last executing test programs:

34m34.92605297s ago: executing program 0 (id=1926):
r0 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000001080)=0x8)

34m34.846348157s ago: executing program 0 (id=1927):
r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0)

34m34.845931115s ago: executing program 0 (id=1928):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
pipe(&(0x7f0000000000)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
splice(r1, 0x0, r3, 0x0, 0x2, 0x0)
close(r2)
write(r3, &(0x7f00000000c0)="94", 0x1)
write(r0, 0x0, 0x0)

34m34.766655235s ago: executing program 1 (id=1932):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'bond0\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x0, 0x0, 0xfffffffe}}}}]}, 0x48}}, 0x0)

34m34.695656336s ago: executing program 1 (id=1933):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x60, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_NETMASK={0x5, 0x14, 0x4f}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x48}]}]}, 0x60}}, 0x2)

34m34.695436107s ago: executing program 1 (id=1934):
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_STAT_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="18000000141401"], 0x18}}, 0x0)

34m34.695291825s ago: executing program 1 (id=1935):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r1, 0x1, 0x4c, &(0x7f0000000000), 0x4)
sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)
recvmsg$unix(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [<r2=>0xffffffffffffffff]}}], 0x18}, 0x0)
ioctl$TUNSETNOCSUM(r2, 0xc040ff0b, 0x200000000013)

34m34.617295833s ago: executing program 2 (id=1936):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xb, 0xf, 0x200cc, 0x6, 0x5}, 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)='T', &(0x7f0000000240), 0x4af, r0}, 0x38)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000700)={0x0, &(0x7f0000000540)=""/245, &(0x7f00000000c0), &(0x7f0000000680), 0x2, r0}, 0x38)

34m34.616999842s ago: executing program 0 (id=1937):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b800000019000100000000000000000000000000000000000000000000000000fe8000000000000000833449155bf3c2640000000000000002000010"], 0xb8}}, 0x0)
sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x10, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="6501000014"], 0x188}}, 0x0)
mmap(&(0x7f0000c61000/0x4000)=nil, 0x4000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0)
r2 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000140)={&(0x7f0000000000)=""/64, 0x1128000, 0x1000, 0x4}, 0x20)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0)
r3 = socket$inet6(0xa, 0x3, 0x6)
ioctl$sock_inet6_SIOCDIFADDR(r3, 0x8936, &(0x7f0000000040)={@remote, 0x62})
r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
connect$bt_sco(r4, &(0x7f0000000100)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff)
r6 = socket$alg(0x26, 0x5, 0x0)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x101801, 0x0)
ioctl$TUNGETFEATURES(r7, 0x800454cf, 0x0)
bind$alg(r6, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000000)="0800d907", 0x4)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r5, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x2c, r8, 0x200, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x73}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x15}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x4000000)
sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000a8c0)={&(0x7f000000a7c0)={0x18, 0x2, 0x1, 0x207, 0x0, 0x0, {0x2, 0x0, 0x9}, [@CTA_TUPLE_ORIG={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x800}, 0x80)

34m34.614787627s ago: executing program 1 (id=1938):
r0 = socket(0x2, 0x80805, 0x0)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000003c0)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e21, @private=0xa010101}]}, &(0x7f0000000240)=0x10)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={<r2=>0x0}, &(0x7f00000004c0)=0x8)
setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000040)={r2, 0xffff}, 0x8)

34m34.474121542s ago: executing program 2 (id=1939):
unshare(0x40400)
r0 = socket$l2tp6(0xa, 0x2, 0x73)
connect$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x200, 0xffffffff}, 0x20)

34m34.397165756s ago: executing program 2 (id=1940):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x2a, &(0x7f0000000040)=ANY=[@ANYBLOB="020000000000000002000000e0"], 0x190)
setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="020000000000000002000000e001"], 0x190)
close(0x3)

34m34.346907102s ago: executing program 0 (id=1941):
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x15, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe8a, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27}, 0x48)

34m34.346501774s ago: executing program 2 (id=1942):
r0 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0x3, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xc}, 'erspan0\x00'}}, 0x1e)
connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x0, @broadcast, 'ip6gre0\x00'}}, 0x1e)

34m34.282546632s ago: executing program 2 (id=1943):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0x3, &(0x7f0000000440)=@framed, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

34m34.216727208s ago: executing program 2 (id=1944):
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), 0xffffffffffffffff)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0)
r1 = openat$cgroup_type(r0, &(0x7f0000000300), 0x2, 0x0)
write$cgroup_type(r1, &(0x7f0000000280), 0x9)
r2 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0)
write$cgroup_pid(r2, &(0x7f0000000c40), 0x12)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
write$cgroup_pid(r2, &(0x7f0000000080), 0x12)
r4 = socket$kcm(0x29, 0x2, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, 0x0, &(0x7f0000000140)='GPL\x00'}, 0x94)
r6 = socket$kcm(0x2, 0x1, 0x0)
sendmsg$inet(r6, &(0x7f0000000300)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x20000015)
ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x89e2, &(0x7f0000000180))
ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, &(0x7f0000000040)={r6, r5})
r7 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff)
ioctl$IOCTL_GET_NCIDEV_IDX(r7, 0x0, &(0x7f00000000c0))
write$nci(r7, &(0x7f0000000300)=ANY=[], 0xc)
write$nci(r7, &(0x7f0000000040)=ANY=[@ANYBLOB="5001"], 0x14)
write$nci(r7, 0x0, 0x0)
r8 = openat$cgroup_ro(r3, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0)
write$cgroup_int(r8, &(0x7f0000000200)=0x1, 0x12)

34m29.845262232s ago: executing program 1 (id=1945):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_VERDICT(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)={0x14, 0x1, 0x3, 0x401, 0x0, 0x0, {0x7, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0)

34m22.932081569s ago: executing program 0 (id=1946):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x8, 0x9, 0x9, 0x1, 0xffffffffffffffff, 0x7fff}, 0x50)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, r0}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r0, <r2=>0xffffffffffffffff}, &(0x7f0000000800), &(0x7f0000000840)}, 0x20)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x19, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b705000008000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0x70000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50)

34m17.811623346s ago: executing program 32 (id=1944):
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), 0xffffffffffffffff)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0)
r1 = openat$cgroup_type(r0, &(0x7f0000000300), 0x2, 0x0)
write$cgroup_type(r1, &(0x7f0000000280), 0x9)
r2 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0)
write$cgroup_pid(r2, &(0x7f0000000c40), 0x12)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
write$cgroup_pid(r2, &(0x7f0000000080), 0x12)
r4 = socket$kcm(0x29, 0x2, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, 0x0, &(0x7f0000000140)='GPL\x00'}, 0x94)
r6 = socket$kcm(0x2, 0x1, 0x0)
sendmsg$inet(r6, &(0x7f0000000300)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x20000015)
ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x89e2, &(0x7f0000000180))
ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, &(0x7f0000000040)={r6, r5})
r7 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff)
ioctl$IOCTL_GET_NCIDEV_IDX(r7, 0x0, &(0x7f00000000c0))
write$nci(r7, &(0x7f0000000300)=ANY=[], 0xc)
write$nci(r7, &(0x7f0000000040)=ANY=[@ANYBLOB="5001"], 0x14)
write$nci(r7, 0x0, 0x0)
r8 = openat$cgroup_ro(r3, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0)
write$cgroup_int(r8, &(0x7f0000000200)=0x1, 0x12)

34m6.522588082s ago: executing program 33 (id=1946):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x8, 0x9, 0x9, 0x1, 0xffffffffffffffff, 0x7fff}, 0x50)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, r0}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r0, <r2=>0xffffffffffffffff}, &(0x7f0000000800), &(0x7f0000000840)}, 0x20)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x19, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b705000008000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0x70000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50)

34m6.053135552s ago: executing program 34 (id=1945):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_VERDICT(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)={0x14, 0x1, 0x3, 0x401, 0x0, 0x0, {0x7, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0)

1.208632221s ago: executing program 3 (id=28911):
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r1)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x130}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x4c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x20, 0x3, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x7}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
sendto$inet6(r3, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0)

1.206830116s ago: executing program 3 (id=28913):
socket$nl_generic(0x10, 0x3, 0x10) (async)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x60, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x4}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x60}}, 0x0) (async)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x60, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x4}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x60}}, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x8e40, 0x0)
close(r3) (async)
close(r3)
r4 = socket$netlink(0x10, 0x3, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x50) (async)
r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x50)
ioctl$XFS_IOC_FSGEOMETRY_V1(r5, 0x80705864, &(0x7f0000000380)) (async)
ioctl$XFS_IOC_FSGEOMETRY_V1(r5, 0x80705864, &(0x7f0000000380))
r6 = accept4$inet(0xffffffffffffffff, &(0x7f0000000300)={0x2, 0x0, @local}, &(0x7f0000000740)=0x10, 0x80800)
setsockopt$inet_pktinfo(r6, 0x0, 0x8, &(0x7f0000000780)={0x0, @loopback, @remote}, 0xc)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="5c0000000206010100000000000000000400ffff14000780080012400000000505001500040000000500010006000000050005000a00000005000400000000000900020073797a31000000000d000300686173683a6e65740000008b2500"/108], 0x5c}, 0x1, 0x0, 0x0, 0x4044081}, 0x0)
syz_genetlink_get_family_id$devlink(&(0x7f0000000240), r4) (async)
r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000240), r4)
sendmsg$DEVLINK_CMD_TRAP_SET(r4, &(0x7f0000000680)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000040}, 0xc, &(0x7f0000000640)={&(0x7f0000000980)=ANY=[@ANYBLOB="dc010000", @ANYRES16=r8, @ANYBLOB="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"], 0x1dc}, 0x1, 0x0, 0x0, 0x48000}, 0xb0923ee0ca658df3)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r9 = socket$netlink(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0) (async)
r10 = socket$nl_route(0x10, 0x3, 0x0)
r11 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r12=>0x0})
sendmsg$nl_route_sched(r10, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r12, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084)
r13 = socket$netlink(0x10, 0x3, 0x0)
r14 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r15=>0x0})
sendmsg$nl_route_sched(r13, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r15, {0x4}, {0xffff}, {0x2, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x3, [0xc, 0x9, 0x0, 0xf, 0x10, 0x2, 0x6, 0x3, 0x8, 0x2, 0x0, 0x1, 0x8, 0x1, 0x10, 0x4], 0x3, [0xc, 0x101, 0x7fff, 0x2002, 0x1, 0x4, 0x6, 0xd06, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0x111, 0x100], [0xfff1, 0x5, 0xffff, 0xfff2, 0x4, 0x8, 0x7, 0x2a, 0x401, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x4]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x810}, 0x0)
r16 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r16)
sendmsg$TIPC_CMD_ENABLE_BEARER(r16, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000400)=ANY=[@ANYRESOCT=r9, @ANYRES16=r14, @ANYRES64=r14], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x40000) (async)
sendmsg$TIPC_CMD_ENABLE_BEARER(r16, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000400)=ANY=[@ANYRESOCT=r9, @ANYRES16=r14, @ANYRES64=r14], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x40000)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000007500)=ANY=[@ANYBLOB="2c0000003e0007012fbd700000000000017c00000400fc980a000180356e0600d20000000800028004003380"], 0x2c}, 0x1, 0x0, 0x0, 0xc000}, 0xc040)

1.197562128s ago: executing program 5 (id=28915):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$igmp(0x2, 0x3, 0x2)
socket$nl_xfrm(0x10, 0x3, 0x6)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000100), 0xffffffffffffffff)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
socket$igmp(0x2, 0x3, 0x2)
ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000100)={'wpan0\x00', <r5=>0x0})
sendmsg$NL802154_CMD_SET_PAN_ID(r2, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000300)={&(0x7f0000000140)={0x24, r3, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@NL802154_ATTR_PAN_ID={0x6}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}]}, 0x24}, 0x1, 0x0, 0x0, 0x40004004}, 0x20040044)
setsockopt$MRT_ADD_MFC_PROXY(r1, 0x0, 0xd2, 0x0, 0x0)
listen(0xffffffffffffffff, 0x400004)
setsockopt$inet6_IPV6_DSTOPTS(0xffffffffffffffff, 0x29, 0x3b, 0x0, 0x48)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x2, 0x3, 0x401, 0x0, 0x0, {0x0, 0x0, 0x10}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x2b}}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40040}, 0x0)
r8 = socket$netlink(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r8, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000140)={0x1c, 0x2, 0x3, 0x201, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="280000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="0080050000000000298195d88e0d63b64085423ed700001b3200000000"], 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYRES64=0x0], 0x20}, 0x1, 0x0, 0x0, 0x4048011}, 0x8010)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)
r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r10 = openat$cgroup_procs(r9, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0)
r11 = openat$cgroup_procs(r9, &(0x7f00000002c0)='tasks\x00', 0x2, 0x0)
write$cgroup_pid(r10, &(0x7f00000000c0), 0x12)
pread64(r11, &(0x7f0000002840)=""/4096, 0x1000, 0x4)
setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000100)=""/74, 0x328000, 0x1000}, 0x20)
syz_genetlink_get_family_id$tipc(&(0x7f0000000140), r0)

1.191116301s ago: executing program 3 (id=28916):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async)
r1 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'veth0_to_team\x00', <r2=>0x0}) (async)
socket$unix(0x1, 0x5, 0x0) (async)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
r3 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000100)=0x8) (async)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
write$tun(r4, &(0x7f0000000000)=ANY=[], 0x38) (async)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r4, 0x0) (async)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x430881, 0x0)
close(r5) (async)
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0xffffffffffffff2d, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0)
r6 = socket(0x2a, 0x2, 0x0)
getsockname$packet(r6, &(0x7f0000000200)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
sendmsg$nl_route_sched(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x78, 0x24, 0xf0b, 0x70bd2a, 0x2001, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0x5, 0xd}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0xff, 0xec2, 0x5, 0x2, 0x400}, 0x10000, 0x1, 0x7ff, 0x6, 0xe, 0x14, 0x1f, 0x1b, 0x6, 0x2, {0x6, 0x19d, 0xa9, 0x8, 0x7743, 0xfd1}}}}]}, 0x78}}, 0x0) (async)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000014c0)=@newtfilter={0x2c, 0x2c, 0x4, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r7, {0xe, 0x7}, {0x0, 0xffe0}, {0x4, 0xffff}}, [@TCA_CHAIN={0x8, 0xb, 0x9a}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24044801}, 0x4000) (async)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4000000040000100fcff07000400000001000000040048802000e67f1c00108018000b8008000100ac1414bb0c003300060000000000000008000200", @ANYRES32=r8, @ANYBLOB], 0x40}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) (async)
r9 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r9, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async)
sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x3c, 0x2c, 0xf3f, 0x30bd29, 0x25dfd3fd, {0x0, 0x0, 0x0, r2, {0xffe0, 0xfff2}, {}, {0x7, 0x4}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_IPV4_DST={0x8, 0xc, @multicast2}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20041890}, 0x0) (async)
getuid() (async)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000080)=0xc) (async)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000002c0), &(0x7f0000000300)=0xc) (async)
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r10, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240"], 0x7c}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async)
r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="22000000040000001000000012"], 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r11}, 0x4)

1.015509764s ago: executing program 3 (id=28917):
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000580)={&(0x7f0000000380)={0x2, 0x1, 0x0, 0x0, 0xa, 0x0, 0x70bd2c, 0x25dfdbfb, [@sadb_address={0x3, 0x6, 0x3c, 0x0, 0x0, @in={0x2, 0x4e20, @remote}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x4e21, @multicast2}}, @sadb_x_sa2={0x2, 0x13, 0x1, 0x0, 0x0, 0x70bd29, 0x3503}]}, 0x50}, 0x1, 0x7}, 0x0)
r1 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r1)
getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x56)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, 0x49811, 0x49841}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8, 0x2, 0x4}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000884}, 0x0)
sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x40880, &(0x7f0000000200)={0x11, 0x86dd, r2, 0x1, 0x4, 0x6, @local}, 0x14)
r3 = socket$inet_smc(0x2b, 0x1, 0x0)
r4 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0)
recvmmsg(r4, &(0x7f0000001540)=[{{0x0, 0x0, 0x0}, 0x7}], 0x1, 0x2000, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1e00000000000000ca0000000300000000000000", @ANYRES32=0x1, @ANYBLOB="000000000000000000000020000000000000000035817334fcad8ec6cf093c5cce6bdc476f985d5ea7107c456c95fe6a272935259f03974585aea5b9b7eb7aed9c0038d498ec7fbc0c5b091192f451ba2ee5dbf1c9e22de96a8a76a5bc15b6a6944f8539bf3525a8eab83848c44d5e5ba19d09f204c1f2ffaf30e1ed482624d0e72d87cd3c0c3726e3a51037db2b331357bcb272910c0af8a8b51738f054"], 0x50)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
r6 = socket(0x1, 0x803, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket(0x10, 0x803, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r7)
getsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000600)={{{@in6=@mcast2, @in=@broadcast}}, {{}, 0x0, @in=@remote}}, &(0x7f0000000700)=0xe8)
sendmsg$ETHTOOL_MSG_DEBUG_SET(r7, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f00000000c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0000000000000000000c000280", @ANYRES16=r7, @ANYRES16=r5], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0xc4010)
setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, 0x0, 0x0)
connect$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x10)
shutdown(r3, 0x1)
r9 = socket$kcm(0x11, 0x3, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000340)={@in={{0x2, 0x10, @broadcast}}, 0x0, 0x0, 0x7, 0x0, "94713ce1a606754bab1cb61212bb07a2d70004000000000000071f0d1aadd97b9640d9a0cd7ba71a5e9aec7f03d4406a7710c4a1264cf8960d7669bcd7589d209bc45b4064028eb3faff7fb125736e00"}, 0xfffffffffffffffe)
r10 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="44000000190001090000000024000000021800000002fd010000000008000100ac141400080005006401010010000b800c000100"], 0x44}}, 0x0)
sendmsg$kcm(r9, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x8, r2, 0x17}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000540)="f6185f", 0x3}], 0x1}, 0x4)

1.012764261s ago: executing program 5 (id=28918):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000feffffff0000000000000000850000002800000018010000646c6c2500000000002020207b1af8ff00000000bfa10000000000000701000001ffffffb702000008000000b7030000feffffff850000006000000095"], &(0x7f0000000000)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000004a00010000000000000000000a"], 0x1c}}, 0x0)

901.62111ms ago: executing program 5 (id=28920):
r0 = socket(0x28, 0x803, 0x0)
syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid\x00')
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x4}, @IFLA_BOND_ARP_VALIDATE={0x8}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x400c89c)
syz_genetlink_get_family_id$fou(&(0x7f0000000040), r0)

900.630504ms ago: executing program 3 (id=28921):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0)
getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4805}, 0x20000050)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a40000000160a03020000000000000000020000000900020073797a30000000000900010073797a3000000000140003800800014000000000080002400000000014000000110001"], 0x68}, 0x1, 0x0, 0x0, 0x800}, 0x0)
sendmsg$NFT_BATCH(r4, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELFLOWTABLE={0x2c, 0x18, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x6c, 0x16, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x40, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'team_slave_0\x00'}, {0x14, 0x1, 'vlan1\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x200}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xc0}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000940)=@delchain={0x34, 0x64, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xffe0}, {0x10, 0xffff}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}}, 0x4040004)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$XFS_IOC_FSGROWFSRT(r1, 0x40105870, &(0x7f00000000c0)={0x5})
r6 = socket(0x10, 0x803, 0x4)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x20, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0x0, 0x0, 0x0, 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff80fe}, 0x50)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r6)
getsockname$packet(r6, &(0x7f0000000180)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
socket$inet6_sctp(0xa, 0x5, 0x84)
r9 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e22, @private=0xa010101}]}, &(0x7f0000000180)=0x10)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r9, 0x84, 0x1d, &(0x7f0000000200)={0x1, [<r10=>0x0]}, &(0x7f0000000080)=0x8)
r11 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r11, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000000)={r10, 0x1000001}, 0x8)
getsockopt$inet_sctp_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f0000000300)=@sack_info={r10, 0x8, 0x1}, &(0x7f0000000340)=0xc)
sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@delchain={0x44, 0x2c, 0xf31, 0x70bd27, 0x2000, {0x0, 0x0, 0x0, r8, {0x8}, {0xfff2, 0xffff}, {0xffff, 0xffe0}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_IPV4_DST={0x8, 0xc, @multicast1}, @TCA_FLOWER_CLASSID={0x8, 0x1, {0xb, 0x7}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4008854}, 0x4010)

888.922171ms ago: executing program 5 (id=28922):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020692500000000002020207b1af8ff00000000bfc100000000000007010000f8ffffffb702000008000000b70300060000000085000000720000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

812.356315ms ago: executing program 4 (id=28923):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', <r2=>0x0})
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000700)={&(0x7f00000005c0)=@RTM_DELMDB={0x138, 0x55, 0x400, 0x70bd26, 0x25dfdbfb, {0x7, r2}, [@MDBA_SET_ENTRY={0x20, 0x1, {r2, 0x1, 0x2, 0x1, {@ip4=@local, 0x8edd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r2, 0x0, 0x1, 0x2, {@in6_addr=@ipv4={'\x00', '\xff\xff', @broadcast}, 0x86dd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r2, 0x0, 0x0, 0x10, {@in6_addr=@loopback, 0x800}}}, @MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x1, 0x3, 0x0, {@ip4=@multicast1, 0x800}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r2, 0x0, 0x1, 0x0, {@ip4=@private=0xa010100, 0x109ba}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r2, 0x1, 0x3, 0x3, {@ip4=@multicast2, 0x86dd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r2, 0x1, 0x3, 0x1, {@in6_addr=@mcast1, 0x86dd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r2, 0x0, 0x2, 0x0, {@in6_addr=@mcast1}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r2, 0x0, 0x3, 0x3, {@in6_addr=@empty, 0x800}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x814}, 0x4008800)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r4, 0x8001000000000000, 0x40, &(0x7f0000001500)=@raw={'raw\x00', 0x8, 0x3, 0x248, 0xd8, 0x11, 0x148, 0xd8, 0x0, 0x1b0, 0x2a8, 0x2a8, 0x1b0, 0x2a8, 0x3, 0x0, {[{{@ip={@loopback, @dev={0xac, 0x14, 0x14, 0x20}, 0x0, 0xff, 'pim6reg1\x00', 'veth1_macvtap\x00', {0xff}, {0xff}, 0x4, 0x3, 0x40}, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x3, 0x1, 0x8001, '\x00', 'syz1\x00', {0x288}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010102, 0xffffffff, 0xffffff00, 'nr0\x00', 'macsec0\x00', {}, {}, 0x6, 0x2, 0x8}, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00', {0xfffffffffffffffc}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2a8)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x11c, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r2, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0xec, 0x2, {{0xa, [0xb, 0x2, 0xb, 0x89, 0xd, 0x4, 0x1, 0x6, 0xa, 0xf, 0x10, 0x2, 0xd, 0x8, 0x15, 0x9], 0x1, [0x9, 0x67ef, 0x2, 0x4, 0x4, 0x8, 0x3, 0xfff9, 0x9, 0xd4e8, 0x6, 0x200, 0x10, 0x0, 0xc73, 0x5], [0x800, 0x1, 0x4, 0x3d3e, 0xff, 0x4, 0x2, 0x5, 0x81, 0xc5, 0x8000, 0xc, 0x3, 0x7, 0x8, 0xce]}, [@TCA_MQPRIO_MAX_RATE64={0x70, 0x4, 0x0, 0x1, [{0xc, 0x4, 0x8}, {0xc, 0x4, 0xffffffffffffe3f2}, {0xc, 0x4, 0xffffffffffff0001}, {0xc, 0x4, 0x5}, {0xc, 0x4, 0x5}, {0xc, 0x4, 0x2}, {0xc, 0x4, 0x7}, {0xc, 0x4, 0x9}, {0xc, 0x4, 0x2800000000000000}]}, @TCA_MQPRIO_SHAPER={0x6}, @TCA_MQPRIO_MIN_RATE64={0x1c, 0x3, 0x0, 0x1, [{0xc, 0x3, 0x8000000000000001}, {0xc, 0x3, 0x8000}]}]}}}]}, 0x11c}, 0x1, 0x0, 0x0, 0x800}, 0x0)
r5 = socket$inet6_mptcp(0xa, 0x1, 0x106)
ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000000)={'netdevsim0\x00', &(0x7f0000000180)=@ethtool_ringparam={0x13, 0x3, 0x0, 0x0, 0x0, 0xfffffffd}})
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="2c000000140000012bbd7000ffdbdf250a1f42c8", @ANYRES32=r2, @ANYBLOB="1400020000000000000001000000000000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x24040054}, 0x8000)
socket(0x8, 0x800, 0x7fffffff)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x12, 0x4, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = socket$xdp(0x2c, 0x3, 0x0)
r7 = socket$packet(0x11, 0x2, 0x300)
bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0xc, 0x274, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8001}, [@generic={0x91, 0x1, 0x1, 0x8f}, @map_idx_val={0x18, 0xb, 0x6, 0x0, 0x3, 0x0, 0x0, 0x0, 0xff}, @printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xf}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r7}}]}, &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94)
mmap$xdp(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xd, 0x10010, r6, 0x180000000)

808.650874ms ago: executing program 5 (id=28924):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x4000000, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="020f0000050000000000efff0000000003000500000000007321fa"], 0x28}}, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="740000001000210400000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="adffa8886004000024001280090001007866726d000000001400028008000100010000000800020011000000050021000000000008000a00", @ANYRES32, @ANYBLOB='\n\x00:'], 0x74}}, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
r3 = socket(0x28, 0x5, 0x0)
bind$vsock_stream(r3, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10)
r4 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r4, &(0x7f0000000440), 0x10)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0xe0, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x90646}, [@IFLA_VF_PORTS={0xc0, 0x18, 0x0, 0x1, [{0x64, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0x8, 0x2, '#&$\x00'}, @IFLA_PORT_VF={0x8, 0x1, 0x9}, @IFLA_PORT_VF={0x8, 0x1, 0x7}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "e0674937e84f7a49c97fe387b8a922a8"}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "5b292364ab24f971995c6cb56ff64540"}, @IFLA_PORT_PROFILE={0x9, 0x2, 'bond\x00'}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "ba1f920d7448e3b1952754ad58c25cd0"}]}, {0x38, 0x1, 0x0, 0x1, [@IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "01313269604948ac163133e6baf75336"}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "f77d9b4d06c31d886699b02a17418e56"}, @IFLA_PORT_PROFILE={0x9, 0x2, 'bond\x00'}]}, {0x20, 0x1, 0x0, 0x1, [@IFLA_PORT_HOST_UUID={0x14, 0x5, "d9f33f96ecb494e2270c4e4dd419d747"}, @IFLA_PORT_VF={0x8, 0x1, 0x4}]}]}]}, 0xe0}, 0x1, 0x0, 0x0, 0x690}, 0x20048040)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket(0x1, 0x803, 0x0)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x4c}}, 0x0)

683.980899ms ago: executing program 5 (id=28925):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x0, &(0x7f0000000340)}, 0x10)
bind$inet(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10)
socket$packet(0x11, 0xa, 0x300)
r1 = socket$alg(0x26, 0x5, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000e40)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0x20}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @dup={{0x8}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, "ae"}]}], {0x14}}, 0xb8}}, 0x0)
bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x45)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000280)=@newlink={0x3c, 0x29, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4, 0x0, 0x340, 0x8042}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x4}}}, @IFLA_LINK={0x8}]}, 0x3c}}, 0x0)
r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
setsockopt$bt_BT_VOICE(r4, 0x112, 0xb, &(0x7f0000000000)=0x63, 0x2)
r5 = accept4(r1, 0x0, 0x0, 0x0)
r6 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r6, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10)
ioctl$AUTOFS_IOC_PROTOVER(r6, 0x80049363, &(0x7f0000000040))
r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000280), r0)
sendmsg$IPVS_CMD_GET_SERVICE(r5, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x24000}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x14, r7, 0x100, 0x70bd25, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000011}, 0x8044)
setsockopt$sock_int(r1, 0x1, 0x2e, &(0x7f0000000100)=0x3, 0x4)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
socket(0x400000000010, 0x3, 0x4)
connect$inet(r6, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r6, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x5f0c, 0x4}, @window={0x3, 0xffff, 0x4}], 0x6)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000200)={0x0, 0x29, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x1, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x1021, 0x3}, [@IFLA_GROUP={0x8}, @IFLA_MTU={0x8, 0x4, 0x500}]}, 0x30}, 0x1, 0x0, 0x0, 0x801}, 0x4000000)
setsockopt$inet_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f00000001c0), 0x4)
sendto$inet(r6, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0)
recvfrom$inet(r6, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25)

683.419508ms ago: executing program 4 (id=28926):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="0000000000004a641c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010001fff0000000001000000000000d7", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e0000000400028008000a00", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x1, 0x803, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
r6 = socket$netlink(0x10, 0x3, 0x0)
r7 = socket(0x10, 0x803, 0x8)
setsockopt$RDS_FREE_MR(r7, 0x114, 0x3, &(0x7f0000000040)={{0x9c}, 0x50}, 0x10)
sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x8801}, 0x8000)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x4000)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x60, &(0x7f0000000300)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c00000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800b0001006772657461700000240002800800070064010100060003001008000008001500700f0d0008000700ac1414bb08000a00", @ANYRES32=r8], 0x5c}}, 0x40)
r9 = socket(0x2, 0x805, 0x0)
r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r10, &(0x7f0000000000)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r10, 0x0)
getsockopt$inet_sctp_SCTP_ASSOCINFO(r9, 0x84, 0x1, &(0x7f0000000180)={0x0, 0x4, 0x8, 0x80000000, 0x7fff, 0x5}, &(0x7f00000001c0)=0x14)
r11 = socket(0x2, 0x80805, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84)
close(0x3)
sendmmsg$inet_sctp(r11, 0x0, 0x0, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c0000001000030425bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="0005000082180000140012800b00010062726964676500000400028008000a00", @ANYRES32=r5], 0x3c}, 0x1, 0x0, 0x0, 0x24000884}, 0x8000)
socket$nl_route(0x10, 0x3, 0x0)
r12 = socket(0x1, 0x803, 0x0)
getsockname$packet(r12, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)

472.82436ms ago: executing program 4 (id=28927):
r0 = socket$inet_udp(0x2, 0x2, 0x0) (async)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="240000002000010327bd7000ffdbdf2502000000000081001e000000080006"], 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x20040000) (async)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYRES16=r1, @ANYRESHEX=r0, @ANYRESOCT, @ANYRESDEC=r1], 0x28}, 0x1, 0x0, 0x0, 0x20000004}, 0x0)
setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@remote, @in=@broadcast, 0x4e23, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x4000000000, 0x0, 0x0, 0x9, 0x0, 0xfffffffffffffffe}, {0x0, 0xfffffffffffffffd, 0x8000, 0x80000}, 0x0, 0x3, 0x1}, {{@in6=@loopback, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x0, 0x3, 0xb7, 0xfffffff9, 0xfffffffe}}, 0xe8)
socket$netlink(0x10, 0x3, 0x0) (async)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x45) (async)
r3 = accept4(r2, 0x0, 0x0, 0x0) (async)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) (async)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) (async)
sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a64000000030a0fdb00000000000000000a0000050900030073797a30000000000900010073797a31000000001400048008000240a04b3d02080001400000000308000540000000001c0008800c00014000000000000000090c000240000000000018ab6e14000000110001"], 0x8c}, 0x1, 0x0, 0x0, 0x24000850}, 0x24000840)
r5 = socket$kcm(0xa, 0x5, 0x0)
sendmsg$kcm(r5, &(0x7f0000002dc0)={&(0x7f0000001640)=@l2tp6={0xa, 0x0, 0x0, @local, 0x3}, 0x80, &(0x7f0000000000)=[{&(0x7f00000002c0)='\t', 0x1}], 0x1}, 0x41)
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, &(0x7f0000000180)={0x0, 0x400, 0x6}, 0x0) (async)
socket$netlink(0x10, 0x3, 0x15) (async)
readv(r3, &(0x7f0000000140)=[{&(0x7f0000000600)=""/152, 0x98}], 0x1) (async)
r6 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_TX_RING(r6, 0x11b, 0x6, &(0x7f0000000000)=0x40000000, 0x4)
socket$nl_route(0x10, 0x3, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
recvmmsg(r3, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) (async)
sendmmsg$unix(r3, &(0x7f00000000c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24048004}}], 0x1, 0xc880) (async)
socket$nl_route(0x10, 0x3, 0x0)
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
splice(0xffffffffffffffff, 0x0, r7, 0x0, 0x6, 0x0) (async)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x31, r7, 0x0) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000500000073019f000000000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="9feb010018000000000000000800000000000000000000916eed"], 0x0, 0x1a, 0x0, 0x1, 0x3, 0x10000}, 0x28)

472.06664ms ago: executing program 4 (id=28928):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0xa, 0xb, 0x42, 0x3e, 0x42}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r0, <r1=>0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000180)}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r1}, &(0x7f0000000140), &(0x7f0000000280)}, 0x20)
r2 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r1, &(0x7f0000000000)="c99b9abca9b708f569ac2d09d2406dcc1c333828aa967d180dbc5455225c021bb673021d74ad7e3935324ca80b225875523ad41e273f2078b4270ef6efd443111bb232f2af081ba3ff9216b31fff3e2a1ca3d29d1d1ad553f0abd3c3eca1c949a9c8c9007cdd2426dbf75664bd25613f30d15f", &(0x7f00000000c0)=@tcp6=r2}, 0x20)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r4)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r5)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380010000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000018000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c0001c006000100d9030000080003400000000114000000110001"], 0x70}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40)
sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000e"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
r7 = socket$nl_audit(0x10, 0x3, 0x9)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'veth0_to_bridge\x00', <r8=>0x0})
sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x401, 0x20700, 0x2000000, {0x0, 0x0, 0x0, 0x0, 0x8203}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x44}, 0x1, 0x0, 0x0, 0x20004885}, 0x4054)

332.599634ms ago: executing program 4 (id=28929):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="68000000100001002fbd7000fddbdf2500000000", @ANYRES32, @ANYBLOB="0201000000000000140003006e657464657673696d3000000000000034001680300001802c"], 0x68}}, 0x24040800)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup/syz0\x00', 0x1ff)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_pressure(r0, &(0x7f0000000100)='cpu.pressure\x00', 0x2, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/58, 0x3a}], 0x1, 0x0, 0x0) (async)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/58, 0x3a}], 0x1, 0x0, 0x0)
syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f9078640101000000000024806558000000000000000010000800000086dd"], 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c000280080001400000000014000180090001006cdbf80789f3f947dd000280080003"], 0xe4}}, 0x20050840)
r2 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b09"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840)
sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x41, &(0x7f0000000200)=0x474c, 0x4)
bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) (async)
connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10)
sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r6, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRESDEC=r0, @ANYRESHEX=r4], 0x3c}}, 0x0)
sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="6c00000010001fff109e00008000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000003f0000440012800b00010067656e6576650000340002800500030003000000060005004e20000005000400ab000000050009000100000005000a0001000000050009000100000008000a00", @ANYRES32=r7], 0x6c}, 0x1, 0x0, 0x0, 0x1}, 0x0)
socket(0x10, 0x3, 0x0) (async)
r8 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="300000001c000104000000000000000002000000", @ANYRES32=r7, @ANYBLOB="000014000a000100aaaaaaaeaaaa000008000f00010000003e11859a3351e595fc6522303ecd2fe041"], 0x30}, 0x1, 0x0, 0x0, 0x20000}, 0x0) (async)
sendmsg$nl_route(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="300000001c000104000000000000000002000000", @ANYRES32=r7, @ANYBLOB="000014000a000100aaaaaaaeaaaa000008000f00010000003e11859a3351e595fc6522303ecd2fe041"], 0x30}, 0x1, 0x0, 0x0, 0x20000}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$TIPC_NL_PEER_REMOVE(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="0152000028bd7000fddbdf25140000001c0007800c0003000d000000000000000c0004008100000000000000"], 0x30}, 0x1, 0x0, 0x0, 0x44800}, 0x50) (async)
sendmsg$TIPC_NL_PEER_REMOVE(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="0152000028bd7000fddbdf25140000001c0007800c0003000d000000000000000c0004008100000000000000"], 0x30}, 0x1, 0x0, 0x0, 0x44800}, 0x50)
sendmsg$TIPC_NL_BEARER_ADD(r8, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000240)={&(0x7f00000000c0)={0xdc, r10, 0x300, 0x70bd28, 0x25dfdbfd, {}, [@TIPC_NLA_LINK={0xc8, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xe}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1409}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffb}]}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xb51}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xbfb}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xa97}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x31287e58}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xa3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x44}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fff}]}]}]}, 0xdc}, 0x1, 0x0, 0x0, 0x40}, 0x40000) (async)
sendmsg$TIPC_NL_BEARER_ADD(r8, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000240)={&(0x7f00000000c0)={0xdc, r10, 0x300, 0x70bd28, 0x25dfdbfd, {}, [@TIPC_NLA_LINK={0xc8, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xe}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1409}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffb}]}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xb51}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xbfb}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xa97}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x31287e58}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xa3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x44}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fff}]}]}]}, 0xdc}, 0x1, 0x0, 0x0, 0x40}, 0x40000)
setsockopt$inet_int(r3, 0x0, 0xc, &(0x7f0000000040)=0xfffffffc, 0x4) (async)
setsockopt$inet_int(r3, 0x0, 0xc, &(0x7f0000000040)=0xfffffffc, 0x4)
setsockopt$inet_int(r3, 0x0, 0xd, &(0x7f0000000300)=0x101, 0x4) (async)
setsockopt$inet_int(r3, 0x0, 0xd, &(0x7f0000000300)=0x101, 0x4)

133.665378ms ago: executing program 4 (id=28930):
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000000)=0x8, 0x4)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@getqdisc={0x24, 0x26, 0x52e, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x3, 0x10}, {0x8, 0xf}, {0xf, 0xa}}}, 0x24}}, 0x10)
sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)=ANY=[@ANYBLOB="60b80000", @ANYRES16, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32=<r1=>0xffffffffffffffff, @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x4c14)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c0000001000daf3715ede9ef24200007a000000", @ANYRES32=r1, @ANYBLOB="00000000081000001c0012800b00010062726964676500000c00028004001c"], 0x3c}, 0x1, 0x0, 0x0, 0x34001843}, 0x4004000)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084)
sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=@newqdisc={0x434, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r5, {0x10}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x0, 0x1, 0x9, 0x8000, 0x3, 0x5, 0x5, 0xb762, 0x4, 0x7, 0x8, 0xf, 0x2, 0x80000001, 0x400, 0x1007fc, 0xffff8000, 0x3, 0x403, 0x9, 0x8, 0xffffe4f5, 0xd6, 0x4, 0xfffb, 0x7, 0x0, 0xfffff4f0, 0x9, 0x1, 0xfffffffc, 0x4, 0x1, 0x6f2151b1, 0x9, 0xc, 0x20001000, 0x4, 0x2, 0x7, 0x4, 0x99, 0x9, 0x5, 0x6, 0x7, 0xfffffff7, 0x1, 0x2, 0x9, 0x9, 0x1000044, 0x8, 0x8, 0x1, 0x4, 0x7ff, 0x8, 0x7, 0x7fbffffe, 0x400, 0x8, 0xfffffa72, 0xcd, 0x4, 0x80000000, 0xc, 0x4, 0x65, 0x91, 0x659, 0x9, 0xf, 0x9, 0xc28, 0x9, 0x7, 0x3, 0x401, 0x3, 0x2, 0xfffffffa, 0x1, 0x10003, 0x3, 0x1, 0x4, 0x8, 0x8, 0x7, 0x1, 0x1, 0x1, 0x7, 0x40, 0x7, 0x10, 0x8000, 0x1, 0x4dc, 0x80, 0x3, 0x7fffffff, 0xff, 0x9, 0xa7, 0xf, 0x1, 0x0, 0x3, 0x1001, 0x4, 0x401, 0x7, 0x80000000, 0xffff, 0x6, 0x5, 0x4f, 0xffffffff, 0x80000000, 0x1966f9ad, 0x200, 0x20200, 0xed5, 0xfffffc00, 0x6, 0x4, 0x8, 0x485e, 0xa85, 0x80000040, 0x2, 0x7, 0x7, 0x102, 0x2d5421e8, 0x7, 0x10000, 0x2, 0x6, 0x3ff, 0xf04, 0x0, 0x2, 0x5, 0xfffffc00, 0x5, 0x8d, 0x4, 0x401, 0x4, 0x9, 0x3, 0xfffffffb, 0x1, 0x0, 0x3, 0x2, 0x5, 0x8, 0x3, 0x0, 0x800, 0x2, 0x8, 0x7ff, 0x1, 0x9, 0x6, 0x5, 0x1, 0x4d15, 0x1ff, 0xfffff060, 0x3, 0x469, 0x3, 0x0, 0x200, 0x10000005, 0x7, 0x2, 0x8, 0x42ba, 0x4, 0x9, 0x3, 0x8, 0x8, 0x53, 0x6, 0x4, 0x400, 0x8000, 0x0, 0x2c310b18, 0xfff, 0x0, 0x3, 0xcd34, 0x9, 0x81, 0xdf3, 0x2, 0x7, 0x8, 0x40fff, 0x1ff, 0x8000, 0x3, 0x8, 0x80, 0x6, 0x9a6, 0xe4cb, 0x402, 0x1, 0x1ff, 0x5, 0x9b4, 0x1, 0x8, 0x0, 0x8, 0x0, 0x9, 0x0, 0x4, 0x10, 0x901, 0x5, 0x2, 0x7b, 0xfffffeff, 0x6, 0x6, 0xc, 0x1000, 0x9, 0x9, 0xe6, 0xab, 0x400, 0x7fffffff, 0xed, 0x7ff, 0xd83, 0x68, 0x80000001, 0x6, 0x9fd, 0x10000006, 0x200, 0x2]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0x40098}, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x3, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x5, 0x8}}, [@TCA_RATE={0x6, 0x5, {0x6}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000880)
r8 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
r9 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0)
close(r9)
socket$unix(0x1, 0x2, 0x0)
ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
socket$kcm(0x11, 0x3, 0x0)
r10 = socket(0x400000000010, 0x3, 0x0)
r11 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r12=>0x0})
sendmsg$nl_route_sched(r10, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=@newtfilter={0x38, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r12, {0x5, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x0)

0s ago: executing program 3 (id=28931):
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42901, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
recvmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000004140)=[{&(0x7f0000000240)=""/209, 0xd1}], 0x1}, 0x0)
r2 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @broadcast})
write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="034886dd0900300003003000000060ce902d9f0c880081e949b93897bc3b0000000000007d01ff02000000000000000011000000000112006558"], 0xfdef)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000008c0)=ANY=[@ANYBLOB="1800000001000000000000008000200095"], &(0x7f00000001c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94)

kernel console output (not intermixed with test programs):

ed is unknown, defaulting to 1000
[ 2089.678901][T31893] bond474: option miimon: invalid value (18446744073709551607)
[ 2089.681782][T31893] bond474: option miimon: allowed values 0 - 2147483647
[ 2089.687466][T31893] bond474 (unregistering): Released all slaves
[ 2089.859832][T31896] syzkaller1: left promiscuous mode
[ 2089.869115][T31896] syzkaller1: left allmulticast mode
[ 2090.275430][T31909] 8021q: adding VLAN 0 to HW filter on device bond474
[ 2090.298203][T31919] vlan39: entered promiscuous mode
[ 2090.300455][T31919] bond474: entered promiscuous mode
[ 2090.303126][T31919] vlan39: entered allmulticast mode
[ 2090.305100][T31919] bond474: entered allmulticast mode
[ 2090.327409][T31914] bond474: (slave bridge199): making interface the new active one
[ 2090.330517][T31914] bridge199: entered promiscuous mode
[ 2090.333588][T31914] bridge199: entered allmulticast mode
[ 2090.341449][T31914] bond474: (slave bridge199): Enslaving as an active interface with an up link
[ 2090.419157][T31917] netlink: 'syz.3.27322': attribute type 11 has an invalid length.
[ 2090.478229][T31927] syzkaller1: entered promiscuous mode
[ 2090.479992][T31927] syzkaller1: entered allmulticast mode
[ 2090.593150][T31934] 8021q: adding VLAN 0 to HW filter on device bond55
[ 2090.937191][T31940] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[ 2091.180705][T31955] syzkaller1: entered promiscuous mode
[ 2091.184546][T31955] syzkaller1: entered allmulticast mode
[ 2091.460674][T31959] openvswitch: netlink: Actions may not be safe on all matching packets
[ 2091.504673][T31965] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[ 2091.508929][T31965] syzkaller0: entered promiscuous mode
[ 2091.511130][T31965] syzkaller0: entered allmulticast mode
[ 2091.514686][T31965] tipc: Resetting bearer <eth:syzkaller0>
[ 2091.725730][T31991] syzkaller1: left promiscuous mode
[ 2091.727295][T31991] syzkaller1: left allmulticast mode
[ 2091.799923][T31997] SET target dimension over the limit!
[ 2092.008532][T32014] veth220: entered allmulticast mode
[ 2092.136372][T32023] bond475: (slave bond_slave_1): Device is not bonding slave
[ 2092.138838][T32023] bond475: option active_slave: invalid value (bond_slave_1)
[ 2092.143654][T32023] bond475 (unregistering): Released all slaves
[ 2092.349227][T32035] validate_nla: 17 callbacks suppressed
[ 2092.349246][T32035] netlink: 'syz.4.27356': attribute type 1 has an invalid length.
[ 2092.471015][T32047] netlink: 'syz.4.27359': attribute type 1 has an invalid length.
[ 2092.510707][T32047] bond475: (slave bridge200): making interface the new active one
[ 2092.514938][T32047] bond475: (slave bridge200): Enslaving as an active interface with an up link
[ 2092.975863][T32067] netlink: 'syz.3.27364': attribute type 10 has an invalid length.
[ 2092.979347][T32067] netlink: 'syz.3.27364': attribute type 10 has an invalid length.
[ 2092.979420][T32068] netlink: 'syz.3.27364': attribute type 10 has an invalid length.
[ 2093.630086][T32100] bond476: (slave vxcan1): The slave device specified does not support setting the MAC address
[ 2093.634988][T32100] bond476: (slave vxcan1): Error -95 calling set_mac_address
[ 2093.848778][T32113] syzkaller1: entered promiscuous mode
[ 2093.851175][T32113] syzkaller1: entered allmulticast mode
[ 2093.914988][T32115] __nla_validate_parse: 26 callbacks suppressed
[ 2093.915000][T32115] netlink: 8 bytes leftover after parsing attributes in process `syz.4.27378'.
[ 2094.073318][T32122] netlink: 48 bytes leftover after parsing attributes in process `syz.4.27381'.
[ 2094.137377][T32126] netlink: 'syz.3.27382': attribute type 2 has an invalid length.
[ 2094.140443][T32126] netlink: 60 bytes leftover after parsing attributes in process `syz.3.27382'.
[ 2094.238199][T32131] wg1 speed is unknown, defaulting to 1000
[ 2094.257876][T32136] workqueue: Failed to create a rescuer kthread for wq "bond477": -EINTR
[ 2094.374084][T32150] nft_compat: unsupported protocol 0
[ 2094.429649][T32153] netlink: 12 bytes leftover after parsing attributes in process `syz.4.27388'.
[ 2094.479555][T32152] 8021q: adding VLAN 0 to HW filter on device bond478
[ 2094.494035][T32152] bond478 (unregistering): Released all slaves
[ 2094.733855][T32166] netlink: 40 bytes leftover after parsing attributes in process `syz.4.27392'.
[ 2094.815328][T32171] netlink: 4 bytes leftover after parsing attributes in process `syz.3.27393'.
[ 2094.826257][T32171] bond438: (slave vcan0): Releasing backup interface
[ 2094.828525][T32171] vcan0 (unregistering): left promiscuous mode
[ 2094.836246][T32171] bond438: Destroying bond
[ 2094.847756][T32171] bond438 (unregistering): Released all slaves
[ 2095.071532][T32181] bridge0: port 1(erspan0) entered blocking state
[ 2095.074739][T32181] bridge0: port 1(erspan0) entered disabled state
[ 2095.076737][T32181] erspan0: entered allmulticast mode
[ 2095.079856][T32181] erspan0: left allmulticast mode
[ 2095.085579][T32183] netlink: 24 bytes leftover after parsing attributes in process `syz.4.27396'.
[ 2095.088803][T32183] netlink: 24 bytes leftover after parsing attributes in process `syz.4.27396'.
[ 2095.100445][T32186] netlink: 68 bytes leftover after parsing attributes in process `syz.3.27397'.
[ 2095.112280][T32183] netlink: 24 bytes leftover after parsing attributes in process `syz.4.27396'.
[ 2095.301489][T32206] x_tables: duplicate underflow at hook 3
[ 2095.329723][T32208] syzkaller1: entered promiscuous mode
[ 2095.334304][T32208] syzkaller1: entered allmulticast mode
[ 2095.639302][T32236] pim6reg1: entered promiscuous mode
[ 2095.641219][T32236] pim6reg1: entered allmulticast mode
[ 2095.664435][T32238] netlink: 'syz.4.27412': attribute type 1 has an invalid length.
[ 2095.679684][T32238] bond478: entered promiscuous mode
[ 2095.681513][T32238] 8021q: adding VLAN 0 to HW filter on device bond478
[ 2095.710694][T32238] bond478: (slave bridge201): making interface the new active one
[ 2095.713322][T32238] bridge201: entered promiscuous mode
[ 2095.716098][T32238] bond478: (slave bridge201): Enslaving as an active interface with an up link
[ 2095.722877][T32238] netlink: 'syz.4.27412': attribute type 1 has an invalid length.
[ 2096.076350][T32246] tipc: Resetting bearer <eth:syzkaller0>
[ 2096.078285][T32246] tipc: Resetting bearer <eth:syzkaller0>
[ 2096.421405][T32275] bond479: entered promiscuous mode
[ 2096.428332][T32275] 8021q: adding VLAN 0 to HW filter on device bond479
[ 2096.498909][T32282] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT
[ 2096.526187][T32282] team8: entered promiscuous mode
[ 2096.528090][T32282] team8: entered allmulticast mode
[ 2096.530224][T32282] 8021q: adding VLAN 0 to HW filter on device team8
[ 2096.556065][T32282] team9: entered promiscuous mode
[ 2096.557789][T32282] team9: entered allmulticast mode
[ 2096.560151][T32282] 8021q: adding VLAN 0 to HW filter on device team9
[ 2096.647574][T32289] A link change request failed with some changes committed already. Interface bond1 may have been left with an inconsistent configuration, please check.
[ 2096.750688][T32309] 8021q: adding VLAN 0 to HW filter on device ipvlan0
[ 2096.759615][T32309] netlink: 'syz.3.27430': attribute type 10 has an invalid length.
[ 2096.929501][T32324] netlink: 'syz.3.27434': attribute type 11 has an invalid length.
[ 2097.122572][   T34] audit: type=1107 audit(1778542608.524:64): pid=32341 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
[ 2097.168239][T32346] wg1 speed is unknown, defaulting to 1000
[ 2097.860955][T32391] netlink: 'syz.4.27452': attribute type 83 has an invalid length.
[ 2097.964803][T32400] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[ 2098.085949][T32411] bond52: (slave 26rB): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[ 2098.094379][T32411] bond52: (slave 26rB): Enslaving as an active interface with an up link
[ 2098.100945][T32411] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check.
[ 2098.191265][T32415] bridge185: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[ 2098.237458][T32424] wg1 speed is unknown, defaulting to 1000
[ 2098.292759][T32429] tun0: tun_chr_ioctl cmd 1074025675
[ 2098.297342][T32429] tun0: persist enabled
[ 2098.299048][T32429] tun0: tun_chr_ioctl cmd 1074025675
[ 2098.300621][T32429] tun0: persist enabled
[ 2098.306509][T32429] tun0: tun_chr_ioctl cmd 1074025673
[ 2098.309037][T32430] pim6reg1: entered promiscuous mode
[ 2098.310638][T32430] pim6reg1: entered allmulticast mode
[ 2098.446329][T32438] netlink: 'syz.4.27466': attribute type 1 has an invalid length.
[ 2098.470639][T32438] bond480: entered promiscuous mode
[ 2098.476074][T32438] 8021q: adding VLAN 0 to HW filter on device bond480
[ 2098.520262][T32438] bond480: entered allmulticast mode
[ 2098.570361][T32438] bond480: (slave bridge202): making interface the new active one
[ 2098.574362][T32438] bridge202: entered promiscuous mode
[ 2098.576814][T32438] bridge202: entered allmulticast mode
[ 2098.604188][T32438] bond480: (slave bridge202): Enslaving as an active interface with an up link
[ 2098.834323][T32458] 8021q: adding VLAN 0 to HW filter on device bond447
[ 2098.870052][T32461] bond481: option primary_reselect: invalid value (133)
[ 2098.876425][T32461] bond481 (unregistering): Released all slaves
[ 2098.976306][T32467] bond481: entered promiscuous mode
[ 2099.066472][T32482] __nla_validate_parse: 40 callbacks suppressed
[ 2099.066484][T32482] netlink: 76 bytes leftover after parsing attributes in process `syz.4.27481'.
[ 2099.155637][T32491] wg1 speed is unknown, defaulting to 1000
[ 2099.238589][T32495] xt_time: invalid argument - start or stop time greater than 23:59:59
[ 2099.244580][T32495] netlink: 4 bytes leftover after parsing attributes in process `syz.3.27484'.
[ 2099.398544][T32506] netlink: 'syz.4.27489': attribute type 13 has an invalid length.
[ 2099.404855][T32508] ipvlan1: entered promiscuous mode
[ 2099.594063][T32512] netlink: 4 bytes leftover after parsing attributes in process `syz.3.27491'.
[ 2099.701212][T32506] tipc: Resetting bearer <eth:syzkaller0>
[ 2099.924068][T32525] syzkaller1: tun_chr_ioctl cmd 1074025673
[ 2099.926616][T32525] syzkaller1: tun_chr_ioctl cmd 35108
[ 2100.055822][T32532] netlink: 'syz.4.27495': attribute type 1 has an invalid length.
[ 2100.066071][T32533] netlink: 48 bytes leftover after parsing attributes in process `syz.3.27494'.
[ 2100.176715][T32539] block nbd0: Unsupported socket: should be TCP or UNIX.
[ 2100.183972][T32539] netlink: 'syz.3.27498': attribute type 1 has an invalid length.
[ 2100.203163][T32539] 8021q: adding VLAN 0 to HW filter on device bond448
[ 2100.218418][T32539] vlan0: entered allmulticast mode
[ 2100.220449][T32539] bond448: entered allmulticast mode
[ 2100.250873][T32540] bond483: option ad_actor_system: mode dependency failed, not supported in mode balance-rr(0)
[ 2100.256037][T32540] bond483 (unregistering): Released all slaves
[ 2100.310681][T32545] netlink: 'syz.3.27499': attribute type 13 has an invalid length.
[ 2100.328257][T32545] erspan0: refused to change device tx_queue_len
[ 2100.330467][T32545] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check.
[ 2100.366756][T32549] ip6tnl0: Caught tx_queue_len zero misconfig
[ 2100.428533][T32551] netlink: 'syz.3.27501': attribute type 4 has an invalid length.
[ 2100.438515][T32551] netlink: 'syz.3.27501': attribute type 4 has an invalid length.
[ 2100.500387][T32563] netlink: 12 bytes leftover after parsing attributes in process `syz.4.27503'.
[ 2100.539608][T32563] netlink: 28 bytes leftover after parsing attributes in process `syz.4.27503'.
[ 2100.560512][T32563] netlink: 8 bytes leftover after parsing attributes in process `syz.4.27503'.
[ 2100.652162][T32567] netlink: 8 bytes leftover after parsing attributes in process `syz.3.27504'.
[ 2100.699333][T32573] syzkaller1: left promiscuous mode
[ 2100.701265][T32573] syzkaller1: left allmulticast mode
[ 2100.805277][T32573] netlink: 52 bytes leftover after parsing attributes in process `syz.4.27505'.
[ 2100.819674][T32573] netlink: 4 bytes leftover after parsing attributes in process `syz.4.27505'.
[ 2101.089608][T32603] 8021q: adding VLAN 0 to HW filter on device ipvlan0
[ 2101.221512][T32613] netlink: 'syz.5.27513': attribute type 4 has an invalid length.
[ 2101.311412][T32619] bond483 (unregistering): Released all slaves
[ 2101.318865][T32623] netlink: 'syz.5.27516': attribute type 1 has an invalid length.
[ 2101.634251][T32654] x_tables: ip_tables: owner match: used from hooks PREROUTING, but only valid from OUTPUT/POSTROUTING
[ 2101.795729][T32669] syzkaller1: entered promiscuous mode
[ 2101.798078][T32669] syzkaller1: entered allmulticast mode
[ 2102.063198][T32685] syzkaller1: left promiscuous mode
[ 2102.065061][T32685] syzkaller1: left allmulticast mode
[ 2102.103148][T32701] team0: entered promiscuous mode
[ 2102.104818][T32701] team0: entered allmulticast mode
[ 2102.106727][T32701] 8021q: adding VLAN 0 to HW filter on device team0
[ 2102.114645][T32701] team9 (uninitialized): Failed to send options change via netlink (err -105)
[ 2102.129903][T32701] team9: entered promiscuous mode
[ 2102.131439][T32701] team9: entered allmulticast mode
[ 2102.134137][T32701] 8021q: adding VLAN 0 to HW filter on device team9
[ 2102.206923][T32709] vlan29: entered promiscuous mode
[ 2102.208648][T32709] bridge0: entered promiscuous mode
[ 2102.518043][T32719] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6
[ 2102.725852][T32737] wg1 speed is unknown, defaulting to 1000
[ 2102.945633][T32760] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check.
[ 2102.960096][T32759] validate_nla: 4 callbacks suppressed
[ 2102.960107][T32759] netlink: 'syz.5.27551': attribute type 21 has an invalid length.
[ 2102.972017][T32759] netlink: 'syz.5.27551': attribute type 7 has an invalid length.
[ 2103.157712][  T305] bond483: Invalid ad_actor_system MAC address.
[ 2103.160129][  T305] bond483: option ad_actor_system: invalid value (7)
[ 2103.165472][  T305] bond483 (unregistering): Released all slaves
[ 2103.571367][  T327] netlink: 'syz.3.27558': attribute type 1 has an invalid length.
[ 2103.629566][  T327] bond449: entered promiscuous mode
[ 2103.631359][  T327] 8021q: adding VLAN 0 to HW filter on device bond449
[ 2103.754244][  T335] bond450 (unregistering): Released all slaves
[ 2103.951177][  T348] netlink: 'syz.4.27564': attribute type 1 has an invalid length.
[ 2103.964718][  T348] netlink: 'syz.4.27564': attribute type 1 has an invalid length.
[ 2103.967722][  T348] netlink: 'syz.4.27564': attribute type 8 has an invalid length.
[ 2104.015043][  T349] bond450: option ad_actor_system: mode dependency failed, not supported in mode balance-rr(0)
[ 2104.021397][  T349] bond450 (unregistering): Released all slaves
[ 2104.121427][  T360] __nla_validate_parse: 31 callbacks suppressed
[ 2104.121441][  T360] netlink: 20 bytes leftover after parsing attributes in process `syz.5.27568'.
[ 2104.159866][  T358] netlink: 'syz.4.27567': attribute type 29 has an invalid length.
[ 2104.172553][  T358] netlink: 'syz.4.27567': attribute type 29 has an invalid length.
[ 2104.175341][  T358] syzkaller1: entered promiscuous mode
[ 2104.179193][  T358] syzkaller1: entered allmulticast mode
[ 2104.420066][  T377] netlink: 92 bytes leftover after parsing attributes in process `syz.3.27574'.
[ 2104.448412][  T380] netlink: 12 bytes leftover after parsing attributes in process `syz.5.27575'.
[ 2104.452807][  T386] netlink: 12 bytes leftover after parsing attributes in process `syz.5.27575'.
[ 2104.523682][  T378] veth221: entered allmulticast mode
[ 2104.530483][  T378] bond417: (slave veth221): Enslaving as an active interface with an up link
[ 2104.557382][  T382] tipc: Resetting bearer <eth:syzkaller0>
[ 2104.809715][  T380] bond417 (unregistering): (slave veth221): Releasing backup interface
[ 2104.820625][  T380] bond417 (unregistering): Released all slaves
[ 2104.847073][  T390] netlink: 'syz.3.27577': attribute type 29 has an invalid length.
[ 2104.850488][  T395] syzkaller1: entered promiscuous mode
[ 2104.860021][  T395] syzkaller1: entered allmulticast mode
[ 2104.870311][  T394] netlink: 'syz.3.27577': attribute type 29 has an invalid length.
[ 2104.937831][  T400] wg1 speed is unknown, defaulting to 1000
[ 2105.022220][  T408] netlink: 32 bytes leftover after parsing attributes in process `syz.3.27580'.
[ 2105.134002][  T424] netlink: 88 bytes leftover after parsing attributes in process `syz.5.27584'.
[ 2105.136750][  T424] netlink: 1 bytes leftover after parsing attributes in process `syz.5.27584'.
[ 2105.186466][  T430] syzkaller0: entered promiscuous mode
[ 2105.196595][  T430] tipc: Resetting bearer <eth:syzkaller0>
[ 2105.383633][  T427] team0: left promiscuous mode
[ 2105.385655][  T427] ip6gre5: left promiscuous mode
[ 2105.526877][  T427] mac80211_hwsim hwsim303 syzkaller0: left promiscuous mode
[ 2105.529181][  T427] mac80211_hwsim hwsim303 syzkaller0: left allmulticast mode
[ 2105.538980][  T427] bond435: left allmulticast mode
[ 2105.541599][  T427] bond442: left allmulticast mode
[ 2105.543981][  T427] bond444: left promiscuous mode
[ 2105.545550][  T427] bond444: left allmulticast mode
[ 2105.547228][  T427] veth263: left allmulticast mode
[ 2105.548962][  T427] bond445: left promiscuous mode
[ 2105.550564][  T427] bond445: left allmulticast mode
[ 2105.562208][  T427] vlan0: left allmulticast mode
[ 2105.563848][  T427] bond448: left allmulticast mode
[ 2105.568905][  T427] bond449: left promiscuous mode
[ 2105.593039][  T436] dvmrp8: entered allmulticast mode
[ 2105.598328][  T439] tipc: Resetting bearer <eth:syzkaller0>
[ 2105.602843][  T429] dvmrp8: left allmulticast mode
[ 2105.827063][  T452] netlink: 12 bytes leftover after parsing attributes in process `syz.5.27590'.
[ 2105.853207][  T452] 8021q: adding VLAN 0 to HW filter on device bond417
[ 2105.950203][  T466] netlink: 24 bytes leftover after parsing attributes in process `syz.5.27593'.
[ 2105.965219][  T467] wg1: entered promiscuous mode
[ 2105.966729][  T467] wg1: entered allmulticast mode
[ 2106.046978][  T471] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[ 2106.108256][  T477] netlink: 12 bytes leftover after parsing attributes in process `syz.4.27596'.
[ 2106.180695][  T484] bond0: entered promiscuous mode
[ 2106.183361][  T484] bond0: left promiscuous mode
[ 2106.281181][  T489] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[ 2106.286654][  T489] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[ 2106.306583][  T493] IPVS: set_ctl: invalid protocol: 43 172.20.20.170:20000
[ 2106.407787][  T500] syzkaller1: left promiscuous mode
[ 2106.409955][  T500] syzkaller1: left allmulticast mode
[ 2106.413538][  T500] 8021q: VLANs not supported on syzkaller1
[ 2106.426600][  T500] openvswitch: netlink: Key 12 has unexpected len 4 expected 2
[ 2106.432386][  T500] pim6reg1: entered promiscuous mode
[ 2106.434036][  T500] pim6reg1: entered allmulticast mode
[ 2107.606717][  T545] bond418: (slave vxcan30): The slave device specified does not support setting the MAC address
[ 2107.612879][  T545] bond418: (slave vxcan30): Error -95 calling set_mac_address
[ 2107.810772][  T563] wg1 speed is unknown, defaulting to 1000
[ 2107.870562][  T579] xt_AUDIT: Audit type out of range (valid range: 0..2)
[ 2108.015352][  T585] validate_nla: 6 callbacks suppressed
[ 2108.015367][  T585] netlink: 'syz.3.27624': attribute type 1 has an invalid length.
[ 2108.020525][  T585] netlink: 'syz.3.27624': attribute type 1 has an invalid length.
[ 2108.148667][  T594] netlink: 'syz.3.27626': attribute type 3 has an invalid length.
[ 2108.161551][  T594] netlink: 'syz.3.27626': attribute type 58 has an invalid length.
[ 2108.273525][  T599] bond483: entered promiscuous mode
[ 2108.275700][  T599] bond483: entered allmulticast mode
[ 2108.277628][  T599] 8021q: adding VLAN 0 to HW filter on device bond483
[ 2108.566018][  T631] netlink: 'syz.4.27637': attribute type 1 has an invalid length.
[ 2108.668060][  T634] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[ 2108.671267][  T634] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[ 2108.754841][  T638] bond485: option lacp_active: invalid value (8)
[ 2108.758852][  T638] bond485 (unregistering): Released all slaves
[ 2109.020783][  T643] netlink: 'syz.4.27641': attribute type 10 has an invalid length.
[ 2109.380207][  T657] wg1 speed is unknown, defaulting to 1000
[ 2109.628630][  T669] bond450: option arp_interval: mode dependency failed, not supported in mode balance-tlb(5)
[ 2109.634576][  T669] bond450 (unregistering): Released all slaves
[ 2109.842444][  T680] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[ 2109.878427][  T680] Set syz1 is full, maxelem 65536 reached
[ 2109.951696][  T691] netlink: 'syz.5.27651': attribute type 16 has an invalid length.
[ 2109.955409][  T691] netlink: 'syz.5.27651': attribute type 17 has an invalid length.
[ 2109.957811][  T691] netlink: 'syz.5.27651': attribute type 27 has an invalid length.
[ 2110.160168][  T702] __nla_validate_parse: 21 callbacks suppressed
[ 2110.160185][  T702] netlink: 8 bytes leftover after parsing attributes in process `syz.4.27655'.
[ 2110.189147][  T696] netlink: 'syz.3.27654': attribute type 1 has an invalid length.
[ 2110.189737][  T691] tipc: Resetting bearer <eth:syzkaller0>
[ 2110.196131][  T691] syzkaller0: left promiscuous mode
[ 2110.197794][  T691] syzkaller0: left allmulticast mode
[ 2110.211485][  T691] ip6tnl21: left allmulticast mode
[ 2110.222453][  T691] ipvlan15: left allmulticast mode
[ 2110.225825][  T691] bond412: left allmulticast mode
[ 2110.227491][  T691] bond414: left allmulticast mode
[ 2110.231519][  T691] veth219: left allmulticast mode
[ 2110.238900][  T691] bond415: left allmulticast mode
[ 2110.247266][  T691] team0: left promiscuous mode
[ 2110.248912][  T691] team0: left allmulticast mode
[ 2110.255653][  T691] team9: left promiscuous mode
[ 2110.257489][  T691] team9: left allmulticast mode
[ 2110.263133][  T691] veth221: left allmulticast mode
[ 2110.504158][  T725] syzkaller0: left promiscuous mode
[ 2110.506593][  T725] syzkaller0: left allmulticast mode
[ 2110.509568][  T725] tipc: Resetting bearer <eth:syzkaller0>
[ 2110.647044][  T734] netlink: 4 bytes leftover after parsing attributes in process `syz.4.27664'.
[ 2110.710631][  T745] netlink: 24 bytes leftover after parsing attributes in process `syz.5.27665'.
[ 2110.777833][  T748] netlink: 8 bytes leftover after parsing attributes in process `syz.4.27666'.
[ 2110.954506][  T757] netlink: 8 bytes leftover after parsing attributes in process `syz.3.27669'.
[ 2110.957480][  T757] bond0: option coupled_control: mode dependency failed, not supported in mode balance-tlb(5)
[ 2110.966762][  T758] syzkaller1: entered promiscuous mode
[ 2110.968536][  T758] syzkaller1: entered allmulticast mode
[ 2111.054038][  T766] 8021q: adding VLAN 0 to HW filter on device ipvlan0
[ 2111.089303][  T762] wg1 speed is unknown, defaulting to 1000
[ 2111.096589][  T766] netlink: 4 bytes leftover after parsing attributes in process `syz.4.27672'.
[ 2111.100183][  T767] netlink: 4 bytes leftover after parsing attributes in process `syz.4.27672'.
[ 2111.263780][  T774] netlink: 28 bytes leftover after parsing attributes in process `syz.4.27673'.
[ 2111.267318][  T774] netlink: 28 bytes leftover after parsing attributes in process `syz.4.27673'.
[ 2111.271701][  T774] 8021q: adding VLAN 0 to HW filter on device bond485
[ 2111.397557][  T777] tipc: Resetting bearer <eth:syzkaller0>
[ 2111.450140][  T777] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[ 2111.521221][  T780] netlink: 8 bytes leftover after parsing attributes in process `syz.5.27675'.
[ 2111.657197][  T792] tap0: tun_chr_ioctl cmd 1074025673
[ 2111.923793][  T797] syzkaller1: entered promiscuous mode
[ 2111.925907][  T797] syzkaller1: entered allmulticast mode
[ 2112.164704][  T824] x_tables: duplicate underflow at hook 3
[ 2112.241228][  T835] syzkaller0: entered promiscuous mode
[ 2112.243521][  T835] syzkaller0: entered allmulticast mode
[ 2112.245336][  T835] tipc: Resetting bearer <eth:syzkaller0>
[ 2112.288773][  T839] xt_TCPMSS: Only works on TCP SYN packets
[ 2112.347098][  T845] A link change request failed with some changes committed already. Interface 26rB may have been left with an inconsistent configuration, please check.
[ 2112.551455][  T859] ip6gre0: Caught tx_queue_len zero misconfig
[ 2112.562761][  T859] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1280) !
[ 2112.671027][  T874] IPVS: set_ctl: invalid protocol: 135 100.1.1.0:20004
[ 2113.663314][  T893] pim6reg: entered allmulticast mode
[ 2113.678234][  T896] pim6reg: left allmulticast mode
[ 2113.785799][  T902] validate_nla: 14 callbacks suppressed
[ 2113.785815][  T902] netlink: 'syz.4.27706': attribute type 29 has an invalid length.
[ 2113.791014][  T902] netlink: 'syz.4.27706': attribute type 29 has an invalid length.
[ 2114.246478][  T958] wg1 speed is unknown, defaulting to 1000
[ 2114.645343][  T979] dvmrp6: entered allmulticast mode
[ 2114.681731][  T979] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[ 2114.829165][  T988] gretap0: Device is already in use.
[ 2114.869394][  T995] netlink: 'syz.5.27726': attribute type 1 has an invalid length.
[ 2114.949946][  T998] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check.
[ 2114.977205][ T1005] netlink: 'syz.3.27727': attribute type 29 has an invalid length.
[ 2114.980403][ T1005] netlink: 'syz.3.27727': attribute type 29 has an invalid length.
[ 2114.986022][ T1005] syzkaller1: entered promiscuous mode
[ 2114.987761][ T1005] syzkaller1: entered allmulticast mode
[ 2115.206755][ T1018] netlink: 'syz.4.27734': attribute type 10 has an invalid length.
[ 2115.232587][ T1025] mac80211_hwsim hwsim303 syzkaller0: Caught tx_queue_len zero misconfig
[ 2115.267778][ T1025] mac80211_hwsim hwsim303 syzkaller0: entered promiscuous mode
[ 2115.270800][ T1025] mac80211_hwsim hwsim303 syzkaller0: entered allmulticast mode
[ 2115.290083][ T1030] __nla_validate_parse: 17 callbacks suppressed
[ 2115.290098][ T1030] netlink: 4 bytes leftover after parsing attributes in process `syz.4.27734'.
[ 2115.482867][ T1039] netlink: 8 bytes leftover after parsing attributes in process `syz.4.27737'.
[ 2115.486331][ T1039] netlink: 20 bytes leftover after parsing attributes in process `syz.4.27737'.
[ 2115.567952][ T1056] netlink: 'syz.4.27740': attribute type 29 has an invalid length.
[ 2115.573281][ T1056] netlink: 'syz.4.27740': attribute type 29 has an invalid length.
[ 2115.714849][ T1069] netlink: 'syz.3.27743': attribute type 1 has an invalid length.
[ 2115.768228][ T1069] bond451: (slave bridge186): making interface the new active one
[ 2115.772893][ T1069] bond451: (slave bridge186): Enslaving as an active interface with an up link
[ 2115.782478][ T1074] xt_policy: input policy not valid in POSTROUTING and OUTPUT
[ 2115.786694][ T1074] netlink: 'syz.4.27744': attribute type 1 has an invalid length.
[ 2115.816294][ T1074] bond487: entered promiscuous mode
[ 2115.818970][ T1074] 8021q: adding VLAN 0 to HW filter on device bond487
[ 2115.849354][ T1074] ipvlan1: entered allmulticast mode
[ 2115.855979][ T1074] bond487: entered allmulticast mode
[ 2115.864366][ T1074] ipvlan13: entered allmulticast mode
[ 2115.885846][ T1074] bond487: (slave bridge204): making interface the new active one
[ 2115.888504][ T1074] bridge204: entered promiscuous mode
[ 2115.890548][ T1074] bridge204: entered allmulticast mode
[ 2115.907803][ T1074] bond487: (slave bridge204): Enslaving as an active interface with an up link
[ 2116.000462][ T1094] netlink: 60 bytes leftover after parsing attributes in process `syz.3.27748'.
[ 2116.079906][ T1102] netlink: 12 bytes leftover after parsing attributes in process `syz.3.27751'.
[ 2116.084017][ T1102] netlink: 12 bytes leftover after parsing attributes in process `syz.3.27751'.
[ 2116.220363][ T1110] A link change request failed with some changes committed already. Interface veth1_to_team may have been left with an inconsistent configuration, please check.
[ 2116.274497][ T1110] bond419 (unregistering): Released all slaves
[ 2116.487942][ T1125] bridge185: entered allmulticast mode
[ 2116.499460][ T1130] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_hsr, syncid = 1, id = 0
[ 2116.547168][ T1134] bond419: entered promiscuous mode
[ 2116.549283][ T1134] bond419: entered allmulticast mode
[ 2116.552975][ T1134] 8021q: adding VLAN 0 to HW filter on device bond419
[ 2116.555769][ T1128] netlink: 8 bytes leftover after parsing attributes in process `syz.4.27758'.
[ 2116.558393][ T1128] netlink: 24 bytes leftover after parsing attributes in process `syz.4.27758'.
[ 2116.564416][ T1134] macvlan2: entered promiscuous mode
[ 2116.566039][ T1134] macvlan2: entered allmulticast mode
[ 2116.571023][ T1134] 8021q: adding VLAN 0 to HW filter on device macvlan2
[ 2116.630552][ T1144] bond488: Unable to set down delay as MII monitoring is disabled
[ 2116.637579][ T1144] bond488 (unregistering): Released all slaves
[ 2116.771263][ T1152] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 2116.825033][ T1155] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[ 2116.914605][ T1160] netlink: 16 bytes leftover after parsing attributes in process `syz.4.27767'.
[ 2116.938246][  T128] block nbd5: Possible stuck request ffff88805d288000: control (read@0,1024B). Runtime 270 seconds
[ 2116.942880][  T128] block nbd5: Possible stuck request ffff88805d288200: control (read@1024,1024B). Runtime 270 seconds
[ 2116.949638][  T128] block nbd5: Possible stuck request ffff88805d288400: control (read@2048,1024B). Runtime 270 seconds
[ 2116.954416][  T128] block nbd5: Possible stuck request ffff88805d288600: control (read@3072,1024B). Runtime 270 seconds
[ 2117.032374][ T1172] syzkaller1: entered promiscuous mode
[ 2117.034135][ T1172] syzkaller1: entered allmulticast mode
[ 2117.048611][ T1165] pim6reg: entered allmulticast mode
[ 2117.052064][ T1165] pim6reg: left allmulticast mode
[ 2117.180137][ T1180] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[ 2117.189437][ T1180] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[ 2117.223981][ T1182] 8021q: adding VLAN 0 to HW filter on device bond19
[ 2117.314967][ T1191] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[ 2117.364885][ T1191] bond488: option primary: mode dependency failed, not supported in mode balance-rr(0)
[ 2117.370896][ T1191] bond488 (unregistering): Released all slaves
[ 2117.893039][ T1234] bond421: entered promiscuous mode
[ 2117.899202][ T1234] 8021q: adding VLAN 0 to HW filter on device bond421
[ 2117.927487][ T1239] netlink: 4 bytes leftover after parsing attributes in process `syz.4.27783'.
[ 2117.955165][ T1234] 8021q: adding VLAN 0 to HW filter on device bond421
[ 2117.957871][ T1234] bond421: (slave vcan0): The slave device specified does not support setting the MAC address
[ 2117.960869][ T1234] bond421: (slave vcan0): Setting fail_over_mac to active for active-backup mode
[ 2117.971080][ T1234] bond421: (slave vcan0): making interface the new active one
[ 2117.977005][ T1234] vcan0: entered promiscuous mode
[ 2117.982860][ T1234] bond421: (slave vcan0): Enslaving as an active interface with an up link
[ 2118.154579][ T1248] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[ 2118.157604][ T1248] CPU: 0 UID: 0 PID: 1248 Comm: syz.4.27786 Not tainted syzkaller #0 PREEMPT(full) 
[ 2118.157624][ T1248] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[ 2118.157649][ T1248] Call Trace:
[ 2118.157659][ T1248]  <TASK>
[ 2118.157667][ T1248]  dump_stack_lvl+0xe8/0x150
[ 2118.157697][ T1248]  sysfs_warn_dup+0x8e/0xa0
[ 2118.157720][ T1248]  sysfs_do_create_link_sd+0xc0/0x110
[ 2118.157744][ T1248]  device_add_class_symlinks+0x1cf/0x240
[ 2118.157772][ T1248]  device_add+0x475/0xb70
[ 2118.157798][ T1248]  wiphy_register+0x1d73/0x2d50
[ 2118.157834][ T1248]  ? __pfx_wiphy_register+0x10/0x10
[ 2118.157853][ T1248]  ? __pfx_netdev_run_todo+0x10/0x10
[ 2118.157868][ T1248]  ? minstrel_ht_alloc+0x6e0/0x7e0
[ 2118.157891][ T1248]  ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0
[ 2118.157918][ T1248]  ieee80211_register_hw+0x3571/0x4220
[ 2118.157948][ T1248]  ? ieee80211_register_hw+0x1421/0x4220
[ 2118.157972][ T1248]  ? __pfx_ieee80211_register_hw+0x10/0x10
[ 2118.158004][ T1248]  ? __hrtimer_setup+0x181/0x200
[ 2118.158025][ T1248]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[ 2118.158045][ T1248]  mac80211_hwsim_new_radio+0x2f97/0x5330
[ 2118.158093][ T1248]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[ 2118.158114][ T1248]  ? kstrndup+0xbf/0x160
[ 2118.158141][ T1248]  hwsim_new_radio_nl+0xf35/0x1bd0
[ 2118.158183][ T1248]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[ 2118.158214][ T1248]  ? rcu_is_watching+0x15/0xb0
[ 2118.158235][ T1248]  ? trace_kmalloc+0x2a/0x110
[ 2118.158256][ T1248]  ? __nla_parse+0x40/0x60
[ 2118.158279][ T1248]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[ 2118.158317][ T1248]  genl_family_rcv_msg_doit+0x22a/0x330
[ 2118.158346][ T1248]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[ 2118.158381][ T1248]  ? bpf_lsm_capable+0x9/0x20
[ 2118.158401][ T1248]  ? security_capable+0x7e/0x2c0
[ 2118.158455][ T1248]  genl_rcv_msg+0x61c/0x7a0
[ 2118.158485][ T1248]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 2118.158506][ T1248]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[ 2118.158531][ T1248]  ? __lock_acquire+0x6b5/0x2cf0
[ 2118.158561][ T1248]  netlink_rcv_skb+0x232/0x4b0
[ 2118.158580][ T1248]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 2118.158603][ T1248]  ? __pfx_netlink_rcv_skb+0x10/0x10
[ 2118.158637][ T1248]  ? down_read+0x272/0x2e0
[ 2118.158652][ T1248]  ? genl_rcv+0xd/0x40
[ 2118.158674][ T1248]  genl_rcv+0x28/0x40
[ 2118.158693][ T1248]  netlink_unicast+0x80f/0x9b0
[ 2118.158716][ T1248]  ? __pfx_netlink_unicast+0x10/0x10
[ 2118.158734][ T1248]  ? netlink_sendmsg+0x650/0xb40
[ 2118.158751][ T1248]  ? skb_put+0x11b/0x210
[ 2118.158774][ T1248]  netlink_sendmsg+0x813/0xb40
[ 2118.158801][ T1248]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 2118.158822][ T1248]  ? aa_sock_msg_perm+0xf1/0x1b0
[ 2118.158841][ T1248]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[ 2118.158859][ T1248]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 2118.158876][ T1248]  ____sys_sendmsg+0xa68/0xad0
[ 2118.158896][ T1248]  ? futex_unqueue+0x211/0x240
[ 2118.158920][ T1248]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 2118.158950][ T1248]  ? import_iovec+0x73/0xa0
[ 2118.158974][ T1248]  ___sys_sendmsg+0x2a5/0x360
[ 2118.159001][ T1248]  ? __pfx____sys_sendmsg+0x10/0x10
[ 2118.159029][ T1248]  ? futex_wait+0x29a/0x380
[ 2118.159073][ T1248]  ? __fget_files+0x2a/0x420
[ 2118.159093][ T1248]  ? __fget_files+0x3a0/0x420
[ 2118.159123][ T1248]  __x64_sys_sendmsg+0x1bd/0x2a0
[ 2118.159147][ T1248]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[ 2118.159178][ T1248]  ? fput+0xa0/0xd0
[ 2118.159207][ T1248]  do_syscall_64+0x14d/0xf80
[ 2118.159229][ T1248]  ? trace_irq_disable+0x3b/0x150
[ 2118.159249][ T1248]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2118.159270][ T1248]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2118.159285][ T1248] RIP: 0033:0x7f4fe6d9cdd9
[ 2118.159318][ T1248] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 2118.159332][ T1248] RSP: 002b:00007f4fe7bd7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 2118.159351][ T1248] RAX: ffffffffffffffda RBX: 00007f4fe7015fa0 RCX: 00007f4fe6d9cdd9
[ 2118.159363][ T1248] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000005
[ 2118.159373][ T1248] RBP: 00007f4fe6e32d69 R08: 0000000000000000 R09: 0000000000000000
[ 2118.159383][ T1248] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 2118.159393][ T1248] R13: 00007f4fe7016038 R14: 00007f4fe7015fa0 R15: 00007ffec6f77208
[ 2118.159449][ T1248]  </TASK>
[ 2118.561114][ T1260] bond489: (slave vxcan1): The slave device specified does not support setting the MAC address
[ 2118.566931][ T1260] bond489: (slave vxcan1): Error -95 calling set_mac_address
[ 2118.619887][ T1265] bond489: (slave bridge205): Enslaving as an active interface with a down link
[ 2118.675849][ T1260] ip6gretap6: entered promiscuous mode
[ 2118.678015][ T1260] ip6gretap6: entered allmulticast mode
[ 2118.696121][ T1260] bond489: (slave ip6gretap6): making interface the new active one
[ 2118.699815][ T1260] bond489: (slave ip6gretap6): Enslaving as an active interface with an up link
[ 2119.406188][ T1301] wg1: left promiscuous mode
[ 2119.407818][ T1301] wg1: left allmulticast mode
[ 2119.416536][ T1301] mac80211_hwsim hwsim303 syzkaller0: left promiscuous mode
[ 2119.419060][ T1301] mac80211_hwsim hwsim303 syzkaller0: left allmulticast mode
[ 2119.474555][ T1320] validate_nla: 11 callbacks suppressed
[ 2119.474571][ T1320] netlink: 'syz.3.27804': attribute type 19 has an invalid length.
[ 2119.480261][ T1320] netlink: 'syz.3.27804': attribute type 19 has an invalid length.
[ 2119.487041][ T1315] netlink: 'syz.4.27803': attribute type 4 has an invalid length.
[ 2119.504594][ T1315] syzkaller1: left promiscuous mode
[ 2119.506702][ T1315] syzkaller1: left allmulticast mode
[ 2119.665237][ T1334] netlink: 'syz.3.27808': attribute type 1 has an invalid length.
[ 2119.697206][ T1334] bond452: (slave bridge187): Enslaving as a backup interface with an up link
[ 2119.709349][ T1334] macvlan2: entered promiscuous mode
[ 2119.711233][ T1334] macvlan2: entered allmulticast mode
[ 2119.714569][ T1334] bond452: entered promiscuous mode
[ 2119.716276][ T1334] bridge187: entered promiscuous mode
[ 2119.718528][ T1334] 8021q: adding VLAN 0 to HW filter on device macvlan2
[ 2119.725369][ T1334] bond452: left promiscuous mode
[ 2119.727002][ T1334] bridge187: left promiscuous mode
[ 2119.819907][ T1337] netlink: 'syz.3.27809': attribute type 11 has an invalid length.
[ 2119.832895][ T1337] netlink: 'syz.3.27809': attribute type 4 has an invalid length.
[ 2119.875021][ T1340] netlink: 'syz.3.27810': attribute type 1 has an invalid length.
[ 2119.880522][ T1340] workqueue: Failed to create a rescuer kthread for wq "bond453": -EINTR
[ 2120.020825][ T1349] netlink: 'syz.3.27812': attribute type 1 has an invalid length.
[ 2120.043027][ T1349] 8021q: adding VLAN 0 to HW filter on device bond453
[ 2120.287465][ T1370] tunl0: Caught tx_queue_len zero misconfig
[ 2120.386983][ T1376] __nla_validate_parse: 11 callbacks suppressed
[ 2120.387001][ T1376] netlink: 44 bytes leftover after parsing attributes in process `syz.4.27819'.
[ 2120.389900][ T1372] netlink: 20 bytes leftover after parsing attributes in process `syz.3.27818'.
[ 2120.398713][ T1376] netlink: 16 bytes leftover after parsing attributes in process `syz.4.27819'.
[ 2120.407124][ T1376] netlink: 16 bytes leftover after parsing attributes in process `syz.4.27819'.
[ 2120.415457][ T1376] netlink: 16 bytes leftover after parsing attributes in process `syz.4.27819'.
[ 2120.419291][ T1372] bond454: entered allmulticast mode
[ 2120.423479][ T1376] netlink: 16 bytes leftover after parsing attributes in process `syz.4.27819'.
[ 2120.428816][ T1376] netlink: 16 bytes leftover after parsing attributes in process `syz.4.27819'.
[ 2120.436996][ T1376] netlink: 16 bytes leftover after parsing attributes in process `syz.4.27819'.
[ 2120.443074][ T1376] netlink: 16 bytes leftover after parsing attributes in process `syz.4.27819'.
[ 2120.450397][ T1376] netlink: 16 bytes leftover after parsing attributes in process `syz.4.27819'.
[ 2120.554085][ T1392] wg1 speed is unknown, defaulting to 1000
[ 2120.565019][ T1387] netlink: 'syz.3.27820': attribute type 4 has an invalid length.
[ 2120.569994][ T1387] netlink: 'syz.3.27820': attribute type 4 has an invalid length.
[ 2120.747514][ T1404] syzkaller1: entered promiscuous mode
[ 2120.749993][ T1404] syzkaller1: entered allmulticast mode
[ 2121.136908][ T1423] netlink: 'syz.3.27826': attribute type 1 has an invalid length.
[ 2121.219989][ T1427] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[ 2121.373897][ T1433] Unknown options in mask 6
[ 2122.440886][ T1494] netlink: 'syz.3.27844': attribute type 11 has an invalid length.
[ 2122.498632][ T1498] mac80211_hwsim hwsim303 syzkaller0: entered promiscuous mode
[ 2122.501463][ T1498] mac80211_hwsim hwsim303 syzkaller0: entered allmulticast mode
[ 2122.641694][ T1503] bond490: (slave vxcan1): The slave device specified does not support setting the MAC address
[ 2122.650968][ T1503] bond490: (slave vxcan1): Error -95 calling set_mac_address
[ 2122.721545][ T1513] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[ 2122.841642][ T1530] mac80211_hwsim hwsim303 syzkaller0: left promiscuous mode
[ 2122.844436][ T1530] mac80211_hwsim hwsim303 syzkaller0: left allmulticast mode
[ 2122.931129][ T1533] syzkaller1: entered promiscuous mode
[ 2122.937843][ T1533] syzkaller1: entered allmulticast mode
[ 2123.086561][ T1540] bond422: entered promiscuous mode
[ 2123.088930][ T1540] 8021q: adding VLAN 0 to HW filter on device bond422
[ 2123.111549][ T1542] 8021q: adding VLAN 0 to HW filter on device bond422
[ 2123.116113][ T1542] bond422: (slave vcan5): The slave device specified does not support setting the MAC address
[ 2123.119326][ T1542] bond422: (slave vcan5): Setting fail_over_mac to active for active-backup mode
[ 2123.130680][ T1542] bond422: (slave vcan5): making interface the new active one
[ 2123.133427][ T1542] vcan5: entered promiscuous mode
[ 2123.136812][ T1542] bond422: (slave vcan5): Enslaving as an active interface with an up link
[ 2123.184352][ T1545] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[ 2123.460601][ T1555] 8021q: VLANs not supported on ip6tnl0
[ 2123.505185][ T1557] r: entered allmulticast mode
[ 2123.652713][ T1559] mac80211_hwsim hwsim303 syzkaller0: entered allmulticast mode
[ 2123.859990][ T1589] openvswitch: netlink: Missing key (keys=40, expected=80)
[ 2123.912617][ T1588] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[ 2124.060108][ T1604] bond19: option mode: unable to set because the bond device is up
[ 2124.077353][ T1604] bond19: (slave ): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[ 2124.090468][ T1604] bond19: (slave ): Enslaving as a backup interface with an up link
[ 2124.124684][ T1604] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check.
[ 2124.143310][  T841] bond19: Warning: No 802.3ad response from the link partner for any adapters in the bond
[ 2124.157531][  T841] bond19: (slave ): link status up again after 0 ms
[ 2124.172572][  T841] bond19: (slave ): link status up again after 0 ms
[ 2124.193916][  T841] bond19: (slave ): link status up again after 0 ms
[ 2124.205642][ T1611] bond455: entered promiscuous mode
[ 2124.210671][ T1611] 8021q: adding VLAN 0 to HW filter on device bond455
[ 2124.222384][ T5819] bond19: (slave ): link status up again after 0 ms
[ 2124.337709][ T1619] bridge189: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms)
[ 2124.560443][ T1634] syzkaller1: entered promiscuous mode
[ 2124.564579][ T1634] syzkaller1: entered allmulticast mode
[ 2124.696352][ T1643] rB: Caught tx_queue_len zero misconfig
[ 2124.807875][ T1648] bond423: Removing last arp target with arp_interval on
[ 2124.938789][ T1657] wg1 speed is unknown, defaulting to 1000
[ 2125.147137][T21324] block nbd0: NBD_DISCONNECT
[ 2125.150090][ T1675] team0: Caught tx_queue_len zero misconfig
[ 2125.158101][T21324] block nbd0: Disconnected due to user request.
[ 2125.176518][T21324] block nbd0: shutting down sockets
[ 2125.490772][ T1688] validate_nla: 13 callbacks suppressed
[ 2125.490786][ T1688] netlink: 'syz.4.27898': attribute type 58 has an invalid length.
[ 2125.503245][ T1688] __nla_validate_parse: 31 callbacks suppressed
[ 2125.503256][ T1688] netlink: 20 bytes leftover after parsing attributes in process `syz.4.27898'.
[ 2125.981758][ T1707] netlink: 'syz.5.27904': attribute type 4 has an invalid length.
[ 2125.992677][ T1707] netlink: 'syz.5.27904': attribute type 4 has an invalid length.
[ 2126.272104][ T5819] net_ratelimit: 16 callbacks suppressed
[ 2126.272118][ T5819] bond19: (slave ): failed to get link speed/duplex
[ 2126.325178][ T1712] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.27906'.
[ 2126.382315][ T5819] bond19: (slave ): failed to get link speed/duplex
[ 2126.492141][T18540] bond19: (slave ): failed to get link speed/duplex
[ 2126.523857][ T1721] ip6tnl0: Caught tx_queue_len zero misconfig
[ 2126.564891][ T1721] wg1 speed is unknown, defaulting to 1000
[ 2126.581393][ T1724] IPVS: set_ctl: invalid protocol: 2 172.20.20.44:20003
[ 2126.610610][ T1724] bond491: option miimon: invalid value (18446744073709551607)
[ 2126.613234][ T1724] bond491: option miimon: allowed values 0 - 2147483647
[ 2126.620591][ T1724] bond491 (unregistering): Released all slaves
[ 2126.642124][T18540] bond19: (slave ): failed to get link speed/duplex
[ 2126.772357][  T841] bond19: (slave ): failed to get link speed/duplex
[ 2126.806598][ T1735] netlink: 80 bytes leftover after parsing attributes in process `syz.3.27913'.
[ 2126.882248][ T5819] bond19: (slave ): failed to get link speed/duplex
[ 2127.017155][ T1749] veth265: entered promiscuous mode
[ 2127.045100][ T5819] bond19: (slave ): failed to get link speed/duplex
[ 2127.191063][ T1762] team0: Mode changed to "broadcast"
[ 2127.203108][ T5819] bond19: (slave ): failed to get link speed/duplex
[ 2127.282566][ T1765] netlink: 48 bytes leftover after parsing attributes in process `syz.3.27920'.
[ 2127.288616][ T1767] netlink: 'syz.4.27921': attribute type 1 has an invalid length.
[ 2127.347125][ T1767] bond491: (slave veth217): Enslaving as an active interface with a down link
[ 2127.351298][ T1767] netlink: 'syz.4.27921': attribute type 10 has an invalid length.
[ 2127.353926][ T1767] netlink: 40 bytes leftover after parsing attributes in process `syz.4.27921'.
[ 2127.362241][ T5819] bond19: (slave ): failed to get link speed/duplex
[ 2127.408240][ T1774] netlink: 'syz.4.27922': attribute type 1 has an invalid length.
[ 2127.473063][T10363] bond19: (slave ): failed to get link speed/duplex
[ 2127.498397][ T1774] bond492: (slave bridge207): Enslaving as a backup interface with an up link
[ 2127.536403][ T1780] netlink: 12 bytes leftover after parsing attributes in process `syz.4.27923'.
[ 2127.540017][ T1780] netlink: 12 bytes leftover after parsing attributes in process `syz.4.27923'.
[ 2127.598293][ T1784] workqueue: Failed to create a rescuer kthread for wq "bond493": -EINTR
[ 2127.941634][ T1806] netlink: 8 bytes leftover after parsing attributes in process `syz.4.27928'.
[ 2128.064773][ T1815] netlink: 8 bytes leftover after parsing attributes in process `syz.5.27931'.
[ 2128.138179][ T1819] netlink: 12 bytes leftover after parsing attributes in process `syz.4.27934'.
[ 2128.180303][ T1825] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[ 2128.188406][ T1825] mac80211_hwsim hwsim303 syzkaller0: entered promiscuous mode
[ 2128.250125][ T1828] bond493: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0)
[ 2128.263857][ T1828] bond493 (unregistering): Released all slaves
[ 2128.680688][ T1855] bond493: invalid ARP target 0.0.0.0 specified for addition
[ 2128.685054][ T1855] bond493: option arp_ip_target: invalid value (0)
[ 2128.691275][ T1855] bond493 (unregistering): Released all slaves
[ 2129.097854][ T1882] wg1 speed is unknown, defaulting to 1000
[ 2129.803199][ T1906] wg1 speed is unknown, defaulting to 1000
[ 2129.839314][ T1912] tunl0: left allmulticast mode
[ 2129.842683][ T1912] dvmrp6: left allmulticast mode
[ 2129.892308][ T1913] netlink: 'syz.5.27958': attribute type 1 has an invalid length.
[ 2129.959198][ T1912] vti11: entered promiscuous mode
[ 2129.964121][ T1907] wg1 speed is unknown, defaulting to 1000
[ 2130.070577][ T1917] netlink: 'syz.5.27960': attribute type 1 has an invalid length.
[ 2130.070821][ T1915] netlink: 'syz.4.27959': attribute type 10 has an invalid length.
[ 2130.110495][ T1917] bond424: entered promiscuous mode
[ 2130.119770][ T1917] 8021q: adding VLAN 0 to HW filter on device bond424
[ 2130.188279][ T1917] 8021q: adding VLAN 0 to HW filter on device bond424
[ 2130.191640][ T1917] bond424: (slave vcan6): The slave device specified does not support setting the MAC address
[ 2130.196118][ T1917] bond424: (slave vcan6): Setting fail_over_mac to active for active-backup mode
[ 2130.206382][ T1917] bond424: (slave vcan6): making interface the new active one
[ 2130.209336][ T1917] vcan6: entered promiscuous mode
[ 2130.217470][ T1917] bond424: (slave vcan6): Enslaving as an active interface with an up link
[ 2130.288907][ T1922] netlink: 'syz.4.27961': attribute type 26 has an invalid length.
[ 2130.610545][ T1930] 8021q: adding VLAN 0 to HW filter on device ipvlan0
[ 2130.744330][ T1939] __nla_validate_parse: 15 callbacks suppressed
[ 2130.744354][ T1939] netlink: 4 bytes leftover after parsing attributes in process `syz.5.27964'.
[ 2130.763900][ T1943] netlink: 8 bytes leftover after parsing attributes in process `syz.4.27966'.
[ 2130.808820][ T1946] netlink: 8 bytes leftover after parsing attributes in process `syz.5.27967'.
[ 2130.815850][ T1946] netlink: 12 bytes leftover after parsing attributes in process `syz.5.27967'.
[ 2130.819189][ T1946] netlink: 4 bytes leftover after parsing attributes in process `syz.5.27967'.
[ 2130.824518][ T1946] netlink: 8 bytes leftover after parsing attributes in process `syz.5.27967'.
[ 2130.829211][ T1946] netlink: 12 bytes leftover after parsing attributes in process `syz.5.27967'.
[ 2130.833082][ T1946] netlink: 4 bytes leftover after parsing attributes in process `syz.5.27967'.
[ 2131.021976][ T1979] validate_nla: 1 callbacks suppressed
[ 2131.021987][ T1979] netlink: 'syz.4.27974': attribute type 1 has an invalid length.
[ 2131.027713][ T1979] netlink: 8 bytes leftover after parsing attributes in process `syz.4.27974'.
[ 2131.066268][ T1983] netlink: 12 bytes leftover after parsing attributes in process `syz.3.27976'.
[ 2131.164969][ T1990] netlink: 'syz.5.27977': attribute type 1 has an invalid length.
[ 2131.197920][ T1992] tipc: Resetting bearer <eth:syzkaller0>
[ 2131.201142][ T1992] mac80211_hwsim hwsim303 syzkaller0: left promiscuous mode
[ 2131.205898][ T1992] mac80211_hwsim hwsim303 syzkaller0: left allmulticast mode
[ 2131.220549][ T1992] bond454: left allmulticast mode
[ 2131.233411][ T1992] bond455: left promiscuous mode
[ 2131.238522][ T1992] veth265: left promiscuous mode
[ 2131.305758][ T2000] netlink: 'syz.3.27978': attribute type 3 has an invalid length.
[ 2131.402411][T10363] net_ratelimit: 29 callbacks suppressed
[ 2131.402432][T10363] bond19: (slave ): failed to get link speed/duplex
[ 2131.468077][ T2022] netlink: 'syz.3.27983': attribute type 1 has an invalid length.
[ 2131.474333][ T2022] workqueue: Failed to create a rescuer kthread for wq "bond456": -EINTR
[ 2131.512166][T18540] bond19: (slave ): failed to get link speed/duplex
[ 2131.520813][ T2027] mac80211_hwsim hwsim303 syzkaller0: entered promiscuous mode
[ 2131.523765][ T2027] mac80211_hwsim hwsim303 syzkaller0: entered allmulticast mode
[ 2131.559932][ T2032] netlink: 'syz.5.27986': attribute type 10 has an invalid length.
[ 2131.563568][ T2032] netlink: 'syz.5.27986': attribute type 10 has an invalid length.
[ 2131.623464][T18540] bond19: (slave ): failed to get link speed/duplex
[ 2131.756350][T18540] bond19: (slave ): failed to get link speed/duplex
[ 2131.882443][T10363] bond19: (slave ): failed to get link speed/duplex
[ 2131.920776][ T2058] netlink: 'syz.4.27992': attribute type 1 has an invalid length.
[ 2131.926072][ T2058] netlink: 'syz.4.27992': attribute type 2 has an invalid length.
[ 2131.992232][T10363] bond19: (slave ): failed to get link speed/duplex
[ 2132.062337][ T2062] netlink: 'syz.3.27994': attribute type 4 has an invalid length.
[ 2132.077068][ T2062] mac80211_hwsim hwsim303 syzkaller0: left promiscuous mode
[ 2132.079464][ T2062] mac80211_hwsim hwsim303 syzkaller0: left allmulticast mode
[ 2132.122225][T10363] bond19: (slave ): failed to get link speed/duplex
[ 2132.200827][ T2073] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check.
[ 2132.231260][ T2076] pim6reg1: entered promiscuous mode
[ 2132.233654][ T2076] pim6reg1: entered allmulticast mode
[ 2132.319054][ T2083] netlink: 'syz.4.28003': attribute type 1 has an invalid length.
[ 2132.416706][ T2090] A link change request failed with some changes committed already. Interface 26rB may have been left with an inconsistent configuration, please check.
[ 2132.470443][ T2094] A link change request failed with some changes committed already. Interface veth1_to_team may have been left with an inconsistent configuration, please check.
[ 2132.596848][ T2103] veth219: entered promiscuous mode
[ 2132.891228][ T2117] tipc: Resetting bearer <eth:syzkaller0>
[ 2132.899852][ T2117] syzkaller0: left promiscuous mode
[ 2132.901524][ T2117] syzkaller0: left allmulticast mode
[ 2132.908414][ T2117] bond473: left promiscuous mode
[ 2132.911648][ T2117] vlan39: left promiscuous mode
[ 2132.913765][ T2117] bond474: left promiscuous mode
[ 2132.915594][ T2117] bridge199: left promiscuous mode
[ 2132.917891][ T2117] vlan39: left allmulticast mode
[ 2132.919773][ T2117] bond474: left allmulticast mode
[ 2132.921594][ T2117] bridge199: left allmulticast mode
[ 2132.924601][ T2117] bond478: left promiscuous mode
[ 2132.926377][ T2117] bridge201: left promiscuous mode
[ 2132.928462][ T2117] bond479: left promiscuous mode
[ 2132.930545][ T2117] team8: left promiscuous mode
[ 2132.934635][ T2117] team8: left allmulticast mode
[ 2132.936554][ T2117] team9: left promiscuous mode
[ 2132.938468][ T2117] team9: left allmulticast mode
[ 2132.940678][ T2117] bond480: left promiscuous mode
[ 2132.942945][ T2117] bridge202: left promiscuous mode
[ 2132.945167][ T2117] bond480: left allmulticast mode
[ 2132.947270][ T2117] bridge202: left allmulticast mode
[ 2132.949660][ T2117] bond481: left promiscuous mode
[ 2132.953459][ T2117] bond483: left promiscuous mode
[ 2132.955426][ T2117] bond483: left allmulticast mode
[ 2132.967644][ T2117] bond487: left promiscuous mode
[ 2132.974383][ T2117] bridge204: left promiscuous mode
[ 2132.983788][ T2117] ipvlan13: left allmulticast mode
[ 2132.996948][ T2117] ip6gretap6: left promiscuous mode
[ 2133.001103][ T2117] ip6gretap6: left allmulticast mode
[ 2133.030735][ T2117] veth219: left promiscuous mode
[ 2133.161136][ T2129] wg1 speed is unknown, defaulting to 1000
[ 2133.588768][ T2159] syzkaller1: entered promiscuous mode
[ 2133.590421][ T2159] syzkaller1: entered allmulticast mode
[ 2133.640093][ T2166] bond426: entered promiscuous mode
[ 2133.642367][ T2166] bond426: entered allmulticast mode
[ 2133.644730][ T2166] 8021q: adding VLAN 0 to HW filter on device bond426
[ 2134.020622][ T2195] 8021q: adding VLAN 0 to HW filter on device bond493
[ 2134.034518][ T2195] vlan41: entered promiscuous mode
[ 2134.036099][ T2195] bond493: entered promiscuous mode
[ 2134.038075][ T2195] vlan41: entered allmulticast mode
[ 2134.039779][ T2195] bond493: entered allmulticast mode
[ 2134.058552][ T2195] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 2134.065051][ T2195] bond493: (slave batadv0): making interface the new active one
[ 2134.067646][ T2195] batadv0: entered promiscuous mode
[ 2134.069546][ T2195] batadv0: entered allmulticast mode
[ 2134.075429][ T2195] bond493: (slave batadv0): Enslaving as an active interface with an up link
[ 2134.155403][ T2209] bond427 (unregistering): Released all slaves
[ 2134.417130][ T2241] 0{X: renamed from 31{X
[ 2134.425198][ T2241] 0{X: entered allmulticast mode
[ 2134.436241][ T2245] pim6reg1: entered promiscuous mode
[ 2134.438354][ T2245] pim6reg1: entered allmulticast mode
[ 2134.794585][ T2265] netlink: 'syz.5.28042': attribute type 11 has an invalid length.
[ 2135.818001][ T2306] __nla_validate_parse: 45 callbacks suppressed
[ 2135.818023][ T2306] netlink: 12 bytes leftover after parsing attributes in process `syz.5.28052'.
[ 2135.877522][ T2306] bond427: (slave bridge187): making interface the new active one
[ 2135.882983][ T2306] bond427: (slave bridge187): Enslaving as an active interface with an up link
[ 2135.887360][ T2308] netlink: 28 bytes leftover after parsing attributes in process `syz.4.28051'.
[ 2135.891421][ T2308] netlink: 28 bytes leftover after parsing attributes in process `syz.4.28051'.
[ 2135.897384][ T2308] netlink: 12 bytes leftover after parsing attributes in process `syz.4.28051'.
[ 2135.940305][ T2308] syzkaller0: entered promiscuous mode
[ 2135.943667][ T2308] syzkaller0: entered allmulticast mode
[ 2135.947095][ T2308] tipc: Resetting bearer <eth:syzkaller0>
[ 2136.015475][ T2314] pim6reg1: entered promiscuous mode
[ 2136.023491][ T2314] pim6reg1: entered allmulticast mode
[ 2136.054391][ T2316] netlink: 24 bytes leftover after parsing attributes in process `syz.5.28054'.
[ 2136.088718][ T2316] netlink: 4 bytes leftover after parsing attributes in process `syz.5.28054'.
[ 2136.117810][ T2316] batman_adv: batadv0: Adding interface: veth225
[ 2136.120476][ T2316] batman_adv: batadv0: The MTU of interface veth225 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 2136.130907][ T2316] batman_adv: batadv0: Interface activated: veth225
[ 2136.282368][ T2327] validate_nla: 10 callbacks suppressed
[ 2136.282385][ T2327] netlink: 'syz.3.28057': attribute type 1 has an invalid length.
[ 2136.321467][ T2327] 8021q: adding VLAN 0 to HW filter on device bond457
[ 2136.397876][ T2333] netlink: 20 bytes leftover after parsing attributes in process `syz.5.28060'.
[ 2136.474944][ T2335] netlink: 'syz.5.28061': attribute type 11 has an invalid length.
[ 2136.616775][ T2342] netlink: 16 bytes leftover after parsing attributes in process `syz.5.28063'.
[ 2136.620442][ T2343] netlink: 16 bytes leftover after parsing attributes in process `syz.5.28063'.
[ 2136.838930][ T2348] netlink: 'syz.4.28065': attribute type 1 has an invalid length.
[ 2136.842590][ T2348] netlink: 5 bytes leftover after parsing attributes in process `syz.4.28065'.
[ 2136.847080][ T2348] 1{X: renamed from 30{X (while UP)
[ 2136.851624][ T2348] net_ratelimit: 1 callbacks suppressed
[ 2136.851638][ T2348] A link change request failed with some changes committed already. Interface 31{X may have been left with an inconsistent configuration, please check.
[ 2137.249410][  T841] tipc: Subscription rejected, illegal request
[ 2137.306526][ T2374] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 2137.318182][ T2369] wg1 speed is unknown, defaulting to 1000
[ 2137.379802][ T2374] netlink: 'syz.4.28073': attribute type 1 has an invalid length.
[ 2137.383772][ T2374] netlink: 'syz.4.28073': attribute type 2 has an invalid length.
[ 2137.579477][ T2383] netlink: 'syz.5.28076': attribute type 1 has an invalid length.
[ 2137.584951][ T2383] bridge0: Device is already in use.
[ 2138.012495][ T2406] openvswitch: netlink: IP tunnel attribute has 4460 unknown bytes.
[ 2138.183990][ T2414] netlink: 'syz.3.28083': attribute type 4 has an invalid length.
[ 2138.406206][ T2431] dvmrp4: entered allmulticast mode
[ 2138.518333][ T2428] xt_CT: No such helper "syz0"
[ 2138.556862][ T2441] netlink: 'syz.5.28089': attribute type 1 has an invalid length.
[ 2138.596465][ T2444] bond428: (slave veth229): Enslaving as an active interface with a down link
[ 2138.617705][ T2442] bond428: (slave veth231): Enslaving as an active interface with a down link
[ 2138.630816][ T2453] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16)
[ 2138.642140][ T2453] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[ 2139.355041][ T2492] netlink: 'syz.3.28096': attribute type 29 has an invalid length.
[ 2139.364235][ T2498] tipc: New replicast peer: 255.255.255.255
[ 2139.374755][ T2498] tipc: Enabled bearer <udp:syz1>, priority 26
[ 2139.377284][ T2492] netlink: 'syz.3.28096': attribute type 29 has an invalid length.
[ 2139.395380][ T2492] syzkaller1: entered promiscuous mode
[ 2139.397613][ T2492] syzkaller1: entered allmulticast mode
[ 2139.543598][ T2506] bond19: option mode: unable to set because the bond device has slaves
[ 2139.568521][ T2514] openvswitch: netlink: IPv4 tun info is not correct
[ 2139.620666][ T2517] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 2139.620998][ T2517] netlink: 'syz.4.28101': attribute type 21 has an invalid length.
[ 2139.786578][ T2538] bond458: entered promiscuous mode
[ 2139.788691][ T2538] 8021q: adding VLAN 0 to HW filter on device bond458
[ 2140.114633][ T2571] wg1 speed is unknown, defaulting to 1000
[ 2140.334279][ T2586] wg1 speed is unknown, defaulting to 1000
[ 2140.661205][ T2605] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[ 2140.666457][ T2605] syzkaller0: entered promiscuous mode
[ 2140.668505][ T2605] syzkaller0: entered allmulticast mode
[ 2140.948070][ T2619] __nla_validate_parse: 30 callbacks suppressed
[ 2140.948088][ T2619] netlink: 4 bytes leftover after parsing attributes in process `syz.3.28123'.
[ 2140.967969][ T2622] netlink: 36 bytes leftover after parsing attributes in process `syz.5.28124'.
[ 2140.971566][ T2622] netlink: 12 bytes leftover after parsing attributes in process `syz.5.28124'.
[ 2141.028098][ T2627] netlink: 4 bytes leftover after parsing attributes in process `syz.5.28125'.
[ 2141.037630][ T2627] netlink: 4 bytes leftover after parsing attributes in process `syz.5.28125'.
[ 2141.123770][ T2631] netlink: 56 bytes leftover after parsing attributes in process `syz.4.28126'.
[ 2141.146166][ T2631] netlink: 8 bytes leftover after parsing attributes in process `syz.4.28126'.
[ 2141.190383][ T2635] netlink: 20 bytes leftover after parsing attributes in process `syz.3.28129'.
[ 2141.452281][ T2649] netlink: 12 bytes leftover after parsing attributes in process `syz.3.28134'.
[ 2141.607993][ T2667] wg1 speed is unknown, defaulting to 1000
[ 2141.651553][ T2676] validate_nla: 1 callbacks suppressed
[ 2141.651563][ T2676] netlink: 'syz.5.28139': attribute type 10 has an invalid length.
[ 2141.660660][ T2674] netlink: 'syz.5.28139': attribute type 10 has an invalid length.
[ 2141.664249][ T2675] netlink: 12 bytes leftover after parsing attributes in process `syz.4.28138'.
[ 2141.921169][ T2691] A link change request failed with some changes committed already. Interface 26rB may have been left with an inconsistent configuration, please check.
[ 2142.139722][ T2709] xt_policy: too many policy elements
[ 2142.258764][ T2708] wg1 speed is unknown, defaulting to 1000
[ 2142.459602][ T2725] wg1 speed is unknown, defaulting to 1000
[ 2142.659974][ T2733] netlink: 'syz.5.28151': attribute type 1 has an invalid length.
[ 2142.796432][ T2738] bond431: (slave vxcan31): The slave device specified does not support setting the MAC address
[ 2142.803513][ T2738] bond431: (slave vxcan31): Error -95 calling set_mac_address
[ 2142.880197][ T2733] bond431: (slave bridge190): Enslaving as an active interface with a down link
[ 2143.081761][ T2761] netlink: 'syz.3.28157': attribute type 1 has an invalid length.
[ 2143.113922][ T2761] 8021q: adding VLAN 0 to HW filter on device bond460
[ 2143.184476][ T2761] bond460: (slave veth267): Enslaving as an active interface with a down link
[ 2143.231787][ T2761] bond460: (slave veth269): Enslaving as an active interface with a down link
[ 2143.247088][ T2761] bond52: (slave 26rB): Releasing backup interface
[ 2143.250837][ T2761] bond52: (slave 26rB): last VLAN challenged slave left bond - VLAN blocking is removed
[ 2143.264084][ T2761] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check.
[ 2143.389420][ T2775] bond460: (slave bridge193): Enslaving as an active interface with a down link
[ 2143.791452][ T2794] netlink: 'syz.3.28165': attribute type 10 has an invalid length.
[ 2143.995546][ T2806] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[ 2143.998755][ T2806] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[ 2144.005023][ T2807] mac80211_hwsim hwsim303 syzkaller0: entered promiscuous mode
[ 2144.007894][ T2807] mac80211_hwsim hwsim303 syzkaller0: entered allmulticast mode
[ 2144.011549][ T2806] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[ 2144.022871][ T2806] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[ 2144.026458][ T2806] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[ 2144.030094][ T2806] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[ 2144.035473][ T2806] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[ 2144.040150][ T2806] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[ 2144.257390][ T2831] netlink: 'syz.3.28171': attribute type 11 has an invalid length.
[ 2144.261118][ T2831] netlink: 'syz.3.28171': attribute type 11 has an invalid length.
[ 2144.429415][ T2849] netlink: 'syz.3.28176': attribute type 1 has an invalid length.
[ 2144.476606][ T2848] bond461: (slave vxcan15): The slave device specified does not support setting the MAC address
[ 2144.482081][ T2848] bond461: (slave vxcan15): Error -95 calling set_mac_address
[ 2144.657446][ T2871] workqueue: Failed to create a rescuer kthread for wq "bond462": -EINTR
[ 2144.739662][ T2877] bond462: entered promiscuous mode
[ 2144.752693][ T2877] 8021q: adding VLAN 0 to HW filter on device bond462
[ 2144.795628][ T2883] netlink: 'syz.3.28183': attribute type 1 has an invalid length.
[ 2144.816199][ T2883] bond463: entered promiscuous mode
[ 2144.818080][ T2883] bond463: entered allmulticast mode
[ 2144.820440][ T2883] 8021q: adding VLAN 0 to HW filter on device bond463
[ 2144.837771][ T2883] bridge194: entered promiscuous mode
[ 2144.840147][ T2883] bridge194: entered allmulticast mode
[ 2144.844735][ T2883] bond463: (slave bridge194): Enslaving as a backup interface with an up link
[ 2144.863037][ T2883] bridge195: entered promiscuous mode
[ 2144.864932][ T2883] bridge195: entered allmulticast mode
[ 2144.867326][ T2883] bond463: (slave bridge195): Enslaving as a backup interface with a down link
[ 2144.879412][ T2880] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[ 2144.934254][T10363] bond463: Warning: No 802.3ad response from the link partner for any adapters in the bond
[ 2145.064332][  T841] bond463: Warning: No 802.3ad response from the link partner for any adapters in the bond
[ 2145.161360][ T2926] syzkaller0: left promiscuous mode
[ 2145.164226][ T2926] tipc: Resetting bearer <eth:syzkaller0>
[ 2145.166982][ T2926] tipc: Resetting bearer <eth:syzkaller0>
[ 2145.171764][ T2926] vlan41: left promiscuous mode
[ 2145.202466][ T2926] bond493: left promiscuous mode
[ 2145.203987][ T2926] batadv0: left promiscuous mode
[ 2145.303403][ T2940] bridge208: entered promiscuous mode
[ 2145.305490][ T2940] bridge208: entered allmulticast mode
[ 2145.873357][ T2973] netlink: 'syz.4.28203': attribute type 29 has an invalid length.
[ 2145.877313][ T2973] syzkaller1: entered promiscuous mode
[ 2145.879126][ T2973] syzkaller1: entered allmulticast mode
[ 2146.154115][ T2982] bond494: option lacp_rate: mode dependency failed, not supported in mode active-backup(1)
[ 2146.159863][ T2982] bond494 (unregistering): Released all slaves
[ 2146.287723][ T2992] __nla_validate_parse: 20 callbacks suppressed
[ 2146.287741][ T2992] netlink: 12 bytes leftover after parsing attributes in process `syz.3.28208'.
[ 2146.298578][ T2992] netlink: 224 bytes leftover after parsing attributes in process `syz.3.28208'.
[ 2146.306496][ T2992] netlink: 424 bytes leftover after parsing attributes in process `syz.3.28208'.
[ 2146.364265][ T2989] tipc: Resetting bearer <eth:syzkaller0>
[ 2146.369250][ T2989] tipc: Resetting bearer <eth:syzkaller0>
[ 2146.369828][ T2996] netlink: 14 bytes leftover after parsing attributes in process `syz.4.28209'.
[ 2146.416844][ T2990] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[ 2146.527697][ T3001] netlink: 40 bytes leftover after parsing attributes in process `syz.5.28211'.
[ 2146.531649][ T3001] netlink: 4 bytes leftover after parsing attributes in process `syz.5.28211'.
[ 2146.611305][ T3010] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[ 2146.862867][ T3026] validate_nla: 7 callbacks suppressed
[ 2146.862885][ T3026] netlink: 'syz.3.28217': attribute type 1 has an invalid length.
[ 2146.896250][ T3026] bond464: (slave vxcan15): The slave device specified does not support setting the MAC address
[ 2146.901157][ T3026] bond464: (slave vxcan15): Error -95 calling set_mac_address
[ 2146.992616][ T3026] macvlan2: entered promiscuous mode
[ 2146.994469][ T3026] macvlan2: entered allmulticast mode
[ 2146.997667][ T3026] bond464: entered promiscuous mode
[ 2146.999862][ T3026] 8021q: adding VLAN 0 to HW filter on device macvlan2
[ 2147.008186][ T3026] bond464: left promiscuous mode
[ 2147.023577][  T128] block nbd5: Possible stuck request ffff88805d288000: control (read@0,1024B). Runtime 300 seconds
[ 2147.027184][  T128] block nbd5: Possible stuck request ffff88805d288200: control (read@1024,1024B). Runtime 300 seconds
[ 2147.031178][  T128] block nbd5: Possible stuck request ffff88805d288400: control (read@2048,1024B). Runtime 300 seconds
[ 2147.034851][  T128] block nbd5: Possible stuck request ffff88805d288600: control (read@3072,1024B). Runtime 300 seconds
[ 2147.285909][ T3047] netlink: 8 bytes leftover after parsing attributes in process `syz.3.28221'.
[ 2147.455758][ T3055] netlink: 16 bytes leftover after parsing attributes in process `syz.5.28226'.
[ 2147.458407][ T3055] netlink: 16 bytes leftover after parsing attributes in process `syz.5.28226'.
[ 2147.554214][ T3052] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[ 2147.585437][ T3051] syzkaller1: left promiscuous mode
[ 2147.587413][ T3051] syzkaller1: left allmulticast mode
[ 2147.591053][ T3051] 8021q: VLANs not supported on syzkaller1
[ 2147.621481][ T3063] netlink: 'syz.5.28227': attribute type 1 has an invalid length.
[ 2147.653298][ T3063] bond432: entered promiscuous mode
[ 2147.655694][ T3063] 8021q: adding VLAN 0 to HW filter on device bond432
[ 2147.681229][ T3063] bond432: (slave bridge191): making interface the new active one
[ 2147.686281][ T3063] bridge191: entered promiscuous mode
[ 2147.690207][ T3063] bond432: (slave bridge191): Enslaving as an active interface with an up link
[ 2147.766802][ T3072] netlink: 'syz.5.28230': attribute type 1 has an invalid length.
[ 2147.788372][ T3070] netlink: 'syz.3.28229': attribute type 39 has an invalid length.
[ 2147.804217][ T3072] 8021q: adding VLAN 0 to HW filter on device bond433
[ 2147.834849][ T3072] vlan0: entered promiscuous mode
[ 2147.836774][ T3072] bond433: entered promiscuous mode
[ 2147.838828][ T3072] vlan0: entered allmulticast mode
[ 2147.840743][ T3072] bond433: entered allmulticast mode
[ 2147.845736][ T3074] netlink: 44 bytes leftover after parsing attributes in process `syz.5.28230'.
[ 2147.859810][ T3074] 8021q: adding VLAN 0 to HW filter on device batadv56
[ 2147.865299][ T3074] bond433: (slave batadv56): making interface the new active one
[ 2147.868188][ T3074] batadv56: entered promiscuous mode
[ 2147.870326][ T3074] batadv56: entered allmulticast mode
[ 2147.875815][ T3074] bond433: (slave batadv56): Enslaving as an active interface with an up link
[ 2147.886351][ T3072] 8021q: adding VLAN 0 to HW filter on device batadv57
[ 2147.898406][ T3072] bond433: (slave batadv57): Enslaving as an active interface with an up link
[ 2148.162781][ T3079] tipc: Resetting bearer <eth:syzkaller0>
[ 2148.169146][ T3079] mac80211_hwsim hwsim303 syzkaller0: left promiscuous mode
[ 2148.173562][ T3079] mac80211_hwsim hwsim303 syzkaller0: left allmulticast mode
[ 2148.187669][ T3079] bond458: left promiscuous mode
[ 2148.242701][ T3079] bond462: left promiscuous mode
[ 2148.251080][ T3079] bond463: left promiscuous mode
[ 2148.254397][ T3079] bridge194: left promiscuous mode
[ 2148.257030][ T3079] bridge195: left promiscuous mode
[ 2148.259257][ T3079] bond463: left allmulticast mode
[ 2148.261169][ T3079] bridge194: left allmulticast mode
[ 2148.264790][ T3079] bridge195: left allmulticast mode
[ 2148.401241][ T3093] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check.
[ 2148.528165][ T3105] wg2: Caught tx_queue_len zero misconfig
[ 2148.691726][ T3123] bond52: (slave 26rB): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[ 2148.714066][ T3123] bond52: (slave 26rB): Enslaving as an active interface with an up link
[ 2148.717418][ T3123] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check.
[ 2148.724739][ T3124] netlink: 'syz.4.28245': attribute type 4 has an invalid length.
[ 2148.826721][ T3136] nbd: couldn't find a device at index 3
[ 2149.043396][ T3154] bond0: option lp_interval: invalid value (0)
[ 2149.045397][ T3154] bond0: option lp_interval: allowed values 1 - 2147483647
[ 2149.079467][ T3156] netlink: 'syz.3.28253': attribute type 1 has an invalid length.
[ 2149.098595][ T3156] 8021q: adding VLAN 0 to HW filter on device bond465
[ 2149.129427][ T3156] bond465: (slave veth271): Enslaving as an active interface with a down link
[ 2149.196988][ T3159] wg1 speed is unknown, defaulting to 1000
[ 2149.988724][ T3193] A link change request failed with some changes committed already. Interface 26rB may have been left with an inconsistent configuration, please check.
[ 2150.072164][ T3200] mac80211_hwsim hwsim303 syzkaller0: entered promiscuous mode
[ 2150.074476][ T3200] mac80211_hwsim hwsim303 syzkaller0: entered allmulticast mode
[ 2150.104501][ T3202] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check.
[ 2150.253473][ T3206] tipc: Resetting bearer <eth:syzkaller0>
[ 2150.617465][ T3220] wg1 speed is unknown, defaulting to 1000
[ 2150.814407][ T3236] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[ 2150.817392][ T3236] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[ 2150.926749][T17300] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2150.929105][T17300] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2150.946179][ T3239] netlink: 'syz.4.28277': attribute type 4 has an invalid length.
[ 2151.304664][ T3262] __nla_validate_parse: 21 callbacks suppressed
[ 2151.304685][ T3262] netlink: 8 bytes leftover after parsing attributes in process `syz.4.28284'.
[ 2151.310758][ T3262] netlink: 4 bytes leftover after parsing attributes in process `syz.4.28284'.
[ 2151.355553][ T3262] netlink: 16 bytes leftover after parsing attributes in process `syz.4.28284'.
[ 2151.388637][ T3266] IPVS: set_ctl: invalid protocol: 137 172.30.1.5:20001
[ 2151.433826][ T3268] netlink: 4 bytes leftover after parsing attributes in process `syz.4.28286'.
[ 2151.584354][ T3273] netlink: 14 bytes leftover after parsing attributes in process `syz.4.28288'.
[ 2151.870636][ T3286] netlink: 4 bytes leftover after parsing attributes in process `syz.5.28291'.
[ 2151.884078][ T3286] bond421: (slave vcan0): Releasing backup interface
[ 2151.886770][ T3286] vcan0 (unregistering): left promiscuous mode
[ 2151.891352][ T3286] bond421: Destroying bond
[ 2151.903973][ T3286] bond421 (unregistering): Released all slaves
[ 2152.035326][ T3288] netlink: 44 bytes leftover after parsing attributes in process `syz.5.28292'.
[ 2152.147439][ T3292] netlink: 'syz.5.28292': attribute type 1 has an invalid length.
[ 2152.150303][ T3292] netlink: 224 bytes leftover after parsing attributes in process `syz.5.28292'.
[ 2152.299004][ T3275] tipc: Resetting bearer <eth:syzkaller0>
[ 2152.628628][ T3309] netlink: 'syz.5.28297': attribute type 1 has an invalid length.
[ 2152.727719][ T3316] netlink: 120 bytes leftover after parsing attributes in process `syz.4.28299'.
[ 2152.729134][ T3307] tipc: Resetting bearer <eth:syzkaller0>
[ 2152.735274][ T3316] netlink: 'syz.4.28299': attribute type 1 has an invalid length.
[ 2152.737897][ T3316] netlink: 64 bytes leftover after parsing attributes in process `syz.4.28299'.
[ 2152.834544][ T3309] bond421: entered promiscuous mode
[ 2152.837264][ T3309] 8021q: adding VLAN 0 to HW filter on device bond421
[ 2152.877594][ T3313] bond421: (slave bridge192): making interface the new active one
[ 2152.884016][ T3313] bridge192: entered promiscuous mode
[ 2152.888395][ T3313] bond421: (slave bridge192): Enslaving as an active interface with an up link
[ 2155.745565][ T3343] netlink: 'syz.5.28304': attribute type 1 has an invalid length.
[ 2155.914301][ T3347] bond434: (slave veth233): Enslaving as an active interface with a down link
[ 2155.987961][ T3343] netlink: 'syz.5.28304': attribute type 10 has an invalid length.
[ 2156.095809][ T3353] netlink: 'syz.4.28306': attribute type 1 has an invalid length.
[ 2156.130890][ T3353] bond494: entered promiscuous mode
[ 2156.133586][ T3353] bond494: entered allmulticast mode
[ 2156.135607][ T3353] 8021q: adding VLAN 0 to HW filter on device bond494
[ 2156.159053][ T3353] macvlan9: entered promiscuous mode
[ 2156.162151][ T3353] macvlan9: entered allmulticast mode
[ 2156.165992][ T3353] 8021q: adding VLAN 0 to HW filter on device macvlan9
[ 2156.189749][ T3361] netlink: 'syz.3.28305': attribute type 1 has an invalid length.
[ 2156.240322][ T3361] bond467: (slave veth273): Enslaving as an active interface with a down link
[ 2156.243552][ T3367] netlink: 'syz.5.28308': attribute type 29 has an invalid length.
[ 2156.245654][ T3361] netlink: 'syz.3.28305': attribute type 10 has an invalid length.
[ 2156.249669][ T3359] netlink: 'syz.5.28308': attribute type 29 has an invalid length.
[ 2156.289627][ T3370] xt_hashlimit: size too large, truncated to 1048576
[ 2156.322581][ T3377] __nla_validate_parse: 12 callbacks suppressed
[ 2156.322598][ T3377] netlink: 68 bytes leftover after parsing attributes in process `syz.5.28311'.
[ 2156.402479][ T3383] bond468: (slave bond_slave_1): Device is not bonding slave
[ 2156.404743][ T3383] bond468: option active_slave: invalid value (bond_slave_1)
[ 2156.413580][ T3387] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.28310'.
[ 2156.417219][ T3387] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.28310'.
[ 2156.424204][ T3383] bond468 (unregistering): Released all slaves
[ 2156.448807][ T3381] wg1 speed is unknown, defaulting to 1000
[ 2156.483170][ T3387] netlink: 16 bytes leftover after parsing attributes in process `syz.3.28310'.
[ 2156.529399][ T3390] netlink: 4 bytes leftover after parsing attributes in process `syz.4.28312'.
[ 2156.683252][ T3404] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[ 2156.717400][ T3406] netlink: 4 bytes leftover after parsing attributes in process `syz.3.28319'.
[ 2156.720380][ T3407] netlink: 4 bytes leftover after parsing attributes in process `syz.3.28319'.
[ 2156.734493][ T3407] netlink: 4 bytes leftover after parsing attributes in process `syz.3.28319'.
[ 2156.748378][ T3407] netlink: 4 bytes leftover after parsing attributes in process `syz.3.28319'.
[ 2156.759040][ T3407] netlink: 4 bytes leftover after parsing attributes in process `syz.3.28319'.
[ 2156.950242][ T3412] bond468: entered promiscuous mode
[ 2156.954518][ T3412] bond468: entered allmulticast mode
[ 2156.957012][ T3412] 8021q: adding VLAN 0 to HW filter on device bond468
[ 2157.046944][ T3414] wg1 speed is unknown, defaulting to 1000
[ 2157.270291][ T3431] validate_nla: 7 callbacks suppressed
[ 2157.270304][ T3431] netlink: 'syz.5.28323': attribute type 1 has an invalid length.
[ 2157.293145][ T3431] 8021q: adding VLAN 0 to HW filter on device bond435
[ 2157.948712][ T3478] netlink: 'syz.4.28335': attribute type 10 has an invalid length.
[ 2157.955731][ T3478] netlink: 'syz.4.28335': attribute type 10 has an invalid length.
[ 2158.164779][ T3512] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR
[ 2158.196300][ T3519] syzkaller0: entered promiscuous mode
[ 2158.266207][ T3519] netlink: 'syz.4.28344': attribute type 11 has an invalid length.
[ 2158.352903][ T3518] syzkaller0: left promiscuous mode
[ 2158.536093][ T3538] bond495: Unable to set up delay as MII monitoring is disabled
[ 2158.540477][ T3538] bond495 (unregistering): Released all slaves
[ 2158.654362][ T3552] netlink: 'syz.4.28352': attribute type 21 has an invalid length.
[ 2158.715943][ T3561] netlink: 'syz.3.28354': attribute type 18 has an invalid length.
[ 2158.908333][ T3575] netlink: del zone limit has 8 unknown bytes
[ 2158.953454][ T3577] bond52: option mode: unable to set because the bond device has slaves
[ 2158.956359][ T3577] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check.
[ 2159.018289][ T3583] netlink: 'syz.3.28360': attribute type 1 has an invalid length.
[ 2159.114133][ T3587] netlink: 'syz.3.28361': attribute type 1 has an invalid length.
[ 2159.134213][ T3587] bond470: entered promiscuous mode
[ 2159.136363][ T3587] 8021q: adding VLAN 0 to HW filter on device bond470
[ 2159.168359][ T3587] bond470: (slave veth275): making interface the new active one
[ 2159.171124][ T3587] veth275: entered promiscuous mode
[ 2159.176101][ T3587] bond470: (slave veth275): Enslaving as an active interface with an up link
[ 2159.341156][ T3592] netlink: 'syz.3.28363': attribute type 1 has an invalid length.
[ 2159.397312][ T3592] bond471: (slave bridge197): Enslaving as a backup interface with an up link
[ 2159.409951][ T3592] macvlan2: entered promiscuous mode
[ 2159.412843][ T3592] macvlan2: entered allmulticast mode
[ 2159.416843][ T3592] bond471: entered promiscuous mode
[ 2159.418914][ T3592] bridge197: entered promiscuous mode
[ 2159.421761][ T3592] 8021q: adding VLAN 0 to HW filter on device macvlan2
[ 2159.428090][ T3592] bond471: left promiscuous mode
[ 2159.430070][ T3592] bridge197: left promiscuous mode
[ 2159.445931][ T3609] tipc: Resetting bearer <eth:syzkaller0>
[ 2159.606737][ T3626] netlink: 'syz.4.28371': attribute type 1 has an invalid length.
[ 2159.979661][ T3665] netlink: 'syz.4.28383': attribute type 4 has an invalid length.
[ 2160.140013][ T3684] bond496: entered promiscuous mode
[ 2160.147972][ T3684] 8021q: adding VLAN 0 to HW filter on device bond496
[ 2160.178380][ T3684] ipvlan1: entered allmulticast mode
[ 2160.184536][ T3684] bond496: entered allmulticast mode
[ 2160.207248][ T3684] bond496: (slave bridge211): making interface the new active one
[ 2160.210382][ T3684] bridge211: entered promiscuous mode
[ 2160.215896][ T3684] bridge211: entered allmulticast mode
[ 2160.220057][ T3684] bond496: (slave bridge211): Enslaving as an active interface with an up link
[ 2160.426675][ T3704] bond472: entered allmulticast mode
[ 2160.616027][ T3728] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[ 2160.620393][ T3728] xt_ipcomp: unknown flags 1D
[ 2160.670115][ T3729] bond497: entered promiscuous mode
[ 2160.672399][ T3729] 8021q: adding VLAN 0 to HW filter on device bond497
[ 2160.687568][ T3729] ipvlan14: entered allmulticast mode
[ 2160.689298][ T3729] bond497: entered allmulticast mode
[ 2160.714960][ T3729] bond497: (slave bridge212): making interface the new active one
[ 2160.717400][ T3729] bridge212: entered promiscuous mode
[ 2160.719186][ T3729] bridge212: entered allmulticast mode
[ 2160.723597][ T3729] bond497: (slave bridge212): Enslaving as an active interface with an up link
[ 2160.839700][ T3743] bond52: (slave 26rB): Releasing backup interface
[ 2160.844055][ T3743] bond52: (slave 26rB): last VLAN challenged slave left bond - VLAN blocking is removed
[ 2160.863666][ T3743] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check.
[ 2160.895936][ T3748] bond437: entered promiscuous mode
[ 2160.898360][ T3748] 8021q: adding VLAN 0 to HW filter on device bond437
[ 2160.923539][ T3748] 8021q: adding VLAN 0 to HW filter on device bond437
[ 2160.927040][ T3748] bond437: (slave wireguard16): The slave device specified does not support setting the MAC address
[ 2160.931110][ T3748] bond437: (slave wireguard16): Setting fail_over_mac to active for active-backup mode
[ 2160.951257][ T3748] bond437: (slave wireguard16): making interface the new active one
[ 2160.955740][ T3748] wireguard16: entered promiscuous mode
[ 2160.963615][ T3748] bond437: (slave wireguard16): Enslaving as an active interface with an up link
[ 2160.977663][ T3749] bond437: (slave wireguard17): The slave device specified does not support setting the MAC address
[ 2160.993944][ T3749] bond437: (slave wireguard17): Enslaving as a backup interface with an up link
[ 2161.363319][ T3778] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check.
[ 2161.421304][ T3782] bond498: Unable to set down delay as MII monitoring is disabled
[ 2161.429161][ T3782] bond498 (unregistering): Released all slaves
[ 2161.559697][ T3788] IPVS: length: 528 != 632
[ 2161.566118][ T3788] __nla_validate_parse: 168 callbacks suppressed
[ 2161.566134][ T3788] netlink: 12 bytes leftover after parsing attributes in process `syz.4.28419'.
[ 2161.573873][ T3784] sctp: [Deprecated]: syz.5.28417 (pid 3784) Use of struct sctp_assoc_value in delayed_ack socket option.
[ 2161.573873][ T3784] Use struct sctp_sack_info instead
[ 2161.618172][ T3788] bond498: (slave vxcan1): The slave device specified does not support setting the MAC address
[ 2161.630501][ T3788] bond498: (slave vxcan1): Error -95 calling set_mac_address
[ 2161.646141][ T3793] netlink: 12 bytes leftover after parsing attributes in process `syz.5.28420'.
[ 2161.685854][ T3794] netlink: 8 bytes leftover after parsing attributes in process `syz.4.28419'.
[ 2161.688607][ T3794] netlink: 8 bytes leftover after parsing attributes in process `syz.4.28419'.
[ 2161.721047][ T3793] 8021q: adding VLAN 0 to HW filter on device bond438
[ 2161.733555][ T3794] macvlan9: entered promiscuous mode
[ 2161.735574][ T3794] macvlan9: entered allmulticast mode
[ 2161.738640][ T3794] bond498: (slave macvlan9): Error -98 calling set_mac_address
[ 2161.751357][ T3796] team_slave_1: entered promiscuous mode
[ 2161.758305][ T3796] bond438: (slave team_slave_1): Enslaving as an active interface with an up link
[ 2161.827703][ T3803] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING
[ 2161.840766][ T3801] netlink: 204 bytes leftover after parsing attributes in process `syz.5.28422'.
[ 2161.844601][ T3801] netlink: 12 bytes leftover after parsing attributes in process `syz.5.28422'.
[ 2161.847304][ T3801] tc_dump_action: action bad kind
[ 2161.855477][ T3801] netlink: 14 bytes leftover after parsing attributes in process `syz.5.28422'.
[ 2161.918776][ T3816] netlink: 12 bytes leftover after parsing attributes in process `syz.5.28424'.
[ 2161.921127][ T3817] syzkaller0: entered promiscuous mode
[ 2161.928320][ T3817] tipc: Resetting bearer <eth:syzkaller0>
[ 2161.939627][ T3816] netlink: 12 bytes leftover after parsing attributes in process `syz.5.28424'.
[ 2162.152408][ T3836] netlink: 48 bytes leftover after parsing attributes in process `syz.3.28432'.
[ 2162.353008][ T3855] validate_nla: 11 callbacks suppressed
[ 2162.353019][ T3855] netlink: 'syz.4.28437': attribute type 49 has an invalid length.
[ 2162.443821][ T3864] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[ 2162.628702][ T3864] tipc: Resetting bearer <eth:syzkaller0>
[ 2162.704829][ T3864] batman_adv: batadv0: Interface deactivated: veth225
[ 2162.865843][ T3874] wg1 speed is unknown, defaulting to 1000
[ 2162.925324][ T3882] netlink: 'syz.3.28447': attribute type 13 has an invalid length.
[ 2162.928236][ T3883] netlink: 'syz.5.28446': attribute type 2 has an invalid length.
[ 2162.930742][ T3883] netlink: 'syz.5.28446': attribute type 1 has an invalid length.
[ 2162.942585][ T3883] netlink: 'syz.5.28446': attribute type 1 has an invalid length.
[ 2162.953043][ T3883] netlink: 'syz.5.28446': attribute type 39 has an invalid length.
[ 2163.213755][ T3900] batman_adv: batadv0: Removing interface: veth193
[ 2163.217385][ T3900] batman_adv: batadv0: Removing interface: ipvlan9
[ 2163.319631][ T3907] tipc: Resetting bearer <eth:syzkaller0>
[ 2163.464148][ T3914] 8021q: adding VLAN 0 to HW filter on device bond499
[ 2163.513803][ T3928] xt_hashlimit: size too large, truncated to 1048576
[ 2163.591501][ T3934] netlink: 'syz.5.28457': attribute type 1 has an invalid length.
[ 2163.597031][ T3914] 8021q: adding VLAN 0 to HW filter on device bond500
[ 2163.601381][ T3914] bond499: (slave bond500): Enslaving as an active interface with an up link
[ 2163.623922][ T3929] bond499 (unregistering): (slave bond500): Releasing backup interface
[ 2163.635389][ T3929] bond499 (unregistering): Released all slaves
[ 2163.660828][ T3935] netlink: 'syz.3.28458': attribute type 1 has an invalid length.
[ 2163.826914][ T3951] 0{X: renamed from 31{X
[ 2163.841231][ T3951] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check.
[ 2163.852399][ T3952] 1{X: renamed from 30{X (while UP)
[ 2163.856802][ T3954] netlink: 'syz.4.28463': attribute type 11 has an invalid length.
[ 2163.857142][ T3952] A link change request failed with some changes committed already. Interface 31{X may have been left with an inconsistent configuration, please check.
[ 2163.922855][ T3962] xt_policy: output policy not valid in PREROUTING and INPUT
[ 2163.936743][ T3962] openvswitch: netlink: Key type 2064 is out of range max 32
[ 2163.951111][ T3960] netlink: 'syz.3.28466': attribute type 13 has an invalid length.
[ 2163.954854][ T3958] netlink: 'syz.3.28466': attribute type 13 has an invalid length.
[ 2164.115205][ T3978] bond499: entered promiscuous mode
[ 2164.117210][ T3978] 8021q: adding VLAN 0 to HW filter on device bond499
[ 2164.127745][ T3978] bond499 (unregistering): Released all slaves
[ 2164.261268][ T3989] Bluetooth: hci1: expected 36 bytes, got 2 bytes
[ 2164.610467][ T4035] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[ 2164.666849][ T4037] wg1 speed is unknown, defaulting to 1000
[ 2164.691376][ T4043] tipc: Resetting bearer <eth:syzkaller0>
[ 2164.906248][   T77] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2164.912146][   T77] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2165.050710][ T4058] wg1 speed is unknown, defaulting to 1000
[ 2165.718601][ T4083] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[ 2165.797554][ T4085] tipc: Resetting bearer <eth:syzkaller0>
[ 2165.800304][ T4085] tipc: Resetting bearer <eth:syzkaller0>
[ 2165.909266][ T4093] bond473: entered promiscuous mode
[ 2165.911265][ T4093] 8021q: adding VLAN 0 to HW filter on device bond473
[ 2166.142820][ T4112] bond474 (unregistering): Released all slaves
[ 2166.199626][ T4120] xt_cgroup: invalid path, errno=-2
[ 2166.325283][ T4130] sctp: [Deprecated]: syz.3.28516 (pid 4130) Use of int in maxseg socket option.
[ 2166.325283][ T4130] Use struct sctp_assoc_value instead
[ 2166.507409][ T4144] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check.
[ 2166.579185][ T4148] __nla_validate_parse: 37 callbacks suppressed
[ 2166.579202][ T4148] netlink: 12 bytes leftover after parsing attributes in process `syz.4.28523'.
[ 2166.907249][ T4170] netlink: 14 bytes leftover after parsing attributes in process `syz.5.28531'.
[ 2167.029210][ T4188] netlink: 4 bytes leftover after parsing attributes in process `syz.5.28535'.
[ 2167.097188][ T4188] bond439: Invalid ad_actor_system MAC address.
[ 2167.099491][ T4188] bond439: option ad_actor_system: invalid value (7)
[ 2167.105134][ T4188] bond439 (unregistering): Released all slaves
[ 2167.139462][ T4185] netlink: 8 bytes leftover after parsing attributes in process `syz.4.28534'.
[ 2167.237581][ T4199] netlink: 228 bytes leftover after parsing attributes in process `syz.4.28538'.
[ 2167.251520][ T4196] 8021q: adding VLAN 0 to HW filter on device bond474
[ 2167.288005][ T4205] 8021q: adding VLAN 0 to HW filter on device bond474
[ 2167.304452][ T4205] bond474: (slave vcan0): The slave device specified does not support setting the MAC address
[ 2167.309662][ T4205] bond474: (slave vcan0): Error -95 calling set_mac_address
[ 2167.412265][ T4199] netlink: 4 bytes leftover after parsing attributes in process `syz.4.28538'.
[ 2167.486697][ T4219] netlink: 248 bytes leftover after parsing attributes in process `syz.5.28542'.
[ 2167.507995][ T4222] 8021q: adding VLAN 0 to HW filter on device ipvlan0
[ 2167.525067][ T4222] validate_nla: 7 callbacks suppressed
[ 2167.525085][ T4222] netlink: 'syz.3.28543': attribute type 4 has an invalid length.
[ 2167.544513][ T4224] netlink: 'syz.4.28544': attribute type 29 has an invalid length.
[ 2167.544637][ T4222] netlink: 'syz.3.28543': attribute type 4 has an invalid length.
[ 2167.547498][ T4224] netlink: 'syz.4.28544': attribute type 29 has an invalid length.
[ 2167.560882][ T4224] syzkaller1: entered promiscuous mode
[ 2167.562839][ T4224] syzkaller1: entered allmulticast mode
[ 2167.566308][ T4222] netlink: 'syz.3.28543': attribute type 4 has an invalid length.
[ 2167.662137][ T4233] netlink: 'syz.4.28547': attribute type 1 has an invalid length.
[ 2167.680314][ T4234] bond19: (slave ): Removing an active aggregator
[ 2167.687242][ T4234] bond19: (slave ): Releasing backup interface
[ 2167.692651][ T4234] bond19: (slave ): last VLAN challenged slave left bond - VLAN blocking is removed
[ 2167.698401][ T4234] team0: left allmulticast mode
[ 2167.703286][ T4234] bond459: left allmulticast mode
[ 2167.705347][ T4234] bridge195: left allmulticast mode
[ 2167.707374][ T4234] team0: left promiscuous mode
[ 2167.710349][ T4234] bond459: left promiscuous mode
[ 2167.713129][ T4234] bridge195: left promiscuous mode
[ 2167.717037][ T4234] bridge0: port 1(team0) entered disabled state
[ 2167.741282][ T4234] tipc: Resetting bearer <eth:syzkaller0>
[ 2167.753215][ T4234] bond457: (slave bridge191): Releasing backup interface
[ 2167.766012][ T4234] team0: Port device bond459 removed
[ 2167.774060][ T4234] bond463: (slave bridge192): Releasing backup interface
[ 2167.783302][ T4234] team0: Port device bridge195 removed
[ 2167.786420][ T4234] bond469: (slave bridge196): Releasing backup interface
[ 2167.791385][ T4234] bond474: (slave bridge199): Releasing active interface
[ 2167.797730][ T4234] bond475: (slave bridge200): Releasing active interface
[ 2167.803491][ T4234] bond478: (slave bridge201): Releasing backup interface
[ 2167.808990][ T4234] bond480: (slave bridge202): Releasing backup interface
[ 2167.815906][ T4234] bond487: (slave bridge204): Releasing backup interface
[ 2167.818162][ T4234] bridge204: left allmulticast mode
[ 2167.823259][ T4234] bond489: (slave bridge205): Releasing active interface
[ 2167.827596][ T4234] bond489: (slave ip6gretap6): Releasing active interface
[ 2167.834508][ T4234] bond491: (slave veth217): Releasing active interface
[ 2167.839895][ T4234] bond492: (slave bridge207): Releasing backup interface
[ 2167.845938][ T4234] bond493: (slave batadv0): Releasing active interface
[ 2167.848212][ T4234] batadv0: left allmulticast mode
[ 2167.855145][ T4234] bond496: (slave bridge211): Releasing backup interface
[ 2167.857834][ T4234] bridge211: left promiscuous mode
[ 2167.859962][ T4234] bridge211: left allmulticast mode
[ 2167.873123][ T4234] bond497: (slave bridge212): Releasing backup interface
[ 2167.875221][ T4234] bridge212: left promiscuous mode
[ 2167.876784][ T4234] bridge212: left allmulticast mode
[ 2167.886063][ T4242] netlink: 4 bytes leftover after parsing attributes in process `syz.5.28549'.
[ 2167.915686][ T4232] bond476: Unable to set up delay as MII monitoring is disabled
[ 2167.920869][ T4232] bond476 (unregistering): Released all slaves
[ 2168.079319][ T4257] netlink: 'syz.5.28553': attribute type 29 has an invalid length.
[ 2168.094084][ T4257] netlink: 'syz.5.28553': attribute type 29 has an invalid length.
[ 2168.104313][ T4257] syzkaller1: entered promiscuous mode
[ 2168.106048][ T4257] syzkaller1: entered allmulticast mode
[ 2168.179522][ T4264] bond476: entered allmulticast mode
[ 2168.203329][ T4264] netlink: 44 bytes leftover after parsing attributes in process `syz.3.28555'.
[ 2168.289590][ T4273] netlink: 120 bytes leftover after parsing attributes in process `syz.3.28558'.
[ 2168.295601][ T4273] netlink: 'syz.3.28558': attribute type 1 has an invalid length.
[ 2168.327755][ T4273] mac80211_hwsim hwsim303 syzkaller0: Caught tx_queue_len zero misconfig
[ 2168.365448][ T4282] netlink: 'syz.4.28560': attribute type 10 has an invalid length.
[ 2168.965550][ T4336] 1{X: left allmulticast mode
[ 2169.032251][ T4336] syzkaller1: left promiscuous mode
[ 2169.034444][ T4336] syzkaller1: left allmulticast mode
[ 2169.114917][ T4336] tipc: Resetting bearer <eth:syzkaller0>
[ 2169.334218][ T4336] syzkaller0: left promiscuous mode
[ 2169.336041][ T4336] syzkaller0: left allmulticast mode
[ 2169.398168][ T4336] vlan41: left allmulticast mode
[ 2169.399926][ T4336] bond493: left allmulticast mode
[ 2169.418469][ T4336] bond494: left promiscuous mode
[ 2169.420232][ T4336] bond494: left allmulticast mode
[ 2169.431269][ T4336] bond496: left promiscuous mode
[ 2169.438310][ T4336] ipvlan1: left allmulticast mode
[ 2169.443525][ T4336] bond496: left allmulticast mode
[ 2169.447527][ T4336] bond497: left promiscuous mode
[ 2169.454445][ T4336] ipvlan14: left allmulticast mode
[ 2169.459021][ T4336] bond497: left allmulticast mode
[ 2169.494091][ T4345] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[ 2169.618116][ T4357] bond477: Unable to set down delay as MII monitoring is disabled
[ 2169.623876][ T4357] bond477 (unregistering): Released all slaves
[ 2169.969095][ T4394] ip6t_srh: unknown srh match flags  4000
[ 2170.254097][ T4425] IPVS: set_ctl: invalid protocol: 0 172.20.20.170:20001
[ 2170.396177][ T4442] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[ 2170.398325][ T4442] IPv6: NLM_F_CREATE should be set when creating new route
[ 2170.400526][ T4442] IPv6: NLM_F_CREATE should be set when creating new route
[ 2170.402839][ T4442] IPv6: NLM_F_CREATE should be set when creating new route
[ 2170.655841][ T4459] Cannot find del_set index 3 as target
[ 2170.864080][ T4469] wg1 speed is unknown, defaulting to 1000
[ 2171.080976][ T4480] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[ 2171.098565][ T4479] batman_adv: batadv0: Adding interface: macvtap0
[ 2171.100501][ T4479] batman_adv: batadv0: The MTU of interface macvtap0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 2171.108469][ T4479] batman_adv: batadv0: Not using interface macvtap0 (retrying later): interface not active
[ 2171.446979][ T4489] wg1 speed is unknown, defaulting to 1000
[ 2171.626431][ T4506] __nla_validate_parse: 75 callbacks suppressed
[ 2171.626445][ T4505] netlink: 12 bytes leftover after parsing attributes in process `syz.3.28608'.
[ 2171.626447][ T4506] netlink: 12 bytes leftover after parsing attributes in process `syz.3.28608'.
[ 2171.676822][ T4506] bond477: entered promiscuous mode
[ 2171.683679][ T4506] 8021q: adding VLAN 0 to HW filter on device bond477
[ 2171.703767][ T4508] bridge198: entered promiscuous mode
[ 2171.710528][ T4508] bond477: (slave bridge198): Enslaving as an active interface with an up link
[ 2171.726976][ T4506] netlink: 4 bytes leftover after parsing attributes in process `syz.3.28608'.
[ 2171.753017][ T4506] bond477 (unregistering): (slave bridge198): Releasing backup interface
[ 2171.756582][ T4506] bridge198: left promiscuous mode
[ 2171.763371][ T4506] bond477 (unregistering): Released all slaves
[ 2171.883033][ T4516] netlink: 8 bytes leftover after parsing attributes in process `syz.3.28610'.
[ 2171.967294][ T4520] netlink: 212348 bytes leftover after parsing attributes in process `syz.3.28612'.
[ 2171.970305][ T4520] netlink: Conntrack attr type has unexpected length (type=2, length=0, expected=2)
[ 2172.195826][ T4529] netlink: 20 bytes leftover after parsing attributes in process `syz.4.28615'.
[ 2172.438014][ T4547] netlink: 8 bytes leftover after parsing attributes in process `syz.5.28619'.
[ 2172.453675][ T4547] netlink: 12 bytes leftover after parsing attributes in process `syz.5.28619'.
[ 2172.494732][ T4556] netlink: 56 bytes leftover after parsing attributes in process `syz.4.28620'.
[ 2172.526601][ T4555] 8021q: adding VLAN 0 to HW filter on device bond502
[ 2172.678619][ T4582] netlink: 4 bytes leftover after parsing attributes in process `syz.5.28629'.
[ 2172.719264][ T4579] pim6reg1: entered allmulticast mode
[ 2172.843595][ T4592] bond439: option miimon: invalid value (18446744073709551607)
[ 2172.846047][ T4592] bond439: option miimon: allowed values 0 - 2147483647
[ 2172.850153][ T4592] bond439 (unregistering): Released all slaves
[ 2172.862748][ T4590] syzkaller1: entered promiscuous mode
[ 2172.864812][ T4590] syzkaller1: entered allmulticast mode
[ 2173.118483][ T4609] dvmrp6: entered allmulticast mode
[ 2173.222167][ T4625] validate_nla: 12 callbacks suppressed
[ 2173.222177][ T4625] netlink: 'syz.3.28642': attribute type 4 has an invalid length.
[ 2173.237445][ T4625] netlink: 'syz.3.28642': attribute type 4 has an invalid length.
[ 2173.292539][ T4632] syzkaller1: entered promiscuous mode
[ 2173.294251][ T4632] syzkaller1: entered allmulticast mode
[ 2173.520109][ T4655] bond503: entered promiscuous mode
[ 2173.523101][ T4655] 8021q: adding VLAN 0 to HW filter on device bond503
[ 2173.527686][ T4658] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[ 2173.572064][ T4660] netlink: 'syz.4.28652': attribute type 15 has an invalid length.
[ 2173.579308][ T4662] netlink: 'syz.5.28653': attribute type 1 has an invalid length.
[ 2173.754209][ T4688] netlink: 'syz.5.28659': attribute type 8 has an invalid length.
[ 2173.816986][ T4692] netlink: 'syz.3.28660': attribute type 1 has an invalid length.
[ 2173.838414][ T4696] netlink: 'syz.4.28662': attribute type 1 has an invalid length.
[ 2173.857948][ T4692] 8021q: adding VLAN 0 to HW filter on device bond478
[ 2173.917919][ T4692] bond478: (slave veth277): Enslaving as an active interface with a down link
[ 2173.921293][ T4696] bond504: entered promiscuous mode
[ 2173.926988][ T4692] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[ 2173.944798][ T4697] wg1 speed is unknown, defaulting to 1000
[ 2174.268820][ T4727] netlink: 'syz.4.28667': attribute type 1 has an invalid length.
[ 2174.283742][ T4723] 8021q: adding VLAN 0 to HW filter on device bond479
[ 2174.322508][ T4730] openvswitch: netlink: Flow actions attr not present in new flow.
[ 2174.356003][ T4727] bond505: (slave vxcan1): The slave device specified does not support setting the MAC address
[ 2174.359916][ T4727] bond505: (slave vxcan1): Error -95 calling set_mac_address
[ 2174.381148][ T4730] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[ 2174.425906][ T4731] bond505: (slave bridge214): Enslaving as an active interface with a down link
[ 2174.631058][ T4723] tipc: Resetting bearer <eth:syzkaller0>
[ 2174.767571][ T4740] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[ 2174.822835][ T4747] macvtap2: entered promiscuous mode
[ 2174.824734][ T4747] mac80211_hwsim hwsim280 wlan0: entered promiscuous mode
[ 2174.827426][ T4747] macvtap2: entered allmulticast mode
[ 2174.829439][ T4747] mac80211_hwsim hwsim280 wlan0: entered allmulticast mode
[ 2174.889682][ T4747] macvtap3: entered promiscuous mode
[ 2174.891281][ T4747] macvtap3: entered allmulticast mode
[ 2175.356881][ T4799] bond481: (slave bond_slave_1): Device is not bonding slave
[ 2175.363755][ T4808] netlink: 'syz.4.28688': attribute type 30 has an invalid length.
[ 2175.371463][ T4799] bond481: option active_slave: invalid value (bond_slave_1)
[ 2175.388984][ T4799] bond481 (unregistering): Released all slaves
[ 2175.428887][ T4808] bond506: option arp_missed_max: mode dependency failed, not supported in mode 802.3ad(4)
[ 2175.435304][ T4808] bond506 (unregistering): Released all slaves
[ 2175.521318][ T4819] macvtap3: entered promiscuous mode
[ 2175.523362][ T4819] team0: entered promiscuous mode
[ 2175.526998][ T4819] 8021q: adding VLAN 0 to HW filter on device macvtap3
[ 2175.610682][ T4828] syzkaller1: entered promiscuous mode
[ 2175.612905][ T4828] syzkaller1: entered allmulticast mode
[ 2175.630245][ T4828] netlink: 'syz.5.28693': attribute type 1 has an invalid length.
[ 2175.660987][ T4828] 8021q: adding VLAN 0 to HW filter on device bond439
[ 2175.690484][ T4828] macvlan2: entered promiscuous mode
[ 2175.693011][ T4828] macvlan2: entered allmulticast mode
[ 2175.695786][ T4828] bond439: entered allmulticast mode
[ 2175.697565][ T4828] bond439: entered promiscuous mode
[ 2175.699925][ T4828] 8021q: adding VLAN 0 to HW filter on device macvlan2
[ 2175.706776][ T4828] team0: Port device macvlan2 added
[ 2175.730367][ T4838] syzkaller0: entered promiscuous mode
[ 2175.743512][ T4838] syzkaller0: entered allmulticast mode
[ 2175.749881][ T4838] tipc: Resetting bearer <eth:syzkaller0>
[ 2175.985435][ T4850] bond506: (slave vxcan1): The slave device specified does not support setting the MAC address
[ 2175.990711][ T4850] bond506: (slave vxcan1): Error -95 calling set_mac_address
[ 2176.038298][ T4857] macvlan8: entered promiscuous mode
[ 2176.040532][ T4857] macvlan8: entered allmulticast mode
[ 2176.051438][ T4857] bond506: entered promiscuous mode
[ 2176.054681][ T4857] 8021q: adding VLAN 0 to HW filter on device macvlan8
[ 2176.066805][ T4857] bond506: left promiscuous mode
[ 2176.186535][ T4859] batadv66: entered promiscuous mode
[ 2176.188119][ T4859] batadv66: entered allmulticast mode
[ 2176.218805][ T4866] 8021q: adding VLAN 0 to HW filter on device ipvlan0
[ 2176.637245][ T4895] A link change request failed with some changes committed already. Interface 26rB may have been left with an inconsistent configuration, please check.
[ 2176.678955][ T4895] mac80211_hwsim hwsim303 syzkaller0: left promiscuous mode
[ 2176.683511][ T4895] tipc: Resetting bearer <eth:syzkaller0>
[ 2176.686319][ T4895] tipc: Resetting bearer <eth:syzkaller0>
[ 2176.688706][ T4895] bond468: left promiscuous mode
[ 2176.690481][ T4895] bond470: left promiscuous mode
[ 2176.692620][ T4895] veth275: left promiscuous mode
[ 2176.694583][ T4895] bond473: left promiscuous mode
[ 2176.984615][ T4909] __nla_validate_parse: 42 callbacks suppressed
[ 2176.984626][ T4909] netlink: 8 bytes leftover after parsing attributes in process `syz.5.28714'.
[ 2176.994697][ T4911] netlink: 8 bytes leftover after parsing attributes in process `syz.5.28714'.
[ 2177.027380][ T4915] netlink: 36 bytes leftover after parsing attributes in process `syz.4.28715'.
[ 2177.041328][ T4914] bond440: entered promiscuous mode
[ 2177.043448][ T4914] 8021q: adding VLAN 0 to HW filter on device bond440
[ 2177.087430][ T4914] netlink: 8 bytes leftover after parsing attributes in process `syz.5.28716'.
[ 2177.092648][  T128] block nbd5: Possible stuck request ffff88805d288000: control (read@0,1024B). Runtime 330 seconds
[ 2177.095952][  T128] block nbd5: Possible stuck request ffff88805d288200: control (read@1024,1024B). Runtime 330 seconds
[ 2177.099277][  T128] block nbd5: Possible stuck request ffff88805d288400: control (read@2048,1024B). Runtime 330 seconds
[ 2177.102911][  T128] block nbd5: Possible stuck request ffff88805d288600: control (read@3072,1024B). Runtime 330 seconds
[ 2177.126317][ T4914] bond440: (slave bridge199): making interface the new active one
[ 2177.132493][ T4914] bridge199: entered promiscuous mode
[ 2177.135657][ T4914] bond440: (slave bridge199): Enslaving as an active interface with an up link
[ 2177.224449][ T4924] netlink: 8 bytes leftover after parsing attributes in process `syz.4.28719'.
[ 2177.227292][ T4924] netlink: 4 bytes leftover after parsing attributes in process `syz.4.28719'.
[ 2177.295977][ T4933] netlink: 8 bytes leftover after parsing attributes in process `syz.4.28721'.
[ 2177.341177][ T4931] : renamed from bond0
[ 2177.578209][ T5552] 8021q: adding VLAN 0 to HW filter on device 
[ 2177.580375][ T4952] netlink: 8 bytes leftover after parsing attributes in process `syz.4.28724'.
[ 2177.986232][ T4967] netlink: 4 bytes leftover after parsing attributes in process `syz.4.28727'.
[ 2178.394173][ T4999] netlink: 'syz.4.28730': attribute type 11 has an invalid length.
[ 2178.400233][ T5004] netlink: 12 bytes leftover after parsing attributes in process `syz.3.28732'.
[ 2178.445715][ T5007] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[ 2178.449627][ T5007] tipc: Resetting bearer <eth:syzkaller0>
[ 2178.537943][ T5015] validate_nla: 8 callbacks suppressed
[ 2178.537957][ T5015] netlink: 'syz.3.28735': attribute type 8 has an invalid length.
[ 2178.550599][ T5015] bond0: entered promiscuous mode
[ 2178.559167][ T5015] bond0: left promiscuous mode
[ 2178.685679][ T5027] tipc: Resetting bearer <eth:syzkaller0>
[ 2178.688487][ T5027] batman_adv: batadv0: Removing interface: macvtap0
[ 2178.701176][ T5027] bond505: (slave bridge214): Releasing active interface
[ 2179.349570][ T5034] bond441 (unregistering): Released all slaves
[ 2181.591317][ T5019] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[ 2181.770706][ T5043] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[ 2181.966508][ T5066] netlink: 'syz.4.28744': attribute type 1 has an invalid length.
[ 2182.003123][ T5066] bond507: entered promiscuous mode
[ 2182.010965][ T5066] 8021q: adding VLAN 0 to HW filter on device bond507
[ 2182.031667][ T5066] vlan0: entered allmulticast mode
[ 2182.034207][ T5066] bond507: entered allmulticast mode
[ 2182.055069][ T5066] bond507: (slave bridge216): making interface the new active one
[ 2182.064235][ T5066] bridge216: entered promiscuous mode
[ 2182.067657][ T5066] bridge216: entered allmulticast mode
[ 2182.075188][ T5066] bond507: (slave bridge216): Enslaving as an active interface with an up link
[ 2182.344851][ T5078] __nla_validate_parse: 4 callbacks suppressed
[ 2182.344862][ T5078] netlink: 48 bytes leftover after parsing attributes in process `syz.4.28747'.
[ 2182.484108][ T5089] netlink: 'syz.5.28748': attribute type 29 has an invalid length.
[ 2182.496227][ T5089] netlink: 'syz.5.28748': attribute type 29 has an invalid length.
[ 2182.507414][ T5089] syzkaller1: entered promiscuous mode
[ 2182.515215][ T5089] syzkaller1: entered allmulticast mode
[ 2182.649013][ T5096] bond481: entered promiscuous mode
[ 2182.651563][ T5096] 8021q: adding VLAN 0 to HW filter on device bond481
[ 2182.724650][ T5102] netlink: 52 bytes leftover after parsing attributes in process `syz.4.28751'.
[ 2182.837289][ T5111] netlink: 168 bytes leftover after parsing attributes in process `syz.3.28752'.
[ 2182.848046][ T5111] netlink: 'syz.3.28752': attribute type 1 has an invalid length.
[ 2182.966824][ T5111] bond482: (slave bridge199): Enslaving as a backup interface with an up link
[ 2183.005250][ T5111] macvlan2: entered promiscuous mode
[ 2183.007093][ T5111] macvlan2: entered allmulticast mode
[ 2183.010004][ T5111] bond482: entered promiscuous mode
[ 2183.019699][ T5111] bridge199: entered promiscuous mode
[ 2183.033286][ T5111] 8021q: adding VLAN 0 to HW filter on device macvlan2
[ 2183.040416][ T5111] bond482: left promiscuous mode
[ 2183.044439][ T5111] bridge199: left promiscuous mode
[ 2183.109657][ T5121] tipc: Enabling of bearer <udp:syz1> rejected, already enabled
[ 2183.318330][ T5148] netlink: 12 bytes leftover after parsing attributes in process `syz.5.28758'.
[ 2183.333573][ T5148] netlink: 12 bytes leftover after parsing attributes in process `syz.5.28758'.
[ 2183.369240][ T5141] ip6tnl0: Caught tx_queue_len zero misconfig
[ 2183.372698][ T5141] netem: change failed
[ 2183.386360][ T5156] netlink: 36 bytes leftover after parsing attributes in process `syz.5.28759'.
[ 2183.422249][ T6789] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[ 2183.470000][ T5164] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 2183.645348][ T5190] netlink: 40 bytes leftover after parsing attributes in process `syz.3.28766'.
[ 2183.681991][ T5189] netlink: 36 bytes leftover after parsing attributes in process `syz.3.28766'.
[ 2183.745951][ T5201] netlink: 12 bytes leftover after parsing attributes in process `syz.5.28767'.
[ 2183.760818][ T5201] netlink: 'syz.5.28767': attribute type 1 has an invalid length.
[ 2183.781125][ T5196] tipc: Resetting bearer <eth:syzkaller0>
[ 2183.824047][T18540] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[ 2183.844322][T28324] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[ 2183.860334][ T5205] netlink: zone id is out of range
[ 2183.867910][ T5205] netlink: zone id is out of range
[ 2183.869794][ T5205] netlink: zone id is out of range
[ 2183.871318][ T5205] netlink: zone id is out of range
[ 2183.887315][ T5205] netlink: zone id is out of range
[ 2183.888962][ T5205] netlink: zone id is out of range
[ 2183.890642][ T5205] netlink: zone id is out of range
[ 2183.912105][ T5205] netlink: zone id is out of range
[ 2183.927392][ T5205] mac80211_hwsim hwsim303 syzkaller0: left allmulticast mode
[ 2184.067069][ T5214] mac80211_hwsim hwsim303 syzkaller0: Caught tx_queue_len zero misconfig
[ 2184.206315][ T5225] mac80211_hwsim hwsim303 syzkaller0: entered promiscuous mode
[ 2184.209142][ T5225] mac80211_hwsim hwsim303 syzkaller0: entered allmulticast mode
[ 2184.314781][ T5233] netlink: 8 bytes leftover after parsing attributes in process `syz.4.28772'.
[ 2184.317436][ T5233] netlink: 'syz.4.28772': attribute type 18 has an invalid length.
[ 2184.596751][ T5255] tipc: Resetting bearer <eth:syzkaller0>
[ 2184.862817][T10363] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[ 2184.873098][T10363] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[ 2185.496839][ T5303] netlink: 'syz.3.28784': attribute type 29 has an invalid length.
[ 2185.502929][ T5303] netlink: 'syz.3.28784': attribute type 29 has an invalid length.
[ 2185.512321][T19461] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[ 2185.515830][ T5303] syzkaller1: entered promiscuous mode
[ 2185.517558][ T5303] syzkaller1: entered allmulticast mode
[ 2185.602680][ T5310] veth0: entered promiscuous mode
[ 2185.727256][ T5302] veth0: left promiscuous mode
[ 2185.965901][ T5337] tipc: Resetting bearer <eth:syzkaller0>
[ 2186.099549][T17305] tipc: Resetting bearer <eth:syzkaller0>
[ 2186.289796][ T5370] bond0: Caught tx_queue_len zero misconfig
[ 2186.339792][ T5371] 8021q: VLANs not supported on ip6gre0
[ 2186.565537][ T5398] 8021q: adding VLAN 0 to HW filter on device ipvlan0
[ 2186.585618][ T5398] netlink: 'syz.4.28805': attribute type 10 has an invalid length.
[ 2186.645771][ T5407] netlink: 'syz.3.28808': attribute type 11 has an invalid length.
[ 2186.722477][ T5413] tipc: Resetting bearer <eth:syzkaller0>
[ 2187.068998][ T5443] xt_policy: neither incoming nor outgoing policy selected
[ 2187.088745][ T5441] netlink: 'syz.4.28814': attribute type 1 has an invalid length.
[ 2187.093416][ T5441] netlink: 'syz.4.28814': attribute type 1 has an invalid length.
[ 2187.451192][ T5465] net_ratelimit: 19 callbacks suppressed
[ 2187.451199][ T5465] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[ 2187.494998][ T5470] __nla_validate_parse: 24 callbacks suppressed
[ 2187.495011][ T5470] netlink: 14 bytes leftover after parsing attributes in process `syz.3.28820'.
[ 2187.589857][ T5487] netlink: 'syz.3.28823': attribute type 1 has an invalid length.
[ 2187.601288][ T5492] netlink: 44 bytes leftover after parsing attributes in process `syz.4.28824'.
[ 2187.673425][ T5499] tipc: Failed to remove unknown binding: 66,0,0/3120781561:3535726650/3535726652
[ 2187.680072][ T5499] tipc: Failed to remove unknown binding: 66,0,0/3120781561:3535726650/3535726651
[ 2187.684373][ T5498] netlink: 'syz.3.28825': attribute type 21 has an invalid length.
[ 2187.687110][ T5498] netlink: 'syz.3.28825': attribute type 22 has an invalid length.
[ 2187.690527][ T5498] netlink: 16 bytes leftover after parsing attributes in process `syz.3.28825'.
[ 2187.698449][ T5498] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check.
[ 2187.732827][ T5499] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.28826'.
[ 2187.737755][ T5499] tipc: Failed to remove unknown binding: 66,0,0/3120781561:3535726650/3535726652
[ 2187.743244][ T5499] tipc: Failed to remove unknown binding: 66,0,0/3120781561:3535726650/3535726651
[ 2187.831011][ T5505] netlink: 4 bytes leftover after parsing attributes in process `syz.3.28827'.
[ 2187.898382][ T5524] netlink: 8 bytes leftover after parsing attributes in process `syz.3.28832'.
[ 2187.954388][ T5530] netlink: 44 bytes leftover after parsing attributes in process `syz.4.28833'.
[ 2188.050589][ T5535] bond441: up delay (1) is not a multiple of miimon (100), value rounded to 0 ms
[ 2188.083113][ T5535] bond441: down delay (128) is not a multiple of miimon (100), value rounded to 100 ms
[ 2188.095822][ T5532] netlink: 8 bytes leftover after parsing attributes in process `syz.3.28834'.
[ 2188.101231][ T5546] netlink: 4 bytes leftover after parsing attributes in process `syz.3.28834'.
[ 2188.111535][ T5548] netlink: 24 bytes leftover after parsing attributes in process `syz.4.28838'.
[ 2188.127530][ T5546] A link change request failed with some changes committed already. Interface 26rB may have been left with an inconsistent configuration, please check.
[ 2188.478116][ T5587] rB: Caught tx_queue_len zero misconfig
[ 2188.710347][ T5595] 8021q: adding VLAN 0 to HW filter on device bond442
[ 2188.834601][ T5603] hsr0: entered promiscuous mode
[ 2188.844235][ T5603] veth1_to_team: left promiscuous mode
[ 2188.850444][ T5603] gretap0: left promiscuous mode
[ 2188.857782][ T5603] 0: left promiscuous mode
[ 2188.862741][ T5603] hsr0 (unregistering): left promiscuous mode
[ 2189.012021][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[ 2189.047773][ T5614] validate_nla: 4 callbacks suppressed
[ 2189.047791][ T5614] netlink: 'syz.5.28849': attribute type 1 has an invalid length.
[ 2189.090281][ T5614] 8021q: adding VLAN 0 to HW filter on device bond443
[ 2189.197668][ T5618] bond443: (slave veth237): Enslaving as an active interface with a down link
[ 2189.286703][ T5623] wg1 speed is unknown, defaulting to 1000
[ 2189.504785][ T5636] netlink: 'syz.3.28852': attribute type 1 has an invalid length.
[ 2189.577696][ T5636] 8021q: adding VLAN 0 to HW filter on device bond483
[ 2189.776527][ T5656] 8021q: VLANs not supported on syzkaller1
[ 2190.216896][ T5678] block nbd8: server does not support multiple connections per device.
[ 2190.232809][ T5678] block nbd8: shutting down sockets
[ 2190.546032][ T5698] bond508: entered promiscuous mode
[ 2190.547886][ T5698] 8021q: adding VLAN 0 to HW filter on device bond508
[ 2190.572322][ T5695] block nbd8: server does not support multiple connections per device.
[ 2190.577995][ T5702] bridge217: entered promiscuous mode
[ 2190.579151][ T5695] block nbd8: shutting down sockets
[ 2190.580912][ T5702] bond508: (slave bridge217): Enslaving as an active interface with an up link
[ 2190.644162][ T5707] 8021q: adding VLAN 0 to HW filter on device bond484
[ 2190.668923][ T5698] bond508 (unregistering): (slave bridge217): Releasing backup interface
[ 2190.675368][ T5698] bridge217: left promiscuous mode
[ 2190.683613][ T5698] bond508 (unregistering): Released all slaves
[ 2190.751255][ T5720] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 2190.794135][ T5723] netlink: 'syz.4.28867': attribute type 58 has an invalid length.
[ 2191.001340][ T5735] bond485: entered allmulticast mode
[ 2191.071580][ T5735] macvlan2: entered promiscuous mode
[ 2191.077772][ T5735] macvlan2: entered allmulticast mode
[ 2191.233660][ T5754] 8021q: adding VLAN 0 to HW filter on device bond444
[ 2191.240703][ T5756] netlink: 'syz.4.28874': attribute type 1 has an invalid length.
[ 2191.309378][ T5756] bond508: (slave vxcan1): The slave device specified does not support setting the MAC address
[ 2191.315101][ T5756] bond508: (slave vxcan1): Error -95 calling set_mac_address
[ 2191.374655][ T5767] bond508: (slave bridge218): Enslaving as an active interface with a down link
[ 2191.528920][ T5786] netlink: 'syz.4.28878': attribute type 1 has an invalid length.
[ 2191.609803][ T5786] bond509: (slave bridge219): making interface the new active one
[ 2191.616532][ T5786] bond509: (slave bridge219): Enslaving as an active interface with an up link
[ 2191.633609][ T5786] bond509: entered promiscuous mode
[ 2191.635219][ T5786] bridge219: entered promiscuous mode
[ 2191.642337][ T5786] bond509: entered allmulticast mode
[ 2191.643944][ T5786] bridge219: entered allmulticast mode
[ 2191.646926][ T5786] 8021q: adding VLAN 0 to HW filter on device bond509
[ 2191.709335][ T5800] netlink: 'syz.3.28882': attribute type 1 has an invalid length.
[ 2191.744270][ T5800] 8021q: adding VLAN 0 to HW filter on device bond486
[ 2191.815270][ T5814] xt_hashlimit: size too large, truncated to 1048576
[ 2191.981348][ T5818] veth281: entered allmulticast mode
[ 2192.029512][ T5814] netlink: 'syz.3.28885': attribute type 1 has an invalid length.
[ 2192.047841][ T5840] 8021q: adding VLAN 0 to HW filter on device ipvlan0
[ 2192.053788][ T5840] netlink: 'syz.5.28889': attribute type 10 has an invalid length.
[ 2192.328170][ T5863] netlink: 'syz.4.28893': attribute type 13 has an invalid length.
[ 2192.332526][ T5863] netlink: 'syz.4.28893': attribute type 17 has an invalid length.
[ 2192.364056][ T5863] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[ 2192.618296][ T5887] __nla_validate_parse: 17 callbacks suppressed
[ 2192.618313][ T5887] netlink: 68 bytes leftover after parsing attributes in process `syz.3.28898'.
[ 2192.679859][ T5896] netlink: 12 bytes leftover after parsing attributes in process `syz.3.28899'.
[ 2192.719759][ T5895] netlink: 8 bytes leftover after parsing attributes in process `syz.3.28899'.
[ 2192.831766][ T5906] netlink: 28 bytes leftover after parsing attributes in process `syz.3.28900'.
[ 2192.917970][ T5911] netlink: 12 bytes leftover after parsing attributes in process `syz.3.28901'.
[ 2193.373018][ T5952] netlink: 28 bytes leftover after parsing attributes in process `syz.4.28907'.
[ 2193.446194][ T5956] 8021q: VLANs not supported on syzkaller1
[ 2193.690682][ T5969] netlink: 8 bytes leftover after parsing attributes in process `syz.3.28911'.
[ 2193.695055][ T5969] netlink: 8 bytes leftover after parsing attributes in process `syz.3.28911'.
[ 2193.837226][ T5986] 5n: entered promiscuous mode
[ 2198.212068][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[ 2205.623498][ T6443] netlink: 4 bytes leftover after parsing attributes in process `syz.4.28914'.
[ 2205.666836][ T6443] netlink: 4 bytes leftover after parsing attributes in process `syz.4.28914'.
[ 2205.669844][ T6443] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check.
[ 2205.682622][ T6442] netlink: 8 bytes leftover after parsing attributes in process `syz.5.28915'.
[ 2205.762841][ T6456] validate_nla: 3 callbacks suppressed
[ 2205.762857][ T6456] netlink: 'syz.3.28917': attribute type 11 has an invalid length.
[ 2205.767848][ T6456] netlink: 8 bytes leftover after parsing attributes in process `syz.3.28917'.
[ 2205.843714][ T6463] netlink: 8 bytes leftover after parsing attributes in process `syz.4.28919'.
[ 2205.846682][ T6463] netlink: 8 bytes leftover after parsing attributes in process `syz.4.28919'.
[ 2205.897601][ T6468] netlink: 24 bytes leftover after parsing attributes in process `syz.3.28921'.
[ 2205.939187][ T6475] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 2205.986224][ T6480] netlink: 'syz.5.28924': attribute type 58 has an invalid length.
[ 2206.002360][ T6480] netlink: 20 bytes leftover after parsing attributes in process `syz.5.28924'.
[ 2206.100671][ T6488] netlink: 'syz.4.28926': attribute type 1 has an invalid length.
[ 2206.169347][ T6488] bond510: (slave vxcan1): The slave device specified does not support setting the MAC address
[ 2206.177064][ T6488] bond510: (slave vxcan1): Error -95 calling set_mac_address
[ 2206.206702][ T6489] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[ 2206.414483][ T6514] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.28929'.
[ 2206.480490][ T6514] netlink: 28 bytes leftover after parsing attributes in process `syz.4.28929'.
[ 2207.175851][  T128] block nbd5: Possible stuck request ffff88805d288000: control (read@0,1024B). Runtime 360 seconds
[ 2207.180000][  T128] block nbd5: Possible stuck request ffff88805d288200: control (read@1024,1024B). Runtime 360 seconds
[ 2207.184560][  T128] block nbd5: Possible stuck request ffff88805d288400: control (read@2048,1024B). Runtime 360 seconds
[ 2207.188595][  T128] block nbd5: Possible stuck request ffff88805d288600: control (read@3072,1024B). Runtime 360 seconds
[ 2208.456185][   T35] INFO: task udevd:19292 blocked for more than 143 seconds.
[ 2208.458896][   T35]       Not tainted syzkaller #0
[ 2208.460514][   T35] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 2208.464319][   T35] task:udevd           state:D stack:22528 pid:19292 tgid:19292 ppid:5256   task_flags:0x400140 flags:0x00080002
[ 2208.468960][   T35] Call Trace:
[ 2208.469971][   T35]  <TASK>
[ 2208.471005][   T35]  __schedule+0x1585/0x5340
[ 2208.473025][   T35]  ? __lock_acquire+0x6b5/0x2cf0
[ 2208.474707][   T35]  ? __pfx___schedule+0x10/0x10
[ 2208.476273][   T35]  ? schedule+0x90/0x360
[ 2208.477666][   T35]  schedule+0x164/0x360
[ 2208.479196][   T35]  io_schedule+0x7f/0xd0
[ 2208.480872][   T35]  folio_wait_bit_common+0x6d8/0xbc0
[ 2208.483387][   T35]  ? __pfx_folio_wait_bit_common+0x10/0x10
[ 2208.485256][   T35]  ? __pfx_wake_page_function+0x10/0x10
[ 2208.486996][   T35]  ? __filemap_get_folio_mpol+0x7a9/0xb00
[ 2208.488746][   T35]  do_read_cache_folio+0x1ad/0x590
[ 2208.490398][   T35]  ? __pfx_blkdev_read_folio+0x10/0x10
[ 2208.492297][   T35]  read_part_sector+0xb6/0x2b0
[ 2208.493961][   T35]  adfspart_check_POWERTEC+0x92/0xef0
[ 2208.495597][   T35]  ? __pfx_adfspart_check_ICS+0x10/0x10
[ 2208.497384][   T35]  ? __pfx_adfspart_check_POWERTEC+0x10/0x10
[ 2208.499294][   T35]  bdev_disk_changed+0x7ba/0x1550
[ 2208.500928][   T35]  ? bdev_open+0xe0/0xd30
[ 2208.502732][   T35]  ? __pfx_bdev_disk_changed+0x10/0x10
[ 2208.504577][   T35]  blkdev_get_whole+0x380/0x510
[ 2208.506112][   T35]  bdev_open+0x31e/0xd30
[ 2208.507472][   T35]  blkdev_open+0x470/0x610
[ 2208.508941][   T35]  ? __pfx_blkdev_open+0x10/0x10
[ 2208.510460][   T35]  do_dentry_open+0x785/0x14e0
[ 2208.512519][   T35]  vfs_open+0x3b/0x340
[ 2208.514544][   T35]  ? path_openat+0x2df0/0x3860
[ 2208.516040][   T35]  path_openat+0x2e08/0x3860
[ 2208.517488][   T35]  ? __pfx_stack_trace_save+0x10/0x10
[ 2208.519213][   T35]  ? stack_depot_save_flags+0x33/0x810
[ 2208.520894][   T35]  ? __pfx_path_openat+0x10/0x10
[ 2208.523054][   T35]  ? __x64_sys_openat+0x138/0x170
[ 2208.524845][   T35]  ? do_syscall_64+0x14d/0xf80
[ 2208.526346][   T35]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2208.528364][   T35]  ? __lock_acquire+0x6b5/0x2cf0
[ 2208.530179][   T35]  do_file_open+0x23e/0x4a0
[ 2208.531647][   T35]  ? __pfx_do_file_open+0x10/0x10
[ 2208.533996][   T35]  ? _raw_spin_unlock+0x28/0x50
[ 2208.535736][   T35]  ? alloc_fd+0x64b/0x6c0
[ 2208.537135][   T35]  do_sys_openat2+0x113/0x200
[ 2208.538597][   T35]  ? __pfx___x64_sys_recvmsg+0x10/0x10
[ 2208.540364][   T35]  ? __pfx_do_sys_openat2+0x10/0x10
[ 2208.542280][   T35]  ? rcu_is_watching+0x15/0xb0
[ 2208.544228][   T35]  __x64_sys_openat+0x138/0x170
[ 2208.546115][   T35]  do_syscall_64+0x14d/0xf80
[ 2208.547907][   T35]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2208.549837][   T35]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2208.551631][   T35] RIP: 0033:0x7f3f55f169a4
[ 2208.553266][   T35] RSP: 002b:00007ffedc2fc580 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[ 2208.556078][   T35] RAX: ffffffffffffffda RBX: 0000564aa51199b0 RCX: 00007f3f55f169a4
[ 2208.558492][   T35] RDX: 00000000000a0800 RSI: 0000564aa5110510 RDI: 00000000ffffff9c
[ 2208.560910][   T35] RBP: 0000564aa5110510 R08: 0000000000000001 R09: 3fffffffffffffff
[ 2208.563601][   T35] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000000a0800
[ 2208.566263][   T35] R13: 0000564aa5120aa0 R14: 0000000000000001 R15: 0000564aa510f910
[ 2208.568680][   T35]  </TASK>
[ 2208.582177][   T35] 
[ 2208.582177][   T35] Showing all locks held in the system:
[ 2208.585119][   T35] 1 lock held by khungtaskd/35:
[ 2208.587007][   T35]  #0: ffffffff8e760320 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[ 2208.590774][   T35] 2 locks held by dhcpcd/5551:
[ 2208.593840][   T35]  #0: ffffffff8fbad988 (vlan_ioctl_mutex){+.+.}-{4:4}, at: sock_ioctl+0x641/0x7f0
[ 2208.597449][   T35]  #1: ffffffff8fbcc4c8 (rtnl_mutex){+.+.}-{4:4}, at: vlan_ioctl_handler+0xf0/0x630
[ 2208.600847][   T35] 2 locks held by getty/5633:
[ 2208.602785][   T35]  #0: ffff8881727d80a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[ 2208.605957][   T35]  #1: ffffc9000356b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13c0
[ 2208.609210][   T35] 3 locks held by kworker/u10:34/17300:
[ 2208.610934][   T35]  #0: ffff8881000ac148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9ea/0x1830
[ 2208.615238][   T35]  #1: ffffc90028dd7c40 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0xa25/0x1830
[ 2208.618768][   T35]  #2: ffffffff8fbcc4c8 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60
[ 2208.621454][   T35] 1 lock held by udevd/19292:
[ 2208.623805][   T35]  #0: ffff88804f5c4358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30
[ 2208.627276][   T35] 1 lock held by syz.5.28925/6486:
[ 2208.629265][   T35]  #0: ffffffff8fbcc4c8 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0
[ 2208.633091][   T35] 1 lock held by syz.4.28930/6521:
[ 2208.635028][   T35]  #0: ffffffff8fbcc4c8 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0
[ 2208.637743][   T35] 2 locks held by syz.4.28930/6522:
[ 2208.639478][   T35]  #0: ffffffff8fbcc4c8 (rtnl_mutex){+.+.}-{4:4}, at: rtnetlink_rcv_msg+0x722/0xbe0
[ 2208.643063][   T35]  #1: ffffffff8e7665b8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2d0/0x770
[ 2208.646501][   T35] 1 lock held by syz.4.28930/6523:
[ 2208.648031][   T35]  #0: ffffffff8fbcc4c8 (rtnl_mutex){+.+.}-{4:4}, at: rtnetlink_rcv_msg+0x722/0xbe0
[ 2208.650985][   T35] 1 lock held by syz.4.28930/6524:
[ 2208.652801][   T35]  #0: ffffffff8fbcc4c8 (rtnl_mutex){+.+.}-{4:4}, at: rtnetlink_rcv_msg+0x722/0xbe0
[ 2208.655855][   T35] 1 lock held by syz.4.28930/6528:
[ 2208.657395][   T35]  #0: ffffffff8fbcc4c8 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0
[ 2208.660122][   T35] 1 lock held by syz.4.28930/6530:
[ 2208.662173][   T35]  #0: ffffffff8fbcc4c8 (rtnl_mutex){+.+.}-{4:4}, at: dev_ioctl+0x7a4/0x1150
[ 2208.665010][   T35] 1 lock held by syz.3.28931/6526:
[ 2208.666541][   T35]  #0: ffffffff8fbcc4c8 (rtnl_mutex){+.+.}-{4:4}, at: __tun_chr_ioctl+0x3bc/0x1e10
[ 2208.669332][   T35] 2 locks held by syz.3.28931/6529:
[ 2208.670947][   T35]  #0: ffff8881ca2356f0 (nlk_cb_mutex-ROUTE){+.+.}-{4:4}, at: __netlink_dump_start+0xfe/0x7e0
[ 2208.674356][   T35]  #1: ffffffff8fbcc4c8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_dumpit+0x92/0x200
[ 2208.677177][   T35] 1 lock held by syz.3.28931/6533:
[ 2208.678771][   T35]  #0: ffffffff8fbcc4c8 (rtnl_mutex){+.+.}-{4:4}, at: devinet_ioctl+0x32b/0x1b30
[ 2208.681506][   T35] 
[ 2208.682828][   T35] =============================================
[ 2208.682828][   T35] 
[ 2208.686076][   T35] NMI backtrace for cpu 1
[ 2208.686091][   T35] CPU: 1 UID: 0 PID: 35 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[ 2208.686105][   T35] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[ 2208.686113][   T35] Call Trace:
[ 2208.686120][   T35]  <TASK>
[ 2208.686129][   T35]  dump_stack_lvl+0xe8/0x150
[ 2208.686152][   T35]  nmi_cpu_backtrace+0x274/0x2d0
[ 2208.686168][   T35]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[ 2208.686186][   T35]  nmi_trigger_cpumask_backtrace+0x17a/0x300
[ 2208.686203][   T35]  sys_info+0x135/0x170
[ 2208.686216][   T35]  watchdog+0xfd9/0x1030
[ 2208.686238][   T35]  ? watchdog+0x21a/0x1030
[ 2208.686260][   T35]  kthread+0x388/0x470
[ 2208.686273][   T35]  ? __pfx_watchdog+0x10/0x10
[ 2208.686288][   T35]  ? __pfx_kthread+0x10/0x10
[ 2208.686300][   T35]  ret_from_fork+0x51e/0xb90
[ 2208.686320][   T35]  ? __pfx_ret_from_fork+0x10/0x10
[ 2208.686333][   T35]  ? __switch_to+0xc7d/0x1450
[ 2208.686351][   T35]  ? __pfx_kthread+0x10/0x10
[ 2208.686364][   T35]  ret_from_fork_asm+0x1a/0x30
[ 2208.686391][   T35]  </TASK>
[ 2208.686397][   T35] Sending NMI from CPU 1 to CPUs 0:
[ 2208.725034][    C0] NMI backtrace for cpu 0
[ 2208.725048][    C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) 
[ 2208.725062][    C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[ 2208.725070][    C0] RIP: 0010:pv_native_safe_halt+0xf/0x20
[ 2208.725093][    C0] Code: 8e 6d 02 c3 cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa eb 07 0f 00 2d 43 3d 1c 00 fb f4 <e9> 7c ea 02 00 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90
[ 2208.725105][    C0] RSP: 0018:ffffffff8e407dc0 EFLAGS: 00000206
[ 2208.725116][    C0] RAX: 0000000001dcc603 RBX: ffffffff819a827d RCX: 0000000080000001
[ 2208.725125][    C0] RDX: 0000000000000001 RSI: ffffffff8def2566 RDI: ffffffff8c27a880
[ 2208.725133][    C0] RBP: ffffffff8e407eb0 R08: ffff88812103395b R09: 1ffff1102420672b
[ 2208.725142][    C0] R10: dffffc0000000000 R11: ffffed102420672c R12: ffffffff90117fb0
[ 2208.725151][    C0] R13: 1ffffffff1c929d8 R14: 0000000000000000 R15: 0000000000000000
[ 2208.725159][    C0] FS:  0000000000000000(0000) GS:ffff88818de67000(0000) knlGS:0000000000000000
[ 2208.725170][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 2208.725178][    C0] CR2: 0000563202e85000 CR3: 0000000169b58000 CR4: 00000000000006f0
[ 2208.725209][    C0] Call Trace:
[ 2208.725216][    C0]  <TASK>
[ 2208.725221][    C0]  default_idle+0x9/0x20
[ 2208.725234][    C0]  default_idle_call+0x72/0xb0
[ 2208.725248][    C0]  do_idle+0x1bd/0x500
[ 2208.725264][    C0]  ? asm_sysvec_call_function_single+0x1a/0x20
[ 2208.725281][    C0]  ? __pfx_do_idle+0x10/0x10
[ 2208.725300][    C0]  cpu_startup_entry+0x43/0x60
[ 2208.725315][    C0]  rest_init+0x2de/0x300
[ 2208.725334][    C0]  start_kernel+0x385/0x3d0
[ 2208.725353][    C0]  x86_64_start_reservations+0x24/0x30
[ 2208.725368][    C0]  x86_64_start_kernel+0x143/0x1c0
[ 2208.725381][    C0]  common_startup_64+0x13e/0x147
[ 2208.725399][    C0]  </TASK>
[ 2208.783501][   T35] Kernel panic - not syncing: hung_task: blocked tasks
[ 2208.785638][   T35] CPU: 1 UID: 0 PID: 35 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[ 2208.788476][   T35] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[ 2208.791448][   T35] Call Trace:
[ 2208.792449][   T35]  <TASK>
[ 2208.793352][   T35]  vpanic+0x56c/0xa60
[ 2208.794566][   T35]  ? __pfx___schedule+0x10/0x10
[ 2208.796024][   T35]  ? __pfx_vpanic+0x10/0x10
[ 2208.797390][   T35]  ? __pfx_console_unlock+0x10/0x10
[ 2208.798955][   T35]  panic+0xc5/0xd0
[ 2208.800322][   T35]  ? __pfx_panic+0x10/0x10
[ 2208.801913][   T35]  ? preempt_schedule_thunk+0x16/0x30
[ 2208.803895][   T35]  ? nmi_trigger_cpumask_backtrace+0x2bb/0x300
[ 2208.806190][   T35]  watchdog+0x1023/0x1030
[ 2208.807757][   T35]  ? watchdog+0x21a/0x1030
[ 2208.809125][   T35]  kthread+0x388/0x470
[ 2208.810306][   T35]  ? __pfx_watchdog+0x10/0x10
[ 2208.811649][   T35]  ? __pfx_kthread+0x10/0x10
[ 2208.812993][   T35]  ret_from_fork+0x51e/0xb90
[ 2208.814307][   T35]  ? __pfx_ret_from_fork+0x10/0x10
[ 2208.815778][   T35]  ? __switch_to+0xc7d/0x1450
[ 2208.817135][   T35]  ? __pfx_kthread+0x10/0x10
[ 2208.818439][   T35]  ret_from_fork_asm+0x1a/0x30
[ 2208.819827][   T35]  </TASK>
[ 2208.821300][   T35] Kernel Offset: disabled
[ 2208.822546][   T35] Rebooting in 86400 seconds..
