last executing test programs:

1.948130118s ago: executing program 0 (id=6057):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x5, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000004830000000000000fa40000007010000080020007500feff00008200"], 0x0, 0x4, 0xfa, &(0x7f00000007c0)=""/250}, 0x94) (async)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000011c0)=@newtaction={0x14, 0x30, 0x25}, 0x14}}, 0x0) (async)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0) (async)
r2 = socket$nl_route(0x10, 0x3, 0x0)
pselect6(0x40, &(0x7f0000000140)={0x5, 0x6, 0x8, 0x8, 0x0, 0x2, 0x0, 0x8}, &(0x7f0000000180)={0x9, 0x2, 0x7fff, 0x22c, 0x5, 0x0, 0xa9e, 0x7}, &(0x7f00000001c0)={0x7fffffff, 0x9, 0x81, 0xa1, 0x3, 0xff, 0x1, 0xffff}, &(0x7f0000000200)={0x77359400}, &(0x7f00000004c0)={&(0x7f0000000240)={[0xc6]}, 0x8})
sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="00800000000000000c002b8008000100", @ANYRES32, @ANYBLOB="08161b0005000000"], 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x0) (async)
connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2e}}, 0x10)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe8000000000"], 0xfdef) (async)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001e80)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) (async)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r3, 0x84, 0x23, &(0x7f00000000c0)={0x0, 0xe1}, 0x8) (async)
r4 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r4, &(0x7f0000000000), 0x10) (async)
sendmsg$can_bcm(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB="050000000000080000000001fcffff00", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x2710], 0x48}}, 0x0) (async)
sendmsg$can_bcm(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x5, 0x3, 0x0, {}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "9dfc47318ccc3455"}}, 0x48}}, 0x0) (async)
socket$netlink(0x10, 0x3, 0x0) (async)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc) (async)
syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) (async)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB="4c00000002060108000034e400000000000000020500010006000000050004000000fe000900020073797a3100000000050005000200000012000300686173683a6e65742c706f7274000000ff5b3b87675a"], 0x4c}}, 0x2) (async)
r7 = socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, 0x0, 0x0) (async)
sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="54000000090601080000000000000000050000000900020073797a310000000005000100070000002c000780060004404e21000005000700e30000000c00018008000140850101010c000280080001"], 0x54}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) (async)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0)
write$cgroup_int(r8, &(0x7f0000000200), 0xffffffc1) (async)
r9 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
getsockopt$llc_int(r9, 0x10c, 0x0, &(0x7f0000000100), &(0x7f0000000140)=0x4)

1.935634162s ago: executing program 0 (id=6060):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="1400010000000000f00000000000ffff81"], 0x3c}, 0x1, 0x0, 0x0, 0x20008000}, 0x0)
socket$kcm(0x10, 0x2, 0x10) (async)
r1 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x48, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x4, {0x3}}}}]}]}, 0x48}}, 0x0)
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0)
sendto$inet6(r0, &(0x7f00000004c0)='W', 0x1, 0x0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback, 0x8}, 0x1c)
setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r0, 0x84, 0x78, &(0x7f0000000040), 0x4)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@delchain={0x1c8, 0x65, 0x20, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0xe}, {0x0, 0xb}}, [@filter_kind_options=@f_flow={{0x9}, {0x198, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x8065738cbab9bcb1}, @TCA_FLOW_EMATCHES={0x164, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x150, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x9c, 0x2, 0x0, 0x0, {{0x4, 0x0, 0x7}, "645809825d93df900fa8fae387fbed6313a639f20b0238ccdd4da9fde2f0be34e659ba729925eff5ebd76dec200e0c6b209649b549944fb335b53ad7e5b0f72af98dbb05ee1778a3e952122289a807cd7b48f87fa52a56b8fa1ed950478a7e526d5afbe8006f3724cd7d7553d2825013cfb6f6c75b881ba76a73fc329b963abb903b4ac42a8121e56f0f0797ef"}}, @TCF_EM_NBYTE={0x1c, 0x3, 0x0, 0x0, {{0x7, 0x2, 0x4}, {0x4, 0x9, 0x6, "ebe6c48aa90c9330f8"}}}, @TCF_EM_CONTAINER={0x78, 0x3, 0x0, 0x0, {{0x4, 0x0, 0xb}, "d0fa3d16cd50d147bab4e8cc66b89a2f2ddd8d0b788aa8b69311701d1c85ab32acb6397660ea603b182034545dd0bd1327d2665d5a78a956ac2ec9921388b37854565074bc2cf7610bacd71b29b6291a2dbc80bf91fea392ac67adb245b0a25f26f1ee3e931815552b"}}, @TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x1, 0x3, 0x81}, {0x10, 0xe, 0x6, 0xd4c}}}]}, @TCA_EMATCH_TREE_HDR={0x8}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}]}, @TCA_FLOW_XOR={0x8, 0x7, 0xffffff7b}, @TCA_FLOW_PERTURB={0x8}, @TCA_FLOW_DIVISOR={0x8, 0x8, 0x7fff}, @TCA_FLOW_PERTURB={0x8, 0xc, 0x1}, @TCA_FLOW_RSHIFT={0x8, 0x4, 0x5}]}}]}, 0x1c8}, 0x1, 0x0, 0x0, 0x80}, 0x20000080)
r2 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r2, &(0x7f0000001240)={0xa, 0x4e24, 0x80000001, @local, 0x4}, 0x1c) (async)
connect$inet6(r2, &(0x7f0000001240)={0xa, 0x4e24, 0x80000001, @local, 0x4}, 0x1c)
sendmmsg$inet6(r2, &(0x7f0000001980)=[{{0x0, 0x0, 0x0}}], 0x4000000000000d6, 0x4000845) (async)
sendmmsg$inet6(r2, &(0x7f0000001980)=[{{0x0, 0x0, 0x0}}], 0x4000000000000d6, 0x4000845)
socket(0x10, 0x803, 0x0) (async)
r3 = socket(0x10, 0x803, 0x0)
sendto(r3, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x6, 0x8, &(0x7f0000001f80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0xd}, 0x48) (async)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x6, 0x8, &(0x7f0000001f80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0xd}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0x20000, 0xe, 0x55, &(0x7f0000000140)="a06ad876d56a0064d082778c3938", &(0x7f0000000380)=""/85, 0x0, 0x4000000}, 0x28)
recvmmsg(r3, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400})

1.738976734s ago: executing program 0 (id=6064):
syz_open_procfs$namespace(0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000740), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010025bd7000fcdbdf254a0000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000800036d2249341fe70d0003000800"], 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r2) (async, rerun: 32)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84) (rerun: 32)
shutdown(r3, 0x0) (async)
recvmmsg(r3, &(0x7f0000005000)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/19, 0x13}, 0x3}], 0x4000169, 0x60, 0x0) (async)
listen(r2, 0x40000000) (async, rerun: 64)
sendto$inet6(r3, 0x0, 0x0, 0x4, 0x0, 0x0) (rerun: 64)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0xaf660000) (async)
r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000d00000295"], &(0x7f0000000280)='GPL\x00'}, 0x90)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000740)={r4, 0xe0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) (async)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYRES16], 0xd8}, 0x1, 0x0, 0x0, 0x8005}, 0x0)
r6 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, 0x0, &(0x7f0000000140)=0x20) (async)
r7 = socket$nl_route(0x10, 0x3, 0x0)
r8 = socket$rxrpc(0x21, 0x2, 0xa)
bind$rxrpc(r8, &(0x7f0000000000)=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e24, @multicast1}}, 0x24) (async)
bind$rxrpc(r8, &(0x7f0000000040)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0xea, 0x6, @remote, 0x8}}, 0x24) (async, rerun: 32)
sendmsg$nl_route(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=@newlink={0x5c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8003, 0x10000}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x28, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_DPORT={0x6, 0x11, 0x4e20}, @IFLA_GRE_REMOTE={0x14, 0x7, @mcast1}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e20}]}}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40}, 0x0) (rerun: 32)
ioctl$sock_TIOCINQ(r6, 0x541b, &(0x7f0000000000))

1.596959839s ago: executing program 2 (id=6068):
sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000380)={0x1c, 0x0, 0x1, 0x0, 0xfffffffe, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}]}, 0x1c}}, 0x0)
r0 = socket(0x10, 0x803, 0x0)
sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000006c80)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000880)=""/130, 0x82}, {&(0x7f0000000400)=""/13, 0xd}], 0x2}, 0x7}], 0x1, 0x2043, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffad, 0x0, 0x0, 0x0}, 0x90)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r1, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x8, @none, 0x7, 0x1}, 0xe)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[@ANYRES32=r3, @ANYRES32=r2, @ANYBLOB='\a'], 0x10)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r3, &(0x7f0000000240), &(0x7f0000000140)=@tcp6=r1}, 0x20)
pipe(&(0x7f0000000040)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
vmsplice(r5, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
recvmmsg(r4, &(0x7f0000000e40)=[{{&(0x7f0000000300)=@pptp={0x18, 0x2, {0x0, @multicast1}}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000a00)=""/66, 0x42}, {&(0x7f0000000a80)=""/77, 0x4d}], 0x2, &(0x7f0000000b00)=""/176, 0xb0}, 0x40}, {{&(0x7f0000000bc0)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, &(0x7f0000000e00)=[{&(0x7f0000000c40)=""/190, 0xbe}, {&(0x7f0000000d00)=""/160, 0xa0}, {&(0x7f0000000940)=""/16, 0x10}, {&(0x7f0000000dc0)=""/60, 0x3c}], 0x4}, 0xb}], 0x2, 0x2, &(0x7f0000000ec0)={0x0, 0x989680})
splice(r6, 0x0, r5, 0x0, 0x10000008ebc, 0x0)
write(r7, &(0x7f00000001c0)="b40ab29f61", 0x5)
splice(r4, 0x0, r7, 0x0, 0x25a5, 0x0)
sendmmsg$inet6(r1, &(0x7f0000002440)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000600)="e2", 0x1}], 0x1}}, {{0x0, 0x1, &(0x7f0000000480), 0x14}}], 0x400, 0x10)
recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400})

1.448371635s ago: executing program 0 (id=6070):
socket$igmp(0x2, 0x3, 0x2)
r0 = socket(0x40000000015, 0x5, 0x0)
connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10)
setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00006dbffc), 0x4)
bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57)
sendmsg$xdp(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f00000007c0)="ad237f1863d2d2d1a397e2a489c4ee1564e9eefdb4b79061470cc823e53d854435579529b39d744f960b8ed0bba79f9df628ff262afb11e4c03b500df2985e8f7a86f3ab28aa6e65dc1668e18aa4168755523a88d020c8955b46806d3f69f8112e948be32c675bd54ac2a8fae35dd71d00f06ab2cea8236060d1dcf3d1edf529357f70b8e066aaf93e5b32683568c00392ab3f0f8b1ac8a2ec51caacb1cc69306d814957a18b04bec4fae32726ae9013fe17948367ec6494080c4859841ebdb4d9237640caef0b7010d47901", 0xcc}, {&(0x7f0000000d80)="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", 0x3a2}, {&(0x7f0000000540)="d805d6a36cce59e7ed5a1f89dd32d02bfe653c", 0x13}], 0x3, 0x0, 0x0, 0x8004}, 0x0)
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[], 0x30}}, 0x40)
socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000))
bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1200000009000000080000000200000000000000", @ANYRES32=0x1, @ANYBLOB="0000000000000000000000bff9a3299648e7fdd7", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x300000000000000, 0x0, 0x7fffffff}, 0x0, 0x0)
ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000140)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0xffffffff, 0x0, 0x0, 0x4, 0x2, 0x1}})

1.444379014s ago: executing program 2 (id=6072):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000740), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) (async)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendmmsg$inet6(r1, &(0x7f0000002fc0)=[{{&(0x7f0000000340)={0xa, 0x4e23, 0xfffffff9, @dev={0xfe, 0x80, '\x00', 0x36}, 0x9}, 0x1c, &(0x7f00000004c0)=[{&(0x7f00000005c0)="05", 0x1}], 0x1}}, {{&(0x7f0000000500)={0xa, 0x4e22, 0x0, @remote, 0x40}, 0x1c, &(0x7f0000000b00)=[{&(0x7f00000006c0)}], 0x1}}], 0x2, 0x24000045) (async)
shutdown(r1, 0x1)
getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000000)={0x0, 0x8}, &(0x7f0000000040)=0xc) (async, rerun: 64)
r2 = socket$alg(0x26, 0x5, 0x0) (rerun: 64)
bind$alg(r2, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) (async)
r3 = socket$packet(0x11, 0x3, 0x300)
r4 = bpf$MAP_CREATE(0x0, 0x0, 0x48) (async, rerun: 64)
setsockopt$packet_int(r3, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) (async, rerun: 64)
recvmmsg(r3, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x0, 0x0) (async)
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xc3}, {}, {0xe, 0xd}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) (async)
r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1d, 0xa, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000003000000000000000000000085100000feff", @ANYRES32, @ANYBLOB="0000000000000000b702000000000000850000008600000095000000000000003eb3ea73d2baf85116411b992fc4589bbadb864f359774e31d3707059e0f39cea868f6890caab9d999434de37758f41aa249c41a8363fe3abbac5a38a6f6213f0de40cb2f07654a9926ec285ce8ea30fb9049510b3eb94fa1675fc0a81168c3f867434e250beb3ce76a7034a6256023412090314a41b15a7c60747a48d6728b3e981dbcdcf4e5a0e231ec01631182f3366804dd8dcdbcc4b31e5c3820cb7c9526d29138a"], &(0x7f0000000680)='GPL\x00', 0x9, 0x11, &(0x7f00000007c0)=""/17, 0x40f00, 0x53, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000940)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000a40)={0x5, 0x9, 0x5, 0x4}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000d80)=[r4, r4, 0xffffffffffffffff], &(0x7f0000000dc0)=[{0x5, 0x5, 0x9, 0x1}, {0x5, 0x4, 0x4, 0x7}, {0x3, 0x4, 0x0, 0x4}], 0x10, 0x5}, 0x94)
bpf$PROG_BIND_MAP(0x1c, &(0x7f0000000140)={r6, 0xffffffffffffffff, 0x24}, 0xc) (async)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000000)="0800d90700000000000000bd5656", 0xe) (async)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20008004}, 0x0) (async)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async, rerun: 32)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r9=>0x0}) (rerun: 32)
sendmsg$NL80211_CMD_SET_INTERFACE(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r8, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) (async, rerun: 64)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000700)={{r4}, &(0x7f0000000300), &(0x7f00000006c0)='%+9llu \x00'}, 0x20) (async, rerun: 64)
sendmsg$NL80211_CMD_CONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000e00)=ANY=[@ANYBLOB="14010000", @ANYRES8=r1, @ANYBLOB="050000000000000000002e00000008000300", @ANYRES32=r9, @ANYBLOB="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"], 0x114}}, 0x0) (async, rerun: 32)
syz_80211_inject_frame(&(0x7f00000002c0), &(0x7f0000000580)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @val, @void, @void, @void, @void, @void, @void}, 0x26) (rerun: 32)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) (async, rerun: 32)
nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, 0x0) (async, rerun: 32)
syz_80211_inject_frame(&(0x7f0000000240)=@broadcast, &(0x7f0000000500)=ANY=[], 0x28)

1.377096117s ago: executing program 2 (id=6073):
socket$packet(0x11, 0x3, 0x300)
socket$packet(0x11, 0x2, 0x300)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0)
syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff)
openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000001c0)={'gretap0\x00', 0x1})
socket$alg(0x26, 0x5, 0x0)
close(0xffffffffffffffff)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000500)={'syzkaller0\x00', 0x7101})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa802, 0x0)
close(r2)
socket$inet6_sctp(0xa, 0x5, 0x84)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast})
r3 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x11, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, r4, {0x7, 0xfff2}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x4000000)
recvmmsg(r5, &(0x7f0000003240)=[{{0x0, 0x0, &(0x7f0000001a80)=[{&(0x7f0000000640)=""/216, 0xd8}, {&(0x7f0000000a40)=""/4104, 0x1008}, {&(0x7f0000000740)=""/236, 0xec}], 0x3}, 0x3}], 0x1b00, 0x0, 0x0)
r6 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
listen(r6, 0x0)
r7 = socket(0x10, 0x3, 0x0)
sendto$inet6(r7, &(0x7f0000000080)="7800000018002507b9409b14ffff00000204be04020b06050e020909430009003f00064c0a0000000d0085a168d0bf46d32345653600648d0a000500eb16000049935ade4a460c89b6ec0cff3959547f509058ba86c902000000004a32000400160004000a0000000000e000e218d1ddf66ed538f2523250", 0x78, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180))
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000040)={<r8=>0x0, 0x400}, &(0x7f0000000240)=0x8)
setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, &(0x7f00000002c0)={r8, 0x7}, 0x8)
r9 = socket(0x10, 0x803, 0x0)
getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r9, 0x84, 0x1a, 0x0, 0x0)

973.139731ms ago: executing program 1 (id=6080):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r2 = socket$kcm(0x2, 0xa, 0x2)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$TIPC_NL_NET_SET(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)={0x18, r4, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x2805}, 0x0)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r1, &(0x7f0000000040)={@val={0x0, 0x200}, @void, @eth={@multicast, @empty, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x1, 0x9, 0x14, 0x67, 0x0, 0x48, 0x6, 0x0, @dev={0xac, 0x14, 0x14, 0x29}, @dev={0xac, 0x14, 0x14, 0xff}}}}}}}, 0x26)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f00000002c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000280)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWOBJ={0x58, 0x12, 0xa, 0x301, 0x0, 0x0, {0x2, 0x0, 0x5}, @NFT_OBJECT_LIMIT=@NFTA_OBJ_DATA={0x44, 0x4, 0x0, 0x1, [@NFTA_LIMIT_TYPE={0x8}, @NFTA_LIMIT_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_LIMIT_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x6}, @NFTA_LIMIT_BURST={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_LIMIT_UNIT={0xc}, @NFTA_LIMIT_BURST={0x8, 0x3, 0x1, 0x0, 0x56ea}]}}, @NFT_MSG_DELTABLE={0xa0, 0x2, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x2}, [@NFTA_TABLE_USERDATA={0x89, 0x6, "a851de85971e9fefef69b5fe4358338b82c0cdd19dbdb2cd359323693837697457eb49b17a1ec2a2be46c17ca5c53933fb3bcb1ccb93291abc49d1db63c3a9c6d2e2c15e4fd1a48845014b2050575face90f46007d147847aa5e013bef4fff6c4f63a87d000aec787bb25c2bfffeb66299db36d8025a74f522e9846113b96b68dc3fa080fb"}]}, @NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x801, 0x0, 0x0, {0x3, 0x0, 0x6}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_USERDATA={0x6, 0x6, "8b63"}]}, @NFT_MSG_DELSETELEM={0x20, 0xe, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x170, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0x9}, [@NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_RULE_EXPRESSIONS={0x114, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @lookup={{0xb}, @void}}, {0x3c, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_DREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_PAYLOAD_CSUM_TYPE={0x8, 0x6, 0x1, 0x0, 0x1}, @NFTA_PAYLOAD_SREG={0x8, 0x5, 0x1, 0x0, 0x10}, @NFTA_PAYLOAD_DREG={0x8, 0x1, 0x1, 0x0, 0x12}, @NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x5e}]}}}, {0x10, 0x1, 0x0, 0x1, @last={{0x9}, @void}}, {0x10, 0x1, 0x0, 0x1, @notrack={{0xc}, @void}}, {0x58, 0x1, 0x0, 0x1, @log={{0x8}, @val={0x4c, 0x2, 0x0, 0x1, [@NFTA_LOG_QTHRESHOLD={0x6, 0x4, 0x1, 0x0, 0x1}, @NFTA_LOG_FLAGS={0x8}, @NFTA_LOG_PREFIX={0x8, 0x2, 0x1, 0x0, 'nbd\x00'}, @NFTA_LOG_SNAPLEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_LOG_FLAGS={0x8}, @NFTA_LOG_SNAPLEN={0x8, 0x3, 0x1, 0x0, 0x80}, @NFTA_LOG_PREFIX={0xf, 0x2, 0x1, 0x0, 'ip6gretap0\x00'}, @NFTA_LOG_LEVEL={0x8, 0x5, 0x1, 0x0, 0x4}]}}}, {0x4c, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_CSUM_TYPE={0x8, 0x6, 0x1, 0x0, 0x1}, @NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0xd4}, @NFTA_PAYLOAD_CSUM_OFFSET={0x8, 0x7, 0x1, 0x0, 0x4}, @NFTA_PAYLOAD_BASE={0x8}, @NFTA_PAYLOAD_CSUM_TYPE={0x8, 0x6, 0x1, 0x0, 0x2}, @NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x7e}, @NFTA_PAYLOAD_SREG={0x8, 0x5, 0x1, 0x0, 0x4}]}}}]}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x4}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x3}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x2d8}, 0x1, 0x0, 0x0, 0x20000000}, 0x80c5)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newlink={0x64, 0x10, 0x19, 0x70bd2c, 0x25dfdbfa, {0x0, 0x0, 0x0, 0x0, 0x40da7, 0x79269}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_DPORT={0x6, 0x11, 0x4e20}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x5}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e24}]}}}, @IFLA_IFNAME={0x14, 0x3, 'ip6gretap0\x00'}]}, 0x64}, 0x1, 0x0, 0x0, 0xcc93f1266b7358bf}, 0x8040)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NBD_CMD_CONNECT(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000300)={0x3c, r8, 0x1, 0xffffffff, 0x0, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8}}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fff}]}, 0x3c}}, 0x20000000)
sendmsg$NBD_CMD_RECONFIGURE(r6, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x3c, r8, 0x10, 0x70bd2b, 0x25dfdbfb, {}, [@NBD_ATTR_BACKEND_IDENTIFIER={0xf, 0xa, 'ip6gretap0\x00'}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x2}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000010}, 0x20000000)

808.301559ms ago: executing program 1 (id=6081):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x5, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000004830000000000000fa40000007010000080020007500feff00008200"], 0x0, 0x4, 0xfa, &(0x7f00000007c0)=""/250}, 0x94)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000011c0)=@newtaction={0x14, 0x30, 0x25}, 0x14}}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
pselect6(0x40, &(0x7f0000000140)={0x5, 0x6, 0x8, 0x8, 0x0, 0x2, 0x0, 0x8}, &(0x7f0000000180)={0x9, 0x2, 0x7fff, 0x22c, 0x5, 0x0, 0xa9e, 0x7}, &(0x7f00000001c0)={0x7fffffff, 0x9, 0x81, 0xa1, 0x3, 0xff, 0x1, 0xffff}, &(0x7f0000000200)={0x77359400}, &(0x7f00000004c0)={&(0x7f0000000240)={[0xc6]}, 0x8})
sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8000}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x0)
connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2e}}, 0x10)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe8000000000"], 0xfdef)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001e80)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r3, 0x84, 0x23, &(0x7f00000000c0)={0x0, 0xe1}, 0x8)
r4 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r4, &(0x7f0000000000), 0x10)
sendmsg$can_bcm(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB="050000000000080000000001fcffff00", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x2710], 0x48}}, 0x0)
sendmsg$can_bcm(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)=ANY=[@ANYBLOB="05000000030000000000000000000000b95b3e3f4080ca00e1316795ae61f07f907dd94904bb5fa067e1dd0265d8d1b18875f163fbc7add3fcd1d89159299f", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="000000000100000000000000000000009dfc47318ccc3455"], 0x48}}, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB="4c00000002060108000034e400000000000000020500010006000000050004000000fe000900020073797a3100000000050005000200000012000300686173683a6e65742c706f7274000000ff5b3b87675a"], 0x4c}}, 0x2)
r7 = socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, 0x0, 0x0)
sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="54000000090601080000000000000000050000000900020073797a310000000005000100070000002c000780060004404e21000005000700e30000000c00018008000140850101010c000280080001"], 0x54}, 0x1, 0x0, 0x0, 0x10004893}, 0x80)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0)
write$cgroup_int(r8, &(0x7f0000000200), 0xffffffc1)
r9 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
getsockopt$llc_int(r9, 0x10c, 0x0, &(0x7f0000000100), &(0x7f0000000140)=0x4)

565.301633ms ago: executing program 0 (id=6082):
r0 = socket$l2tp(0x2, 0x2, 0x73)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x2b)
connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10)
bind$l2tp(r0, 0x0, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x8012, 0x3}, 0x48)
bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r1, 0x0, &(0x7f0000001700)=""/53}, 0x20)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000240)={0x0, &(0x7f0000000040)}, 0x10)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001740)={r1, 0x0, &(0x7f0000001700)=""/53}, 0x20)
r2 = socket$nl_route(0x10, 0x3, 0x0)
getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f00000000c0)={0x0, 0x3, 0x733, 0x2, 0x1}, &(0x7f0000000100)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x25dfdbfb, {}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x4)

504.495574ms ago: executing program 1 (id=6083):
r0 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x7d, &(0x7f0000000000)=@sack_info={0x0, 0xff, 0x10000}, 0xc)
r1 = socket(0x18, 0x0, 0x0)
r2 = socket$kcm(0x2d, 0x2, 0x0)
r3 = socket$inet6_sctp(0xa, 0x801, 0x84)
close(r2)
socket$inet_mptcp(0x2, 0x1, 0x106)
getsockopt$bt_hci(r3, 0x84, 0x1, 0x0, 0x0)
r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newtaction={0x14, 0x30, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x894}, 0x4000014)
r6 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f0000000000), 0x4)
setsockopt$netlink_NETLINK_NO_ENOBUFS(r6, 0x10e, 0x5, &(0x7f0000000040)=0x9, 0x4)
sendmsg$netlink(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000002d002100000000000000000004"], 0x1c}], 0x1}, 0x0)
ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r4, 0x8982, &(0x7f0000000000)={0x7, 'vxcan1\x00', {0x7}, 0x9})
syz_genetlink_get_family_id$tipc2(&(0x7f0000000d00), 0xffffffffffffffff)
r7 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_NL_LINK_GET(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="030700000000000000000800000068000480"], 0x7c}, 0x1, 0x0, 0x0, 0x41}, 0x0)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$IPVS_CMD_SET_CONFIG(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x1c, r10, 0x1, 0x0, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x90)
socket$vsock_stream(0x28, 0x1, 0x0)
socket$kcm(0x29, 0x2, 0x0)
r11 = socket$netlink(0x10, 0x3, 0x4)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), r11)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000100)={'ip6tnl0\x00', 0x0})

503.311036ms ago: executing program 2 (id=6084):
socketpair$unix(0x1, 0x2, 0x0, 0x0) (async)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000400080000000000000000000000001721300000000000000"], 0x48) (async)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32=<r2=>0xffffffffffffffff, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000400080000000000000000000000001721300000000000000"], 0x48)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x1f, 0x10, &(0x7f0000000880)=ANY=[@ANYBLOB="1800000040000000000000000800000018110000", @ANYRESOCT=r2, @ANYRES32=r2, @ANYRESDEC=r1, @ANYBLOB="0000000000000000b7080000020000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0xfffffffffffffee6, 0x0, 0x0, 0x39}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0xa, 0x17, &(0x7f00000003c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xff}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000001c0)='GPL\x00', 0x17, 0x14, &(0x7f0000000240)=""/20, 0x41000, 0x61, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000480)={0x1, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, r3, 0x1, &(0x7f00000004c0)=[r1], &(0x7f0000000500)=[{0x1, 0x1, 0x10, 0x5}], 0x10, 0x3}, 0x94)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r4, 0x6, 0x1, &(0x7f0000000540)=0x8, 0xfffffdcd) (async)
setsockopt$inet6_tcp_int(r4, 0x6, 0x1, &(0x7f0000000540)=0x8, 0xfffffdcd)
connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x400000, @empty}, 0x1c) (async)
connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x400000, @empty}, 0x1c)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) (async)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000280)={'veth0_vlan\x00', 0xca02})
close(r5)
socket$netlink(0x10, 0x3, 0x0) (async)
socket$netlink(0x10, 0x3, 0x0)
preadv(r6, &(0x7f0000000180)=[{&(0x7f0000000080)=""/4, 0x4}], 0x1, 0x0, 0x9)
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local})
r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000014c0)={0x34, 0x3e, 0x1, 0x80000, 0x0, {0x1}, [@typed={0x4}, @nested={0x10, 0x1, 0x0, 0x1, [@nested={0xc, 0x10, 0x0, 0x1, [@nested={0x8, 0xb, 0x0, 0x1, [@nested={0x4, 0x112}]}]}]}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x34}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) (async)
sendmsg$nl_generic(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000014c0)={0x34, 0x3e, 0x1, 0x80000, 0x0, {0x1}, [@typed={0x4}, @nested={0x10, 0x1, 0x0, 0x1, [@nested={0xc, 0x10, 0x0, 0x1, [@nested={0x8, 0xb, 0x0, 0x1, [@nested={0x4, 0x112}]}]}]}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x34}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094)
connect$bt_l2cap(r7, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe)
socket$inet6_udp(0xa, 0x2, 0x0)
r9 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$sock_bt_hidp_HIDPCONNADD(r9, 0x400448c8, &(0x7f00000000c0)={r7, r7, 0xc, 0xfffffffffffffd9d, 0x0, 0x9, 0x1, 0x5, 0x9, 0x9, 0x1, 0x1, 'syz1\x00'})
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bridge0\x00'}) (async)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bridge0\x00', <r10=>0x0})
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async)
r11 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_bt_hci(r11, 0x400448e7, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=ANY=[@ANYBLOB="50000000100003040000000000000000f2000000", @ANYRES32=0x0, @ANYBLOB="7fff0000000000002800128009000100766c616e000000001800028006000100010000000c000200540a00001800000008000500", @ANYRES32=r10], 0x50}, 0x1, 0xba01}, 0x0)
r12 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r12, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="e7ffffffffffffff0855940f", @ANYRES32=0x0, @ANYBLOB="08001b0000000000"], 0x30}, 0x1, 0x0, 0x0, 0x24000820}, 0x0) (async)
sendmsg$nl_route(r12, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="e7ffffffffffffff0855940f", @ANYRES32=0x0, @ANYBLOB="08001b0000000000"], 0x30}, 0x1, 0x0, 0x0, 0x24000820}, 0x0)

502.502501ms ago: executing program 0 (id=6085):
socket$nl_netfilter(0x10, 0x3, 0xc)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="86e39fc04cf9da1b51977b6f0c040000100001", @ANYRES32=r0, @ANYBLOB="101000000000000008000d0005000000e4031680a40001800c0007"], 0x40c}, 0x1, 0x0, 0x0, 0xc010}, 0x0)
r1 = socket$nl_rdma(0x10, 0x3, 0x14)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="60000000020603000000000000000000000000001400078008001240000000000500150001000000050001000600000005000200000015000400000000000900020073797a310000000011000300686173683a6e65742c6e6574000000000000"], 0x60}}, 0x0)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a3200"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x400c844)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x42000, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000000000)={0x0, {{0x2, 0x0, @multicast1}}}, 0x88)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1801000021000000000000000000000085"], 0x0}, 0x94)
syz_emit_ethernet(0xe2, &(0x7f0000000340)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff810000000800450000d0000000000001907864010100ac1414aa0b009078032c00004d000000000000040089000000000000e0000002862a00000000000d5e000000ff00000000000000054eb8a600129606053d0006ff00800000b61af93a93831300ac141400ffffffff7f000001e000000286480000000002074b6cefc500000cdf61168c24ac88ad078c010a2189ea43a2149b8400020012c944a6b21f22109ee302a20948fd74060011ccf0294e2a3bdb4aa40b249e8e0c1a44185600"/212], 0x0)
socket(0x10, 0x3, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYRES32=0x0, @ANYBLOB], 0x48}}, 0x10)
socket$inet6(0xa, 0x3, 0x2c)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000600)={r4, 0x20, &(0x7f00000005c0)={&(0x7f00000004c0)=""/41, 0x29, 0x0, &(0x7f0000000500)=""/132, 0x84}}, 0x10)
setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x458, 0x258, 0x4c, 0x232, 0x258, 0x0, 0x388, 0x2e8, 0x2e8, 0x388, 0x2e8, 0x3, 0x0, {[{{@ipv6={@mcast2, @mcast2, [], [], 'veth1_to_bond\x00', 'ip6gre0\x00', {}, {}, 0x6, 0x0, 0x3}, 0x0, 0x230, 0x258, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @common=@inet=@policy={{0x158}, {[{@ipv4=@dev, [], @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@ipv4, [], @ipv4=@broadcast}, {@ipv4=@multicast2, [], @ipv4=@dev}, {@ipv6=@loopback, [], @ipv6=@private2}], 0x1}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @remote}, @private1, [], [], 'team_slave_0\x00', 'xfrm0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4b8)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r6, &(0x7f0000000200), 0x806000)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0)
poll(&(0x7f00000022c0), 0x58, 0x8)
r7 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_add_memb(r7, 0x107, 0x1, &(0x7f0000000080)={0x0, 0x1, 0x6, @local}, 0x10)
setsockopt$packet_add_memb(r7, 0x107, 0x1, &(0x7f00000001c0)={0x0, 0x1, 0x6}, 0x10)

358.727247ms ago: executing program 1 (id=6086):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba)
r3 = socket$igmp(0x2, 0x3, 0x2)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'syz_tun\x00', <r4=>0x0})
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000080)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r4}, 0x94)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r2, @ANYRES16=r4], 0x3c}}, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000701feffffff00000000017c0000040042800c0001800600060090390000100002800c000300080009"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000)
r6 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=@newlink={0x20, 0x10, 0x403, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, r2, 0xff7f}}, 0x20}}, 0x0)
r7 = socket(0x1, 0x803, 0x0)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x12}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x3c}}, 0x0)
syz_open_procfs$namespace(0x0, 0x0)
sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r6, 0x0, 0x840)
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000009c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20080, 0x80e1}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0)

188.202812ms ago: executing program 2 (id=6087):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0)
r2 = gettid()
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={r2, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30)
write$cgroup_pid(r1, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba)
sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r5, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket(0x1, 0x803, 0x0)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800e0001006970366772657461700000001800028014000700fc00000000000000000000000000000008000a00", @ANYRES32=r8], 0x54}}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r9 = socket(0x1, 0x803, 0x0)
getsockname$packet(r9, 0x0, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x25dfdbfb, {}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x4)

107.122063ms ago: executing program 1 (id=6088):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', <r2=>0x0}) (async, rerun: 64)
r3 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64)
r4 = socket(0x10, 0x803, 0x0)
bind$netlink(r4, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) (async)
getsockname$packet(r4, &(0x7f0000000600)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r5, 0x1}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x4}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40040}, 0x0) (async)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket(0x1, 0x803, 0x0)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001400)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x44}}, 0x0) (async, rerun: 32)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x44800) (async, rerun: 32)
openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) (async, rerun: 32)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4400000010000108000000000000a578e99ec13f7fcb23000000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b0000000000"], 0x30}}, 0x0) (rerun: 32)

106.213473ms ago: executing program 2 (id=6089):
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
unshare(0x6a040000) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) (async)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="86e39fc04cf9da1b51977b6f0c040000100001", @ANYRES32=r0, @ANYBLOB="101000000000000008000d0005000000e4031680a40001800c0007"], 0x40c}, 0x1, 0x0, 0x0, 0xc010}, 0x0)
r1 = socket$nl_rdma(0x10, 0x3, 0x14) (async)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r3 = socket(0x1, 0x2, 0x0) (async)
r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) (async)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)=ANY=[@ANYRES32=r5, @ANYRES32=r4, @ANYBLOB='&'], 0x10) (async)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r5, &(0x7f0000000180), &(0x7f00000000c0)=@tcp6=r3}, 0x20) (async, rerun: 32)
bind$unix(r3, &(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e) (async, rerun: 32)
sendmmsg$unix(r3, &(0x7f0000001680)=[{{&(0x7f0000000380)=@file={0x1, './file0\x00'}, 0x6e, 0x0}}], 0x1, 0x0) (async)
recvmmsg(r3, &(0x7f0000000d40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000500)=""/65, 0x41}], 0x1}}], 0x2, 0x0, 0x0) (async)
ppoll(&(0x7f0000000180)=[{r3, 0x64a0}], 0x1, 0x0, 0x0, 0x0) (async)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)={0x60, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x1}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x60}}, 0x0) (async, rerun: 32)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a3200"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x400c844) (async, rerun: 32)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (async, rerun: 64)
openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x42000, 0x0) (async, rerun: 64)
setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000000000)={0x0, {{0x2, 0x0, @multicast1}}}, 0x88)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) (async)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) (async)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async)
r7 = socket$kcm(0x2, 0x3, 0x2)
ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast})
write$tun(r6, &(0x7f0000002280)=ANY=[@ANYBLOB="08000800079aec0b0002000010ff000000450affffffff00008b6c90780a030100ffffff"], 0x24) (async)
r8 = socket$isdn_base(0x22, 0x3, 0x0)
ioctl$sock_SIOCSPGRP(r8, 0x8902, &(0x7f0000002a40))
socket$kcm(0x29, 0x5, 0x0)

0s ago: executing program 1 (id=6090):
socket(0x10, 0x3, 0x0) (async)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff) (async, rerun: 32)
r0 = socket$inet_udp(0x2, 0x2, 0x0) (rerun: 32)
r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='cpuacct.usage_user\x00', 0x0, 0x0) (async)
r2 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r0}, 0x8)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0xfff7ffff, 0x10000, @value=r2}, 0x28) (async)
r3 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r4 = syz_genetlink_get_family_id$fou(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$FOU_CMD_ADD(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x34, r4, 0x1, 0x0, 0x10, {}, [@FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e22}, @FOU_ATTR_PEER_V4={0x8, 0x8, @multicast2}, @FOU_ATTR_TYPE={0x5, 0x4, 0x2}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @local}]}, 0x34}}, 0x0) (async, rerun: 32)
r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) (async, rerun: 32)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x9, 0x5, 0x200, 0x40, 0x0, 0x1}, 0x50)
bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f00000001c0)={r6, 0x0, 0x0}, 0x20)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_NEW_INTERFACE(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000540)={0x14, r5, 0x1, 0x70bd2c, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x8000) (async, rerun: 32)
bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYRESOCT=r7], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 32)
bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYRES16=0x0], 0x48)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r8, 0x0, 0x0)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETRULE(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000a80)=ANY=[@ANYBLOB="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"], 0x1a4}}, 0x0) (async)
unshare(0x62040200) (async)
r10 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r10, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) (async, rerun: 64)
setsockopt$packet_rx_ring(r10, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0xfffffffc, 0xff, 0x80000000}, 0x1c) (rerun: 64)
r11 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r11, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0xa, 0x0, 0xa1}, 0x9c) (async, rerun: 32)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r11, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c) (async, rerun: 32)
bind$inet6(r11, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendto$inet6(r11, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)

kernel console output (not intermixed with test programs):

ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  587.275369][T25438] tipc: Resetting bearer <eth:ip6gretap0>
[  587.277449][T25438] tipc: Resetting bearer <eth:ip6gretap0>
[  587.281322][T25438] 8021q: adding VLAN 0 to HW filter on device bond0
[  587.287905][T25438] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  587.651126][T25469] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  587.784340][    C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  587.809742][T25475] vlan5: entered promiscuous mode
[  587.814374][T25475] vlan5: entered allmulticast mode
[  587.859119][T25475] netlink: 48 bytes leftover after parsing attributes in process `syz.1.5179'.
[  587.862121][T25476] netlink: 48 bytes leftover after parsing attributes in process `syz.1.5179'.
[  587.874945][T25475] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5179'.
[  587.880394][T25478] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5180'.
[  587.883552][T25478] netlink: 'syz.2.5180': attribute type 1 has an invalid length.
[  588.023496][T25478] 8021q: adding VLAN 0 to HW filter on device bond68
[  588.072905][T25478] veth39: entered promiscuous mode
[  588.114679][    C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  588.264279][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  588.272881][T25489] netlink: 'syz.0.5182': attribute type 3 has an invalid length.
[  588.282983][T25491] netlink: 'syz.2.5183': attribute type 1 has an invalid length.
[  588.400178][T25500] netlink: 'syz.0.5182': attribute type 13 has an invalid length.
[  588.757976][T25520] tipc: Resetting bearer <eth:ip6gretap0>
[  588.814224][    C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  588.888837][T25527] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode
[  588.896611][T25529] ip6t_REJECT: TCP_RESET illegal for non-tcp
[  588.908329][T25529] ip6t_REJECT: TCP_RESET illegal for non-tcp
[  588.922737][T25527] mac80211_hwsim hwsim3 wlan1: left allmulticast mode
[  588.931090][T25527] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  589.215613][T25539] tipc: Resetting bearer <ib:ip6gre0>
[  589.219751][T25539] tipc: Resetting bearer <eth:ip6gretap0>
[  589.342743][T11346] lo speed is unknown, defaulting to 1000
[  589.345205][T11346] syz0: Port: 1 Link DOWN
[  589.347109][T11346] lo speed is unknown, defaulting to 1000
[  589.525486][T25552] tipc: Resetting bearer <ib:ip6gre0>
[  589.528377][T25552] tipc: Resetting bearer <eth:ip6gretap0>
[  589.530724][T25552] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  589.633502][T25556] xt_l2tp: v2 doesn't support IP mode
[  589.676622][T25552] block nbd0: server does not support multiple connections per device.
[  589.681390][T25552] block nbd0: shutting down sockets
[  589.798284][T25570] tipc: Resetting bearer <eth:ip6gre0>
[  589.800362][T25570] tipc: Resetting bearer <eth:ip6gre0>
[  589.803131][T25570] tipc: Resetting bearer <eth:ip6gretap0>
[  589.814511][T25570] tipc: Resetting bearer <eth:ip6gretap0>
[  589.819066][T25570] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  589.823654][T20528] lo speed is unknown, defaulting to 1000
[  589.830954][T20528] syz2: Port: 1 Link ACTIVE
[  589.832685][T20528] lo speed is unknown, defaulting to 1000
[  589.888465][T25576] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  589.924510][T25578] x_tables: ip6_tables: mh match: only valid for protocol 135
[  590.024350][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  590.185305][T25597] tipc: Resetting bearer <eth:ip6gretap0>
[  590.225555][T25597] mac80211_hwsim hwsim23 wlan1: left allmulticast mode
[  590.233040][T25597] gtp1: left promiscuous mode
[  590.235238][T25597] gtp1: left allmulticast mode
[  590.321635][T25604] batman_adv: batadv0: Adding interface: dummy0
[  590.327887][T25604] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active
[  590.337278][T25604] macvtap1: mtu less than device minimum
[  590.391262][T25606] batman_adv: batadv0: Removing interface: dummy0
[  590.471417][T25608] tipc: Resetting bearer <eth:ip6gretap0>
[  590.474666][T25608] tipc: Resetting bearer <eth:ip6gretap0>
[  590.478262][T25608] 8021q: adding VLAN 0 to HW filter on device bond0
[  590.481763][T25608] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  590.787216][T25624] lo speed is unknown, defaulting to 1000
[  591.004273][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  591.078769][T25624] lo speed is unknown, defaulting to 1000
[  591.334339][    C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  591.398750][T25657] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  591.432009][T25663] __nla_validate_parse: 21 callbacks suppressed
[  591.432023][T25663] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5225'.
[  591.455337][T25660] (unnamed net_device) (uninitialized): option ad_select: invalid value (34)
[  591.526840][T25667] xt_hashlimit: size too large, truncated to 1048576
[  591.603265][T25676] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5228'.
[  591.829286][T25689] netlink: 52 bytes leftover after parsing attributes in process `syz.2.5231'.
[  591.863584][T25689] lo speed is unknown, defaulting to 1000
[  591.920967][T25690] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  591.932323][T25692] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  592.027276][T25693] validate_nla: 5 callbacks suppressed
[  592.027295][T25693] netlink: 'syz.0.5232': attribute type 16 has an invalid length.
[  592.032583][T25693] netlink: 'syz.0.5232': attribute type 17 has an invalid length.
[  592.034315][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  592.091095][T25693] tipc: Resetting bearer <eth:ip6gretap0>
[  592.100464][T25694] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5232'.
[  592.114467][T25693] IPv6: NLM_F_REPLACE set, but no existing node found!
[  592.431667][T25689] lo speed is unknown, defaulting to 1000
[  592.608818][T25696] netlink: 312 bytes leftover after parsing attributes in process `syz.1.5233'.
[  592.616291][T25697] netlink: 312 bytes leftover after parsing attributes in process `syz.1.5233'.
[  592.869080][T25713] lo speed is unknown, defaulting to 1000
[  593.061397][T25713] lo speed is unknown, defaulting to 1000
[  593.144273][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  593.334227][T25722] lo speed is unknown, defaulting to 1000
[  593.374467][T25725] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5238'.
[  593.381370][T25715] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5238'.
[  593.386909][T25715] netlink: 'syz.1.5238': attribute type 11 has an invalid length.
[  593.394309][T25715] syzkaller1: entered promiscuous mode
[  593.396282][T25715] syzkaller1: entered allmulticast mode
[  593.461226][T25728] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5243'.
[  593.466352][T25728] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5243'.
[  593.472780][T25728] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check.
[  593.791308][T25722] lo speed is unknown, defaulting to 1000
[  594.080852][T25744] netlink: 'syz.2.5248': attribute type 13 has an invalid length.
[  594.083500][T25744] netlink: 'syz.2.5248': attribute type 17 has an invalid length.
[  594.086139][T25744] netlink: 'syz.2.5248': attribute type 27 has an invalid length.
[  594.103922][T25744] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  594.158793][T25744] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  594.244340][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  595.051732][T25749] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[  595.184415][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  595.379247][T25759] xt_TCPMSS: Only works on TCP SYN packets
[  596.244272][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  596.381541][T25790] vlan4: entered promiscuous mode
[  596.389171][T25791] mac80211_hwsim hwsim6 syzkaller0: left allmulticast mode
[  596.394045][T25791] openvswitch: netlink: VXLAN extension 18 out of range max 1
[  596.453231][T25793] __nla_validate_parse: 9 callbacks suppressed
[  596.453250][T25793] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5260'.
[  596.481966][T25795] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5263'.
[  596.507369][T25795] 8021q: adding VLAN 0 to HW filter on device bond70
[  596.519031][T25795] macvlan15: entered promiscuous mode
[  596.520939][T25795] macvlan15: entered allmulticast mode
[  596.523327][T25795] bond70: (slave macvlan15): Error -22 calling dev_set_mtu
[  596.567604][T25799] xt_hashlimit: size too large, truncated to 1048576
[  596.575414][T25799] xt_hashlimit: max too large, truncated to 1048576
[  596.586190][T25799] syz.0.5264: vmalloc error: size 10485760, failed to allocated page array size 20480, mode:0xcc2(GFP_KERNEL|__GFP_HIGHMEM), nodemask=(null),cpuset=/,mems_allowed=0-1
[  596.592745][T25799] CPU: 1 UID: 0 PID: 25799 Comm: syz.0.5264 Not tainted 6.16.0-rc5-syzkaller-00212-g9f735b6f8a77-dirty #0 PREEMPT(full) 
[  596.592769][T25799] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  596.592780][T25799] Call Trace:
[  596.592788][T25799]  <TASK>
[  596.592797][T25799]  dump_stack_lvl+0x189/0x250
[  596.592827][T25799]  ? __pfx_dump_stack_lvl+0x10/0x10
[  596.592845][T25799]  ? __pfx__printk+0x10/0x10
[  596.592866][T25799]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  596.592886][T25799]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  596.592906][T25799]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  596.592928][T25799]  warn_alloc+0x214/0x310
[  596.592949][T25799]  ? __pfx_warn_alloc+0x10/0x10
[  596.592970][T25799]  ? __get_vm_area_node+0x28f/0x300
[  596.592990][T25799]  ? htable_create+0xfc/0x7a0
[  596.593006][T25799]  __vmalloc_node_range_noprof+0x67e/0x12f0
[  596.593045][T25799]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  596.593068][T25799]  ? rcu_is_watching+0x15/0xb0
[  596.593087][T25799]  ? htable_create+0xfc/0x7a0
[  596.593100][T25799]  ? htable_create+0xfc/0x7a0
[  596.593111][T25799]  __kvmalloc_node_noprof+0x3b8/0x5f0
[  596.593134][T25799]  ? htable_create+0xfc/0x7a0
[  596.593146][T25799]  ? hashlimit_pernet+0x23/0x240
[  596.593165][T25799]  htable_create+0xfc/0x7a0
[  596.593186][T25799]  hashlimit_mt_check_common+0x719/0xa10
[  596.593209][T25799]  hashlimit_mt_check_v1+0x221/0x360
[  596.593227][T25799]  ? __pfx_hashlimit_mt_check_v1+0x10/0x10
[  596.593247][T25799]  ? xt_find_match+0x1f7/0x250
[  596.593275][T25799]  xt_check_match+0x3d1/0xab0
[  596.593322][T25799]  ? __pfx___mutex_lock+0x10/0x10
[  596.593342][T25799]  ? __pfx_xt_check_match+0x10/0x10
[  596.593364][T25799]  ? pcpu_alloc_noprof+0xfdd/0x16b0
[  596.593392][T25799]  ? xt_find_match+0x1f7/0x250
[  596.593425][T25799]  translate_table+0x1553/0x2040
[  596.593467][T25799]  ? __pfx_translate_table+0x10/0x10
[  596.593489][T25799]  ? __might_fault+0xb0/0x130
[  596.593526][T25799]  ? _copy_from_user+0x94/0xb0
[  596.593553][T25799]  do_ip6t_set_ctl+0x970/0xce0
[  596.593580][T25799]  ? rcu_is_watching+0x15/0xb0
[  596.593598][T25799]  ? __pfx_do_ip6t_set_ctl+0x10/0x10
[  596.593635][T25799]  ? __pfx___mutex_lock+0x10/0x10
[  596.593651][T25799]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  596.593686][T25799]  ? __lock_acquire+0xab9/0xd20
[  596.593707][T25799]  nf_setsockopt+0x26f/0x290
[  596.593735][T25799]  rawv6_setsockopt+0x23b/0x5b0
[  596.593754][T25799]  ? __pfx_rawv6_setsockopt+0x10/0x10
[  596.593768][T25799]  ? aa_sock_opt_perm+0x74/0x110
[  596.593786][T25799]  ? sock_common_setsockopt+0x36/0xc0
[  596.593804][T25799]  ? __pfx_sock_common_setsockopt+0x10/0x10
[  596.593823][T25799]  do_sock_setsockopt+0x17c/0x1b0
[  596.593848][T25799]  __x64_sys_setsockopt+0x13f/0x1b0
[  596.593873][T25799]  do_syscall_64+0xfa/0x3b0
[  596.593893][T25799]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  596.593907][T25799]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  596.593926][T25799]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  596.593940][T25799] RIP: 0033:0x7fb49878e9a9
[  596.593956][T25799] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  596.593968][T25799] RSP: 002b:00007fb499605038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  596.593985][T25799] RAX: ffffffffffffffda RBX: 00007fb4989b6080 RCX: 00007fb49878e9a9
[  596.593996][T25799] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000009
[  596.594004][T25799] RBP: 00007fb498810d69 R08: 0000000000000358 R09: 0000000000000000
[  596.594013][T25799] R10: 0000200000000b00 R11: 0000000000000246 R12: 0000000000000000
[  596.594023][T25799] R13: 0000000000000000 R14: 00007fb4989b6080 R15: 00007ffe03f82f78
[  596.594047][T25799]  </TASK>
[  596.594054][T25799] Mem-Info:
[  596.600686][T25805] xt_hashlimit: overflow, try lower: 6/0
[  596.615959][T25799] active_anon:3488 inactive_anon:146 isolated_anon:0
[  596.615959][T25799]  active_file:990 inactive_file:26548 isolated_file:0
[  596.615959][T25799]  unevictable:1768 dirty:104 writeback:0
[  596.615959][T25799]  slab_reclaimable:6373 slab_unreclaimable:261554
[  596.615959][T25799]  mapped:17973 shmem:2209 pagetables:936
[  596.615959][T25799]  sec_pagetables:0 bounce:0
[  596.615959][T25799]  kernel_misc_reclaimable:0
[  596.615959][T25799]  free:97446 free_pcp:25563 free_cma:0
[  596.760746][T25799] Node 0 active_anon:12756kB inactive_anon:32kB active_file:2796kB inactive_file:105696kB unevictable:3384kB isolated(anon):60kB isolated(file):0kB mapped:42164kB dirty:336kB writeback:0kB shmem:4864kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:7088kB pagetables:2248kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  596.773542][T25799] Node 1 active_anon:972kB inactive_anon:552kB active_file:1164kB inactive_file:496kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:29648kB dirty:80kB writeback:0kB shmem:3904kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10768kB pagetables:1364kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  596.785842][T25799] Node 0 DMA free:6776kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:392kB local_pcp:0kB free_cma:0kB
[  596.801341][T25799] lowmem_reserve[]: 0 812 812 812 812
[  596.803790][T25799] Node 0 DMA32 free:156504kB boost:0kB min:33656kB low:42068kB high:50480kB reserved_highatomic:0KB free_highatomic:0KB active_anon:12756kB inactive_anon:32kB active_file:2796kB inactive_file:105628kB unevictable:3520kB writepending:336kB present:1556484kB managed:831988kB mlocked:0kB bounce:0kB free_pcp:41824kB local_pcp:13744kB free_cma:0kB
[  596.816142][T25799] lowmem_reserve[]: 0 0 0 0 0
[  596.818280][T25799] Node 1 DMA32 free:142132kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:4096KB free_highatomic:4096KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:9284kB local_pcp:1092kB free_cma:0kB
[  596.828745][T25799] lowmem_reserve[]: 0 0 854 854 854
[  596.830368][T25799] Node 1 Normal free:83572kB boost:0kB min:36616kB low:45768kB high:54920kB reserved_highatomic:0KB free_highatomic:0KB active_anon:1040kB inactive_anon:552kB active_file:1164kB inactive_file:496kB unevictable:3536kB writepending:80kB present:1048576kB managed:875016kB mlocked:0kB bounce:0kB free_pcp:51740kB local_pcp:33892kB free_cma:0kB
[  596.840488][T25799] lowmem_reserve[]: 0 0 0 0 0
[  596.843912][T25799] Node 0 DMA: 0*4kB 1*8kB (U) 1*16kB (U) 3*32kB (U) 0*64kB 4*128kB (U) 4*256kB (U) 4*512kB (U) 1*1024kB (U) 1*2048kB (M) 0*4096kB = 6776kB
[  596.850197][T25799] Node 0 DMA32: 35*4kB (ME) 738*8kB (UME) 927*16kB (UME) 730*32kB (UME) 369*64kB (UME) 227*128kB (UME) 62*256kB (UME) 43*512kB (UME) 11*1024kB (UM) 2*2048kB (M) 1*4096kB (M) 
[  596.850334][T25812] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5267'.
[  596.855846][T25799] = 154252kB
[  596.860445][T25799] Node 1 DMA32: 3*4kB (UM) 3*8kB (UM) 3*16kB (ME) 3*32kB (UM) 2*64kB (M) 2*128kB (ME) 5*256kB (UME) 4*512kB (UME) 3*1024kB (ME) 2*2048kB (UE) 32*4096kB (UMH) = 142132kB
[  596.866288][T25799] Node 1 Normal: 771*4kB (UME) 397*8kB (UME) 454*16kB (UM) 39*32kB (UM) 13*64kB (UME) 41*128kB (UME) 35*256kB (UME) 33*512kB (UM) 16*1024kB (UME) 6*2048kB (M) 2*4096kB (U) = 83572kB
[  596.867353][T25812] 8021q: adding VLAN 0 to HW filter on device bond1
[  596.872174][T25799] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  596.878592][T25813] bond1: option mode: unable to set because the bond device is up
[  596.878707][T25799] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  596.885614][T25799] 29916 total pagecache pages
[  596.887477][T25799] 186 pages in swap cache
[  596.889008][T25799] Free swap  = 120428kB
[  596.890295][T25799] Total swap = 124996kB
[  596.891543][T25799] 786301 pages RAM
[  596.892635][T25799] 0 pages HighMem/MovableOnly
[  596.893140][T25812] bond1: (slave macvlan15): Error -22 calling dev_set_mtu
[  596.894828][T25799] 241056 pages reserved
[  596.898972][T25799] 0 pages cma reserved
[  596.942534][T25813] bond0: (slave wlan1): Releasing backup interface
[  597.042645][T25817] lo speed is unknown, defaulting to 1000
[  597.162306][T25817] lo speed is unknown, defaulting to 1000
[  597.242342][T25821] lo speed is unknown, defaulting to 1000
[  597.304440][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  597.427796][T25821] lo speed is unknown, defaulting to 1000
[  597.893963][T25826] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5272'.
[  597.902034][T25826] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5272'.
[  597.995795][T25837] netlink: 'syz.2.5273': attribute type 4 has an invalid length.
[  598.001903][T25837] netlink: 'syz.2.5273': attribute type 4 has an invalid length.
[  598.032381][ T5889] lo speed is unknown, defaulting to 1000
[  598.034915][ T5889] syz0: Port: 1 Link ACTIVE
[  598.040029][T20528] lo speed is unknown, defaulting to 1000
[  598.384291][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  598.522457][T25863] can: request_module (can-proto-0) failed.
[  598.555403][T25861] bond1: option mode: unable to set because the bond device is up
[  598.595282][T25866] netlink: 96 bytes leftover after parsing attributes in process `syz.1.5282'.
[  598.614872][T25861] bond1: (slave macvlan15): Error -22 calling dev_set_mtu
[  598.645419][T25866] vlan5: entered allmulticast mode
[  598.647587][T25866] erspan0: entered allmulticast mode
[  599.199976][T25882] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5285'.
[  599.245133][T25880] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5284'.
[  599.404471][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  599.467249][T25880] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5284'.
[  599.620874][T25893] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode
[  599.623920][T25893] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode
[  599.637601][T25893] tipc: Resetting bearer <eth:syzkaller0>
[  600.003981][T25910] 8021q: adding VLAN 0 to HW filter on device bond0
[  600.016472][T25910] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  600.028049][T25908] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5293'.
[  600.088608][T25918] tipc: Resetting bearer <eth:ip6gre0>
[  600.090586][T25918] tipc: Resetting bearer <eth:ip6gretap0>
[  600.273598][T25927] netlink: 'syz.0.5298': attribute type 13 has an invalid length.
[  600.278955][T25927] netlink: 'syz.0.5298': attribute type 17 has an invalid length.
[  600.288188][T25927] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  600.331485][T25927] lo speed is unknown, defaulting to 1000
[  600.334313][    C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  600.464447][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  600.506759][T25927] lo speed is unknown, defaulting to 1000
[  600.508564][T25928] lo speed is unknown, defaulting to 1000
[  600.644302][    C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  600.824572][T25928] lo speed is unknown, defaulting to 1000
[  600.857845][T25933] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  600.884670][    T9] lo speed is unknown, defaulting to 1000
[  600.886667][    T9] syz0: Port: 1 Link DOWN
[  600.888194][    T9] lo speed is unknown, defaulting to 1000
[  600.913449][T25935] tipc: Resetting bearer <eth:ip6gre0>
[  600.921537][T25935] tipc: Resetting bearer <eth:ip6gretap0>
[  600.941495][T25935] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  600.962235][T20528] lo speed is unknown, defaulting to 1000
[  600.965475][T20528] syz2: Port: 1 Link DOWN
[  600.969471][T20528] lo speed is unknown, defaulting to 1000
[  601.347372][T25953] netlink: 'syz.1.5305': attribute type 1 has an invalid length.
[  601.374290][    C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  601.634328][    C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  601.730796][T25975] __nla_validate_parse: 2 callbacks suppressed
[  601.730816][T25975] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5308'.
[  601.839426][T25977] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5310'.
[  601.922222][T25978] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5310'.
[  601.945533][    T9] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  602.382583][T25980] netlink: 'syz.1.5311': attribute type 13 has an invalid length.
[  602.386433][T25980] netlink: 'syz.1.5311': attribute type 17 has an invalid length.
[  602.407746][T25980] tipc: Resetting bearer <eth:ip6gre0>
[  602.410402][T25980] tipc: Resetting bearer <eth:ip6gre0>
[  602.414449][    C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  602.419060][T25980] tipc: Resetting bearer <eth:ip6gretap0>
[  602.421426][T25980] tipc: Resetting bearer <eth:ip6gretap0>
[  602.424687][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  602.429544][T25980] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  602.438068][    T9] lo speed is unknown, defaulting to 1000
[  602.442059][    T9] syz2: Port: 1 Link ACTIVE
[  602.447463][    T9] lo speed is unknown, defaulting to 1000
[  602.470864][T25980] lo speed is unknown, defaulting to 1000
[  602.539953][T25981] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  602.610220][T25991] netlink: 'syz.2.5312': attribute type 13 has an invalid length.
[  602.612905][T25991] netlink: 'syz.2.5312': attribute type 17 has an invalid length.
[  602.682747][T25991] 8021q: adding VLAN 0 to HW filter on device bond0
[  602.740881][T25991] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  602.745952][   T10] lo speed is unknown, defaulting to 1000
[  602.749238][T25980] lo speed is unknown, defaulting to 1000
[  602.782083][T26000] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5312'.
[  602.802689][T26000] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  602.814301][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  602.834644][   T10] syz0: Port: 1 Link ACTIVE
[  602.836641][   T10] lo speed is unknown, defaulting to 1000
[  602.867136][T26002] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5315'.
[  602.884905][T25994] lo speed is unknown, defaulting to 1000
[  602.902792][T25991] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  602.974318][    C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  603.039476][T26004] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5316'.
[  603.052193][T26004] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5316'.
[  603.141911][T25994] lo speed is unknown, defaulting to 1000
[  603.156548][T26010] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5317'.
[  603.299237][ T5868] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  603.454268][    C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  603.584266][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  603.929101][T26015] netlink: 'syz.1.5318': attribute type 13 has an invalid length.
[  603.939510][T26015] netlink: 'syz.1.5318': attribute type 17 has an invalid length.
[  603.953796][T26015] tipc: Resetting bearer <eth:ip6gre0>
[  603.959107][T26015] tipc: Resetting bearer <eth:ip6gretap0>
[  604.002363][T26015] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  604.318975][T26026] sctp: [Deprecated]: syz.2.5323 (pid 26026) Use of int in max_burst socket option.
[  604.318975][T26026] Use struct sctp_assoc_value instead
[  604.374304][T26034] mac80211_hwsim hwsim23 wlan1: entered allmulticast mode
[  604.614969][T26047] IPv6: NLM_F_REPLACE set, but no existing node found!
[  604.640682][T26049] netlink: 'syz.0.5327': attribute type 10 has an invalid length.
[  604.675957][T26051] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[  604.690058][T26054] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5330'.
[  604.775677][T26059] netlink: 'syz.0.5331': attribute type 5 has an invalid length.
[  605.095292][T26076] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5337'.
[  605.192779][T26087] tipc: Enabling of bearer <ib:ip6gre0> rejected, max 3 bearers permitted
[  605.363336][T26105] netlink: 'syz.1.5342': attribute type 1 has an invalid length.
[  605.437895][T26105] 8021q: adding VLAN 0 to HW filter on device bond72
[  605.534530][T26105] veth25: entered promiscuous mode
[  605.542441][T26105] bond72: (slave veth25): Enslaving as an active interface with a down link
[  605.548813][T26113] netlink: 'syz.0.5343': attribute type 5 has an invalid length.
[  605.655175][T26115] tipc: Resetting bearer <eth:ip6gre0>
[  605.657149][T26115] tipc: Resetting bearer <eth:ip6gretap0>
[  605.660892][T26115] bond72: (slave veth25): Releasing active interface
[  605.673325][T26115] netlink: 'syz.1.5344': attribute type 10 has an invalid length.
[  605.760307][T26122] lo speed is unknown, defaulting to 1000
[  605.816280][T26127] tipc: Resetting bearer <eth:ip6gre0>
[  605.818652][T26127] tipc: Resetting bearer <eth:ip6gretap0>
[  605.828668][T26127] tipc: Resetting bearer <eth:ip6gre0>
[  605.830627][T26127] tipc: Resetting bearer <eth:ip6gretap0>
[  605.836483][T26127] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  605.909193][T26129] tipc: Resetting bearer <ib:ip6gre0>
[  605.912513][T26129] tipc: Resetting bearer <eth:ip6gretap0>
[  605.931322][T26129] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  605.944891][    T9] lo speed is unknown, defaulting to 1000
[  605.952485][    T9] syz0: Port: 1 Link DOWN
[  605.953931][    T9] lo speed is unknown, defaulting to 1000
[  605.986518][T26137] (unnamed net_device) (uninitialized): option lacp_rate: mode dependency failed, not supported in mode balance-rr(0)
[  606.039869][T26122] lo speed is unknown, defaulting to 1000
[  606.654362][    C1] ip6_tnl_xmit_ctl: 10 callbacks suppressed
[  606.654378][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  606.914309][    C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  607.154522][T26162] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode
[  607.218335][T26162] __nla_validate_parse: 6 callbacks suppressed
[  607.218354][T26162] netlink: 72 bytes leftover after parsing attributes in process `syz.2.5355'.
[  607.228938][T26162] netlink: 72 bytes leftover after parsing attributes in process `syz.2.5355'.
[  607.233406][T26168] tipc: Resetting bearer <eth:syzkaller0>
[  607.247514][T26162] netlink: 'syz.2.5355': attribute type 10 has an invalid length.
[  607.254443][T26162] mac80211_hwsim hwsim3 wlan1: left allmulticast mode
[  607.281469][T26162] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  607.383238][T26176] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5357'.
[  607.635137][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  608.717560][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  608.902705][T26187] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5361'.
[  608.993249][T26197] 8021q: adding VLAN 0 to HW filter on device bond0
[  608.998764][T26197] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  609.003638][   T10] lo speed is unknown, defaulting to 1000
[  609.008879][   T10] syz0: Port: 1 Link ACTIVE
[  609.010876][   T10] lo speed is unknown, defaulting to 1000
[  609.014251][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  609.018341][T26199] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5364'.
[  609.036836][   T10] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  609.056241][T26203] xt_hashlimit: size too large, truncated to 1048576
[  609.086673][   T10] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  609.093251][T26208] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5367'.
[  609.101799][T26208] netlink: 116 bytes leftover after parsing attributes in process `syz.2.5367'.
[  609.112229][T26209] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  609.207640][T26217] tipc: Enabling of bearer <udp:syz1> rejected, max 3 bearers permitted
[  609.217087][T26219] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5371'.
[  609.286512][ T5868] nci: nci_rf_intf_activated_ntf_packet: unsupported rf_interface 0xea
[  609.365150][T26231] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  609.390150][T26232] mac80211_hwsim hwsim3 syzkaller0: left promiscuous mode
[  609.394465][T26232] mac80211_hwsim hwsim3 syzkaller0: left allmulticast mode
[  609.397910][T26232] tipc: Resetting bearer <eth:syzkaller0>
[  609.468540][T26233] bond0: (slave wlan1): Releasing backup interface
[  609.486296][T11346] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  609.506844][T26233] tipc: Resetting bearer <eth:syzkaller0>
[  609.539599][T26235] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5375'.
[  609.543194][T26235] netlink: 68 bytes leftover after parsing attributes in process `syz.1.5375'.
[  609.547406][T26235] netlink: 'syz.1.5375': attribute type 1 has an invalid length.
[  609.630728][T26237] 8021q: adding VLAN 0 to HW filter on device bond73
[  609.694788][ T5728] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  610.196260][T26239] tipc: Resetting bearer <eth:ip6gretap0>
[  610.198821][T26239] tipc: Resetting bearer <eth:ip6gretap0>
[  610.308082][T26239] tipc: Resetting bearer <eth:ip6gretap0>
[  610.511327][T26260] tipc: Resetting bearer <eth:ip6gre0>
[  610.517923][T26260] tipc: Resetting bearer <eth:ip6gretap0>
[  610.535332][T11346] lo speed is unknown, defaulting to 1000
[  610.536654][T26263] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  610.537814][T11346] syz2: Port: 1 Link DOWN
[  610.542836][T11346] lo speed is unknown, defaulting to 1000
[  610.645825][T26271] syzkaller1: entered promiscuous mode
[  610.648075][T26271] syzkaller1: entered allmulticast mode
[  611.220706][T26296] netlink: 'syz.0.5391': attribute type 13 has an invalid length.
[  611.223421][T26296] netlink: 'syz.0.5391': attribute type 17 has an invalid length.
[  611.234461][T26296] tipc: Resetting bearer <eth:ip6gretap0>
[  611.237873][T26296] 8021q: adding VLAN 0 to HW filter on device bond0
[  611.242916][T26296] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  611.371350][T26305] tipc: Resetting bearer <eth:ip6gretap0>
[  611.382274][T26305] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  611.549195][T26308] tipc: Resetting bearer <eth:ip6gretap0>
[  611.972488][T26333] tipc: Resetting bearer <ib:ip6gre0>
[  611.979306][T26333] tipc: Resetting bearer <eth:ip6gretap0>
[  611.989415][T26333] tipc: Resetting bearer <eth:syzkaller0>
[  611.994022][T20528] lo speed is unknown, defaulting to 1000
[  611.996525][T20528] syz0: Port: 1 Link DOWN
[  611.998197][T20528] lo speed is unknown, defaulting to 1000
[  612.138534][T26345] lo speed is unknown, defaulting to 1000
[  612.262440][T26350] lo speed is unknown, defaulting to 1000
[  612.266331][T26345] lo speed is unknown, defaulting to 1000
[  612.424370][T26348] lo speed is unknown, defaulting to 1000
[  612.445909][T26350] lo speed is unknown, defaulting to 1000
[  612.461641][T26356] netlink: 'syz.0.5407': attribute type 1 has an invalid length.
[  612.505089][T26356] 8021q: adding VLAN 0 to HW filter on device bond71
[  612.583289][T26359] netlink: 'syz.0.5408': attribute type 1 has an invalid length.
[  612.587633][T26359] __nla_validate_parse: 8 callbacks suppressed
[  612.587648][T26359] netlink: 224 bytes leftover after parsing attributes in process `syz.0.5408'.
[  612.738712][T26365] netlink: 'syz.0.5409': attribute type 13 has an invalid length.
[  612.767477][T26365] tipc: Resetting bearer <eth:ip6gretap0>
[  612.769506][T26365] tipc: Resetting bearer <eth:ip6gretap0>
[  612.772262][T26365] 8021q: adding VLAN 0 to HW filter on device bond0
[  612.778358][T26365] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  612.808631][T26367] tipc: Resetting bearer <eth:ip6gre0>
[  612.810849][T26367] tipc: Resetting bearer <eth:ip6gre0>
[  612.827449][T26367] tipc: Resetting bearer <eth:ip6gretap0>
[  612.830096][T26367] tipc: Resetting bearer <eth:ip6gretap0>
[  612.837505][T26367] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  612.848453][T20528] lo speed is unknown, defaulting to 1000
[  612.850452][T20528] syz2: Port: 1 Link ACTIVE
[  612.856040][T26369] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5411'.
[  612.865971][T26369] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5411'.
[  612.884302][    C1] ip6_tnl_xmit_ctl: 10 callbacks suppressed
[  612.884319][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  612.917689][T26348] lo speed is unknown, defaulting to 1000
[  612.920181][T20528] lo speed is unknown, defaulting to 1000
[  613.074362][    C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  613.084697][T26375] tipc: Resetting bearer <eth:ip6gretap0>
[  613.436624][T26381] lo speed is unknown, defaulting to 1000
[  613.597003][T26391] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5418'.
[  613.934490][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  613.973877][T26381] lo speed is unknown, defaulting to 1000
[  614.083038][T26404] lo speed is unknown, defaulting to 1000
[  614.134347][T26406] netlink: 'syz.0.5421': attribute type 13 has an invalid length.
[  614.136781][T26406] netlink: 'syz.0.5421': attribute type 17 has an invalid length.
[  614.177397][T26406] tipc: Resetting bearer <eth:ip6gretap0>
[  614.179350][T26406] tipc: Resetting bearer <eth:ip6gretap0>
[  614.181692][T26406] 8021q: adding VLAN 0 to HW filter on device bond0
[  614.204279][T26406] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  614.545641][T26404] lo speed is unknown, defaulting to 1000
[  614.914335][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  616.004422][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  616.041960][T26419] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 20001 - 0
[  616.048860][T26419] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 20001 - 0
[  616.052089][T26419] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 20001 - 0
[  616.055661][T26419] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 20001 - 0
[  616.067867][T26419] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.5425'.
[  616.077587][T26419] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5425'.
[  616.083972][T26419] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5425'.
[  616.094820][T26419] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5425'.
[  616.160275][T26421] vlan3: entered allmulticast mode
[  616.298012][T26435] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5430'.
[  616.300828][T26435] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5430'.
[  616.331513][T26424] tipc: Resetting bearer <eth:ip6gre0>
[  616.344344][T26424] tipc: Resetting bearer <eth:ip6gretap0>
[  616.545142][T26465] netlink: 'syz.2.5437': attribute type 9 has an invalid length.
[  616.548160][T26465] netlink: 'syz.2.5437': attribute type 6 has an invalid length.
[  616.614803][T26465] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 20001 - 0
[  616.618307][T26465] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 20001 - 0
[  616.625088][T26465] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 20001 - 0
[  616.629686][T26465] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 20001 - 0
[  616.675403][T26470] tipc: Resetting bearer <eth:ip6gretap0>
[  616.702596][T26474] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  616.710959][T26470] mac80211_hwsim hwsim23 wlan1: left allmulticast mode
[  616.773662][T26477] netlink: 'syz.0.5440': attribute type 1 has an invalid length.
[  616.824719][T26477] bond72: (slave gretap1): making interface the new active one
[  616.827657][T26477] bond72: (slave gretap1): Enslaving as an active interface with an up link
[  616.831389][T26477] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  616.840007][T26477] vlan3: entered allmulticast mode
[  616.841750][T26477] bond72: entered allmulticast mode
[  616.843382][T26477] gretap1: entered allmulticast mode
[  616.846320][T26477] bond72: (slave vlan3): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  617.064294][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  617.107700][T26500] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[  617.220823][T26502] netlink: 'syz.0.5447': attribute type 16 has an invalid length.
[  617.223442][T26502] netlink: 'syz.0.5447': attribute type 17 has an invalid length.
[  617.252772][T26502] 8021q: adding VLAN 0 to HW filter on device bond0
[  617.257838][T26502] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  617.275593][    T9] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  617.346167][T26504] 8021q: adding VLAN 0 to HW filter on device bond1
[  617.369945][T26506] 8021q: adding VLAN 0 to HW filter on device macvlan17
[  617.377411][T26506] bond1: (slave macvlan17): Enslaving as a backup interface with a down link
[  617.388703][T26505] bond1: (slave macvlan18): Error -98 calling set_mac_address
[  617.399102][T26504] tipc: Resetting bearer <eth:ip6gre0>
[  617.401598][T26504] tipc: Resetting bearer <eth:ip6gretap0>
[  617.408046][T26504] bond1: (slave macvlan17): Releasing backup interface
[  617.704607][T11346] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  617.804647][T26511] __nla_validate_parse: 10 callbacks suppressed
[  617.804659][T26511] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5451'.
[  617.891163][T26522] netlink: 72 bytes leftover after parsing attributes in process `syz.2.5452'.
[  618.014285][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  618.106316][T26522] xt_hashlimit: size too large, truncated to 1048576
[  618.111059][T26538] netlink: 'syz.0.5455': attribute type 1 has an invalid length.
[  618.151404][T26538] bond72: (slave gretap1): Releasing active interface
[  618.154070][T26538] gretap1: left allmulticast mode
[  618.159162][T26542] netlink: 5 bytes leftover after parsing attributes in process `syz.1.5456'.
[  618.173653][T26543] netlink: 'syz.1.5456': attribute type 13 has an invalid length.
[  618.180585][T26542] netlink: 'syz.1.5456': attribute type 13 has an invalid length.
[  618.189184][    T9] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  618.194899][T26542] netlink: 'syz.1.5456': attribute type 17 has an invalid length.
[  618.202772][T26543] netlink: 'syz.1.5456': attribute type 17 has an invalid length.
[  618.220054][T26543] tipc: Resetting bearer <eth:ip6gre0>
[  618.222422][T26543] tipc: Resetting bearer <eth:ip6gre0>
[  618.237383][T26543] tipc: Resetting bearer <eth:ip6gretap0>
[  618.239881][T26543] tipc: Resetting bearer <eth:ip6gretap0>
[  618.245177][T26543] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  618.253088][T26542] tipc: Resetting bearer <eth:ip6gre0>
[  618.257090][T26542] tipc: Resetting bearer <eth:ip6gretap0>
[  618.261508][T26542] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  618.360802][T26549] tipc: Resetting bearer <eth:ip6gre0>
[  618.363069][T26549] tipc: Resetting bearer <eth:ip6gre0>
[  618.377341][T26549] tipc: Resetting bearer <eth:ip6gretap0>
[  618.379868][T26549] tipc: Resetting bearer <eth:ip6gretap0>
[  618.417969][ T5867] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  618.478475][T26556] NCSI netlink: No device for ifindex 0
[  618.504920][    T9] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  618.551503][T20528] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  618.654237][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  618.720361][T26577] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode
[  618.833810][T26581] mac80211_hwsim hwsim3 wlan1: left allmulticast mode
[  618.855951][T26581] bond0: (slave wlan1): refused to change device type
[  618.876351][T26581] x_tables: ip_tables: owner match: used from hooks PREROUTING, but only valid from OUTPUT/POSTROUTING
[  619.114363][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  619.314493][    C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  619.374351][T20528] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  619.678041][T26599] can: request_module (can-proto-0) failed.
[  619.694318][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  620.250951][T26613] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5473'.
[  620.306642][T26615] tipc: Resetting bearer <eth:ip6gre0>
[  620.309218][T26615] tipc: Resetting bearer <eth:ip6gretap0>
[  620.319066][T26617] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5470'.
[  620.329208][T20528] lo speed is unknown, defaulting to 1000
[  620.333353][T20528] syz2: Port: 1 Link DOWN
[  620.342202][T20528] lo speed is unknown, defaulting to 1000
[  620.363448][T26615] can: request_module (can-proto-0) failed.
[  620.369481][T26624] openvswitch: netlink: IP tunnel attribute has 69 unknown bytes.
[  620.435619][T26631] netlink: 48 bytes leftover after parsing attributes in process `syz.0.5475'.
[  620.458203][T26631] tipc: Resetting bearer <eth:syzkaller0>
[  620.522790][T26639] tipc: Resetting bearer <eth:ip6gre0>
[  620.531748][T26639] tipc: Resetting bearer <eth:ip6gretap0>
[  620.541356][T26639] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  620.549053][T20528] lo speed is unknown, defaulting to 1000
[  620.551090][T20528] syz2: Port: 1 Link ACTIVE
[  620.553804][T20528] lo speed is unknown, defaulting to 1000
[  620.563583][T26637] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5479'.
[  620.580054][T26639] lo speed is unknown, defaulting to 1000
[  620.633384][T26647] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  620.691796][T26647] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  620.719821][T26639] lo speed is unknown, defaulting to 1000
[  620.755482][T26647] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  620.921134][T26664] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5484'.
[  621.309955][T26677] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5490'.
[  621.366416][T26679] lo speed is unknown, defaulting to 1000
[  621.380704][T26680] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5490'.
[  621.679493][T26684] ipt_ECN: cannot use operation on non-tcp rule
[  621.708230][T26684] IPVS: set_ctl: invalid protocol: 44 172.20.20.187:20002
[  621.759910][T26679] lo speed is unknown, defaulting to 1000
[  621.795630][T26688] validate_nla: 7 callbacks suppressed
[  621.795646][T26688] netlink: 'syz.1.5493': attribute type 1 has an invalid length.
[  621.813602][T26688] workqueue: Failed to create a rescuer kthread for wq "bond74": -EINTR
[  621.888023][T26681] syzkaller1: entered promiscuous mode
[  621.897954][T26681] syzkaller1: entered allmulticast mode
[  621.958459][T26694] netlink: 'syz.1.5494': attribute type 1 has an invalid length.
[  621.981861][T26694] 8021q: adding VLAN 0 to HW filter on device bond74
[  622.235824][T26703] xt_time: invalid argument - start or stop time greater than 23:59:59
[  622.290891][T26704] vlan6: entered allmulticast mode
[  622.717894][T26715] tipc: Resetting bearer <eth:ip6gre0>
[  622.721247][T26715] tipc: Resetting bearer <eth:ip6gretap0>
[  622.771313][   T24] lo speed is unknown, defaulting to 1000
[  622.773614][   T24] syz2: Port: 1 Link DOWN
[  622.785322][   T24] lo speed is unknown, defaulting to 1000
[  623.313168][T26722] netlink: 'syz.0.5503': attribute type 1 has an invalid length.
[  623.321397][T26722] netlink: 'syz.0.5503': attribute type 10 has an invalid length.
[  623.327772][T26722] __nla_validate_parse: 4 callbacks suppressed
[  623.327786][T26722] netlink: 236 bytes leftover after parsing attributes in process `syz.0.5503'.
[  623.527384][T26734] netlink: 'syz.1.5505': attribute type 13 has an invalid length.
[  623.535606][T26734] netlink: 'syz.1.5505': attribute type 17 has an invalid length.
[  623.546634][T26734] tipc: Resetting bearer <eth:ip6gre0>
[  623.549222][T26734] tipc: Resetting bearer <eth:ip6gretap0>
[  623.558621][T26734] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  623.565151][T20528] lo speed is unknown, defaulting to 1000
[  623.567765][T20528] syz2: Port: 1 Link ACTIVE
[  623.569974][T20528] lo speed is unknown, defaulting to 1000
[  623.623730][T26734] lo speed is unknown, defaulting to 1000
[  623.757454][T26743] xt_ecn: cannot match TCP bits for non-tcp packets
[  623.758806][T26740] tipc: Resetting bearer <eth:ip6gretap0>
[  623.769132][T26743] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5509'.
[  623.790319][T26743] xt_hashlimit: size too large, truncated to 1048576
[  623.807415][T26740] tipc: Resetting bearer <eth:syzkaller0>
[  623.815486][T26746] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  623.875670][T26737] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  623.897405][T26734] lo speed is unknown, defaulting to 1000
[  624.178797][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[  624.334321][    C1] ip6_tnl_xmit_ctl: 7 callbacks suppressed
[  624.334334][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  624.997180][T26770] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  625.243196][T26783] netlink: 'syz.0.5519': attribute type 1 has an invalid length.
[  625.262659][T26785] netlink: 'syz.1.5517': attribute type 1 has an invalid length.
[  625.291945][T26785] workqueue: Failed to create a rescuer kthread for wq "bond75": -EINTR
[  625.434451][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  625.513258][T26801] netlink: 'syz.1.5521': attribute type 5 has an invalid length.
[  625.609024][T26804] lo speed is unknown, defaulting to 1000
[  625.734762][T26804] lo speed is unknown, defaulting to 1000
[  625.759780][T26809] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5523'.
[  626.334378][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  626.434472][T26817] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5526'.
[  626.584796][T26819] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5527'.
[  626.585586][T26820] can: request_module (can-proto-0) failed.
[  626.593989][T26824] netlink: 'syz.1.5528': attribute type 13 has an invalid length.
[  626.598232][T26824] tipc: Resetting bearer <eth:ip6gre0>
[  626.600300][T26824] tipc: Resetting bearer <eth:ip6gretap0>
[  626.603173][T26824] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  626.636504][T26824] lo speed is unknown, defaulting to 1000
[  626.652939][T26827] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  626.655238][T26827] IPv6: NLM_F_CREATE should be set when creating new route
[  626.691954][T26828] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  626.755521][T26832] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  626.783067][T26824] lo speed is unknown, defaulting to 1000
[  626.804092][T26830] 8021q: adding VLAN 0 to HW filter on device bond75
[  626.812565][T26832] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  626.849060][T26830] veth35: entered promiscuous mode
[  626.861356][T26830] bond75: (slave veth35): Enslaving as a backup interface with a down link
[  626.872883][T26833] bond75: (slave veth35): Releasing backup interface
[  627.046602][T26836] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5531'.
[  627.363282][T26841] validate_nla: 2 callbacks suppressed
[  627.363302][T26841] netlink: 'syz.2.5532': attribute type 16 has an invalid length.
[  627.369460][T26841] netlink: 'syz.2.5532': attribute type 17 has an invalid length.
[  627.374441][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  627.387142][T26843] netlink: 'syz.0.5533': attribute type 1 has an invalid length.
[  627.398598][T26839] netlink: 'syz.2.5532': attribute type 1 has an invalid length.
[  627.401484][T26839] nbd: error processing sock list
[  627.406061][T26839] block nbd0: shutting down sockets
[  627.428535][T26843] 8021q: adding VLAN 0 to HW filter on device bond76
[  627.477213][T26847] netlink: 'syz.2.5534': attribute type 1 has an invalid length.
[  627.493698][T26848] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  627.906327][T26859] netlink: 'syz.1.5537': attribute type 5 has an invalid length.
[  628.136974][T26869] netlink: 'syz.0.5538': attribute type 13 has an invalid length.
[  628.139966][T26869] netlink: 'syz.0.5538': attribute type 17 has an invalid length.
[  628.188976][T26869] 8021q: adding VLAN 0 to HW filter on device bond0
[  628.197994][T26869] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  628.206836][ T5728] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  628.225775][   T24] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  628.270783][T26865] lo speed is unknown, defaulting to 1000
[  628.281464][T26874] netlink: 'syz.1.5541': attribute type 13 has an invalid length.
[  628.283862][T26874] netlink: 'syz.1.5541': attribute type 17 has an invalid length.
[  628.290566][T26874] tipc: Resetting bearer <eth:ip6gre0>
[  628.292438][T26874] tipc: Resetting bearer <eth:ip6gretap0>
[  628.306879][T26874] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  628.324586][T26869] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  628.416444][T26872] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  628.424396][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  628.443752][T26865] lo speed is unknown, defaulting to 1000
[  628.448164][T26876] lo speed is unknown, defaulting to 1000
[  628.503260][T26881] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5542'.
[  628.681483][T26876] lo speed is unknown, defaulting to 1000
[  628.763571][   T24] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  628.894259][    C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  629.224656][   T24] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  629.463573][T26893] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5546'.
[  629.467376][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  629.479264][T26893] 8021q: adding VLAN 0 to HW filter on device bond1
[  629.556316][T26893] tipc: Enabling of bearer <udp:syz1> rejected, max 3 bearers permitted
[  629.570818][T26895] tipc: Resetting bearer <eth:syzkaller0>
[  629.599358][T26895] openvswitch: netlink: IP tunnel dst address not specified
[  629.794385][    C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  629.846468][T26900] netlink: 128 bytes leftover after parsing attributes in process `syz.1.5548'.
[  630.534390][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  630.576291][T26909] block nbd0: server does not support multiple connections per device.
[  630.579067][T26909] block nbd0: shutting down sockets
[  630.671342][T26916] lo speed is unknown, defaulting to 1000
[  630.685477][T26918] netlink: 17 bytes leftover after parsing attributes in process `syz.2.5553'.
[  630.764730][T26918] xt_CT: No such helper "snmp"
[  630.802514][T26916] lo speed is unknown, defaulting to 1000
[  631.231865][T26928] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5552'.
[  631.278586][T26919] syzkaller1: entered promiscuous mode
[  631.280872][T26919] syzkaller1: entered allmulticast mode
[  631.534419][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  631.587024][T26936] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5557'.
[  631.620803][T26936] netlink: 68 bytes leftover after parsing attributes in process `syz.1.5557'.
[  631.690734][T26938] tipc: Resetting bearer <eth:syzkaller0>
[  631.729228][T11346] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  632.104488][T11346] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  632.240592][T26961] 8021q: adding VLAN 0 to HW filter on device bond0
[  632.243948][T26961] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  632.250417][   T24] lo speed is unknown, defaulting to 1000
[  632.252234][   T24] syz0: Port: 1 Link ACTIVE
[  632.260899][   T24] lo speed is unknown, defaulting to 1000
[  632.287104][T11346] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  632.458002][T26971] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5568'.
[  632.461581][T26971] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5568'.
[  632.507895][T26974] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  632.530372][T26974] validate_nla: 3 callbacks suppressed
[  632.530384][T26974] netlink: 'syz.0.5567': attribute type 16 has an invalid length.
[  632.538964][T26974] netlink: 'syz.0.5567': attribute type 17 has an invalid length.
[  632.583218][T26974] tipc: Resetting bearer <eth:ip6gretap0>
[  632.620385][T26974] tipc: Resetting bearer <eth:syzkaller0>
[  632.624361][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  632.668098][T26988] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5567'.
[  632.705332][T26991] netlink: 'syz.2.5572': attribute type 7 has an invalid length.
[  632.708562][T26991] netlink: 'syz.2.5572': attribute type 3 has an invalid length.
[  632.734420][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  632.750992][T19621] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  633.730332][T27025] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  633.733920][T27026] mac80211_hwsim hwsim23 wlan1: entered allmulticast mode
[  633.737351][T27025] mac80211_hwsim hwsim6 syzkaller0: entered promiscuous mode
[  633.740237][T27025] mac80211_hwsim hwsim6 syzkaller0: entered allmulticast mode
[  633.751311][T27025] __nla_validate_parse: 4 callbacks suppressed
[  633.751327][T27025] netlink: 9275 bytes leftover after parsing attributes in process `syz.1.5581'.
[  633.761834][T27026] netlink: 'syz.0.5582': attribute type 10 has an invalid length.
[  634.109244][T27050] openvswitch: netlink: Key 6 has unexpected len 4 expected 2
[  634.120569][T27045] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5587'.
[  634.123945][T27045] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5587'.
[  634.257068][T27058] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5588'.
[  634.282380][T27060] netlink: 'syz.1.5590': attribute type 1 has an invalid length.
[  634.329107][T27059] 8021q: adding VLAN 0 to HW filter on device bond75
[  634.700086][    C1] ip6_tnl_xmit_ctl: 9 callbacks suppressed
[  634.700109][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  634.742373][T27072] lo speed is unknown, defaulting to 1000
[  634.814411][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  634.822624][T27075] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[  634.958928][T27079] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5594'.
[  634.959626][T27072] lo speed is unknown, defaulting to 1000
[  634.966230][T27079] netlink: 'syz.0.5594': attribute type 16 has an invalid length.
[  634.970125][T27079] netlink: 'syz.0.5594': attribute type 17 has an invalid length.
[  634.996834][T27079] 8021q: adding VLAN 0 to HW filter on device bond0
[  635.001921][T27079] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  635.008156][T27073] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5593'.
[  635.018126][T19621] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  635.036043][T27073] netlink: 100 bytes leftover after parsing attributes in process `syz.1.5593'.
[  635.114314][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  635.123980][T27083] vlan3: entered allmulticast mode
[  635.307843][T27087] netlink: 'syz.2.5596': attribute type 13 has an invalid length.
[  635.310537][T27087] netlink: 'syz.2.5596': attribute type 17 has an invalid length.
[  635.330513][T27087] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  635.356690][T11346] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  635.502413][T27095] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5598'.
[  635.506856][T27095] nbd: must specify a size in bytes for the device
[  635.644452][    T9] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  635.649264][   T12] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  635.651777][   T12] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  635.690334][T27108] tipc: Resetting bearer <eth:ip6gre0>
[  635.700263][T27108] tipc: Resetting bearer <eth:ip6gretap0>
[  635.768803][    T9] lo speed is unknown, defaulting to 1000
[  635.773485][    T9] syz2: Port: 1 Link DOWN
[  635.774750][   T24] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  635.784171][    T9] lo speed is unknown, defaulting to 1000
[  635.815507][   T24] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  635.827885][T27119] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  635.898280][T27119] lo speed is unknown, defaulting to 1000
[  636.121110][T27121] lo speed is unknown, defaulting to 1000
[  636.126542][T27119] lo speed is unknown, defaulting to 1000
[  636.335694][T27121] lo speed is unknown, defaulting to 1000
[  636.634981][T27131] netlink: 324 bytes leftover after parsing attributes in process `syz.0.5607'.
[  636.679599][T27134] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5608'.
[  636.702140][T27128] tipc: Resetting bearer <eth:ip6gretap0>
[  636.842309][T27138] tipc: Enabling of bearer <eth:ip6gretap0> rejected, already enabled
[  636.849078][T27138] tipc: Enabling of bearer <eth:ip6gretap0> rejected, already enabled
[  637.059689][T27147] lo speed is unknown, defaulting to 1000
[  637.591452][T27147] lo speed is unknown, defaulting to 1000
[  638.403315][T27165] lo speed is unknown, defaulting to 1000
[  638.627016][T27166] lo speed is unknown, defaulting to 1000
[  638.720174][T27178] validate_nla: 4 callbacks suppressed
[  638.720192][T27178] netlink: 'syz.2.5619': attribute type 5 has an invalid length.
[  638.810423][T27165] lo speed is unknown, defaulting to 1000
[  639.151366][T27166] lo speed is unknown, defaulting to 1000
[  639.156481][T27192] netlink: 'syz.1.5623': attribute type 13 has an invalid length.
[  639.160739][T27192] netlink: 'syz.1.5623': attribute type 17 has an invalid length.
[  639.179124][T27192] tipc: Resetting bearer <eth:ip6gre0>
[  639.181867][T27192] tipc: Resetting bearer <eth:ip6gre0>
[  639.185938][T27192] tipc: Resetting bearer <eth:ip6gretap0>
[  639.188883][T27192] tipc: Resetting bearer <eth:ip6gretap0>
[  639.201230][T27192] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  639.211952][T20528] lo speed is unknown, defaulting to 1000
[  639.217626][T20528] syz2: Port: 1 Link ACTIVE
[  639.275320][T27195] tipc: Resetting bearer <ib:ip6gre0>
[  639.282589][T27195] tipc: Resetting bearer <eth:ip6gretap0>
[  639.388116][T20528] lo speed is unknown, defaulting to 1000
[  639.388203][    T9] lo speed is unknown, defaulting to 1000
[  639.392476][    T9] syz0: Port: 1 Link DOWN
[  639.394563][    T9] lo speed is unknown, defaulting to 1000
[  639.404614][T27198] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  639.416309][T27194] lo speed is unknown, defaulting to 1000
[  639.460210][T27189] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  639.854362][    C1] ip6_tnl_xmit_ctl: 10 callbacks suppressed
[  639.854375][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  639.893514][T27194] lo speed is unknown, defaulting to 1000
[  640.122171][T27201] netlink: 'syz.2.5625': attribute type 1 has an invalid length.
[  640.177751][T27203] __nla_validate_parse: 5 callbacks suppressed
[  640.177767][T27203] netlink: 52 bytes leftover after parsing attributes in process `syz.2.5625'.
[  640.718310][T27221] netlink: 'syz.2.5629': attribute type 13 has an invalid length.
[  640.721400][T27221] netlink: 'syz.2.5629': attribute type 17 has an invalid length.
[  640.774527][T27221] 8021q: adding VLAN 0 to HW filter on device bond0
[  640.781704][T27221] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  640.790044][T20528] lo speed is unknown, defaulting to 1000
[  640.793184][T20528] syz0: Port: 1 Link ACTIVE
[  640.795720][T20528] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  640.828360][   T12] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  640.832989][   T12] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  640.880938][T27222] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  640.892726][T20528] lo speed is unknown, defaulting to 1000
[  640.944265][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  640.960802][T27221] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  641.027350][T27221] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  641.264286][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  641.294239][    C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  641.298308][    C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  641.380559][T27224] netlink: 160 bytes leftover after parsing attributes in process `syz.0.5630'.
[  641.418804][T27226] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5631'.
[  641.448190][T27226] can: request_module (can-proto-0) failed.
[  641.646320][T27240] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5633'.
[  641.695611][   T24] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  641.781910][T27247] netlink: 'syz.1.5634': attribute type 13 has an invalid length.
[  641.796218][T27247] netlink: 'syz.1.5634': attribute type 17 has an invalid length.
[  641.801188][T27247] tipc: Resetting bearer <eth:ip6gre0>
[  641.803795][T27247] tipc: Resetting bearer <eth:ip6gretap0>
[  641.825601][T27247] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  641.873367][T27247] lo speed is unknown, defaulting to 1000
[  641.934401][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  642.098436][T27247] lo speed is unknown, defaulting to 1000
[  642.603957][T27263] netlink: 'syz.0.5638': attribute type 1 has an invalid length.
[  642.620957][T27265] netlink: 56 bytes leftover after parsing attributes in process `syz.2.5636'.
[  642.729564][T27268] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5639'.
[  642.840937][T27280] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5642'.
[  642.861673][T27280] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5642'.
[  643.598857][T27291] netlink: 'syz.0.5646': attribute type 10 has an invalid length.
[  643.642945][T27289] lo speed is unknown, defaulting to 1000
[  643.689018][T27296] tipc: Resetting bearer <eth:ip6gre0>
[  643.691667][T27296] tipc: Resetting bearer <eth:ip6gretap0>
[  643.715919][T27296] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  643.855245][T27305] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5649'.
[  643.858403][T27289] lo speed is unknown, defaulting to 1000
[  644.471968][T27313] tipc: Resetting bearer <ib:ip6gre0>
[  644.477746][T27313] tipc: Resetting bearer <eth:ip6gretap0>
[  644.517756][    T9] lo speed is unknown, defaulting to 1000
[  644.519527][    T9] syz0: Port: 1 Link DOWN
[  644.521848][    T9] lo speed is unknown, defaulting to 1000
[  644.935827][T27327] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5653'.
[  645.074299][    C1] ip6_tnl_xmit_ctl: 8 callbacks suppressed
[  645.074317][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  645.512711][T27340] mac80211_hwsim hwsim6 syzkaller0: left promiscuous mode
[  645.519630][T27340] mac80211_hwsim hwsim6 syzkaller0: left allmulticast mode
[  645.562373][T27345] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5658'.
[  645.621070][T27347] validate_nla: 2 callbacks suppressed
[  645.621081][T27347] netlink: 'syz.1.5659': attribute type 16 has an invalid length.
[  645.634504][T27347] netlink: 'syz.1.5659': attribute type 17 has an invalid length.
[  645.660583][T27347] tipc: Resetting bearer <eth:ip6gre0>
[  645.663410][T27347] tipc: Resetting bearer <eth:ip6gretap0>
[  645.672156][T27349] IPv6: NLM_F_REPLACE set, but no existing node found!
[  645.684711][T27350] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5658'.
[  645.723064][   T24] lo speed is unknown, defaulting to 1000
[  645.725761][   T24] syz2: Port: 1 Link DOWN
[  645.727464][   T24] lo speed is unknown, defaulting to 1000
[  645.823471][T27352] syz2: rxe_newlink: already configured on lo
[  645.943095][T27357] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5661'.
[  645.953490][T27357] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5661'.
[  645.962436][T27357] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5661'.
[  645.965916][T27357] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5661'.
[  645.968786][T27357] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5661'.
[  645.971796][T27357] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5661'.
[  645.977712][T27357] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5661'.
[  645.980666][T27357] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5661'.
[  646.008779][T27360] lo speed is unknown, defaulting to 1000
[  646.162636][T27362] lo speed is unknown, defaulting to 1000
[  646.168761][T27360] lo speed is unknown, defaulting to 1000
[  646.218509][T27366] 0: left allmulticast mode
[  646.223681][T27366] hsr_slave_0: left allmulticast mode
[  646.282731][T27366] veth23: left promiscuous mode
[  646.293168][T27366] vlan5: left allmulticast mode
[  646.302100][T27366] erspan0: left allmulticast mode
[  646.308127][T27366] veth25: left promiscuous mode
[  646.517828][T27362] lo speed is unknown, defaulting to 1000
[  646.543623][T27381] lo speed is unknown, defaulting to 1000
[  646.599814][T27383] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  646.790083][T27381] lo speed is unknown, defaulting to 1000
[  648.604396][T27399] netlink: 'syz.2.5672': attribute type 26 has an invalid length.
[  648.939338][T27425] openvswitch: netlink: VXLAN extension 274 out of range max 1
[  648.965986][T27427] syz0: rxe_newlink: already configured on lo
[  649.075390][T27437] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode
[  649.097888][T27437] netlink: 'syz.2.5683': attribute type 10 has an invalid length.
[  649.100627][T27437] mac80211_hwsim hwsim3 wlan1: left allmulticast mode
[  649.103128][T27437] bond0: (slave wlan1): refused to change device type
[  649.197159][T27442] syz0: rxe_newlink: already configured on lo
[  649.261793][T27447] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode
[  649.266695][T27447] netlink: 'syz.2.5687': attribute type 10 has an invalid length.
[  649.269183][T27447] mac80211_hwsim hwsim3 wlan1: left allmulticast mode
[  649.271510][T27447] bond0: (slave wlan1): refused to change device type
[  649.718882][T27461] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  650.130326][T27484] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  650.398121][T27501] veth35: left promiscuous mode
[  650.502303][T27506] netlink: 'syz.0.5704': attribute type 1 has an invalid length.
[  650.506403][T27506] netlink: 'syz.0.5704': attribute type 2 has an invalid length.
[  650.659257][T27515] __nla_validate_parse: 77 callbacks suppressed
[  650.659275][T27515] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5706'.
[  650.691927][T27521] lo speed is unknown, defaulting to 1000
[  650.739618][T27524] netlink: 100 bytes leftover after parsing attributes in process `syz.2.5708'.
[  650.865105][T27527] lo speed is unknown, defaulting to 1000
[  650.876165][T27521] lo speed is unknown, defaulting to 1000
[  651.077759][T27534] lo speed is unknown, defaulting to 1000
[  651.084246][T27527] lo speed is unknown, defaulting to 1000
[  651.136749][T27537] IPv6: syztnl1: Disabled Multicast RS
[  651.324441][T27541] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5710'.
[  651.337833][T27534] lo speed is unknown, defaulting to 1000
[  652.512481][T27545] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate.
[  652.641884][T27547] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5712'.
[  652.655927][T27547] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5712'.
[  652.659349][T27547] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5712'.
[  652.820967][T27552] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5713'.
[  652.833114][T27553] netlink: 'syz.0.5713': attribute type 16 has an invalid length.
[  652.838327][T27553] netlink: 'syz.0.5713': attribute type 17 has an invalid length.
[  652.858123][T27553] 8021q: adding VLAN 0 to HW filter on device bond0
[  652.863200][T27553] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  653.000119][T27561] netlink: 'syz.0.5715': attribute type 11 has an invalid length.
[  653.010366][T27561] netlink: 'syz.0.5715': attribute type 10 has an invalid length.
[  653.034793][ T5902] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  653.063109][ T5868] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  653.096754][T27566] netlink: 'syz.2.5716': attribute type 16 has an invalid length.
[  653.099576][T27566] netlink: 'syz.2.5716': attribute type 17 has an invalid length.
[  653.129754][T27566] 8021q: adding VLAN 0 to HW filter on device bond0
[  653.147919][T27566] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  653.155057][ T5889] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  653.159460][T20528] lo speed is unknown, defaulting to 1000
[  653.161871][T20528] syz0: Port: 1 Link ACTIVE
[  653.167116][T20528] lo speed is unknown, defaulting to 1000
[  653.214279][    C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  653.256132][T27574] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5721'.
[  653.260544][T27574] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5721'.
[  653.262889][T27576] netlink: 'syz.1.5720': attribute type 1 has an invalid length.
[  653.354983][T20528] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  653.392532][T27587] netlink: 'syz.0.5723': attribute type 16 has an invalid length.
[  653.398382][T27587] netlink: 'syz.0.5723': attribute type 17 has an invalid length.
[  653.402053][T27585] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5722'.
[  653.443958][T27589] IPv6: NLM_F_REPLACE set, but no existing node found!
[  653.472431][T27587] tipc: Resetting bearer <eth:ip6gretap0>
[  653.507289][ T5868] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  653.666827][T20528] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  653.670497][T27601] netlink: 'syz.2.5726': attribute type 13 has an invalid length.
[  653.673582][T27601] netlink: 'syz.2.5726': attribute type 17 has an invalid length.
[  653.694971][T27601] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  653.706742][T27603] lo speed is unknown, defaulting to 1000
[  653.714805][T20528] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  653.742461][T27601] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  653.774451][    C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  653.790831][T27611] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  653.805278][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  653.893935][T27603] lo speed is unknown, defaulting to 1000
[  653.895305][T27617] xt_TCPMSS: Only works on TCP SYN packets
[  655.170081][T27643] lo speed is unknown, defaulting to 1000
[  655.357761][T27643] lo speed is unknown, defaulting to 1000
[  655.384704][T27644] syzkaller1: entered promiscuous mode
[  655.388118][T27644] syzkaller1: entered allmulticast mode
[  655.666519][T27653] tipc: Resetting bearer <ib:ip6gre0>
[  655.679639][T27653] tipc: Resetting bearer <eth:ip6gretap0>
[  655.708520][ T5889] lo speed is unknown, defaulting to 1000
[  655.710808][ T5889] syz0: Port: 1 Link DOWN
[  655.720550][ T5889] lo speed is unknown, defaulting to 1000
[  656.015106][T27664] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode
[  656.020008][T27664] mac80211_hwsim hwsim3 wlan1: left allmulticast mode
[  656.022585][T27664] bond0: (slave wlan1): refused to change device type
[  656.077359][T27668] __nla_validate_parse: 8 callbacks suppressed
[  656.077378][T27668] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5742'.
[  656.283879][T27676] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  656.293642][T11346] lo speed is unknown, defaulting to 1000
[  656.296954][T11346] syz2: Port: 1 Link ACTIVE
[  656.339233][T27681] netlink: 244 bytes leftover after parsing attributes in process `syz.0.5747'.
[  656.367351][T27677] 8021q: adding VLAN 0 to HW filter on device bond0
[  656.370572][T27682] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  656.380118][T27677] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  656.406987][   T24] lo speed is unknown, defaulting to 1000
[  656.407091][T11346] lo speed is unknown, defaulting to 1000
[  656.409545][   T24] syz0: Port: 1 Link ACTIVE
[  656.413103][   T24] lo speed is unknown, defaulting to 1000
[  656.441897][T27672] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  656.442626][T27684] tipc: Resetting bearer <eth:ip6gre0>
[  656.449822][T27684] tipc: Resetting bearer <eth:ip6gretap0>
[  656.520798][T27677] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  656.536969][T11346] lo speed is unknown, defaulting to 1000
[  656.539609][T11346] syz2: Port: 1 Link DOWN
[  656.568066][T11346] lo speed is unknown, defaulting to 1000
[  656.653376][T27694] 8021q: adding VLAN 0 to HW filter on device bond77
[  656.665315][T27697] openvswitch: netlink: VXLAN extension 274 out of range max 1
[  656.668042][T27694] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5750'.
[  656.671898][T27694] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5750'.
[  656.680904][T27694] bridge0: entered promiscuous mode
[  656.684183][T27694] ip6gretap0: entered promiscuous mode
[  656.687407][T27694] ip6gretap0: left promiscuous mode
[  656.689622][T27694] bridge0: left promiscuous mode
[  656.738657][T27698] veth27: entered promiscuous mode
[  656.741696][T27699] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5751'.
[  656.746358][T27694] erspan0: entered allmulticast mode
[  656.832586][T27706] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5753'.
[  656.843524][T27706] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5753'.
[  656.852033][T27706] IPv6: NLM_F_REPLACE set, but no existing node found!
[  656.957514][T27709] xt_TCPMSS: Only works on TCP SYN packets
[  657.530271][T27720] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  657.556278][T27717] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  657.556935][T27719] lo speed is unknown, defaulting to 1000
[  657.673479][T27719] lo speed is unknown, defaulting to 1000
[  657.779977][T27724] netlink: 56 bytes leftover after parsing attributes in process `syz.1.5759'.
[  657.784432][T27725] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  657.784839][T27724] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  657.799580][T27724] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5759'.
[  658.225897][T27745] validate_nla: 13 callbacks suppressed
[  658.225916][T27745] netlink: 'syz.2.5765': attribute type 6 has an invalid length.
[  658.346951][T27752] netlink: 'syz.0.5766': attribute type 13 has an invalid length.
[  658.350977][T27751] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  658.360499][T27752] netlink: 'syz.0.5766': attribute type 17 has an invalid length.
[  658.417828][T20528] ip6_tnl_xmit_ctl: 16 callbacks suppressed
[  658.417845][T20528] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  658.441334][T27752] 8021q: adding VLAN 0 to HW filter on device bond0
[  658.452845][T27752] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  658.453226][T27749] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5766'.
[  658.465117][T20528] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  658.515926][T27749] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  658.574395][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  658.579687][T27752] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  658.584474][    T9] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  658.592904][T27755] lo speed is unknown, defaulting to 1000
[  658.652755][T27749] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  658.734360][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  658.805200][   T24] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  658.954349][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  659.210996][T27765] 8021q: adding VLAN 0 to HW filter on device bond1
[  659.217368][T27755] lo speed is unknown, defaulting to 1000
[  659.274485][ T5868] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  659.479286][T27778] bond0: entered promiscuous mode
[  659.715004][T27795] lo speed is unknown, defaulting to 1000
[  659.774314][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  659.795277][    T9] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  659.850733][T27801] netlink: 'syz.0.5781': attribute type 9 has an invalid length.
[  659.857376][T27801] netlink: 'syz.0.5781': attribute type 6 has an invalid length.
[  659.955549][T27801] tipc: Resetting bearer <eth:ip6gretap0>
[  659.968525][T27801] tipc: Resetting bearer <eth:syzkaller0>
[  659.989236][T27795] lo speed is unknown, defaulting to 1000
[  659.992812][T27796] syzkaller1: entered promiscuous mode
[  659.999201][T27796] syzkaller1: entered allmulticast mode
[  660.029471][T27806] netlink: 'syz.0.5782': attribute type 1 has an invalid length.
[  660.033558][T27806] workqueue: Failed to create a rescuer kthread for wq "bond78": -EINTR
[  660.063409][T27812] netlink: 'syz.0.5783': attribute type 13 has an invalid length.
[  660.096919][T27812] 8021q: adding VLAN 0 to HW filter on device bond0
[  660.105668][T27812] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  660.349477][T27818] tipc: Resetting bearer <eth:ip6gretap0>
[  660.545885][T27827] netlink: 'syz.1.5787': attribute type 3 has an invalid length.
[  660.642191][T27829] netlink: 'syz.0.5788': attribute type 16 has an invalid length.
[  660.648513][T27829] netlink: 'syz.0.5788': attribute type 17 has an invalid length.
[  660.661678][T27829] IPv6: NLM_F_REPLACE set, but no existing node found!
[  660.747846][T27834] bond78: entered promiscuous mode
[  660.749979][T27834] bond78: entered allmulticast mode
[  660.752646][T27834] 8021q: adding VLAN 0 to HW filter on device bond78
[  660.770273][T27834] bridge17: entered promiscuous mode
[  660.772892][T27834] bridge17: entered allmulticast mode
[  660.776169][T27834] bond78: (slave bridge17): Enslaving as a backup interface with an up link
[  660.843487][T27844] ip6tnl0: entered promiscuous mode
[  660.855688][ T5868] bond78: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  661.168995][T27862] __nla_validate_parse: 12 callbacks suppressed
[  661.169011][T27862] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5795'.
[  661.236592][T27867] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  661.350788][T27871] openvswitch: netlink: VXLAN extension 16 out of range max 1
[  661.387291][T27872] lo speed is unknown, defaulting to 1000
[  661.491392][T27881] erspan0: left allmulticast mode
[  661.520101][T27881] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  661.633078][T27872] lo speed is unknown, defaulting to 1000
[  661.730081][T27878] netlink: 76 bytes leftover after parsing attributes in process `syz.0.5798'.
[  661.734037][T27878] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5798'.
[  661.758643][T27897] (unnamed net_device) (uninitialized): option arp_validate: mode dependency failed, not supported in mode 802.3ad(4)
[  661.766607][T27878] syzkaller1: entered promiscuous mode
[  661.766676][T27897] netlink: 44 bytes leftover after parsing attributes in process `syz.1.5803'.
[  661.771890][T27878] syzkaller1: entered allmulticast mode
[  662.019616][T27914] xt_time: invalid argument - start or stop time greater than 23:59:59
[  662.241637][T27931] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5810'.
[  662.258125][T27928] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5809'.
[  662.328039][T27934] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5811'.
[  662.423241][T27939] tipc: Trying to set illegal importance in message
[  662.613197][T27949] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5815'.
[  662.670077][T27953] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5816'.
[  662.753426][T27968] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5818'.
[  662.765691][T27970] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  662.797366][T27968] lo speed is unknown, defaulting to 1000
[  662.820405][T27972] mac80211_hwsim hwsim6 wlan1: entered allmulticast mode
[  662.904576][T27978] lo speed is unknown, defaulting to 1000
[  662.904937][T27968] lo speed is unknown, defaulting to 1000
[  663.111841][T27984] bond78: (slave bridge17): Removing an active aggregator
[  663.124817][T27984] bond78: (slave bridge17): Releasing backup interface
[  663.131643][T27984] bridge17: left promiscuous mode
[  663.133361][T27984] bridge17: left allmulticast mode
[  663.135709][T27978] lo speed is unknown, defaulting to 1000
[  663.433111][T27995] ip6tnl0: left promiscuous mode
[  663.450577][T27995] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  663.663183][T28000] vlan3: entered allmulticast mode
[  663.936047][    C1] ip6_tnl_xmit_ctl: 14 callbacks suppressed
[  663.936062][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  664.194314][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  664.729464][T28040] validate_nla: 7 callbacks suppressed
[  664.729477][T28040] netlink: 'syz.1.5835': attribute type 8 has an invalid length.
[  664.825820][T28040] lo speed is unknown, defaulting to 1000
[  664.951444][T28042] tipc: Resetting bearer <ib:ip6gre0>
[  664.968900][T28042] tipc: Resetting bearer <eth:ip6gretap0>
[  665.007581][T28042] bond0: left promiscuous mode
[  665.039322][T28042] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  665.060746][   T24] lo speed is unknown, defaulting to 1000
[  665.063291][   T24] syz0: Port: 1 Link DOWN
[  665.069063][   T24] lo speed is unknown, defaulting to 1000
[  665.236420][T28040] lo speed is unknown, defaulting to 1000
[  665.538846][T28066] lo speed is unknown, defaulting to 1000
[  666.010101][T28066] lo speed is unknown, defaulting to 1000
[  666.184804][T28083] syz2: rxe_newlink: already configured on lo
[  666.246997][T28083] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  666.383754][T28086] netlink: 'syz.1.5849': attribute type 1 has an invalid length.
[  666.424547][    T9] lo speed is unknown, defaulting to 1000
[  666.426378][    T9] syz2: Port: 1 Link ACTIVE
[  666.428267][    T9] lo speed is unknown, defaulting to 1000
[  666.475069][    T9] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  666.606467][T28091] tipc: Resetting bearer <eth:ip6gre0>
[  666.610394][T28091] tipc: Resetting bearer <eth:ip6gretap0>
[  666.622695][    T9] lo speed is unknown, defaulting to 1000
[  666.625319][    T9] syz2: Port: 1 Link DOWN
[  666.627104][    T9] lo speed is unknown, defaulting to 1000
[  666.685646][T28097] __nla_validate_parse: 73 callbacks suppressed
[  666.685666][T28097] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5850'.
[  666.943852][T28105] netlink: 'syz.1.5853': attribute type 10 has an invalid length.
[  666.953276][T28105] mac80211_hwsim hwsim6 wlan1: left allmulticast mode
[  667.048715][T28117] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5856'.
[  667.052247][T28117] netlink: 'syz.0.5856': attribute type 1 has an invalid length.
[  667.148906][T28122] mac80211_hwsim hwsim6 wlan1: entered allmulticast mode
[  667.159313][T28122] netlink: 'syz.1.5857': attribute type 10 has an invalid length.
[  667.161772][T28122] mac80211_hwsim hwsim6 wlan1: left allmulticast mode
[  667.290997][T28131] rdma_op ffff888118aa81f0 conn xmit_rdma 0000000000000000
[  667.335785][T28129] vlan6: entered allmulticast mode
[  667.513888][T28134] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5861'.
[  667.759051][T28149] netlink: 108 bytes leftover after parsing attributes in process `syz.2.5864'.
[  667.763189][T28149] netlink: 108 bytes leftover after parsing attributes in process `syz.2.5864'.
[  667.766974][T28149] syz0: rxe_newlink: already configured on lo
[  667.825126][T28149] 8021q: adding VLAN 0 to HW filter on device bond0
[  667.840807][T28149] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  667.847204][T28157] xt_limit: Overflow, try lower: 0/0
[  667.850454][T20528] lo speed is unknown, defaulting to 1000
[  667.852264][T20528] syz0: Port: 1 Link ACTIVE
[  667.853692][T20528] lo speed is unknown, defaulting to 1000
[  667.926261][T20528] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  668.008320][T28159] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  668.014404][    C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  668.024499][    T9] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  668.115568][T28168] IPVS: length: 183 != 24
[  668.119868][T28169] netlink: 'syz.0.5870': attribute type 13 has an invalid length.
[  668.125381][T28168] x_tables: duplicate underflow at hook 1
[  668.127336][T28169] netlink: 'syz.0.5870': attribute type 17 has an invalid length.
[  668.181160][T28169] 8021q: adding VLAN 0 to HW filter on device bond0
[  668.188733][T28169] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  668.205473][    T9] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  668.227622][T19621] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  668.235235][    T9] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  668.241923][T19621] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  668.258457][T28171] lo speed is unknown, defaulting to 1000
[  668.267760][T28169] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  668.326569][T28172] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  668.377352][T28182] bridge0: port 1(erspan0) entered blocking state
[  668.380184][T28182] bridge0: port 1(erspan0) entered disabled state
[  668.382766][T28182] erspan0: entered allmulticast mode
[  668.395456][T28182] erspan0: left allmulticast mode
[  668.522287][T28183] tipc: Resetting bearer <ib:ip6gre0>
[  668.528064][T28183] tipc: Resetting bearer <eth:ip6gretap0>
[  668.531123][T28176] netlink: 'syz.1.5873': attribute type 2 has an invalid length.
[  668.543846][T28183] tipc: Resetting bearer <eth:syzkaller0>
[  668.550836][    T9] lo speed is unknown, defaulting to 1000
[  668.552629][    T9] syz0: Port: 1 Link DOWN
[  668.554017][    T9] lo speed is unknown, defaulting to 1000
[  668.556880][T28171] lo speed is unknown, defaulting to 1000
[  668.978910][    T9] ip6_tnl_xmit_ctl: 3 callbacks suppressed
[  668.978925][    T9] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  669.046117][T28187] netlink: 'syz.0.5876': attribute type 29 has an invalid length.
[  669.068892][T28189] lo speed is unknown, defaulting to 1000
[  669.072042][T28187] netlink: 'syz.0.5876': attribute type 29 has an invalid length.
[  669.152651][T28195] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5877'.
[  669.224460][    C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  669.234815][T28189] lo speed is unknown, defaulting to 1000
[  669.296266][    T9] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  669.330936][T28199] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5879'.
[  669.348608][T28199] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5879'.
[  669.486527][T28204] lo speed is unknown, defaulting to 1000
[  669.614245][    C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  669.849740][T28206] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  669.867965][T28206] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode
[  669.884810][T28206] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode
[  669.937071][T28208] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  669.941496][T28204] lo speed is unknown, defaulting to 1000
[  669.945010][T28208] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  670.294315][    C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  670.378652][T28212] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  670.404953][T20528] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  670.476023][T28213] rdma_rxe: rxe_newlink: failed to add lo
[  670.544729][T20528] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  670.654381][    C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  670.886288][T28226] netlink: 'syz.0.5885': attribute type 13 has an invalid length.
[  670.889147][T28226] netlink: 'syz.0.5885': attribute type 17 has an invalid length.
[  670.932946][T28226] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  670.940554][    T9] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  670.969182][   T12] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  671.030573][T28226] lo speed is unknown, defaulting to 1000
[  671.056828][T28227] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  671.496654][T28226] lo speed is unknown, defaulting to 1000
[  671.735624][T28233] tipc: Resetting bearer <eth:syzkaller0>
[  671.775195][T28233] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5887'.
[  672.339118][T28239] netlink: 'syz.1.5890': attribute type 10 has an invalid length.
[  672.518608][T28246] netlink: 4204 bytes leftover after parsing attributes in process `syz.0.5892'.
[  672.551885][T28244] netlink: 'syz.1.5891': attribute type 16 has an invalid length.
[  672.561391][T28244] netlink: 'syz.1.5891': attribute type 17 has an invalid length.
[  672.573406][T28244] IPv6: NLM_F_REPLACE set, but no existing node found!
[  672.589680][T28248] netlink: 'syz.0.5892': attribute type 13 has an invalid length.
[  672.593895][T28248] netlink: 'syz.0.5892': attribute type 17 has an invalid length.
[  672.632719][T28248] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  672.721361][T28249] lo speed is unknown, defaulting to 1000
[  672.742216][T28248] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  672.788042][T28248] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  672.897773][T28255] veth27: left promiscuous mode
[  672.999864][T28259] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  673.006428][    T9] lo speed is unknown, defaulting to 1000
[  673.008330][    T9] syz2: Port: 1 Link ACTIVE
[  673.009851][    T9] lo speed is unknown, defaulting to 1000
[  673.043648][T28251] netlink: 1041 bytes leftover after parsing attributes in process `syz.2.5893'.
[  673.121402][T28249] lo speed is unknown, defaulting to 1000
[  673.123555][T28250] lo speed is unknown, defaulting to 1000
[  673.421052][T28250] lo speed is unknown, defaulting to 1000
[  674.014070][T28277] netlink: 52 bytes leftover after parsing attributes in process `syz.0.5900'.
[  674.037652][T28277] IPv6: NLM_F_REPLACE set, but no existing node found!
[  674.176255][T28282] netlink: 'syz.1.5901': attribute type 13 has an invalid length.
[  674.184637][T28282] netlink: 'syz.1.5901': attribute type 17 has an invalid length.
[  674.224447][    C1] ip6_tnl_xmit_ctl: 16 callbacks suppressed
[  674.224493][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  674.246649][ T5889] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  674.264627][T28282] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  674.298615][T28285] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5903'.
[  674.301889][T28279] lo speed is unknown, defaulting to 1000
[  674.341164][T28282] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  674.351769][T28285] can: request_module (can-proto-0) failed.
[  674.411986][T28282] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  674.454370][    C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  674.485918][T28282] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  674.533961][T28288] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5903'.
[  674.774740][ T5889] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  674.824425][    C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  674.827562][    C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  675.032751][T28290] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode
[  675.061251][T28291] netlink: 'syz.2.5904': attribute type 10 has an invalid length.
[  675.064692][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  675.069446][T28291] mac80211_hwsim hwsim3 wlan1: left allmulticast mode
[  675.088728][T28291] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  675.119966][T28279] lo speed is unknown, defaulting to 1000
[  675.135347][T19621] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  675.138707][T19621] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  675.264301][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  675.422832][T28302] bond0: (slave wlan1): Releasing backup interface
[  675.437087][T28302] mac80211_hwsim hwsim3 syzkaller0: left promiscuous mode
[  675.440029][T28302] mac80211_hwsim hwsim3 syzkaller0: left allmulticast mode
[  675.591678][T28309] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5907'.
[  675.744612][T28318] x_tables: duplicate underflow at hook 2
[  675.934399][T28326] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5912'.
[  676.029710][T28328] lo speed is unknown, defaulting to 1000
[  676.056848][T28330] validate_nla: 1 callbacks suppressed
[  676.056864][T28330] netlink: 'syz.0.5913': attribute type 13 has an invalid length.
[  676.064466][T28330] netlink: 'syz.0.5913': attribute type 17 has an invalid length.
[  676.124589][T28330] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  676.310515][T28334] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5914'.
[  676.462171][T28328] lo speed is unknown, defaulting to 1000
[  676.472288][T28338] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5916'.
[  677.149023][T28346] netlink: 'syz.2.5918': attribute type 1 has an invalid length.
[  677.214795][T28346] xt_TPROXY: Can be used only with -p tcp or -p udp
[  677.336453][T28351] vcan1: entered promiscuous mode
[  677.458680][T28356] netlink: 'syz.2.5921': attribute type 39 has an invalid length.
[  677.481036][T28354] tipc: Resetting bearer <eth:ip6gre0>
[  677.493772][T28354] tipc: Resetting bearer <eth:ip6gretap0>
[  677.523345][T11346] lo speed is unknown, defaulting to 1000
[  677.525765][T11346] syz2: Port: 1 Link DOWN
[  677.527876][T11346] lo speed is unknown, defaulting to 1000
[  677.598497][T28380] syzkaller1: entered promiscuous mode
[  677.600699][T28380] syzkaller1: entered allmulticast mode
[  677.626548][T28385] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5924'.
[  677.940656][T28402] netlink: 'syz.2.5927': attribute type 16 has an invalid length.
[  677.943739][T28402] netlink: 'syz.2.5927': attribute type 17 has an invalid length.
[  677.990894][T28402] 8021q: adding VLAN 0 to HW filter on device bond0
[  677.998542][T28402] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  678.003529][T20528] lo speed is unknown, defaulting to 1000
[  678.005515][T20528] syz0: Port: 1 Link ACTIVE
[  678.007990][T20528] lo speed is unknown, defaulting to 1000
[  678.521297][T28417] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5932'.
[  678.633327][T28417] netlink: 'syz.1.5932': attribute type 16 has an invalid length.
[  678.636095][T28417] netlink: 'syz.1.5932': attribute type 17 has an invalid length.
[  678.739063][T28420] tipc: Resetting bearer <ib:ip6gre0>
[  678.747385][T28420] tipc: Resetting bearer <eth:ip6gretap0>
[  678.765889][ T5902] lo speed is unknown, defaulting to 1000
[  678.768193][ T5902] syz0: Port: 1 Link DOWN
[  678.769980][ T5902] lo speed is unknown, defaulting to 1000
[  679.033895][T28427] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5935'.
[  679.108685][T28429] netlink: 'syz.0.5936': attribute type 10 has an invalid length.
[  679.225122][T28436] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5937'.
[  679.402450][T28447] tipc: Enabling of bearer <eth:ip6gretap0> rejected, already enabled
[  679.474619][ T5889] ip6_tnl_xmit_ctl: 22 callbacks suppressed
[  679.474635][ T5889] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  679.555817][T28455] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5942'.
[  679.570036][T28455] syzkaller1: entered promiscuous mode
[  679.572257][T28455] syzkaller1: entered allmulticast mode
[  679.584001][T28455] syzkaller1: left promiscuous mode
[  679.586393][T28455] syzkaller1: left allmulticast mode
[  679.734358][    C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  679.769091][T28462] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5944'.
[  679.800632][T28460] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5943'.
[  679.825394][T28463] netlink: 'syz.2.5944': attribute type 10 has an invalid length.
[  679.833500][T28463] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  679.899229][T28464] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  679.908290][ T5889] lo speed is unknown, defaulting to 1000
[  679.910289][ T5889] syz2: Port: 1 Link ACTIVE
[  679.915165][ T5889] lo speed is unknown, defaulting to 1000
[  679.935355][ T5889] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  680.014324][    C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  680.175360][   T12] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  680.385564][T20528] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  680.494228][    C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  680.497518][    C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  680.544267][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  680.645705][T28482] tipc: Resetting bearer <eth:ip6gretap0>
[  680.722526][T28490] 8021q: adding VLAN 0 to HW filter on device bond0
[  680.729434][T28490] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  680.734345][    C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  680.736687][ T5889] lo speed is unknown, defaulting to 1000
[  680.742938][ T5889] syz0: Port: 1 Link ACTIVE
[  680.749593][T28491] ipvlan2: entered promiscuous mode
[  680.757648][ T5889] lo speed is unknown, defaulting to 1000
[  680.769547][T28487] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  680.834002][T28487] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  680.898776][T28487] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  681.474969][T28513] bond0: (slave wlan1): Releasing backup interface
[  681.494950][T28515] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  681.498855][T28515] mac80211_hwsim hwsim6 syzkaller0: entered promiscuous mode
[  681.502012][T28515] mac80211_hwsim hwsim6 syzkaller0: entered allmulticast mode
[  681.559461][T28513] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  681.570907][T28519] netlink: 48 bytes leftover after parsing attributes in process `syz.1.5963'.
[  681.578364][T28518] netlink: 48 bytes leftover after parsing attributes in process `syz.1.5963'.
[  681.650341][T28524] tipc: Resetting bearer <eth:ip6gre0>
[  681.830218][T28536] lo speed is unknown, defaulting to 1000
[  681.833599][T28533] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5967'.
[  681.973726][T28543] tipc: Resetting bearer <eth:ip6gre0>
[  682.049063][T28536] lo speed is unknown, defaulting to 1000
[  682.120289][T28554] erspan0: entered allmulticast mode
[  682.930832][T28581] lo speed is unknown, defaulting to 1000
[  682.936852][T28578] validate_nla: 7 callbacks suppressed
[  682.936867][T28578] netlink: 'syz.1.5976': attribute type 13 has an invalid length.
[  682.943924][T28578] netlink: 'syz.1.5976': attribute type 17 has an invalid length.
[  682.964319][T28578] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  682.983549][T28584] __nla_validate_parse: 3 callbacks suppressed
[  682.983560][T28584] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5978'.
[  683.014696][T28584] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5978'.
[  683.719448][T28581] lo speed is unknown, defaulting to 1000
[  683.732687][T28592] can: request_module (can-proto-0) failed.
[  683.775713][T28596] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5980'.
[  683.890529][T28600] tipc: Resetting bearer <ib:ip6gre0>
[  683.896169][T28600] tipc: Resetting bearer <eth:ip6gretap0>
[  683.917886][T28600] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  683.924052][T11346] lo speed is unknown, defaulting to 1000
[  683.926357][T11346] syz0: Port: 1 Link DOWN
[  683.931408][T11346] lo speed is unknown, defaulting to 1000
[  684.068113][T28609] netlink: 'syz.0.5984': attribute type 13 has an invalid length.
[  684.071073][T28609] netlink: 'syz.0.5984': attribute type 17 has an invalid length.
[  684.096645][T28609] 8021q: adding VLAN 0 to HW filter on device bond0
[  684.101040][T28609] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  684.133990][T28615] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5985'.
[  684.163873][T28613] lo speed is unknown, defaulting to 1000
[  684.374335][T28619] lo speed is unknown, defaulting to 1000
[  684.378646][T28613] lo speed is unknown, defaulting to 1000
[  684.593115][T28621] netlink: 'syz.2.5986': attribute type 9 has an invalid length.
[  684.600384][T28621] netlink: 211988 bytes leftover after parsing attributes in process `syz.2.5986'.
[  684.608255][T28621] netlink: 'syz.2.5986': attribute type 1 has an invalid length.
[  684.624457][    C1] ip6_tnl_xmit_ctl: 28 callbacks suppressed
[  684.624475][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  684.648947][T28621] 8021q: adding VLAN 0 to HW filter on device bond74
[  684.654429][    C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  684.660672][T28623] lo speed is unknown, defaulting to 1000
[  684.689786][T28621] veth39: entered promiscuous mode
[  684.704973][T28621] erspan0: entered allmulticast mode
[  684.734612][    C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  684.813475][T28619] lo speed is unknown, defaulting to 1000
[  684.824567][T20528] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  684.854341][    C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  685.132857][T28623] lo speed is unknown, defaulting to 1000
[  685.454468][    C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  685.634481][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  685.638165][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[  685.694316][    C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  685.774409][    C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  685.904779][    C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  686.906654][T28636] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5989'.
[  686.910232][T28641] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5989'.
[  687.046966][T28649] netlink: 'syz.2.5991': attribute type 1 has an invalid length.
[  687.142942][T28649] veth41: entered promiscuous mode
[  687.375496][T28676] SET target dimension over the limit!
[  687.392861][T28672] erspan0: left allmulticast mode
[  687.412321][T28672] vcan1: left promiscuous mode
[  687.417270][T28672] veth39: left promiscuous mode
[  687.419027][T28672] veth41: left promiscuous mode
[  687.528905][T28687] DL<Y: renamed from lo
[  687.713730][T28699] mac80211_hwsim hwsim6 syzkaller0: left promiscuous mode
[  687.722688][T28699] mac80211_hwsim hwsim6 syzkaller0: left allmulticast mode
[  687.729786][T28699] openvswitch: netlink: VXLAN extension 274 out of range max 1
[  687.807038][T28697] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  688.031973][T28715] netlink: 'syz.0.6005': attribute type 5 has an invalid length.
[  688.105085][T28723] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6006'.
[  688.210070][T28729] DL<Y speed is unknown, defaulting to 1000
[  688.247663][T28730] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6009'.
[  688.250614][T28730] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6009'.
[  688.380731][T28729] lo speed is unknown, defaulting to 1000
[  688.817529][T28747] tipc: Resetting bearer <eth:ip6gre0>
[  688.821393][T28747] tipc: Resetting bearer <eth:ip6gretap0>
[  688.840734][T20528] lo speed is unknown, defaulting to 1000
[  688.844870][T20528] syz2: Port: 1 Link DOWN
[  688.849858][T28747] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6012'.
[  688.913741][T20528] lo speed is unknown, defaulting to 1000
[  688.956627][T28752] netlink: 2 bytes leftover after parsing attributes in process `syz.1.6014'.
[  688.978490][T28754] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode
[  689.021744][T28757] erspan0: left allmulticast mode
[  689.062666][T28757] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  689.070012][T11346] lo speed is unknown, defaulting to 1000
[  689.072328][T11346] syz2: Port: 1 Link ACTIVE
[  689.087458][T11346] lo speed is unknown, defaulting to 1000
[  689.091182][T28758] netlink: 'syz.2.6015': attribute type 10 has an invalid length.
[  689.097587][T28758] mac80211_hwsim hwsim3 wlan1: left allmulticast mode
[  689.100507][T28758] bond0: (slave wlan1): refused to change device type
[  689.162678][T28760] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6017'.
[  689.167620][T28760] netlink: 'syz.1.6017': attribute type 5 has an invalid length.
[  689.251733][T28763] DL<Y speed is unknown, defaulting to 1000
[  689.591750][T28763] lo speed is unknown, defaulting to 1000
[  689.623565][T28769] netlink: 'syz.0.6019': attribute type 16 has an invalid length.
[  689.627074][T28769] netlink: 76 bytes leftover after parsing attributes in process `syz.0.6019'.
[  689.696442][T19621] ip6_tnl_xmit_ctl: 18 callbacks suppressed
[  689.696454][T19621] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  689.754391][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  689.781740][T28774] netlink: 'syz.0.6020': attribute type 9 has an invalid length.
[  689.858746][T28778] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6021'.
[  689.864413][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  689.934693][    C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  689.978396][T28783] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048)
[  689.993132][T28781] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[  690.044380][    C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  690.127028][T28784] tipc: Resetting bearer <eth:ip6gretap0>
[  690.198143][T28784] mac80211_hwsim hwsim23 wlan1: left allmulticast mode
[  690.213083][T28784] bond78: left promiscuous mode
[  690.215386][T28784] bond78: left allmulticast mode
[  690.218003][T28784] ipvlan2: left promiscuous mode
[  690.225988][T28787] netlink: 'syz.2.6022': attribute type 16 has an invalid length.
[  690.231535][T28787] netlink: 'syz.2.6022': attribute type 17 has an invalid length.
[  690.377250][T28790] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6024'.
[  690.458411][T28792] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  690.515683][T28794] xt_hashlimit: max too large, truncated to 1048576
[  690.518509][T28794] xt_hashlimit: Unknown mode mask 2000, kernel too old?
[  690.549421][T28794] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  690.735053][T19621] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  690.739521][T19621] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  690.814253][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  690.834312][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  691.097292][T28827] IPVS: set_ctl: invalid protocol: 33 172.20.20.187:20002
[  691.145903][T11346] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  691.149724][T28833] netlink: 'syz.0.6031': attribute type 13 has an invalid length.
[  691.152995][T28833] netlink: 'syz.0.6031': attribute type 17 has an invalid length.
[  691.203896][T28833] 8021q: adding VLAN 0 to HW filter on device bond0
[  691.213369][T28833] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  691.222890][T28839] A link change request failed with some changes committed already. Interface DL<Y may have been left with an inconsistent configuration, please check.
[  691.236911][T20528] DL<Y speed is unknown, defaulting to 1000
[  691.239725][T20528] syz0: Port: 1 Link ACTIVE
[  691.241544][T20528] DL<Y speed is unknown, defaulting to 1000
[  691.299257][T28833] DL<Y speed is unknown, defaulting to 1000
[  691.327051][T28848] xt_hashlimit: invalid interval
[  691.337145][T28848] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6036'.
[  691.350634][T28841] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  691.422023][T28858] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  691.446123][T28857] netlink: 'syz.1.6037': attribute type 1 has an invalid length.
[  691.491918][T28858] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  691.571483][T28833] lo speed is unknown, defaulting to 1000
[  691.579979][T28864] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  691.677681][T28861] DL<Y speed is unknown, defaulting to 1000
[  691.895901][T28861] lo speed is unknown, defaulting to 1000
[  691.932144][T28874] mac80211_hwsim hwsim6 wlan1: entered allmulticast mode
[  691.960181][T28874] mac80211_hwsim hwsim6 wlan1: left allmulticast mode
[  692.089725][T28877] tipc: Resetting bearer <eth:ip6gre0>
[  692.099283][T28877] tipc: Resetting bearer <eth:ip6gretap0>
[  692.140342][T11346] lo speed is unknown, defaulting to 1000
[  692.142731][T11346] syz2: Port: 1 Link DOWN
[  692.149136][    T9] lo speed is unknown, defaulting to 1000
[  692.586529][T28881] mac80211_hwsim hwsim23 wlan1: entered allmulticast mode
[  692.786745][T28884] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  692.936406][T28886] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  693.182047][T28896] : renamed from batadv_slave_1
[  693.236998][T28900] validate_nla: 5 callbacks suppressed
[  693.237018][T28900] netlink: 'syz.1.6048': attribute type 10 has an invalid length.
[  693.400427][T28905] netlink: 'syz.2.6051': attribute type 10 has an invalid length.
[  693.403644][T28905] bond0: (slave wlan1): refused to change device type
[  693.471812][T28920] __nla_validate_parse: 2 callbacks suppressed
[  693.471832][T28920] netlink: 4244 bytes leftover after parsing attributes in process `syz.2.6055'.
[  693.502889][T28930] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6057'.
[  693.539974][T28935] netlink: 'syz.1.6058': attribute type 9 has an invalid length.
[  693.542889][T28935] netlink: 'syz.1.6058': attribute type 6 has an invalid length.
[  693.547617][T28937] netlink: 'syz.1.6058': attribute type 9 has an invalid length.
[  693.550346][T28937] netlink: 'syz.1.6058': attribute type 6 has an invalid length.
[  693.579191][T28941] netlink: 212296 bytes leftover after parsing attributes in process `syz.0.6060'.
[  693.673922][T28950] mac80211_hwsim hwsim6 wlan1: entered allmulticast mode
[  693.689044][T28950] netlink: 'syz.1.6062': attribute type 10 has an invalid length.
[  693.702140][T28950] mac80211_hwsim hwsim6 wlan1: left allmulticast mode
[  693.939057][T28977] 8021q: adding VLAN 0 to HW filter on device bond1
[  693.947751][T28977] 8021q: adding VLAN 0 to HW filter on device macvlan18
[  693.952632][T28977] bond1: (slave macvlan18): Enslaving as an active interface with a down link
[  693.957217][T28977] bond1: (slave macvlan18): Releasing active interface
[  694.015968][T28986] bond1: option mode: unable to set because the bond device is up
[  694.037289][T28986] 8021q: adding VLAN 0 to HW filter on device macvlan19
[  694.045973][T28986] bond1: (slave macvlan19): Enslaving as an active interface with a down link
[  694.060349][T28986] bond1: (slave macvlan19): Releasing active interface
[  694.080546][T28990] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode
[  694.086152][T28990] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode
[  694.089147][T28990] tipc: Resetting bearer <eth:syzkaller0>
[  694.123507][T28993] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  694.123533][T28994] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  694.154029][T28995] netlink: 'syz.2.6073': attribute type 4 has an invalid length.
[  694.437689][T29009] netlink: 'syz.1.6079': attribute type 5 has an invalid length.
[  694.448077][T29011] netlink: 'syz.1.6079': attribute type 5 has an invalid length.
[  694.448571][T29009] netlink: 104 bytes leftover after parsing attributes in process `syz.1.6079'.
[  694.653020][T29017] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  694.925398][ T5902] ip6_tnl_xmit_ctl: 21 callbacks suppressed
[  694.925413][ T5902] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  695.007147][T29027] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6083'.
[  695.028348][T29023] mac80211_hwsim hwsim3 syzkaller0: left promiscuous mode
[  695.031208][T29023] mac80211_hwsim hwsim3 syzkaller0: left allmulticast mode
[  695.034547][T29023] tipc: Resetting bearer <eth:syzkaller0>
[  695.038385][T29023] openvswitch: netlink: VXLAN extension 274 out of range max 1
[  695.041667][T29028] openvswitch: netlink: VXLAN extension 274 out of range max 1
[  695.139980][T29034] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6086'.
[  695.149983][T29035] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6085'.
[  695.154946][T29034] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  695.159946][T29025] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6085'.
[  695.214396][    C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  695.225011][T29035] --map-set only usable from mangle table
[  695.234559][    C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  695.330917][T29037] tipc: Resetting bearer <eth:syzkaller0>
[  695.361445][T29040] 8021q: adding VLAN 0 to HW filter on device bond1
[  695.377318][T29041] 8021q: adding VLAN 0 to HW filter on device macvlan20
[  695.383749][T29041] bond1: (slave macvlan20): Enslaving as a backup interface with a down link
[  695.405876][T29046] DL<Y speed is unknown, defaulting to 1000
[  695.465962][ T5728] ------------[ cut here ]------------
[  695.468715][ T5728] RTNL: assertion failed at ./include/net/netdev_lock.h (72)
[  695.484846][ T5728] WARNING: CPU: 1 PID: 5728 at ./include/net/netdev_lock.h:72 __linkwatch_sync_dev+0x303/0x350
[  695.488296][ T5728] Modules linked in:
[  695.490668][ T5728] CPU: 1 UID: 0 PID: 5728 Comm: kworker/u8:2 Not tainted 6.16.0-rc5-syzkaller-00212-g9f735b6f8a77-dirty #0 PREEMPT(full) 
[  695.495831][ T5728] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  695.499371][ T5728] Workqueue: bond1 bond_mii_monitor
[  695.501160][ T5728] RIP: 0010:__linkwatch_sync_dev+0x303/0x350
[  695.503185][ T5728] Code: 7c fe ff ff e8 9e 55 62 f8 c6 05 9e f6 2d 06 01 90 48 c7 c7 00 6b 93 8c 48 c7 c6 36 d9 9d 8d ba 48 00 00 00 e8 7e 3f 26 f8 90 <0f> 0b 90 90 e9 4d fe ff ff 44 89 f1 80 e1 07 38 c1 0f 8c 22 fd ff
[  695.509691][ T5728] RSP: 0018:ffffc900030cf670 EFLAGS: 00010246
[  695.512041][ T5728] RAX: 5dac7cd3a7a74c00 RBX: ffff888120ed6000 RCX: ffff888021be3980
[  695.515216][ T5728] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002
[  695.518215][ T5728] RBP: 0000000000000000 R08: 0000000000000003 R09: 0000000000000004
[  695.520765][ T5728] R10: dffffc0000000000 R11: fffffbfff1bfaa64 R12: 1ffff110241dac5d
[  695.523355][ T5728] R13: dffffc0000000000 R14: ffffffff8c1b47a8 R15: 0000000000000000
[  695.526254][ T5728] FS:  0000000000000000(0000) GS:ffff8881a3c26000(0000) knlGS:0000000000000000
[  695.529258][ T5728] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  695.531607][ T5728] CR2: 00007fd220ee56c0 CR3: 0000000021a56000 CR4: 00000000000006f0
[  695.535070][ T5728] Call Trace:
[  695.536181][ T5728]  <TASK>
[  695.537135][ T5728]  ? ethtool_op_get_link+0xd/0x70
[  695.538834][ T5728]  ethtool_op_get_link+0x15/0x70
[  695.540579][ T5728]  bond_check_dev_link+0x447/0x6c0
[  695.542334][ T5728]  ? __pfx_bond_check_dev_link+0x10/0x10
[  695.544274][ T5728]  ? netdev_lower_get_next_private_rcu+0x9f/0x100
[  695.546236][ T5728]  bond_mii_monitor+0x428/0x2e00
[  695.547979][ T5728]  ? __lock_acquire+0xab9/0xd20
[  695.549565][ T5728]  ? bond_mii_monitor+0x153/0x2e00
[  695.551529][ T5728]  ? __pfx_bond_mii_monitor+0x10/0x10
[  695.553520][ T5728]  ? register_lock_class+0x51/0x320
[  695.555573][ T5728]  ? __lock_acquire+0xab9/0xd20
[  695.557094][ T5728]  ? process_scheduled_works+0x9ef/0x17b0
[  695.558932][ T5728]  ? _raw_spin_unlock_irq+0x23/0x50
[  695.560600][ T5728]  ? process_scheduled_works+0x9ef/0x17b0
[  695.562437][ T5728]  ? process_scheduled_works+0x9ef/0x17b0
[  695.564436][ T5728]  process_scheduled_works+0xae1/0x17b0
[  695.566282][ T5728]  ? __pfx_process_scheduled_works+0x10/0x10
[  695.568180][ T5728]  worker_thread+0x8a0/0xda0
[  695.569757][ T5728]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  695.571684][ T5728]  ? __kthread_parkme+0x7b/0x200
[  695.573253][ T5728]  kthread+0x711/0x8a0
[  695.574747][ T5728]  ? __pfx_worker_thread+0x10/0x10
[  695.576404][ T5728]  ? __pfx_kthread+0x10/0x10
[  695.577913][ T5728]  ? _raw_spin_unlock_irq+0x23/0x50
[  695.579625][ T5728]  ? lockdep_hardirqs_on+0x9c/0x150
[  695.581532][ T5728]  ? __pfx_kthread+0x10/0x10
[  695.583262][ T5728]  ret_from_fork+0x3fc/0x770
[  695.585114][ T5728]  ? __pfx_ret_from_fork+0x10/0x10
[  695.587054][ T5728]  ? __switch_to_asm+0x39/0x70
[  695.588978][ T5728]  ? __switch_to_asm+0x33/0x70
[  695.590920][ T5728]  ? __pfx_kthread+0x10/0x10
[  695.592758][ T5728]  ret_from_fork_asm+0x1a/0x30
[  695.594850][ T5728]  </TASK>
[  695.596114][ T5728] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  695.598988][ T5728] CPU: 1 UID: 0 PID: 5728 Comm: kworker/u8:2 Not tainted 6.16.0-rc5-syzkaller-00212-g9f735b6f8a77-dirty #0 PREEMPT(full) 
[  695.603792][ T5728] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  695.607634][ T5728] Workqueue: bond1 bond_mii_monitor
[  695.609342][ T5728] Call Trace:
[  695.610598][ T5728]  <TASK>
[  695.611778][ T5728]  dump_stack_lvl+0x99/0x250
[  695.613357][ T5728]  ? __asan_memcpy+0x40/0x70
[  695.615197][ T5728]  ? __pfx_dump_stack_lvl+0x10/0x10
[  695.617252][ T5728]  ? __pfx__printk+0x10/0x10
[  695.619082][ T5728]  panic+0x2db/0x790
[  695.620592][ T5728]  ? __pfx_panic+0x10/0x10
[  695.622358][ T5728]  ? ret_from_fork_asm+0x1a/0x30
[  695.624344][ T5728]  __warn+0x31b/0x4b0
[  695.625954][ T5728]  ? __linkwatch_sync_dev+0x303/0x350
[  695.628108][ T5728]  ? __linkwatch_sync_dev+0x303/0x350
[  695.630222][ T5728]  report_bug+0x2be/0x4f0
[  695.631947][ T5728]  ? __linkwatch_sync_dev+0x303/0x350
[  695.633964][ T5728]  ? __linkwatch_sync_dev+0x303/0x350
[  695.636000][ T5728]  ? __linkwatch_sync_dev+0x305/0x350
[  695.638046][ T5728]  handle_bug+0x84/0x160
[  695.639747][ T5728]  exc_invalid_op+0x1a/0x50
[  695.641553][ T5728]  asm_exc_invalid_op+0x1a/0x20
[  695.643463][ T5728] RIP: 0010:__linkwatch_sync_dev+0x303/0x350
[  695.645800][ T5728] Code: 7c fe ff ff e8 9e 55 62 f8 c6 05 9e f6 2d 06 01 90 48 c7 c7 00 6b 93 8c 48 c7 c6 36 d9 9d 8d ba 48 00 00 00 e8 7e 3f 26 f8 90 <0f> 0b 90 90 e9 4d fe ff ff 44 89 f1 80 e1 07 38 c1 0f 8c 22 fd ff
[  695.653200][ T5728] RSP: 0018:ffffc900030cf670 EFLAGS: 00010246
[  695.655146][ T5728] RAX: 5dac7cd3a7a74c00 RBX: ffff888120ed6000 RCX: ffff888021be3980
[  695.658154][ T5728] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002
[  695.661382][ T5728] RBP: 0000000000000000 R08: 0000000000000003 R09: 0000000000000004
[  695.664390][ T5728] R10: dffffc0000000000 R11: fffffbfff1bfaa64 R12: 1ffff110241dac5d
[  695.667465][ T5728] R13: dffffc0000000000 R14: ffffffff8c1b47a8 R15: 0000000000000000
[  695.670451][ T5728]  ? ethtool_op_get_link+0xd/0x70
[  695.672441][ T5728]  ethtool_op_get_link+0x15/0x70
[  695.674399][ T5728]  bond_check_dev_link+0x447/0x6c0
[  695.676439][ T5728]  ? __pfx_bond_check_dev_link+0x10/0x10
[  695.678650][ T5728]  ? netdev_lower_get_next_private_rcu+0x9f/0x100
[  695.681099][ T5728]  bond_mii_monitor+0x428/0x2e00
[  695.683096][ T5728]  ? __lock_acquire+0xab9/0xd20
[  695.685049][ T5728]  ? bond_mii_monitor+0x153/0x2e00
[  695.687084][ T5728]  ? __pfx_bond_mii_monitor+0x10/0x10
[  695.689108][ T5728]  ? register_lock_class+0x51/0x320
[  695.691075][ T5728]  ? __lock_acquire+0xab9/0xd20
[  695.692984][ T5728]  ? process_scheduled_works+0x9ef/0x17b0
[  695.695224][ T5728]  ? _raw_spin_unlock_irq+0x23/0x50
[  695.697052][ T5728]  ? process_scheduled_works+0x9ef/0x17b0
[  695.698829][ T5728]  ? process_scheduled_works+0x9ef/0x17b0
[  695.700761][ T5728]  process_scheduled_works+0xae1/0x17b0
[  695.702483][ T5728]  ? __pfx_process_scheduled_works+0x10/0x10
[  695.704324][ T5728]  worker_thread+0x8a0/0xda0
[  695.705721][ T5728]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  695.707598][ T5728]  ? __kthread_parkme+0x7b/0x200
[  695.709143][ T5728]  kthread+0x711/0x8a0
[  695.710597][ T5728]  ? __pfx_worker_thread+0x10/0x10
[  695.712614][ T5728]  ? __pfx_kthread+0x10/0x10
[  695.714435][ T5728]  ? _raw_spin_unlock_irq+0x23/0x50
[  695.716469][ T5728]  ? lockdep_hardirqs_on+0x9c/0x150
[  695.718469][ T5728]  ? __pfx_kthread+0x10/0x10
[  695.720314][ T5728]  ret_from_fork+0x3fc/0x770
[  695.722118][ T5728]  ? __pfx_ret_from_fork+0x10/0x10
[  695.724051][ T5728]  ? __switch_to_asm+0x39/0x70
[  695.725896][ T5728]  ? __switch_to_asm+0x33/0x70
[  695.727762][ T5728]  ? __pfx_kthread+0x10/0x10
[  695.729620][ T5728]  ret_from_fork_asm+0x1a/0x30
[  695.731513][ T5728]  </TASK>
[  695.733456][ T5728] Kernel Offset: disabled
[  695.735146][ T5728] Rebooting in 86400 seconds..

VM DIAGNOSIS:
11:06:12  Registers:
info registers vcpu 0

CPU#0
RAX=ffffffff81f625d7 RBX=ffffc90006c87600 RCX=ffff88802fe38000 RDX=0000000000000000
RSI=0000000000000972 RDI=0000000000000972 RBP=ffffc90006c872b0 RSP=ffffc90006c87160
R8 =ffffea0000b8d987 R9 =1ffffd4000171b30 R10=dffffc0000000000 R11=fffff94000171b31
R12=ffffea0000b8d980 R13=0000000000000972 R14=0000000000000972 R15=0000000000000001
RIP=ffffffff81f625d7 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007fb4996056c0 ffffffff 00c00000
GS =0000 ffff8880b8626000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000555572e44808 CR3=000000000df38000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=ffffffffffffffff ffffffffffffffff
XMM02=0000000000000000 0000000000000000 XMM03=ffffffffffffffff ffffffffffffffff
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 000000524f525245 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 00524f5252450040 XMM09=0000000000000000 00007fad22c11ec1
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=000000000000003a RBX=000000000000003a RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc900030cee10
R8 =ffff888107288237 R9 =1ffff11020e51046 R10=dffffc0000000000 R11=ffffffff85460db0
R12=dffffc0000000000 R13=ffffffff99aee8c0 R14=ffffffff99df32e0 R15=0000000000000000
RIP=ffffffff85460e2c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c26000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fd220ee56c0 CR3=0000000021a56000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000001 XMM01=0000000000000014 000000000001df8a
XMM02=f803020490002fff e803000490002fff XMM03=040100001608060c 0168f20008002fff
XMM04=0000000000000000 0000000000000000 XMM05=000055557cc003fc 000055557cbfeeb0
XMM06=0000000000000000 0000000000000000 XMM07=08002ffff8030204 90002fffe8030004
XMM08=90002fffd8030004 88002fffd00302b8 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
