001b"], 0x28}}, 0x0) (async)
sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="2800000010000108feffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="080000002f1c060008001b"], 0x28}}, 0x0)
close(0x3)

kernel console output (not intermixed with test programs):

gth.
[ 1310.412952][T31780] netlink: 'syz.1.14515': attribute type 10 has an invalid length.
[ 1310.440693][T31783] netlink: 'syz.3.14518': attribute type 1 has an invalid length.
[ 1310.482818][T31783] bond51: entered promiscuous mode
[ 1310.484685][T31783] 8021q: adding VLAN 0 to HW filter on device bond51
[ 1310.506210][T31783] bond51: (slave bridge16): making interface the new active one
[ 1310.508653][T31783] bridge16: entered promiscuous mode
[ 1310.513095][T31783] bond51: (slave bridge16): Enslaving as an active interface with an up link
[ 1310.525787][T31786] syz2: rxe_newlink: already configured on bridge_slave_1
[ 1310.688566][T31788]  speed is unknown, defaulting to 1000
[ 1310.691726][T31788] wg1 speed is unknown, defaulting to 1000
[ 1311.348577][T31804] netlink: 'syz.1.14521': attribute type 10 has an invalid length.
[ 1311.496752][T31809] hsr1: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[ 1311.504599][T31813] tipc: New replicast peer: 255.255.255.255
[ 1311.507682][T31813] tipc: Enabled bearer <udp:syz2>, priority 26
[ 1311.519148][T14707] syz2: Port: 1 Link ACTIVE
[ 1311.566511][T31813] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[ 1311.624640][T31823] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1311.641090][T31823] netlink: 'syz.0.14526': attribute type 9 has an invalid length.
[ 1311.654861][T31829] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1311.659141][T31825] netlink: 'syz.1.14528': attribute type 1 has an invalid length.
[ 1311.923227][T31855] bond52: option ad_select: invalid value (34)
[ 1311.927054][T31855] bond52 (unregistering): Released all slaves
[ 1312.030763][T31865] bridge0: port 2(erspan0) entered blocking state
[ 1312.033447][T31865] bridge0: port 2(erspan0) entered disabled state
[ 1312.114593][T31869] 8021q: adding VLAN 0 to HW filter on device bond414
[ 1312.119011][T31869] bond414: entered promiscuous mode
[ 1312.123127][T31869] bond414: entered allmulticast mode
[ 1312.132748][T31869] 8021q: adding VLAN 0 to HW filter on device bond414
[ 1312.138355][T31869] team0: Port device bond414 added
[ 1312.524704][T31891] bond415: option lp_interval: invalid value (0)
[ 1312.528243][T31891] bond415: option lp_interval: allowed values 1 - 2147483647
[ 1312.538932][T31891] bond415 (unregistering): Released all slaves
[ 1312.627448][T31896] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[ 1312.662059][T31896] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[ 1312.925965][T31901] mac80211_hwsim hwsim261 syzkaller0: left promiscuous mode
[ 1312.928869][T31901] mac80211_hwsim hwsim261 syzkaller0: left allmulticast mode
[ 1312.950325][T31901] vlan36: left allmulticast mode
[ 1312.952195][T31901] bond408: left allmulticast mode
[ 1312.965805][T31916] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[ 1312.973659][T31901] bond411: left promiscuous mode
[ 1312.993292][T31917] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[ 1313.085175][T31924] vlan37: entered promiscuous mode
[ 1313.094203][T31921] lo: MTU too low for tipc bearer
[ 1313.096270][T31921] tipc: Enabling of bearer <eth:lo> rejected, failed to enable media
[ 1313.197036][T31927] bond52: option arp_validate: invalid value (18446744073709551613)
[ 1313.212394][T31927] bond52 (unregistering): Released all slaves
[ 1313.235628][T31930] A link change request failed with some changes committed already. Interface veth1_to_team may have been left with an inconsistent configuration, please check.
[ 1313.246120][T31911]  speed is unknown, defaulting to 1000
[ 1313.252391][T31911] wg1 speed is unknown, defaulting to 1000
[ 1321.809717][    C0] bridge0: port 1(vlan1) entered learning state
[ 1327.533722][T31969] __nla_validate_parse: 13 callbacks suppressed
[ 1327.533740][T31969] netlink: 24 bytes leftover after parsing attributes in process `syz.3.14555'.
[ 1327.674443][T31978] netlink: 44 bytes leftover after parsing attributes in process `syz.1.14554'.
[ 1327.701359][T31977] mac80211_hwsim hwsim303 syzkaller0: entered promiscuous mode
[ 1327.704334][T31977] mac80211_hwsim hwsim303 syzkaller0: entered allmulticast mode
[ 1327.708366][T31977] tipc: Resetting bearer <eth:syzkaller0>
[ 1327.719616][T31966] validate_nla: 4 callbacks suppressed
[ 1327.719639][T31966] netlink: 'syz.1.14554': attribute type 4 has an invalid length.
[ 1327.727166][T31966] netlink: 'syz.1.14554': attribute type 4 has an invalid length.
[ 1327.784538][T31983] netlink: 8 bytes leftover after parsing attributes in process `syz.0.14557'.
[ 1327.987108][T31991] netlink: 'syz.1.14559': attribute type 13 has an invalid length.
[ 1328.018471][T31990] mac80211_hwsim hwsim261 syzkaller0: Caught tx_queue_len zero misconfig
[ 1328.082481][T31985]  speed is unknown, defaulting to 1000
[ 1328.086657][T31985] wg1 speed is unknown, defaulting to 1000
[ 1328.345030][T32007] netlink: 'syz.1.14562': attribute type 13 has an invalid length.
[ 1328.359149][T32007] mac80211_hwsim hwsim261 syzkaller0: Caught tx_queue_len zero misconfig
[ 1328.634008][T10464] tipc: Resetting bearer <eth:syzkaller0>
[ 1328.653496][T32014] netlink: 'syz.3.14564': attribute type 1 has an invalid length.
[ 1328.756294][T32014] bond52: (slave vxcan9): The slave device specified does not support setting the MAC address
[ 1328.766158][T32014] bond52: (slave vxcan9): Error -95 calling set_mac_address
[ 1328.782503][T32021] netlink: 40 bytes leftover after parsing attributes in process `syz.0.14565'.
[ 1328.845600][T32022] macvlan0: entered promiscuous mode
[ 1328.848159][T32022] macvlan0: entered allmulticast mode
[ 1328.852431][T32022] bond52: entered promiscuous mode
[ 1328.866412][T32022] 8021q: adding VLAN 0 to HW filter on device macvlan0
[ 1328.887548][T32022] bond52: left promiscuous mode
[ 1328.930340][T32020] netlink: 12 bytes leftover after parsing attributes in process `syz.3.14564'.
[ 1328.977447][T32026] netlink: 14 bytes leftover after parsing attributes in process `syz.0.14566'.
[ 1329.328865][T32064] netlink: 24 bytes leftover after parsing attributes in process `syz.3.14574'.
[ 1329.347576][T32066] netlink: 16 bytes leftover after parsing attributes in process `syz.0.14575'.
[ 1329.377280][T32066] netlink: 168 bytes leftover after parsing attributes in process `syz.0.14575'.
[ 1329.381421][T32066] openvswitch: netlink: Flow key attr not present in new flow.
[ 1329.670257][T32081] 8021q: adding VLAN 0 to HW filter on device bond5
[ 1329.680261][T32091] netlink: 'syz.1.14579': attribute type 49 has an invalid length.
[ 1329.685730][T32081] 8021q: adding VLAN 0 to HW filter on device bond6
[ 1329.691903][T32081] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue
[ 1329.706009][T32081] 8021q: adding VLAN 0 to HW filter on device bond7
[ 1329.719094][T32081] 8021q: adding VLAN 0 to HW filter on device bond8
[ 1329.724354][T32081] 8021q: adding VLAN 0 to HW filter on device bond9
[ 1329.733473][T32081] 8021q: adding VLAN 0 to HW filter on device bond10
[ 1329.785710][T32081] 8021q: adding VLAN 0 to HW filter on device bond11
[ 1329.793086][T32081] 8021q: adding VLAN 0 to HW filter on device bond12
[ 1329.804894][T32081] 8021q: adding VLAN 0 to HW filter on device bond13
[ 1329.809800][T32081] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue
[ 1329.815753][T32081] 8021q: adding VLAN 0 to HW filter on device bond14
[ 1329.819996][T32081] 8021q: adding VLAN 0 to HW filter on device bond15
[ 1329.829148][T32081] 8021q: adding VLAN 0 to HW filter on device bond16
[ 1329.834586][T32081] 8021q: adding VLAN 0 to HW filter on device bond17
[ 1329.838159][T32081] 8021q: adding VLAN 0 to HW filter on device bond18
[ 1329.843728][T32081] 8021q: adding VLAN 0 to HW filter on device bond19
[ 1329.847429][T32081] 8021q: adding VLAN 0 to HW filter on device bond20
[ 1329.851783][T32081] 8021q: adding VLAN 0 to HW filter on device bond21
[ 1329.864494][T32081] 8021q: adding VLAN 0 to HW filter on device bond22
[ 1329.868375][T32081] 8021q: adding VLAN 0 to HW filter on device bond23
[ 1329.872727][T32081] 8021q: adding VLAN 0 to HW filter on device bond24
[ 1329.882343][T32081] 8021q: adding VLAN 0 to HW filter on device bond25
[ 1329.887527][T32081] 8021q: adding VLAN 0 to HW filter on device bond26
[ 1329.895426][T32081] 8021q: adding VLAN 0 to HW filter on device bond27
[ 1329.901308][T32081] 8021q: adding VLAN 0 to HW filter on device bond28
[ 1329.906838][T32081] 8021q: adding VLAN 0 to HW filter on device bond29
[ 1329.912024][T32081] 8021q: adding VLAN 0 to HW filter on device bond30
[ 1329.918160][T32081] 8021q: adding VLAN 0 to HW filter on device bond31
[ 1329.924186][T32081] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[ 1329.928755][T32081] 8021q: adding VLAN 0 to HW filter on device ipvlan3
[ 1329.935357][T32081] 8021q: adding VLAN 0 to HW filter on device bond32
[ 1329.943354][T32081] 8021q: adding VLAN 0 to HW filter on device bond33
[ 1329.947383][T32081] gretap5: default qdisc (pfifo_fast) fail, fallback to noqueue
[ 1329.952170][T32081] 8021q: adding VLAN 0 to HW filter on device team1
[ 1329.955219][T32081] 8021q: adding VLAN 0 to HW filter on device team2
[ 1329.963666][T32081] 8021q: adding VLAN 0 to HW filter on device bond34
[ 1329.967115][T32081] 8021q: adding VLAN 0 to HW filter on device bond35
[ 1329.972578][T32081] mac80211_hwsim hwsim303 syzkaller0: left promiscuous mode
[ 1329.975245][T32081] tipc: Resetting bearer <eth:syzkaller0>
[ 1329.979141][T32081] 8021q: adding VLAN 0 to HW filter on device bond36
[ 1329.985290][T32081] 8021q: adding VLAN 0 to HW filter on device bond37
[ 1329.997248][T32081] 8021q: adding VLAN 0 to HW filter on device bond38
[ 1329.999902][ T5644] bond27: (slave bridge5): link status up again after 0 ms
[ 1330.007152][T32081] 8021q: adding VLAN 0 to HW filter on device bond39
[ 1330.012219][T32081] 8021q: adding VLAN 0 to HW filter on device bond40
[ 1330.020986][T31961] bond27: (slave bridge5): link status up again after 0 ms
[ 1330.025624][T32081] 8021q: adding VLAN 0 to HW filter on device bond41
[ 1330.031183][T32081] 8021q: adding VLAN 0 to HW filter on device batadv1
[ 1330.035709][T32081] 8021q: adding VLAN 0 to HW filter on device bond42
[ 1330.039778][ T4124] bond27: (slave bridge5): link status up again after 0 ms
[ 1330.043523][T32081] 8021q: adding VLAN 0 to HW filter on device bond43
[ 1330.050325][T32081] A link change request failed with some changes committed already. Interface vxlan1 may have been left with an inconsistent configuration, please check.
[ 1330.060283][ T5644] bond27: (slave bridge5): link status up again after 0 ms
[ 1330.077523][T32087] dvmrp8: entered allmulticast mode
[ 1330.079998][ T5845] bond27: (slave bridge5): link status up again after 0 ms
[ 1330.100401][ T5845] bond27: (slave bridge5): link status up again after 0 ms
[ 1330.119796][ T4124] bond27: (slave bridge5): link status up again after 0 ms
[ 1330.128066][   T12] bond30: (slave veth5): link status definitely up, 10000 Mbps full duplex
[ 1330.136826][T32093] netlink: 12 bytes leftover after parsing attributes in process `syz.3.14581'.
[ 1330.138765][   T12] bond30: (slave veth5): making interface the new active one
[ 1330.142401][ T4124] bond27: (slave bridge5): link status up again after 0 ms
[ 1330.152627][   T12] bond30: active interface up!
[ 1330.180149][T32093] 8021q: adding VLAN 0 to HW filter on device bond53
[ 1330.196784][ T5845] ip6_tunnel: ip6tnl5 xmit: Local address not yet configured!
[ 1330.201019][ T5845] ip6_tunnel: ip6tnl5 xmit: Local address not yet configured!
[ 1330.204305][ T5845] ip6_tunnel: ip6tnl6 xmit: Local address not yet configured!
[ 1330.206923][T32099] netlink: 'syz.0.14582': attribute type 1 has an invalid length.
[ 1330.210560][ T5845] ip6_tunnel: ip6tnl6 xmit: Local address not yet configured!
[ 1330.213277][ T5845] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[ 1330.215883][ T5845] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[ 1330.222155][T14707] ip6_tunnel: ip6tnl5 xmit: Local address not yet configured!
[ 1330.235469][T14707] ip6_tunnel: ip6tnl6 xmit: Local address not yet configured!
[ 1330.243114][T14707] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[ 1330.258705][T32099] 8021q: adding VLAN 0 to HW filter on device bond395
[ 1330.288804][ T5845] bond32: (slave veth7): link status definitely up, 10000 Mbps full duplex
[ 1330.294377][ T5845] bond32: (slave veth9): link status definitely up, 10000 Mbps full duplex
[ 1330.297206][ T5845] bond32: (slave veth7): making interface the new active one
[ 1330.307361][ T5845] bond32: active interface up!
[ 1330.310470][T14707] ip6_tunnel: ip6tnl6 xmit: Local address not yet configured!
[ 1330.691953][T32106] tipc: Resetting bearer <eth:syzkaller0>
[ 1330.693975][T32106] tipc: Resetting bearer <eth:syzkaller0>
[ 1330.867906][T32123] netlink: 'syz.0.14587': attribute type 1 has an invalid length.
[ 1330.903497][T32123] 8021q: adding VLAN 0 to HW filter on device bond396
[ 1331.081927][T32146] team0: Device 26rB is loopback device. Loopback devices can't be added as a team port
[ 1331.110179][T32144] bond54: entered promiscuous mode
[ 1331.111955][T32144] 8021q: adding VLAN 0 to HW filter on device bond54
[ 1331.276133][T32138]  speed is unknown, defaulting to 1000
[ 1331.279161][T32138] wg1 speed is unknown, defaulting to 1000
[ 1331.350565][T32157] bond417: option arp_validate: mode dependency failed, not supported in mode 802.3ad(4)
[ 1331.358444][T32157] bond417 (unregistering): Released all slaves
[ 1331.655189][T32169] netlink: 'syz.1.14600': attribute type 11 has an invalid length.
[ 1331.684876][T32169] 8021q: adding VLAN 0 to HW filter on device ipvlan0
[ 1331.776454][T32173] IPv6: Can't replace route, no match found
[ 1331.865649][T32164]  speed is unknown, defaulting to 1000
[ 1331.871521][T32164] wg1 speed is unknown, defaulting to 1000
[ 1332.119724][T32181] netlink: 'syz.0.14604': attribute type 2 has an invalid length.
[ 1333.073953][T32235] mac80211_hwsim hwsim303 syzkaller0: entered promiscuous mode
[ 1333.167951][T32244] __nla_validate_parse: 10 callbacks suppressed
[ 1333.167969][T32244] netlink: 48 bytes leftover after parsing attributes in process `syz.3.14621'.
[ 1333.175076][T32244] netlink: 48 bytes leftover after parsing attributes in process `syz.3.14621'.
[ 1333.418238][T32250]  speed is unknown, defaulting to 1000
[ 1333.421394][T32250] wg1 speed is unknown, defaulting to 1000
[ 1333.904032][T32260] pim6reg1: entered promiscuous mode
[ 1333.906247][T32260] pim6reg1: entered allmulticast mode
[ 1334.065992][T32265] netlink: 92 bytes leftover after parsing attributes in process `syz.1.14627'.
[ 1334.198866][T32274] syzkaller1: entered promiscuous mode
[ 1334.200902][T32274] syzkaller1: entered allmulticast mode
[ 1334.204981][T32274] validate_nla: 3 callbacks suppressed
[ 1334.204990][T32274] netlink: 'syz.1.14628': attribute type 2 has an invalid length.
[ 1334.434969][T32280] IPv6: sit3: Disabled Multicast RS
[ 1334.490363][   T12] net_ratelimit: 41 callbacks suppressed
[ 1334.490380][   T12] bond27: (slave bridge5): failed to get link speed/duplex
[ 1334.509910][T32284] netlink: 'syz.3.14632': attribute type 1 has an invalid length.
[ 1334.538372][T32284] bond55: (slave vxcan9): The slave device specified does not support setting the MAC address
[ 1334.544761][T32284] bond55: (slave vxcan9): Error -95 calling set_mac_address
[ 1334.580666][T32286] netlink: 20 bytes leftover after parsing attributes in process `syz.3.14632'.
[ 1334.597418][T32286] bond55: (slave bridge18): Enslaving as an active interface with a down link
[ 1334.610470][   T12] bond27: (slave bridge5): failed to get link speed/duplex
[ 1334.615027][T32284] netlink: 28 bytes leftover after parsing attributes in process `syz.3.14632'.
[ 1334.621017][T32284] 8021q: adding VLAN 0 to HW filter on device bond55
[ 1334.749528][ T5644] bond27: (slave bridge5): failed to get link speed/duplex
[ 1334.815719][T32290] netlink: 44 bytes leftover after parsing attributes in process `syz.0.14633'.
[ 1334.860094][   T13] bond27: (slave bridge5): failed to get link speed/duplex
[ 1334.865243][T32292] Cannot find del_set index 14804 as target
[ 1334.870572][T32292] netlink: 'syz.0.14634': attribute type 1 has an invalid length.
[ 1334.893442][T32292] 8021q: adding VLAN 0 to HW filter on device bond397
[ 1334.941130][T32295] netlink: 8 bytes leftover after parsing attributes in process `syz.0.14635'.
[ 1334.969685][   T13] bond27: (slave bridge5): failed to get link speed/duplex
[ 1335.082459][   T12] bond27: (slave bridge5): failed to get link speed/duplex
[ 1335.086035][T32301] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14637'.
[ 1335.210018][   T13] bond27: (slave bridge5): failed to get link speed/duplex
[ 1335.312637][T32308] netlink: 12 bytes leftover after parsing attributes in process `syz.0.14639'.
[ 1335.321961][ T5845] bond27: (slave bridge5): failed to get link speed/duplex
[ 1335.479799][ T5845] bond27: (slave bridge5): failed to get link speed/duplex
[ 1335.589526][ T5845] bond27: (slave bridge5): failed to get link speed/duplex
[ 1335.616666][T32312] netlink: 4 bytes leftover after parsing attributes in process `syz.3.14640'.
[ 1335.733204][T32325] xt_hashlimit: size too large, truncated to 1048576
[ 1335.753555][T32331] xt_bpf: check failed: parse error
[ 1335.800403][T32325] bond398 (unregistering): Released all slaves
[ 1335.949924][T32342] sctp: [Deprecated]: syz.0.14650 (pid 32342) Use of int in maxseg socket option.
[ 1335.949924][T32342] Use struct sctp_assoc_value instead
[ 1335.956895][T32344] mac80211_hwsim hwsim261 syzkaller0: entered promiscuous mode
[ 1335.963646][T32344] mac80211_hwsim hwsim261 syzkaller0: entered allmulticast mode
[ 1336.166886][T32378] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[ 1336.200169][T32375] tipc: Resetting bearer <eth:syzkaller0>
[ 1336.467798][T32403] team3: entered promiscuous mode
[ 1336.470564][T32403] team3: entered allmulticast mode
[ 1336.472873][T32403] 8021q: adding VLAN 0 to HW filter on device team3
[ 1336.477061][T32400] netlink: 'syz.0.14665': attribute type 10 has an invalid length.
[ 1336.480079][T32403] team4 (uninitialized): Failed to send options change via netlink (err -105)
[ 1336.498445][T32403] team4: entered promiscuous mode
[ 1336.502156][T32403] team4: entered allmulticast mode
[ 1336.504450][T32403] 8021q: adding VLAN 0 to HW filter on device team4
[ 1336.534463][T32407] x_tables: unsorted underflow at hook 4
[ 1336.586005][T32419] syzkaller1: left promiscuous mode
[ 1336.587971][T32419] syzkaller1: left allmulticast mode
[ 1336.642249][T32426] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[ 1336.701608][T32429] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[ 1336.704321][T32429] IPv6: NLM_F_CREATE should be set when creating new route
[ 1336.707023][T32429] IPv6: NLM_F_CREATE should be set when creating new route
[ 1336.709880][T32429] IPv6: NLM_F_CREATE should be set when creating new route
[ 1337.215030][T32474] nbd: must specify a size in bytes for the device
[ 1337.217457][T32474] block nbd1: NBD_DISCONNECT
[ 1337.219558][T32474] block nbd1: Send disconnect failed -32
[ 1337.221821][T32474] block nbd1: shutting down sockets
[ 1337.262529][T32476] netlink: 'syz.1.14685': attribute type 18 has an invalid length.
[ 1337.513409][T32486] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[ 1337.627252][T32490] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[ 1337.645517][T32493] IPVS: stopping backup sync thread 22853 ...
[ 1337.741611][T32502] netlink: 'syz.3.14693': attribute type 1 has an invalid length.
[ 1337.784909][T32507] batman_adv: batadv0: Adding interface: veth189
[ 1337.787347][T32507] batman_adv: batadv0: The MTU of interface veth189 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1337.797249][T32507] batman_adv: batadv0: Interface activated: veth189
[ 1338.032215][T32520] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[ 1338.036068][T32520] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[ 1338.051372][T32529] netlink: 'syz.1.14698': attribute type 10 has an invalid length.
[ 1338.089100][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1338.092460][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1338.179135][T32540] __nla_validate_parse: 24 callbacks suppressed
[ 1338.179146][T32540] netlink: 72 bytes leftover after parsing attributes in process `syz.0.14700'.
[ 1338.214765][T32543] netlink: 48 bytes leftover after parsing attributes in process `syz.1.14702'.
[ 1338.218858][T32543] netlink: 48 bytes leftover after parsing attributes in process `syz.1.14702'.
[ 1338.257060][T32540] netlink: 60 bytes leftover after parsing attributes in process `syz.0.14700'.
[ 1338.276007][T32547] netlink: 36 bytes leftover after parsing attributes in process `syz.1.14703'.
[ 1338.282428][T32547] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[ 1338.678268][T32561]  speed is unknown, defaulting to 1000
[ 1338.681912][T32561] wg1 speed is unknown, defaulting to 1000
[ 1338.907491][T32575] bond57: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0)
[ 1338.919773][T32575] bond57 (unregistering): Released all slaves
[ 1339.036348][T32582] bond57: up delay (1) is not a multiple of miimon (100), value rounded to 0 ms
[ 1339.039161][T32582] bond57: down delay (128) is not a multiple of miimon (100), value rounded to 100 ms
[ 1339.045270][T32580] sctp: [Deprecated]: syz.0.14711 (pid 32580) Use of int in maxseg socket option.
[ 1339.045270][T32580] Use struct sctp_assoc_value instead
[ 1339.268486][T32610] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[ 1339.275330][T32610] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[ 1339.299045][T32602] netlink: 24 bytes leftover after parsing attributes in process `syz.0.14715'.
[ 1339.381455][T32617] tipc: Resetting bearer <eth:syzkaller0>
[ 1339.475491][T32623] netlink: 24 bytes leftover after parsing attributes in process `syz.0.14720'.
[ 1339.479093][T32625] netlink: 'syz.1.14721': attribute type 1 has an invalid length.
[ 1339.574065][ T4124] net_ratelimit: 32 callbacks suppressed
[ 1339.574084][ T4124] bond27: (slave bridge5): failed to get link speed/duplex
[ 1339.606041][T32623] netlink: 4 bytes leftover after parsing attributes in process `syz.0.14720'.
[ 1339.709420][ T5845] bond27: (slave bridge5): failed to get link speed/duplex
[ 1339.820017][   T13] bond27: (slave bridge5): failed to get link speed/duplex
[ 1339.835042][T32636] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1339.908791][T32636] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1339.950048][ T4124] bond27: (slave bridge5): failed to get link speed/duplex
[ 1339.984904][T32636] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1340.053818][T32636] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1340.069705][ T4124] bond27: (slave bridge5): failed to get link speed/duplex
[ 1340.087839][T32650] netlink: 160 bytes leftover after parsing attributes in process `syz.1.14728'.
[ 1340.094025][T32650] openvswitch: netlink: Flow actions attr not present in new flow.
[ 1340.127755][ T5644] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1340.155082][ T5644] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1340.171400][   T13] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1340.188886][   T13] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1340.199712][   T13] bond27: (slave bridge5): failed to get link speed/duplex
[ 1340.278432][T32665] netlink: 28 bytes leftover after parsing attributes in process `syz.0.14733'.
[ 1340.312464][ T5644] bond27: (slave bridge5): failed to get link speed/duplex
[ 1340.370043][ T1866] wlan1: Trigger new scan to find an IBSS to join
[ 1340.420177][T31961] bond27: (slave bridge5): failed to get link speed/duplex
[ 1340.497707][T32677] netlink: 'syz.0.14736': attribute type 8 has an invalid length.
[ 1340.506073][T32677] smc: adding net device hsr0 with user defined pnetid SYZ2
[ 1340.509022][T32677] bond0: entered promiscuous mode
[ 1340.511483][T32682] netlink: 'syz.1.14739': attribute type 1 has an invalid length.
[ 1340.511598][T32677] bond0: left promiscuous mode
[ 1340.531497][T32677] smc: removing net device hsr0 with user defined pnetid SYZ2
[ 1340.539761][   T13] bond27: (slave bridge5): failed to get link speed/duplex
[ 1340.581244][T32686] netlink: 'syz.1.14741': attribute type 1 has an invalid length.
[ 1341.251959][T32734] bond418: Removing last ns target with arp_interval on
[ 1341.674448][T32759] bond419: option coupled_control: mode dependency failed, not supported in mode balance-rr(0)
[ 1341.680369][T32759] bond419 (unregistering): Released all slaves
[ 1341.833908][T32765] netlink: 'syz.3.14764': attribute type 1 has an invalid length.
[ 1341.870139][T32765] bond58: (slave bridge21): making interface the new active one
[ 1341.874657][T32765] bond58: (slave bridge21): Enslaving as an active interface with an up link
[ 1341.908686][  T300] netlink: 'syz.1.14765': attribute type 1 has an invalid length.
[ 1342.160018][  T316] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[ 1342.200206][  T319] netlink: 'syz.3.14771': attribute type 1 has an invalid length.
[ 1342.317827][  T325] netlink: 'syz.1.14773': attribute type 1 has an invalid length.
[ 1342.386646][  T339] IPVS: set_ctl: invalid protocol: 43 224.0.0.1:20002
[ 1342.390463][  T340] IPVS: set_ctl: invalid protocol: 43 224.0.0.1:20002
[ 1342.500640][  T345] netlink: 'syz.1.14777': attribute type 1 has an invalid length.
[ 1342.527384][  T345] 8021q: adding VLAN 0 to HW filter on device bond419
[ 1342.543659][  T345] vlan37: entered allmulticast mode
[ 1342.545869][  T345] bond419: entered allmulticast mode
[ 1342.930728][    C0] ip6_tnl_xmit_ctl: 8 callbacks suppressed
[ 1342.930747][    C0] ip6_tunnel: ip6tnl5 xmit: Local address not yet configured!
[ 1342.936485][    C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[ 1343.024621][  T362] ip6gre0: Caught tx_queue_len zero misconfig
[ 1343.027404][  T362] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1280) !
[ 1343.317023][  T376] __nla_validate_parse: 24 callbacks suppressed
[ 1343.317035][  T376] netlink: 4 bytes leftover after parsing attributes in process `syz.1.14789'.
[ 1343.409818][ T1865] wlan1: Trigger new scan to find an IBSS to join
[ 1343.430448][  T382] netlink: 'syz.1.14790': attribute type 1 has an invalid length.
[ 1343.482683][  T382] bond420: (slave vxcan21): The slave device specified does not support setting the MAC address
[ 1343.487358][  T382] bond420: (slave vxcan21): Error -95 calling set_mac_address
[ 1343.524093][  T386] macvlan3: entered promiscuous mode
[ 1343.525828][  T386] macvlan3: entered allmulticast mode
[ 1343.528543][  T386] bond420: entered promiscuous mode
[ 1343.533624][  T386] 8021q: adding VLAN 0 to HW filter on device macvlan3
[ 1343.533645][  T380] netlink: 4 bytes leftover after parsing attributes in process `syz.3.14788'.
[ 1343.541215][  T386] bond420: left promiscuous mode
[ 1343.569983][    C0] ip6_tunnel: ip6tnl6 xmit: Local address not yet configured!
[ 1343.575943][  T382] netlink: 16 bytes leftover after parsing attributes in process `syz.1.14790'.
[ 1343.865339][  T398] netlink: 28 bytes leftover after parsing attributes in process `syz.0.14792'.
[ 1344.285718][  T413] netlink: 228 bytes leftover after parsing attributes in process `syz.3.14795'.
[ 1344.661194][T31961] net_ratelimit: 35 callbacks suppressed
[ 1344.661211][T31961] bond27: (slave bridge5): failed to get link speed/duplex
[ 1344.697938][  T424] IPVS: set_ctl: invalid protocol: 4 127.0.0.1:20004
[ 1344.780967][T31961] bond27: (slave bridge5): failed to get link speed/duplex
[ 1344.900889][  T442] netlink: 4 bytes leftover after parsing attributes in process `syz.1.14803'.
[ 1344.910740][ T4124] bond27: (slave bridge5): failed to get link speed/duplex
[ 1344.916806][  T442] validate_nla: 1 callbacks suppressed
[ 1344.916820][  T442] netlink: 'syz.1.14803': attribute type 1 has an invalid length.
[ 1344.923660][  T442] netlink: 36 bytes leftover after parsing attributes in process `syz.1.14803'.
[ 1344.931164][  T440] netlink: 24 bytes leftover after parsing attributes in process `syz.0.14801'.
[ 1345.030573][ T4124] bond27: (slave bridge5): failed to get link speed/duplex
[ 1345.042328][  T425]  speed is unknown, defaulting to 1000
[ 1345.055109][  T425] wg1 speed is unknown, defaulting to 1000
[ 1345.078823][  T456] netlink: 48 bytes leftover after parsing attributes in process `syz.0.14806'.
[ 1345.085612][  T456] netlink: 48 bytes leftover after parsing attributes in process `syz.0.14806'.
[ 1345.137827][  T458] bond421: option lacp_active: mode dependency failed, not supported in mode balance-xor(2)
[ 1345.148827][  T458] bond421 (unregistering): Released all slaves
[ 1345.186609][T31961] bond27: (slave bridge5): failed to get link speed/duplex
[ 1345.299852][T31961] bond27: (slave bridge5): failed to get link speed/duplex
[ 1345.419487][ T5644] bond27: (slave bridge5): failed to get link speed/duplex
[ 1345.602969][ T5845] bond27: (slave bridge5): failed to get link speed/duplex
[ 1345.723618][ T5845] bond27: (slave bridge5): failed to get link speed/duplex
[ 1345.860251][   T12] bond27: (slave bridge5): failed to get link speed/duplex
[ 1345.920157][  T502] netlink: 'syz.1.14817': attribute type 1 has an invalid length.
[ 1346.072234][  T506] bond421: (slave veth167): Enslaving as an active interface with a down link
[ 1346.106539][  T508] ip_vti0: entered promiscuous mode
[ 1346.171035][  T516] ipvlan1: entered allmulticast mode
[ 1346.225203][  T526] netlink: 'syz.3.14823': attribute type 1 has an invalid length.
[ 1346.253629][  T526] 8021q: adding VLAN 0 to HW filter on device bond59
[ 1346.295282][  T526] vlan4: entered allmulticast mode
[ 1346.297267][  T526] bond59: entered allmulticast mode
[ 1346.369598][T10455] wlan1: Trigger new scan to find an IBSS to join
[ 1346.499054][  T537] bond60: entered promiscuous mode
[ 1346.501551][  T537] 8021q: adding VLAN 0 to HW filter on device bond60
[ 1346.646238][  T542] bridge0: port 1(vlan1) entered disabled state
[ 1346.656397][  T542] bridge0: port 1(vlan1) entered blocking state
[ 1346.658853][  T542] bridge0: port 1(vlan1) entered listening state
[ 1346.664345][  T542] bridge0: port 1(vlan1) entered disabled state
[ 1346.733921][  T549] netlink: 'syz.1.14831': attribute type 13 has an invalid length.
[ 1346.762398][  T551] Unsupported ieee802154 address type: 0
[ 1346.772686][  T551] netlink: 'syz.3.14832': attribute type 2 has an invalid length.
[ 1346.777435][  T554] netlink: 'syz.0.14833': attribute type 8 has an invalid length.
[ 1346.794913][  T554] smc: adding net device hsr0 with user defined pnetid SYZ2
[ 1346.799922][  T554] bond0: entered promiscuous mode
[ 1346.807666][  T554] bond0: left promiscuous mode
[ 1346.814248][  T554] smc: removing net device hsr0 with user defined pnetid SYZ2
[ 1346.829401][  T551] hmac(sha224): entered promiscuous mode
[ 1346.843818][  T555] netlink: 'syz.1.14831': attribute type 29 has an invalid length.
[ 1346.861653][  T555] netlink: 'syz.1.14831': attribute type 29 has an invalid length.
[ 1346.986002][  T560] netlink: 'syz.0.14835': attribute type 1 has an invalid length.
[ 1347.024763][  T549]  speed is unknown, defaulting to 1000
[ 1347.028077][  T549] wg1 speed is unknown, defaulting to 1000
[ 1347.224019][  T574] geneve4: entered promiscuous mode
[ 1347.230026][  T574] geneve4: entered allmulticast mode
[ 1347.289701][ T5644] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 20000 - 0
[ 1347.300762][ T1864] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1347.304094][ T5644] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 20000 - 0
[ 1347.333798][ T5644] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 20000 - 0
[ 1347.348278][T31961] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 20000 - 0
[ 1347.413036][  T578] bond61: option miimon: invalid value (18446744073709551607)
[ 1347.415424][  T578] bond61: option miimon: allowed values 0 - 2147483647
[ 1347.421364][  T578] bond61 (unregistering): Released all slaves
[ 1347.450404][  T569] 8021q: adding VLAN 0 to HW filter on device bond398
[ 1347.465509][  T585] vlan5: entered promiscuous mode
[ 1347.467080][  T585] geneve1: entered promiscuous mode
[ 1347.468957][  T585] vlan5: entered allmulticast mode
[ 1347.473187][  T585] geneve1: entered allmulticast mode
[ 1347.501000][  T560]  speed is unknown, defaulting to 1000
[ 1347.533219][  T560] wg1 speed is unknown, defaulting to 1000
[ 1347.900690][  T598] team21: entered promiscuous mode
[ 1347.902748][  T598] team21: entered allmulticast mode
[ 1347.905069][  T598] 8021q: adding VLAN 0 to HW filter on device team21
[ 1347.963522][  T600] veth19: entered promiscuous mode
[ 1347.985619][  T601] team22: entered promiscuous mode
[ 1347.987777][  T601] team22: entered allmulticast mode
[ 1347.990379][  T601] 8021q: adding VLAN 0 to HW filter on device team22
[ 1348.192308][  T610] netlink: 'syz.1.14848': attribute type 1 has an invalid length.
[ 1348.404049][  T625] __nla_validate_parse: 27 callbacks suppressed
[ 1348.404065][  T625] netlink: 68 bytes leftover after parsing attributes in process `syz.1.14854'.
[ 1348.456683][  T629] netlink: 12 bytes leftover after parsing attributes in process `syz.3.14855'.
[ 1348.474277][  T628] netlink: 6032 bytes leftover after parsing attributes in process `syz.1.14856'.
[ 1348.486420][  T632] RDS: rds_bind could not find a transport for 2001::, load rds_tcp or rds_rdma?
[ 1348.502671][  T629] veth21: entered allmulticast mode
[ 1348.508250][  T629] bond61: (slave veth21): Enslaving as an active interface with an up link
[ 1348.578122][  T635] netlink: 12 bytes leftover after parsing attributes in process `syz.0.14858'.
[ 1348.835843][  T648] bond399: option all_slaves_active: invalid value (11)
[ 1348.841131][  T648] bond399 (unregistering): Released all slaves
[ 1348.931034][  T651] netlink: 12 bytes leftover after parsing attributes in process `syz.0.14861'.
[ 1348.951005][  T651] netlink: 8 bytes leftover after parsing attributes in process `syz.0.14861'.
[ 1348.982757][  T651] veth193: entered allmulticast mode
[ 1348.992227][  T651] bond399: (slave veth193): Enslaving as an active interface with an up link
[ 1349.007548][  T651] bond399 (unregistering): (slave veth193): Releasing backup interface
[ 1349.018911][  T651] bond399 (unregistering): Released all slaves
[ 1349.204604][  T654] bond62: entered promiscuous mode
[ 1349.206589][  T654] 8021q: adding VLAN 0 to HW filter on device bond62
[ 1349.283858][  T654] macvtap3: entered allmulticast mode
[ 1349.306479][  T654] bond62: (slave bridge22): making interface the new active one
[ 1349.309663][  T654] bridge22: entered promiscuous mode
[ 1349.314244][  T654] bond62: (slave bridge22): Enslaving as an active interface with an up link
[ 1349.357069][  T667] 8021q: adding VLAN 0 to HW filter on device bond399
[ 1349.394962][  T667] bond399: (slave veth195): Enslaving as an active interface with a down link
[ 1349.404035][  T667] netlink: 16 bytes leftover after parsing attributes in process `syz.0.14864'.
[ 1349.407681][  T667] netlink: 16 bytes leftover after parsing attributes in process `syz.0.14864'.
[ 1349.416105][  T667] netlink: 14 bytes leftover after parsing attributes in process `syz.0.14864'.
[ 1349.558930][  T682] netlink: 4 bytes leftover after parsing attributes in process `syz.0.14868'.
[ 1349.704846][  T692] bond63: option primary: mode dependency failed, not supported in mode balance-rr(0)
[ 1349.712487][  T692] bond63 (unregistering): Released all slaves
[ 1349.750526][ T5845] net_ratelimit: 25 callbacks suppressed
[ 1349.750546][ T5845] bond27: (slave bridge5): failed to get link speed/duplex
[ 1349.859738][ T5845] bond27: (slave bridge5): failed to get link speed/duplex
[ 1349.973046][ T5845] bond27: (slave bridge5): failed to get link speed/duplex
[ 1350.107699][  T722] bond400: entered promiscuous mode
[ 1350.111995][  T722] 8021q: adding VLAN 0 to HW filter on device bond400
[ 1350.140012][ T4124] bond27: (slave bridge5): failed to get link speed/duplex
[ 1350.156680][  T728] workqueue: Failed to create a rescuer kthread for wq "bond401": -EINTR
[ 1350.259854][ T5644] bond27: (slave bridge5): failed to get link speed/duplex
[ 1350.301559][  T713]  speed is unknown, defaulting to 1000
[ 1350.306032][  T713] wg1 speed is unknown, defaulting to 1000
[ 1350.369589][ T5644] bond27: (slave bridge5): failed to get link speed/duplex
[ 1350.471682][  T745] x_tables: duplicate underflow at hook 1
[ 1350.479722][ T5644] bond27: (slave bridge5): failed to get link speed/duplex
[ 1350.613478][ T5644] bond27: (slave bridge5): failed to get link speed/duplex
[ 1350.721883][ T5644] bond27: (slave bridge5): failed to get link speed/duplex
[ 1350.741847][  T754] sctp: [Deprecated]: syz.0.14885 (pid 754) Use of struct sctp_assoc_value in delayed_ack socket option.
[ 1350.741847][  T754] Use struct sctp_sack_info instead
[ 1350.755290][  T753] sctp: [Deprecated]: syz.0.14885 (pid 753) Use of struct sctp_assoc_value in delayed_ack socket option.
[ 1350.755290][  T753] Use struct sctp_sack_info instead
[ 1350.970295][ T5845] bond27: (slave bridge5): failed to get link speed/duplex
[ 1351.108663][  T763] validate_nla: 8 callbacks suppressed
[ 1351.108676][  T763] netlink: 'syz.0.14889': attribute type 64 has an invalid length.
[ 1351.128339][  T763] tipc: Resetting bearer <eth:syzkaller0>
[ 1351.476184][  T793] netlink: 'syz.0.14898': attribute type 1 has an invalid length.
[ 1351.485191][  T795] netlink: 'syz.3.14899': attribute type 1 has an invalid length.
[ 1351.507640][  T793] bond401 (unregistering): Released all slaves
[ 1351.536991][  T795] 8021q: adding VLAN 0 to HW filter on device bond63
[ 1351.613228][  T802] netlink: 'syz.3.14900': attribute type 1 has an invalid length.
[ 1351.688121][  T802] bond64: (slave bridge23): making interface the new active one
[ 1351.693874][  T802] bond64: (slave bridge23): Enslaving as an active interface with an up link
[ 1351.715576][  T802] macvlan0: entered promiscuous mode
[ 1351.717868][  T802] macvlan0: entered allmulticast mode
[ 1351.722369][  T802] bond64: entered promiscuous mode
[ 1351.724548][  T802] bridge23: entered promiscuous mode
[ 1351.728534][  T802] 8021q: adding VLAN 0 to HW filter on device macvlan0
[ 1351.735512][  T802] bond64: (slave macvlan0): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[ 1351.742733][  T802] bond64: left promiscuous mode
[ 1351.744823][  T802] bridge23: left promiscuous mode
[ 1351.840407][  T812] netlink: 'syz.3.14903': attribute type 1 has an invalid length.
[ 1351.843267][  T812] netlink: 'syz.3.14903': attribute type 1 has an invalid length.
[ 1352.007639][  T828] pim6reg: entered allmulticast mode
[ 1352.013917][  T825] 1{X: renamed from 30{X
[ 1352.017981][  T825] 1{X: entered allmulticast mode
[ 1352.059903][  T830] netlink: 'syz.3.14908': attribute type 10 has an invalid length.
[ 1352.064835][  T830] hsr_slave_0: left promiscuous mode
[ 1352.074133][  T830] hsr_slave_1: left promiscuous mode
[ 1352.156295][  T832] bond401: entered promiscuous mode
[ 1352.158321][  T832] bond401: entered allmulticast mode
[ 1352.161250][  T832] 8021q: adding VLAN 0 to HW filter on device bond401
[ 1352.238468][  T842] bond65: entered promiscuous mode
[ 1352.241049][  T842] 8021q: adding VLAN 0 to HW filter on device bond65
[ 1352.445444][  T860] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[ 1352.448411][  T860] CPU: 0 UID: 0 PID: 860 Comm: syz.3.14914 Not tainted syzkaller #0 PREEMPT(full) 
[ 1352.448431][  T860] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[ 1352.448441][  T860] Call Trace:
[ 1352.448451][  T860]  <TASK>
[ 1352.448459][  T860]  dump_stack_lvl+0xe8/0x150
[ 1352.448489][  T860]  sysfs_warn_dup+0x8e/0xa0
[ 1352.448511][  T860]  sysfs_do_create_link_sd+0xc0/0x110
[ 1352.448533][  T860]  device_add_class_symlinks+0x1cf/0x240
[ 1352.448560][  T860]  device_add+0x475/0xb70
[ 1352.448585][  T860]  wiphy_register+0x1d73/0x2d50
[ 1352.448618][  T860]  ? __pfx_wiphy_register+0x10/0x10
[ 1352.448636][  T860]  ? __pfx_netdev_run_todo+0x10/0x10
[ 1352.448653][  T860]  ? minstrel_ht_alloc+0x6e0/0x7e0
[ 1352.448676][  T860]  ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0
[ 1352.448702][  T860]  ieee80211_register_hw+0x3571/0x4220
[ 1352.448730][  T860]  ? ieee80211_register_hw+0x1421/0x4220
[ 1352.448754][  T860]  ? __pfx_ieee80211_register_hw+0x10/0x10
[ 1352.448783][  T860]  ? __hrtimer_setup+0x181/0x200
[ 1352.448805][  T860]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[ 1352.448824][  T860]  mac80211_hwsim_new_radio+0x2f97/0x5330
[ 1352.448870][  T860]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[ 1352.448890][  T860]  ? kstrndup+0xbf/0x160
[ 1352.448917][  T860]  hwsim_new_radio_nl+0xf35/0x1bd0
[ 1352.448956][  T860]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[ 1352.448986][  T860]  ? rcu_is_watching+0x15/0xb0
[ 1352.449006][  T860]  ? trace_kmalloc+0x2a/0x110
[ 1352.449028][  T860]  ? __nla_parse+0x40/0x60
[ 1352.449053][  T860]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[ 1352.449083][  T860]  genl_family_rcv_msg_doit+0x22a/0x330
[ 1352.449116][  T860]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[ 1352.449148][  T860]  ? bpf_lsm_capable+0x9/0x20
[ 1352.449185][  T860]  ? security_capable+0x7e/0x2c0
[ 1352.449232][  T860]  genl_rcv_msg+0x61c/0x7a0
[ 1352.449259][  T860]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 1352.449279][  T860]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[ 1352.449300][  T860]  ? __lock_acquire+0x6b5/0x2cf0
[ 1352.449330][  T860]  netlink_rcv_skb+0x232/0x4b0
[ 1352.449349][  T860]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 1352.449370][  T860]  ? __pfx_netlink_rcv_skb+0x10/0x10
[ 1352.449402][  T860]  ? down_read+0x272/0x2e0
[ 1352.449417][  T860]  ? genl_rcv+0xd/0x40
[ 1352.449438][  T860]  genl_rcv+0x28/0x40
[ 1352.449456][  T860]  netlink_unicast+0x80f/0x9b0
[ 1352.449479][  T860]  ? __pfx_netlink_unicast+0x10/0x10
[ 1352.449497][  T860]  ? netlink_sendmsg+0x650/0xb40
[ 1352.449512][  T860]  ? skb_put+0x11b/0x210
[ 1352.449535][  T860]  netlink_sendmsg+0x813/0xb40
[ 1352.449560][  T860]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1352.449582][  T860]  ? aa_sock_msg_perm+0xf1/0x1b0
[ 1352.449602][  T860]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[ 1352.449621][  T860]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1352.449637][  T860]  ____sys_sendmsg+0xa68/0xad0
[ 1352.449683][  T860]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1352.449711][  T860]  ? import_iovec+0x73/0xa0
[ 1352.449737][  T860]  ___sys_sendmsg+0x2a5/0x360
[ 1352.449762][  T860]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1352.449788][  T860]  ? futex_wake+0x4ac/0x580
[ 1352.449831][  T860]  ? __fget_files+0x2a/0x420
[ 1352.449851][  T860]  ? __fget_files+0x3a0/0x420
[ 1352.449879][  T860]  __x64_sys_sendmsg+0x1bd/0x2a0
[ 1352.449901][  T860]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[ 1352.449928][  T860]  ? rcu_is_watching+0x15/0xb0
[ 1352.449957][  T860]  do_syscall_64+0x14d/0xf80
[ 1352.449979][  T860]  ? trace_irq_disable+0x3b/0x150
[ 1352.449998][  T860]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1352.450017][  T860]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1352.450033][  T860] RIP: 0033:0x7f1d27b9cdd9
[ 1352.450049][  T860] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1352.450067][  T860] RSP: 002b:00007f1d28b0c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1352.450086][  T860] RAX: ffffffffffffffda RBX: 00007f1d27e15fa0 RCX: 00007f1d27b9cdd9
[ 1352.450096][  T860] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000004
[ 1352.450106][  T860] RBP: 00007f1d27c32d69 R08: 0000000000000000 R09: 0000000000000000
[ 1352.450121][  T860] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1352.450130][  T860] R13: 00007f1d27e16038 R14: 00007f1d27e15fa0 R15: 00007ffcd6a54b28
[ 1352.450155][  T860]  </TASK>
[ 1352.721146][  T868] netlink: 'syz.1.14916': attribute type 1 has an invalid length.
[ 1352.902326][  T873] veth0_macvtap: left allmulticast mode
[ 1352.906738][  T873] veth0_macvtap: left promiscuous mode
[ 1353.041792][  T873] tipc: Resetting bearer <eth:syzkaller0>
[ 1353.219681][  T873] bond385: left allmulticast mode
[ 1353.222344][  T873] bond385: left promiscuous mode
[ 1353.328293][  T873] batman_adv: batadv0: Interface deactivated: veth189
[ 1353.422814][  T868] __nla_validate_parse: 21 callbacks suppressed
[ 1353.422836][  T868] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14916'.
[ 1353.457025][  T875] bond422: Removing last arp target with arp_interval on
[ 1353.471158][T14707] syz2: Port: 1 Link DOWN
[ 1353.479116][T31961] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1353.482691][T31961] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1353.487160][T31961] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1353.490382][T31961] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1353.601615][  T894] netlink: 'syz.0.14921': attribute type 58 has an invalid length.
[ 1353.603964][  T894] netlink: 20 bytes leftover after parsing attributes in process `syz.0.14921'.
[ 1353.700178][  T870]  speed is unknown, defaulting to 1000
[ 1353.703494][  T870] wg1 speed is unknown, defaulting to 1000
[ 1354.222356][  T945] netlink: 156 bytes leftover after parsing attributes in process `syz.0.14928'.
[ 1354.456378][  T931]  speed is unknown, defaulting to 1000
[ 1354.459649][  T931] wg1 speed is unknown, defaulting to 1000
[ 1354.804854][  T950]  speed is unknown, defaulting to 1000
[ 1354.808513][  T950] wg1 speed is unknown, defaulting to 1000
[ 1355.042798][T31961] net_ratelimit: 26 callbacks suppressed
[ 1355.042820][T31961] bond27: (slave bridge5): failed to get link speed/duplex
[ 1355.176194][ T4124] bond27: (slave bridge5): failed to get link speed/duplex
[ 1355.369578][ T4124] bond27: (slave bridge5): failed to get link speed/duplex
[ 1355.480205][ T4124] bond27: (slave bridge5): failed to get link speed/duplex
[ 1355.484447][  T961] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14932'.
[ 1355.565916][  T964] netlink: 32 bytes leftover after parsing attributes in process `syz.1.14934'.
[ 1355.573778][  T964] netlink: 196 bytes leftover after parsing attributes in process `syz.1.14934'.
[ 1355.599439][ T4124] bond27: (slave bridge5): failed to get link speed/duplex
[ 1355.648320][  T966] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14935'.
[ 1355.669452][  T966] netlink: 4 bytes leftover after parsing attributes in process `syz.1.14935'.
[ 1355.672673][  T969] netlink: 8 bytes leftover after parsing attributes in process `syz.3.14933'.
[ 1355.672849][  T966] netlink: 'syz.1.14935': attribute type 14 has an invalid length.
[ 1355.676195][  T969] netlink: 4 bytes leftover after parsing attributes in process `syz.3.14933'.
[ 1355.744727][ T4124] bond27: (slave bridge5): failed to get link speed/duplex
[ 1355.763426][  T972] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[ 1355.766786][  T972] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[ 1355.851581][ T4124] bond27: (slave bridge5): failed to get link speed/duplex
[ 1355.933341][  T982] bond402: entered promiscuous mode
[ 1355.936009][  T982] 8021q: adding VLAN 0 to HW filter on device bond402
[ 1355.959543][ T5845] bond27: (slave bridge5): failed to get link speed/duplex
[ 1356.069645][T31961] bond27: (slave bridge5): failed to get link speed/duplex
[ 1356.179548][T31961] bond27: (slave bridge5): failed to get link speed/duplex
[ 1356.747135][  T992] 8021q: adding VLAN 0 to HW filter on device bond66
[ 1356.813744][  T998] ip6gretap0: entered promiscuous mode
[ 1357.179571][ T1020] validate_nla: 2 callbacks suppressed
[ 1357.179588][ T1020] netlink: 'syz.1.14951': attribute type 29 has an invalid length.
[ 1357.651060][ T1060] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1357.654304][ T1060] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1357.658252][ T1060] netdevsim netdevsim3 eth3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[ 1357.706707][ T1060] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1357.710916][ T1060] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1357.713874][ T1060] netdevsim netdevsim3 eth2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[ 1357.735017][ T1069] 8021q: adding VLAN 0 to HW filter on device bond403
[ 1357.737695][ T1047]  speed is unknown, defaulting to 1000
[ 1357.742096][ T1069] bond403: entered promiscuous mode
[ 1357.743653][ T1069] bond403: entered allmulticast mode
[ 1357.751261][ T1069] 8021q: adding VLAN 0 to HW filter on device bond403
[ 1357.755715][ T1069] team0: Port device bond403 added
[ 1357.767503][ T1047] wg1 speed is unknown, defaulting to 1000
[ 1357.771247][ T1060] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1357.774456][ T1060] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1357.777529][ T1060] netdevsim netdevsim3 eth1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[ 1357.786652][ T1069] team_slave_1: entered promiscuous mode
[ 1357.800315][ T1069] team_slave_1: entered allmulticast mode
[ 1357.804953][ T1069] bond403: (slave team_slave_1): Enslaving as an active interface with an up link
[ 1357.825608][ T1060] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1357.833726][ T1060] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1357.837279][ T1060] netdevsim netdevsim3 eth0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[ 1357.863527][ T1078] netlink: 'syz.0.14960': attribute type 1 has an invalid length.
[ 1357.909157][ T1078] bond404: entered promiscuous mode
[ 1357.912085][ T1078] 8021q: adding VLAN 0 to HW filter on device bond404
[ 1357.966257][ T4124] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[ 1357.969901][ T4124] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 20000 - 0
[ 1357.974347][ T4124] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 6081 - 0
[ 1357.995300][ T4124] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[ 1358.002336][ T4124] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 20000 - 0
[ 1358.010460][ T4124] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 6081 - 0
[ 1358.022622][ T4124] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[ 1358.026239][ T4124] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 20000 - 0
[ 1358.030126][ T4124] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 6081 - 0
[ 1358.033576][ T4124] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[ 1358.036668][ T4124] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 20000 - 0
[ 1358.040055][ T4124] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 6081 - 0
[ 1358.268848][ T1100] ip_vti0: left promiscuous mode
[ 1358.274169][ T1100] bridge0: port 1(vlan1) entered blocking state
[ 1358.276212][ T1100] bridge0: port 1(vlan1) entered listening state
[ 1358.401542][T18461] ip6_tunnel: ip6tnl5 xmit: Local address not yet configured!
[ 1358.405663][ T1100] mac80211_hwsim hwsim303 syzkaller0: left promiscuous mode
[ 1358.408600][ T1100] mac80211_hwsim hwsim303 syzkaller0: left allmulticast mode
[ 1358.412319][ T1100] tipc: Resetting bearer <eth:syzkaller0>
[ 1358.414501][ T1100] tipc: Resetting bearer <eth:syzkaller0>
[ 1358.430301][T18461] ip6_tunnel: ip6tnl6 xmit: Local address not yet configured!
[ 1358.433601][ T1104]  speed is unknown, defaulting to 1000
[ 1358.456585][ T1104] wg1 speed is unknown, defaulting to 1000
[ 1358.460892][T14915] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[ 1358.546970][T14915] ip6_tunnel: ip6tnl6 xmit: Local address not yet configured!
[ 1358.559136][ T1122] __nla_validate_parse: 7 callbacks suppressed
[ 1358.559149][ T1122] netlink: 48 bytes leftover after parsing attributes in process `syz.3.14968'.
[ 1358.565475][ T1122] netlink: 16 bytes leftover after parsing attributes in process `syz.3.14968'.
[ 1358.608149][ T1122] netlink: 16 bytes leftover after parsing attributes in process `syz.3.14968'.
[ 1358.618936][ T1122] netlink: 48 bytes leftover after parsing attributes in process `syz.3.14968'.
[ 1358.625634][ T1122] netlink: 16 bytes leftover after parsing attributes in process `syz.3.14968'.
[ 1358.644786][ T1131] netlink: 277 bytes leftover after parsing attributes in process `syz.1.14970'.
[ 1358.748269][ T1134] x_tables: ip_tables: RATEEST.0 target: invalid size 32 (kernel) != (user) 0
[ 1358.929575][    C0] ip6_tunnel: ip6tnl5 xmit: Local address not yet configured!
[ 1358.969771][T14915] ip6_tunnel: ip6tnl5 xmit: Local address not yet configured!
[ 1359.055887][ T1146] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14972'.
[ 1359.072566][ T1146] macvlan3: entered allmulticast mode
[ 1359.074838][ T1146] bond265: entered allmulticast mode
[ 1359.077142][ T1146] 8021q: adding VLAN 0 to HW filter on device macvlan3
[ 1359.136315][ T1148] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14973'.
[ 1359.140281][ T1148] netlink: 12 bytes leftover after parsing attributes in process `syz.1.14973'.
[ 1359.169831][T14915] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[ 1359.196358][ T1149] netlink: 'syz.1.14973': attribute type 4 has an invalid length.
[ 1359.286371][ T1153] 8021q: adding VLAN 0 to HW filter on device bond30
[ 1359.498663][ T1177] netlink: 'syz.0.14980': attribute type 1 has an invalid length.
[ 1359.555104][ T1177] bond405: (slave bridge284): Enslaving as a backup interface with an up link
[ 1359.564744][ T1177] macvlan1: entered promiscuous mode
[ 1359.566368][ T1177] macvlan1: entered allmulticast mode
[ 1359.572283][ T1173] netlink: 12 bytes leftover after parsing attributes in process `syz.1.14977'.
[ 1359.577549][ T1177] bond405: entered promiscuous mode
[ 1359.581206][ T1177] bridge284: entered promiscuous mode
[ 1359.584065][ T1177] 8021q: adding VLAN 0 to HW filter on device macvlan1
[ 1359.587929][ T1177] bond405: left promiscuous mode
[ 1359.590180][ T1177] bridge284: left promiscuous mode
[ 1359.649088][ T1180] gre3: entered allmulticast mode
[ 1359.825309][ T1190] netlink: 'syz.3.14984': attribute type 1 has an invalid length.
[ 1359.825339][ T1192] netlink: 'syz.3.14984': attribute type 1 has an invalid length.
[ 1359.872567][ T5845] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1359.875081][ T5845] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1359.877539][ T5845] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1359.880095][ T5845] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1359.917937][ T1205] netlink: 'syz.3.14988': attribute type 1 has an invalid length.
[ 1359.978588][ T1205] bond67: (slave vxcan1): The slave device specified does not support setting the MAC address
[ 1359.983975][ T1205] bond67: (slave vxcan1): Error -95 calling set_mac_address
[ 1360.033328][ T1215] bond67: (slave bridge25): Enslaving as an active interface with a down link
[ 1360.036135][ T1195]  speed is unknown, defaulting to 1000
[ 1360.042143][ T1215] macvlan0: entered promiscuous mode
[ 1360.043607][ T1215] macvlan0: entered allmulticast mode
[ 1360.046280][ T1215] bond67: entered promiscuous mode
[ 1360.048134][ T1215] 8021q: adding VLAN 0 to HW filter on device macvlan0
[ 1360.055819][ T1215] bond67: left promiscuous mode
[ 1360.066309][ T1195] wg1 speed is unknown, defaulting to 1000
[ 1360.070426][T31961] net_ratelimit: 33 callbacks suppressed
[ 1360.070437][T31961] bond27: (slave bridge5): failed to get link speed/duplex
[ 1360.209416][    C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[ 1360.296894][T31961] bond27: (slave bridge5): failed to get link speed/duplex
[ 1360.510133][   T12] bond27: (slave bridge5): failed to get link speed/duplex
[ 1360.659680][   T12] bond27: (slave bridge5): failed to get link speed/duplex
[ 1360.667935][ T1247] netlink: 'syz.0.14994': attribute type 1 has an invalid length.
[ 1360.759567][ T5845] bond27: (slave bridge5): failed to get link speed/duplex
[ 1360.883022][ T1252] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1360.886629][ T1252] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[ 1360.909345][ T1252] netdevsim netdevsim3 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[ 1360.960525][   T12] bond27: (slave bridge5): failed to get link speed/duplex
[ 1361.002663][ T1252] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1361.006496][ T1252] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[ 1361.011330][ T1252] netdevsim netdevsim3 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[ 1361.071375][T31961] bond27: (slave bridge5): failed to get link speed/duplex
[ 1361.088419][ T1252] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1361.095906][ T1252] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[ 1361.101951][ T1252] netdevsim netdevsim3 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[ 1361.156186][ T1252] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1361.163466][ T1252] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[ 1361.167456][ T1252] netdevsim netdevsim3 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[ 1361.209380][ T5644] bond27: (slave bridge5): failed to get link speed/duplex
[ 1361.267198][ T1269] netlink: 'syz.1.15002': attribute type 16 has an invalid length.
[ 1361.270946][ T1269] netlink: 'syz.1.15002': attribute type 17 has an invalid length.
[ 1361.301764][ T1269] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[ 1361.376814][ T1276] bond424: entered promiscuous mode
[ 1361.378509][ T1276] bond424: entered allmulticast mode
[ 1361.380836][ T1276] 8021q: adding VLAN 0 to HW filter on device bond424
[ 1361.397627][ T1278] macvlan4: entered promiscuous mode
[ 1361.399631][ T1278] macvlan4: entered allmulticast mode
[ 1361.403038][ T1278] 8021q: adding VLAN 0 to HW filter on device macvlan4
[ 1361.469457][ T5644] bond27: (slave bridge5): failed to get link speed/duplex
[ 1361.489419][    C0] ip6_tunnel: ip6tnl6 xmit: Local address not yet configured!
[ 1361.919874][ T1309]  speed is unknown, defaulting to 1000
[ 1361.927131][ T1312] vlan38: entered promiscuous mode
[ 1361.958403][ T1309] wg1 speed is unknown, defaulting to 1000
[ 1362.277889][ T4124] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[ 1362.282166][ T4124] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 20000 - 0
[ 1362.285373][ T4124] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 6081 - 0
[ 1362.297396][ T1323] validate_nla: 3 callbacks suppressed
[ 1362.297409][ T1323] netlink: 'syz.1.15016': attribute type 1 has an invalid length.
[ 1362.302269][ T1324] netlink: 'syz.1.15016': attribute type 1 has an invalid length.
[ 1362.333142][ T1324] 8021q: adding VLAN 0 to HW filter on device bond425
[ 1362.409869][ T4124] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[ 1362.412751][ T4124] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 20000 - 0
[ 1362.419529][ T4124] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 6081 - 0
[ 1362.422444][ T4124] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[ 1362.425012][ T4124] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 20000 - 0
[ 1362.427545][ T4124] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 6081 - 0
[ 1362.459568][ T5845] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[ 1362.462679][ T5845] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 20000 - 0
[ 1362.465755][ T5845] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 6081 - 0
[ 1362.484451][ T1328] netlink: 'syz.0.15017': attribute type 1 has an invalid length.
[ 1362.516350][ T1328] 8021q: adding VLAN 0 to HW filter on device bond406
[ 1362.607845][ T1328] bond406: (slave veth197): Enslaving as an active interface with a down link
[ 1362.621932][ T1334] 8021q: adding VLAN 0 to HW filter on device batadv9
[ 1362.625843][ T1334] bond406: (slave batadv9): making interface the new active one
[ 1362.630184][ T1334] batadv9: entered promiscuous mode
[ 1362.631951][ T1334] bond406: (slave batadv9): Enslaving as an active interface with an up link
[ 1362.649940][ T1328] bond406 (unregistering): (slave veth197): Releasing active interface
[ 1362.663491][ T1328] bond406 (unregistering): (slave batadv9): Releasing active interface
[ 1362.670471][ T1328] bond406 (unregistering): Released all slaves
[ 1362.985160][ T1348] netlink: 'syz.0.15023': attribute type 1 has an invalid length.
[ 1362.999923][ T1352] netlink: 'syz.3.15024': attribute type 1 has an invalid length.
[ 1363.018947][ T1348] bond406: entered promiscuous mode
[ 1363.024900][ T1348] bond406: entered allmulticast mode
[ 1363.027414][ T1348] 8021q: adding VLAN 0 to HW filter on device bond406
[ 1363.058928][ T1352] 8021q: adding VLAN 0 to HW filter on device bond68
[ 1363.164452][ T1362] netlink: 'syz.0.15027': attribute type 1 has an invalid length.
[ 1363.186964][ T1362] 8021q: adding VLAN 0 to HW filter on device bond407
[ 1363.200196][ T1363] vlan38: entered promiscuous mode
[ 1363.273763][ T1371] netlink: 'syz.0.15028': attribute type 2 has an invalid length.
[ 1363.310314][ T1373] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[ 1363.313850][ T1373] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[ 1363.498448][ T1381] netlink: 'syz.0.15031': attribute type 4 has an invalid length.
[ 1363.502680][ T1381] netlink: 'syz.0.15031': attribute type 4 has an invalid length.
[ 1363.830823][ T1391] bond408: (slave ): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[ 1363.842189][ T1391] bond408: (slave ): Enslaving as an active interface with an up link
[ 1364.168554][ T1395] netlink: 'syz.0.15034': attribute type 1 has an invalid length.
[ 1364.284751][ T1407] 8021q: adding VLAN 0 to HW filter on device bond427
[ 1364.297069][ T1407] bond426: (slave bond427): making interface the new active one
[ 1364.302318][ T1407] bond426: (slave bond427): Enslaving as an active interface with an up link
[ 1364.313725][ T1407] __nla_validate_parse: 15 callbacks suppressed
[ 1364.313742][ T1407] netlink: 28 bytes leftover after parsing attributes in process `syz.1.15038'.
[ 1364.323713][ T1407] 8021q: adding VLAN 0 to HW filter on device bond426
[ 1364.424269][ T1412] netlink: 8 bytes leftover after parsing attributes in process `syz.1.15039'.
[ 1364.458772][ T1416] can: request_module (can-proto-0) failed.
[ 1364.654435][ T1412] mac80211_hwsim hwsim261 syzkaller0: left promiscuous mode
[ 1364.656885][ T1412] mac80211_hwsim hwsim261 syzkaller0: left allmulticast mode
[ 1364.687101][ T1412] vlan37: left allmulticast mode
[ 1364.692459][ T1412] bond419: left allmulticast mode
[ 1364.706033][ T1412] team21: left promiscuous mode
[ 1364.707893][ T1412] team21: left allmulticast mode
[ 1364.720912][ T1412] team22: left promiscuous mode
[ 1364.722759][ T1412] team22: left allmulticast mode
[ 1364.739149][ T1412] bond265: left allmulticast mode
[ 1364.741279][ T1412] macvlan3: left allmulticast mode
[ 1364.747660][ T1412] bond424: left promiscuous mode
[ 1364.750093][ T1412] bond424: left allmulticast mode
[ 1364.803473][ T1420] bond409: option updelay: invalid value (18446744073709551612)
[ 1364.806733][ T1420] bond409: option updelay: allowed values 0 - 2147483647
[ 1364.820899][ T1420] bond409 (unregistering): Released all slaves
[ 1365.073448][ T1442] sctp: [Deprecated]: syz.0.15045 (pid 1442) Use of int in maxseg socket option.
[ 1365.073448][ T1442] Use struct sctp_assoc_value instead
[ 1365.082678][ T1443] sctp: [Deprecated]: syz.0.15045 (pid 1443) Use of int in maxseg socket option.
[ 1365.082678][ T1443] Use struct sctp_assoc_value instead
[ 1365.126516][ T1447] netlink: 8 bytes leftover after parsing attributes in process `syz.0.15047'.
[ 1365.146705][ T1445] bond428: Unable to set down delay as MII monitoring is disabled
[ 1365.150717][ T1445] bond428 (unregistering): Released all slaves
[ 1365.167111][ T1447] tipc: Resetting bearer <eth:syzkaller0>
[ 1365.174039][ T1449] net_ratelimit: 26 callbacks suppressed
[ 1365.174051][ T1449] sock: sock_set_timeout: `syz.0.15047' (pid 1449) tries to set negative timeout
[ 1365.178721][ T1447] sock: sock_set_timeout: `syz.0.15047' (pid 1447) tries to set negative timeout
[ 1365.190323][   T12] bond27: (slave bridge5): failed to get link speed/duplex
[ 1365.335482][ T1456] macvlan4: entered promiscuous mode
[ 1365.337962][ T1456] macvlan4: entered allmulticast mode
[ 1365.360366][   T12] bond27: (slave bridge5): failed to get link speed/duplex
[ 1365.465613][ T1467] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1365.489783][   T12] bond27: (slave bridge5): failed to get link speed/duplex
[ 1365.515930][ T1469] netlink: 4 bytes leftover after parsing attributes in process `syz.0.15051'.
[ 1365.518944][ T1470] netlink: 4 bytes leftover after parsing attributes in process `syz.0.15051'.
[ 1365.600053][T31961] bond27: (slave bridge5): failed to get link speed/duplex
[ 1365.709628][ T5644] bond27: (slave bridge5): failed to get link speed/duplex
[ 1365.777895][ T1476] netlink: 4 bytes leftover after parsing attributes in process `syz.0.15053'.
[ 1365.819661][   T12] bond27: (slave bridge5): failed to get link speed/duplex
[ 1365.929692][   T12] bond27: (slave bridge5): failed to get link speed/duplex
[ 1366.304400][ T1480] netlink: 476 bytes leftover after parsing attributes in process `syz.1.15054'.
[ 1366.308203][ T1480] netlink: 1041 bytes leftover after parsing attributes in process `syz.1.15054'.
[ 1366.657495][ T1502] bond429: entered promiscuous mode
[ 1366.660333][ T1502] bond429: entered allmulticast mode
[ 1366.663399][ T1502] 8021q: adding VLAN 0 to HW filter on device bond429
[ 1366.672182][ T1503] macvlan5: entered promiscuous mode
[ 1366.673761][ T1503] macvlan5: entered allmulticast mode
[ 1366.677313][ T1503] 8021q: adding VLAN 0 to HW filter on device macvlan5
[ 1366.702472][ T1502] macvlan5: entered promiscuous mode
[ 1366.704613][ T1502] macvlan5: entered allmulticast mode
[ 1366.708542][ T1502] 8021q: adding VLAN 0 to HW filter on device macvlan5
[ 1366.791516][ T1502] macvlan5: entered promiscuous mode
[ 1366.793691][ T1502] macvlan5: entered allmulticast mode
[ 1366.798132][ T1502] 8021q: adding VLAN 0 to HW filter on device macvlan5
[ 1366.813443][ T1512] netlink: 8 bytes leftover after parsing attributes in process `syz.3.15062'.
[ 1366.828544][ T1512] netlink: 8 bytes leftover after parsing attributes in process `syz.3.15062'.
[ 1366.861904][ T1502] macvlan5: entered promiscuous mode
[ 1366.863680][ T1502] macvlan5: entered allmulticast mode
[ 1366.866799][ T1502] 8021q: adding VLAN 0 to HW filter on device macvlan5
[ 1366.896782][ T1514] IPVS: Unknown mcast interface: bridge_slave_0
[ 1366.942356][ T1502] macvlan5: entered promiscuous mode
[ 1366.944588][ T1502] macvlan5: entered allmulticast mode
[ 1366.949037][ T1502] 8021q: adding VLAN 0 to HW filter on device macvlan5
[ 1366.971689][ T1509]  speed is unknown, defaulting to 1000
[ 1366.975779][ T1509] wg1 speed is unknown, defaulting to 1000
[ 1367.045947][ T1502] macvlan5: entered promiscuous mode
[ 1367.048186][ T1502] macvlan5: entered allmulticast mode
[ 1367.052522][ T1502] 8021q: adding VLAN 0 to HW filter on device macvlan5
[ 1367.116712][ T1502] macvlan5: entered promiscuous mode
[ 1367.118647][ T1502] macvlan5: entered allmulticast mode
[ 1367.124968][ T1502] 8021q: adding VLAN 0 to HW filter on device macvlan5
[ 1367.198359][ T1502] macvlan5: entered promiscuous mode
[ 1367.200938][ T1502] macvlan5: entered allmulticast mode
[ 1367.205166][ T1502] 8021q: adding VLAN 0 to HW filter on device macvlan5
[ 1367.278480][ T1502] macvlan5: entered promiscuous mode
[ 1367.283759][ T1502] macvlan5: entered allmulticast mode
[ 1367.294283][ T1502] 8021q: adding VLAN 0 to HW filter on device macvlan5
[ 1367.427323][ T1521] bond69: option lacp_rate: mode dependency failed, not supported in mode active-backup(1)
[ 1367.435585][ T1521] bond69 (unregistering): Released all slaves
[ 1367.481215][ T1502] macvlan5: entered promiscuous mode
[ 1367.482884][ T1502] macvlan5: entered allmulticast mode
[ 1367.486007][ T1502] 8021q: adding VLAN 0 to HW filter on device macvlan5
[ 1367.762701][ T1543] validate_nla: 5 callbacks suppressed
[ 1367.762718][ T1543] netlink: 'syz.1.15071': attribute type 1 has an invalid length.
[ 1367.842873][ T1543] workqueue: Failed to create a rescuer kthread for wq "bond430": -EINTR
[ 1368.149916][ T1563] pim6reg1: entered promiscuous mode
[ 1368.155368][ T1563] pim6reg1: entered allmulticast mode
[ 1368.173008][ T1565] netlink: 'syz.1.15077': attribute type 13 has an invalid length.
[ 1368.175581][ T1565] netlink: 'syz.1.15077': attribute type 17 has an invalid length.
[ 1368.528401][ T1575] netlink: 'syz.0.15080': attribute type 30 has an invalid length.
[ 1368.538272][ T1575] netlink: 'syz.0.15080': attribute type 30 has an invalid length.
[ 1368.582468][ T1578] vlan0: entered promiscuous mode
[ 1368.585385][ T1578] erspan0: entered promiscuous mode
[ 1368.631119][ T1582] netlink: 'syz.3.15082': attribute type 1 has an invalid length.
[ 1368.633711][ T1582] netlink: 'syz.3.15082': attribute type 1 has an invalid length.
[ 1368.636600][ T1582] netlink: 'syz.3.15082': attribute type 8 has an invalid length.
[ 1368.703051][ T1590] bond_slave_1: entered promiscuous mode
[ 1368.704835][ T1590] bond_slave_1: entered allmulticast mode
[ 1368.934369][ T1589]  speed is unknown, defaulting to 1000
[ 1368.937353][ T1589] wg1 speed is unknown, defaulting to 1000
[ 1369.012277][ T1600] bond410: option lacp_active: invalid value (8)
[ 1369.040567][ T1600] bond410 (unregistering): Released all slaves
[ 1369.257427][ T1608] xt_hashlimit: size too large, truncated to 1048576
[ 1369.359408][ T1611] netlink: 'syz.0.15087': attribute type 1 has an invalid length.
[ 1369.361736][ T1611] __nla_validate_parse: 14 callbacks suppressed
[ 1369.361744][ T1611] netlink: 224 bytes leftover after parsing attributes in process `syz.0.15087'.
[ 1370.241659][ T1645] netlink: 24 bytes leftover after parsing attributes in process `syz.0.15091'.
[ 1370.289560][   T12] net_ratelimit: 31 callbacks suppressed
[ 1370.289575][   T12] bond27: (slave bridge5): failed to get link speed/duplex
[ 1370.313705][ T1645] netlink: 20 bytes leftover after parsing attributes in process `syz.0.15091'.
[ 1370.392692][ T1656] netlink: 200 bytes leftover after parsing attributes in process `syz.0.15095'.
[ 1370.400657][   T12] bond27: (slave bridge5): failed to get link speed/duplex
[ 1370.467847][ T1660] netlink: 'syz.3.15096': attribute type 16 has an invalid length.
[ 1370.469586][ T1659] netlink: 4 bytes leftover after parsing attributes in process `syz.0.15095'.
[ 1370.549493][T31961] bond27: (slave bridge5): link status up again after 0 ms
[ 1370.570557][ T5644] bond27: (slave bridge5): link status up again after 0 ms
[ 1370.580776][T14707] ip6_tunnel: ip6tnl5 xmit: Local address not yet configured!
[ 1370.589417][T31961] bond27: (slave bridge5): link status up again after 0 ms
[ 1370.592896][ T1658] tipc: Resetting bearer <eth:syzkaller0>
[ 1370.595191][ T1658] tipc: Resetting bearer <eth:syzkaller0>
[ 1370.600806][T14707] ip6_tunnel: ip6tnl6 xmit: Local address not yet configured!
[ 1370.609505][ T5644] bond27: (slave bridge5): link status up again after 0 ms
[ 1370.617420][ T1658] bridge0: port 1(vlan1) entered disabled state
[ 1370.629601][ T7135] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[ 1370.632066][ T5644] bond27: (slave bridge5): link status up again after 0 ms
[ 1370.650294][ T5644] bond27: (slave bridge5): link status up again after 0 ms
[ 1370.653833][ T1566] Set syz1 is full, maxelem 65536 reached
[ 1370.673099][ T7135] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[ 1370.676154][ T5644] bond27: (slave bridge5): link status up again after 0 ms
[ 1370.846184][ T1660] tipc: Resetting bearer <eth:syzkaller0>
[ 1370.848916][ T1660] tipc: Resetting bearer <eth:syzkaller0>
[ 1370.853098][ T1906] ip6_tunnel: ip6tnl5 xmit: Local address not yet configured!
[ 1370.867040][ T1660] bridge0: port 1(vlan1) entered blocking state
[ 1370.869094][ T1660] bridge0: port 1(vlan1) entered listening state
[ 1370.872221][ T1906] ip6_tunnel: ip6tnl6 xmit: Local address not yet configured!
[ 1370.898410][ T1906] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[ 1371.057494][ T1673] ip6tnl0: Master is either lo or non-ether device
[ 1371.076298][ T1675] team0: No ports can be present during mode change
[ 1371.077131][ T1677] netlink: 8 bytes leftover after parsing attributes in process `syz.3.15101'.
[ 1371.129854][T14707] ip6_tunnel: ip6tnl5 xmit: Local address not yet configured!
[ 1371.133532][ T1683] netlink: 8 bytes leftover after parsing attributes in process `syz.3.15102'.
[ 1371.183065][ T1692] netlink: 104 bytes leftover after parsing attributes in process `syz.0.15105'.
[ 1371.186060][ T1690] netlink: 104 bytes leftover after parsing attributes in process `syz.0.15105'.
[ 1371.190043][ T1689] x_tables: duplicate underflow at hook 1
[ 1371.346599][ T1708] workqueue: Failed to create a rescuer kthread for wq "bond69": -EINTR
[ 1371.443414][ T1714] mac80211_hwsim hwsim303 syzkaller0: entered promiscuous mode
[ 1371.448289][ T1714] mac80211_hwsim hwsim303 syzkaller0: entered allmulticast mode
[ 1371.452128][ T1714] tipc: Resetting bearer <eth:syzkaller0>
[ 1371.453954][ T1715] netlink: 76 bytes leftover after parsing attributes in process `syz.0.15109'.
[ 1371.604523][ T1701]  speed is unknown, defaulting to 1000
[ 1371.607296][ T1701] wg1 speed is unknown, defaulting to 1000
[ 1371.891332][T14707] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[ 1371.894369][T14707] ip6_tunnel: ip6tnl6 xmit: Local address not yet configured!
[ 1371.944167][ T1744] bond71: entered allmulticast mode
[ 1372.073904][ T1748] netlink: 'syz.1.15118': attribute type 11 has an invalid length.
[ 1372.096642][ T1751] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[ 1372.098894][ T1751] IPv6: NLM_F_CREATE should be set when creating new route
[ 1372.101157][ T1751] IPv6: NLM_F_CREATE should be set when creating new route
[ 1372.103456][ T1751] IPv6: NLM_F_CREATE should be set when creating new route
[ 1372.173872][ T1760] bridge_slave_1: invalid flags given to default FDB implementation
[ 1372.315955][ T1771] sctp: [Deprecated]: syz.0.15125 (pid 1771) Use of struct sctp_assoc_value in delayed_ack socket option.
[ 1372.315955][ T1771] Use struct sctp_sack_info instead
[ 1372.690813][ T1798] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[ 1372.699542][ T1798] CPU: 1 UID: 0 PID: 1798 Comm: syz.0.15132 Not tainted syzkaller #0 PREEMPT(full) 
[ 1372.699572][ T1798] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[ 1372.699579][ T1798] Call Trace:
[ 1372.699585][ T1798]  <TASK>
[ 1372.699594][ T1798]  dump_stack_lvl+0xe8/0x150
[ 1372.699614][ T1798]  sysfs_warn_dup+0x8e/0xa0
[ 1372.699629][ T1798]  sysfs_do_create_link_sd+0xc0/0x110
[ 1372.699643][ T1798]  device_add_class_symlinks+0x1cf/0x240
[ 1372.699663][ T1798]  device_add+0x475/0xb70
[ 1372.699679][ T1798]  wiphy_register+0x1d73/0x2d50
[ 1372.699700][ T1798]  ? __pfx_wiphy_register+0x10/0x10
[ 1372.699751][ T1798]  ? __pfx_netdev_run_todo+0x10/0x10
[ 1372.699764][ T1798]  ? minstrel_ht_alloc+0x6e0/0x7e0
[ 1372.699780][ T1798]  ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0
[ 1372.699799][ T1798]  ieee80211_register_hw+0x3571/0x4220
[ 1372.699817][ T1798]  ? ieee80211_register_hw+0x1421/0x4220
[ 1372.699829][ T1798]  ? __pfx_ieee80211_register_hw+0x10/0x10
[ 1372.699846][ T1798]  ? __hrtimer_setup+0x181/0x200
[ 1372.699857][ T1798]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[ 1372.699868][ T1798]  mac80211_hwsim_new_radio+0x2f97/0x5330
[ 1372.699895][ T1798]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[ 1372.699907][ T1798]  ? kstrndup+0xbf/0x160
[ 1372.699922][ T1798]  hwsim_new_radio_nl+0xf35/0x1bd0
[ 1372.699949][ T1798]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[ 1372.699966][ T1798]  ? rcu_is_watching+0x15/0xb0
[ 1372.699978][ T1798]  ? trace_kmalloc+0x2a/0x110
[ 1372.699989][ T1798]  ? __nla_parse+0x40/0x60
[ 1372.700003][ T1798]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[ 1372.700020][ T1798]  genl_family_rcv_msg_doit+0x22a/0x330
[ 1372.700036][ T1798]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[ 1372.700054][ T1798]  ? bpf_lsm_capable+0x9/0x20
[ 1372.700067][ T1798]  ? security_capable+0x7e/0x2c0
[ 1372.700080][ T1798]  genl_rcv_msg+0x61c/0x7a0
[ 1372.700095][ T1798]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 1372.700106][ T1798]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[ 1372.700119][ T1798]  ? __lock_acquire+0x6b5/0x2cf0
[ 1372.700135][ T1798]  netlink_rcv_skb+0x232/0x4b0
[ 1372.700146][ T1798]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 1372.700158][ T1798]  ? __pfx_netlink_rcv_skb+0x10/0x10
[ 1372.700176][ T1798]  ? down_read+0x272/0x2e0
[ 1372.700184][ T1798]  ? genl_rcv+0xd/0x40
[ 1372.700196][ T1798]  genl_rcv+0x28/0x40
[ 1372.700207][ T1798]  netlink_unicast+0x80f/0x9b0
[ 1372.700220][ T1798]  ? __pfx_netlink_unicast+0x10/0x10
[ 1372.700230][ T1798]  ? netlink_sendmsg+0x650/0xb40
[ 1372.700238][ T1798]  ? skb_put+0x11b/0x210
[ 1372.700252][ T1798]  netlink_sendmsg+0x813/0xb40
[ 1372.700269][ T1798]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1372.700282][ T1798]  ? aa_sock_msg_perm+0xf1/0x1b0
[ 1372.700294][ T1798]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[ 1372.700304][ T1798]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1372.700313][ T1798]  ____sys_sendmsg+0xa68/0xad0
[ 1372.700324][ T1798]  ? futex_unqueue+0x211/0x240
[ 1372.700338][ T1798]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1372.700354][ T1798]  ? import_iovec+0x73/0xa0
[ 1372.700367][ T1798]  ___sys_sendmsg+0x2a5/0x360
[ 1372.700382][ T1798]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1372.700397][ T1798]  ? futex_wait+0x29a/0x380
[ 1372.700420][ T1798]  ? __fget_files+0x2a/0x420
[ 1372.700432][ T1798]  ? __fget_files+0x3a0/0x420
[ 1372.700448][ T1798]  __x64_sys_sendmsg+0x1bd/0x2a0
[ 1372.700461][ T1798]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[ 1372.700478][ T1798]  ? rcu_is_watching+0x15/0xb0
[ 1372.700496][ T1798]  do_syscall_64+0x14d/0xf80
[ 1372.700508][ T1798]  ? trace_irq_disable+0x3b/0x150
[ 1372.700521][ T1798]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1372.700533][ T1798]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1372.700542][ T1798] RIP: 0033:0x7f9a69f9cdd9
[ 1372.700554][ T1798] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1372.700570][ T1798] RSP: 002b:00007f9a6ae41028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1372.700581][ T1798] RAX: ffffffffffffffda RBX: 00007f9a6a215fa0 RCX: 00007f9a69f9cdd9
[ 1372.700588][ T1798] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000004
[ 1372.700595][ T1798] RBP: 00007f9a6a032d69 R08: 0000000000000000 R09: 0000000000000000
[ 1372.700601][ T1798] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1372.700607][ T1798] R13: 00007f9a6a216038 R14: 00007f9a6a215fa0 R15: 00007ffeee473748
[ 1372.700623][ T1798]  </TASK>
[ 1372.990922][ T1801]  speed is unknown, defaulting to 1000
[ 1372.994566][ T1801] wg1 speed is unknown, defaulting to 1000
[ 1373.181240][ T1814] validate_nla: 7 callbacks suppressed
[ 1373.181254][ T1814] netlink: 'syz.1.15136': attribute type 10 has an invalid length.
[ 1373.195861][ T1814] netlink: 'syz.1.15136': attribute type 10 has an invalid length.
[ 1373.265846][ T1808]  speed is unknown, defaulting to 1000
[ 1373.269130][ T1808] wg1 speed is unknown, defaulting to 1000
[ 1373.817428][ T1842] mac80211_hwsim hwsim261 syzkaller0: entered promiscuous mode
[ 1373.820380][ T1842] mac80211_hwsim hwsim261 syzkaller0: entered allmulticast mode
[ 1373.828698][ T1844] netlink: 'syz.0.15144': attribute type 1 has an invalid length.
[ 1373.840013][ T1842] netlink: 'syz.1.15143': attribute type 1 has an invalid length.
[ 1373.863305][ T1844] bond410: entered promiscuous mode
[ 1373.865325][ T1844] 8021q: adding VLAN 0 to HW filter on device bond410
[ 1373.887382][ T1842] 8021q: adding VLAN 0 to HW filter on device bond432
[ 1373.910015][ T1847] 8021q: adding VLAN 0 to HW filter on device bond410
[ 1373.912655][ T1847] bond410: (slave wireguard40): The slave device specified does not support setting the MAC address
[ 1373.928938][ T1847] bond410: (slave wireguard40): Setting fail_over_mac to active for active-backup mode
[ 1373.938869][ T1847] bond410: (slave wireguard40): making interface the new active one
[ 1373.942831][ T1847] wireguard40: entered promiscuous mode
[ 1373.946533][ T1847] bond410: (slave wireguard40): Enslaving as an active interface with an up link
[ 1373.946709][ T1851] netlink: 'syz.3.15145': attribute type 10 has an invalid length.
[ 1374.000026][ T1851] tap0: tun_chr_ioctl cmd 1074025677
[ 1374.002658][ T1851] tap0: linktype set to 773
[ 1374.026505][ T1851] : entered promiscuous mode
[ 1374.204097][ T1867] netlink: 'syz.3.15149': attribute type 1 has an invalid length.
[ 1374.292316][ T1867] workqueue: Failed to create a rescuer kthread for wq "bond72": -EINTR
[ 1374.293098][ T1856] bond53: option mode: unable to set because the bond device has slaves
[ 1374.401507][ T1880] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[ 1374.487811][ T1883] tipc: Resetting bearer <eth:syzkaller0>
[ 1374.525856][ T1884] netlink: 'syz.3.15152': attribute type 27 has an invalid length.
[ 1374.684402][ T1881] bridge0: port 1(vlan1) entered disabled state
[ 1375.899506][ T1881] tipc: Resetting bearer <eth:syzkaller0>
[ 1376.092493][ T1881] team0: left allmulticast mode
[ 1376.093996][ T1881] bond22: left allmulticast mode
[ 1376.095444][ T1881] bridge8: left allmulticast mode
[ 1376.096977][ T1881] bond43: left allmulticast mode
[ 1376.098415][ T1881] team_slave_1: left allmulticast mode
[ 1376.105403][ T1881] team0: left promiscuous mode
[ 1376.106865][ T1881] bond22: left promiscuous mode
[ 1376.108581][ T1881] bridge8: left promiscuous mode
[ 1376.111517][ T1881] bond43: left promiscuous mode
[ 1376.113439][ T1881] team_slave_1: left promiscuous mode
[ 1376.382781][ T5644] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1376.385288][ T5644] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1376.412748][ T5644] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1376.418537][ T5644] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1376.433371][ T5644] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[ 1376.436466][ T5644] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 20000 - 0
[ 1376.439980][ T5644] netdevsim netdevsim3 eth0: unset [1, 1] type 2 family 0 port 6081 - 0
[ 1376.446353][ T5644] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[ 1376.451098][ T5644] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 20000 - 0
[ 1376.454213][ T5644] netdevsim netdevsim3 eth1: unset [1, 1] type 2 family 0 port 6081 - 0
[ 1376.461158][ T5644] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[ 1376.464190][ T5644] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 20000 - 0
[ 1376.467212][ T5644] netdevsim netdevsim3 eth2: unset [1, 1] type 2 family 0 port 6081 - 0
[ 1376.507090][ T5644] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[ 1376.511248][ T5644] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 20000 - 0
[ 1376.514330][ T5644] netdevsim netdevsim3 eth3: unset [1, 1] type 2 family 0 port 6081 - 0
[ 1376.568187][ T1919] netlink: 'syz.0.15158': attribute type 4 has an invalid length.
[ 1376.576812][ T1907] __nla_validate_parse: 11 callbacks suppressed
[ 1376.576828][ T1907] netlink: 12 bytes leftover after parsing attributes in process `syz.1.15155'.
[ 1376.591113][ T1919] netlink: 'syz.0.15158': attribute type 1 has an invalid length.
[ 1376.642561][ T1923] netlink: 20 bytes leftover after parsing attributes in process `syz.0.15158'.
[ 1376.757688][ T1928] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[ 1376.761982][ T1928] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[ 1376.832084][ T1865] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1376.838597][ T1865] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1376.867733][ T1936] bond411: entered allmulticast mode
[ 1376.870489][ T1936] 8021q: adding VLAN 0 to HW filter on device bond411
[ 1376.952347][ T1945] xt_ecn: cannot match TCP bits for non-tcp packets
[ 1376.955542][ T1945] netlink: 'syz.0.15166': attribute type 1 has an invalid length.
[ 1376.987741][ T1945] 8021q: adding VLAN 0 to HW filter on device bond412
[ 1377.038235][ T1948] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[ 1377.044513][ T1948] tipc: Resetting bearer <eth:syzkaller0>
[ 1377.103823][ T1950] bridge287: entered promiscuous mode
[ 1377.105633][ T1950] bridge287: entered allmulticast mode
[ 1377.113231][ T1950] team0: Port device bridge287 added
[ 1377.260044][   T33] audit: type=1800 audit(1778546285.958:29): pid=1950 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.15168" name="memory.events" dev="tmpfs" ino=25898 res=0 errno=0
[ 1377.807255][ T1978] 8021q: adding VLAN 0 to HW filter on device bond433
[ 1377.927253][ T1988] bond434: entered promiscuous mode
[ 1377.930116][ T1988] 8021q: adding VLAN 0 to HW filter on device bond434
[ 1377.967157][ T1994] netlink: 72 bytes leftover after parsing attributes in process `syz.1.15179'.
[ 1377.979351][ T1994] netlink: 12 bytes leftover after parsing attributes in process `syz.1.15179'.
[ 1377.982701][ T1994] netlink: 4 bytes leftover after parsing attributes in process `syz.1.15179'.
[ 1378.125082][ T2009] netlink: 4 bytes leftover after parsing attributes in process `syz.0.15182'.
[ 1378.128644][ T2009] netlink: 4 bytes leftover after parsing attributes in process `syz.0.15182'.
[ 1378.174025][ T2011] netlink: 12 bytes leftover after parsing attributes in process `syz.3.15183'.
[ 1378.289323][ T2003]  speed is unknown, defaulting to 1000
[ 1378.291985][ T2003] wg1 speed is unknown, defaulting to 1000
[ 1378.506766][ T2018] validate_nla: 3 callbacks suppressed
[ 1378.506790][ T2018] netlink: 'syz.0.15186': attribute type 1 has an invalid length.
[ 1378.519058][ T2027] netlink: 168 bytes leftover after parsing attributes in process `syz.3.15187'.
[ 1378.587571][ T2033] netlink: 20 bytes leftover after parsing attributes in process `syz.0.15188'.
[ 1378.672020][ T2036] 1{X: left allmulticast mode
[ 1378.672488][ T2037] net_ratelimit: 38 callbacks suppressed
[ 1378.672503][ T2037] openvswitch: netlink: IPv6 tunnel dst address is zero
[ 1378.731038][ T2036] 0{X: renamed from 31{X
[ 1378.743640][ T2036] 0{X: entered allmulticast mode
[ 1378.754475][ T2036] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check.
[ 1378.970862][ T2049] netlink: 'syz.3.15193': attribute type 1 has an invalid length.
[ 1379.102984][ T2055] tipc: Resetting bearer <eth:syzkaller0>
[ 1379.185028][ T2066] netlink: 'syz.3.15199': attribute type 29 has an invalid length.
[ 1379.327024][ T2080] netlink: 'syz.1.15203': attribute type 1 has an invalid length.
[ 1379.391898][ T2080] 8021q: adding VLAN 0 to HW filter on device bond435
[ 1379.541506][ T2078]  speed is unknown, defaulting to 1000
[ 1379.545563][ T2078] wg1 speed is unknown, defaulting to 1000
[ 1379.624772][ T2091] dvmrp8: left allmulticast mode
[ 1379.813074][ T2099] netlink: 'syz.0.15208': attribute type 1 has an invalid length.
[ 1379.815583][ T2097] bond72: option mode: invalid value (254)
[ 1379.843038][ T2097] bond72 (unregistering): Released all slaves
[ 1379.883499][ T2099] workqueue: Failed to create a rescuer kthread for wq "bond413": -EINTR
[ 1380.101098][ T2112] netlink: 'syz.0.15209': attribute type 39 has an invalid length.
[ 1380.321277][ T2124] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[ 1380.324114][ T2124] IPv6: NLM_F_CREATE should be set when creating new route
[ 1380.326879][ T2124] IPv6: NLM_F_CREATE should be set when creating new route
[ 1380.329818][ T2124] IPv6: NLM_F_CREATE should be set when creating new route
[ 1380.360646][ T2124] netlink: 'syz.1.15213': attribute type 10 has an invalid length.
[ 1380.364182][ T2124] netlink: 'syz.1.15213': attribute type 10 has an invalid length.
[ 1380.552787][ T2126] netlink: 'syz.3.15215': attribute type 1 has an invalid length.
[ 1380.761466][ T2145] netlink: 'syz.3.15218': attribute type 1 has an invalid length.
[ 1380.786095][ T2145] 8021q: adding VLAN 0 to HW filter on device bond72
[ 1380.811023][ T2145] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1380.832334][ T2145] bond72: (slave ip6gretap2): making interface the new active one
[ 1380.835807][ T2145] bond72: (slave ip6gretap2): Enslaving as an active interface with an up link
[ 1380.848445][ T2158] netlink: 'syz.0.15222': attribute type 11 has an invalid length.
[ 1381.039042][ T2177] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[ 1381.042765][ T2177] tipc: Resetting bearer <eth:syzkaller0>
[ 1381.232302][ T2197] bond413: (slave bridge289): Enslaving as a backup interface with an up link
[ 1381.248586][ T2196] bond413: (slave bridge290): Enslaving as a backup interface with a down link
[ 1381.287790][ T2201] bond73: Unable to set peer notification delay as MII monitoring is disabled
[ 1381.301565][ T2201] bond73 (unregistering): Released all slaves
[ 1381.496147][ T2216] 8021q: adding VLAN 0 to HW filter on device bond414
[ 1381.627179][ T2227] bond73: entered promiscuous mode
[ 1381.628966][ T2227] 8021q: adding VLAN 0 to HW filter on device bond73
[ 1381.686821][ T2235] bond74: (slave bond_slave_1): Device is not bonding slave
[ 1381.694024][ T2235] bond74: option active_slave: invalid value (bond_slave_1)
[ 1381.701535][ T2240] __nla_validate_parse: 24 callbacks suppressed
[ 1381.701549][ T2240] netlink: 28 bytes leftover after parsing attributes in process `syz.0.15242'.
[ 1381.707721][ T2235] bond74 (unregistering): Released all slaves
[ 1381.721158][ T2234] netlink: 210640 bytes leftover after parsing attributes in process `syz.3.15241'.
[ 1381.831370][ T2249] netlink: 212340 bytes leftover after parsing attributes in process `syz.3.15245'.
[ 1381.838015][ T2249] openvswitch: netlink: Port 167772160 exceeds max allowable 65535
[ 1381.893788][ T2259] netlink: 8 bytes leftover after parsing attributes in process `syz.0.15244'.
[ 1381.949934][ T2261] netlink: 36 bytes leftover after parsing attributes in process `syz.3.15247'.
[ 1382.399791][ T2291] 8021q: adding VLAN 0 to HW filter on device bond436
[ 1382.433432][ T2291] veth169: entered promiscuous mode
[ 1382.588391][ T2297] netlink: 4 bytes leftover after parsing attributes in process `syz.1.15254'.
[ 1382.824481][ T2305] veth0_macvtap: entered promiscuous mode
[ 1382.826782][ T2305] veth0_macvtap: entered allmulticast mode
[ 1382.841556][ T2305] 8021q: adding VLAN 0 to HW filter on device bond1
[ 1382.844932][ T2305] 8021q: adding VLAN 0 to HW filter on device bond2
[ 1382.848676][ T2305] 8021q: adding VLAN 0 to HW filter on device bond3
[ 1382.854522][ T2305] 8021q: adding VLAN 0 to HW filter on device bond4
[ 1382.858930][ T2305] 8021q: adding VLAN 0 to HW filter on device bond5
[ 1382.864726][ T2305] hsr1: Slave A (veth1_to_team) is not up; please bring it up to get a fully working HSR network
[ 1382.868796][ T2305] hsr1: Slave B (30{X) is not up; please bring it up to get a fully working HSR network
[ 1382.877286][ T2305] 8021q: adding VLAN 0 to HW filter on device bond6
[ 1382.884037][ T2305] 8021q: adding VLAN 0 to HW filter on device bond7
[ 1382.896767][ T2305] 8021q: adding VLAN 0 to HW filter on device bond8
[ 1382.905294][ T2305] 8021q: adding VLAN 0 to HW filter on device bond9
[ 1382.909592][ T2305] 8021q: adding VLAN 0 to HW filter on device bond10
[ 1382.912852][ T2305] A link change request failed with some changes committed already. Interface geneve3 may have been left with an inconsistent configuration, please check.
[ 1382.967525][ T2301] netlink: 8 bytes leftover after parsing attributes in process `syz.1.15256'.
[ 1382.974773][   T12] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1382.990566][T14915] syz2: Port: 1 Link ACTIVE
[ 1383.012383][   T12] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1383.014941][   T12] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1383.017327][   T12] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1383.062416][ T2314] netlink: 12 bytes leftover after parsing attributes in process `syz.3.15258'.
[ 1383.105370][ T2314] bond74: entered promiscuous mode
[ 1383.107866][ T2314] 8021q: adding VLAN 0 to HW filter on device bond74
[ 1383.127734][ T2314] vlan0: entered allmulticast mode
[ 1383.136695][ T2314] bond74: entered allmulticast mode
[ 1383.136746][ T2319] netlink: 272 bytes leftover after parsing attributes in process `syz.0.15260'.
[ 1383.150846][ T2318] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1383.196840][ T2318] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1383.245125][ T2318] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1383.296109][ T2335] netlink: 28 bytes leftover after parsing attributes in process `syz.3.15262'.
[ 1383.315913][ T2318] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1383.594036][   T12] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1383.608316][   T12] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1383.624170][   T12] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1383.636258][T31961] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1383.722817][ T2343] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[ 1383.867997][ T2349] bond415: option xmit_hash_policy: invalid value (10)
[ 1383.878613][ T2349] bond415 (unregistering): Released all slaves
[ 1384.106140][ T2363] bond415: option broadcast_neighbor: invalid value (30)
[ 1384.112329][ T2363] bond415 (unregistering): Released all slaves
[ 1384.140787][ T1865] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1384.143414][ T1865] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1384.236883][ T2374] validate_nla: 7 callbacks suppressed
[ 1384.236900][ T2374] netlink: 'syz.0.15273': attribute type 1 has an invalid length.
[ 1384.265621][ T2374] 8021q: adding VLAN 0 to HW filter on device bond415
[ 1384.312794][ T2374] bond415: (slave veth201): Enslaving as an active interface with a down link
[ 1386.529751][T22817] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[ 1387.427221][ T2387] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[ 1387.647154][ T2415] 0{X: left allmulticast mode
[ 1387.673236][ T2415] bond_slave_1: left promiscuous mode
[ 1387.674889][ T2415] bond_slave_1: left allmulticast mode
[ 1387.727516][ T2415] A link change request failed with some changes committed already. Interface geneve3 may have been left with an inconsistent configuration, please check.
[ 1387.751715][ T2420] __nla_validate_parse: 4 callbacks suppressed
[ 1387.751737][ T2420] netlink: 28 bytes leftover after parsing attributes in process `syz.3.15286'.
[ 1387.766372][ T2418] netlink: 36 bytes leftover after parsing attributes in process `syz.1.15285'.
[ 1387.805799][ T2423] netlink: 120 bytes leftover after parsing attributes in process `syz.3.15287'.
[ 1387.809110][ T2423] netlink: 'syz.3.15287': attribute type 1 has an invalid length.
[ 1387.812725][ T2423] netlink: 64 bytes leftover after parsing attributes in process `syz.3.15287'.
[ 1387.827200][ T2426] netlink: 4 bytes leftover after parsing attributes in process `syz.1.15288'.
[ 1387.927843][ T2432] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[ 1387.965813][ T2432] netlink: 128 bytes leftover after parsing attributes in process `syz.1.15290'.
[ 1387.980512][ T2432] A link change request failed with some changes committed already. Interface 26rB may have been left with an inconsistent configuration, please check.
[ 1388.006561][ T2434] netlink: 24 bytes leftover after parsing attributes in process `syz.3.15291'.
[ 1388.018639][ T2435] netlink: 24 bytes leftover after parsing attributes in process `syz.3.15291'.
[ 1388.031436][ T2437] netlink: 'syz.1.15292': attribute type 13 has an invalid length.
[ 1388.096522][ T2437] mac80211_hwsim hwsim261 syzkaller0: Caught tx_queue_len zero misconfig
[ 1388.170888][ T2446] netlink: 'syz.1.15295': attribute type 1 has an invalid length.
[ 1388.188733][ T2446] bond437: entered promiscuous mode
[ 1388.191664][ T2446] 8021q: adding VLAN 0 to HW filter on device bond437
[ 1388.210714][ T2446] 8021q: adding VLAN 0 to HW filter on device bond437
[ 1388.213492][ T2446] bond437: (slave wireguard16): The slave device specified does not support setting the MAC address
[ 1388.216709][ T2446] bond437: (slave wireguard16): Setting fail_over_mac to active for active-backup mode
[ 1388.233163][ T2446] bond437: (slave wireguard16): making interface the new active one
[ 1388.235544][ T2446] wireguard16: entered promiscuous mode
[ 1388.238887][ T2446] bond437: (slave wireguard16): Enslaving as an active interface with an up link
[ 1388.243532][ T2442] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check.
[ 1388.261099][ T2446] netlink: 16 bytes leftover after parsing attributes in process `syz.1.15295'.
[ 1388.374222][ T2461] netlink: 8 bytes leftover after parsing attributes in process `syz.1.15298'.
[ 1388.396900][ T2461] bond438: option broadcast_neighbor: invalid value (30)
[ 1388.439018][ T2461] bond438 (unregistering): Released all slaves
[ 1388.645658][ T2496] openvswitch: netlink: IP tunnel dst address not specified
[ 1388.676979][ T2501] bond408: (slave ): Releasing backup interface
[ 1388.682389][ T2501] bond408: (slave ): last VLAN challenged slave left bond - VLAN blocking is removed
[ 1388.695758][ T2501] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check.
[ 1388.788960][ T2487]  speed is unknown, defaulting to 1000
[ 1388.793743][ T2487] wg1 speed is unknown, defaulting to 1000
[ 1389.006354][ T2506]  speed is unknown, defaulting to 1000
[ 1389.011031][ T2506] wg1 speed is unknown, defaulting to 1000
[ 1389.118139][ T2517] netlink: 'syz.1.15308': attribute type 1 has an invalid length.
[ 1389.153642][ T2517] bond438: entered promiscuous mode
[ 1389.155783][ T2517] 8021q: adding VLAN 0 to HW filter on device bond438
[ 1389.199025][ T2517] vlan38: entered allmulticast mode
[ 1389.201575][ T2517] bond438: entered allmulticast mode
[ 1389.230460][ T2517] bond438: (slave bridge182): making interface the new active one
[ 1389.233855][ T2517] bridge182: entered promiscuous mode
[ 1389.236480][ T2517] bridge182: entered allmulticast mode
[ 1389.242609][ T2517] bond438: (slave bridge182): Enslaving as an active interface with an up link
[ 1389.470914][ T2529] netlink: 'syz.1.15310': attribute type 10 has an invalid length.
[ 1389.473603][ T2529] netlink: 'syz.1.15310': attribute type 10 has an invalid length.
[ 1389.519684][ T2529] netlink: 'syz.1.15310': attribute type 10 has an invalid length.
[ 1389.530130][ T2529] netlink: 'syz.1.15310': attribute type 10 has an invalid length.
[ 1389.537389][ T2529] netlink: 'syz.1.15310': attribute type 10 has an invalid length.
[ 1389.553378][ T2529] netlink: 'syz.1.15310': attribute type 10 has an invalid length.
[ 1389.561179][ T2529] netlink: 'syz.1.15310': attribute type 10 has an invalid length.
[ 1389.578532][ T2529] netlink: 'syz.1.15310': attribute type 10 has an invalid length.
[ 1389.583513][ T2529] netlink: 'syz.1.15310': attribute type 10 has an invalid length.
[ 1389.604325][ T2529] netlink: 'syz.1.15310': attribute type 10 has an invalid length.
[ 1389.652155][T22817] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[ 1389.780976][ T2543] 8021q: adding VLAN 0 to HW filter on device bond416
[ 1389.810977][ T2553] bond416: option tlb_dynamic_lb: unable to set because the bond device is up
[ 1389.821125][ T2554] pim6reg1: entered promiscuous mode
[ 1389.822734][ T2554] pim6reg1: entered allmulticast mode
[ 1389.956537][ T2551] bond75: (slave bridge29): making interface the new active one
[ 1389.982957][ T2551] bond75: (slave bridge29): Enslaving as an active interface with an up link
[ 1389.995717][ T2567] macvlan0: entered promiscuous mode
[ 1389.997269][ T2567] macvlan0: entered allmulticast mode
[ 1390.000656][ T2567] bond75: entered promiscuous mode
[ 1390.002580][ T2567] bridge29: entered promiscuous mode
[ 1390.005165][ T2567] 8021q: adding VLAN 0 to HW filter on device macvlan0
[ 1390.008781][ T2567] bond75: (slave macvlan0): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[ 1390.035773][ T2567] bond75: left promiscuous mode
[ 1390.037294][ T2567] bridge29: left promiscuous mode
[ 1390.082581][ T2556] 8021q: adding VLAN 0 to HW filter on device bond75
[ 1390.238580][ T2572] openvswitch: netlink: Message has 4 unknown bytes.
[ 1390.241302][ T2572] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1390.388001][ T2598] veth169: entered allmulticast mode
[ 1390.396902][ T2598] bond440: (slave veth169): Enslaving as an active interface with an up link
[ 1390.405975][ T2598] bond440 (unregistering): (slave veth169): Releasing backup interface
[ 1390.413370][ T2598] bond440 (unregistering): Released all slaves
[ 1390.424721][ T2604] bond1: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[ 1390.434683][ T2604] bond1: (slave lo): Enslaving as an active interface with an up link
[ 1390.437424][ T2604] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check.
[ 1390.443046][ T2603] bond1: option mode: unable to set because the bond device has slaves
[ 1390.460571][ T2608] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1390.517242][ T2608] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1390.550286][ T2614] bond77: option arp_all_targets: invalid value (129)
[ 1390.555058][ T2614] bond77 (unregistering): Released all slaves
[ 1390.582956][ T2608] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1390.657249][ T2608] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1390.713486][ T4124] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1390.737825][ T4124] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1390.740727][ T4124] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1390.777187][ T5644] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1390.817859][ T2637] team5: entered promiscuous mode
[ 1390.819925][ T2637] team5: entered allmulticast mode
[ 1390.821807][ T2637] 8021q: adding VLAN 0 to HW filter on device team5
[ 1390.834671][ T2631] team6 (uninitialized): Failed to send options change via netlink (err -105)
[ 1390.860417][ T2631] team6: entered promiscuous mode
[ 1390.861958][ T2631] team6: entered allmulticast mode
[ 1390.863717][ T2631] 8021q: adding VLAN 0 to HW filter on device team6
[ 1390.931004][ T2635]  speed is unknown, defaulting to 1000
[ 1390.935879][ T2635] wg1 speed is unknown, defaulting to 1000
[ 1391.615162][ T2685] bridge183: the hash_elasticity option has been deprecated and is always 16
[ 1391.972205][ T2703] tipc: Resetting bearer <eth:syzkaller0>
[ 1392.209048][ T2719] A link change request failed with some changes committed already. Interface geneve3 may have been left with an inconsistent configuration, please check.
[ 1392.343168][ T2728] bond77: entered promiscuous mode
[ 1392.345231][ T2728] bond77: entered allmulticast mode
[ 1392.347915][ T2728] 8021q: adding VLAN 0 to HW filter on device bond77
[ 1392.366236][ T2728] bridge31: entered promiscuous mode
[ 1392.368548][ T2728] bridge31: entered allmulticast mode
[ 1392.373324][ T2728] bond77: (slave bridge31): Enslaving as a backup interface with an up link
[ 1392.397023][ T2728] bridge32: entered promiscuous mode
[ 1392.399535][ T2728] bridge32: entered allmulticast mode
[ 1392.402940][ T2728] bond77: (slave bridge32): Enslaving as a backup interface with a down link
[ 1392.536091][ T2751] bond1: option mode: unable to set because the bond device has slaves
[ 1392.765952][ T2773] __nla_validate_parse: 22 callbacks suppressed
[ 1392.765977][ T2773] netlink: 128 bytes leftover after parsing attributes in process `syz.0.15366'.
[ 1392.781220][ T2773] net_ratelimit: 3 callbacks suppressed
[ 1392.781275][ T2773] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check.
[ 1392.847776][ T2744]  speed is unknown, defaulting to 1000
[ 1392.852434][ T2744] wg1 speed is unknown, defaulting to 1000
[ 1392.901542][ T2781] netlink: 8 bytes leftover after parsing attributes in process `syz.0.15368'.
[ 1392.905072][ T2781] netlink: 4 bytes leftover after parsing attributes in process `syz.0.15368'.
[ 1392.943831][ T2781] netlink: 8 bytes leftover after parsing attributes in process `syz.0.15368'.
[ 1392.947334][ T2781] netlink: 4 bytes leftover after parsing attributes in process `syz.0.15368'.
[ 1393.078843][ T2790] netlink: 20 bytes leftover after parsing attributes in process `syz.3.15370'.
[ 1393.085512][ T2790] netlink: 8 bytes leftover after parsing attributes in process `syz.3.15370'.
[ 1393.110634][ T2785] 8021q: adding VLAN 0 to HW filter on device bond417
[ 1393.126765][ T2785] netlink: 40 bytes leftover after parsing attributes in process `syz.0.15369'.
[ 1393.172428][ T2785] bond417: option mode: unable to set because the bond device is up
[ 1393.397260][ T2808] netlink: 8 bytes leftover after parsing attributes in process `syz.0.15372'.
[ 1393.400932][ T2808] netlink: 8 bytes leftover after parsing attributes in process `syz.0.15372'.
[ 1393.432245][ T2806] team0 (unregistering): Port device bond22 removed
[ 1393.437753][ T2806] team0 (unregistering): Port device bridge8 removed
[ 1393.462689][ T2806] team0 (unregistering): Port device geneve0 removed
[ 1393.468516][ T2806] team0 (unregistering): Port device bond43 removed
[ 1393.907134][ T2838] bond418: entered promiscuous mode
[ 1394.055512][ T2855] syzkaller1: entered promiscuous mode
[ 1394.057374][ T2855] syzkaller1: entered allmulticast mode
[ 1394.090881][ T2855] bond419: option packets_per_slave: mode dependency failed, not supported in mode balance-alb(6)
[ 1394.098063][ T2855] bond419 (unregistering): Released all slaves
[ 1394.356075][ T2882] vxcan16: entered allmulticast mode
[ 1394.696331][ T2922] validate_nla: 71 callbacks suppressed
[ 1394.696349][ T2922] netlink: 'syz.1.15399': attribute type 4 has an invalid length.
[ 1394.786237][ T2929] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check.
[ 1394.976362][ T2939] bond440: entered promiscuous mode
[ 1394.978463][ T2939] bond440: entered allmulticast mode
[ 1394.981740][ T2939] 8021q: adding VLAN 0 to HW filter on device bond440
[ 1395.243012][ T2959] openvswitch: netlink: Missing key (keys=40, expected=2000)
[ 1395.345313][ T2950]  speed is unknown, defaulting to 1000
[ 1395.348260][ T2950] wg1 speed is unknown, defaulting to 1000
[ 1395.477832][ T2976] netlink: 'syz.3.15411': attribute type 13 has an invalid length.
[ 1395.483818][ T2976] netdevsim0: refused to change device tx_queue_len
[ 1395.486412][ T2976] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[ 1395.553156][ T2979] 8021q: adding VLAN 0 to HW filter on device bond78
[ 1395.575885][ T2979] bond78 (unregistering): Released all slaves
[ 1395.684069][ T2985] xt_hashlimit: size too large, truncated to 1048576
[ 1396.272764][ T3016] netlink: 'syz.0.15420': attribute type 1 has an invalid length.
[ 1396.309521][ T3016] bond419: entered promiscuous mode
[ 1396.311344][ T3016] bond419: entered allmulticast mode
[ 1396.313220][ T3016] 8021q: adding VLAN 0 to HW filter on device bond419
[ 1396.994762][ T3073] xt_hashlimit: size too large, truncated to 1048576
[ 1397.010422][ T3089] netlink: 'syz.3.15435': attribute type 1 has an invalid length.
[ 1397.027646][ T3089] bridge0: Device is already in use.
[ 1397.128446][ T3079] 8021q: adding VLAN 0 to HW filter on device bond441
[ 1397.544383][ T3126] netlink: 'syz.3.15442': attribute type 8 has an invalid length.
[ 1399.893470][ T3090] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[ 1399.897827][ T3094] netlink: 'syz.0.15432': attribute type 1 has an invalid length.
[ 1399.907925][ T3094] __nla_validate_parse: 24 callbacks suppressed
[ 1399.907944][ T3094] netlink: 224 bytes leftover after parsing attributes in process `syz.0.15432'.
[ 1400.342244][ T3143] veth1: Caught tx_queue_len zero misconfig
[ 1400.388120][ T3152] x_tables: duplicate underflow at hook 2
[ 1400.397413][ T3149] netlink: 12 bytes leftover after parsing attributes in process `syz.0.15447'.
[ 1400.468580][ T3149] bridge291: port 1(veth203) entered blocking state
[ 1400.477311][ T3149] bridge291: port 1(veth203) entered disabled state
[ 1400.483536][ T3149] veth203: entered allmulticast mode
[ 1400.490071][ T3149] veth203: entered promiscuous mode
[ 1400.750183][ T3177] netlink: 'syz.0.15453': attribute type 13 has an invalid length.
[ 1400.753261][ T3177] netlink: 'syz.0.15453': attribute type 17 has an invalid length.
[ 1400.805484][ T3178] netlink: 4 bytes leftover after parsing attributes in process `syz.0.15453'.
[ 1400.856842][ T3177] A link change request failed with some changes committed already. Interface geneve3 may have been left with an inconsistent configuration, please check.
[ 1401.052492][ T3180] netlink: 'syz.0.15454': attribute type 4 has an invalid length.
[ 1401.117985][ T3182] netlink: 'syz.0.15455': attribute type 13 has an invalid length.
[ 1401.226235][ T3182] tipc: Resetting bearer <eth:syzkaller0>
[ 1401.294747][ T3188] netlink: 'syz.0.15456': attribute type 1 has an invalid length.
[ 1401.334927][ T3188] bond420: (slave bridge292): making interface the new active one
[ 1401.338667][ T3188] bond420: (slave bridge292): Enslaving as an active interface with an up link
[ 1401.358169][ T3188] macvlan2: entered promiscuous mode
[ 1401.362236][ T3188] macvlan2: entered allmulticast mode
[ 1401.366007][ T3188] bond420: entered promiscuous mode
[ 1401.368171][ T3188] bridge292: entered promiscuous mode
[ 1401.371998][ T3188] 8021q: adding VLAN 0 to HW filter on device macvlan2
[ 1401.376518][ T3188] bond420: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[ 1401.384261][ T3188] bond420: left promiscuous mode
[ 1401.385884][ T3188] bridge292: left promiscuous mode
[ 1401.580677][ T3196] netlink: 40 bytes leftover after parsing attributes in process `syz.0.15459'.
[ 1401.587309][ T3196] SET target dimension over the limit!
[ 1401.606244][ T3198] syzkaller1: entered promiscuous mode
[ 1401.608299][ T3198] syzkaller1: entered allmulticast mode
[ 1401.653300][ T3201] xt_hashlimit: size too large, truncated to 1048576
[ 1401.688762][ T3202] netlink: 'syz.3.15461': attribute type 29 has an invalid length.
[ 1401.692543][ T3202] netlink: 8 bytes leftover after parsing attributes in process `syz.3.15461'.
[ 1401.696399][ T3202] netlink: 'syz.3.15461': attribute type 29 has an invalid length.
[ 1401.698841][ T3202] netlink: 8 bytes leftover after parsing attributes in process `syz.3.15461'.
[ 1401.702831][ T3202] netlink: 'syz.3.15461': attribute type 29 has an invalid length.
[ 1401.705293][ T3202] netlink: 8 bytes leftover after parsing attributes in process `syz.3.15461'.
[ 1401.708341][ T3202] netlink: 'syz.3.15461': attribute type 29 has an invalid length.
[ 1401.712554][ T3202] netlink: 8 bytes leftover after parsing attributes in process `syz.3.15461'.
[ 1401.715981][ T3202] netlink: 8 bytes leftover after parsing attributes in process `syz.3.15461'.
[ 1401.718869][ T3202] netlink: 8 bytes leftover after parsing attributes in process `syz.3.15461'.
[ 1401.927841][ T3218] bond79: (slave vxcan11): The slave device specified does not support setting the MAC address
[ 1401.932086][ T3218] bond79: (slave vxcan11): Setting fail_over_mac to active for active-backup mode
[ 1401.948500][ T3218] bond79: (slave vxcan11): making interface the new active one
[ 1401.952090][ T3218] bond79: (slave vxcan11): Enslaving as an active interface with an up link
[ 1402.297712][ T3254] bond80: entered promiscuous mode
[ 1402.301564][ T3254] 8021q: adding VLAN 0 to HW filter on device bond80
[ 1402.321596][ T3254] ipvlan0: entered allmulticast mode
[ 1402.323748][ T3254] bond80: entered allmulticast mode
[ 1402.335430][ T3254] ipvlan1: entered allmulticast mode
[ 1402.350609][ T3254] bond80: (slave bridge35): making interface the new active one
[ 1402.352927][ T3254] bridge35: entered promiscuous mode
[ 1402.354799][ T3254] bridge35: entered allmulticast mode
[ 1402.358685][ T3254] bond80: (slave bridge35): Enslaving as an active interface with an up link
[ 1402.765406][ T3281] 8021q: VLANs not supported on gre0
[ 1403.178852][ T3309] syzkaller1: left promiscuous mode
[ 1403.181716][ T3309] syzkaller1: left allmulticast mode
[ 1403.404521][ T3330] bond442 (unregistering): Released all slaves
[ 1403.416342][ T3328] syzkaller1: entered promiscuous mode
[ 1403.418603][ T3328] syzkaller1: entered allmulticast mode
[ 1403.425602][ T3328] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[ 1403.428265][ T3328] IPv6: NLM_F_CREATE should be set when creating new route
[ 1403.431001][ T3328] IPv6: NLM_F_CREATE should be set when creating new route
[ 1403.433880][ T3328] IPv6: NLM_F_CREATE should be set when creating new route
[ 1403.595141][ T3340] pim6reg: left allmulticast mode
[ 1403.750484][ T3348] rB: Caught tx_queue_len zero misconfig
[ 1403.924477][ T3371] bond382: entered allmulticast mode
[ 1403.926454][ T3371] vcan2: entered allmulticast mode
[ 1403.946210][ T3371] bond382: left allmulticast mode
[ 1403.948108][ T3371] vcan2: left allmulticast mode
[ 1404.195976][ T3403] A link change request failed with some changes committed already. Interface geneve3 may have been left with an inconsistent configuration, please check.
[ 1404.288908][ T3404] veth1_macvtap: left promiscuous mode
[ 1404.294290][ T3404] veth0_macvtap: left promiscuous mode
[ 1404.298973][ T3404] veth0_macvtap: entered promiscuous mode
[ 1404.304972][ T3404] veth1_macvtap: entered promiscuous mode
[ 1404.315720][ T3404] bridge0: port 1(vlan1) entered blocking state
[ 1404.318218][ T3404] bridge0: port 1(vlan1) entered listening state
[ 1404.326108][ T3404] 8021q: adding VLAN 0 to HW filter on device bond1
[ 1404.331330][ T3404] 8021q: adding VLAN 0 to HW filter on device bond2
[ 1404.339356][ T3404] 8021q: adding VLAN 0 to HW filter on device bond3
[ 1404.346360][ T3404] 8021q: adding VLAN 0 to HW filter on device bond4
[ 1404.354870][ T3404] 8021q: adding VLAN 0 to HW filter on device bond5
[ 1404.358035][ T3404] 8021q: adding VLAN 0 to HW filter on device bond6
[ 1404.370879][ T3404] 8021q: adding VLAN 0 to HW filter on device bond7
[ 1404.383767][ T3404] 8021q: adding VLAN 0 to HW filter on device bond8
[ 1404.387900][ T3404] 8021q: adding VLAN 0 to HW filter on device bond9
[ 1404.398250][ T3404] 8021q: adding VLAN 0 to HW filter on device bond10
[ 1404.440042][ T3404] 8021q: adding VLAN 0 to HW filter on device bond11
[ 1404.444422][ T3404] 8021q: adding VLAN 0 to HW filter on device bond12
[ 1404.452975][ T3404] 8021q: adding VLAN 0 to HW filter on device bond13
[ 1404.457218][ T3404] 8021q: adding VLAN 0 to HW filter on device bond14
[ 1404.461145][ T3404] 8021q: adding VLAN 0 to HW filter on device bond15
[ 1404.467302][ T3404] 8021q: adding VLAN 0 to HW filter on device bond16
[ 1404.473576][ T3404] 8021q: adding VLAN 0 to HW filter on device bond17
[ 1404.477067][ T3404] 8021q: adding VLAN 0 to HW filter on device bond18
[ 1404.480913][ T3404] 8021q: adding VLAN 0 to HW filter on device bond19
[ 1404.484596][ T3404] 8021q: adding VLAN 0 to HW filter on device bond20
[ 1404.488798][ T3404] 8021q: adding VLAN 0 to HW filter on device bond21
[ 1404.508948][ T3404] 8021q: adding VLAN 0 to HW filter on device bond22
[ 1404.513117][ T3404] 8021q: adding VLAN 0 to HW filter on device bond23
[ 1404.516315][ T3404] 8021q: adding VLAN 0 to HW filter on device bond24
[ 1404.523599][ T3404] 8021q: adding VLAN 0 to HW filter on device bond25
[ 1404.527541][ T3404] 8021q: adding VLAN 0 to HW filter on device bond26
[ 1404.534396][ T3404] 8021q: adding VLAN 0 to HW filter on device bond27
[ 1404.541214][ T3404] 8021q: adding VLAN 0 to HW filter on device bond28
[ 1404.546682][ T3404] 8021q: adding VLAN 0 to HW filter on device bond29
[ 1404.550317][ T3404] 8021q: adding VLAN 0 to HW filter on device bond30
[ 1404.555728][ T3404] 8021q: adding VLAN 0 to HW filter on device bond31
[ 1404.560623][ T3404] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[ 1404.565168][ T3404] 8021q: adding VLAN 0 to HW filter on device ipvlan3
[ 1404.571820][ T3404] 8021q: adding VLAN 0 to HW filter on device bond32
[ 1404.580085][ T3404] 8021q: adding VLAN 0 to HW filter on device bond33
[ 1404.584331][ T3404] 8021q: adding VLAN 0 to HW filter on device team1
[ 1404.587619][ T3404] 8021q: adding VLAN 0 to HW filter on device team2
[ 1404.594586][ T3404] 8021q: adding VLAN 0 to HW filter on device bond34
[ 1404.597867][ T3404] 8021q: adding VLAN 0 to HW filter on device bond35
[ 1404.604624][ T3404] mac80211_hwsim hwsim303 syzkaller0: left promiscuous mode
[ 1404.610578][ T3404] tipc: Resetting bearer <eth:syzkaller0>
[ 1404.614540][ T3404] 8021q: adding VLAN 0 to HW filter on device bond36
[ 1404.618277][ T3404] 8021q: adding VLAN 0 to HW filter on device bond37
[ 1404.627945][ T3404] 8021q: adding VLAN 0 to HW filter on device bond38
[ 1404.632856][ T3404] 8021q: adding VLAN 0 to HW filter on device bond39
[ 1404.636517][ T3404] 8021q: adding VLAN 0 to HW filter on device bond40
[ 1404.640040][ T5644] bond27: (slave bridge5): link status up again after 0 ms
[ 1404.644968][ T3404] 8021q: adding VLAN 0 to HW filter on device bond41
[ 1404.651251][ T3404] 8021q: adding VLAN 0 to HW filter on device batadv1
[ 1404.654673][ T3404] 8021q: adding VLAN 0 to HW filter on device bond42
[ 1404.658904][ T3404] 8021q: adding VLAN 0 to HW filter on device bond43
[ 1404.659726][ T5644] bond27: (slave bridge5): link status up again after 0 ms
[ 1404.665172][ T3404] A link change request failed with some changes committed already. Interface vxlan1 may have been left with an inconsistent configuration, please check.
[ 1404.679577][ T5644] bond27: (slave bridge5): link status up again after 0 ms
[ 1404.699848][ T5644] bond27: (slave bridge5): link status up again after 0 ms
[ 1404.720443][   T12] bond27: (slave bridge5): link status up again after 0 ms
[ 1404.722736][   T12] bond27: (slave bridge5): failed to get link speed/duplex
[ 1404.749440][ T5845] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[ 1404.752790][ T5845] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1404.806619][ T5845] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[ 1404.810377][ T5845] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1404.813570][ T5845] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[ 1404.819263][ T5845] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1404.828756][ T5845] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[ 1404.835193][ T5845] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1404.851366][   T12] ip6_tunnel: ip6tnl5 xmit: Local address not yet configured!
[ 1404.874517][   T12] ip6_tunnel: ip6tnl5 xmit: Local address not yet configured!
[ 1404.879865][T14915] ip6_tunnel: ip6tnl5 xmit: Local address not yet configured!
[ 1404.888094][   T12] ip6_tunnel: ip6tnl6 xmit: Local address not yet configured!
[ 1404.894238][   T12] ip6_tunnel: ip6tnl6 xmit: Local address not yet configured!
[ 1404.905001][   T12] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[ 1404.908006][   T12] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[ 1404.911882][T14915] ip6_tunnel: ip6tnl6 xmit: Local address not yet configured!
[ 1404.932773][T31961] bond27: (slave bridge5): failed to get link speed/duplex
[ 1404.941829][T14915] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[ 1404.964396][ T3424] __nla_validate_parse: 110 callbacks suppressed
[ 1404.964412][ T3424] netlink: 24 bytes leftover after parsing attributes in process `syz.3.15508'.
[ 1404.972364][ T3417] pim6reg1: entered promiscuous mode
[ 1404.974220][ T3417] pim6reg1: entered allmulticast mode
[ 1405.021086][T14915] ip6_tunnel: ip6tnl6 xmit: Local address not yet configured!
[ 1405.085760][ T3428] netlink: 12 bytes leftover after parsing attributes in process `syz.1.15510'.
[ 1405.365478][ T3448] netlink: 12 bytes leftover after parsing attributes in process `syz.1.15514'.
[ 1405.432172][ T3457] 8021q: VLANs not supported on syzkaller1
[ 1405.436728][ T3457] validate_nla: 99 callbacks suppressed
[ 1405.436741][ T3457] netlink: 'syz.1.15515': attribute type 1 has an invalid length.
[ 1405.481524][ T3457] bond442: (slave vxcan21): The slave device specified does not support setting the MAC address
[ 1405.487109][ T3457] bond442: (slave vxcan21): Error -95 calling set_mac_address
[ 1405.597085][ T3467] mac80211_hwsim hwsim261 syzkaller0: left promiscuous mode
[ 1405.605008][ T3467] mac80211_hwsim hwsim261 syzkaller0: left allmulticast mode
[ 1405.733080][ T3472] netlink: 44 bytes leftover after parsing attributes in process `syz.1.15517'.
[ 1405.912678][ T5845] net_ratelimit: 8 callbacks suppressed
[ 1405.912691][ T5845] bond27: (slave bridge5): failed to get link speed/duplex
[ 1406.021326][ T5845] bond27: (slave bridge5): failed to get link speed/duplex
[ 1406.041352][ T3497] netlink: 12 bytes leftover after parsing attributes in process `syz.3.15522'.
[ 1406.112794][ T3502] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[ 1406.137773][ T3489] netlink: 'syz.1.15519': attribute type 1 has an invalid length.
[ 1406.142867][ T5845] bond27: (slave bridge5): failed to get link speed/duplex
[ 1406.192417][ T3510] netlink: 8 bytes leftover after parsing attributes in process `syz.0.15524'.
[ 1406.196112][ T3511] netlink: 20 bytes leftover after parsing attributes in process `syz.0.15524'.
[ 1406.204449][ T3489] bond443: entered promiscuous mode
[ 1406.206335][ T3489] 8021q: adding VLAN 0 to HW filter on device bond443
[ 1406.231793][ T3510] mac80211_hwsim hwsim353 wlan0: Caught tx_queue_len zero misconfig
[ 1406.244197][   T33] audit: type=1800 audit(1778546314.948:30): pid=3510 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.15524" name="memory.events" dev="tmpfs" ino=26489 res=0 errno=0
[ 1406.250489][ T5644] bond27: (slave bridge5): failed to get link speed/duplex
[ 1406.275308][ T3514] netlink: 'syz.3.15526': attribute type 1 has an invalid length.
[ 1406.295329][ T3518] netlink: 'syz.1.15527': attribute type 1 has an invalid length.
[ 1406.375258][ T3518] bond444: entered promiscuous mode
[ 1406.377700][ T3518] 8021q: adding VLAN 0 to HW filter on device bond444
[ 1406.389864][ T3515] bond81: (slave vxcan13): The slave device specified does not support setting the MAC address
[ 1406.394168][ T3515] bond81: (slave vxcan13): Error -95 calling set_mac_address
[ 1406.451196][ T3518] bond444: (slave bridge184): making interface the new active one
[ 1406.453532][ T3518] bridge184: entered promiscuous mode
[ 1406.457517][ T3518] bridge184: left promiscuous mode
[ 1406.519978][ T4124] bond27: (slave bridge5): failed to get link speed/duplex
[ 1406.635442][ T5644] bond27: (slave bridge5): failed to get link speed/duplex
[ 1406.697522][ T3538] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[ 1406.711658][ T3538] mac80211_hwsim hwsim261 syzkaller0: entered promiscuous mode
[ 1406.722360][ T3538] mac80211_hwsim hwsim261 syzkaller0: entered allmulticast mode
[ 1406.797937][ T4124] bond27: (slave bridge5): failed to get link speed/duplex
[ 1406.915572][ T3527]  speed is unknown, defaulting to 1000
[ 1406.919794][ T5644] bond27: (slave bridge5): failed to get link speed/duplex
[ 1406.923106][ T3527] wg1 speed is unknown, defaulting to 1000
[ 1407.033469][ T5644] bond27: (slave bridge5): failed to get link speed/duplex
[ 1407.074055][ T3560] netlink: 12 bytes leftover after parsing attributes in process `syz.1.15537'.
[ 1407.121062][ T3558] netlink: 40 bytes leftover after parsing attributes in process `syz.3.15536'.
[ 1407.293487][ T3575] netlink: 20 bytes leftover after parsing attributes in process `syz.1.15541'.
[ 1407.297068][ T3575] netlink: 'syz.1.15541': attribute type 4 has an invalid length.
[ 1407.331125][ T3573] bond421: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0)
[ 1407.337322][ T3573] bond421 (unregistering): Released all slaves
[ 1407.611496][ T3594] macsec0: entered promiscuous mode
[ 1407.621088][ T3594] macsec0: left promiscuous mode
[ 1407.805057][ T3596] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[ 1408.065941][ T3630] netlink: 'syz.1.15553': attribute type 10 has an invalid length.
[ 1408.190002][ T3640] netlink: 'syz.3.15556': attribute type 10 has an invalid length.
[ 1408.207518][ T3638] bond445: invalid ARP target 0.0.0.0 specified for addition
[ 1408.215464][ T3638] bond445: option arp_ip_target: invalid value (0)
[ 1408.219816][ T3638] bond445 (unregistering): Released all slaves
[ 1408.233988][ T3615]  speed is unknown, defaulting to 1000
[ 1408.234120][ T3640] netlink: 'syz.3.15556': attribute type 10 has an invalid length.
[ 1408.236759][ T3615] wg1 speed is unknown, defaulting to 1000
[ 1408.240701][ T3640] netlink: 'syz.3.15556': attribute type 10 has an invalid length.
[ 1408.244917][ T3640] netlink: 'syz.3.15556': attribute type 10 has an invalid length.
[ 1408.381324][ T3643] bond82: entered promiscuous mode
[ 1408.383304][ T3643] 8021q: adding VLAN 0 to HW filter on device bond82
[ 1409.672244][ T3704] tipc: Resetting bearer <eth:syzkaller0>
[ 1409.759086][ T3710] mac80211_hwsim hwsim303 syzkaller0: Caught tx_queue_len zero misconfig
[ 1409.790668][ T3716] mac80211_hwsim hwsim303 syzkaller0: entered promiscuous mode
[ 1409.939738][ T1901] ip6_tnl_xmit_ctl: 11 callbacks suppressed
[ 1409.939760][ T1901] ip6_tunnel: ip6tnl6 xmit: Local address not yet configured!
[ 1410.119890][ T1895] 
[ 1410.120863][ T1895] ============================================
[ 1410.123128][ T1895] WARNING: possible recursive locking detected
[ 1410.125249][ T1895] syzkaller #0 Not tainted
[ 1410.127051][ T1895] --------------------------------------------
[ 1410.129363][ T1895] kworker/0:8/1895 is trying to acquire lock:
[ 1410.131637][ T1895] ffff88818ad65558 (&qdisc_xmit_lock_key#4){+.-.}-{3:3}, at: sch_direct_xmit+0x15f/0x4c0
[ 1410.135261][ T1895] 
[ 1410.135261][ T1895] but task is already holding lock:
[ 1410.137991][ T1895] ffff88802d68b558 (&qdisc_xmit_lock_key#4){+.-.}-{3:3}, at: sch_direct_xmit+0x15f/0x4c0
[ 1410.141648][ T1895] 
[ 1410.141648][ T1895] other info that might help us debug this:
[ 1410.144587][ T1895]  Possible unsafe locking scenario:
[ 1410.144587][ T1895] 
[ 1410.147136][ T1895]        CPU0
[ 1410.148390][ T1895]        ----
[ 1410.149699][ T1895]   lock(&qdisc_xmit_lock_key#4);
[ 1410.151628][ T1895]   lock(&qdisc_xmit_lock_key#4);
[ 1410.153568][ T1895] 
[ 1410.153568][ T1895]  *** DEADLOCK ***
[ 1410.153568][ T1895] 
[ 1410.156591][ T1895]  May be due to missing lock nesting notation
[ 1410.156591][ T1895] 
[ 1410.159679][ T1895] 15 locks held by kworker/0:8/1895:
[ 1410.161656][ T1895]  #0: ffff88816d8b0548 ((wq_completion)mld){+.+.}-{0:0}, at: process_scheduled_works+0x9ea/0x1830
[ 1410.165673][ T1895]  #1: ffffc90021bf7c40 ((work_completion)(&(&idev->mc_ifc_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa25/0x1830
[ 1410.170609][ T1895]  #2: ffff88819409d538 (&idev->mc_lock){+.+.}-{4:4}, at: mld_ifc_work+0x2d/0xe70
[ 1410.174085][ T1895]  #3: ffffffff8e760320 (rcu_read_lock){....}-{1:3}, at: mld_sendpack+0x213/0xe40
[ 1410.177493][ T1895]  #4: ffffffff8e760320 (rcu_read_lock){....}-{1:3}, at: ip6_output+0x126/0x550
[ 1410.180865][ T1895]  #5: ffffffff8e760380 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x274/0x38a0
[ 1410.184508][ T1895]  #6: ffffffff8e760320 (rcu_read_lock){....}-{1:3}, at: bond_start_xmit+0xc9/0x1960
[ 1410.188047][ T1895]  #7: ffffffff8e760380 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x274/0x38a0
[ 1410.191714][ T1895]  #8: ffff8880219b6228 (dev->qdisc_tx_busylock ?: &qdisc_tx_busylock#5){+...}-{3:3}, at: __dev_queue_xmit+0x1002/0x38a0
[ 1410.196448][ T1895]  #9: ffff88802d68b558 (&qdisc_xmit_lock_key#4){+.-.}-{3:3}, at: sch_direct_xmit+0x15f/0x4c0
[ 1410.200207][ T1895]  #10: ffffffff8e760320 (rcu_read_lock){....}-{1:3}, at: ip_output+0x5b/0x450
[ 1410.203443][ T1895]  #11: ffffffff8e760320 (rcu_read_lock){....}-{1:3}, at: ip_finish_output2+0x3c2/0x1070
[ 1410.207128][ T1895]  #12: ffffffff8e760320 (rcu_read_lock){....}-{1:3}, at: arp_xmit+0x23/0x270
[ 1410.210411][ T1895]  #13: ffffffff8e760380 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x274/0x38a0
[ 1410.214176][ T1895]  #14: ffff88818edb3228 (dev->qdisc_tx_busylock ?: &qdisc_tx_busylock#5){+...}-{3:3}, at: __dev_queue_xmit+0x1002/0x38a0
[ 1410.218939][ T1895] 
[ 1410.218939][ T1895] stack backtrace:
[ 1410.221212][ T1895] CPU: 0 UID: 0 PID: 1895 Comm: kworker/0:8 Not tainted syzkaller #0 PREEMPT(full) 
[ 1410.221229][ T1895] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[ 1410.221241][ T1895] Workqueue: mld mld_ifc_work
[ 1410.221265][ T1895] Call Trace:
[ 1410.221275][ T1895]  <TASK>
[ 1410.221283][ T1895]  dump_stack_lvl+0xe8/0x150
[ 1410.221304][ T1895]  print_deadlock_bug+0x279/0x290
[ 1410.221326][ T1895]  __lock_acquire+0x253f/0x2cf0
[ 1410.221343][ T1895]  ? skb_network_protocol+0x23d/0x3f0
[ 1410.221365][ T1895]  ? netif_skb_features+0x9bc/0xe40
[ 1410.221380][ T1895]  ? ret_from_fork_asm+0x1a/0x30
[ 1410.221398][ T1895]  ? validate_xmit_skb+0xc5f/0x14a0
[ 1410.221418][ T1895]  lock_acquire+0xf0/0x2e0
[ 1410.221432][ T1895]  ? sch_direct_xmit+0x15f/0x4c0
[ 1410.221449][ T1895]  _raw_spin_lock+0x2e/0x40
[ 1410.221466][ T1895]  ? sch_direct_xmit+0x15f/0x4c0
[ 1410.221479][ T1895]  sch_direct_xmit+0x15f/0x4c0
[ 1410.221495][ T1895]  ? __pfx_sch_direct_xmit+0x10/0x10
[ 1410.221509][ T1895]  ? arp_create+0x180/0xa00
[ 1410.221526][ T1895]  ? arp_send_dst+0xa7/0x2a0
[ 1410.221545][ T1895]  __dev_queue_xmit+0x1538/0x38a0
[ 1410.221562][ T1895]  ? __dev_queue_xmit+0x274/0x38a0
[ 1410.221576][ T1895]  ? arpt_do_table+0x261/0x1ec0
[ 1410.221592][ T1895]  ? __pfx___dev_queue_xmit+0x10/0x10
[ 1410.221606][ T1895]  ? __pfx_arpt_do_table+0x10/0x10
[ 1410.221621][ T1895]  ? trace_kmem_cache_alloc+0x29/0xf0
[ 1410.221648][ T1895]  ? NF_HOOK+0xa2/0x3c0
[ 1410.221666][ T1895]  NF_HOOK+0x33a/0x3c0
[ 1410.221684][ T1895]  ? __pfx_arp_xmit_finish+0x10/0x10
[ 1410.221701][ T1895]  ? NF_HOOK+0xa2/0x3c0
[ 1410.221717][ T1895]  ? __pfx_NF_HOOK+0x10/0x10
[ 1410.221734][ T1895]  ? __pfx_arp_xmit_finish+0x10/0x10
[ 1410.221755][ T1895]  arp_xmit+0x16c/0x270
[ 1410.221772][ T1895]  ? arp_xmit+0x23/0x270
[ 1410.221789][ T1895]  arp_solicit+0xbe0/0xe40
[ 1410.221808][ T1895]  ? arp_solicit+0x119/0xe40
[ 1410.221825][ T1895]  ? __pfx_arp_solicit+0x10/0x10
[ 1410.221859][ T1895]  ? __neigh_event_send+0xe9d/0x1530
[ 1410.221876][ T1895]  ? __pfx_arp_solicit+0x10/0x10
[ 1410.221893][ T1895]  __neigh_event_send+0xf05/0x1530
[ 1410.221911][ T1895]  neigh_resolve_output+0x198/0x750
[ 1410.221928][ T1895]  ? __pfx_ip_neigh_gw4+0x10/0x10
[ 1410.221982][ T1895]  ? ip_finish_output2+0x3c2/0x1070
[ 1410.222000][ T1895]  ip_finish_output2+0xca9/0x1070
[ 1410.222017][ T1895]  ? ip_skb_dst_mtu+0x109/0xa50
[ 1410.222034][ T1895]  ? ip_finish_output+0x33a/0x3f0
[ 1410.222051][ T1895]  ip_output+0x29f/0x450
[ 1410.222067][ T1895]  ? ip_output+0x5b/0x450
[ 1410.222083][ T1895]  iptunnel_xmit+0x59f/0xa00
[ 1410.222102][ T1895]  ip_tunnel_xmit+0x193a/0x1f20
[ 1410.222127][ T1895]  ? __pfx_ip_tunnel_xmit+0x10/0x10
[ 1410.222147][ T1895]  ? __pfx_gre_build_header+0x10/0x10
[ 1410.222164][ T1895]  ? kfree+0x1c1/0x630
[ 1410.222180][ T1895]  ? pskb_expand_head+0x560/0x1320
[ 1410.222200][ T1895]  __gre_xmit+0x19e/0x240
[ 1410.222217][ T1895]  ? __pfx___gre_xmit+0x10/0x10
[ 1410.222235][ T1895]  erspan_xmit+0xa81/0x1670
[ 1410.222256][ T1895]  ? __pfx_erspan_xmit+0x10/0x10
[ 1410.222272][ T1895]  dev_hard_start_xmit+0x2d8/0x870
[ 1410.222294][ T1895]  sch_direct_xmit+0x251/0x4c0
[ 1410.222309][ T1895]  ? __pfx_sch_direct_xmit+0x10/0x10
[ 1410.222322][ T1895]  ? ret_from_fork_asm+0x1a/0x30
[ 1410.222341][ T1895]  __dev_queue_xmit+0x1538/0x38a0
[ 1410.222358][ T1895]  ? __dev_queue_xmit+0x274/0x38a0
[ 1410.222372][ T1895]  ? __pfx___dev_queue_xmit+0x10/0x10
[ 1410.222386][ T1895]  ? __lock_acquire+0x6b5/0x2cf0
[ 1410.222408][ T1895]  ? bond_do_alb_xmit+0x600/0x820
[ 1410.222428][ T1895]  ? bond_dev_queue_xmit+0x9c/0x150
[ 1410.222447][ T1895]  bond_start_xmit+0x77d/0x1960
[ 1410.222464][ T1895]  ? bond_start_xmit+0xc9/0x1960
[ 1410.222477][ T1895]  ? __pfx_bond_start_xmit+0x10/0x10
[ 1410.222490][ T1895]  ? qdisc_pkt_len_segs_init+0x2c4/0x970
[ 1410.222503][ T1895]  ? skb_network_protocol+0x23d/0x3f0
[ 1410.222522][ T1895]  ? __pfx_passthru_features_check+0x10/0x10
[ 1410.222540][ T1895]  dev_hard_start_xmit+0x2d8/0x870
[ 1410.222561][ T1895]  __dev_queue_xmit+0x168f/0x38a0
[ 1410.222574][ T1895]  ? __dev_queue_xmit+0x274/0x38a0
[ 1410.222587][ T1895]  ? __pfx_mroute6_is_socket+0x10/0x10
[ 1410.222606][ T1895]  ? __pfx___dev_queue_xmit+0x10/0x10
[ 1410.222618][ T1895]  ? ip6_output+0x340/0x550
[ 1410.222636][ T1895]  ? ip6_finish_output2+0xd39/0x13e0
[ 1410.222653][ T1895]  ? ip6_output+0x126/0x550
[ 1410.222666][ T1895]  ip6_output+0x340/0x550
[ 1410.222682][ T1895]  NF_HOOK+0xa2/0x3a0
[ 1410.222697][ T1895]  ? NF_HOOK+0xf9/0x3a0
[ 1410.222711][ T1895]  ? __pfx_NF_HOOK+0x10/0x10
[ 1410.222727][ T1895]  ? __pfx_dst_output+0x10/0x10
[ 1410.222740][ T1895]  ? lockdep_hardirqs_on+0x7a/0x110
[ 1410.222759][ T1895]  ? __local_bh_enable_ip+0xd0/0x130
[ 1410.222776][ T1895]  ? icmp6_dst_alloc+0x3a6/0x440
[ 1410.222794][ T1895]  mld_sendpack+0x8b4/0xe40
[ 1410.222810][ T1895]  ? look_up_lock_class+0x57/0x110
[ 1410.222831][ T1895]  ? mld_sendpack+0x213/0xe40
[ 1410.222855][ T1895]  ? __pfx_mld_sendpack+0x10/0x10
[ 1410.222878][ T1895]  mld_ifc_work+0x835/0xe70
[ 1410.222896][ T1895]  ? process_scheduled_works+0xa25/0x1830
[ 1410.222913][ T1895]  process_scheduled_works+0xb02/0x1830
[ 1410.222938][ T1895]  ? __pfx_process_scheduled_works+0x10/0x10
[ 1410.222987][ T1895]  ? assign_work+0x3d5/0x5e0
[ 1410.223003][ T1895]  worker_thread+0xa50/0xfc0
[ 1410.223029][ T1895]  kthread+0x388/0x470
[ 1410.223043][ T1895]  ? __pfx_worker_thread+0x10/0x10
[ 1410.223058][ T1895]  ? __pfx_kthread+0x10/0x10
[ 1410.223070][ T1895]  ret_from_fork+0x51e/0xb90
[ 1410.223088][ T1895]  ? __pfx_ret_from_fork+0x10/0x10
[ 1410.223104][ T1895]  ? __switch_to+0xc7d/0x1450
[ 1410.223120][ T1895]  ? __pfx_kthread+0x10/0x10
[ 1410.223130][ T1895]  ret_from_fork_asm+0x1a/0x30
[ 1410.223152][ T1895]  </TASK>
[ 1410.485433][ T3728] bridge0: port 1(vlan1) entered disabled state
[ 1410.610109][ T1906] ip6_tunnel: ip6tnl5 xmit: Local address not yet configured!
[ 1410.695142][ T1906] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[ 1411.353112][ T3728] tipc: Resetting bearer <eth:syzkaller0>
[ 1411.607259][ T3715]  speed is unknown, defaulting to 1000
[ 1411.617581][   T13] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[ 1411.623975][   T13] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1411.627057][ T3715] wg1 speed is unknown, defaulting to 1000
[ 1411.632456][   T13] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[ 1411.635517][   T13] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1411.638585][   T13] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[ 1411.642608][   T13] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1411.645886][   T13] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[ 1411.649031][   T13] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
