last executing test programs:

1.024772583s ago: executing program 0 (id=13732):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x4e, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="340000001100010028bd7000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="20100000000004001400030076657468315f766c616e00000000000048ff6a7508a2f65087e0178213ed64b706e9cc084be2b85a05382e4dce26d642a3069a45594a7f65387df94cf5b9f9b0152df3b85c27ffd5d53139706c8a9aa7b46c6cc77ef9fc0000fe363538ce8000000000000000000000000000000000d75a069031ae9e429588376a23c43ca802b535a75df9deecf63e120ab2c4"], 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000003800)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x1}, 0x8, 0x10, &(0x7f00000000c0)={0x2, 0xf, 0x0, 0x10000}, 0x10}, 0x94)
connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f00000002c0), 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4)
ioctl$sock_inet6_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000280))
setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x303}, "2d9421fe8a4c9563", "cf6ff9ff337ed301000100c747fbbfc1", "dbdc27ff", "16de86d67a8426bd"}, 0x28)
setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
setsockopt$bt_l2cap_L2CAP_LM(r1, 0x6, 0x3, &(0x7f0000000040)=0x2e, 0x4)
connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x24, @any, 0x4}, 0xe)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_DELETE(r2, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x0)
recvfrom(0xffffffffffffffff, &(0x7f0000002800)=""/4071, 0xfe7, 0x10015, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
syz_emit_ethernet(0x6e, &(0x7f00000003c0)=ANY=[@ANYBLOB="bd606a2a7f2caaaaaaaaaabb86dd60902d0300380000fe8800000000000000000acd3b6569db2b000000000001fe8800000000000000000000000001016c060000000000000728000000000805"], 0x0)
vmsplice(r3, &(0x7f00000000c0), 0x0, 0x6)
splice(r3, 0x0, r4, &(0x7f00000002c0)=0x87ffffd, 0x6, 0x0)
r5 = socket$inet6(0xa, 0x2, 0x3a)
sendmmsg$inet6(r5, &(0x7f0000000e40)=[{{&(0x7f0000000100)={0xa, 0x4e25, 0x10003ff, @loopback={0xff00000000000000}, 0x5}, 0x1c, &(0x7f0000000240)=[{&(0x7f00000000c0)="8000102e7577d401", 0x8}], 0x1, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x250}}], 0x1, 0x4004804)
socket$inet_udp(0x2, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'ip6erspan0\x00', <r8=>0x0})
sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="340000001400010000000000fbdbdf250a00a100", @ANYRES32=r8, @ANYBLOB="14000100ff05000000000000dfce00000000000108000800026e"], 0x34}}, 0x0)
r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})

1.002645276s ago: executing program 1 (id=13733):
r0 = socket$netlink(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x14, 0x15, 0x1, 0xfffffffc, 0x25dfdbfc, {0xf}}, 0x14}, 0x1, 0x0, 0x0, 0x4800}, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_CQM(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)={0x28, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CQM={0xc, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x30}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x8001}, 0x0)
sendmsg$NL80211_CMD_GET_MESH_CONFIG(r1, &(0x7f0000002340)={&(0x7f0000002280)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000002300)={&(0x7f0000000340)={0x28, 0x0, 0x400, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x4, 0x80}}}}, ["", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x200040c1}, 0x8010)
sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000d}, 0x20000001)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0300002e00090027bd70000000000004000000480311"], 0x35c}, 0x1, 0x0, 0x0, 0x42804}, 0x4000010)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0300002e00090027bd70000000000005"], 0x35c}, 0x1, 0x0, 0x0, 0x42804}, 0x4000010)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r6=>0x0})
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000003280)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r7, 0x0, 0xe, 0x0, &(0x7f0000000040)="2b1c52ac82e71ea05b0c5e43ede4", 0x0, 0xb20c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000040000000000000000000000850000002c000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r8, r6, 0x25, 0x8, @void}, 0x10)
r9 = socket$netlink(0x10, 0x3, 0x10)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000002200)={{0xffffffffffffffff, <r10=>0xffffffffffffffff}, 0x0, &(0x7f00000021c0)='%pS    \x00'}, 0x20)
r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001dc0)={0x5, 0x28, &(0x7f00000019c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffff9c2, 0x0, 0x0, 0x0, 0xfff}, [@ringbuf_query, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0xb11d5864d2e1fe8e}}, @call={0x85, 0x0, 0x0, 0x9a}, @printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}}, @map_idx_val={0x18, 0xb, 0x6, 0x0, 0x6}]}, 0x0, 0x0, 0xd2, &(0x7f0000001b40)=""/210, 0x40f00, 0x1a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001c40)={0x3, 0x3}, 0x8, 0x10, &(0x7f0000001c80)={0x5, 0x2, 0x7, 0x8000}, 0x10, 0x0, 0x0, 0xa, &(0x7f0000001cc0)=[0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1, r10], &(0x7f0000001d00)=[{0x4, 0x3, 0x2, 0x8}, {0x3, 0x5, 0xc, 0x1}, {0x1, 0x4, 0x6, 0xc}, {0x1, 0x5, 0x5, 0x3}, {0x1, 0x5, 0xa, 0xa}, {0x0, 0x3, 0x0, 0x8}, {0x1, 0x3, 0x6, 0x5}, {0x3, 0x2, 0x2, 0x2}, {0x4, 0x5, 0x6, 0xb}, {0x2, 0x3, 0xe}], 0x10, 0x100}, 0x94)
vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000180)='wi', 0x2}], 0x1, 0x1)
ioctl$sock_SIOCGPGRP(r4, 0x8904, 0x0)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000001fc0)={r11, 0xffffffffffffffff, 0x22, 0x0, @val=@uprobe_multi={&(0x7f0000001e80)='./file0\x00', &(0x7f0000001ec0)=[0x5, 0x3, 0x8], &(0x7f0000000380)=[0x1, 0x4, 0x3], 0x3be5, 0x3, 0x1}}, 0x40)
bind$netlink(r9, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffbfff7f}, 0xc)
sendmsg$DEVLINK_CMD_SB_POOL_GET(r0, &(0x7f0000002140)={&(0x7f0000001f80)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000002100)={&(0x7f0000002000)={0xcc, 0x0, 0x22, 0x70bd29, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xc}, {0x6, 0x11, 0x3}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xffff}, {0x6, 0x11, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x3}, {0x6, 0x11, 0x5c39}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xffffffff}, {0x6, 0x11, 0xe}}]}, 0xcc}, 0x1, 0x0, 0x0, 0xc080}, 0x480c0)
r12 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)={0x20, 0x35, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x48815}, 0xc000)
r13 = socket$inet6_mptcp(0xa, 0x1, 0x106)
connect$inet6(r13, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback={0xff00000000000000}}, 0x1c)

492.63664ms ago: executing program 1 (id=13735):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3300000}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x78}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r2 = socket(0x10, 0x3, 0x9)
getsockopt$inet6_mptcp_buf(r2, 0x11c, 0x0, &(0x7f0000000440)=""/183, &(0x7f0000000700)=0xb7) (async)
sendmsg$NFT_BATCH(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000013c0)={{0x14, 0x453, 0x1, 0x0, 0x0, {0x5}}, [], {0x14, 0x3f2}}, 0x28}, 0x1, 0x0, 0x0, 0x64841}, 0x40000) (async)
recvfrom$inet(r2, &(0x7f00000002c0)=""/219, 0xdb, 0x1000, 0x0, 0x0) (async)
sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=@newtaction={0x64, 0x30, 0x9e54f29ff072a93b, 0x70bd2b, 0x0, {}, [{0x50, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x0, 0x4, 0x0, 0x93, 0x6}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) (async)
ioctl$sock_inet_SIOCSIFPFLAGS(r0, 0x8934, &(0x7f0000000000)={'batadv_slave_1\x00', 0xfffffffd}) (async)
r3 = socket$nl_route(0x10, 0x3, 0x0) (async)
r4 = socket$netlink(0x10, 0x3, 0x0) (async)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r1, 0xe0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0], ""/16, <r5=>0x0, 0x0, 0x0, 0x0, 0x0, 0xb, &(0x7f0000000440), &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x5b, &(0x7f0000000500)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000540), &(0x7f0000000580), 0x8, 0x67, 0x8, 0x8, &(0x7f00000005c0)}}, 0x10)
setsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f0000000740)={@mcast1, r5}, 0x14) (async)
sendmsg$nl_generic(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="d800000043000701feffffff00000000017c000004004280b80001"], 0xd8}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) (async)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="4400000010000305000000090000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002400128009000100626f6e6400000000140002800800130001000000080014"], 0x44}}, 0x0)

491.788524ms ago: executing program 0 (id=13737):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x328, 0x148, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x258, 0xffffffff, 0xffffffff, 0x258, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [0x0, 0x0, 0x0, 0xff], [0x0, 0x0, 0x1000000, 0xffffffff], 'dvmrp0\x00', 'dvmrp1\x00', {}, {}, 0x0, 0xfd, 0x4}, 0x0, 0x120, 0x148, 0x0, {}, [@common=@unspec=@nfacct={{0x48}, {'syz0\x00', 0x6a5f}}, @common=@frag={{0x30}, {[0x2d, 0x200], 0x0, 0x8, 0x2}}]}, @common=@unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00', 0x0, {0x7}}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x10, 0x2, 0x9c, 0x5, 'syz0\x00', 'syz1\x00', {0x159c}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x388)

437.094542ms ago: executing program 1 (id=13738):
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bond0\x00', <r1=>0x0})
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="4c0000001000010400000000000000ffffffffff", @ANYRES32=0x0, @ANYBLOB="00000000000300001c00128009000100766c616e000000000c000280060001000004000008000500", @ANYRES32=r1, @ANYBLOB="08000300", @ANYRES32=0x0, @ANYBLOB="e1975ab00bab37fb9b0919d8c101c2ecb11421098943e55088f97f5d386caa2392"], 0x4c}}, 0x0)
ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f00000001c0)={'bridge_slave_1\x00'})

435.55199ms ago: executing program 2 (id=13739):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000340)=[@mss={0x2, 0x409}, @window={0x3, 0x6, 0x7}, @mss={0x2, 0x7}, @window={0x3, 0x0, 0x4}], 0x4)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r3)
sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
close(r5)
r6 = socket$unix(0x1, 0x1, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
epoll_pwait(0xffffffffffffffff, 0x0, 0x0, 0x7, &(0x7f0000000640), 0x8)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xe}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x25dfdc03, {0x0, 0x0, 0x0, r8, {0x0, 0xa}, {0xa, 0xb}, {0x9}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x6, 0x0, 0x1, 0x4, 0xfffffff9, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2000c0a2}, 0x4008000)
ioctl$SIOCSIFHWADDR(r5, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})

434.280127ms ago: executing program 1 (id=13740):
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000040)={0x2, 0x3, 0x654, 0x1, 0x1})
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wpan3\x00', <r1=>0x0})
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wpan1\x00', <r2=>0x0})
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wpan1\x00', <r3=>0x0})
sendmsg$IEEE802154_LLSEC_GETPARAMS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x44, 0x0, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r1}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r2}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r3}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x41}, 0x40000)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r4, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x38, r5, 0x20, 0x70bd25, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0xff}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x44090}, 0x20000004)
sendmsg$IEEE802154_DISASSOCIATE_REQ(r4, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x40, r5, 0x20, 0x70bd2a, 0x25dfdbfd, {}, [@IEEE802154_ATTR_REASON={0x5, 0x12, 0xf7}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa2}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa3}, @IEEE802154_ATTR_REASON={0x5, 0x12, 0x2}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc}]}, 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x10000005)
sendmsg$IEEE802154_LIST_PHY(r4, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x14, r5, 0x400, 0x70bd2d, 0x25dfdbfb, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000080}, 0x20044088)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_NL_MON_PEER_GET(r6, &(0x7f0000000880)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000840)={&(0x7f0000000600)={0x21c, 0x0, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}]}, @TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_NET={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x5}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7}]}, @TIPC_NLA_BEARER={0xe4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_NAME={0x13, 0x1, @l2={'eth', 0x3a, 'veth0_vlan\x00'}}, @TIPC_NLA_BEARER_NAME={0x18, 0x1, @l2={'eth', 0x3a, 'veth0_to_batadv\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @empty}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0xfffffffc, @remote, 0xffffff95}}}}, @TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'eth', 0x3a, 'bond_slave_0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x0, @loopback, 0x9}}, {0x14, 0x2, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}}}}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}]}, @TIPC_NLA_BEARER_NAME={0xf, 0x1, @l2={'ib', 0x3a, 'pimreg1\x00'}}]}, @TIPC_NLA_LINK={0x20, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3b0}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}]}, @TIPC_NLA_MEDIA={0x84, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xa}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10001}]}]}, @TIPC_NLA_NODE={0x58, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY={0x4b, 0x4, {'gcm(aes)\x00', 0x23, "3c4463487ed70d119f17cd6086aa782dae5951a2b7305ac05efdd2463b8b12491c0cf5"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}]}, 0x21c}, 0x1, 0x0, 0x0, 0x200000c0}, 0x84)
r7 = socket$inet6(0xa, 0x1, 0x6)
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_CIPSOV4_C_ADD(r8, &(0x7f0000000a40)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000a00)={&(0x7f0000000900)={0xf8, 0x0, 0x0, 0x70bd25, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_MLSLVLLST={0x90, 0x8, 0x0, 0x1, [{0x4c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x20}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x9187b32}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6b4c8baa}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4c}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x5a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xcbce4f0}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x11}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x60ec3385}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x43}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x10}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x31c13e8d}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x8c}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2933bdd0}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xca}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x8ea0f2}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1c9b725b}]}]}, @NLBL_CIPSOV4_A_TAGLST={0x24, 0x4, 0x0, 0x1, [{0x5}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x1}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0xffffffffffffffff}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_DOI={0x8}]}, 0xf8}, 0x1, 0x0, 0x0, 0xc010}, 0x40008)
r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000ac0), r4)
sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(r8, &(0x7f0000000b80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x38, r9, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_MIN_BE={0x5, 0x11, 0x81}, @NL802154_ATTR_MIN_BE={0x5, 0x11, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x38}, 0x1, 0x0, 0x0, 0x20}, 0x4040000)
getsockopt$inet_sctp6_SCTP_INITMSG(r7, 0x84, 0x2, &(0x7f0000000bc0), &(0x7f0000000c00)=0x8)
r10 = socket(0xa, 0xa, 0x4)
ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, &(0x7f0000000c40)={0x3ff, 0x7, 0x47, 0xd, 0xfd0e})
r11 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000cc0), r4)
sendmsg$IEEE802154_LLSEC_SETPARAMS(r8, &(0x7f0000000d80)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x8004002}, 0xc, &(0x7f0000000d40)={&(0x7f0000000d00)={0x30, r11, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x3}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0xbee}]}, 0x30}, 0x1, 0x0, 0x0, 0xc041}, 0x8000)
syz_genetlink_get_family_id$nbd(&(0x7f0000000dc0), r4)
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000e00), 0x200, 0x0)
sendmsg$kcm(r10, &(0x7f0000002100)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000e40)="03df1d5454b3402b77c87a99a0e5e65a722029bced19e0bdf0063482b8ce4bddd376d95c4469b81bf0bae185dc7801eb5f5d1a81f41683a803789028091114d2b5738aaddf4ffea0da727c2a532d274f1c2df44b30b803da775b696bdf51b41f8faa3ff30880951221673abc5d4b97075111f152f6fafccc4f46b93fa998f05bfa53f90c2f55478d13e83949c2287343b9435d0f8e5eeabc82c43624e9586132be96c4217233e3c675202a22beedfa52133b07f990652eb06461508d76e6d00f4eb059a83c8e2e406f57d2ac33d6e95fa7b9e2004316ec7fdd9e84c33c9e0519938b920f65fe2d", 0xe7}, {&(0x7f0000000f40)="b2", 0x1}, {&(0x7f0000000f80)="cbf47bfa1dc6724e013806aa0803c7a394415fe95b15fa1e01e8902555ccdb22c3f4d1cd37e647e0c7b88fa334959dce8557ed6d06e27b8a1f2db420abbcf5799e9379608b9a11f725c22e7409e96d1b732bebaee07a081afad41da66a0b6d01dbc624be8ecc5126088f095c085b169fffec501501abb7247d6a1b8875bb137bb130abce69a3cb173e56dbc4738523b8dd88887f0b2e8d22cebb7653175e5a1738d26220b3600465fc129700b9c6f74751ee6f4481e2cd8a0a0a21b2aa517970569f2f47d9", 0xc5}], 0x3, &(0x7f00000010c0)=[{0x1010, 0x3a, 0x8d0, "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"}], 0x1010}, 0x0)
sendmsg$NL802154_CMD_GET_WPAN_PHY(r4, &(0x7f0000002240)={&(0x7f0000002140)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000002200)={&(0x7f0000002180)={0x50, r9, 0x100, 0x70bd29, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x50}, 0x1, 0x0, 0x0, 0x10}, 0x4040000)
r12 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
setsockopt$bt_BT_FLUSHABLE(r12, 0x112, 0x8, &(0x7f0000002280)=0x10, 0x4)
syz_genetlink_get_family_id$nbd(&(0x7f00000022c0), r8)

433.76146ms ago: executing program 0 (id=13741):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000017c0)=@newtaction={0x894, 0x30, 0xfbed, 0x70bd29, 0x25dfdbff, {}, [{0x880, 0x1, [@m_police={0x87c, 0x1, 0x0, 0x0, {{0xb}, {0x850, 0x2, 0x0, 0x1, [[@TCA_POLICE_RESULT={0x8, 0x5, 0xffffffff}, @TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x6, 0x0, 0x3, 0x4, 0x2, 0x2, 0x4000, 0x0, 0x0, 0x9, 0x0, 0xfffffffe, 0x0, 0x0, 0xfffffffc, 0x2, 0x5f41fde7, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x6, 0x0, 0x0, 0x7ff, 0x0, 0x4e16, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x8001, 0x1, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x0, 0x4, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xfffffffe, 0x1, 0x0, 0x100000, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x75b, 0x0, 0x0, 0xf, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3bf0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x1, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x2, 0x1000, 0x0, 0x0, 0x9, 0x3, 0xa088, 0x0, 0x1, 0x0, 0x0, 0x3, 0x0, 0x87, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xb7fe6bd0, 0x6, 0x1ffffffe, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xaa84911, 0x0, 0x0, 0xe6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0xfffffffd, 0x2, 0x0, 0x0, 0xfffffffc, 0x0, 0x2, 0x0, 0x0, 0x0, 0x18, 0x3, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0xffffffff, 0xffffffff, 0x0, 0x0, 0x7, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x4, 0x0, 0xfff, 0x1, 0x0, 0x0, 0x0, 0x2]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x9, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xfffffffc, 0x200, 0x0, 0x0, 0xffffffff, 0x7, 0x0, 0x0, 0x0, 0x3a4f, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x800007, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x40000, 0x2, 0x2, 0x4, 0x0, 0x0, 0x0, 0x894e, 0x0, 0x2, 0xfffffffe, 0x9, 0x0, 0x17a00, 0x0, 0x5, 0x80, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x9, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x8db, 0xffffffff, 0x0, 0x9, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x80, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x10, 0x0, 0x0, 0xf, 0x0, 0x7c, 0x0, 0x5, 0x0, 0x4, 0xffffffff, 0x0, 0x0, 0xcd9, 0x0, 0x0, 0x7, 0x5, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x4000, 0x10, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0xfffffff9, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x319e, 0xfb18, 0x6, 0x9, 0x0, 0x484a, 0x0, 0x2, 0x0, 0x6, 0x0, 0xfffffffc, 0x9, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfbfffffe, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2, 0x5a62, 0x0, 0x0, 0x0, 0x0, 0x4]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, {0x3, 0x0, 0x0, 0xff, 0xfffc, 0x5}, {0x5, 0x0, 0x0, 0x9, 0x0, 0xfffffffc}}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x0, 0x2}}}}]}]}, 0x894}}, 0x0)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000100), 0xffffffffffffffff)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={<r6=>0xffffffffffffffff})
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={<r7=>0xffffffffffffffff})
sendmsg$NBD_CMD_RECONFIGURE(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x38, r4, 0x981, 0x2, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r6}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r7}}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x2008810}, 0x0)
r8 = socket(0x10, 0x3, 0x0)
sendmmsg$alg(r8, &(0x7f0000000140), 0x4924b68, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={<r9=>0xffffffffffffffff})
r10 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)={0x20, 0x2c, 0x107, 0x70bd2b, 0x25dfdbff, {0x8, 0x7c}, [@nested={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0xdd}]}, @nested={0x4, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0xc000}, 0xc010)
sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x74, r4, 0x72a, 0x70bd29, 0x25dfdbfb, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x20}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x114}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x4}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r8}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r9}}]}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x1}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x6}]}, 0x74}, 0x1, 0x0, 0x0, 0x10}, 0x4)
sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000500)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000004c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002cbd7000fcdbdf250300000008000100000000000b000a006970766c616e0000210003000d00000000000000e4cb3ba7d69e711ad6dffc7b7771ab746a55c9eb70435cf9b0c26640d4b27299dc2296a13d808aa1c17e7aa4df1e3768f68878d2e64fa418a0ec7abcd39c6b5edd2975c6eea9fad10d62"], 0x34}}, 0x24040080)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff)
r13 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r13, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000680)={0x30, r12, 0x1, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0xd}, @val={0x8}, @val={0xc, 0x99, {0x1, 0x2}}}}}, 0x30}, 0x1, 0x0, 0x0, 0xc0}, 0x40040)
sendmsg$NL80211_CMD_SET_MCAST_RATE(r11, &(0x7f0000000200)={&(0x7f0000000080), 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x3c, r12, 0x20, 0x70bd2a, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x6e}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x3c}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x1e0}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xb4}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x37}]}, 0x3c}, 0x1, 0x0, 0x0, 0x14040095}, 0x20008805)
gettid()

296.865591ms ago: executing program 2 (id=13742):
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000700), 0xffffffffffffffff)
socket$igmp(0x2, 0x3, 0x2)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$XFS_IOC_FSGROWFSLOG(0xffffffffffffffff, 0x4008586f, &(0x7f0000000240)={0x1, 0x400})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_LACP_ACTIVE={0x5, 0x1d, 0x8}, @IFLA_BOND_MODE={0x5, 0x1, 0x4}]}}}]}, 0x44}, 0x1, 0xba01}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a74000000060a0904000000000000f3770200000048000480300001800e000100696d6d6564696174650000001c000280100002800c00058008000180fffffffb0800014000000000140001800d00010073796e70726f7879000000000900010073797a30000000000900020073797a320000000014000000110001"], 0x9c}}, 0x0)

239.060339ms ago: executing program 2 (id=13743):
syz_emit_ethernet(0x4e, &(0x7f0000000180)=ANY=[@ANYBLOB="5b685c7e778fbbbbbbbbbbbb86dd6a00000000181100fe880000000000000000000000000001ff020000000000000000000000000001780400000004"], 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000002fc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4}, 0x94)
setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000002900)=r1, 0x4)
bind$netlink(r0, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(0xffffffffffffffff, 0x0, 0x44010)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x200000d0}, 0x4000000)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001980)={&(0x7f0000000700)=@deltaction={0x14, 0x31, 0x800, 0x70bd27, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x80)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYRESDEC=r2, @ANYRES32=0x0, @ANYBLOB="000000000000000008001b000000000004001a80180002"], 0x44}}, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x58201, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
syz_open_procfs$namespace(0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x8e40, 0x0)
close(r5)
socket$netlink(0x10, 0x3, 0x0)
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0)
r8 = socket$packet(0x11, 0x3, 0x300)
r9 = socket$nl_route(0x10, 0x3, 0x0)
r10 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r11=>0x0})
sendmsg$nl_route_sched(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff5644d, 0x70b923, 0x25dfdbfe, {0x0, 0x0, 0x0, r11, {}, {0xe, 0xb}, {0xf, 0xb}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0xffffffffffffffe6, 0x2, {{0x6, 0x808, 0x205, 0x1, 0xc}, 0xb, 0x1, 0x32, 0x5, 0xa, 0x2, 0x9, 0xd, 0x1, 0xfffffffb, {0xffff1c72, 0x23, 0x7, 0xc, 0xfffffffe, 0x7583}}}}]}, 0x78}}, 0x20048040)
sendto$packet(r8, &(0x7f00000001c0)="6e6b1534fad31975219851db0031", 0xe, 0x60088d2, &(0x7f0000000080)={0x11, 0x88a8, r7, 0x1, 0xda, 0x6, @random}, 0x14)
sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0)

235.088922ms ago: executing program 0 (id=13744):
r0 = socket$unix(0x1, 0x1, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000850000000700000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={r1, 0x0, 0x0, 0x0, &(0x7f0000000580), 0x0, 0xa7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x50)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'veth1_to_team\x00', <r3=>0x0})
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r4, &(0x7f00000010c0)=ANY=[@ANYRESHEX=0x0, @ANYRESOCT=r4, @ANYBLOB="56ea1b8ae9e9466db83abca53aa35eb0cd22469dd7e137be8329da04d4d8a01c473fd169a75ecc6b58cc50442c25b965989ab36faff36b711728b9fd0dba9f75836db791a59c2091316682d2904e0e34846bc67ed9eae34b094954d70b050e9021e0e22ab75e4b69e885fef20b2ae2d814a194aa1597951d25b95c16f4bd9503b4f5a9abf8dc15ee9a0cdd10305b2f2929208fd5bc8063b52d1bcea258d12c43ead0580e97ee61403c0939344317d37461913a55b13b5c651335c5853170fa44a25ebd911fab5aaa541abb6101186161e43c8481506a0eef30b2de62461b625c6c98f6f529936a71151c8e330b1a4606273f7cfd297ffe3d2bb748cf8343f280aa0bf1ec60017edbbd255353573c6feede27c3b0a76385b9a83b3eeaf1965dbef18a6005baf0245d8b61c960c6813dad59aae69bb9cd215844e35e1018353efbf07aa8b5422da861dde26c30fbee377a9a3e92a6b400327ef79d109c59c862a11ea99d432f17aa32570827ee023cbc3145f3b92b84613ed52ecb02dd935f02a38f8b673cf8914a8377eb4dfdb5a90d18e704a955e5bbb6a0"], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000040)={r4, r3, 0x25, 0x5, @val=@tcx}, 0x1c)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x2, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000611898000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94)
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x8, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x10}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0xf, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)

136.592223ms ago: executing program 1 (id=13745):
socket$netlink(0x10, 0x3, 0x0)
syz_emit_ethernet(0x107, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newlink={0x20, 0x10, 0x503, 0xffffffff, 0x0, {0x0, 0x0, 0x0, 0x0, 0x115, 0x100a1}}, 0x20}}, 0x8000000)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000100)=@filter={'filter\x00', 0x42, 0x4, 0x12f0, 0xffffffff, 0x98, 0x0, 0x98, 0xffffffff, 0xffffffff, 0x1258, 0x1258, 0x1258, 0xffffffff, 0x5, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'netpci0\x00', 'nr0\x00', {}, {}, 0x0, 0x2}, 0x74000002, 0x70, 0x98, 0x1ba, {0x46010000, 0x2c000000000000}}, @REJECT={0x28}}, {{@ip={@empty, @remote, 0xff, 0x0, 'veth0_to_batadv\x00', 'team_slave_1\x00'}, 0x287, 0x10e8, 0x1128, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x1, 0x0, 0x0, './cgroup.cpu/syz1\x00', 0x0, {0x4000000000000000}}}, @common=@unspec=@limit={{0x48}, {0xfffffffe, 0x7, 0x0, 0x2, 0x0, 0x0, 0x2}}]}, @common=@unspec=@RATEEST={0x20, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x3, {0x8}}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x1ff, 0x2, 0x1}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x1350)
socket$inet6(0xa, 0x80000, 0x0)

135.993055ms ago: executing program 2 (id=13746):
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bond0\x00', <r1=>0x0})
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="4c0000001000010400000000000000feffffffff", @ANYRES32=0x0, @ANYBLOB="00000000000300001c00128009000100766c616e000000000c000280060001000004000008000500", @ANYRES32=r1, @ANYBLOB="08000300", @ANYRES32=0x0, @ANYBLOB="e1975ab00bab37fb9b0919d8c101c2ecb11421098943e55088f97f5d386caa2392"], 0x4c}}, 0x0)
ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f00000001c0)={'bridge_slave_1\x00'})

56.740104ms ago: executing program 2 (id=13747):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c00"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800}, 0x94)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="8c00000010001fff28bd70000000800000000000", @ANYRES32=0x0, @ANYBLOB="efb00000800000006c0012800b00010062726964676500005c00028008000500010000000c002e"], 0x8c}, 0x1, 0x0, 0x0, 0x4000084}, 0x14)

56.49565ms ago: executing program 0 (id=13748):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001c40)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1d4b}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_ALL_SLAVES_ACTIVE={0x5, 0x11, 0xff}, @IFLA_BOND_FAIL_OVER_MAC={0x5, 0xd, 0x1}]}}}]}, 0x44}, 0x1, 0x0, 0x4000}, 0x0)

55.432433ms ago: executing program 2 (id=13749):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40054}, 0x0) (async)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a70000000060a0b0400000000000000000200000044000480400001800a0001006d6174636800000030000280080002400000000118000300d67a8527f76ec1d39e537c4c3060c60100106c720a0001006f776e65720000000900010073797a30000000000900020073797a32"], 0x98}}, 0x4048010) (async)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff}) (async, rerun: 64)
unshare(0x66000080) (async, rerun: 64)
socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) (async)
setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) (async)
setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000540)=@gcm_128={{0x303}, "ffffffffffffffe2", "8e083700daf38a6d69e9b5e9c2f133d7", "6a3a05b9", "12772541f8eb02bb"}, 0x28) (async)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0)
r3 = socket(0x2, 0x80805, 0x0) (async)
r4 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r4, 0x0) (async)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000200)={<r5=>0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x7a, &(0x7f0000000340)={<r6=>r5, @in6={{0xa, 0x4e22, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
r8 = socket$l2tp6(0xa, 0x2, 0x73) (async)
r9 = accept4$vsock_stream(r2, &(0x7f0000000100)={0x28, 0x0, 0xffffffff, @local}, 0x10, 0x80800)
ppoll(&(0x7f0000000180)=[{r7, 0x8400}, {r8, 0x80}, {r1, 0x8000}, {r9, 0x1050}, {r3, 0x260}, {r4, 0x1}, {r0, 0x100}], 0x7, &(0x7f0000000240)={0x77359400}, &(0x7f0000000300)={[0xfffffffffffffffb]}, 0x8)
getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000080)={r6, 0x3}, &(0x7f00000000c0)=0x8)
write$cgroup_int(r2, &(0x7f0000000000), 0xffffff6a) (async)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) (async, rerun: 64)
sendfile(r1, r2, 0x0, 0xffffffff004) (rerun: 64)
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)={0x14, 0x36, 0x1, 0x0, 0x25dfdbff, "", [@nested={0x4}]}, 0x14}], 0x1}, 0x0) (async, rerun: 32)
sendmsg$IPSET_CMD_CREATE(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="58000000020605000000000000000000000000030c000300686173683a6970000900020073797a320000000005000400000000000500050002000000050001000600000014000780080006400000000208000c"], 0x58}}, 0x20000000) (async, rerun: 32)
setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f00000000c0)={0xe440, 0x7fffffff, 0xffffffff, 0xfffffffb, 0xfffffffc}, 0x14) (async)
r11 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$inet6_tcp_int(r11, 0x6, 0x6, &(0x7f0000000000)=0x3, 0x4)

1.852652ms ago: executing program 1 (id=13750):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000940)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}) (async)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
splice(r2, 0x0, r3, 0x0, 0xf3a, 0x0)
recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}, 0x0) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@getqdisc={0x24, 0x26, 0x10, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x1, 0x5}, {0x10, 0xd}, {0x3, 0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000001}, 0x20040000) (async)
r4 = socket$netlink(0x10, 0x3, 0x0) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'lo\x00', <r6=>0x0})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newqdisc={0x3c, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r6, {0x0, 0x8}, {0xffff, 0xffff}, {0x0, 0x5}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x0, 0xfffffff7}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80d1}, 0x34008098) (async)
sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0)
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000000100000104000028000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\t\x00'/24], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r7}, 0x0, 0x0}, 0x20) (async)
write$cgroup_pid(r3, &(0x7f0000000000), 0xffffff98)
splice(r2, 0x0, r3, 0x0, 0xc, 0x7) (async)
write(r1, 0x0, 0x0) (async)
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="200000002e00090027bd700000000000040000000800180004ac0f0004001e"], 0x20}, 0x1, 0x0, 0x0, 0x42804}, 0x0) (async, rerun: 32)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000000)=r0, 0x4) (async, rerun: 32)
ioctl$BTRFS_IOC_ENCODED_WRITE(r2, 0x40809440, &(0x7f00000001c0)={&(0x7f0000000180)=[{&(0x7f0000000080)="e9974015ebd833de155dc1756ce44238a3a1c79bb5e17cb8fcae6ddd27be5b75b107ca204d2d6d30b8660dc663cffedb7b265d4bd2421fd2c875ece09cc1b8afad51612cbbf71da2e51ba5eda1896651c34c99a7b4b18860348df72936d068cd672b68d939834b95125cdb343d45306f", 0x70}], 0x1, 0x2, 0x0, 0xa2c, 0x2, 0x1, 0x8, 0xd})

0s ago: executing program 0 (id=13751):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40741, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async)
write$tun(r0, &(0x7f0000000040)={@void, @void, @mpls={[{0x1}, {0xffffd}, {0xd, 0x0, 0x1}, {0x3ff}, {0x300}, {0x6}, {0x7}], @llc={@llc={0xff, 0xfe, "c1", "7bcb5e104405b8efc659c68ad7e32836e9befefab0ff53c2324438b1ab099d376683a58f22d186490eec57898c4ab570a2725d3059d13ed3f90158e131ee0e90d7806b0548bc384fb31ea62c463c7d975ce5702e9a78e33ff6a9db32388710ae21bc993673414743826fe12b4ff94b84369db935ac4e2511f2d9541c76b366c2364f86524708d01919ac0de5837b0abe66c3a1ea566db3a466d39b5ec20656f70a23864a648638cb68e503fe9e164c60350c402bed3b73de76427494"}}}}, 0xdb) (async)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={<r1=>0xffffffffffffffff})
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) (async)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r3 = openat$cgroup_procs(r2, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0)
write$cgroup_pid(r3, &(0x7f0000000c40), 0x12)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r5 = openat$cgroup_ro(r4, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0)
write$cgroup_int(r5, &(0x7f0000000200)=0x1, 0x12) (async)
write$cgroup_pid(r5, &(0x7f0000000180), 0x12)
r6 = socket$nl_route(0x10, 0x3, 0x0)
getsockopt$sock_cred(r6, 0x1, 0x4a, 0x0, &(0x7f0000000180))
recvmsg$unix(r1, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x21)
writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000340)="00d60000000000", 0x7}, {0x0, 0x54}], 0x2)

kernel console output (not intermixed with test programs):

e 4 has an invalid length.
[  806.527544][T10352] macsec0: entered allmulticast mode
[  806.540199][T10352] veth1_macvtap: entered allmulticast mode
[  806.545970][T10352] macsec0: left allmulticast mode
[  806.549895][T10352] veth1_macvtap: left allmulticast mode
[  806.616577][T10353] bond150 (unregistering): Released all slaves
[  806.697746][T10368] netlink: 210640 bytes leftover after parsing attributes in process `syz.2.12609'.
[  806.788458][T10361] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check.
[  806.827154][T10375] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12615'.
[  806.833856][T10375] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12615'.
[  806.858402][T10379] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check.
[  806.870977][T10380] RDS: rds_bind could not find a transport for ::ffff:172.20.20.54, load rds_tcp or rds_rdma?
[  806.873464][T10375] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12615'.
[  806.877437][T10379] RDS: rds_bind could not find a transport for ::ffff:172.20.20.54, load rds_tcp or rds_rdma?
[  806.881650][T10375] netlink: 12 bytes leftover after parsing attributes in process `syz.1.12615'.
[  806.890437][T10379] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  806.898071][T10379] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  806.946377][T10387] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12618'.
[  806.974825][T10379] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  806.978650][T10379] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  807.026420][T10379] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  807.030870][T10379] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  807.241568][T10379] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  807.245367][T10379] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  807.288800][T10392] syzkaller1: entered promiscuous mode
[  807.290889][T10392] syzkaller1: entered allmulticast mode
[  807.365568][T10385] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  807.368840][T10385] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  807.379097][T10385] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  807.383238][T10385] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  807.415410][   T12] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  807.418067][   T12] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  807.454648][T10385] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  807.470237][T10385] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  807.502779][T10406]  speed is unknown, defaulting to 1000
[  807.678964][T10413] mac80211_hwsim hwsim6 syzkaller0: entered promiscuous mode
[  807.682254][T10413] mac80211_hwsim hwsim6 syzkaller0: entered allmulticast mode
[  807.917703][T10426] netlink: 'syz.2.12626': attribute type 58 has an invalid length.
[  808.120149][T10442] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  808.141590][T10440] tipc: Resetting bearer <eth:syzkaller0>
[  808.232418][T10432]  speed is unknown, defaulting to 1000
[  808.314276][T10434]  speed is unknown, defaulting to 1000
[  808.358021][T10448] bond133: option all_slaves_active: invalid value (255)
[  808.362676][T10448] bond133 (unregistering): Released all slaves
[  808.399874][T10437] netlink: 'syz.0.12628': attribute type 1 has an invalid length.
[  808.486577][T10437]  speed is unknown, defaulting to 1000
[  808.510963][  T341] tipc: Resetting bearer <eth:syzkaller0>
[  808.778118][T10468] bond123: entered allmulticast mode
[  808.781036][T10468] ip6gre0: entered allmulticast mode
[  809.231236][T10491] syzkaller1: entered promiscuous mode
[  809.233289][T10491] syzkaller1: entered allmulticast mode
[  809.297454][T10499] netlink: 'syz.0.12646': attribute type 1 has an invalid length.
[  809.358635][T10500] bond160: entered promiscuous mode
[  809.361221][T10500] bond160: entered allmulticast mode
[  809.365087][T10500] 8021q: adding VLAN 0 to HW filter on device bond160
[  809.374607][T10500] macvlan11: entered promiscuous mode
[  809.376530][T10500] macvlan11: entered allmulticast mode
[  809.380062][T10500] 8021q: adding VLAN 0 to HW filter on device macvlan11
[  809.408425][T10499] macvlan11: entered promiscuous mode
[  809.410926][T10499] macvlan11: entered allmulticast mode
[  809.413896][T10499] 8021q: adding VLAN 0 to HW filter on device macvlan11
[  809.576744][T10520] netlink: 'syz.1.12650': attribute type 1 has an invalid length.
[  809.602858][T10520] bond133: entered promiscuous mode
[  809.616149][T10520] 8021q: adding VLAN 0 to HW filter on device bond133
[  809.769698][T10535] netlink: 'syz.2.12653': attribute type 12 has an invalid length.
[  809.821589][T10541] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  809.834389][T10537]  speed is unknown, defaulting to 1000
[  809.876155][T10545] netlink: 'syz.0.12657': attribute type 1 has an invalid length.
[  809.978026][T10545] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  810.122931][T10552] syzkaller1: entered promiscuous mode
[  810.126642][T10552] syzkaller1: entered allmulticast mode
[  810.197467][T10554] vti2: entered promiscuous mode
[  810.464779][T10561] ip6_vti0: Caught tx_queue_len zero misconfig
[  810.554628][T10575] netlink: 'syz.0.12665': attribute type 1 has an invalid length.
[  810.588798][T10575] bond162: entered promiscuous mode
[  810.593098][T10575] 8021q: adding VLAN 0 to HW filter on device bond162
[  810.628677][T10575] bond162: (slave bridge133): making interface the new active one
[  810.631554][T10575] bridge133: entered promiscuous mode
[  810.635261][T10583] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  810.637959][T10575] bond162: (slave bridge133): Enslaving as an active interface with an up link
[  810.645251][T10582] netlink: 'syz.1.12668': attribute type 1 has an invalid length.
[  810.713897][T10582] 8021q: adding VLAN 0 to HW filter on device bond134
[  810.726390][T10592] __nla_validate_parse: 17 callbacks suppressed
[  810.726403][T10592] netlink: 88 bytes leftover after parsing attributes in process `syz.0.12669'.
[  810.836869][T10600] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12667'.
[  811.125566][T10596] tipc: Resetting bearer <eth:syzkaller0>
[  811.140649][T10606] netlink: 64 bytes leftover after parsing attributes in process `syz.0.12672'.
[  811.177479][T22015]  speed is unknown, defaulting to 1000
[  811.181315][T22015] syz2: Port: 1 Link DOWN
[  811.183794][T10600] vlan13: entered promiscuous mode
[  811.196571][T10385] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  811.199112][T10385] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  811.202506][T10385] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  811.205952][T10385] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  811.211225][T10605] netlink: 16 bytes leftover after parsing attributes in process `syz.0.12672'.
[  811.214051][T10605] netlink: 11 bytes leftover after parsing attributes in process `syz.0.12672'.
[  811.216752][T10605] netlink: 11 bytes leftover after parsing attributes in process `syz.0.12672'.
[  811.220266][T10605] netlink: 52 bytes leftover after parsing attributes in process `syz.0.12672'.
[  811.224515][T10385] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  811.236211][T10385] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  811.249780][ T8554] block nbd4: Receive control failed (result -32)
[  811.254188][   T56] block nbd4: Receive control failed (result -32)
[  811.259016][T10385] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  811.261894][T10385] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  811.443480][T10620] netlink: 'syz.2.12679': attribute type 1 has an invalid length.
[  811.613860][T10644] syzkaller1: entered promiscuous mode
[  811.615649][T10644] syzkaller1: entered allmulticast mode
[  811.618432][T10645] netlink: 12 bytes leftover after parsing attributes in process `syz.0.12684'.
[  811.677531][T10638] bond163: option active_slave: mode dependency failed, not supported in mode balance-xor(2)
[  811.682300][T10638] bond163 (unregistering): Released all slaves
[  811.736018][T10650] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  811.775985][T10654] netlink: 52 bytes leftover after parsing attributes in process `syz.1.12690'.
[  811.853166][T10656] bond150: option all_slaves_active: invalid value (255)
[  811.869995][T10656] bond150 (unregistering): Released all slaves
[  811.913612][T10659] netlink: 64 bytes leftover after parsing attributes in process `syz.1.12692'.
[  812.267075][T10685] validate_nla: 7 callbacks suppressed
[  812.267087][T10685] netlink: 'syz.2.12699': attribute type 13 has an invalid length.
[  812.277154][T10685] netlink: 'syz.2.12699': attribute type 17 has an invalid length.
[  812.286841][T10685] 0{X: left allmulticast mode
[  812.315832][T10685] 8021q: adding VLAN 0 to HW filter on device `
[  812.360569][T10685] veth0_macvtap: left promiscuous mode
[  812.363665][T10685] veth0_macvtap: entered promiscuous mode
[  812.404575][T10685] 8021q: adding VLAN 0 to HW filter on device bond1
[  812.417032][T10685] 8021q: adding VLAN 0 to HW filter on device bond2
[  812.425865][T10685] 8021q: adding VLAN 0 to HW filter on device bond3
[  812.435347][T10685] 8021q: adding VLAN 0 to HW filter on device bond4
[  812.477675][T10697] netlink: 'syz.0.12701': attribute type 13 has an invalid length.
[  812.495561][T10685] 8021q: adding VLAN 0 to HW filter on device bond5
[  812.528190][T10685] 8021q: adding VLAN 0 to HW filter on device bond6
[  812.537990][T10685] 8021q: adding VLAN 0 to HW filter on device bond7
[  812.545529][T10685] gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue
[  812.549041][T10685] 8021q: adding VLAN 0 to HW filter on device bond8
[  812.554102][T10685] 8021q: adding VLAN 0 to HW filter on device bond9
[  812.558119][T10685] 8021q: adding VLAN 0 to HW filter on device bond10
[  812.568567][T10685] gretap3: default qdisc (pfifo_fast) fail, fallback to noqueue
[  812.574323][T10685] 8021q: adding VLAN 0 to HW filter on device bond11
[  812.578369][T10685] 8021q: adding VLAN 0 to HW filter on device bond12
[  812.583128][T10685] 8021q: adding VLAN 0 to HW filter on device bond13
[  812.586461][T10685] 8021q: adding VLAN 0 to HW filter on device bond14
[  812.592997][T10685] 8021q: adding VLAN 0 to HW filter on device bond15
[  812.596851][T10685] hsr1: Slave A (veth1_to_team) is not up; please bring it up to get a fully working HSR network
[  812.605965][T10685] 8021q: adding VLAN 0 to HW filter on device bond16
[  812.614914][T10685] 8021q: adding VLAN 0 to HW filter on device bond17
[  812.617957][T10685] 8021q: adding VLAN 0 to HW filter on device bond18
[  812.623953][T10685] 8021q: adding VLAN 0 to HW filter on device bond19
[  812.630241][T10685] 8021q: adding VLAN 0 to HW filter on device bond20
[  812.633803][T10685] mac80211_hwsim hwsim5 syzkaller0: left promiscuous mode
[  812.636618][T10685] mac80211_hwsim hwsim5 syzkaller0: left allmulticast mode
[  812.640096][T10685] A link change request failed with some changes committed already. Interface syzkaller0 may have been left with an inconsistent configuration, please check.
[  812.653746][T14020]  speed is unknown, defaulting to 1000
[  812.656547][T14020] syz2: Port: 1 Link ACTIVE
[  812.690387][T10688] bond135: option all_slaves_active: invalid value (255)
[  812.694407][T10688] bond135 (unregistering): Released all slaves
[  812.716709][T15557] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  812.722242][T15557] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  812.725220][T15557] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 20002 - 0
[  812.734652][T15556] bond4: (slave veth5): link status definitely up, 10000 Mbps full duplex
[  812.773961][T15556] bond4: (slave veth5): making interface the new active one
[  812.788069][T15556] bond4: active interface up!
[  812.798023][T15557] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  812.808433][T15557] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  812.813373][T15557] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 20002 - 0
[  812.862203][   T12] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  812.867039][   T12] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  812.870970][   T12] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 20002 - 0
[  812.886877][   T12] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  812.895335][   T12] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  812.909981][   T12] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 20002 - 0
[  812.921093][T10703] bond104: option mode: unable to set because the bond device has slaves
[  812.987232][T15556] bond14: (slave veth11): link status definitely up, 10000 Mbps full duplex
[  812.998046][T15556] bond14: (slave veth11): making interface the new active one
[  813.023232][T15556] bond14: active interface up!
[  813.229944][   T33] audit: type=1804 audit(1778557785.756:15): pid=10732 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.12709" name="/newroot/4276/cgroup.controllers" dev="tmpfs" ino=21668 res=1 errno=0
[  813.242406][   T33] audit: type=1800 audit(1778557785.756:16): pid=10732 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.12709" name="cgroup.controllers" dev="tmpfs" ino=21668 res=0 errno=0
[  813.622739][T10752] veth0_to_bond: left allmulticast mode
[  813.624985][T10752] veth0_to_bond: left promiscuous mode
[  813.627458][T10752] bridge54: port 2(veth0_to_bond) entered disabled state
[  813.636583][T10752] bond2: (slave geneve2): Releasing active interface
[  813.644906][T10752] bond3: (slave gretap1): Releasing active interface
[  813.653817][T10752] bond4: (slave veth9): Releasing backup interface
[  813.662707][T10752] bond6: (slave bridge9): Releasing backup interface
[  813.675045][T10752] bond7: (slave bridge11): Releasing backup interface
[  813.684103][T10752] bond9: (slave ip6gretap2): Releasing active interface
[  813.691240][T10752] bond13: (slave gretap2): Releasing active interface
[  813.699460][T10752] bond16: (slave gretap3): Releasing active interface
[  813.712312][T10752] bond26: (slave veth27): Releasing active interface
[  813.719580][T10752] bond26: (slave veth27): the permanent HWaddr of slave - ee:4a:31:3d:98:5a - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  813.745773][T10752] bond26: (slave veth29): Releasing active interface
[  813.760314][T10752] bond27: (slave gretap0): Releasing active interface
[  813.765954][T10752] bond30: (slave veth33): Releasing backup interface
[  813.771606][T10752] bond32: (slave bridge22): Releasing active interface
[  813.778070][T10752] bond43: (slave wireguard1): Releasing backup interface
[  813.787583][T10752] bond43: (slave wireguard2): making interface the new active one
[  813.805109][T10752] bond43: (slave wireguard2): Releasing backup interface
[  813.812395][T10752] bond46: (slave erspan2): Releasing active interface
[  813.817333][T10752] bond51: (slave wireguard3): Releasing backup interface
[  813.822478][T10752] bond54: (slave batadv2): Releasing active interface
[  813.828045][T10752] bond57: (slave veth43): Releasing active interface
[  813.833241][T10752] bond65: (slave batadv3): Releasing backup interface
[  813.837962][T10752] bond66: (slave vti0): Releasing backup interface
[  813.842975][T10752] bond69: (slave batadv4): Releasing active interface
[  813.848446][T10752] bond74: (slave bridge30): Releasing active interface
[  813.851375][T10752] bond74: (slave bridge30): the permanent HWaddr of slave - 46:be:01:e9:54:7e - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  813.860739][T10752] bond74: (slave ip6gretap7): making interface the new active one
[  813.865682][T10752] bond74: (slave ip6gretap7): Releasing active interface
[  813.873632][T10752] bond76: (slave veth45): Releasing active interface
[  813.878519][T10752] bond84: (slave bridge39): Releasing active interface
[  813.888750][T10752] bond85: (slave bridge40): Releasing active interface
[  813.896038][T10752] vlan14: left allmulticast mode
[  813.898691][T10752] geneve0: left allmulticast mode
[  813.900922][T10752] vlan14: left promiscuous mode
[  813.902566][T10752] geneve0: left promiscuous mode
[  813.904410][T10752] bridge0: port 2(vlan14) entered disabled state
[  813.915198][T10752] bond89: (slave bond90): Releasing backup interface
[  813.919029][T10752] bond91: (slave bridge43): Releasing backup interface
[  813.923455][T10752] bond92: (slave ip6gre3): Releasing backup interface
[  813.925595][T10752] ip6gre3: left allmulticast mode
[  813.928540][T10752] bond94: (slave bridge44): Releasing active interface
[  813.933533][T10752] bond97: (slave veth47): Releasing active interface
[  813.936609][T10752] batman_adv: batadv0: Removing interface: ipvlan0
[  813.940165][T10752] bond104: (slave ip6gretap8): Removing an active aggregator
[  813.943152][T10752] bond104: (slave ip6gretap8): Releasing backup interface
[  813.952964][T10752] bond115: (slave wireguard5): Releasing backup interface
[  813.955448][T10752] wireguard5: left promiscuous mode
[  813.958947][T10752] bond122: (slave bridge53): Releasing backup interface
[  813.961577][T10752] bridge53: left promiscuous mode
[  813.964458][T10752] veth51: left allmulticast mode
[  813.966409][T10752] veth51: left promiscuous mode
[  813.968041][T10752] bridge54: port 1(veth51) entered disabled state
[  813.973672][T10752] bond124: (slave bridge56): Releasing active interface
[  813.977832][T10752] bond128: (slave wireguard6): Releasing backup interface
[  813.980325][T10752] wireguard6: left promiscuous mode
[  813.998527][T10756] ip6gre4: entered allmulticast mode
[  814.124063][T10767] bond164: option ad_actor_sys_prio: mode dependency failed, not supported in mode broadcast(3)
[  814.128741][T10767] bond164 (unregistering): Released all slaves
[  814.149721][T10765] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode
[  814.152257][T10765] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode
[  814.169193][T10765] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  814.291565][T10774] xt_CT: You must specify a L4 protocol and not use inversions on it
[  814.320045][T10776] team0: left allmulticast mode
[  814.322025][T10776] team0: left promiscuous mode
[  814.323633][T10776] bridge0: port 1(team0) entered disabled state
[  814.331977][T10776] bond134: (slave bridge120): Releasing active interface
[  814.335793][T10776] bond136: (slave bond137): Releasing backup interface
[  814.342486][T10776] bond138: (slave bridge122): Releasing active interface
[  814.346887][T10776] bond139: (slave bridge123): Releasing active interface
[  814.352200][T10776] bond141: (slave bond142): Releasing backup interface
[  814.356091][T10776] bond144: (slave veth1): Releasing active interface
[  814.361879][T10776] bond147: (slave bridge127): Releasing active interface
[  814.367803][T10776] bond149: (slave bridge128): Releasing active interface
[  814.373236][T10776] bond151: (slave bridge129): Releasing backup interface
[  814.376987][T10776] bond157: (slave bridge130): Releasing backup interface
[  814.379074][T10776] bridge130: left promiscuous mode
[  814.380931][T10776] bridge130: left allmulticast mode
[  814.385907][T10776] bond158: (slave bridge131): Releasing backup interface
[  814.387957][T10776] bridge131: left promiscuous mode
[  814.399341][T10776] team0: Port device bridge132 removed
[  814.405024][T10776] bond162: (slave bridge133): Releasing backup interface
[  814.407021][T10776] bridge133: left promiscuous mode
[  814.702281][T10802] bond111: entered allmulticast mode
[  814.791842][T10809] syzkaller1: entered promiscuous mode
[  814.793621][T10809] syzkaller1: entered allmulticast mode
[  814.922129][T10817] netem: change failed
[  814.925162][T10817] tipc: Resetting bearer <eth:syzkaller0>
[  815.033150][T10820] bond135: entered promiscuous mode
[  815.035710][T10820] 8021q: adding VLAN 0 to HW filter on device bond135
[  815.815910][T10820] bond135 (unregistering): Released all slaves
[  815.902354][T10826] bond164: option all_slaves_active: invalid value (255)
[  815.913051][T10826] bond164 (unregistering): Released all slaves
[  816.043169][T10833] Cannot find add_set index 2 as target
[  816.055080][T10832] netlink: 'syz.1.12738': attribute type 30 has an invalid length.
[  816.068062][T10832] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check.
[  816.107067][T10837] __nla_validate_parse: 18 callbacks suppressed
[  816.107082][T10837] netlink: 28 bytes leftover after parsing attributes in process `syz.2.12740'.
[  816.412010][T10855] netlink: 32 bytes leftover after parsing attributes in process `syz.1.12745'.
[  816.527173][T10855] bond104: (slave ): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  816.542070][T10855] bond104: (slave ): Enslaving as an active interface with an up link
[  816.552209][T10855] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check.
[  817.177790][T10884] netlink: 32 bytes leftover after parsing attributes in process `syz.2.12751'.
[  817.193963][T10884] netlink: 32 bytes leftover after parsing attributes in process `syz.2.12751'.
[  817.723211][T10899] netlink: 'syz.1.12754': attribute type 30 has an invalid length.
[  817.727920][T10899] netlink: 16 bytes leftover after parsing attributes in process `syz.1.12754'.
[  817.764173][T10905] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12755'.
[  817.784305][T10899] bond135: option arp_missed_max: mode dependency failed, not supported in mode 802.3ad(4)
[  817.788236][T10899] bond135 (unregistering): Released all slaves
[  817.912963][T10911] netlink: 12 bytes leftover after parsing attributes in process `syz.0.12757'.
[  817.917255][T10911] netlink: 12 bytes leftover after parsing attributes in process `syz.0.12757'.
[  817.921191][T10911] netlink: 58 bytes leftover after parsing attributes in process `syz.0.12757'.
[  818.018164][T10915] netlink: 20 bytes leftover after parsing attributes in process `syz.2.12759'.
[  818.096160][T10917] ip6gre0: left allmulticast mode
[  818.166041][T10917] veth1_macvtap: left promiscuous mode
[  818.169123][T10917] A link change request failed with some changes committed already. Interface veth1_macvtap may have been left with an inconsistent configuration, please check.
[  818.218827][T10922] syzkaller1: entered promiscuous mode
[  818.222476][T10922] syzkaller1: entered allmulticast mode
[  818.536850][T10956] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap0
[  818.540527][T10956] gretap0: entered promiscuous mode
[  818.542150][T10956] gretap0: entered allmulticast mode
[  818.625347][T10967] netlink: 'syz.2.12771': attribute type 12 has an invalid length.
[  818.733597][T10970] netlink: 'syz.2.12771': attribute type 39 has an invalid length.
[  819.113696][T10985] Cannot find del_set index 3 as target
[  819.170340][T10991] netlink: 'syz.1.12778': attribute type 1 has an invalid length.
[  819.185772][T10990] bond29: (slave bridge0): Releasing active interface
[  819.267005][T10991] 8021q: adding VLAN 0 to HW filter on device bond135
[  820.107932][T11015] Cannot find add_set index 2 as target
[  820.149779][T11017] netlink: 'syz.2.12785': attribute type 1 has an invalid length.
[  822.112785][T10986] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  822.286010][T11029] __nla_validate_parse: 39 callbacks suppressed
[  822.286029][T11029] netlink: 20 bytes leftover after parsing attributes in process `syz.2.12788'.
[  822.289241][T11027] veth0_macvtap: left promiscuous mode
[  822.295830][T11027] veth0_macvtap: entered promiscuous mode
[  822.303505][T11029] netlink: 20 bytes leftover after parsing attributes in process `syz.2.12788'.
[  822.307948][T11029] netlink: 20 bytes leftover after parsing attributes in process `syz.2.12788'.
[  822.312944][T11029] netlink: 20 bytes leftover after parsing attributes in process `syz.2.12788'.
[  822.317147][T11029] netlink: 20 bytes leftover after parsing attributes in process `syz.2.12788'.
[  822.328430][T11029] netlink: 20 bytes leftover after parsing attributes in process `syz.2.12788'.
[  822.335185][T11029] netlink: 20 bytes leftover after parsing attributes in process `syz.2.12788'.
[  822.340707][T11029] netlink: 20 bytes leftover after parsing attributes in process `syz.2.12788'.
[  822.345831][T11029] netlink: 20 bytes leftover after parsing attributes in process `syz.2.12788'.
[  822.354726][T11029] netlink: 20 bytes leftover after parsing attributes in process `syz.2.12788'.
[  822.386637][T11039] Cannot find add_set index 2 as target
[  822.393294][T11034]  speed is unknown, defaulting to 1000
[  822.520749][T11042] netem: incorrect ge model size
[  822.525703][T11042] netem: change failed
[  822.630480][T11057] IPv6: NLM_F_CREATE should be specified when creating new route
[  822.641222][T11057] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  822.644295][T11057] IPv6: NLM_F_CREATE should be set when creating new route
[  822.647192][T11057] IPv6: NLM_F_CREATE should be set when creating new route
[  822.650213][T11057] IPv6: NLM_F_CREATE should be set when creating new route
[  822.697221][T11059] netlink: 'syz.0.12796': attribute type 1 has an invalid length.
[  822.706221][T11057] netlink: 'syz.2.12795': attribute type 10 has an invalid length.
[  822.727798][T11057] netlink: 'syz.2.12795': attribute type 10 has an invalid length.
[  822.752622][T11059] bond164: (slave bridge134): Enslaving as a backup interface with an up link
[  822.793408][T11064] Cannot find add_set index 2 as target
[  822.928297][T11068] netlink: 'syz.2.12799': attribute type 13 has an invalid length.
[  823.036789][T11082] Cannot find add_set index 2 as target
[  823.163972][T11091] x_tables: unsorted entry at hook 2
[  823.222414][T11095] bridge64: entered promiscuous mode
[  823.230841][T11095] bridge64: entered allmulticast mode
[  823.300773][T11098] block nbd5: Unsupported socket: should be TCP or UNIX.
[  823.356608][T11099] netlink: 'syz.0.12809': attribute type 1 has an invalid length.
[  823.640099][T11115] mac80211_hwsim hwsim6 syzkaller0: left promiscuous mode
[  823.646166][T11115] mac80211_hwsim hwsim6 syzkaller0: left allmulticast mode
[  823.797476][T11117] bridge57: the hash_elasticity option has been deprecated and is always 16
[  823.942216][T11126] sch_tbf: burst 255 is lower than device syzkaller0 mtu (313) !
[  824.020026][T11128] netlink: 'syz.1.12816': attribute type 1 has an invalid length.
[  824.041477][T11128] bond136: entered promiscuous mode
[  824.044087][T11128] 8021q: adding VLAN 0 to HW filter on device bond136
[  824.587102][T11144] mac80211_hwsim hwsim6 syzkaller0: entered promiscuous mode
[  824.589910][T11144] mac80211_hwsim hwsim6 syzkaller0: entered allmulticast mode
[  824.862595][T11158] netlink: 'syz.2.12823': attribute type 1 has an invalid length.
[  824.888432][T11158] bond151: entered promiscuous mode
[  824.891048][T11158] 8021q: adding VLAN 0 to HW filter on device bond151
[  824.950970][T11165] Cannot find add_set index 2 as target
[  825.053287][T11172] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  825.078273][T11169] veth67: entered allmulticast mode
[  825.096655][T11169] bond152: (slave veth67): Enslaving as an active interface with an up link
[  825.108964][T11169] bond152 (unregistering): (slave veth67): Releasing backup interface
[  825.117482][T11169] bond152 (unregistering): Released all slaves
[  825.132383][T11172] syzkaller0: mtu less than device minimum
[  825.204212][T11178] bond137: entered promiscuous mode
[  825.206717][T11178] 8021q: adding VLAN 0 to HW filter on device bond137
[  825.247639][T11178] 8021q: adding VLAN 0 to HW filter on device bond138
[  825.256003][T11178] bond138: entered promiscuous mode
[  825.258731][T11178] bond137: (slave bond138): Enslaving as an active interface with an up link
[  825.291462][T11185] netlink: 'syz.0.12831': attribute type 1 has an invalid length.
[  825.314369][T11185] bond165: entered promiscuous mode
[  825.316345][T11185] 8021q: adding VLAN 0 to HW filter on device bond165
[  825.516697][T11202]  speed is unknown, defaulting to 1000
[  825.810751][T11218] netlink: 'syz.2.12839': attribute type 1 has an invalid length.
[  825.844652][T11218] bond152: entered promiscuous mode
[  825.851445][T11218] 8021q: adding VLAN 0 to HW filter on device bond152
[  825.908772][T11221] netlink: 'syz.2.12840': attribute type 1 has an invalid length.
[  825.927795][T11221] bond153: entered promiscuous mode
[  825.931355][T11221] 8021q: adding VLAN 0 to HW filter on device bond153
[  826.110580][T11232] netlink: 'syz.2.12844': attribute type 4 has an invalid length.
[  826.137645][ T5666]  speed is unknown, defaulting to 1000
[  826.141131][T11232] netlink: 'syz.2.12844': attribute type 4 has an invalid length.
[  826.143914][ T5666] syz2: Port: 1 Link DOWN
[  826.148498][ T5666]  speed is unknown, defaulting to 1000
[  826.151080][ T5666] syz2: Port: 1 Link ACTIVE
[  826.818675][T11257] syzkaller1: entered promiscuous mode
[  826.826247][T11257] syzkaller1: entered allmulticast mode
[  826.970154][T11260] TCP: TCP_TX_DELAY enabled
[  827.171147][T11271]  speed is unknown, defaulting to 1000
[  827.436543][T11271] vlan9: entered promiscuous mode
[  827.853716][T11284] Cannot find del_set index 3 as target
[  828.090243][T11293] __nla_validate_parse: 46 callbacks suppressed
[  828.090263][T11293] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12862'.
[  828.095730][T11293] netlink: 24 bytes leftover after parsing attributes in process `syz.1.12862'.
[  828.281326][T11305] Cannot find del_set index 3 as target
[  828.457144][T11315] netlink: 'syz.0.12867': attribute type 10 has an invalid length.
[  828.460091][T11315] netlink: 228 bytes leftover after parsing attributes in process `syz.0.12867'.
[  828.572057][T11319] bond154: option all_slaves_active: invalid value (255)
[  828.668699][T11319] bond154 (unregistering): Released all slaves
[  828.695857][T11317] netlink: 'syz.1.12869': attribute type 1 has an invalid length.
[  828.715576][T11317] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12869'.
[  828.798448][T11327] netlink: 56 bytes leftover after parsing attributes in process `syz.2.12871'.
[  828.798668][T11328] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  828.805018][T11327] ip6tnl0: Caught tx_queue_len zero misconfig
[  828.808992][T11327] netlink: 'syz.2.12871': attribute type 1 has an invalid length.
[  829.107529][T11347]  speed is unknown, defaulting to 1000
[  829.274609][T11365] veth0: entered promiscuous mode
[  829.283949][T11350] veth0: left promiscuous mode
[  829.345404][T11367] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12880'.
[  829.456981][T11375] netlink: 'syz.2.12883': attribute type 11 has an invalid length.
[  829.577178][T11376] netlink: 'syz.1.12882': attribute type 1 has an invalid length.
[  829.674902][T11387] netlink: 32 bytes leftover after parsing attributes in process `syz.1.12885'.
[  829.686744][T11387] netlink: 32 bytes leftover after parsing attributes in process `syz.1.12885'.
[  829.693232][T11389] netlink: 'syz.2.12886': attribute type 1 has an invalid length.
[  829.698885][T11389] netlink: 28 bytes leftover after parsing attributes in process `syz.2.12886'.
[  829.950042][T11407] netlink: 36 bytes leftover after parsing attributes in process `syz.1.12891'.
[  830.278850][T11418] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  830.284570][T11418] netlink: 'syz.1.12895': attribute type 1 has an invalid length.
[  830.400003][T11424] netlink: 'syz.1.12895': attribute type 13 has an invalid length.
[  830.403128][T11424] netlink: 'syz.1.12895': attribute type 17 has an invalid length.
[  830.773415][T11418] tipc: Resetting bearer <eth:syzkaller0>
[  830.932754][T11424] veth0_macvtap: left promiscuous mode
[  830.936736][T11424] veth0_macvtap: entered promiscuous mode
[  830.949291][T11424] veth1_macvtap: entered promiscuous mode
[  830.966579][T11424] 8021q: adding VLAN 0 to HW filter on device bond1
[  830.975710][T11424] 8021q: adding VLAN 0 to HW filter on device bond2
[  830.990464][T11424] 8021q: adding VLAN 0 to HW filter on device bond3
[  830.999080][T11424] bond3: entered promiscuous mode
[  831.002058][T11424] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  831.027622][T11424] 8021q: adding VLAN 0 to HW filter on device bond4
[  831.042465][T11424] 8021q: adding VLAN 0 to HW filter on device bond5
[  831.048456][T11424] erspan0: entered promiscuous mode
[  831.064563][T11424] 8021q: adding VLAN 0 to HW filter on device bond6
[  831.072981][T11424] 8021q: adding VLAN 0 to HW filter on device bond7
[  831.080648][T11424] 8021q: adding VLAN 0 to HW filter on device bond8
[  831.087074][T11424] 8021q: adding VLAN 0 to HW filter on device bond9
[  831.102121][T11424] 8021q: adding VLAN 0 to HW filter on device batadv0
[  831.108199][T11424] A link change request failed with some changes committed already. Interface @ may have been left with an inconsistent configuration, please check.
[  831.144214][T11428] netlink: 'syz.2.12897': attribute type 1 has an invalid length.
[  831.176372][T10389] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  831.182544][T10389] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  831.186005][T10389] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 20000 - 0
[  831.189042][T10389] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  831.193691][T10389] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  831.196852][T10389] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 20000 - 0
[  831.221827][T10389] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  831.224915][T10389] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  831.228096][T10389] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 20000 - 0
[  831.250216][T11429] bond154: (slave bridge64): Enslaving as a backup interface with an up link
[  831.253071][T10389] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  831.255746][T10389] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  831.258071][T10389] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 20000 - 0
[  831.281434][T11433] bond154: (slave bridge65): Enslaving as a backup interface with a down link
[  831.528574][T11448] veth0: entered promiscuous mode
[  831.550397][T11448] bond0: entered promiscuous mode
[  831.665430][T11447] bond0: left promiscuous mode
[  831.669687][T11447] veth0: left promiscuous mode
[  831.722234][T11457] mac80211_hwsim hwsim5 syzkaller0: Caught tx_queue_len zero misconfig
[  832.253083][T11491] nbd: nbd64 already in use
[  832.494399][T11520] openvswitch: netlink: Unexpected mask (mask=20440, allowed=10048)
[  832.697141][T11546] team0: entered promiscuous mode
[  832.698824][T11546] team0: entered allmulticast mode
[  832.702168][T11546] 8021q: adding VLAN 0 to HW filter on device team0
[  833.052824][T11572] bond155: option ad_actor_sys_prio: mode dependency failed, not supported in mode broadcast(3)
[  833.071209][T11572] bond155 (unregistering): Released all slaves
[  833.389140][T11588] __nla_validate_parse: 13 callbacks suppressed
[  833.389159][T11588] netlink: 24 bytes leftover after parsing attributes in process `syz.0.12935'.
[  833.457965][T11590] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12936'.
[  833.500631][T11591] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12935'.
[  833.591573][T11593] netlink: 36 bytes leftover after parsing attributes in process `syz.2.12937'.
[  833.603858][T11593] netlink: 36 bytes leftover after parsing attributes in process `syz.2.12937'.
[  833.609886][T11593] netlink: 36 bytes leftover after parsing attributes in process `syz.2.12937'.
[  833.616468][T11593] netlink: 36 bytes leftover after parsing attributes in process `syz.2.12937'.
[  833.622487][T11593] netlink: 36 bytes leftover after parsing attributes in process `syz.2.12937'.
[  833.625503][T11593] netlink: 36 bytes leftover after parsing attributes in process `syz.2.12937'.
[  833.628191][T11593] netlink: 36 bytes leftover after parsing attributes in process `syz.2.12937'.
[  834.192960][T14020]  speed is unknown, defaulting to 1000
[  834.197115][T14020] syz2: Port: 1 Link DOWN
[  834.198624][T10389] netdevsim netdevsim2 eth0: unset [1, 1] type 2 family 0 port 20002 - 0
[  834.206458][T10389] netdevsim netdevsim2 eth1: unset [1, 1] type 2 family 0 port 20002 - 0
[  834.215484][T10389] netdevsim netdevsim2 eth2: unset [1, 1] type 2 family 0 port 20002 - 0
[  834.224715][T10389] netdevsim netdevsim2 eth3: unset [1, 1] type 2 family 0 port 20002 - 0
[  834.421845][T11609] bond166: option all_slaves_active: invalid value (255)
[  834.425172][T11609] bond166 (unregistering): Released all slaves
[  834.443477][T11614] validate_nla: 5 callbacks suppressed
[  834.443489][T11614] netlink: 'syz.2.12945': attribute type 1 has an invalid length.
[  834.483778][T11614] bond155: (slave bridge66): making interface the new active one
[  834.510298][T11614] bond155: (slave bridge66): Enslaving as an active interface with an up link
[  834.532673][T11614] macvlan9: entered promiscuous mode
[  834.536090][T11614] macvlan9: entered allmulticast mode
[  834.543347][T11614] bond155: entered promiscuous mode
[  834.549786][T11614] bridge66: entered promiscuous mode
[  834.555793][T11614] 8021q: adding VLAN 0 to HW filter on device macvlan9
[  834.560534][T11617] netlink: 'syz.1.12946': attribute type 1 has an invalid length.
[  834.561511][T11614] bond155: (slave macvlan9): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  834.569066][T11614] bond155: left promiscuous mode
[  834.572020][T11614] bridge66: left promiscuous mode
[  834.606812][T11617] 8021q: adding VLAN 0 to HW filter on device bond141
[  834.863728][T11629] bond111: left allmulticast mode
[  834.881147][T11644] bond142: option all_slaves_active: invalid value (255)
[  834.885639][T11644] bond142 (unregistering): Released all slaves
[  835.159827][T11649] bond142: entered promiscuous mode
[  835.162392][T11649] 8021q: adding VLAN 0 to HW filter on device bond142
[  835.172451][T11649] bond142 (unregistering): Released all slaves
[  835.442549][T11652] netlink: 'syz.2.12955': attribute type 11 has an invalid length.
[  835.552804][T11656] netem: change failed
[  835.570850][T11658] macvtap3: entered promiscuous mode
[  835.572621][T11658] erspan0: entered promiscuous mode
[  835.574496][T11658] macvtap3: entered allmulticast mode
[  835.576219][T11658] erspan0: entered allmulticast mode
[  835.593868][T11658] macvtap4: entered promiscuous mode
[  835.595817][T11658] macvtap4: entered allmulticast mode
[  836.250611][T11694] netlink: 'syz.1.12968': attribute type 11 has an invalid length.
[  836.298566][T11698] netlink: 'syz.1.12969': attribute type 1 has an invalid length.
[  836.338744][T11698] 8021q: adding VLAN 0 to HW filter on device bond142
[  836.644108][T11717] netlink: 'syz.2.12975': attribute type 1 has an invalid length.
[  836.685494][T11717] 8021q: adding VLAN 0 to HW filter on device bond156
[  836.714863][T11717] bond156: (slave veth69): Enslaving as an active interface with a down link
[  836.942401][T11743] ipvlan1: entered promiscuous mode
[  836.978369][T11746] netlink: 'syz.2.12985': attribute type 1 has an invalid length.
[  836.982957][T11746] netlink: 'syz.2.12985': attribute type 2 has an invalid length.
[  837.082290][T11751] bond0: entered promiscuous mode
[  837.085573][T11751] batadv_slave_0: entered promiscuous mode
[  837.089132][T11751] batadv_slave_0: left promiscuous mode
[  837.092409][T11751] bond0: left promiscuous mode
[  837.127180][T11749] netlink: 'syz.2.12986': attribute type 4 has an invalid length.
[  837.332025][T11765] bridge58: entered promiscuous mode
[  837.334194][T11765] bridge58: entered allmulticast mode
[  837.447684][T11778] netlink: 'syz.0.12995': attribute type 30 has an invalid length.
[  837.483953][T11759] bridge58: entered promiscuous mode
[  837.485949][T11759] bridge58: entered allmulticast mode
[  837.647771][T11789] pim6reg1: entered promiscuous mode
[  837.654418][T11789] pim6reg1: entered allmulticast mode
[  837.716039][T11794] bond0: entered promiscuous mode
[  837.720035][T11794] gretap0: entered promiscuous mode
[  837.723712][T11794] hsr0: Slave A (bond0) is not up; please bring it up to get a fully working HSR network
[  837.727514][T11794] hsr0: Slave B (gretap0) is not up; please bring it up to get a fully working HSR network
[  837.732506][T11794] hsr0: entered promiscuous mode
[  837.805638][T11802] sch_tbf: burst 255 is lower than device syzkaller0 mtu (313) !
[  837.894320][T11806] 8021q: adding VLAN 0 to HW filter on device bond144
[  837.930481][T11810]  speed is unknown, defaulting to 1000
[  838.000832][T11811] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  838.003352][T11812] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  838.079928][T11810] vlan9: entered promiscuous mode
[  838.279204][T11826]  speed is unknown, defaulting to 1000
[  838.610701][T11837] tipc: Resetting bearer <ib:ip6gre0>
[  838.795095][T11837] tipc: Resetting bearer <eth:syzkaller0>
[  838.943959][T11840] veth0_to_team: entered promiscuous mode
[  838.949248][T11840] 8021q: adding VLAN 0 to HW filter on device bond1
[  838.954010][T11840] erspan0: entered promiscuous mode
[  838.968388][T11840] 8021q: adding VLAN 0 to HW filter on device bond2
[  838.972703][T11840] 8021q: adding VLAN 0 to HW filter on device bond3
[  838.977950][T11840] veth1_macvtap: entered promiscuous mode
[  838.984540][T11840] 8021q: adding VLAN 0 to HW filter on device bond4
[  840.252318][T11840] 8021q: adding VLAN 0 to HW filter on device bond5
[  840.296062][T11840] 8021q: adding VLAN 0 to HW filter on device bond6
[  840.304842][T11840] 8021q: adding VLAN 0 to HW filter on device bond7
[  840.318600][T11840] 8021q: adding VLAN 0 to HW filter on device bond0
[  840.343052][T11840] 8021q: adding VLAN 0 to HW filter on device bond8
[  840.352174][T11840] 8021q: adding VLAN 0 to HW filter on device bond9
[  840.367840][T11840] 8021q: adding VLAN 0 to HW filter on device bond10
[  840.380086][T11840] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[  840.390475][T11840] 8021q: adding VLAN 0 to HW filter on device bond11
[  840.399955][T11840] 8021q: adding VLAN 0 to HW filter on device bond12
[  840.406726][T11840] 8021q: adding VLAN 0 to HW filter on device bond13
[  840.422924][T11840] 8021q: adding VLAN 0 to HW filter on device bond14
[  840.465768][T11840] 8021q: adding VLAN 0 to HW filter on device bond15
[  840.515263][T11840] 8021q: adding VLAN 0 to HW filter on device bond16
[  840.520616][T11840] 8021q: adding VLAN 0 to HW filter on device bond17
[  840.536637][T11840] 8021q: adding VLAN 0 to HW filter on device bond18
[  840.547788][T11840] 8021q: adding VLAN 0 to HW filter on device bond19
[  840.554336][T11840] 8021q: adding VLAN 0 to HW filter on device bond20
[  840.564637][T11840] 8021q: adding VLAN 0 to HW filter on device bond21
[  840.571140][T11840] 8021q: adding VLAN 0 to HW filter on device bond22
[  840.574150][T11840] 8021q: adding VLAN 0 to HW filter on device bond23
[  840.603536][T11840] 8021q: adding VLAN 0 to HW filter on device bond24
[  840.610997][T11840] 8021q: adding VLAN 0 to HW filter on device bond25
[  840.617627][T11840] A link change request failed with some changes committed already. Interface vxlan1 may have been left with an inconsistent configuration, please check.
[  840.655104][T11844] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  840.661235][T11846] tipc: Resetting bearer <eth:syzkaller0>
[  840.671476][T10386] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  840.678141][T10386] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 20000 - 0
[  840.685667][T10386] netdevsim netdevsim0 eth0: set [1, 2] type 2 family 0 port 20004 - 0
[  840.693535][T10386] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  840.699902][T10386] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 20000 - 0
[  840.703948][T10386] netdevsim netdevsim0 eth1: set [1, 2] type 2 family 0 port 20004 - 0
[  840.836506][T10386] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  840.845695][T10386] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 20000 - 0
[  840.849823][T10386] netdevsim netdevsim0 eth2: set [1, 2] type 2 family 0 port 20004 - 0
[  840.857503][T10386] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  840.863099][T10386] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 20000 - 0
[  840.871897][T10386] netdevsim netdevsim0 eth3: set [1, 2] type 2 family 0 port 20004 - 0
[  840.911833][T11852] __nla_validate_parse: 121 callbacks suppressed
[  840.911852][T11852] netlink: 148 bytes leftover after parsing attributes in process `syz.0.13013'.
[  840.917274][T15557] ip6_tunnel: ip6tnl6 xmit: Local address not yet configured!
[  840.926966][T11852] netlink: 40 bytes leftover after parsing attributes in process `syz.0.13013'.
[  840.927458][T11856] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  840.933248][T11856] IPv6: NLM_F_CREATE should be set when creating new route
[  840.935828][T11856] IPv6: NLM_F_CREATE should be set when creating new route
[  840.938695][T11856] IPv6: NLM_F_CREATE should be set when creating new route
[  840.954960][T11856] validate_nla: 6 callbacks suppressed
[  840.954981][T11856] netlink: 'syz.1.13014': attribute type 10 has an invalid length.
[  840.962875][T11856] netlink: 'syz.1.13014': attribute type 10 has an invalid length.
[  841.041898][T11858] pim6reg1: entered promiscuous mode
[  841.043580][T11858] pim6reg1: entered allmulticast mode
[  841.165552][T11864] netlink: 'syz.0.13017': attribute type 11 has an invalid length.
[  841.275272][T11868] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13019'.
[  841.285575][T11868] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13019'.
[  841.383686][T11877] netlink: 'syz.0.13022': attribute type 13 has an invalid length.
[  841.390121][T11877] netlink: 'syz.0.13022': attribute type 17 has an invalid length.
[  841.414238][T11881] bond157: option all_slaves_active: invalid value (255)
[  841.424693][T11881] bond157 (unregistering): Released all slaves
[  841.467477][T11886] netlink: 'syz.1.13024': attribute type 1 has an invalid length.
[  841.509953][T11887] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13022'.
[  841.517473][T11877] A link change request failed with some changes committed already. Interface vxlan1 may have been left with an inconsistent configuration, please check.
[  841.563931][T11890] bond145: (slave vxcan1): The slave device specified does not support setting the MAC address
[  841.571288][T11890] bond145: (slave vxcan1): Setting fail_over_mac to active for active-backup mode
[  841.592430][T11892] netlink: 'syz.2.13025': attribute type 1 has an invalid length.
[  841.598870][T11890] bond145: (slave vxcan1): making interface the new active one
[  841.610493][T11890] bond145: (slave vxcan1): Enslaving as an active interface with an up link
[  841.645944][T11892] bond157: entered promiscuous mode
[  841.648593][T11892] 8021q: adding VLAN 0 to HW filter on device bond157
[  841.664628][T11886] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13024'.
[  841.689329][T11896] 8021q: adding VLAN 0 to HW filter on device bond157
[  841.692329][T11896] bond157: (slave wireguard2): The slave device specified does not support setting the MAC address
[  841.695997][T11896] bond157: (slave wireguard2): Setting fail_over_mac to active for active-backup mode
[  841.708167][T11896] bond157: (slave wireguard2): making interface the new active one
[  841.711844][T11896] wireguard2: entered promiscuous mode
[  841.715221][T11896] bond157: (slave wireguard2): Enslaving as an active interface with an up link
[  841.723025][T11886] bond145 (unregistering): (slave vxcan1): Releasing backup interface
[  841.729230][T11886] bond145 (unregistering): Released all slaves
[  841.972728][T11913] netlink: 'syz.2.13031': attribute type 1 has an invalid length.
[  841.975216][T11913] netlink: 28 bytes leftover after parsing attributes in process `syz.2.13031'.
[  842.115091][T11917] bond158 (unregistering): Released all slaves
[  842.191091][T11921] netlink: 210640 bytes leftover after parsing attributes in process `syz.2.13033'.
[  842.222869][T11904] netlink: 12 bytes leftover after parsing attributes in process `syz.1.13029'.
[  842.230255][T11925] bond166: option lacp_rate: invalid value (128)
[  842.246490][T11925] bond166 (unregistering): Released all slaves
[  842.254400][T11928] netlink: 40 bytes leftover after parsing attributes in process `syz.0.13034'.
[  842.387911][T11936] netlink: 'syz.0.13037': attribute type 1 has an invalid length.
[  842.416431][T11936] 8021q: adding VLAN 0 to HW filter on device bond166
[  842.528753][T11936] veth57: entered promiscuous mode
[  842.540435][T11936] bond166: (slave veth57): Enslaving as an active interface with an up link
[  842.558570][T11942] netlink: 'syz.1.13039': attribute type 1 has an invalid length.
[  842.708443][T11954] bond167: entered promiscuous mode
[  842.710792][T11954] 8021q: adding VLAN 0 to HW filter on device bond167
[  842.785704][T11957] bond145: option all_slaves_active: invalid value (255)
[  842.790797][T11957] bond145 (unregistering): Released all slaves
[  842.817424][T11963] bond168: entered promiscuous mode
[  842.821422][T11963] 8021q: adding VLAN 0 to HW filter on device bond168
[  842.875537][T11963] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  843.038867][T11978] 8021q: adding VLAN 0 to HW filter on device bond145
[  844.664757][    C0] ip6_tunnel: ip6tnl6 xmit: Local address not yet configured!
[  845.203365][T11993] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[  845.206213][T11993] CPU: 0 UID: 0 PID: 11993 Comm: syz.1.13052 Not tainted syzkaller #0 PREEMPT(full) 
[  845.206231][T11993] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  845.206243][T11993] Call Trace:
[  845.206249][T11993]  <TASK>
[  845.206256][T11993]  dump_stack_lvl+0xe8/0x150
[  845.206312][T11993]  sysfs_warn_dup+0x8e/0xa0
[  845.206331][T11993]  sysfs_do_create_link_sd+0xc0/0x110
[  845.206350][T11993]  device_add_class_symlinks+0x1cf/0x240
[  845.206373][T11993]  device_add+0x475/0xbb0
[  845.206394][T11993]  wiphy_register+0x1dc5/0x2dc0
[  845.206433][T11993]  ? __pfx_wiphy_register+0x10/0x10
[  845.206457][T11993]  ? __pfx_netdev_run_todo+0x10/0x10
[  845.206482][T11993]  ? minstrel_ht_alloc+0x6e0/0x7e0
[  845.206511][T11993]  ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0
[  845.206537][T11993]  ieee80211_register_hw+0x3d82/0x4a70
[  845.206568][T11993]  ? ieee80211_register_hw+0x1911/0x4a70
[  845.206608][T11993]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  845.206633][T11993]  ? __asan_memset+0x22/0x50
[  845.206652][T11993]  ? __hrtimer_setup+0x1b7/0x260
[  845.206670][T11993]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  845.206695][T11993]  mac80211_hwsim_new_radio+0x3335/0x5aa0
[  845.206736][T11993]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  845.206775][T11993]  ? kstrndup+0xbf/0x160
[  845.206800][T11993]  hwsim_new_radio_nl+0xf6a/0x1c00
[  845.206839][T11993]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  845.206865][T11993]  ? rcu_is_watching+0x15/0xb0
[  845.206884][T11993]  ? trace_kmalloc+0x2a/0xf0
[  845.206910][T11993]  ? __nla_parse+0x40/0x60
[  845.206936][T11993]  ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0
[  845.206955][T11993]  ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0
[  845.206979][T11993]  genl_family_rcv_msg_doit+0x22a/0x330
[  845.207002][T11993]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  845.207030][T11993]  ? bpf_lsm_capable+0x9/0x20
[  845.207046][T11993]  ? security_capable+0x7e/0x2c0
[  845.207077][T11993]  genl_rcv_msg+0x61c/0x7a0
[  845.207098][T11993]  ? __pfx_genl_rcv_msg+0x10/0x10
[  845.207115][T11993]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  845.207145][T11993]  netlink_rcv_skb+0x232/0x4b0
[  845.207169][T11993]  ? __pfx_genl_rcv_msg+0x10/0x10
[  845.207187][T11993]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  845.207221][T11993]  ? down_read+0x270/0x2e0
[  845.207235][T11993]  ? genl_rcv+0xd/0x40
[  845.207250][T11993]  genl_rcv+0x28/0x40
[  845.207264][T11993]  netlink_unicast+0x75c/0x8e0
[  845.207324][T11993]  netlink_sendmsg+0x813/0xb40
[  845.207354][T11993]  ? __pfx_netlink_sendmsg+0x10/0x10
[  845.207378][T11993]  ? aa_sock_msg_perm+0xf1/0x1b0
[  845.207401][T11993]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  845.207424][T11993]  ____sys_sendmsg+0x972/0x9f0
[  845.207446][T11993]  ? __might_fault+0xaf/0x130
[  845.207471][T11993]  ? __pfx_____sys_sendmsg+0x10/0x10
[  845.207501][T11993]  ? import_iovec+0x73/0xa0
[  845.207528][T11993]  ___sys_sendmsg+0x2a5/0x360
[  845.207547][T11993]  ? __lock_acquire+0x6b5/0x2cf0
[  845.207569][T11993]  ? __pfx____sys_sendmsg+0x10/0x10
[  845.207591][T11993]  ? futex_wait+0x2a2/0x390
[  845.207630][T11993]  ? __fget_files+0x2a/0x420
[  845.207649][T11993]  ? __fget_files+0x3a0/0x420
[  845.207674][T11993]  __x64_sys_sendmsg+0x1bd/0x2a0
[  845.207697][T11993]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  845.207725][T11993]  ? rcu_is_watching+0x15/0xb0
[  845.207747][T11993]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  845.207761][T11993]  do_syscall_64+0x15f/0xf80
[  845.207781][T11993]  ? trace_irq_disable+0x3b/0x140
[  845.207809][T11993]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  845.207823][T11993] RIP: 0033:0x7ff2d839cdd9
[  845.207838][T11993] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  845.207850][T11993] RSP: 002b:00007ff2d926b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  845.207866][T11993] RAX: ffffffffffffffda RBX: 00007ff2d8616270 RCX: 00007ff2d839cdd9
[  845.207877][T11993] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000004
[  845.207887][T11993] RBP: 00007ff2d8432d69 R08: 0000000000000000 R09: 0000000000000000
[  845.207896][T11993] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  845.207906][T11993] R13: 00007ff2d8616308 R14: 00007ff2d8616270 R15: 00007ffdec43e988
[  845.207931][T11993]  </TASK>
[  845.420347][T11998]  speed is unknown, defaulting to 1000
[  845.925371][T12005] __nla_validate_parse: 53 callbacks suppressed
[  845.925391][T12005] netlink: 36 bytes leftover after parsing attributes in process `syz.1.13056'.
[  845.936320][T12005] netlink: 36 bytes leftover after parsing attributes in process `syz.1.13056'.
[  845.943061][T12005] netlink: 36 bytes leftover after parsing attributes in process `syz.1.13056'.
[  845.949531][T12005] netlink: 36 bytes leftover after parsing attributes in process `syz.1.13056'.
[  845.954908][T12005] netlink: 36 bytes leftover after parsing attributes in process `syz.1.13056'.
[  845.962341][T12005] netlink: 36 bytes leftover after parsing attributes in process `syz.1.13056'.
[  845.971134][T12005] netlink: 36 bytes leftover after parsing attributes in process `syz.1.13056'.
[  845.977197][T12005] netlink: 36 bytes leftover after parsing attributes in process `syz.1.13056'.
[  845.985552][T12005] netlink: 36 bytes leftover after parsing attributes in process `syz.1.13056'.
[  845.991750][T12005] netlink: 36 bytes leftover after parsing attributes in process `syz.1.13056'.
[  846.072759][T12022] bond158: option primary_reselect: invalid value (133)
[  846.081307][T12022] bond158 (unregistering): Released all slaves
[  846.161354][T12032] validate_nla: 4 callbacks suppressed
[  846.161366][T12032] netlink: 'syz.1.13062': attribute type 1 has an invalid length.
[  846.194482][T12032] 8021q: adding VLAN 0 to HW filter on device bond146
[  846.211531][T12032] tipc: Resetting bearer <ib:geneve0>
[  846.361946][T12032] tipc: Resetting bearer <eth:syzkaller0>
[  846.364884][T12032] tipc: Resetting bearer <eth:syzkaller0>
[  846.401914][T12040] netlink: 'syz.0.13064': attribute type 1 has an invalid length.
[  846.525241][T12053]  speed is unknown, defaulting to 1000
[  846.729275][T12069] netlink: 'syz.1.13071': attribute type 58 has an invalid length.
[  846.835198][T12074] openvswitch: netlink: Duplicate key (type 3).
[  846.962029][T12076] netlink: 'syz.0.13074': attribute type 13 has an invalid length.
[  846.964876][T12076] netlink: 'syz.0.13074': attribute type 17 has an invalid length.
[  846.985208][T12076] gretap0: refused to change device tx_queue_len
[  846.987808][T12076] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  847.297801][T12098]  speed is unknown, defaulting to 1000
[  847.397610][T12108] netlink: 'syz.0.13083': attribute type 13 has an invalid length.
[  847.414235][T12108] netlink: 'syz.0.13083': attribute type 17 has an invalid length.
[  847.537278][T12107] tipc: Resetting bearer <ib:ip6gre0>
[  848.153502][T12121] netlink: 'syz.1.13087': attribute type 21 has an invalid length.
[  848.486405][T12107] tipc: Resetting bearer <eth:syzkaller0>
[  848.524427][T12110] workqueue: Failed to create a rescuer kthread for wq "bond158": -EINTR
[  848.546489][T12118] 8021q: adding VLAN 0 to HW filter on device `
[  848.552847][T14020] syz0: Port: 1 Link DOWN
[  848.554344][T15557] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  848.559634][T15557] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  848.566148][T15557] netdevsim netdevsim0 eth0: unset [1, 1] type 2 family 0 port 20000 - 0
[  848.571639][T15557] netdevsim netdevsim0 eth0: unset [1, 2] type 2 family 0 port 20004 - 0
[  848.666826][ T5074]  speed is unknown, defaulting to 1000
[  848.668976][   T12] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  848.675557][   T12] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  848.678203][   T12] netdevsim netdevsim0 eth1: unset [1, 1] type 2 family 0 port 20000 - 0
[  848.683102][ T5074] syz2: Port: 1 Link ACTIVE
[  848.685485][   T12] netdevsim netdevsim0 eth1: unset [1, 2] type 2 family 0 port 20004 - 0
[  848.688820][   T12] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  848.697438][   T12] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  848.701175][   T12] netdevsim netdevsim0 eth2: unset [1, 1] type 2 family 0 port 20000 - 0
[  848.704407][   T12] netdevsim netdevsim0 eth2: unset [1, 2] type 2 family 0 port 20004 - 0
[  848.715648][   T12] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  848.727041][   T12] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  848.731079][   T12] netdevsim netdevsim0 eth3: unset [1, 1] type 2 family 0 port 20000 - 0
[  848.740930][   T12] netdevsim netdevsim0 eth3: unset [1, 2] type 2 family 0 port 20004 - 0
[  848.976048][T12152] syzkaller1: entered promiscuous mode
[  848.981497][T12152] syzkaller1: entered allmulticast mode
[  849.010043][T12156] Cannot find add_set index 2 as target
[  849.075657][T12161] netlink: 'syz.0.13096': attribute type 1 has an invalid length.
[  849.126308][T12161] bond169: entered promiscuous mode
[  849.131683][T12161] 8021q: adding VLAN 0 to HW filter on device bond169
[  849.213069][T12175] netlink: 'syz.0.13099': attribute type 58 has an invalid length.
[  849.341265][T12179] xfrm3: entered promiscuous mode
[  849.343382][T12179] xfrm3: entered allmulticast mode
[  849.380534][T12181] : renamed from veth0_to_bond
[  849.512653][T12190] x_tables: ip6_tables: icmp6 match: only valid for protocol 58
[  849.516065][T12187]  speed is unknown, defaulting to 1000
[  849.827477][T12196] bond164: (slave bridge134): Releasing backup interface
[  849.836042][T12196] bond166: (slave veth57): Releasing backup interface
[  849.864015][T12199] vlan20: entered promiscuous mode
[  849.891342][T12199] geneve1: entered promiscuous mode
[  849.896874][T12199] vlan20: entered allmulticast mode
[  849.902379][T12199] geneve1: entered allmulticast mode
[  849.911012][T12201] sch_tbf: burst 255 is lower than device syzkaller0 mtu (313) !
[  850.008443][T12210] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  850.430530][T12223] syzkaller1: entered promiscuous mode
[  850.433869][T12223] syzkaller1: entered allmulticast mode
[  850.693349][T12231] bridge_slave_1: invalid flags given to default FDB implementation
[  850.944578][T12239] __nla_validate_parse: 47 callbacks suppressed
[  850.944599][T12239] netlink: 16 bytes leftover after parsing attributes in process `syz.1.13118'.
[  851.365169][T12255] validate_nla: 1 callbacks suppressed
[  851.365182][T12255] netlink: 'syz.1.13125': attribute type 1 has an invalid length.
[  851.493448][T12255] bond147: (slave bridge58): making interface the new active one
[  851.513581][T12255] bond147: (slave bridge58): Enslaving as an active interface with an up link
[  851.541445][T12255] netlink: 44 bytes leftover after parsing attributes in process `syz.1.13125'.
[  851.595290][T12255] bond147: entered promiscuous mode
[  851.602330][T12255] bridge58: entered promiscuous mode
[  851.613285][T12255] bond147: entered allmulticast mode
[  851.620438][T12255] bridge58: entered allmulticast mode
[  851.627920][T12255] 8021q: adding VLAN 0 to HW filter on device bond147
[  851.741284][T12265] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13128'.
[  851.748096][T12265] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13128'.
[  851.823810][T12268] netlink: 'syz.0.13130': attribute type 1 has an invalid length.
[  851.829221][T12269] Cannot find del_set index 3 as target
[  851.840211][T12268] 8021q: adding VLAN 0 to HW filter on device bond170
[  851.888381][T12272] netlink: 1 bytes leftover after parsing attributes in process `syz.0.13131'.
[  851.918460][T12274] netlink: 16 bytes leftover after parsing attributes in process `syz.1.13132'.
[  851.936482][T12276] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13133'.
[  852.143199][T12285] netlink: 14 bytes leftover after parsing attributes in process `syz.0.13136'.
[  852.313261][T12294] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  852.323667][T12294] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  852.333197][T12294] netdevsim netdevsim1 eth3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  852.403677][T12294] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  852.407108][T12294] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  852.410200][T12294] netdevsim netdevsim1 eth2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  852.448862][T12294] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  852.454592][T12294] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  852.469715][T12294] netdevsim netdevsim1 eth1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  852.475468][T12300] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13140'.
[  852.508838][T12294] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  852.515782][T12294] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  852.521518][T12294] netdevsim netdevsim1 eth0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  852.657792][T10386] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  852.663712][T10386] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 20000 - 0
[  852.666873][T10386] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 6081 - 0
[  852.670712][T10385] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  852.679340][T10385] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 20000 - 0
[  852.689962][T10385] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 6081 - 0
[  852.705903][T10385] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  852.708361][T10385] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 20000 - 0
[  852.712499][T10385] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 6081 - 0
[  852.734615][T10385] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  852.742201][T10385] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 20000 - 0
[  852.747618][T10385] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 6081 - 0
[  852.753986][T12307] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13141'.
[  852.991755][T12322] netlink: 'syz.1.13144': attribute type 1 has an invalid length.
[  853.030711][T12322] bond148: entered promiscuous mode
[  853.040061][T12322] 8021q: adding VLAN 0 to HW filter on device bond148
[  853.071147][T12322] 8021q: adding VLAN 0 to HW filter on device bond148
[  853.080034][T12322] bond148: (slave wireguard7): The slave device specified does not support setting the MAC address
[  853.084140][T12322] bond148: (slave wireguard7): Setting fail_over_mac to active for active-backup mode
[  853.097353][T12322] bond148: (slave wireguard7): making interface the new active one
[  853.101157][T12322] wireguard7: entered promiscuous mode
[  853.105024][T12322] bond148: (slave wireguard7): Enslaving as an active interface with an up link
[  853.529163][T12363] netlink: 'syz.0.13155': attribute type 12 has an invalid length.
[  853.600310][T12370] netlink: 'syz.0.13155': attribute type 39 has an invalid length.
[  853.782015][ T5611] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  853.914981][T12385] bond171: option all_slaves_active: invalid value (255)
[  853.918542][T12385] bond171 (unregistering): Released all slaves
[  854.100747][T12393] netlink: 'syz.2.13163': attribute type 11 has an invalid length.
[  854.137103][T12394] xt_nfacct: accounting object `syz0' does not exist
[  854.339260][T12409] netlink: 'syz.1.13167': attribute type 4 has an invalid length.
[  854.817036][T12435] mac80211_hwsim hwsim102 syzkaller0: left promiscuous mode
[  854.832065][T12435] mac80211_hwsim hwsim102 syzkaller0: left allmulticast mode
[  854.835605][T12435] tipc: Resetting bearer <eth:syzkaller0>
[  854.889317][T12445] netlink: 'syz.1.13171': attribute type 1 has an invalid length.
[  854.925710][T12445] bond149: entered promiscuous mode
[  854.927687][T12445] 8021q: adding VLAN 0 to HW filter on device bond149
[  854.974585][T12445] bond149: (slave veth61): making interface the new active one
[  854.978442][T12445] veth61: entered promiscuous mode
[  854.983826][T12445] bond149: (slave veth61): Enslaving as an active interface with an up link
[  855.056292][T12463] netlink: 'syz.1.13176': attribute type 32 has an invalid length.
[  855.059306][T12462] xt_hashlimit: size too large, truncated to 1048576
[  855.126563][T12463] bond150: Setting coupled_control to off (0)
[  855.136834][T12459] netlink: 'syz.0.13177': attribute type 1 has an invalid length.
[  856.071492][T12530] bridge_slave_1: invalid flags given to default FDB implementation
[  856.133228][T12541] __nla_validate_parse: 16 callbacks suppressed
[  856.133241][T12541] netlink: 32 bytes leftover after parsing attributes in process `syz.2.13192'.
[  856.158038][T12541] bridge67: the hash_elasticity option has been deprecated and is always 16
[  856.168739][T12536] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13193'.
[  856.221462][T12545] netlink: 28 bytes leftover after parsing attributes in process `syz.2.13194'.
[  856.351414][T12550] bond158: entered promiscuous mode
[  856.353940][T12550] 8021q: adding VLAN 0 to HW filter on device bond158
[  856.357977][T12549] tipc: Resetting bearer <eth:syzkaller0>
[  856.403938][T12554] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13193'.
[  857.055947][T12549] tipc: Resetting bearer <eth:syzkaller0>
[  857.514834][T12573] xt_hashlimit: size too large, truncated to 1048576
[  858.727317][T12616] validate_nla: 5 callbacks suppressed
[  858.727335][T12616] netlink: 'syz.2.13198': attribute type 1 has an invalid length.
[  858.756583][T12616] 8021q: adding VLAN 0 to HW filter on device bond159
[  858.764620][T12616] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13198'.
[  858.786863][T12616] bond159 (unregistering): Released all slaves
[  858.925672][T12524] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  858.933813][T12574] netlink: 'syz.1.13197': attribute type 1 has an invalid length.
[  858.936584][T12574] netlink: 224 bytes leftover after parsing attributes in process `syz.1.13197'.
[  859.132437][T12627] bond171: option all_slaves_active: invalid value (255)
[  859.136974][T12627] bond171 (unregistering): Released all slaves
[  859.208293][T12639] Cannot find del_set index 3 as target
[  859.317699][T12643] netlink: 28 bytes leftover after parsing attributes in process `syz.1.13206'.
[  859.484355][T12663] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13210'.
[  859.490381][T12663] netlink: 'syz.2.13210': attribute type 14 has an invalid length.
[  859.494778][T12663] netlink: 'syz.2.13210': attribute type 11 has an invalid length.
[  859.506326][T12664] syzkaller1: entered promiscuous mode
[  859.514283][T12664] syzkaller1: entered allmulticast mode
[  859.617750][T12669] Cannot find add_set index 2 as target
[  859.744043][T12679] bond0: Caught tx_queue_len zero misconfig
[  859.857950][T12687] RDS: rds_bind could not find a transport for ::ffff:172.20.20.54, load rds_tcp or rds_rdma?
[  860.378791][T12677] erspan0: left allmulticast mode
[  860.416126][T15842]  speed is unknown, defaulting to 1000
[  860.419146][T15842] syz2: Port: 1 Link DOWN
[  860.492900][   T12] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  860.502208][   T12] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  860.508929][   T12] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  860.520512][   T12] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  860.538204][T12699] ip6gretap0: entered allmulticast mode
[  860.544518][   T12] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  860.551915][   T12] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  860.566913][   T12] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  860.573157][   T12] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  860.694139][T12710] bond152: option all_slaves_active: invalid value (255)
[  860.698366][T12710] bond152 (unregistering): Released all slaves
[  860.725723][T12714] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13221'.
[  860.841615][T12721] Cannot find del_set index 3 as target
[  861.151143][T12730] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13229'.
[  861.168483][T12730] 8021q: adding VLAN 0 to HW filter on device bond152
[  861.208334][T12741] netlink: 'syz.0.13231': attribute type 1 has an invalid length.
[  861.226975][T12741] netlink: 'syz.0.13231': attribute type 2 has an invalid length.
[  861.272914][T12744] netlink: 'syz.1.13232': attribute type 10 has an invalid length.
[  861.281188][T12741] bond171: option packets_per_slave: mode dependency failed, not supported in mode balance-alb(6)
[  861.289126][T12741] bond171 (unregistering): Released all slaves
[  861.435635][T12749] netlink: 'syz.2.13233': attribute type 10 has an invalid length.
[  861.445775][T12749] netlink: 41 bytes leftover after parsing attributes in process `syz.2.13233'.
[  861.459570][T12749] netlink: 140 bytes leftover after parsing attributes in process `syz.2.13233'.
[  861.558756][T12762] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13235'.
[  861.621929][T12769] netlink: 104 bytes leftover after parsing attributes in process `syz.2.13236'.
[  861.666166][T12757] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13234'.
[  861.721428][T12771] netlink: 'syz.1.13237': attribute type 29 has an invalid length.
[  861.783640][T12774] netlink: 24 bytes leftover after parsing attributes in process `syz.1.13237'.
[  861.803381][T12774] bond153: entered promiscuous mode
[  861.805346][T12774] 8021q: adding VLAN 0 to HW filter on device bond153
[  861.812512][T12771] netlink: zone id is out of range
[  861.814702][T12771] netlink: zone id is out of range
[  861.816800][T12771] netlink: zone id is out of range
[  861.818861][T12771] netlink: zone id is out of range
[  861.821227][T12771] netlink: zone id is out of range
[  861.823269][T12771] netlink: zone id is out of range
[  861.825416][T12771] netlink: zone id is out of range
[  861.830030][T12771] netlink: zone id is out of range
[  861.832045][T12771] netlink: zone id is out of range
[  861.833989][T12771] netlink: zone id is out of range
[  861.978895][T12782] netlink: 'syz.0.13239': attribute type 12 has an invalid length.
[  861.981788][T12782] netlink: 132 bytes leftover after parsing attributes in process `syz.0.13239'.
[  862.171415][T12790] netlink: 180 bytes leftover after parsing attributes in process `syz.1.13242'.
[  862.180439][T12790] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13242'.
[  862.286760][T12794] bond154: option primary_reselect: invalid value (133)
[  862.300841][T12794] bond154 (unregistering): Released all slaves
[  862.615726][T12811] bridge_slave_1: invalid flags given to default FDB implementation
[  863.126627][T12847] bond0: Device is already in use.
[  863.240389][T12850] x_tables: ip_tables: owner match: used from hooks PREROUTING, but only valid from OUTPUT/POSTROUTING
[  863.267818][T12850] macsec3: entered promiscuous mode
[  863.269663][T12850] macsec3: entered allmulticast mode
[  863.271252][T12850] veth1_macvtap: entered allmulticast mode
[  863.273860][T12850] veth1_macvtap: left allmulticast mode
[  863.569274][T12873] bond171: option ad_actor_sys_prio: mode dependency failed, not supported in mode broadcast(3)
[  863.575078][T12873] bond171 (unregistering): Released all slaves
[  863.696362][T12888] 8021q: adding VLAN 0 to HW filter on device bond159
[  863.720760][T12889] vlan13: entered promiscuous mode
[  863.722585][T12889] bond159: entered promiscuous mode
[  863.724518][T12889] vlan13: entered allmulticast mode
[  863.726876][T12889] bond159: entered allmulticast mode
[  863.768727][T12899] bond171: entered promiscuous mode
[  863.770983][T12899] 8021q: adding VLAN 0 to HW filter on device bond171
[  863.825891][T12905] xt_nfacct: accounting object `syz0' does not exist
[  863.835527][T12906] bond153: entered allmulticast mode
[  864.335518][T12868] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  864.481156][T12936] syzkaller1: entered promiscuous mode
[  864.482925][T12936] syzkaller1: entered allmulticast mode
[  864.596086][T12941] bridge_slave_1: invalid flags given to default FDB implementation
[  864.694777][T12948] validate_nla: 8 callbacks suppressed
[  864.694797][T12948] netlink: 'syz.1.13285': attribute type 4 has an invalid length.
[  864.778227][T12952] netlink: 'syz.2.13287': attribute type 1 has an invalid length.
[  864.823543][T12952] 8021q: adding VLAN 0 to HW filter on device bond160
[  864.886009][T12950] bond160: (slave veth71): Enslaving as an active interface with a down link
[  865.064560][T12966] bridge61: entered promiscuous mode
[  865.066298][T12966] bridge61: entered allmulticast mode
[  865.100419][T12969]  speed is unknown, defaulting to 1000
[  865.628685][T13000] xt_CT: No such helper "syz0"
[  866.217528][T13031] bond154: option all_slaves_active: invalid value (255)
[  866.221809][T13031] bond154 (unregistering): Released all slaves
[  866.270112][T13035] __nla_validate_parse: 15 callbacks suppressed
[  866.270133][T13035] netlink: 48 bytes leftover after parsing attributes in process `syz.0.13303'.
[  866.276557][T13035] netlink: 'syz.0.13303': attribute type 1 has an invalid length.
[  866.336144][T13037] netlink: 12 bytes leftover after parsing attributes in process `syz.0.13304'.
[  866.362086][T13037] netlink: 44 bytes leftover after parsing attributes in process `syz.0.13304'.
[  866.480718][T13046] bridge_slave_1: invalid flags given to default FDB implementation
[  866.658626][T13062] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13312'.
[  866.729999][T13059] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13313'.
[  866.732933][T13059] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13313'.
[  866.744392][T13067] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13314'.
[  866.755729][T13067] netlink: 'syz.0.13314': attribute type 11 has an invalid length.
[  866.765684][T13067] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13314'.
[  866.772474][T13067] netlink: 'syz.0.13314': attribute type 11 has an invalid length.
[  866.853317][T13074] bridge_slave_1: invalid flags given to default FDB implementation
[  866.900755][T13075] tipc: Resetting bearer <eth:syzkaller0>
[  866.935079][T13077] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  866.951946][T13075] bond172: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0)
[  866.956300][T13075] bond172 (unregistering): Released all slaves
[  867.008967][T13080] netlink: 'syz.1.13318': attribute type 27 has an invalid length.
[  867.698369][T13085] netlink: 52 bytes leftover after parsing attributes in process `syz.0.13319'.
[  868.108827][T13094] bond155: peer notification delay (9) is not a multiple of miimon (100), value rounded to 0 ms
[  868.572462][T13100] netlink: 20 bytes leftover after parsing attributes in process `syz.0.13322'.
[  868.750885][T13104] bridge137: entered promiscuous mode
[  868.753241][T13104] bridge137: entered allmulticast mode
[  884.054911][T13125] __nla_validate_parse: 4 callbacks suppressed
[  884.054923][T13125] netlink: 16 bytes leftover after parsing attributes in process `syz.0.13326'.
[  884.089075][T13138] net_ratelimit: 339 callbacks suppressed
[  884.089088][T13138] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  884.317064][T13159] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13334'.
[  884.364076][T13162] netlink: 14 bytes leftover after parsing attributes in process `syz.1.13335'.
[  884.443350][T13170] netlink: 'syz.1.13338': attribute type 30 has an invalid length.
[  884.445989][T13170] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13338'.
[  884.454460][T13167] netlink: 52 bytes leftover after parsing attributes in process `syz.0.13337'.
[  884.493489][T13172] netlink: 24 bytes leftover after parsing attributes in process `syz.1.13339'.
[  884.503684][T13172] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13339'.
[  884.705785][T13185] netlink: 'syz.0.13342': attribute type 1 has an invalid length.
[  884.747537][T13185] bond172: (slave bridge137): making interface the new active one
[  884.751816][T13185] bond172: (slave bridge137): Enslaving as an active interface with an up link
[  884.768666][T13190] bridge68: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms)
[  884.791340][T13190] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13344'.
[  884.794308][T13190] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13344'.
[  884.798899][T13185] netlink: 44 bytes leftover after parsing attributes in process `syz.0.13342'.
[  884.811368][T13185] bond172: entered promiscuous mode
[  884.820514][T13185] bridge137: entered promiscuous mode
[  884.825542][T13185] bond172: entered allmulticast mode
[  884.832496][T13185] bridge137: entered allmulticast mode
[  884.837244][T13185] 8021q: adding VLAN 0 to HW filter on device bond172
[  885.066218][T13215] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  885.217434][T13220] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  885.229787][T13222] mac80211_hwsim hwsim102 syzkaller0: entered promiscuous mode
[  885.236574][T13222] mac80211_hwsim hwsim102 syzkaller0: entered allmulticast mode
[  885.248541][T13222] tipc: Resetting bearer <eth:syzkaller0>
[  885.257964][T13222] netlink: 'syz.1.13355': attribute type 1 has an invalid length.
[  885.281165][T13227] 8021q: VLANs not supported on sit0
[  885.346915][T13231] netlink: 'syz.2.13358': attribute type 1 has an invalid length.
[  885.365566][T13231] bond161: entered promiscuous mode
[  885.368045][T13231] 8021q: adding VLAN 0 to HW filter on device bond161
[  885.888365][T13240] Cannot find add_set index 2 as target
[  888.528438][T13250] netlink: 'syz.1.13362': attribute type 4 has an invalid length.
[  888.678959][T13263] Cannot find add_set index 2 as target
[  888.795275][T13271] mac80211_hwsim hwsim5 syzkaller0: left promiscuous mode
[  888.798077][T13271] mac80211_hwsim hwsim5 syzkaller0: left allmulticast mode
[  889.102646][T13293] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  889.105444][T13294] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  889.158319][T13296] Cannot find add_set index 2 as target
[  889.215225][T13300] __nla_validate_parse: 5 callbacks suppressed
[  889.215237][T13300] netlink: 40 bytes leftover after parsing attributes in process `syz.0.13376'.
[  889.275330][T13302] bond173: option all_slaves_active: invalid value (255)
[  889.281794][T13302] bond173 (unregistering): Released all slaves
[  889.387481][T13305] pimreg: entered allmulticast mode
[  889.392287][T13305] pimreg: left allmulticast mode
[  889.493103][T13307] netlink: 'syz.0.13379': attribute type 13 has an invalid length.
[  889.495637][T13307] netlink: 'syz.0.13379': attribute type 17 has an invalid length.
[  889.522930][T13307] erspan0: left promiscuous mode
[  889.545599][T13307] veth0_to_team: left promiscuous mode
[  889.554844][T13307] veth1_macvtap: left promiscuous mode
[  889.569179][T13307] veth0_to_team: entered promiscuous mode
[  889.573876][T13307] 8021q: adding VLAN 0 to HW filter on device bond1
[  889.578065][T13307] erspan0: entered promiscuous mode
[  889.590389][T13307] 8021q: adding VLAN 0 to HW filter on device bond2
[  889.593820][T13307] 8021q: adding VLAN 0 to HW filter on device bond3
[  889.598103][T13307] veth1_macvtap: entered promiscuous mode
[  889.605720][T13307] 8021q: adding VLAN 0 to HW filter on device bond4
[  889.612963][T13307] 8021q: adding VLAN 0 to HW filter on device bond5
[  889.627525][T13307] 8021q: adding VLAN 0 to HW filter on device bond6
[  889.631716][T13307] 8021q: adding VLAN 0 to HW filter on device bond7
[  889.638135][T13307] 8021q: adding VLAN 0 to HW filter on device bond0
[  889.648146][T13307] 8021q: adding VLAN 0 to HW filter on device bond8
[  889.656694][T13307] 8021q: adding VLAN 0 to HW filter on device bond9
[  889.661375][T13316] netlink: 40 bytes leftover after parsing attributes in process `syz.2.13381'.
[  889.668254][T13307] 8021q: adding VLAN 0 to HW filter on device bond10
[  889.675888][T13307] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[  889.679868][T13307] 8021q: adding VLAN 0 to HW filter on device bond11
[  889.682640][T13307] 8021q: adding VLAN 0 to HW filter on device bond12
[  889.685532][T13307] 8021q: adding VLAN 0 to HW filter on device bond13
[  889.690835][T13307] 8021q: adding VLAN 0 to HW filter on device bond14
[  889.698055][T13307] 8021q: adding VLAN 0 to HW filter on device bond15
[  889.709939][T13307] 8021q: adding VLAN 0 to HW filter on device bond16
[  889.712852][T13307] 8021q: adding VLAN 0 to HW filter on device bond17
[  889.715463][T13307] 8021q: adding VLAN 0 to HW filter on device bond18
[  889.718286][T13307] 8021q: adding VLAN 0 to HW filter on device bond19
[  889.723058][T13307] 8021q: adding VLAN 0 to HW filter on device bond20
[  889.728162][T13307] 8021q: adding VLAN 0 to HW filter on device bond21
[  889.734965][T13307] 8021q: adding VLAN 0 to HW filter on device bond22
[  889.737814][T13307] 8021q: adding VLAN 0 to HW filter on device bond23
[  889.744888][T13307] 8021q: adding VLAN 0 to HW filter on device bond24
[  889.749074][T13307] 8021q: adding VLAN 0 to HW filter on device bond25
[  889.755816][T13307] A link change request failed with some changes committed already. Interface vxlan1 may have been left with an inconsistent configuration, please check.
[  889.788168][T10386] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  889.799573][T10386] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  889.802323][T10386] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 20000 - 0
[  889.804984][T10386] netdevsim netdevsim0 eth0: set [1, 2] type 2 family 0 port 20004 - 0
[  889.807702][T10386] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  889.810808][T10386] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  889.816508][T10386] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 20000 - 0
[  889.820234][T10386] netdevsim netdevsim0 eth1: set [1, 2] type 2 family 0 port 20004 - 0
[  889.826130][  T877] syz0: Port: 1 Link ACTIVE
[  889.834340][T10386] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  889.844854][T10386] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  889.852921][T10386] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 20000 - 0
[  889.861062][T10386] netdevsim netdevsim0 eth2: set [1, 2] type 2 family 0 port 20004 - 0
[  889.864172][T10386] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  889.866600][T10386] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  889.872681][T10386] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 20000 - 0
[  889.876804][T10386] netdevsim netdevsim0 eth3: set [1, 2] type 2 family 0 port 20004 - 0
[  889.886475][T13320] netlink: 'syz.0.13382': attribute type 1 has an invalid length.
[  889.968367][T10389] ip6_tunnel: ip6tnl6 xmit: Local address not yet configured!
[  889.972253][T13320] netlink: 28 bytes leftover after parsing attributes in process `syz.0.13382'.
[  890.105505][T13339] netlink: 12 bytes leftover after parsing attributes in process `syz.2.13388'.
[  890.124073][T13339] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13388'.
[  890.926778][T13348] bond156: option all_slaves_active: invalid value (255)
[  890.931821][T13348] bond156 (unregistering): Released all slaves
[  891.061199][T13357] netlink: 12 bytes leftover after parsing attributes in process `syz.0.13393'.
[  891.092815][T13363] netlink: 'syz.1.13392': attribute type 11 has an invalid length.
[  891.095369][T13363] netlink: 140 bytes leftover after parsing attributes in process `syz.1.13392'.
[  891.102117][T13363] netlink: 'syz.1.13392': attribute type 1 has an invalid length.
[  891.128148][T13363] 8021q: adding VLAN 0 to HW filter on device bond156
[  891.143010][T13363] netlink: 36 bytes leftover after parsing attributes in process `syz.1.13392'.
[  891.181579][T13363] bond156 (unregistering): Released all slaves
[  891.216090][T13368] netlink: 16 bytes leftover after parsing attributes in process `syz.0.13395'.
[  891.222107][T13368] netlink: 16 bytes leftover after parsing attributes in process `syz.0.13395'.
[  891.333500][T13379] netlink: 'syz.2.13397': attribute type 18 has an invalid length.
[  891.353345][T13378] workqueue: Failed to create a rescuer kthread for wq "bond156": -EINTR
[  891.406208][T13386] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  891.471046][T13388] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  891.544249][T13390]  speed is unknown, defaulting to 1000
[  892.227961][T13419] netlink: 'syz.2.13410': attribute type 1 has an invalid length.
[  892.255049][T13419] 8021q: adding VLAN 0 to HW filter on device bond162
[  893.094921][T13427] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode
[  893.097854][T13427] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode
[  893.793190][T13447]  speed is unknown, defaulting to 1000
[  893.949730][    C1] ip6_tunnel: ip6tnl6 xmit: Local address not yet configured!
[  893.982553][T13461] bond163: option lacp_active: mode dependency failed, not supported in mode balance-alb(6)
[  893.990650][T13461] bond163 (unregistering): Released all slaves
[  894.111750][T13469] Cannot find del_set index 8192 as target
[  894.125890][T13473] netlink: 'syz.1.13424': attribute type 1 has an invalid length.
[  894.163303][T13473] bond156: entered promiscuous mode
[  894.165775][T13473] 8021q: adding VLAN 0 to HW filter on device bond156
[  894.175479][T13473] netlink: 'syz.1.13424': attribute type 6 has an invalid length.
[  894.178528][T13473] netlink: 'syz.1.13424': attribute type 5 has an invalid length.
[  894.207170][T13473] bond156: (slave bridge63): making interface the new active one
[  894.210000][T13473] bridge63: entered promiscuous mode
[  894.213487][T13473] bond156: (slave bridge63): Enslaving as an active interface with an up link
[  894.359285][T13496] __nla_validate_parse: 15 callbacks suppressed
[  894.359302][T13496] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13427'.
[  894.443213][T13498] netlink: 28 bytes leftover after parsing attributes in process `syz.1.13430'.
[  894.488199][T13503] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13432'.
[  894.491332][T13503] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13432'.
[  894.529992][T13506] netlink: 16 bytes leftover after parsing attributes in process `syz.0.13431'.
[  894.537807][T13501] netlink: 16 bytes leftover after parsing attributes in process `syz.0.13431'.
[  894.633057][T13512] xt_nfacct: accounting object `syz0' does not exist
[  894.711719][T13516] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13436'.
[  894.723395][T13519] validate_nla: 1 callbacks suppressed
[  894.723407][T13519] netlink: 'syz.1.13437': attribute type 4 has an invalid length.
[  894.869294][T13526] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13438'.
[  894.880491][T13538] netlink: 44 bytes leftover after parsing attributes in process `syz.2.13441'.
[  895.020864][T13551] Cannot find add_set index 2 as target
[  895.063576][T13557] bridge139: the hash_elasticity option has been deprecated and is always 16
[  895.125002][T13558] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13446'.
[  895.505041][T13589] tap0: tun_chr_ioctl cmd 1074025673
[  895.508819][T13589] tap0: tun_chr_ioctl cmd 1074025673
[  895.511176][T13589] tap0: tun_chr_ioctl cmd 1074025673
[  895.513436][T13589] tap0: tun_chr_ioctl cmd 1074025673
[  895.515435][T13589] tap0: tun_chr_ioctl cmd 1074025673
[  895.517435][T13589] tap0: tun_chr_ioctl cmd 1074025673
[  895.527034][T13589] tap0: tun_chr_ioctl cmd 1074025673
[  895.531768][T13589] tap0: tun_chr_ioctl cmd 1074025673
[  895.535226][T13589] tap0: tun_chr_ioctl cmd 1074025673
[  895.538985][T13589] tap0: tun_chr_ioctl cmd 1074025673
[  895.544079][T13589] tap0: tun_chr_ioctl cmd 1074025673
[  895.555417][T13589] tap0: tun_chr_ioctl cmd 1074025673
[  895.655295][T13598] netlink: 'syz.2.13456': attribute type 11 has an invalid length.
[  895.864905][T13593] xt_bpf: check failed: parse error
[  896.060509][T13611] x_tables: unsorted underflow at hook 2
[  896.117834][T13613] RDS: rds_bind could not find a transport for ::ffff:172.20.20.54, load rds_tcp or rds_rdma?
[  896.134675][T13613] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  896.138320][T13613] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  896.142523][T13613] netdevsim netdevsim0 eth3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  896.146006][T13613] netdevsim netdevsim0 eth3 (unregistering): unset [1, 2] type 2 family 0 port 20004 - 0
[  896.202787][T13613] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  896.205923][T13613] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  896.208904][T13613] netdevsim netdevsim0 eth2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  896.213154][T13613] netdevsim netdevsim0 eth2 (unregistering): unset [1, 2] type 2 family 0 port 20004 - 0
[  896.221882][T13615] netem: change failed
[  896.252921][T13617] bond157: entered promiscuous mode
[  896.255051][T13617] 8021q: adding VLAN 0 to HW filter on device bond157
[  896.310648][T13617] 8021q: adding VLAN 0 to HW filter on device bond158
[  896.315745][T13617] bond158: entered promiscuous mode
[  896.318738][T13617] bond157: (slave bond158): Enslaving as an active interface with an up link
[  896.329992][T13613] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  896.333815][T13613] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  896.338978][T13613] netdevsim netdevsim0 eth1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  896.344462][T13613] netdevsim netdevsim0 eth1 (unregistering): unset [1, 2] type 2 family 0 port 20004 - 0
[  896.443335][T13624] macsec3: entered promiscuous mode
[  896.455721][T13613] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  896.459576][T13613] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  896.467605][T13613] netdevsim netdevsim0 eth0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  896.472359][T13613] netdevsim netdevsim0 eth0 (unregistering): unset [1, 2] type 2 family 0 port 20004 - 0
[  896.615945][T10389] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  896.626575][T10389] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 20004 - 0
[  896.634286][T10389] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 20000 - 0
[  896.639336][T13634] netlink: 'syz.2.13467': attribute type 1 has an invalid length.
[  896.644548][T10389] netdevsim netdevsim0 eth0: set [1, 2] type 2 family 0 port 6081 - 0
[  896.733932][T10389] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  896.740232][T10389] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 20004 - 0
[  896.748774][T10389] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 20000 - 0
[  896.754799][T10389] netdevsim netdevsim0 eth1: set [1, 2] type 2 family 0 port 6081 - 0
[  896.780314][T13634] bond163: entered promiscuous mode
[  896.790987][T13634] bond163: entered allmulticast mode
[  896.801889][T13634] 8021q: adding VLAN 0 to HW filter on device bond163
[  896.826725][T13639] veth0_macvtap: left promiscuous mode
[  896.830913][T13639] veth0_macvtap: entered promiscuous mode
[  896.867486][T13639] A link change request failed with some changes committed already. Interface @ may have been left with an inconsistent configuration, please check.
[  896.892255][T13638] macsec4: entered promiscuous mode
[  896.901640][T10389] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  896.906444][T10389] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 20004 - 0
[  896.917077][T10389] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 20000 - 0
[  896.921657][T13642] netlink: 'syz.2.13469': attribute type 13 has an invalid length.
[  896.922119][T10389] netdevsim netdevsim0 eth2: set [1, 2] type 2 family 0 port 6081 - 0
[  896.927482][T13642] netlink: 'syz.2.13469': attribute type 17 has an invalid length.
[  896.948096][T15557] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  896.953124][T15557] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 20004 - 0
[  896.959672][T15557] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 20000 - 0
[  896.965558][T15557] netdevsim netdevsim0 eth3: set [1, 2] type 2 family 0 port 6081 - 0
[  897.057856][T13651] macvlan13: entered allmulticast mode
[  897.060613][T13651] veth0_to_team: entered allmulticast mode
[  897.244102][T13667] syzkaller1: entered promiscuous mode
[  897.246233][T13667] syzkaller1: entered allmulticast mode
[  897.368613][T13674] xt_nfacct: accounting object `syz0' does not exist
[  897.497827][T13684] : Caught tx_queue_len zero misconfig
[  897.604152][T13688] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[  897.606724][T13688] CPU: 1 UID: 0 PID: 13688 Comm: syz.0.13483 Not tainted syzkaller #0 PREEMPT(full) 
[  897.606738][T13688] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  897.606745][T13688] Call Trace:
[  897.606751][T13688]  <TASK>
[  897.606757][T13688]  dump_stack_lvl+0xe8/0x150
[  897.606775][T13688]  sysfs_warn_dup+0x8e/0xa0
[  897.606789][T13688]  sysfs_do_create_link_sd+0xc0/0x110
[  897.606803][T13688]  device_add_class_symlinks+0x1cf/0x240
[  897.606817][T13688]  device_add+0x475/0xbb0
[  897.606828][T13688]  wiphy_register+0x1dc5/0x2dc0
[  897.606853][T13688]  ? __pfx_wiphy_register+0x10/0x10
[  897.606866][T13688]  ? __pfx_netdev_run_todo+0x10/0x10
[  897.606882][T13688]  ? minstrel_ht_alloc+0x6e0/0x7e0
[  897.606915][T13688]  ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0
[  897.606942][T13688]  ieee80211_register_hw+0x3d82/0x4a70
[  897.606976][T13688]  ? ieee80211_register_hw+0x1911/0x4a70
[  897.607018][T13688]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  897.607046][T13688]  ? __asan_memset+0x22/0x50
[  897.607058][T13688]  ? __hrtimer_setup+0x1b7/0x260
[  897.607073][T13688]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  897.607120][T13688]  mac80211_hwsim_new_radio+0x3335/0x5aa0
[  897.607149][T13688]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  897.607159][T13688]  ? kstrndup+0xbf/0x160
[  897.607173][T13688]  hwsim_new_radio_nl+0xf6a/0x1c00
[  897.607196][T13688]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  897.607211][T13688]  ? rcu_is_watching+0x15/0xb0
[  897.607223][T13688]  ? trace_kmalloc+0x2a/0xf0
[  897.607238][T13688]  ? __nla_parse+0x40/0x60
[  897.607256][T13688]  ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0
[  897.607266][T13688]  ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0
[  897.607279][T13688]  genl_family_rcv_msg_doit+0x22a/0x330
[  897.607291][T13688]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  897.607306][T13688]  ? bpf_lsm_capable+0x9/0x20
[  897.607314][T13688]  ? security_capable+0x7e/0x2c0
[  897.607329][T13688]  genl_rcv_msg+0x61c/0x7a0
[  897.607340][T13688]  ? __pfx_genl_rcv_msg+0x10/0x10
[  897.607349][T13688]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  897.607365][T13688]  netlink_rcv_skb+0x232/0x4b0
[  897.607377][T13688]  ? __pfx_genl_rcv_msg+0x10/0x10
[  897.607387][T13688]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  897.607407][T13688]  ? down_read+0x270/0x2e0
[  897.607416][T13688]  ? genl_rcv+0xd/0x40
[  897.607425][T13688]  genl_rcv+0x28/0x40
[  897.607432][T13688]  netlink_unicast+0x75c/0x8e0
[  897.607447][T13688]  netlink_sendmsg+0x813/0xb40
[  897.607463][T13688]  ? __pfx_netlink_sendmsg+0x10/0x10
[  897.607476][T13688]  ? aa_sock_msg_perm+0xf1/0x1b0
[  897.607489][T13688]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  897.607501][T13688]  ____sys_sendmsg+0x972/0x9f0
[  897.607514][T13688]  ? __might_fault+0xaf/0x130
[  897.607528][T13688]  ? __pfx_____sys_sendmsg+0x10/0x10
[  897.607544][T13688]  ? import_iovec+0x73/0xa0
[  897.607559][T13688]  ___sys_sendmsg+0x2a5/0x360
[  897.607569][T13688]  ? __lock_acquire+0x6b5/0x2cf0
[  897.607581][T13688]  ? __pfx____sys_sendmsg+0x10/0x10
[  897.607596][T13688]  ? futex_wait+0x2a2/0x390
[  897.607621][T13688]  ? __fget_files+0x2a/0x420
[  897.607631][T13688]  ? __fget_files+0x3a0/0x420
[  897.607646][T13688]  __x64_sys_sendmsg+0x1bd/0x2a0
[  897.607665][T13688]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  897.607689][T13688]  ? fput+0xa0/0xd0
[  897.607712][T13688]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  897.607734][T13688]  do_syscall_64+0x15f/0xf80
[  897.607760][T13688]  ? trace_irq_disable+0x3b/0x140
[  897.607791][T13688]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  897.607809][T13688] RIP: 0033:0x7f9c01d9cdd9
[  897.607825][T13688] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  897.607842][T13688] RSP: 002b:00007f9c02bf1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  897.607863][T13688] RAX: ffffffffffffffda RBX: 00007f9c02015fa0 RCX: 00007f9c01d9cdd9
[  897.607871][T13688] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 000000000000000c
[  897.607877][T13688] RBP: 00007f9c01e32d69 R08: 0000000000000000 R09: 0000000000000000
[  897.607883][T13688] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  897.607888][T13688] R13: 00007f9c02016038 R14: 00007f9c02015fa0 R15: 00007ffc766faeb8
[  897.607905][T13688]  </TASK>
[  897.978379][T13710] netlink: 'syz.1.13490': attribute type 2 has an invalid length.
[  898.080826][T13726] x_tables: duplicate underflow at hook 2
[  898.119902][T13724] netlink: 'syz.0.13496': attribute type 8 has an invalid length.
[  898.146964][T13724] veth1_to_team: entered promiscuous mode
[  898.157906][T13724] veth1_to_team: left promiscuous mode
[  898.490913][T13760] sit0: entered promiscuous mode
[  898.516348][T13760] netlink: 'syz.0.13504': attribute type 1 has an invalid length.
[  898.607727][T13763] syzkaller1: entered promiscuous mode
[  898.615277][T13763] syzkaller1: entered allmulticast mode
[  898.625751][   T31] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  898.628270][   T31] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  898.637337][T13763] netlink: 'syz.2.13505': attribute type 298 has an invalid length.
[  898.647924][T13771] xt_recent: hitcount (33554435) is larger than allowed maximum (65535)
[  898.669296][T13771] netlink: 'syz.1.13509': attribute type 1 has an invalid length.
[  898.769197][T13780] netlink: 'syz.1.13512': attribute type 29 has an invalid length.
[  898.944900][T13788] bond160: entered promiscuous mode
[  898.947007][T13788] 8021q: adding VLAN 0 to HW filter on device bond160
[  899.003281][T13791] bond164: entered promiscuous mode
[  899.005587][T13791] 8021q: adding VLAN 0 to HW filter on device bond164
[  899.055440][T13794] bond177: entered promiscuous mode
[  899.058354][T13794] 8021q: adding VLAN 0 to HW filter on device bond177
[  899.084722][T13791] bond164: (slave bridge71): making interface the new active one
[  899.087065][T13791] bridge71: entered promiscuous mode
[  899.092301][T13791] bridge71: left promiscuous mode
[  899.174560][T13798] bond177: (slave bridge132): making interface the new active one
[  899.177512][T13798] bridge132: entered promiscuous mode
[  899.187527][T13798] bridge132: left promiscuous mode
[  899.655460][T13802] tipc: Resetting bearer <ib:geneve0>
[  899.832384][T13802] bond3: left promiscuous mode
[  900.287117][T13802] tipc: Resetting bearer <eth:syzkaller0>
[  900.474300][T13809] ipip6: entered promiscuous mode
[  900.478185][T10386] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  900.483196][T10386] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 20000 - 0
[  900.489463][T10386] netdevsim netdevsim1 eth0: unset [1, 1] type 2 family 0 port 6081 - 0
[  900.493428][T10386] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  900.497418][T10386] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 20000 - 0
[  900.504465][T10386] netdevsim netdevsim1 eth1: unset [1, 1] type 2 family 0 port 6081 - 0
[  900.516223][T10386] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  900.525515][T10386] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 20000 - 0
[  900.532159][T10386] netdevsim netdevsim1 eth2: unset [1, 1] type 2 family 0 port 6081 - 0
[  900.536763][T10386] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  900.548309][T10386] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 20000 - 0
[  900.554098][T10386] netdevsim netdevsim1 eth3: unset [1, 1] type 2 family 0 port 6081 - 0
[  900.624140][T13826] validate_nla: 4 callbacks suppressed
[  900.624155][T13826] netlink: 'syz.0.13524': attribute type 1 has an invalid length.
[  900.668069][T13826] 8021q: adding VLAN 0 to HW filter on device bond178
[  900.676870][T13831] netlink: 'syz.2.13525': attribute type 11 has an invalid length.
[  900.686983][T13831] __nla_validate_parse: 39 callbacks suppressed
[  900.686993][T13831] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13525'.
[  900.752424][T13835] netlink: 'syz.0.13526': attribute type 1 has an invalid length.
[  900.798516][T13840] netlink: 'syz.1.13529': attribute type 1 has an invalid length.
[  900.812019][T13835] bond179: (slave bridge132): making interface the new active one
[  900.815151][T13835] bond179: (slave bridge132): Enslaving as an active interface with an up link
[  900.872352][T13841] netlink: 44 bytes leftover after parsing attributes in process `syz.1.13529'.
[  900.893805][T13835] macvlan15: entered promiscuous mode
[  900.896006][T13835] macvlan15: entered allmulticast mode
[  900.898818][T13835] bond179: entered promiscuous mode
[  900.902977][T13835] bridge132: entered promiscuous mode
[  900.906047][T13835] 8021q: adding VLAN 0 to HW filter on device macvlan15
[  900.916137][T13835] bond179: (slave macvlan15): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  900.931513][T13835] bond179: left promiscuous mode
[  900.935060][T13835] bridge132: left promiscuous mode
[  900.993872][T13847] netlink: 'syz.1.13531': attribute type 1 has an invalid length.
[  901.041156][T13847] 8021q: adding VLAN 0 to HW filter on device bond161
[  901.060808][T13847] netlink: 28 bytes leftover after parsing attributes in process `syz.1.13531'.
[  901.098015][T13852] netlink: 16 bytes leftover after parsing attributes in process `syz.0.13532'.
[  901.203652][T13859] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  901.345449][T13865] netlink: 20 bytes leftover after parsing attributes in process `syz.2.13538'.
[  901.359865][T13865] netlink: 'syz.2.13538': attribute type 1 has an invalid length.
[  901.525223][T13875] ip6gretap0: entered allmulticast mode
[  901.680459][T13884] tipc: Resetting bearer <ib:ip6gre0>
[  902.454231][T13884] tipc: Resetting bearer <eth:syzkaller0>
[  902.480810][T13884] veth0_to_team: left allmulticast mode
[  902.624802][T14023] syz0: Port: 1 Link DOWN
[  902.627180][T10386] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  902.639768][T10386] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 20004 - 0
[  902.643018][T10386] netdevsim netdevsim0 eth0: unset [1, 1] type 2 family 0 port 20000 - 0
[  902.647709][T10386] netdevsim netdevsim0 eth0: unset [1, 2] type 2 family 0 port 6081 - 0
[  902.656051][T10386] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  902.659960][T10386] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 20004 - 0
[  902.663144][T10386] netdevsim netdevsim0 eth1: unset [1, 1] type 2 family 0 port 20000 - 0
[  902.666434][T10386] netdevsim netdevsim0 eth1: unset [1, 2] type 2 family 0 port 6081 - 0
[  902.671601][T10386] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  902.680333][T10386] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 20004 - 0
[  902.688035][T10386] netdevsim netdevsim0 eth2: unset [1, 1] type 2 family 0 port 20000 - 0
[  902.699188][T10386] netdevsim netdevsim0 eth2: unset [1, 2] type 2 family 0 port 6081 - 0
[  902.717460][T10386] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  902.727390][T10386] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 20004 - 0
[  902.747214][T10386] netdevsim netdevsim0 eth3: unset [1, 1] type 2 family 0 port 20000 - 0
[  902.751666][T10386] netdevsim netdevsim0 eth3: unset [1, 2] type 2 family 0 port 6081 - 0
[  902.913524][T13916] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13551'.
[  903.004686][T13918] netlink: 'syz.0.13550': attribute type 1 has an invalid length.
[  903.007794][T13921] netlink: 277 bytes leftover after parsing attributes in process `syz.1.13552'.
[  903.134906][T13935] netlink: 40 bytes leftover after parsing attributes in process `syz.0.13554'.
[  903.185598][T13930] netlink: 'syz.0.13554': attribute type 11 has an invalid length.
[  903.188784][T13930] netlink: 140 bytes leftover after parsing attributes in process `syz.0.13554'.
[  903.194857][T13927]  speed is unknown, defaulting to 1000
[  903.442304][T13927] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13553'.
[  903.582323][T13961] veth1: Caught tx_queue_len zero misconfig
[  903.596227][T13959] vxcan0: entered allmulticast mode
[  903.611248][T13961] : entered promiscuous mode
[  903.655671][T13963] bond162: option resend_igmp: invalid value (2878)
[  903.659470][T13963] bond162: option resend_igmp: allowed values 0 - 255
[  903.673801][T13963] bond162 (unregistering): Released all slaves
[  903.756536][T13969] netlink: 'syz.2.13561': attribute type 2 has an invalid length.
[  903.759230][T13969] netlink: 'syz.2.13561': attribute type 9 has an invalid length.
[  903.913404][T13974] bond162: entered promiscuous mode
[  903.915860][T13974] 8021q: adding VLAN 0 to HW filter on device bond162
[  903.990416][T13974] bond162: (slave bridge64): making interface the new active one
[  904.001870][T13974] bridge64: entered promiscuous mode
[  904.014939][T13974] bridge64: left promiscuous mode
[  904.507159][T14007] bond165 (unregistering): Released all slaves
[  904.808419][T14045] bond163: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0)
[  904.816353][T14045] bond163 (unregistering): Released all slaves
[  904.995343][T14064]  speed is unknown, defaulting to 1000
[  905.005942][T14067]  speed is unknown, defaulting to 1000
[  905.271779][T14097] bond0: (slave wlan0): Error: Device is in use and cannot be enslaved
[  905.363271][T14102]  speed is unknown, defaulting to 1000
[  905.401078][T14104] tc_dump_action: action bad kind
[  905.404781][T14107] tc_dump_action: action bad kind
[  905.664878][T14119] bond165 (unregistering): Released all slaves
[  905.690702][T14126] __nla_validate_parse: 11 callbacks suppressed
[  905.690715][T14126] netlink: 156 bytes leftover after parsing attributes in process `syz.0.13592'.
[  905.710156][T14126] netlink: 56 bytes leftover after parsing attributes in process `syz.0.13592'.
[  905.783179][T14132] validate_nla: 2 callbacks suppressed
[  905.783191][T14132] netlink: 'syz.1.13594': attribute type 1 has an invalid length.
[  905.816092][T14132] bond163: (slave vxcan1): The slave device specified does not support setting the MAC address
[  905.819962][T14132] bond163: (slave vxcan1): Error -95 calling set_mac_address
[  905.838850][T14135] netlink: 12 bytes leftover after parsing attributes in process `syz.2.13595'.
[  905.845619][T14135] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  905.925255][T14132] netlink: 20 bytes leftover after parsing attributes in process `syz.1.13594'.
[  905.948804][T14132] bond163: (slave bridge64): Enslaving as an active interface with a down link
[  905.967277][T14132] macvlan7: entered promiscuous mode
[  905.969308][T14132] macvlan7: entered allmulticast mode
[  905.973158][T14132] bond163: entered promiscuous mode
[  905.980574][T14132] 8021q: adding VLAN 0 to HW filter on device macvlan7
[  905.985331][T14132] bond163: left promiscuous mode
[  906.064052][T14147] netlink: 28 bytes leftover after parsing attributes in process `syz.2.13599'.
[  906.070248][T14147] netlink: 28 bytes leftover after parsing attributes in process `syz.2.13599'.
[  906.088449][T14150] netlink: 'syz.1.13600': attribute type 4 has an invalid length.
[  906.096127][T14150] netlink: 'syz.1.13600': attribute type 4 has an invalid length.
[  906.103244][T14150] netlink: 'syz.1.13600': attribute type 4 has an invalid length.
[  906.233591][T14153] netlink: 24 bytes leftover after parsing attributes in process `syz.1.13601'.
[  906.281671][T14153] netlink: 12 bytes leftover after parsing attributes in process `syz.1.13601'.
[  906.290119][T14160]  speed is unknown, defaulting to 1000
[  906.380630][T14157] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check.
[  906.418428][T14168] netlink: 12 bytes leftover after parsing attributes in process `syz.1.13605'.
[  906.434528][T14168] nbd: illegal input index -1113835520
[  906.478097][T14174] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13607'.
[  906.513438][T14177] netlink: 'syz.1.13608': attribute type 1 has an invalid length.
[  906.549834][T14177] bond164: entered promiscuous mode
[  906.551903][T14177] 8021q: adding VLAN 0 to HW filter on device bond164
[  906.554901][T14171]  speed is unknown, defaulting to 1000
[  906.574222][T14177] 8021q: adding VLAN 0 to HW filter on device bond164
[  906.584908][T14177] bond164: (slave wireguard8): The slave device specified does not support setting the MAC address
[  906.589779][T14177] bond164: (slave wireguard8): Setting fail_over_mac to active for active-backup mode
[  906.605046][T14177] bond164: (slave wireguard8): making interface the new active one
[  906.607729][T14177] wireguard8: entered promiscuous mode
[  906.614799][T14177] bond164: (slave wireguard8): Enslaving as an active interface with an up link
[  906.630131][T14183] bond164: (slave wireguard9): The slave device specified does not support setting the MAC address
[  906.650670][T14183] bond164: (slave wireguard9): Enslaving as a backup interface with an up link
[  906.664648][T14186] netlink: 'syz.1.13608': attribute type 1 has an invalid length.
[  906.695047][T14177] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR
[  907.032527][T14203] tunl0: entered promiscuous mode
[  907.033028][T14205] netlink: 'syz.2.13613': attribute type 1 has an invalid length.
[  907.038386][T14203] netlink: 'syz.1.13614': attribute type 4 has an invalid length.
[  907.065053][T14205] bond165: entered promiscuous mode
[  907.068024][T14205] 8021q: adding VLAN 0 to HW filter on device bond165
[  907.101143][T14205] netlink: 'syz.2.13613': attribute type 10 has an invalid length.
[  907.146785][T14205] 8021q: adding VLAN 0 to HW filter on device bond165
[  907.157193][T14205] bond165: (slave wireguard3): The slave device specified does not support setting the MAC address
[  907.171489][T14205] bond165: (slave wireguard3): Setting fail_over_mac to active for active-backup mode
[  907.551648][T14205] bond165: (slave wireguard3): making interface the new active one
[  907.559486][T14205] wireguard3: entered promiscuous mode
[  907.562759][T14205] bond165: (slave wireguard3): Enslaving as an active interface with an up link
[  907.695642][T14226] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check.
[  907.736671][T14232] netlink: 'syz.1.13620': attribute type 4 has an invalid length.
[  907.853981][T14239] ip6tnl14: entered allmulticast mode
[  908.034346][T14244] bond166: (slave bridge72): making interface the new active one
[  908.037829][T14244] bond166: (slave bridge72): Enslaving as an active interface with an up link
[  908.070982][T14250] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  908.123602][T14257] bond0: (slave wlan0): Error: Device is in use and cannot be enslaved
[  908.302470][T14261] vlan0: entered promiscuous mode
[  908.304338][T14261] bridge0: entered promiscuous mode
[  908.699327][T14263]  speed is unknown, defaulting to 1000
[  908.851928][T14268] pim6reg0: tun_chr_ioctl cmd 1074025673
[  908.858361][T14269] pim6reg0: tun_chr_ioctl cmd 1074025675
[  908.862518][T14269] pim6reg0: persist disabled
[  908.864553][T14268] pim6reg0: tun_chr_ioctl cmd 1074025673
[  908.867311][T14268] pim6reg0: tun_chr_ioctl cmd 1074025673
[  908.870053][T14269] pim6reg0: tun_chr_ioctl cmd 1074025675
[  908.872424][T14269] pim6reg0: persist disabled
[  908.874427][T14268] pim6reg0: tun_chr_ioctl cmd 1074025673
[  908.876793][T14269] pim6reg0: tun_chr_ioctl cmd 1074025675
[  908.879161][T14269] pim6reg0: persist disabled
[  908.881144][T14268] pim6reg0: tun_chr_ioctl cmd 1074025673
[  908.883674][T14269] pim6reg0: tun_chr_ioctl cmd 1074025675
[  908.886505][T14269] pim6reg0: persist disabled
[  908.888556][T14269] pim6reg0: tun_chr_ioctl cmd 1074025675
[  908.891322][T14269] pim6reg0: persist disabled
[  908.893355][T14269] pim6reg0: tun_chr_ioctl cmd 1074025675
[  908.895678][T14269] pim6reg0: persist disabled
[  908.897677][T14269] pim6reg0: tun_chr_ioctl cmd 1074025675
[  908.900959][T14269] pim6reg0: persist disabled
[  908.903016][T14268] pim6reg0: tun_chr_ioctl cmd 1074025673
[  909.051084][T14275] bond166: entered promiscuous mode
[  909.052972][T14275] 8021q: adding VLAN 0 to HW filter on device bond166
[  909.130452][T14281] bond104: (slave ): Releasing backup interface
[  909.133358][T14281] bond104: (slave ): last VLAN challenged slave left bond - VLAN blocking is removed
[  909.137692][T14281] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  909.218662][T14289] bond0: entered promiscuous mode
[  909.225229][T14289] bond0: left promiscuous mode
[  909.347865][T14296] 8021q: adding VLAN 0 to HW filter on device bond180
[  909.371884][T14296] bond180 (unregistering): Released all slaves
[  909.530732][T14303] team0: entered promiscuous mode
[  909.532474][T14303] team0: entered allmulticast mode
[  909.534473][T14303] 8021q: adding VLAN 0 to HW filter on device team0
[  909.580469][T14303] team2 (uninitialized): Failed to send options change via netlink (err -105)
[  909.594257][T14303] team2: entered promiscuous mode
[  909.596214][T14303] team2: entered allmulticast mode
[  909.598433][T14303] 8021q: adding VLAN 0 to HW filter on device team2
[  912.656172][T14309] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  912.808724][T14338] __nla_validate_parse: 23 callbacks suppressed
[  912.808742][T14338] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13652'.
[  912.830656][T14338] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13652'.
[  912.867340][T10386] nci: nci_extract_activation_params_iso_dep: unsupported activation_rf_tech_and_mode 0x80
[  912.897376][T14343] batman_adv: batadv0: Adding interface: macvtap4
[  912.906435][T14343] batman_adv: batadv0: The MTU of interface macvtap4 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  912.917749][T14343] batman_adv: batadv0: Not using interface macvtap4 (retrying later): interface not active
[  913.256771][T14362]  speed is unknown, defaulting to 1000
[  913.551687][T14329] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  913.690389][T14374] sch_tbf: burst 255 is lower than device syzkaller0 mtu (313) !
[  913.716318][T14375] validate_nla: 6 callbacks suppressed
[  913.716329][T14375] netlink: 'syz.1.13659': attribute type 1 has an invalid length.
[  913.720679][T14375] netlink: 'syz.1.13659': attribute type 1 has an invalid length.
[  913.723007][T14375] netlink: 9172 bytes leftover after parsing attributes in process `syz.1.13659'.
[  913.864243][T14394] netlink: 'syz.1.13665': attribute type 1 has an invalid length.
[  913.884885][T14394] bond167: entered promiscuous mode
[  913.887264][T14394] 8021q: adding VLAN 0 to HW filter on device bond167
[  913.944558][T14400] sit0: left promiscuous mode
[  913.947381][T14400] mac80211_hwsim hwsim6 syzkaller0: left promiscuous mode
[  913.953421][T14400] bond148: left promiscuous mode
[  913.955477][T14400] bond150: left promiscuous mode
[  913.957487][T14400] bond152: left promiscuous mode
[  913.961992][T14400] bond156: left promiscuous mode
[  913.964134][T14400] bond157: left promiscuous mode
[  913.966148][T14400] bond158: left promiscuous mode
[  913.968077][T14400] bond160: left promiscuous mode
[  913.971008][T14400] vti2: left promiscuous mode
[  913.973304][T14400] bond162: left promiscuous mode
[  913.975416][T14400] bond165: left promiscuous mode
[  913.977558][T14400] veth57: left promiscuous mode
[  913.980104][T14400] bond167: left promiscuous mode
[  913.982218][T14400] bond168: left promiscuous mode
[  913.984258][T14400] bond169: left promiscuous mode
[  913.986418][T14400] bond171: left promiscuous mode
[  913.988528][T14400] bond172: left promiscuous mode
[  913.991072][T14400] bridge137: left promiscuous mode
[  913.993413][T14400] bond177: left promiscuous mode
[  913.998855][T14400] team0: left promiscuous mode
[  914.002294][T14400] team2: left promiscuous mode
[  914.032207][T14404] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13667'.
[  914.150163][T14409] pim6reg1: entered promiscuous mode
[  914.152565][T14409] pim6reg1: entered allmulticast mode
[  914.372000][T14417] bond168: (slave ): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  914.383859][T14417] bond168: (slave ): Enslaving as an active interface with an up link
[  914.388565][T14417] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check.
[  914.523331][T14423] netlink: 3 bytes leftover after parsing attributes in process `syz.1.13674'.
[  914.526932][T14423] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13674'.
[  914.536212][T14423] netlink: 3 bytes leftover after parsing attributes in process `syz.1.13674'.
[  914.544403][T14423] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13674'.
[  914.550102][T14423] netlink: 3 bytes leftover after parsing attributes in process `syz.1.13674'.
[  914.592275][T14426] netlink: 'syz.2.13676': attribute type 13 has an invalid length.
[  914.601583][T14426] netlink: 'syz.2.13676': attribute type 17 has an invalid length.
[  914.606818][T14017]  speed is unknown, defaulting to 1000
[  914.609834][T14014]  speed is unknown, defaulting to 1000
[  914.669254][T14434] netlink: 36 bytes leftover after parsing attributes in process `syz.2.13676'.
[  914.817779][T14441] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check.
[  915.029805][T14445] bridge68: entered promiscuous mode
[  915.031859][T14445] bridge68: entered allmulticast mode
[  915.301496][T14459] netlink: 'syz.1.13685': attribute type 5 has an invalid length.
[  915.304746][T14459] netlink: 'syz.1.13685': attribute type 5 has an invalid length.
[  915.565372][T14474] netlink: 'syz.1.13689': attribute type 1 has an invalid length.
[  915.596980][T14474] bond169: entered promiscuous mode
[  915.599092][T14474] 8021q: adding VLAN 0 to HW filter on device bond169
[  915.638484][T14474] bond169: (slave bridge69): making interface the new active one
[  915.646915][T14474] bridge69: entered promiscuous mode
[  915.656549][T14474] bridge69: left promiscuous mode
[  915.775235][T14485] netlink: 'syz.0.13691': attribute type 1 has an invalid length.
[  915.816683][T14490] netlink: 'syz.2.13692': attribute type 1 has an invalid length.
[  915.865500][T14490] 8021q: adding VLAN 0 to HW filter on device bond167
[  915.896257][T14490] bond167 (unregistering): Released all slaves
[  915.997886][T14502] lo speed is unknown, defaulting to 1000
[  916.006674][T14502] lo speed is unknown, defaulting to 1000
[  916.015153][T14502] lo speed is unknown, defaulting to 1000
[  916.030219][T14502] smbdirect: ib_dev[sy2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000
[  916.036939][T14502] smbdirect: ib_dev[sy2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6
[  916.043080][T14502] smbdirect: ib_dev[sy2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008
[  916.048370][T14507] : renamed from lo
[  916.057589][T14502] infiniband sy2: RDMA CMA: cma_listen_on_dev, error -98
[  916.108516][T14502]  speed is unknown, defaulting to 1000
[  916.127693][T14502]  speed is unknown, defaulting to 1000
[  916.136685][T14502]  speed is unknown, defaulting to 1000
[  916.223289][T14521] bond180: entered promiscuous mode
[  916.225661][T14521] 8021q: adding VLAN 0 to HW filter on device bond180
[  916.266977][T14525] bond167: entered promiscuous mode
[  916.275766][T14525] 8021q: adding VLAN 0 to HW filter on device bond167
[  916.489887][T14553] tipc: Resetting bearer <ib:geneve0>
[  916.575328][T14553] tipc: Resetting bearer <eth:syzkaller0>
[  916.623132][T14558] workqueue: Failed to create a rescuer kthread for wq "bond168": -EINTR
[  916.689936][T14564] bond170: (slave bridge69): making interface the new active one
[  916.703426][T14564] bond170: (slave bridge69): Enslaving as an active interface with an up link
[  916.710232][T14565] bond92: left allmulticast mode
[  916.713455][T14565] bond123: left allmulticast mode
[  917.124350][T14604] bond181: option packets_per_slave: mode dependency failed, not supported in mode balance-alb(6)
[  917.128648][T14604] bond181 (unregistering): Released all slaves
[  917.246869][T14620] openvswitch: netlink: EtherType 0 is less than min 600
[  917.296071][T14625] : entered promiscuous mode
[  917.349986][T14623]  speed is unknown, defaulting to 1000
[  917.355375][T14623]  speed is unknown, defaulting to 1000
[  917.836382][   T33] audit: type=1107 audit(1778557890.366:17): pid=14646 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=''
[  917.892100][T14660] xt_nfacct: accounting object `syz0' does not exist
[  917.924209][T14662] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  918.002647][T14670] block nbd0: reconnected socket
[  918.006805][T14670] block nbd0: reconnected socket
[  918.016093][T14670] __nla_validate_parse: 19 callbacks suppressed
[  918.016111][T14670] netlink: 12 bytes leftover after parsing attributes in process `syz.0.13741'.
[  918.037974][ T8554] block nbd0: Receive control failed (result -32)
[  918.052405][   T56] block nbd0: Receive control failed (result -32)
[  918.183879][T14676] netlink: 76 bytes leftover after parsing attributes in process `syz.2.13743'.
[  918.189286][T14680] x_tables: ip_tables: RATEEST.0 target: invalid size 32 (kernel) != (user) 0
[  918.264590][T14685] netlink: 68 bytes leftover after parsing attributes in process `syz.2.13747'.
[  918.335805][T14688]  speed is unknown, defaulting to 1000
[  918.350216][T14688]  speed is unknown, defaulting to 1000
[  918.375224][T14699] 
[  918.376164][T14699] ======================================================
[  918.378172][T14699] WARNING: possible circular locking dependency detected
[  918.380116][T14699] syzkaller #0 Not tainted
[  918.381931][T14699] ------------------------------------------------------
[  918.384565][T14699] syz.0.13751/14699 is trying to acquire lock:
[  918.386958][T14699] ffffffff8ea85520 (fs_reclaim){+.+.}-{0:0}, at: __kmalloc_cache_noprof+0x40/0x660
[  918.390425][T14699] 
[  918.390425][T14699] but task is already holding lock:
[  918.392853][T14699] ffffffff8e7eb750 (cpu_hotplug_lock){++++}-{0:0}, at: cgroup_procs_write_start+0x539/0x900
[  918.395801][T14699] 
[  918.395801][T14699] which lock already depends on the new lock.
[  918.395801][T14699] 
[  918.399050][T14699] 
[  918.399050][T14699] the existing dependency chain (in reverse order) is:
[  918.402414][T14699] 
[  918.402414][T14699] -> #6 (cpu_hotplug_lock){++++}-{0:0}:
[  918.405220][T14699]        cpus_read_lock+0x42/0x160
[  918.407044][T14699]        static_key_slow_inc+0x12/0x30
[  918.408739][T14699]        nbd_genl_reconfigure+0x132f/0x1ea0
[  918.410695][T14699]        genl_family_rcv_msg_doit+0x22a/0x330
[  918.412605][T14699]        genl_rcv_msg+0x61c/0x7a0
[  918.414187][T14699]        netlink_rcv_skb+0x232/0x4b0
[  918.415815][T14699]        genl_rcv+0x28/0x40
[  918.417154][T14699]        netlink_unicast+0x75c/0x8e0
[  918.418732][T14699]        netlink_sendmsg+0x813/0xb40
[  918.420326][T14699]        ____sys_sendmsg+0x972/0x9f0
[  918.421967][T14699]        ___sys_sendmsg+0x2a5/0x360
[  918.423545][T14699]        __x64_sys_sendmsg+0x1bd/0x2a0
[  918.425248][T14699]        do_syscall_64+0x15f/0xf80
[  918.426870][T14699]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  918.428881][T14699] 
[  918.428881][T14699] -> #5 (&nsock->tx_lock){+.+.}-{4:4}:
[  918.431955][T14699]        __mutex_lock+0x1a3/0x1550
[  918.433869][T14699]        nbd_queue_rq+0x37b/0x1100
[  918.435814][T14699]        blk_mq_dispatch_rq_list+0xa70/0x1910
[  918.438109][T14699]        __blk_mq_sched_dispatch_requests+0xdcc/0x1600
[  918.440784][T14699]        blk_mq_sched_dispatch_requests+0xd7/0x190
[  918.443366][T14699]        blk_mq_run_hw_queue+0x348/0x4f0
[  918.445584][T14699]        blk_mq_dispatch_list+0xd16/0xe10
[  918.447730][T14699]        blk_mq_flush_plug_list+0x48d/0x570
[  918.449893][T14699]        __blk_flush_plug+0x3ed/0x4d0
[  918.451900][T14699]        __submit_bio+0x28d/0x580
[  918.453916][T14699]        submit_bio_noacct_nocheck+0x2f4/0xa40
[  918.456190][T14699]        block_read_full_folio+0x599/0x830
[  918.458352][T14699]        filemap_read_folio+0x137/0x3b0
[  918.460387][T14699]        do_read_cache_folio+0x358/0x590
[  918.462530][T14699]        read_part_sector+0xb6/0x2b0
[  918.464447][T14699]        adfspart_check_ICS+0xb1/0x960
[  918.466541][T14699]        bdev_disk_changed+0x817/0x1770
[  918.468640][T14699]        blkdev_get_whole+0x380/0x510
[  918.470518][T14699]        bdev_open+0x31e/0xd30
[  918.472268][T14699]        blkdev_open+0x470/0x610
[  918.474163][T14699]        do_dentry_open+0x785/0x14e0
[  918.476236][T14699]        vfs_open+0x3b/0x340
[  918.478008][T14699]        path_openat+0x2e08/0x3860
[  918.480042][T14699]        do_file_open+0x23e/0x4a0
[  918.482045][T14699]        do_sys_openat2+0x113/0x200
[  918.484029][T14699]        __x64_sys_openat+0x138/0x170
[  918.486035][T14699]        do_syscall_64+0x15f/0xf80
[  918.487869][T14699]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  918.490230][T14699] 
[  918.490230][T14699] -> #4 (&cmd->lock){+.+.}-{4:4}:
[  918.492928][T14699]        __mutex_lock+0x1a3/0x1550
[  918.494909][T14699]        nbd_queue_rq+0xc6/0x1100
[  918.496838][T14699]        blk_mq_dispatch_rq_list+0xa70/0x1910
[  918.498985][T14699]        __blk_mq_sched_dispatch_requests+0xdcc/0x1600
[  918.501486][T14699]        blk_mq_sched_dispatch_requests+0xd7/0x190
[  918.503884][T14699]        blk_mq_run_hw_queue+0x348/0x4f0
[  918.505928][T14699]        blk_mq_dispatch_list+0xd16/0xe10
[  918.508117][T14699]        blk_mq_flush_plug_list+0x48d/0x570
[  918.510370][T14699]        __blk_flush_plug+0x3ed/0x4d0
[  918.512450][T14699]        __submit_bio+0x28d/0x580
[  918.514380][T14699]        submit_bio_noacct_nocheck+0x2f4/0xa40
[  918.516726][T14699]        block_read_full_folio+0x599/0x830
[  918.518939][T14699]        filemap_read_folio+0x137/0x3b0
[  918.521037][T14699]        do_read_cache_folio+0x358/0x590
[  918.523163][T14699]        read_part_sector+0xb6/0x2b0
[  918.525169][T14699]        adfspart_check_ICS+0xb1/0x960
[  918.527235][T14699]        bdev_disk_changed+0x817/0x1770
[  918.529317][T14699]        blkdev_get_whole+0x380/0x510
[  918.531367][T14699]        bdev_open+0x31e/0xd30
[  918.533174][T14699]        blkdev_open+0x470/0x610
[  918.535063][T14699]        do_dentry_open+0x785/0x14e0
[  918.537080][T14699]        vfs_open+0x3b/0x340
[  918.538834][T14699]        path_openat+0x2e08/0x3860
[  918.540823][T14699]        do_file_open+0x23e/0x4a0
[  918.542756][T14699]        do_sys_openat2+0x113/0x200
[  918.544737][T14699]        __x64_sys_openat+0x138/0x170
[  918.546723][T14699]        do_syscall_64+0x15f/0xf80
[  918.548694][T14699]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  918.551093][T14699] 
[  918.551093][T14699] -> #3 (set->srcu){.+.+}-{0:0}:
[  918.553753][T14699]        __synchronize_srcu+0xca/0x300
[  918.555809][T14699]        elevator_switch+0x1e8/0x7a0
[  918.557808][T14699]        elevator_change+0x2cc/0x450
[  918.559816][T14699]        elevator_set_default+0x36c/0x430
[  918.561968][T14699]        blk_register_queue+0x3e9/0x4e0
[  918.564075][T14699]        __add_disk+0x677/0xd50
[  918.565933][T14699]        add_disk_fwnode+0xfb/0x480
[  918.567932][T14699]        nbd_dev_add+0x72c/0xb50
[  918.569866][T14699]        nbd_init+0x168/0x1f0
[  918.571677][T14699]        do_one_initcall+0x250/0x870
[  918.573669][T14699]        do_initcall_level+0x104/0x190
[  918.575690][T14699]        do_initcalls+0x59/0xa0
[  918.577471][T14699]        kernel_init_freeable+0x2a6/0x3e0
[  918.579551][T14699]        kernel_init+0x1d/0x1d0
[  918.581388][T14699]        ret_from_fork+0x514/0xb70
[  918.583348][T14699]        ret_from_fork_asm+0x1a/0x30
[  918.585361][T14699] 
[  918.585361][T14699] -> #2 (&q->elevator_lock){+.+.}-{4:4}:
[  918.588240][T14699]        __mutex_lock+0x1a3/0x1550
[  918.590185][T14699]        elevator_change+0x1b3/0x450
[  918.592152][T14699]        elevator_set_none+0xb5/0x140
[  918.594137][T14699]        blk_mq_update_nr_hw_queues+0x5e7/0x1a60
[  918.596522][T14699]        nbd_start_device+0x17f/0xb10
[  918.598516][T14699]        nbd_genl_connect+0x165b/0x1cf0
[  918.600638][T14699]        genl_family_rcv_msg_doit+0x22a/0x330
[  918.603013][T14699]        genl_rcv_msg+0x61c/0x7a0
[  918.604907][T14699]        netlink_rcv_skb+0x232/0x4b0
[  918.606888][T14699]        genl_rcv+0x28/0x40
[  918.608659][T14699]        netlink_unicast+0x75c/0x8e0
[  918.610684][T14699]        netlink_sendmsg+0x813/0xb40
[  918.612693][T14699]        ____sys_sendmsg+0x972/0x9f0
[  918.614720][T14699]        ___sys_sendmsg+0x2a5/0x360
[  918.616724][T14699]        __x64_sys_sendmsg+0x1bd/0x2a0
[  918.618868][T14699]        do_syscall_64+0x15f/0xf80
[  918.620828][T14699]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  918.623254][T14699] 
[  918.623254][T14699] -> #1 (&q->q_usage_counter(io)#49){++++}-{0:0}:
[  918.626451][T14699]        blk_alloc_queue+0x546/0x680
[  918.628403][T14699]        __blk_mq_alloc_disk+0x197/0x390
[  918.630509][T14699]        nbd_dev_add+0x499/0xb50
[  918.632335][T14699]        nbd_init+0x168/0x1f0
[  918.634119][T14699]        do_one_initcall+0x250/0x870
[  918.636120][T14699]        do_initcall_level+0x104/0x190
[  918.638099][T14699]        do_initcalls+0x59/0xa0
[  918.639915][T14699]        kernel_init_freeable+0x2a6/0x3e0
[  918.642067][T14699]        kernel_init+0x1d/0x1d0
[  918.643925][T14699]        ret_from_fork+0x514/0xb70
[  918.645866][T14699]        ret_from_fork_asm+0x1a/0x30
[  918.647891][T14699] 
[  918.647891][T14699] -> #0 (fs_reclaim){+.+.}-{0:0}:
[  918.650645][T14699]        __lock_acquire+0x15a5/0x2cf0
[  918.652693][T14699]        lock_acquire+0x106/0x350
[  918.654608][T14699]        fs_reclaim_acquire+0x71/0x100
[  918.656615][T14699]        __kmalloc_cache_noprof+0x40/0x660
[  918.658767][T14699]        find_css_set+0xb41/0x1b40
[  918.660720][T14699]        cgroup_migrate_prepare_dst+0x130/0x700
[  918.663087][T14699]        cgroup_attach_task+0x47c/0x840
[  918.665203][T14699]        __cgroup_procs_write+0x2a9/0x300
[  918.667339][T14699]        cgroup_threads_write+0x24/0x50
[  918.669353][T14699]        cgroup_file_write+0x331/0x8f0
[  918.671373][T14699]        kernfs_fop_write_iter+0x3af/0x540
[  918.673562][T14699]        vfs_write+0x61d/0xb90
[  918.675375][T14699]        ksys_write+0x150/0x270
[  918.677206][T14699]        do_syscall_64+0x15f/0xf80
[  918.679145][T14699]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  918.681545][T14699] 
[  918.681545][T14699] other info that might help us debug this:
[  918.681545][T14699] 
[  918.685386][T14699] Chain exists of:
[  918.685386][T14699]   fs_reclaim --> &nsock->tx_lock --> cpu_hotplug_lock
[  918.685386][T14699] 
[  918.690142][T14699]  Possible unsafe locking scenario:
[  918.690142][T14699] 
[  918.692980][T14699]        CPU0                    CPU1
[  918.695006][T14699]        ----                    ----
[  918.697030][T14699]   rlock(cpu_hotplug_lock);
[  918.698768][T14699]                                lock(&nsock->tx_lock);
[  918.701248][T14699]                                lock(cpu_hotplug_lock);
[  918.703889][T14699]   lock(fs_reclaim);
[  918.705368][T14699] 
[  918.705368][T14699]  *** DEADLOCK ***
[  918.705368][T14699] 
[  918.708321][T14699] 5 locks held by syz.0.13751/14699:
[  918.710270][T14699]  #0: ffff888196d694f0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320
[  918.713671][T14699]  #1: ffff8881750e8410 (sb_writers#9){.+.+}-{0:0}, at: vfs_write+0x227/0xb90
[  918.716993][T14699]  #2: ffff8881a117d480 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1de/0x540
[  918.720600][T14699]  #3: ffffffff8e99c420 (cgroup_mutex){+.+.}-{4:4}, at: cgroup_kn_lock_live+0x13c/0x230
[  918.724167][T14699]  #4: ffffffff8e7eb750 (cpu_hotplug_lock){++++}-{0:0}, at: cgroup_procs_write_start+0x539/0x900
[  918.728002][T14699] 
[  918.728002][T14699] stack backtrace:
[  918.730243][T14699] CPU: 1 UID: 0 PID: 14699 Comm: syz.0.13751 Not tainted syzkaller #0 PREEMPT(full) 
[  918.730263][T14699] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  918.730273][T14699] Call Trace:
[  918.730283][T14699]  <TASK>
[  918.730293][T14699]  dump_stack_lvl+0xe8/0x150
[  918.730314][T14699]  print_circular_bug+0x2e1/0x300
[  918.730335][T14699]  check_noncircular+0x12e/0x150
[  918.730353][T14699]  __lock_acquire+0x15a5/0x2cf0
[  918.730372][T14699]  ? __lock_acquire+0x6b5/0x2cf0
[  918.730389][T14699]  ? __lock_acquire+0x6b5/0x2cf0
[  918.730434][T14699]  ? __kmalloc_cache_noprof+0x40/0x660
[  918.730460][T14699]  lock_acquire+0x106/0x350
[  918.730475][T14699]  ? __kmalloc_cache_noprof+0x40/0x660
[  918.730497][T14699]  fs_reclaim_acquire+0x71/0x100
[  918.730517][T14699]  ? __kmalloc_cache_noprof+0x40/0x660
[  918.730533][T14699]  __kmalloc_cache_noprof+0x40/0x660
[  918.730551][T14699]  ? find_css_set+0xb41/0x1b40
[  918.730573][T14699]  ? _raw_spin_unlock_irq+0x23/0x50
[  918.730591][T14699]  find_css_set+0xb41/0x1b40
[  918.730614][T14699]  ? __pfx_find_css_set+0x10/0x10
[  918.730641][T14699]  cgroup_migrate_prepare_dst+0x130/0x700
[  918.730663][T14699]  cgroup_attach_task+0x47c/0x840
[  918.730683][T14699]  ? __pfx_cgroup_attach_task+0x10/0x10
[  918.730702][T14699]  ? iput+0x47f/0xe80
[  918.730723][T14699]  ? cgroup_attach_permissions+0x33f/0x9e0
[  918.730747][T14699]  __cgroup_procs_write+0x2a9/0x300
[  918.730770][T14699]  cgroup_threads_write+0x24/0x50
[  918.730789][T14699]  ? __pfx_cgroup_threads_write+0x10/0x10
[  918.730807][T14699]  cgroup_file_write+0x331/0x8f0
[  918.730827][T14699]  ? __pfx_cgroup_file_write+0x10/0x10
[  918.730850][T14699]  ? __pfx_cgroup_file_write+0x10/0x10
[  918.730866][T14699]  kernfs_fop_write_iter+0x3af/0x540
[  918.730883][T14699]  vfs_write+0x61d/0xb90
[  918.730906][T14699]  ? __pfx_vfs_write+0x10/0x10
[  918.730926][T14699]  ? __fget_files+0x2a/0x420
[  918.730946][T14699]  ksys_write+0x150/0x270
[  918.730985][T14699]  ? __pfx_ksys_write+0x10/0x10
[  918.731007][T14699]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  918.731022][T14699]  do_syscall_64+0x15f/0xf80
[  918.731043][T14699]  ? trace_irq_disable+0x3b/0x140
[  918.731064][T14699]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  918.731078][T14699] RIP: 0033:0x7f9c01d9cdd9
[  918.731094][T14699] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  918.731107][T14699] RSP: 002b:00007f9c02bd0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  918.731122][T14699] RAX: ffffffffffffffda RBX: 00007f9c02016090 RCX: 00007f9c01d9cdd9
[  918.731133][T14699] RDX: 0000000000000012 RSI: 0000200000000c40 RDI: 0000000000000007
[  918.731142][T14699] RBP: 00007f9c01e32d69 R08: 0000000000000000 R09: 0000000000000000
[  918.731151][T14699] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  918.731159][T14699] R13: 00007f9c02016128 R14: 00007f9c02016090 R15: 00007ffc766faeb8
[  918.731177][T14699]  </TASK>
