last executing test programs:

1.540283268s ago: executing program 2 (id=14661):
syz_emit_ethernet(0xaf, &(0x7f0000000800)={@local, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cedd00", 0x79, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfbfffff8, 0x0, [{0x3, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af2502"}, {0x0, 0x1, "000000050000000026000400"}, {0x3, 0x1, "fe906d26efe393"}]}}}}}}, 0x0)

1.490109098s ago: executing program 2 (id=14664):
r0 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0x4c, 0x10, 0x401, 0x70bd26, 0x255fdbfd, {0x0, 0x0, 0x0, 0x0, 0xa75b, 0x4c901}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bond={{0x9}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BOND_TLB_DYNAMIC_LB={0x0, 0x1b, 0xf9}, @IFLA_BOND_PEER_NOTIF_DELAY={0x3, 0x1c, 0x4}, @IFLA_BOND_DOWNDELAY={0x8, 0x5, 0x5}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20008000}, 0x24048044)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0xfd94, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYRES32=r1], 0x7c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b40)={{0x14}, [@NFT_MSG_DELFLOWTABLE={0x20, 0x18, 0xa, 0x201, 0x0, 0x0, {0x3, 0x0, 0x9}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x5}]}], {0x14}}, 0x48}}, 0x0)
sendmsg$NFT_MSG_GETOBJ(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000002240)={&(0x7f0000000680)={0x20, 0x15, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x1c}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000011}, 0x2404000a)
ioctl$sock_inet_SIOCGIFBRDADDR(r1, 0x8919, &(0x7f0000000000)={'veth0\x00', {0x2, 0x0, @multicast1}})

1.428693438s ago: executing program 2 (id=14667):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0)
ioctl$XFS_IOC_PATH_TO_FSHANDLE(r0, 0xc0385868, &(0x7f0000000200)={r0, &(0x7f0000000100)='fou\x00', 0x20000, &(0x7f0000000140)={@_ha_fsid={[0x328, 0x7]}, {0x96d3, 0x3, 0x418c368e, 0x9}}, 0x4, &(0x7f0000000180)={@_ha_fsid}, &(0x7f00000001c0)=0x2})

1.370116209s ago: executing program 2 (id=14669):
r0 = epoll_create1(0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0xa, 0x0, &(0x7f0000000000)="259a53f271a76d2688a2", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
ioctl$FS_IOC_SETFLAGS(r0, 0x40088a01, &(0x7f0000000000)=0x100)
sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000000c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="38002f800c0002000000000000000000280003801c0003800600010000000000080002000200000006000300a3aa0000080001"], 0x54}}, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r0, &(0x7f0000000080)={0x40000000})
socket$pppl2tp(0x18, 0x1, 0x1)
socket$inet6_udp(0xa, 0x2, 0x0)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
ioctl$PPPIOCGL2TPSTATS(r1, 0x80487436, 0xfffffffffffffffd)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
socket(0x2, 0x80805, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="0c04000010000104000000000000000000480000", @ANYRES32=r2, @ANYBLOB="101000000000000008000d0005000000e4031680a40001800c00070000000000adffffff0c00", @ANYRES16=r2], 0x40c}}, 0x8800)
r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r3, 0xaf01, 0x0)
r4 = socket(0x1e, 0x4, 0x0)
connect$inet(r4, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10)
ioctl$XFS_IOC_PATH_TO_FSHANDLE(r3, 0xc0385868, &(0x7f0000000200)={r3, &(0x7f0000000100)='fou\x00', 0x20000, &(0x7f0000000140)={@_ha_fsid={[0x328, 0x7]}, {0x96d3, 0x3, 0x418c368e, 0x9}}, 0x4, &(0x7f0000000180)={@_ha_fsid}, &(0x7f00000001c0)=0x2})

1.368717203s ago: executing program 2 (id=14670):
ioctl$BTRFS_IOC_SUBVOL_CREATE(0xffffffffffffffff, 0x5000940e, &(0x7f0000000040)={{}, "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"})
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0)
r1 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000040)=0x80000004, 0x4)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x33, &(0x7f0000000640)={0x1, &(0x7f0000000680)=[{0x6, 0x0, 0x0, 0x2}]}, 0x10)
bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x1, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x41}}, 0xfffffffc}, 0x1c)
listen(r1, 0x8)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r2 = socket$kcm(0x2, 0xa, 0x2)
sendmsg$inet6(r1, &(0x7f00000013c0)={&(0x7f0000001040)={0xa, 0x4e24, 0x88f2, @loopback, 0x8000}, 0x1c, &(0x7f0000001280)=[{&(0x7f0000001080)="e85f15aba5378d8aefb75b094c73ab0e2c7519e44e06779c74a244ada254e1c3481512aef259e1d69179d4a5fbe998261b734468db7a196f4d968cf23949fc9bcb3a1bffd4c79763b36b96714825ac9dbb5d1a861bc767b7867d8e880d2985e59163f61ccffb789512fdf18c", 0x6c}, {&(0x7f0000001100)="4a8cbcb15fc5d403704f4427556b1dae0eb3aa318ffa06817663f01144957397ad69f65a85b5195d90e486294edf87a46216b581ae43902235d17bc233fe24752e4ac0484d7530cb41141187f0d42eb6aefdbb5758d4e9c8270700273f88d96fc70cef964e706e7d1ad745f7343da9964740aa", 0x73}, {&(0x7f0000001180)="69bc8615c65f9114ac6b136b3022883d4b5fae27c286c31bc258ffddfde817a962379f937dd5d5f18076293edb5ac6f723b01cbb7a09fd93589982b9753a362e73e70fce2a3701bb4d12baa3f201b49138cb06a12c19437248ba363a07f05e7bf7154da6e37f52cae5e7d9fa6011e231079e7a82f209e71c0d4cab3b72167825fcba230ba01abf69aa22c0566cf6268ce30c33e28e5544716ff51a35fda69bbcac019ded901b7305b2c4c0806395a5f2640e52d183b760a763a0500c0f0093e3172d398ee0fe0587e4ec984adb2b11591076a4bd2693b59c74d436655b83150fd86c6ea6f7499c0c", 0xe8}], 0x3, &(0x7f00000012c0)=[@hopopts_2292={{0xb0, 0x29, 0x36, {0x16, 0x12, '\x00', [@generic={0x0, 0x34, "c130628ee34a8dbfd710eaca6ddd1346400a18c39a43a8079e5d8d8369a0431cfd5a2701a0af76e6e4053ac69ee404b8d84cf284"}, @calipso={0x7, 0x30, {0x2, 0xa, 0x7, 0xbda4, [0x800, 0x8, 0x6, 0x9, 0x14]}}, @calipso={0x7, 0x28, {0x1, 0x8, 0x5, 0x6, [0x4, 0x3, 0x10001, 0x10001]}}, @pad1]}}}, @tclass={{0x14, 0x29, 0x43, 0xaa87}}, @hoplimit={{0x14, 0x29, 0x34, 0x7}}], 0xe0}, 0x40c4)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}})
socket$nl_route(0x10, 0x3, 0x0)
write$tun(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="001c86dd2000100000004000000060ec97000fc83c00fe8000000000000000000000000000aaff020000000000000000000000000001"], 0xffe)

1.218191456s ago: executing program 0 (id=14672):
r0 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000e40)=@raw={'raw\x00', 0x3c1, 0x3, 0x5a0, 0x0, 0xffffff80, 0x178, 0xd0040000, 0x178, 0x4d0, 0x22b, 0x258, 0x4d0, 0x258, 0x2034, 0x0, {[{{@uncond, 0x1d, 0x300, 0x368, 0x340, {0x1e0002a8, 0x7203000000000000}, [@common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x1a, 0x64, [{}, {0x0, 0x0, 0x1}, {0x35, 0x40}, {}, {0x0, 0x7, 0x8}, {}, {0x0, 0x0, 0xfd}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x0, 0x4}, {}, {0x6}, {}, {0x9}, {}, {}, {}, {0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0x80000000}, {0x870}, {}, {}, {}, {0x2, 0xfe}, {0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x3, 0x10}, {}, {}, {0xfffe, 0x7, 0x4}, {0x0, 0x0, 0x1}, {0x0, 0x1}, {0x8, 0x8, 0x0, 0xfffffffc}, {}, {0x0, 0xfc, 0xe4}, {0x0, 0x0, 0xff}, {}, {0x3}, {}, {0x0, 0x0, 0x0, 0x10}, {}, {}, {0x0, 0x0, 0x0, 0xffffffff}, {}, {0x4, 0x8a}, {}, {}, {}, {0x0, 0x4}]}}, @common=@inet=@socket1={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x1c, 0x7, 0x279, 0x2, 'netbios-ns\x00', 'syz1\x00', {0x170}}}}, {{@ipv6={@private2, @empty, [0xff, 0x0, 0xffffff00, 0xff000000], [0xff000000, 0xff000000, 0xffffff00], 'vlan1\x00', 'pim6reg1\x00', {}, {0xff}, 0x0, 0x9, 0x1, 0x12}, 0x0, 0x100, 0x168, 0x0, {}, [@common=@ah={{0x30}}, @inet=@rpfilter={{0x28}, {0x4}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x11, 0x0, 0x0, 0x0, 'syz1\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x600) (async)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000e40)=@raw={'raw\x00', 0x3c1, 0x3, 0x5a0, 0x0, 0xffffff80, 0x178, 0xd0040000, 0x178, 0x4d0, 0x22b, 0x258, 0x4d0, 0x258, 0x2034, 0x0, {[{{@uncond, 0x1d, 0x300, 0x368, 0x340, {0x1e0002a8, 0x7203000000000000}, [@common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x1a, 0x64, [{}, {0x0, 0x0, 0x1}, {0x35, 0x40}, {}, {0x0, 0x7, 0x8}, {}, {0x0, 0x0, 0xfd}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x0, 0x4}, {}, {0x6}, {}, {0x9}, {}, {}, {}, {0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0x80000000}, {0x870}, {}, {}, {}, {0x2, 0xfe}, {0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x3, 0x10}, {}, {}, {0xfffe, 0x7, 0x4}, {0x0, 0x0, 0x1}, {0x0, 0x1}, {0x8, 0x8, 0x0, 0xfffffffc}, {}, {0x0, 0xfc, 0xe4}, {0x0, 0x0, 0xff}, {}, {0x3}, {}, {0x0, 0x0, 0x0, 0x10}, {}, {}, {0x0, 0x0, 0x0, 0xffffffff}, {}, {0x4, 0x8a}, {}, {}, {}, {0x0, 0x4}]}}, @common=@inet=@socket1={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x1c, 0x7, 0x279, 0x2, 'netbios-ns\x00', 'syz1\x00', {0x170}}}}, {{@ipv6={@private2, @empty, [0xff, 0x0, 0xffffff00, 0xff000000], [0xff000000, 0xff000000, 0xffffff00], 'vlan1\x00', 'pim6reg1\x00', {}, {0xff}, 0x0, 0x9, 0x1, 0x12}, 0x0, 0x100, 0x168, 0x0, {}, [@common=@ah={{0x30}}, @inet=@rpfilter={{0x28}, {0x4}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x11, 0x0, 0x0, 0x0, 'syz1\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x600)
r1 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
ioctl$sock_ipv6_tunnel_SIOCDELPRL(r2, 0x89f6, &(0x7f0000000200)={'sit0\x00', &(0x7f0000000140)={@loopback, 0x1, 0x0, 0x20, 0x0, [{@loopback}, {@empty}]}}) (async)
ioctl$sock_ipv6_tunnel_SIOCDELPRL(r2, 0x89f6, &(0x7f0000000200)={'sit0\x00', &(0x7f0000000140)={@loopback, 0x1, 0x0, 0x20, 0x0, [{@loopback}, {@empty}]}})
write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x32600) (async)
write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x32600)
socket$inet_smc(0x2b, 0x1, 0x0) (async)
r3 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_buf(r3, 0x0, 0x8008000000010, &(0x7f0000005e40)="17000000020001000003d68c5ee17688a2003208020300ecff3f0200000300000a000000009afc5ad9485bbb6a880000d6c8db0000dba67e060180000a0000f10607bdff59100ac45761407a681f009cee4a5acb3da400001fb700674f19b44e09f9315033bf79ac2dff060115003901000000000000ea000000000000000009ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e000"/184, 0xb8) (async)
setsockopt$inet_buf(r3, 0x0, 0x8008000000010, &(0x7f0000005e40)="17000000020001000003d68c5ee17688a2003208020300ecff3f0200000300000a000000009afc5ad9485bbb6a880000d6c8db0000dba67e060180000a0000f10607bdff59100ac45761407a681f009cee4a5acb3da400001fb700674f19b44e09f9315033bf79ac2dff060115003901000000000000ea000000000000000009ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e000"/184, 0xb8)
setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f00000000c0)=0x1, 0x4)
connect$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x10) (async)
connect$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x10)
close(r3)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0)
ioctl$XFS_IOC_GOINGDOWN(r1, 0x8004587d, &(0x7f0000000040)=0x1)
connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e20, @private=0xa010102}, 0x10)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
socket(0x400000000010, 0x3, 0x0)
socket$netlink(0x10, 0x3, 0x0) (async)
socket$netlink(0x10, 0x3, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) (async)
sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084)
socket$inet6_tcp(0xa, 0x1, 0x0) (async)
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r8, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) (async)
setsockopt$inet6_tcp_int(r8, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet6(r8, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c)
ioctl$FS_IOC_SETFSLABEL(r8, 0x41009432, 0x0)
setsockopt$inet6_tcp_TCP_ULP(r8, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
setsockopt$inet6_tcp_TLS_TX(r8, 0x11a, 0x1, &(0x7f0000000140)=@gcm_256={{0x303}, "6ae04425ace3f60c", "acba84f091ccf68a710300f23c58140000ffffffffffffffdf002100", "0f9dafb4", "ffffffffffffffff"}, 0x38)
writev(r8, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1)

1.110646929s ago: executing program 0 (id=14673):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0e00100004000000080000000700000000000000f7c928d6d892e36b2222f2008628cd74677d71c9565d5fd72e1452438f42be099a63d7b9ded89e1cc00ec9b86ab55b5ac52de385e9d4ffb3c01c1df1", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xc, 0xd, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xaa9a}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xa0000000}, {0x3, 0x3, 0x3, 0xa, 0x5}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x15}}, @call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000080)={<r3=>r2, 0x380, 0x8, 0x7})
bpf$LINK_DETACH(0x22, &(0x7f00000000c0)=r3, 0x4)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d80)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="76ea090000000000009ba56a88ca", 0x0, 0x6400, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
r4 = syz_genetlink_get_family_id$fou(&(0x7f0000000040), 0xffffffffffffffff)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xe, 0xe, &(0x7f00000022c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x4, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x4}, 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x21)
r5 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_EVENTS(r5, 0x84, 0xb, &(0x7f0000000040)={0x5, 0x1, 0xb1, 0x0, 0x12, 0xda, 0xb1, 0x4c, 0x9, 0x1, 0x2, 0x7, 0x29, 0x48}, 0xe)
shutdown(r5, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={<r6=>0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000340)={r6, @in={{0x2, 0x4e20, @empty}}, 0xa, 0x310, 0x8, 0x1ff, 0x2, 0xfff, 0x8}, &(0x7f0000000400)=0x9c)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$FOU_CMD_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x54, r4, 0x1, 0x70bd25, 0x25dfdbfb, {}, [@FOU_ATTR_PEER_V6={0x14, 0x9, @loopback}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e20}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e20}, @FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @private0={0xfc, 0x0, '\x00', 0x1}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4810}, 0x810)
r8 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), r3)
ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000300)={'vxcan0\x00', <r9=>0x0})
r10 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r11=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000000)={'lo\x00', <r12=>0x0})
sendmsg$nl_route_sched(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r12, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x4, 0x2, 0x0, 0x0, 0x7, 0x8}, {0x12, 0x3, 0x0, 0x1, 0x8001, 0x2400}, 0xa5, 0x4, 0x10100000}}, @TCA_TBF_BURST={0x8, 0x6, 0x3ff}]}}]}, 0x60}}, 0x44080)
sendmsg$ETHTOOL_MSG_RINGS_SET(r0, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x60, r8, 0x200, 0x70bd27, 0x25dfdbff, {}, [@ETHTOOL_A_RINGS_HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}]}, @ETHTOOL_A_RINGS_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}]}, @ETHTOOL_A_RINGS_RX={0x8, 0x6, 0xa}]}, 0x60}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x82}, [@ldst={0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd96, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
socket$inet6_sctp(0xa, 0x5, 0x84)

988.433238ms ago: executing program 0 (id=14674):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_add_memb(r0, 0x107, 0x18, &(0x7f00000004c0)={0x0, 0x3, 0x6}, 0x10)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="200000006800e97800000000000000000a0000000000000008000500", @ANYRES8=r1], 0x20}}, 0x0)
sendmsg$nl_route(r2, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000001800090400000000000000000a000000000000030000000008001e0001"], 0x24}}, 0x0)
r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000680), 0xffffffffffffffff)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000ec0)={'wpan0\x00', <r6=>0x0})
sendmsg$NL802154_CMD_DEL_SEC_KEY(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x1c, r4, 0x1, 0x0, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="640000001000370400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000440012800e00010069703665727370616e00000030000280140006002001000000000000000000000000000114000700fc020000000000000000000000000000040012005588f99265c3de226f7b65439fb04e3acefa40c27996933baa5b4b091af56b008346f9f6be9df6995ec7"], 0x64}}, 0x0)

988.164684ms ago: executing program 0 (id=14675):
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0)
ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r0, 0x4008941a, &(0x7f0000000040)) (async)
ioctl$TUNGETVNETBE(0xffffffffffffffff, 0x800454df, &(0x7f0000000080)=0x1) (async, rerun: 32)
ioctl$XFS_IOC_EXCHANGE_RANGE(r0, 0x40285881, &(0x7f00000000c0)={r0, 0x0, 0x3, 0x0, 0x15, 0xf}) (async, rerun: 32)
r1 = socket$netlink(0x10, 0x3, 0x10)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000100)={'pim6reg0\x00', {0x2, 0x4e20, @private=0xa010100}})
ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, &(0x7f0000000140)) (async)
ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000180)={<r2=>0x0, 0x7ba14c92, 0x694, 0x1})
ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000000580)={r2, 0x7, 0x0, 0x1})
r3 = socket$inet6(0xa, 0x1, 0x2) (async, rerun: 32)
getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000980)={<r4=>0x0, 0xfff, 0x1, [0x3]}, &(0x7f00000009c0)=0xa) (rerun: 32)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f0000000a00)={r4, 0x81, 0x10}, 0xc) (async)
r5 = socket$inet_sctp(0x2, 0x0, 0x84) (async)
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, &(0x7f0000000a40)={<r6=>r4, 0x0, 0x0, 0x1, 0x7e528839}, &(0x7f0000000a80)=0x18)
getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r5, 0x84, 0xa, &(0x7f0000000ac0)={0x9, 0xb6, 0x9, 0x0, 0x5, 0x4, 0x3, 0x8, <r7=>r6}, &(0x7f0000000b00)=0x20) (async)
ioctl$XFS_IOC_FSBULKSTAT_SINGLE(r1, 0xc0205866, &(0x7f0000000c80)={&(0x7f0000000b40)=0x2, 0x81, &(0x7f0000000b80)=[{}], &(0x7f0000000c40)})
setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000cc0)='dvmrp1\x00', 0x10) (async)
setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r5, 0x84, 0x7c, &(0x7f0000000d00)={r6, 0x4, 0x7}, 0x8)
connect$inet(r5, &(0x7f0000000d40)={0x2, 0x4e20, @local}, 0x10) (async)
socketpair(0x27, 0x5, 0xffffffff, &(0x7f0000000d80)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff})
sendmsg$IPCTNL_MSG_CT_GET_STATS(r9, &(0x7f0000000e80)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000e40)={&(0x7f0000000e00)={0x14, 0x5, 0x1, 0x801, 0x0, 0x0, {0x2, 0x0, 0x9}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x24008000}, 0x1) (async, rerun: 64)
r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f00), r1) (rerun: 64)
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001040)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001000)={&(0x7f0000000f40)={0x90, r10, 0x400, 0x70bd25, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0xa, 0x67}}}}, [@NL80211_ATTR_CSA_C_OFFSETS_TX={0x8, 0xcd, [0xfeff, 0x3]}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x6, 0xcd, [0x1a]}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x6, 0xcd, [0xc]}, @NL80211_ATTR_DURATION={0x8, 0x57, 0xf35}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7ff}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x10}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x1}], @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x3}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xd}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7}, @NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}]}, 0x90}, 0x1, 0x0, 0x0, 0x300048c1}, 0x8000) (async)
sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r9, &(0x7f0000001180)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001140)={&(0x7f00000010c0)={0x48, 0x1412, 0x300, 0x70bd2b, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x1}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x3}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x2}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) (async, rerun: 64)
getsockopt$inet_sctp_SCTP_DELAYED_SACK(r9, 0x84, 0x10, &(0x7f00000011c0)=@assoc_value={r7, 0xffff911c}, &(0x7f0000001200)=0x8) (async, rerun: 64)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000001240)={'vxcan1\x00', <r11=>0x0})
sendmsg$can_j1939(r8, &(0x7f0000001400)={&(0x7f0000001280)={0x1d, r11, 0x2, {0x0, 0xff, 0x4}, 0xfe}, 0x18, &(0x7f00000013c0)={&(0x7f00000012c0)="809feac63a869b452ac6135ddfe065168f22c6e7bd1a93b8d93575ddabe0e89725e214c4d452d2d81dbe69a3b8509c0850c1e642fb02d0276ae951d9e9fdcecb5a0c6846ea85fffeec197a368edbfb5a2648744edcfb273711a445f30f21c58a9667f1a5b540a86fcf10cd031f678f3c98b1433f268c171c363a3f1cfa3425a44725c0262fede0e2e1f7e897975f1ff23044251e84a94c47bca5eb5b7f3dbb0567ffa9848c081520f9e98b550c45684a1d9abd9d54580056a3ac6874c6d1156ca1395ebb276297630604b9680ac51fae3fdfb6d9814fc901ab33d76906eea932592c2ec9", 0xe4}, 0x1, 0x0, 0x0, 0x80}, 0x880)
ioctl$F2FS_IOC_SET_PIN_FILE(r1, 0x4004f50d, &(0x7f0000001440)) (async)
r12 = socket$inet_sctp(0x2, 0x1, 0x84)
ioctl$OCFS2_IOC_RESVSP64(r12, 0x4030582a, &(0x7f0000001480)={0x1, 0x1, 0x9, 0x2, 0x2c, 0x7ff})

900.970686ms ago: executing program 0 (id=14676):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="14000000100001"], 0xcdc}}, 0x20040010)
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=<r1=>0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2)
sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010023010000340200000200000008000100", @ANYRES32=r1], 0x1c}}, 0x0)
write$nci(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="6103099b020107c4"], 0xf)
read$nci(r0, 0x0, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$NBD_CMD_CONNECT(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000000100000008000100400000000c000200700f0000000000000c00060003000000000000000a000a00272d5d29212b0000140007"], 0x6c}, 0x1, 0x0, 0x0, 0x8040040}, 0x0)

629.138538ms ago: executing program 1 (id=14678):
r0 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10)
sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001a00010000000080fbdbdf250a7480fd000000000000000008000200640100fd"], 0x24}, 0x1, 0xffef}, 0x20000050)

540.467995ms ago: executing program 1 (id=14679):
socket$netlink(0x10, 0x3, 0x0) (async)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge0\x00', <r1=>0x0}) (async, rerun: 64)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (rerun: 64)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r3=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=ANY=[@ANYBLOB="6c0000001000010400d201000072f60000020000", @ANYRES32=r3, @ANYBLOB="05"], 0x6c}, 0x1, 0x0, 0x0, 0x10004000}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="780000001000830404000000fedbdf2500007400", @ANYRES32=r1, @ANYRESDEC=0x0], 0x78}, 0x1, 0x0, 0x0, 0x800}, 0x0) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 32)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 32)
sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x3a, &(0x7f00000044c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="580000000206010400000000000000008657a1f9beefdb2108000640000000090500010006000000050005000a0073797a310000000013000300686173683a6e65742c69666163650000"], 0x58}, 0x1, 0x0, 0x0, 0x24000804}, 0x4040800)
r6 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r6, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) (async)
listen(r6, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, <r7=>0xffffffffffffffff}) (async, rerun: 32)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0x151da000) (async, rerun: 32)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x6, 0x3032, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) (async)
getsockopt$sock_buf(r7, 0x1, 0x1c, 0x0, &(0x7f00000000c0))
r8 = socket$inet6(0x10, 0x2, 0x4)
sendto$inet6(r8, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0cffc8792cd8000080", 0x4c, 0x0, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x0, <r9=>0x0}, &(0x7f0000000280)=0x14)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r8, 0x89f1, &(0x7f0000000340)={'syztnl0\x00', &(0x7f00000002c0)={'syztnl1\x00', r9, 0x29, 0x9, 0x2, 0x4, 0x30, @local, @remote, 0x98, 0x80, 0x5, 0x800}}) (async)
r10 = accept(r6, 0x0, 0x0)
recvfrom$packet(r10, &(0x7f0000000680)=""/211, 0xd3, 0x0, 0x0, 0x0) (async)
shutdown(r10, 0x0) (async, rerun: 64)
accept4$unix(r7, &(0x7f0000000400)=@abs, &(0x7f0000000480)=0x6e, 0x0) (rerun: 64)
socket(0x10, 0x3, 0x0) (async, rerun: 64)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) (async, rerun: 64)
socket$nl_netfilter(0x10, 0x3, 0xc)

271.019314ms ago: executing program 1 (id=14680):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x20)

270.549474ms ago: executing program 1 (id=14681):
r0 = socket$nl_route(0x10, 0x3, 0x0) (async)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) (async)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', <r2=>0x0})
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4543(gcm(aes))\x00'}, 0x58) (async, rerun: 32)
bind$alg(r3, &(0x7f0000000040)={0x26, 'aead\x00', 0x0, 0x0, 'pcrypt(generic-gcm-aesni)\x00'}, 0x58) (async, rerun: 32)
sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x6800, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x9c, 0x24, 0x4ee4e6a52ff56541, 0x2000000, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x6c, 0x2, {{}, [@TCA_NETEM_LOSS={0x30, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x4}, @NETEM_LOSS_GI={0x18}]}, @TCA_NETEM_RATE={0x14, 0xd}, @TCA_NETEM_CORRUPT={0xfffffffffffffe2b}]}}}]}, 0x9c}}, 0x0) (async)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x4, 0x4, 0x2, 0x0, 0x1, 0x2000}, 0x50)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000725e850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x94)
r6 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$inet_int(r6, 0x0, 0xf, &(0x7f0000d10ffc)=0xfffffffa, 0x4) (async)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private0}, @in={0x2, 0x0, @multicast2}, @in6={0xa, 0x0, 0xd7d9, @loopback}, @in={0x2, 0x4e21, @dev}], 0x58) (async)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000680)={r5}, 0xc)
r7 = socket$netlink(0x10, 0x3, 0x10) (async)
r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) (async, rerun: 32)
r9 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32)
r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000b40)=ANY=[@ANYRES64=0x0, @ANYRES64=r10, @ANYBLOB="1f00"], 0x20) (async)
r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async, rerun: 32)
ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r12=>0x0}) (rerun: 32)
sendmsg$NL80211_CMD_SET_INTERFACE(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r12, @ANYBLOB="08000500060000000c0017"], 0x30}}, 0x0) (async)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000180)={'wlan0\x00', <r13=>0x0}) (async)
r14 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_NO_ENOBUFS(r14, 0x10e, 0xc, &(0x7f0000000040)=0xe00000, 0x4) (async)
sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r10, &(0x7f0000000ac0)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000840)={0x230, 0x0, 0x500, 0x70bd26, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_SEC_DEVKEY={0x44, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0302}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x3}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0302}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x5ab}]}, @NL802154_ATTR_SEC_DEVKEY={0x34, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xfffffffffffe0506}}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0102}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0xb}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0xd1bc}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0xc3}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_SEC_DEVKEY={0x120, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0202}}, @NL802154_DEVKEY_ATTR_ID={0xb0, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0xe}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x14, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xfffe}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xffff}]}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x1c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xfffe}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}]}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x50, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa0}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}]}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x6}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x2}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0202}}, @NL802154_DEVKEY_ATTR_ID={0x3c, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x18, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x90}]}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_DEVKEY={0x4c, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_ID={0xc, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0102}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x101}, @NL802154_DEVKEY_ATTR_ID={0x14, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0xfffffffa}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x30b}]}, @NL802154_DEVKEY_ATTR_ID={0xc, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x1}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0xca}]}]}, 0x230}}, 0x4008004) (async)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r7, &(0x7f0000000740)={&(0x7f00000005c0), 0xc, &(0x7f00000006c0)={&(0x7f0000000600)={0xa0, 0x3, 0x8, 0x801, 0x0, 0x0, {0x1, 0x0, 0x1}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x886c}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x6004}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_DATA={0x3c, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_ESTABLISHED={0x8, 0x3, 0x1, 0x0, 0x3c}, @CTA_TIMEOUT_TCP_CLOSE={0x8, 0x8, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_TCP_SYN_SENT={0x8, 0x1, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_TCP_SYN_RECV={0x8, 0x2, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_TCP_SYN_RECV={0x8, 0x2, 0x1, 0x0, 0xffffffff}, @CTA_TIMEOUT_TCP_SYN_SENT={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_TCP_CLOSE={0x8, 0x8, 0x1, 0x0, 0x1000}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x2234}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x88ca}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @icmpv6=[@CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x7}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x86dd}]}, 0xa0}, 0x1, 0x0, 0x0, 0x20040044}, 0x40)
socket$inet_sctp(0x2, 0x1, 0x84)
sendmsg$NL80211_CMD_TESTMODE(r7, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000000280)={0x288, r11, 0x100, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r13}, @val={0xc, 0x99, {0x5136da50, 0x57}}}}, [@NL80211_ATTR_TESTDATA={0xc3, 0x45, "f70d078591335c391cd368297e5b8789a0e42e708d46ab85900b36f9d8a5d5eb7ef829cf3c1aa0267a5dea73f2bf76752f6d438ee97b87121744082905b83ecb681a501a5580c9cf97cf8025675e724fe8e426977795b254674488698da645f7b1ea9db2cc4f3322c0fddb293fad5dd7ecd37c299bff38553d16ea10d26b9bb0ed39bf44a2a71167f866a4ed65f11f791da80862bfb3087106c9d14449ab14e8da429fd056c852f56350e0d7c39ad724453eb117358bb9daf0ca15847936f2"}, @NL80211_ATTR_TESTDATA={0xf8, 0x45, "ae4a98e34097f54e94b6ecfad4068c438a351d9347124283923c5794aeb29dfb8747cd75eb751725f69d13eb0e907f3938a8c6a28e28c222e887ad7703b9b3a135a131c315c9e381dd487db91691f8b7a8eb11f274590da7876172d3ce265b68872ff0f499dde0bea7ae798abf834df5ad2e33fedd0bdfd98572e26a49b486043cfd7f753ce90e80f11a599d0296294a52007a96c980734ee92aaacd26f9d1ef92a670aa43a7d9186e6cef8e4028fc0e61797ae540c2e8a5c8aaa3cbdc1ed3b435a718d18dc6435afa20dfaab66ec29541728fcbfbc2bf01b227e8ae1f47c1e3663cd0154fe3a5e965923d8de08c587bdbef00d6"}, @NL80211_ATTR_TESTDATA={0x7b, 0x45, "de049216fbb4f4bf792dbc060b05448c65748f79d843c0b658495629d0a3d5e6059889c45f31bda23a05c18e7c3005b384cb26ca6d7ddb96110ae33505134c9f9d4c53a610e089af2ef9dc150ce1acd66d50b4fa764df575951f4985bffd6ade34e036af633ff6bdcf3ef3f66fa450beed7f85e6bfef44"}, @NL80211_ATTR_TESTDATA={0x28, 0x45, "bf8fcde6c597de5dad4281edc45e2a946c4db95536adde80db7cb94a58a7bd17f247b011"}]}, 0x288}, 0x1, 0x0, 0x0, 0x4840}, 0x20004810)
sendmsg$DEVLINK_CMD_RATE_NEW(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000240)={0x34, r8, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x885}, 0x6048800)

218.332671ms ago: executing program 1 (id=14682):
socket$nl_xfrm(0x10, 0x3, 0x6)
socket$nl_xfrm(0x10, 0x3, 0x6)
socket$nl_xfrm(0x10, 0x3, 0x6)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet6_udp(0xa, 0x2, 0x0)
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="200000005200010000efff0000000000020000000c00", @ANYRES16=r0], 0x20}}, 0x0)

150.695551ms ago: executing program 1 (id=14683):
socket$nl_route(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x13, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000091114e000000000095000000000000005501e1297ff777e215411c0d4452beb138e69b4396e83848ad0dbe7ff1c209000000a28bb577b69f34f1bf215e5afbacb0b8d930256ab9ccf2c558d1bff24100a9f8768e60e0eaa77754274069b6ddb7da09ebfff0579cfe9fcec76e167732cbc20f72ac13b7b0969ea2850acd453f3944ec41f57d2a8adb62b55fe8374be668b5d59b2a0050d51d8ba879aa2c9da541a29becc62be9645f679e1a182962daa486ea21ba35c511a6cbbfa0cf1e3ca5dfed26e0b694"], &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff8}, 0x94)
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x40)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff)
r3 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x1c, 0x5a, 0x1, 0x0, 0x25dfdbfb, {0xa}, [@typed={0x8, 0x1, 0x0, 0x0, @fd}]}, 0x1c}}, 0x4)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={<r4=>0xffffffffffffffff})
r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r5, 0xaf01, 0x0)
sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000001c0)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100ffffffff0000000001000000100007800c00018008000100", @ANYRES32=r4, @ANYBLOB="0c0005006c010000000000000c000200ff7f000000000000400007800c00018008000100", @ANYRES32=r4, @ANYBLOB="0c00018008000100", @ANYRES32=r4], 0x7c}}, 0x20000000)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000880)="2e000000100081a548575b98040f80ec59acbc0413a1f848110000005e14060211fc6ddc2ec486990f000000028000001230ecd9bc4c289b251c982a1546df0c4e7d5a5603b52ac405696c4f4b86ac3c48a765bbc56630c1db724c19e67842c48c5f7b5971eb99e653e17e9693fbdacf60633b3365d79e9f4bb8727432b202213b27d26e5f38e6ae707a5cc3a4ea7a65958d5fedede0a3843788a1f64fcddb7319c1d7c1b1ddb7465f4c447d48fa9a380af970c95628e429323f3a27c1eb6b92cc22785bd8a45af9a3753a75e917961189288c5991ee312ae2ba5e05514dd7ea67a083915d8a9ef756d8b1f23d6eacbd2b", 0xf1}], 0x1}, 0x8084)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$BTRFS_IOC_START_SYNC(r4, 0x80089418, &(0x7f0000000340))
socket$nl_generic(0x10, 0x3, 0x10)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@ipv6_getnexthop={0x34, 0x6a, 0x200, 0x70bd25, 0x25dfdbff, {}, [@NHA_GROUPS={0x4}, @NHA_ID={0x8, 0x1, 0x1}, @NHA_ID={0x8, 0x1, 0x2}, @NHA_OIF={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x82}, 0x0)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
socket$kcm(0x23, 0x2, 0x0)
r8 = socket$packet(0x11, 0x2, 0x300)
r9 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TLS_TX(r9, 0x6, 0x1, &(0x7f00000000c0)=@gcm_256={{0xf88ce2e0571bc7ea}, "0000000000000208", "5171bb74cd3660dab9e200", "d8a024e5", "000200"}, 0x38)
setsockopt$inet6_tcp_TCP_REPAIR(r9, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4)
setsockopt$inet6_tcp_int(r9, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36)
connect$inet6(r9, &(0x7f00000003c0)={0xa, 0x1, 0x0, @local, 0x4}, 0x1c)
setsockopt$inet6_tcp_TCP_REPAIR(r9, 0x6, 0x13, &(0x7f0000001840), 0x4)
setsockopt$sock_attach_bpf(r8, 0x1, 0x32, &(0x7f0000002900), 0x4)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000))

406.347µs ago: executing program 0 (id=14684):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="180000002500010324bd5f02ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
recvmmsg(r1, &(0x7f0000005140)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0x98fd}, {{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000015c0)=""/4096, 0x1000}, {&(0x7f00000025c0)=""/65, 0x41}, {&(0x7f0000002640)=""/254, 0xfe}, {&(0x7f0000000280)=""/240, 0xf0}], 0x4}, 0x101}], 0x3, 0x20, 0x0) (async)
sendmsg$nl_generic(r1, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002b40)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x4000084) (async)
recvmsg(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000580)=""/4089, 0xff9}, {&(0x7f0000000300)=""/91, 0x5b}, {&(0x7f00000001c0)=""/42, 0x2a}], 0x3}, 0x2000) (async)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r0) (async)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r0)
unshare(0x400) (async)
r4 = socket(0xa, 0x3, 0x3a)
connect$qrtr(r4, &(0x7f0000000200)={0x2a, 0xffffffff00000007, 0x25d4283d975b53f0}, 0xc) (async, rerun: 64)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="4400000010000400"/20, @ANYRES32=0x0, @ANYRESOCT=r2], 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x4000014) (async, rerun: 64)
r5 = socket(0x11, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'bridge_slave_1\x00', <r6=>0x0})
setsockopt$sock_int(r5, 0x1, 0x29, &(0x7f0000000000)=0x3, 0x4) (async, rerun: 32)
setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x41, &(0x7f0000000180)=0x6253, 0x4) (async, rerun: 32)
bind$packet(r5, &(0x7f0000000080)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @link_local}, 0x14) (async)
sendto$packet(r5, &(0x7f00000002c0)="fb57975e267951722b395d37bac8", 0xe, 0x0, 0x0, 0x0) (async, rerun: 64)
recvmsg(r5, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x2000) (async, rerun: 64)
socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$inet6_sctp(0xa, 0x1, 0x84)
ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000004f00)={'veth1_to_bridge\x00', &(0x7f0000004dc0)=@ethtool_eeprom={0xc, 0x5, 0x9d8d}}) (async)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r7, 0x84, 0x6b, &(0x7f0000000240), 0x0)
ioctl$XFS_IOC_FSGROWFSDATA(r3, 0x4010586e, &(0x7f00000000c0)={0x2f, 0xf}) (async)
r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r9 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) (async)
writev(r8, &(0x7f0000000040)=[{&(0x7f0000000080)="2e9b690007e03dd6446ce8880000000000", 0x11}, {&(0x7f0000000200)="b7", 0x1}, {&(0x7f0000000100)="cc8b9b2251a9d92e1fc45219ba008fed80a21fc2912949782b436e3ca180e832c6243f930621bbba0cbadc46f61224cde3f74496f6f477ab786e0ad0438d809e1301fadc7412e8fb00af52e0dd514f2e6bf63dcb21370b7b21e65b38be5815", 0x5f}, {&(0x7f0000000540)="0e37b90261e76309b1cac9fade2e9c7d97027847ae3dd4c8ad9bacdc9eb40588f815d4a7290ec85ec1d6e62099c8862720d7231bfc91e78093bec7882a6db8419c6df7296622b23d8d5f7d7d1d196ad5aaba08a8731c748a", 0x58}], 0x4)

0s ago: executing program 2 (id=14685):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$sock(r0, &(0x7f0000000680)={&(0x7f00000002c0)=@caif=@rfm={0x25, 0x200, "6821a642c593fd61aecd1b7802f2a402"}, 0x80, &(0x7f0000000600)=[{&(0x7f00000003c0)="fbbebf33f2a1104d27e1a20e50e571c0f5b17ecc739b9cf27936c7ec583aed8e3716efa97383840b0bcfacccdddb5cfa17d5e57f10bd773526d13db9e27bb388aea23674962a0b710fd7fdd3c26ed0e1ca56aaa8bddeff0832b1dc826069829be7f24d7a56e798096b0bf82551d0204a1dec23f559ff8f9512216000d9ca45197f4b1d2b2fbc45661698b62ceaef2a2e1e8443a707c7507ba69c0ecd455cf1289a6a836e7d3530505cd3773b110c769eb90c45a62ef45498692ed579a0118a4ab09f27a8f22edc6af6a7213453d09a660119bc4d3cbcbfc16e9b8291a5290872becc8d6af5ebace05cc50397d3dfd201", 0xf0}, {&(0x7f00000004c0)="da9e4ff53f3ac357a0adca1e68f2483b3c7db9f433f5f129dad3f3bcb567bf8696e396fbea042925aebd46cfc767d270793f79dd16b9b24ce251bfe60d2bb7", 0x3f}, {&(0x7f0000000500)="8ce6d9f43dc6aae9c96f5325887fcee16bea306da4b7cffa13e27f9934bfda68d9652d22c09e41ac1fae55071490ff20ed4ac2e132ab100327dd5fe7633c0fb01dc5a3a15ef74fb106b11aabe89889ba13364cb19040880ea3cec599de072358e5c0cc4efcdd9118d40c4e7e306c9224843c90ddc0c6dc9cc85694c39a039fb69242c2773990a6cec0df7f86bbe69d39ac5a11560d6332e1", 0x98}, {&(0x7f00000005c0)="4374e30d715262ba1532468d5ece60e4110e09914833639ca159345740b431dc4b", 0x21}], 0x4, &(0x7f0000000640)=[@timestamping={{0x14, 0x1, 0x25, 0x3}}], 0x18}, 0x1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r6=>0x0})
sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000001c0)={0x30, r4, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r6}, @val={0xc}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1743}]]}, 0x30}, 0x1, 0x0, 0x0, 0xc804}, 0x0)
sendmsg$NL80211_CMD_NEW_MPATH(r2, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0x8c, r4, 0x100, 0x70bd29, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x8c}, 0x1, 0x0, 0x0, 0x240088c4}, 0x180)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x421, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_PEER_NOTIF_DELAY={0x8, 0x1c, 0x9}]}}}]}, 0x3c}}, 0x0)
sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x6c, r1, 0x800, 0x0, 0x25dfdbff, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x5, @mcast2}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x40000000, @private0, 0x6}}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4040004}, 0x0)
socket$igmp(0x2, 0x3, 0x2)

kernel console output (not intermixed with test programs):

e of struct sctp_assoc_value in delayed_ack socket option.
[  609.864378][ T3856] Use struct sctp_sack_info instead
[  609.878753][ T3856] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  609.902819][ T3856] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  611.002154][T22735] Bluetooth: hci2: command 0x0405 tx timeout
[  611.004739][   T53] Bluetooth: hci2: Opcode 0x0401 failed: -110
[  611.495797][ T3889] syzkaller1: entered promiscuous mode
[  611.498448][ T3889] syzkaller1: entered allmulticast mode
[  611.590775][ T3899] openvswitch: netlink: Unexpected mask (mask=100000000, allowed=10048)
[  611.605166][ T3890] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  611.907452][ T3934] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  611.927609][ T3934] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13163'.
[  611.950281][ T3932] xt_hashlimit: size too large, truncated to 1048576
[  612.162211][ T3951] sctp: [Deprecated]: syz.0.13168 (pid 3951) Use of int in max_burst socket option deprecated.
[  612.162211][ T3951] Use struct sctp_assoc_value instead
[  612.275223][ T3966] netlink: 92 bytes leftover after parsing attributes in process `syz.0.13171'.
[  612.363485][ T3976] netlink: 212344 bytes leftover after parsing attributes in process `syz.1.13174'.
[  612.404512][ T3981] netlink: 'syz.0.13177': attribute type 13 has an invalid length.
[  612.408173][ T3981] netlink: 'syz.0.13177': attribute type 17 has an invalid length.
[  612.436332][ T3981] 8021q: adding VLAN 0 to HW filter on device team0
[  612.439185][ T3981] tipc: Resetting bearer <eth:team0>
[  612.443930][ T3981] tipc: Resetting bearer <eth:team0>
[  612.485764][ T3981] veth1_macvtap: entered promiscuous mode
[  612.506204][ T3981] 8021q: adding VLAN 0 to HW filter on device bond1
[  613.470401][ T3981] 8021q: adding VLAN 0 to HW filter on device eth0
[  613.477873][ T3981] 8021q: adding VLAN 0 to HW filter on device eth1
[  613.485053][ T3981] 8021q: adding VLAN 0 to HW filter on device eth2
[  613.492603][ T3981] 8021q: adding VLAN 0 to HW filter on device eth3
[  613.500453][ T3981] 8021q: adding VLAN 0 to HW filter on device bond2
[  613.507620][ T3981] 8021q: adding VLAN 0 to HW filter on device bond3
[  613.511745][ T3981] 8021q: adding VLAN 0 to HW filter on device bond4
[  613.518630][ T3981] 8021q: adding VLAN 0 to HW filter on device bond5
[  613.525652][ T3981] 8021q: adding VLAN 0 to HW filter on device bond6
[  613.528652][ T3981] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[  613.533841][ T3981] 8021q: adding VLAN 0 to HW filter on device bond7
[  613.555094][ T3981] 8021q: adding VLAN 0 to HW filter on device bond8
[  613.557858][ T3981] 8021q: adding VLAN 0 to HW filter on device bond9
[  613.560843][ T3981] 8021q: adding VLAN 0 to HW filter on device bond11
[  613.571375][ T3981] 8021q: adding VLAN 0 to HW filter on device macsec2
[  613.579207][ T3981] 8021q: adding VLAN 0 to HW filter on device macsec3
[  613.585036][ T3981] bond10: left promiscuous mode
[  613.587167][ T3981] bridge7: left promiscuous mode
[  613.589373][ T3981] bond10: left allmulticast mode
[  613.591395][ T3981] bridge7: left allmulticast mode
[  613.594588][ T3981] 8021q: adding VLAN 0 to HW filter on device bond10
[  613.623077][ T3981] 8021q: adding VLAN 0 to HW filter on device bond12
[  613.646759][ T3981] 8021q: adding VLAN 0 to HW filter on device bond13
[  613.650492][ T3981] geneve0: left promiscuous mode
[  613.654350][ T3981] mac80211_hwsim hwsim7 wlan1: entered promiscuous mode
[  613.657269][ T3981] batman_adv: batadv0: Interface activated: macvtap1
[  613.667772][ T3981] bond14: left promiscuous mode
[  613.669827][ T3981] 8021q: adding VLAN 0 to HW filter on device bond14
[  613.674775][ T3981] 8021q: adding VLAN 0 to HW filter on device bond15
[  613.687932][ T3981] xfrm1: left allmulticast mode
[  613.693959][ T3981] geneve5: left promiscuous mode
[  613.695585][ T3981] geneve5: left allmulticast mode
[  613.698375][ T3981] 8021q: adding VLAN 0 to HW filter on device macvlan3
[  613.701558][ T3981] 8021q: adding VLAN 0 to HW filter on device bond16
[  613.707199][ T3981] 8021q: adding VLAN 0 to HW filter on device bond17
[  613.711442][ T3981] 8021q: adding VLAN 0 to HW filter on device bond18
[  613.715600][ T3981] veth15: left allmulticast mode
[  613.717795][ T3981] ip6gre5: left promiscuous mode
[  613.719425][ T3981] ip6gre5: left allmulticast mode
[  613.723564][ T3981] team1: left promiscuous mode
[  613.725114][ T3981] team1: left allmulticast mode
[  613.726850][ T3981] 8021q: adding VLAN 0 to HW filter on device team1
[  613.730226][ T3981] team2: left promiscuous mode
[  613.733415][ T3981] team2: left allmulticast mode
[  613.735282][ T3981] 8021q: adding VLAN 0 to HW filter on device team2
[  613.738477][ T3981] 8021q: adding VLAN 0 to HW filter on device bond19
[  613.744598][ T3981] bridge14: left allmulticast mode
[  613.749577][ T3981] veth17: left promiscuous mode
[  613.755757][ T3981] gretap1: left promiscuous mode
[  613.762694][ T3981] 8021q: adding VLAN 0 to HW filter on device bond20
[  613.768637][ T8580] bridge0: entered promiscuous mode
[  613.781372][ T7993] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  613.794704][ T7993] netdevsim netdevsim0 eth0: set [0, 1] type 1 family 0 port 2816 - 0
[  613.807675][ T7993] netdevsim netdevsim0 eth0: set [0, 2] type 1 family 0 port 4352 - 0
[  613.820008][ T7993] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  613.823903][ T5669] bond18: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  613.830470][ T7993] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 256 - 0
[  613.845702][ T7993] netdevsim netdevsim0 eth0: set [1, 2] type 2 family 0 port 20000 - 0
[  613.854105][ T1115] bridge1: port 1(veth3) entered blocking state
[  613.856139][ T1115] bridge1: port 1(veth3) entered forwarding state
[  613.859443][ T1115] bridge1: port 3(veth5) entered blocking state
[  613.860942][ T3997] netlink: 'syz.0.13181': attribute type 1 has an invalid length.
[  613.861910][ T1115] bridge1: port 3(veth5) entered forwarding state
[  613.868691][ T3997] netlink: 248 bytes leftover after parsing attributes in process `syz.0.13181'.
[  613.895074][ T7993] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  613.900181][ T7993] netdevsim netdevsim0 eth1: set [0, 1] type 1 family 0 port 2816 - 0
[  613.903474][ T7993] netdevsim netdevsim0 eth1: set [0, 2] type 1 family 0 port 4352 - 0
[  613.906152][ T7993] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  613.908842][ T7993] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 256 - 0
[  613.911625][ T7993] netdevsim netdevsim0 eth1: set [1, 2] type 2 family 0 port 20000 - 0
[  613.914734][ T7993] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  613.917394][ T7993] netdevsim netdevsim0 eth2: set [0, 1] type 1 family 0 port 2816 - 0
[  613.921669][ T7993] netdevsim netdevsim0 eth2: set [0, 2] type 1 family 0 port 4352 - 0
[  613.925738][ T7993] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  613.928634][ T7993] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 256 - 0
[  613.931573][ T7993] netdevsim netdevsim0 eth2: set [1, 2] type 2 family 0 port 20000 - 0
[  613.940637][ T7993] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  613.944150][ T7993] netdevsim netdevsim0 eth3: set [0, 1] type 1 family 0 port 2816 - 0
[  613.947111][ T7993] netdevsim netdevsim0 eth3: set [0, 2] type 1 family 0 port 4352 - 0
[  613.949954][ T7993] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  613.953270][ T7993] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 256 - 0
[  613.956014][ T7993] netdevsim netdevsim0 eth3: set [1, 2] type 2 family 0 port 20000 - 0
[  613.962471][ T3995] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  613.980973][ T3995] mac80211_hwsim hwsim5 d: renamed from syzkaller0 (while UP)
[  613.987468][ T3995] tipc: Disabling bearer <eth:syzkaller0>
[  613.992044][ T4003] netlink: 68 bytes leftover after parsing attributes in process `syz.2.13182'.
[  614.010507][ T4003] netlink: 'syz.2.13182': attribute type 27 has an invalid length.
[  614.031447][ T7995] ip6_tunnel: ip6gre3 xmit: Local address not yet configured!
[  614.065706][ T7995] bond18: (slave veth15): link status definitely up, 10000 Mbps full duplex
[  614.070118][ T7995] bond18: active interface up!
[  614.166748][ T4017] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13186'.
[  614.232256][ T4009] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13184'.
[  614.252679][ T7993] ip6_tunnel: syztnl0 xmit: Local address not yet configured!
[  614.362778][   T13] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  614.390588][ T4042] netlink: 20 bytes leftover after parsing attributes in process `syz.2.13194'.
[  614.399360][ T4042] bridge13: entered promiscuous mode
[  614.406248][ T4042] macsec0: entered promiscuous mode
[  614.410268][ T4042] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13194'.
[  614.424499][ T4042] macsec0 (unregistering): left promiscuous mode
[  614.429674][ T4039] sctp: [Deprecated]: syz.1.13192 (pid 4039) Use of int in maxseg socket option.
[  614.429674][ T4039] Use struct sctp_assoc_value instead
[  614.445558][   T13] ip6_tunnel: ip6tnl5 xmit: Local address not yet configured!
[  614.629781][ T4064] netlink: 16 bytes leftover after parsing attributes in process `syz.2.13200'.
[  614.635709][ T4063] netlink: 24 bytes leftover after parsing attributes in process `syz.2.13200'.
[  614.654777][ T4072] nbd: must specify at least one socket
[  614.762813][ T1116] wlan1: Trigger new scan to find an IBSS to join
[  615.008958][ T4089] netlink: 12 bytes leftover after parsing attributes in process `syz.2.13206'.
[  615.624643][ T4100] syzkaller0: entered promiscuous mode
[  615.626861][ T4100] syzkaller0: entered allmulticast mode
[  615.731824][ T4103] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  615.734857][ T4103] IPv6: NLM_F_CREATE should be set when creating new route
[  615.737972][ T4103] IPv6: NLM_F_CREATE should be set when creating new route
[  615.741149][ T4103] IPv6: NLM_F_CREATE should be set when creating new route
[  615.792016][ T4108] netlink: 'syz.0.13212': attribute type 8 has an invalid length.
[  615.882808][ T4112] netlink: 'syz.0.13213': attribute type 12 has an invalid length.
[  615.977997][ T4115] bond21: option arp_validate: mode dependency failed, not supported in mode 802.3ad(4)
[  615.983206][ T4115] bond21 (unregistering): Released all slaves
[  616.159356][ T4132] netlink: 24 bytes leftover after parsing attributes in process `syz.2.13220'.
[  616.186676][ T4130] bond23: invalid ARP target 0.0.0.0 specified for addition
[  616.189719][ T4130] bond23: option arp_ip_target: invalid value (0)
[  616.193366][ T4130] bond23 (unregistering): Released all slaves
[  616.219016][ T4132] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13220'.
[  616.390613][ T4139] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  616.394912][ T4139] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13222'.
[  616.394949][ T4140] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13222'.
[  616.398158][ T4139] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13222'.
[  616.401821][ T4140] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13222'.
[  616.405706][ T4139] netlink: 'syz.0.13222': attribute type 14 has an invalid length.
[  616.409798][ T4140] netlink: 'syz.0.13222': attribute type 14 has an invalid length.
[  616.411592][ T4139] netlink: 'syz.0.13222': attribute type 13 has an invalid length.
[  616.414996][ T4140] netlink: 'syz.0.13222': attribute type 13 has an invalid length.
[  616.456618][ T4143] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13223'.
[  616.541792][ T4145] siw: device registration error -23
[  616.559064][ T4145] smbdirect: ib_dev[syz1] removed
[  616.735097][ T4155] tipc: Resetting bearer <eth:team0>
[  617.751164][ T4163] lo speed is unknown, defaulting to 1000
[  617.798971][ T4176] sctp: [Deprecated]: syz.0.13231 (pid 4176) Use of struct sctp_assoc_value in delayed_ack socket option.
[  617.798971][ T4176] Use struct sctp_sack_info instead
[  617.802673][ T1116] wlan1: Trigger new scan to find an IBSS to join
[  617.925869][ T4185] syzkaller1: entered promiscuous mode
[  617.928561][ T4185] syzkaller1: entered allmulticast mode
[  617.984689][ T4163] ip6_vti0 speed is unknown, defaulting to 1000
[  618.064370][ T4188] lo speed is unknown, defaulting to 1000
[  618.229508][ T4188] ip6_vti0 speed is unknown, defaulting to 1000
[  618.282352][    C0] ip6_tunnel: ip6gre3 xmit: Local address not yet configured!
[  618.532137][    C0] ip6_tunnel: ip6tnl5 xmit: Local address not yet configured!
[  618.692796][    C0] ip6_tunnel: syztnl0 xmit: Local address not yet configured!
[  618.762080][    C1] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  618.814327][ T4201] validate_nla: 3 callbacks suppressed
[  618.814337][ T4201] netlink: 'syz.2.13237': attribute type 1 has an invalid length.
[  618.902753][ T4201] 8021q: adding VLAN 0 to HW filter on device bond12
[  619.022835][ T4218] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  619.160338][ T4227] x_tables: duplicate entry at hook 2
[  619.188937][ T4224] veth31: entered promiscuous mode
[  619.289279][ T4228] veth21: entered promiscuous mode
[  619.557086][ T4258] netlink: 'syz.2.13258': attribute type 4 has an invalid length.
[  619.585249][ T4258] netlink: 'syz.2.13258': attribute type 4 has an invalid length.
[  619.601209][ T4266] netlink: 'syz.2.13258': attribute type 4 has an invalid length.
[  619.730199][ T4277] __nla_validate_parse: 16 callbacks suppressed
[  619.730214][ T4277] netlink: 96 bytes leftover after parsing attributes in process `syz.2.13263'.
[  619.751680][ T4279] netlink: 'syz.1.13264': attribute type 11 has an invalid length.
[  619.757583][ T4279] netlink: 'syz.1.13264': attribute type 23 has an invalid length.
[  619.762804][ T4279] netlink: 224 bytes leftover after parsing attributes in process `syz.1.13264'.
[  619.879376][ T4292] netlink: 40 bytes leftover after parsing attributes in process `syz.0.13267'.
[  619.900359][ T4294] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13269'.
[  619.905858][ T4294] bridge0: port 1(bridge_slave_0) entered disabled state
[  619.911117][ T4294] bridge_slave_0 (unregistering): left allmulticast mode
[  619.916225][ T4294] bridge_slave_0 (unregistering): left promiscuous mode
[  619.918802][ T4294] bridge0: port 1(bridge_slave_0) entered disabled state
[  619.936410][ T4296] veth1_to_hsr: Caught tx_queue_len zero misconfig
[  619.998402][ T4305] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  620.021327][ T4304] netlink: 24 bytes leftover after parsing attributes in process `syz.0.13271'.
[  620.097873][ T4310] bridge0: port 2(bridge_slave_1) entered disabled state
[  620.139406][ T4310] batman_adv: 60X: Interface deactivated: batadv_slave_0
[  620.151005][ T4310] batman_adv: 60X: Interface deactivated: batadv_slave_1
[  620.160603][ T4310] tipc: Resetting bearer <eth:xfrm0>
[  620.181178][ T4310] veth0_virt_wifi: left allmulticast mode
[  620.213726][ T4297] infiniband syz0: set down
[  620.218492][ T4297] infiniband syz0: added bridge_slave_1
[  620.254962][ T4297] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000
[  620.262190][ T4297] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32
[  620.268718][ T4297] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005
[  620.294152][ T4297] RDS/IB: syz0: added
[  620.299041][ T4297] smc: adding ib device syz0 with port count 1
[  620.303961][ T4297] smc:    ib device syz0 port 1 has no pnetid
[  620.389754][ T4310] bridge10: port 1(gretap4) entered disabled state
[  620.433183][ T4310] batman_adv: 60X: Interface deactivated: macvlan0
[  620.464655][ T4310] ip6tnl4: left allmulticast mode
[  620.485283][ T4310] geneve7: left promiscuous mode
[  620.496150][ T4310] team0: left promiscuous mode
[  620.498234][ T4310] team0: left allmulticast mode
[  620.506096][ T4310] vlan0: left allmulticast mode
[  620.508144][ T4310] bond10: left allmulticast mode
[  620.510293][ T4310] geneve8: left allmulticast mode
[  620.543022][ T4310] veth29: left promiscuous mode
[  620.548607][ T4310] geneve10: left promiscuous mode
[  620.550710][ T4310] geneve10: left allmulticast mode
[  620.554771][ T4310] macsec3: left promiscuous mode
[  620.557768][ T4310] bridge13: left promiscuous mode
[  620.565184][ T4312] ip6tnl0: Caught tx_queue_len zero misconfig
[  620.567691][ T4312] sch_tbf: burst 3 is lower than device ip6tnl0 mtu (1280) !
[  620.583808][ T7995] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  620.591076][ T7995] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 20000 - 0
[  620.599794][ T7995] netdevsim netdevsim2 eth0: unset [1, 1] type 2 family 0 port 6081 - 0
[  620.607759][ T7995] netdevsim netdevsim2 eth0: unset [1, 2] type 2 family 0 port 35136 - 0
[  620.612628][ T7995] netdevsim netdevsim2 eth0: unset [1, 3] type 2 family 0 port 20004 - 0
[  620.616027][ T7995] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  620.619296][ T7995] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 20000 - 0
[  620.622565][ T7995] netdevsim netdevsim2 eth1: unset [1, 1] type 2 family 0 port 6081 - 0
[  620.625813][ T7995] netdevsim netdevsim2 eth1: unset [1, 2] type 2 family 0 port 35136 - 0
[  620.629104][ T7995] netdevsim netdevsim2 eth1: unset [1, 3] type 2 family 0 port 20004 - 0
[  620.682662][ T7995] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  620.686140][ T7995] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 20000 - 0
[  620.689461][ T7995] netdevsim netdevsim2 eth2: unset [1, 1] type 2 family 0 port 6081 - 0
[  620.693494][ T7995] netdevsim netdevsim2 eth2: unset [1, 2] type 2 family 0 port 35136 - 0
[  620.696844][ T7995] netdevsim netdevsim2 eth2: unset [1, 3] type 2 family 0 port 20004 - 0
[  620.706357][ T7995] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  620.718627][ T7995] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 20000 - 0
[  620.727953][ T7995] netdevsim netdevsim2 eth3: unset [1, 1] type 2 family 0 port 6081 - 0
[  620.734231][ T7995] netdevsim netdevsim2 eth3: unset [1, 2] type 2 family 0 port 35136 - 0
[  620.737826][ T7995] netdevsim netdevsim2 eth3: unset [1, 3] type 2 family 0 port 20004 - 0
[  620.762698][ T1116] wlan1: Trigger new scan to find an IBSS to join
[  620.777688][ T4323] lo speed is unknown, defaulting to 1000
[  620.983738][ T4323] ip6_vti0 speed is unknown, defaulting to 1000
[  621.714417][   T81] wlan1: Creating new IBSS network, BSSID 00:00:00:8d:00:00
[  621.891226][ T4333] tipc: Resetting bearer <eth:team0>
[  622.293960][ T4333] bridge1: port 3(veth5) entered disabled state
[  622.296105][ T4333] bridge1: port 1(veth3) entered disabled state
[  622.723229][ T4333] batman_adv: batadv0: Interface deactivated: macvtap1
[  622.966950][ T4333] veth21: left promiscuous mode
[  622.970793][T10617] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  622.973900][T10617] netdevsim netdevsim0 eth0: unset [0, 1] type 1 family 0 port 2816 - 0
[  622.976636][T10617] netdevsim netdevsim0 eth0: unset [0, 2] type 1 family 0 port 4352 - 0
[  622.979091][T10617] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  622.984752][T10617] netdevsim netdevsim0 eth0: unset [1, 1] type 2 family 0 port 256 - 0
[  622.988506][T10617] netdevsim netdevsim0 eth0: unset [1, 2] type 2 family 0 port 20000 - 0
[  623.019921][T10617] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  623.023643][T10617] netdevsim netdevsim0 eth1: unset [0, 1] type 1 family 0 port 2816 - 0
[  623.026956][T10617] netdevsim netdevsim0 eth1: unset [0, 2] type 1 family 0 port 4352 - 0
[  623.030189][T10617] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  623.034823][T10617] netdevsim netdevsim0 eth1: unset [1, 1] type 2 family 0 port 256 - 0
[  623.038155][T10617] netdevsim netdevsim0 eth1: unset [1, 2] type 2 family 0 port 20000 - 0
[  623.041616][T10617] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  623.045062][T10617] netdevsim netdevsim0 eth2: unset [0, 1] type 1 family 0 port 2816 - 0
[  623.048572][T10617] netdevsim netdevsim0 eth2: unset [0, 2] type 1 family 0 port 4352 - 0
[  623.051788][T10617] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  623.055167][T10617] netdevsim netdevsim0 eth2: unset [1, 1] type 2 family 0 port 256 - 0
[  623.058106][T10617] netdevsim netdevsim0 eth2: unset [1, 2] type 2 family 0 port 20000 - 0
[  623.060897][ T4363] lo: Caught tx_queue_len zero misconfig
[  623.069843][T10617] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  623.073502][T10617] netdevsim netdevsim0 eth3: unset [0, 1] type 1 family 0 port 2816 - 0
[  623.076916][T10617] netdevsim netdevsim0 eth3: unset [0, 2] type 1 family 0 port 4352 - 0
[  623.080551][T10617] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  623.083913][T10617] netdevsim netdevsim0 eth3: unset [1, 1] type 2 family 0 port 256 - 0
[  623.086959][T10617] netdevsim netdevsim0 eth3: unset [1, 2] type 2 family 0 port 20000 - 0
[  623.109982][ T4366] lo speed is unknown, defaulting to 1000
[  623.245236][ T4366] ip6_vti0 speed is unknown, defaulting to 1000
[  623.743763][ T4380] netlink: 'syz.0.13285': attribute type 13 has an invalid length.
[  623.749948][ T4380] netlink: 'syz.0.13285': attribute type 17 has an invalid length.
[  623.800035][ T4380] bridge0: left promiscuous mode
[  623.816545][ T4380] 8021q: adding VLAN 0 to HW filter on device team0
[  623.822429][ T4370] netlink: 32 bytes leftover after parsing attributes in process `syz.1.13282'.
[  623.825340][ T4380] tipc: Resetting bearer <eth:team0>
[  623.827555][ T4370] netlink: 32 bytes leftover after parsing attributes in process `syz.1.13282'.
[  623.831384][ T4380] tipc: Resetting bearer <eth:team0>
[  623.838256][ T4380] 8021q: adding VLAN 0 to HW filter on device batadv0
[  623.888761][ T4383] netlink: 32 bytes leftover after parsing attributes in process `syz.0.13285'.
[  623.909213][ T4380] veth1_vlan: left promiscuous mode
[  623.911786][ T4380] veth0_vlan: left promiscuous mode
[  623.914288][ T4380] veth0_vlan: entered promiscuous mode
[  623.919552][ T4380] veth1_vlan: entered promiscuous mode
[  623.928130][ T4380] veth1_macvtap: left promiscuous mode
[  623.930799][ T4380] veth0_macvtap: left promiscuous mode
[  623.939986][ T4380] veth0_macvtap: entered promiscuous mode
[  623.949200][ T4380] veth1_macvtap: entered promiscuous mode
[  623.954538][ T4380] mac80211_hwsim hwsim7 wlan1: left promiscuous mode
[  623.957281][ T1116] wlan1: Selected IBSS BSSID 00:00:00:8d:00:00 based on configured SSID
[  623.978908][ T4380] 8021q: adding VLAN 0 to HW filter on device bond1
[  624.738269][ T4380] 8021q: adding VLAN 0 to HW filter on device eth0
[  624.743381][ T4380] 8021q: adding VLAN 0 to HW filter on device eth1
[  624.748359][ T4380] 8021q: adding VLAN 0 to HW filter on device eth2
[  624.753584][ T4380] 8021q: adding VLAN 0 to HW filter on device eth3
[  624.759613][ T4380] 8021q: adding VLAN 0 to HW filter on device bond2
[  624.765971][ T4380] 8021q: adding VLAN 0 to HW filter on device bond3
[  624.770570][ T4380] 8021q: adding VLAN 0 to HW filter on device bond4
[  624.777990][ T4380] 8021q: adding VLAN 0 to HW filter on device bond5
[  624.784461][ T4380] 8021q: adding VLAN 0 to HW filter on device bond6
[  624.787649][ T4380] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[  624.791794][ T4380] 8021q: adding VLAN 0 to HW filter on device bond7
[  624.808684][ T4380] 8021q: adding VLAN 0 to HW filter on device bond8
[  624.813254][ T4380] 8021q: adding VLAN 0 to HW filter on device bond9
[  624.816311][ T4380] 8021q: adding VLAN 0 to HW filter on device bond11
[  624.820961][ T4380] 8021q: adding VLAN 0 to HW filter on device macsec2
[  624.827743][ T4380] 8021q: adding VLAN 0 to HW filter on device macsec3
[  624.830946][ T4380] 8021q: adding VLAN 0 to HW filter on device bond10
[  624.848753][ T4380] 8021q: adding VLAN 0 to HW filter on device bond12
[  624.865461][ T4380] 8021q: adding VLAN 0 to HW filter on device bond13
[  624.869675][ T4380] mac80211_hwsim hwsim7 wlan1: entered promiscuous mode
[  624.872777][ T4380] batman_adv: batadv0: Interface activated: macvtap1
[  624.879209][ T4380] 8021q: adding VLAN 0 to HW filter on device bond14
[  624.882537][ T4380] 8021q: adding VLAN 0 to HW filter on device bond15
[  624.897617][ T4380] 8021q: adding VLAN 0 to HW filter on device macvlan3
[  624.900491][ T4380] 8021q: adding VLAN 0 to HW filter on device bond16
[  624.906527][ T4380] 8021q: adding VLAN 0 to HW filter on device bond17
[  624.910089][ T4380] 8021q: adding VLAN 0 to HW filter on device bond18
[  624.919353][ T4380] 8021q: adding VLAN 0 to HW filter on device team1
[  624.925455][ T4380] 8021q: adding VLAN 0 to HW filter on device team2
[  624.929735][ T4380] 8021q: adding VLAN 0 to HW filter on device bond19
[  624.957600][ T4380] 8021q: adding VLAN 0 to HW filter on device bond20
[  624.960591][ T4380] 8021q: adding VLAN 0 to HW filter on device bond21
[  624.967841][ T4380] 8021q: adding VLAN 0 to HW filter on device bond22
[  624.976818][ T8579] bridge0: entered promiscuous mode
[  626.576681][ T1115] bridge1: port 1(veth3) entered blocking state
[  626.579118][ T1115] bridge1: port 1(veth3) entered forwarding state
[  626.583574][ T1115] bridge1: port 3(veth5) entered blocking state
[  626.585873][ T1115] bridge1: port 3(veth5) entered forwarding state
[  626.605430][ T5669] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  626.608095][ T5669] netdevsim netdevsim0 eth0: set [0, 1] type 1 family 0 port 2816 - 0
[  626.611065][ T5669] netdevsim netdevsim0 eth0: set [0, 2] type 1 family 0 port 4352 - 0
[  626.614896][ T5669] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  626.618032][ T5669] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 256 - 0
[  626.621138][ T5669] netdevsim netdevsim0 eth0: set [1, 2] type 2 family 0 port 20000 - 0
[  626.628993][ T5669] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  626.633506][ T5669] netdevsim netdevsim0 eth1: set [0, 1] type 1 family 0 port 2816 - 0
[  626.638339][ T5669] netdevsim netdevsim0 eth1: set [0, 2] type 1 family 0 port 4352 - 0
[  626.645792][ T5669] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  626.650098][ T5669] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 256 - 0
[  626.654166][ T5669] netdevsim netdevsim0 eth1: set [1, 2] type 2 family 0 port 20000 - 0
[  626.681703][ T5669] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  626.686662][ T5669] netdevsim netdevsim0 eth2: set [0, 1] type 1 family 0 port 2816 - 0
[  626.694947][ T5669] netdevsim netdevsim0 eth2: set [0, 2] type 1 family 0 port 4352 - 0
[  626.701286][ T5669] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  626.701975][ T4387] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13287'.
[  626.704743][ T5669] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 256 - 0
[  626.707228][ T4387] netlink: 12 bytes leftover after parsing attributes in process `syz.1.13287'.
[  626.709816][ T5669] netdevsim netdevsim0 eth2: set [1, 2] type 2 family 0 port 20000 - 0
[  626.718622][ T5669] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  626.722831][ T5669] netdevsim netdevsim0 eth3: set [0, 1] type 1 family 0 port 2816 - 0
[  626.725757][ T5669] netdevsim netdevsim0 eth3: set [0, 2] type 1 family 0 port 4352 - 0
[  626.729038][ T5669] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  626.733244][ T5669] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 256 - 0
[  626.736426][ T5669] netdevsim netdevsim0 eth3: set [1, 2] type 2 family 0 port 20000 - 0
[  626.745839][ T4387] geneve4: entered promiscuous mode
[  626.747725][ T4387] geneve4: entered allmulticast mode
[  626.751557][ T5669] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  626.755620][ T5669] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  626.759016][ T5669] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  626.786301][   T13] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  626.791523][   T13] ip6_tunnel: ip6tnl5 xmit: Local address not yet configured!
[  626.797672][   T13] ip6_tunnel: syztnl0 xmit: Local address not yet configured!
[  626.801556][   T13] ip6_tunnel: ip6gre3 xmit: Local address not yet configured!
[  626.903570][ T4392] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13289'.
[  626.906730][ T4392] netlink: 24 bytes leftover after parsing attributes in process `syz.1.13289'.
[  626.910046][ T4392] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13289'.
[  626.916605][ T4392] netlink: 'syz.1.13289': attribute type 5 has an invalid length.
[  626.943184][ T4396] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  626.946252][ T4396] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  627.148488][ T4417] netlink: 'syz.2.13296': attribute type 1 has an invalid length.
[  627.163220][ T4417] 8021q: adding VLAN 0 to HW filter on device bond13
[  627.170948][ T4417] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13296'.
[  627.185649][ T4417] macvlan6: entered promiscuous mode
[  627.189846][ T4417] macvlan6: entered allmulticast mode
[  627.197711][ T4417] sctp: [Deprecated]: syz.2.13296 (pid 4417) Use of int in maxseg socket option.
[  627.197711][ T4417] Use struct sctp_assoc_value instead
[  627.421155][ T4420] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13295'.
[  627.625961][ T4459] netlink: 'syz.2.13305': attribute type 13 has an invalid length.
[  627.651447][ T4459] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue
[  630.449173][ T4443] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  630.613850][    C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  630.723247][ T4480] openvswitch: netlink: Actions may not be safe on all matching packets
[  630.864765][ T4491] netlink: 24 bytes leftover after parsing attributes in process `syz.0.13317'.
[  630.870429][ T4493] syzkaller1: entered promiscuous mode
[  630.872600][ T4493] syzkaller1: entered allmulticast mode
[  630.889249][ T4493] netlink: 44 bytes leftover after parsing attributes in process `syz.1.13315'.
[  630.891824][ T4498] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13318'.
[  630.903594][ T4498] netlink: 'syz.2.13318': attribute type 9 has an invalid length.
[  630.908485][ T4498] netlink: 'syz.2.13318': attribute type 7 has an invalid length.
[  630.912312][ T4491] openvswitch: netlink: ct_state flags ffffffff unsupported
[  630.932853][    C0] ip6_tunnel: syztnl0 xmit: Local address not yet configured!
[  631.082444][    C0] ip6_tunnel: ip6gre3 xmit: Local address not yet configured!
[  631.084924][    C0] ip6_tunnel: ip6tnl5 xmit: Local address not yet configured!
[  631.189368][ T4536] bond14: entered promiscuous mode
[  631.191136][ T4536] bond14: entered allmulticast mode
[  631.193651][ T4536] 8021q: adding VLAN 0 to HW filter on device bond14
[  631.210176][ T4535] bond15: entered promiscuous mode
[  631.212005][ T4535] bond15: entered allmulticast mode
[  631.214099][ T4535] 8021q: adding VLAN 0 to HW filter on device bond15
[  631.218272][ T4534] xt_NFQUEUE: number of queues (3633) out of range (got 69161)
[  633.983440][ T4522] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  634.088358][ T4554] __nla_validate_parse: 3 callbacks suppressed
[  634.088371][ T4554] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13327'.
[  634.090243][ T4550] netlink: 12 bytes leftover after parsing attributes in process `syz.2.13326'.
[  634.214340][ T4563] netlink: 7064 bytes leftover after parsing attributes in process `syz.1.13330'.
[  634.224240][ T4563] openvswitch: netlink: Missing key (keys=40, expected=2000)
[  634.256367][ T4572] netlink: 96 bytes leftover after parsing attributes in process `syz.2.13333'.
[  634.359917][ T4585] netlink: 20 bytes leftover after parsing attributes in process `syz.2.13333'.
[  634.432565][ T4589] netlink: 'syz.1.13340': attribute type 4 has an invalid length.
[  634.435763][ T4585] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13333'.
[  634.438988][ T4589] netlink: 17 bytes leftover after parsing attributes in process `syz.1.13340'.
[  634.449162][ T4595] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13341'.
[  634.628435][ T4612] dvmrp6: entered allmulticast mode
[  634.649488][ T4612] tipc: Resetting bearer <eth:team0>
[  634.652238][ T4612] tipc: Resetting bearer <eth:team0>
[  634.665816][ T4612] A link change request failed with some changes committed already. Interface bond_slave_1 may have been left with an inconsistent configuration, please check.
[  634.685042][ T4609] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.13345'.
[  634.689064][ T4609] netlink: Unknown conntrack attr (0)
[  634.758522][ T4612] netlink: 180 bytes leftover after parsing attributes in process `syz.0.13346'.
[  635.076094][ T4635] nft_compat: unsupported protocol 0
[  635.139023][ T4638] lo: Caught tx_queue_len zero misconfig
[  635.223970][ T4638] syzkaller0: entered promiscuous mode
[  635.225903][ T4638] syzkaller0: entered allmulticast mode
[  637.774485][ T4669] veth0_macvtap: left allmulticast mode
[  637.776831][ T4669] netdevsim netdevsim1 netdevsim0: left promiscuous mode
[  637.779943][ T4669] bond12: left promiscuous mode
[  637.783137][ T4669] bridge9: left promiscuous mode
[  637.785349][ T4669] ipip2: left promiscuous mode
[  637.787068][ T4669] gretap3: left promiscuous mode
[  637.790198][ T4669] gretap3: left allmulticast mode
[  637.793027][ T4669] veth19: left promiscuous mode
[  637.795668][ T4669] vlan4: left allmulticast mode
[  637.797562][ T4669] bond13: left allmulticast mode
[  637.799380][ T4669] geneve3: left allmulticast mode
[  637.837849][ T4669] mac80211_hwsim hwsim5 d: left promiscuous mode
[  637.843374][ T4669] mac80211_hwsim hwsim5 d: left allmulticast mode
[  637.847549][ T4669] bond16: left promiscuous mode
[  637.849611][ T4669] bond17: left promiscuous mode
[  637.851391][ T4669] ip6gretap2: left promiscuous mode
[  637.857595][ T4669] xfrm2: left allmulticast mode
[  637.863356][ T4669] bond20: left allmulticast mode
[  637.873366][ T4669] geneve4: left promiscuous mode
[  637.875052][ T4669] geneve4: left allmulticast mode
[  637.894899][ T4684] bond23: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0)
[  637.904937][ T4684] bond23 (unregistering): Released all slaves
[  637.938163][ T7995] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  637.944752][ T7995] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  637.949205][ T7995] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  638.174712][ T4710] vlan0: entered promiscuous mode
[  638.176729][ T4710] veth0: entered promiscuous mode
[  638.199643][ T4714] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  638.363475][    C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  638.528015][ T4744] netlink: 'syz.2.13391': attribute type 2 has an invalid length.
[  638.531107][ T4744] netlink: 'syz.2.13391': attribute type 1 has an invalid length.
[  638.540611][ T4744] netlink: 'syz.2.13391': attribute type 11 has an invalid length.
[  638.762325][ T4765] bond23: Invalid ad_actor_system MAC address.
[  638.768562][ T4765] bond23: option ad_actor_system: invalid value (168101907446791)
[  638.772936][ T4765] bond23 (unregistering): Released all slaves
[  638.964898][ T4786] netlink: 'syz.1.13405': attribute type 4 has an invalid length.
[  639.012096][    C0] ip6_tunnel: syztnl0 xmit: Local address not yet configured!
[  639.226517][ T4796] __nla_validate_parse: 11 callbacks suppressed
[  639.226537][ T4796] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13408'.
[  639.230177][ T4797] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13408'.
[  639.438723][ T4807] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  639.442009][ T4807] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  639.643643][    C0] ip6_tunnel: ip6tnl5 xmit: Local address not yet configured!
[  639.646776][    C0] ip6_tunnel: ip6gre3 xmit: Local address not yet configured!
[  640.021347][ T4815] openvswitch: netlink: Message has 151 unknown bytes.
[  640.456862][ T4827] netlink: 726 bytes leftover after parsing attributes in process `syz.1.13415'.
[  640.463902][ T4827] netlink: 12 bytes leftover after parsing attributes in process `syz.1.13415'.
[  640.598683][ T4829] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13416'.
[  640.607171][ T4829] netlink: 'syz.0.13416': attribute type 1 has an invalid length.
[  640.633302][ T4829] 8021q: adding VLAN 0 to HW filter on device bond23
[  640.695240][ T4843] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13419'.
[  640.704017][ T4843] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13419'.
[  640.812248][ T4852] netlink: 12 bytes leftover after parsing attributes in process `syz.2.13420'.
[  640.829313][ T4851] netlink: 16 bytes leftover after parsing attributes in process `syz.2.13420'.
[  640.917796][ T4860] netlink: 232 bytes leftover after parsing attributes in process `syz.2.13423'.
[  641.481118][ T4902] lo speed is unknown, defaulting to 1000
[  641.635881][ T4916] block nbd1: Unsupported socket: should be TCP or UNIX.
[  641.756641][ T4902] ip6_vti0 speed is unknown, defaulting to 1000
[  642.129290][ T4949] netlink: 'syz.2.13455': attribute type 11 has an invalid length.
[  642.319471][ T4947] bond24: up delay (2) is not a multiple of miimon (80), value rounded to 0 ms
[  642.328059][ T4947] bond24: entered promiscuous mode
[  642.330658][ T4947] 8021q: adding VLAN 0 to HW filter on device bond24
[  642.453631][ T4954] lo speed is unknown, defaulting to 1000
[  642.689312][ T4974] pim6reg1: entered promiscuous mode
[  642.700017][ T4974] pim6reg1: entered allmulticast mode
[  643.027040][ T4954] ip6_vti0 speed is unknown, defaulting to 1000
[  643.579580][ T5016] netlink: 'syz.2.13474': attribute type 2 has an invalid length.
[  643.606241][ T5016] netlink: 'syz.2.13474': attribute type 4 has an invalid length.
[  643.609910][ T5016] netlink: 'syz.2.13474': attribute type 4 has an invalid length.
[  643.906923][ T5035] netlink: 'syz.2.13479': attribute type 12 has an invalid length.
[  644.077367][ T5052] netlink: 'syz.2.13484': attribute type 1 has an invalid length.
[  644.113372][ T5052] bond17: (slave vxcan1): The slave device specified does not support setting the MAC address
[  644.118235][ T5052] bond17: (slave vxcan1): Error -95 calling set_mac_address
[  644.258659][ T5052] macvlan7: entered promiscuous mode
[  644.260500][ T5052] macvlan7: entered allmulticast mode
[  644.264317][ T5052] bond17: entered promiscuous mode
[  644.266788][ T5052] 8021q: adding VLAN 0 to HW filter on device macvlan7
[  644.273643][ T5052] bond17: left promiscuous mode
[  644.295231][ T5057] syzkaller0: entered promiscuous mode
[  644.297325][ T5057] syzkaller0: entered allmulticast mode
[  644.430492][ T5066] __nla_validate_parse: 8 callbacks suppressed
[  644.430506][ T5066] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13489'.
[  644.485350][ T5078] netlink: 296 bytes leftover after parsing attributes in process `syz.2.13494'.
[  644.545615][ T5086] netlink: 404 bytes leftover after parsing attributes in process `syz.2.13497'.
[  644.557929][ T5087] netlink: 'syz.2.13497': attribute type 32 has an invalid length.
[  644.562438][ T5086] netlink: 'syz.2.13497': attribute type 32 has an invalid length.
[  644.565555][ T5089] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13497'.
[  644.581979][ T5082] netlink: 'syz.1.13495': attribute type 13 has an invalid length.
[  644.584863][ T5082] netlink: 'syz.1.13495': attribute type 17 has an invalid length.
[  644.659672][ T5082] 8021q: adding VLAN 0 to HW filter on device bond0
[  644.666701][ T5082] 8021q: adding VLAN 0 to HW filter on device v
[  644.673015][ T5082] wireguard: wg0: Could not create IPv4 socket
[  644.675590][ T5082] A link change request failed with some changes committed already. Interface wg0 may have been left with an inconsistent configuration, please check.
[  644.683473][ T8579] lo speed is unknown, defaulting to 1000
[  644.686696][ T5679] ip6_vti0 speed is unknown, defaulting to 1000
[  644.689521][ T8579] sqz0: Port: 1 Link ACTIVE
[  644.691362][ T5679] syz2: Port: 1 Link ACTIVE
[  644.709350][ T8579] ip6_vti0 speed is unknown, defaulting to 1000
[  644.709449][ T5679] lo speed is unknown, defaulting to 1000
[  644.719547][ T5097] syzkaller0: entered promiscuous mode
[  644.721391][ T5097] syzkaller0: entered allmulticast mode
[  644.912345][ T5478] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  644.986709][ T5111] macvlan6: left promiscuous mode
[  644.993250][ T5111] macvlan6: left allmulticast mode
[  645.003124][ T5111] bond14: left promiscuous mode
[  645.005340][ T5111] bond14: left allmulticast mode
[  645.014045][ T5111] bond15: left promiscuous mode
[  645.016301][ T5111] bond15: left allmulticast mode
[  645.189809][ T5123] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  645.510422][ T5136] bond21: (slave vxcan1): The slave device specified does not support setting the MAC address
[  645.516550][ T5136] bond21: (slave vxcan1): Error -95 calling set_mac_address
[  645.540105][ T5139] netlink: 16 bytes leftover after parsing attributes in process `syz.2.13511'.
[  645.587041][ T5140] bond21: (slave gretap4): making interface the new active one
[  645.590549][ T5140] bond21: (slave gretap4): Enslaving as an active interface with an up link
[  645.625176][ T5136] bond21: (slave bridge16): Enslaving as an active interface with a down link
[  645.652673][ T5136] macvlan1: entered promiscuous mode
[  645.656918][ T5136] macvlan1: entered allmulticast mode
[  645.661140][ T5136] bond21: entered promiscuous mode
[  645.664768][ T5136] gretap4: entered promiscuous mode
[  645.673932][ T5136] 8021q: adding VLAN 0 to HW filter on device macvlan1
[  645.684319][ T5136] bond21: (slave macvlan1): the slave hw address is in use by the bond; giving it the hw address of gretap4
[  645.704435][ T5136] bond21: left promiscuous mode
[  645.706569][ T5136] gretap4: left promiscuous mode
[  645.860609][ T5154] netlink: 120 bytes leftover after parsing attributes in process `syz.1.13517'.
[  645.867201][ T5154] validate_nla: 2 callbacks suppressed
[  645.867235][ T5154] netlink: 'syz.1.13517': attribute type 1 has an invalid length.
[  645.880396][ T5154] netlink: 64 bytes leftover after parsing attributes in process `syz.1.13517'.
[  645.880489][ T5156] netlink: 'syz.2.13518': attribute type 1 has an invalid length.
[  645.885616][ T5154] netlink: 28 bytes leftover after parsing attributes in process `syz.1.13517'.
[  645.902437][ T5156] netlink: 13 bytes leftover after parsing attributes in process `syz.2.13518'.
[  645.934457][ T5161] bond25: up delay (2) is not a multiple of miimon (80), value rounded to 0 ms
[  645.941577][ T5161] bond25: entered promiscuous mode
[  645.949670][ T5161] 8021q: adding VLAN 0 to HW filter on device bond25
[  645.961625][ T5161] netem: change failed
[  645.966940][ T5161] syzkaller1: entered promiscuous mode
[  645.968979][ T5161] syzkaller1: entered allmulticast mode
[  646.085781][ T5167] netlink: 'syz.1.13521': attribute type 1 has an invalid length.
[  646.088280][ T5167] netlink: 'syz.1.13521': attribute type 2 has an invalid length.
[  646.142405][ T5156] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13518'.
[  646.561985][ T5210] syzkaller1: entered promiscuous mode
[  646.564108][ T5210] syzkaller1: entered allmulticast mode
[  646.751621][ T5215] tipc: Enabled bearer <eth:xfrm0>, priority 10
[  646.943881][ T5228] lo speed is unknown, defaulting to 1000
[  647.016353][ T5234] netlink: 'syz.1.13543': attribute type 4 has an invalid length.
[  647.115362][ T5228] ip6_vti0 speed is unknown, defaulting to 1000
[  647.271199][ T5239] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  647.288960][ T5244] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16)
[  647.295548][ T6951] lo speed is unknown, defaulting to 1000
[  647.299546][ T6951] sqz0: Port: 1 Link DOWN
[  647.301788][ T5679] ip6_vti0 speed is unknown, defaulting to 1000
[  647.305495][ T6951] lo speed is unknown, defaulting to 1000
[  647.308021][ T5679] syz2: Port: 1 Link DOWN
[  647.310704][ T5679] ip6_vti0 speed is unknown, defaulting to 1000
[  647.408949][ T5248] sctp: [Deprecated]: syz.2.13547 (pid 5248) Use of struct sctp_assoc_value in delayed_ack socket option.
[  647.408949][ T5248] Use struct sctp_sack_info instead
[  647.476386][ T5251] block nbd2: not configured, cannot reconfigure
[  647.599767][ T5254] gretap0: left promiscuous mode
[  647.607564][ T5254] erspan0: left promiscuous mode
[  647.631077][ T5254] 8021q: adding VLAN 0 to HW filter on device 60X
[  647.684756][ T5254] veth0_to_team: left promiscuous mode
[  647.691789][ T5254] batman_adv: 60X: Interface activated: batadv_slave_0
[  647.699426][ T5254] batman_adv: 60X: Interface activated: batadv_slave_1
[  647.703547][ T5254] tipc: Resetting bearer <eth:xfrm0>
[  647.710880][ T5254] veth0_macvtap: left promiscuous mode
[  647.714516][ T5254] veth0_macvtap: entered promiscuous mode
[  647.721287][ T5254] bridge0: port 3(vlan1) entered blocking state
[  647.724037][ T5254] bridge0: port 3(vlan1) entered listening state
[  647.759942][ T5254] 8021q: adding VLAN 0 to HW filter on device bond1
[  647.810168][ T1391] bridge0: port 2(bridge_slave_1) entered blocking state
[  647.814252][ T1391] bridge0: port 2(bridge_slave_1) entered listening state
[  647.839259][T10617] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  647.859784][T10617] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  647.883778][T10617] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  647.886924][T10617] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  648.380608][   T13] nci: nci_rx_work: unknown MT 0x7
[  648.387527][ T5281] netlink: 'syz.2.13557': attribute type 4 has an invalid length.
[  648.621713][ T5288] netlink: 'syz.0.13559': attribute type 13 has an invalid length.
[  648.625215][ T5288] netlink: 'syz.0.13559': attribute type 17 has an invalid length.
[  648.684851][ T5286] tipc: Resetting bearer <eth:team0>
[  649.001158][ T5286] bridge1: port 3(veth5) entered disabled state
[  649.003337][ T5286] bridge1: port 1(veth3) entered disabled state
[  649.456429][ T5286] batman_adv: batadv0: Interface deactivated: macvtap1
[  649.828493][ T5288] bridge0: left promiscuous mode
[  649.834830][ T5288] 8021q: adding VLAN 0 to HW filter on device team0
[  649.837331][ T5288] tipc: Resetting bearer <eth:team0>
[  649.839579][ T5288] tipc: Resetting bearer <eth:team0>
[  649.844355][ T5288] 8021q: adding VLAN 0 to HW filter on device batadv0
[  649.863199][ T5288] veth1_vlan: left promiscuous mode
[  649.865493][ T5288] veth0_vlan: left promiscuous mode
[  649.867986][ T5288] veth0_vlan: entered promiscuous mode
[  649.873440][ T5288] veth1_vlan: entered promiscuous mode
[  649.878620][ T5288] veth1_macvtap: left promiscuous mode
[  649.881035][ T5288] veth0_macvtap: left promiscuous mode
[  649.884478][ T5288] veth0_macvtap: entered promiscuous mode
[  649.887085][ T5288] veth1_macvtap: entered promiscuous mode
[  649.890817][ T5288] mac80211_hwsim hwsim7 wlan1: left promiscuous mode
[  649.894538][   T26] wlan1: Selected IBSS BSSID 00:00:00:8d:00:00 based on configured SSID
[  649.911580][ T5288] 8021q: adding VLAN 0 to HW filter on device bond1
[  649.919268][ T5288] bridge1: port 1(veth3) entered blocking state
[  649.921541][ T5288] bridge1: port 1(veth3) entered forwarding state
[  649.925521][ T5288] bridge1: port 3(veth5) entered blocking state
[  649.927633][ T5288] bridge1: port 3(veth5) entered forwarding state
[  649.932738][ T5288] 8021q: adding VLAN 0 to HW filter on device eth0
[  649.936553][ T5288] 8021q: adding VLAN 0 to HW filter on device eth1
[  649.940037][ T5288] 8021q: adding VLAN 0 to HW filter on device eth2
[  649.944802][ T5288] 8021q: adding VLAN 0 to HW filter on device eth3
[  649.949059][ T5288] 8021q: adding VLAN 0 to HW filter on device bond2
[  649.957407][ T5288] 8021q: adding VLAN 0 to HW filter on device bond3
[  649.962901][ T5288] 8021q: adding VLAN 0 to HW filter on device bond4
[  649.971840][ T5288] 8021q: adding VLAN 0 to HW filter on device bond5
[  649.984127][ T5288] 8021q: adding VLAN 0 to HW filter on device bond6
[  649.987669][ T5288] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[  649.994264][ T5288] 8021q: adding VLAN 0 to HW filter on device bond7
[  650.016769][ T5288] 8021q: adding VLAN 0 to HW filter on device bond8
[  650.019343][ T5288] 8021q: adding VLAN 0 to HW filter on device bond9
[  650.022337][ T5288] 8021q: adding VLAN 0 to HW filter on device bond11
[  650.027330][ T5288] 8021q: adding VLAN 0 to HW filter on device macsec2
[  650.036358][ T5288] 8021q: adding VLAN 0 to HW filter on device macsec3
[  650.040706][ T5288] 8021q: adding VLAN 0 to HW filter on device bond10
[  650.050814][ T5288] 8021q: adding VLAN 0 to HW filter on device bond12
[  650.062991][ T5288] 8021q: adding VLAN 0 to HW filter on device bond13
[  650.068415][ T5288] mac80211_hwsim hwsim7 wlan1: entered promiscuous mode
[  650.071739][ T5288] batman_adv: batadv0: Interface activated: macvtap1
[  650.076195][ T5288] 8021q: adding VLAN 0 to HW filter on device bond14
[  650.080060][ T5288] 8021q: adding VLAN 0 to HW filter on device bond15
[  650.095674][ T5288] 8021q: adding VLAN 0 to HW filter on device macvlan3
[  650.098783][ T5288] 8021q: adding VLAN 0 to HW filter on device bond16
[  650.104353][ T5288] 8021q: adding VLAN 0 to HW filter on device bond17
[  650.107873][ T5288] 8021q: adding VLAN 0 to HW filter on device bond18
[  650.115463][ T5288] 8021q: adding VLAN 0 to HW filter on device team1
[  650.119012][ T5288] 8021q: adding VLAN 0 to HW filter on device team2
[  650.123027][ T5288] 8021q: adding VLAN 0 to HW filter on device bond19
[  650.156477][ T5288] 8021q: adding VLAN 0 to HW filter on device bond20
[  650.159231][ T5288] 8021q: adding VLAN 0 to HW filter on device bond21
[  650.164548][ T5288] 8021q: adding VLAN 0 to HW filter on device bond22
[  650.183685][ T5288] 8021q: adding VLAN 0 to HW filter on device bond23
[  650.187918][ T5288] bond24: left promiscuous mode
[  650.190269][ T5288] 8021q: adding VLAN 0 to HW filter on device bond24
[  650.195325][ T5288] bond25: left promiscuous mode
[  650.197727][ T5288] 8021q: adding VLAN 0 to HW filter on device bond25
[  650.201663][  T798] bridge0: entered promiscuous mode
[  650.278727][ T7995] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  650.287869][ T7995] ip6_tunnel: ip6gre3 xmit: Local address not yet configured!
[  650.298720][ T7995] ip6_tunnel: syztnl0 xmit: Local address not yet configured!
[  650.306654][ T7995] ip6_tunnel: ip6tnl5 xmit: Local address not yet configured!
[  650.374916][ T5299] __nla_validate_parse: 9 callbacks suppressed
[  650.374928][ T5299] netlink: 16 bytes leftover after parsing attributes in process `syz.0.13560'.
[  651.286515][ T5275] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  651.390017][ T5301] netlink: 12 bytes leftover after parsing attributes in process `syz.2.13561'.
[  651.394150][ T5303] netlink: 'syz.1.13562': attribute type 1 has an invalid length.
[  651.435188][ T5303] bond23: entered promiscuous mode
[  651.437870][ T5303] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  651.445761][ T5302] bond23: left promiscuous mode
[  651.475053][ T5310] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  651.482352][ T5310] syzkaller0: entered promiscuous mode
[  651.484401][ T5310] syzkaller0: entered allmulticast mode
[  651.488875][ T5310] netlink: 'syz.2.13565': attribute type 1 has an invalid length.
[  651.513841][ T5310] bond18: entered promiscuous mode
[  651.516043][ T5310] 8021q: adding VLAN 0 to HW filter on device bond18
[  651.555638][ T5310] bond18: (slave veth31): making interface the new active one
[  651.563425][ T5310] veth31: entered promiscuous mode
[  651.568601][ T5310] bond18: (slave veth31): Enslaving as an active interface with an up link
[  651.578572][ T5310] netlink: 180 bytes leftover after parsing attributes in process `syz.2.13565'.
[  651.663270][ T5310] tipc: Resetting bearer <eth:syzkaller0>
[  651.676479][ T5309] tipc: Resetting bearer <eth:syzkaller0>
[  651.703547][ T5309] tipc: Disabling bearer <eth:syzkaller0>
[  651.731741][ T5323] netlink: 'syz.1.13569': attribute type 14 has an invalid length.
[  651.866559][ T5332] netlink: 36 bytes leftover after parsing attributes in process `syz.1.13571'.
[  651.894797][ T5334] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13572'.
[  652.040739][ T5346] netlink: 'syz.2.13576': attribute type 2 has an invalid length.
[  652.126222][ T5353] netlink: 'syz.1.13579': attribute type 4 has an invalid length.
[  652.129544][ T5353] netlink: 17 bytes leftover after parsing attributes in process `syz.1.13579'.
[  652.303515][ T5364] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 64993
[  653.016662][ T5368] netlink: 'syz.1.13582': attribute type 1 has an invalid length.
[  653.041668][ T5368] bond24: entered promiscuous mode
[  653.045148][ T5368] 8021q: adding VLAN 0 to HW filter on device bond24
[  653.065611][ T5368] 8021q: adding VLAN 0 to HW filter on device bond24
[  653.070859][ T5368] bond24: (slave vcan0): The slave device specified does not support setting the MAC address
[  653.075991][ T5368] bond24: (slave vcan0): Setting fail_over_mac to active for active-backup mode
[  653.091313][ T5368] bond24: (slave vcan0): making interface the new active one
[  653.112109][ T5368] vcan0: entered promiscuous mode
[  653.116048][ T5368] bond24: (slave vcan0): Enslaving as an active interface with an up link
[  653.147367][ T5373] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  653.165632][ T5372] tipc: Disabling bearer <eth:syzkaller0>
[  653.237095][ T5377] netlink: 'syz.1.13586': attribute type 2 has an invalid length.
[  653.251648][ T5379] netlink: 'syz.2.13587': attribute type 1 has an invalid length.
[  653.286224][ T5379] gretap6: entered allmulticast mode
[  653.296369][ T5379] bond19: (slave gretap6): making interface the new active one
[  653.302517][ T5379] bond19: (slave gretap6): Enslaving as an active interface with an up link
[  653.313364][ T5382] netlink: 12 bytes leftover after parsing attributes in process `syz.1.13588'.
[  653.344088][ T5382] bond25: entered promiscuous mode
[  653.346203][ T5382] 8021q: adding VLAN 0 to HW filter on device bond25
[  653.567176][ T5399] netlink: 'syz.1.13593': attribute type 1 has an invalid length.
[  653.572900][ T5399] netlink: 224 bytes leftover after parsing attributes in process `syz.1.13593'.
[  653.724603][ T5410] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13596'.
[  653.816619][ T5412] ip6tnl6: entered allmulticast mode
[  653.850207][ T5416] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13598'.
[  653.858495][ T5416] ip6tnl7: entered allmulticast mode
[  654.122793][    C1] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  654.203456][    C1] ip6_tunnel: ip6tnl5 xmit: Local address not yet configured!
[  654.206658][    C1] ip6_tunnel: ip6gre3 xmit: Local address not yet configured!
[  654.522607][    C1] ip6_tunnel: syztnl0 xmit: Local address not yet configured!
[  657.342395][ T5430] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  657.346197][ T5451] netlink: 'syz.1.13608': attribute type 3 has an invalid length.
[  657.349853][ T5451] netlink: 'syz.1.13608': attribute type 1 has an invalid length.
[  657.354161][ T5451] __nla_validate_parse: 1 callbacks suppressed
[  657.354173][ T5451] netlink: 224 bytes leftover after parsing attributes in process `syz.1.13608'.
[  657.430981][ T5454] netlink: 12 bytes leftover after parsing attributes in process `syz.1.13609'.
[  657.469597][ T5454] veth27: entered allmulticast mode
[  657.479952][ T5454] bond26: (slave veth27): Enslaving as an active interface with an up link
[  657.489324][ T5454] bond26 (unregistering): (slave veth27): Releasing backup interface
[  657.496888][ T5454] bond26 (unregistering): Released all slaves
[  657.627892][ T5465] netlink: 'syz.2.13610': attribute type 10 has an invalid length.
[  658.338605][ T5474] netlink: 'syz.2.13613': attribute type 1 has an invalid length.
[  658.351423][ T5474] bond20: entered promiscuous mode
[  658.355507][ T5474] 8021q: adding VLAN 0 to HW filter on device bond20
[  658.370708][ T5474] bond20: (slave bridge15): making interface the new active one
[  658.377062][ T5474] bridge15: entered promiscuous mode
[  658.383595][ T5474] bridge15: left promiscuous mode
[  658.476902][ T5474] netlink: 156 bytes leftover after parsing attributes in process `syz.2.13613'.
[  658.682578][ T5494] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  658.687304][ T5494] syzkaller0: entered promiscuous mode
[  658.689601][ T5494] syzkaller0: entered allmulticast mode
[  658.875920][ T5499] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13620'.
[  658.879550][ T5499] netlink: 'syz.1.13620': attribute type 9 has an invalid length.
[  658.883233][ T5499] netlink: 'syz.1.13620': attribute type 6 has an invalid length.
[  659.008988][ T5505] bond24: left promiscuous mode
[  659.013734][ T5505] vcan0: left promiscuous mode
[  659.018833][ T5505] bond25: left promiscuous mode
[  659.023323][ T5505] ip6tnl6: left allmulticast mode
[  659.026783][ T5505] veth27: left allmulticast mode
[  659.064555][ T5518] netlink: 'syz.2.13623': attribute type 1 has an invalid length.
[  659.067348][ T5518] netlink: 96 bytes leftover after parsing attributes in process `syz.2.13623'.
[  659.070225][ T5518] netlink: 1 bytes leftover after parsing attributes in process `syz.2.13623'.
[  659.073862][ T5518] netlink: 658 bytes leftover after parsing attributes in process `syz.2.13623'.
[  659.692899][ T5555] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13631'.
[  659.759482][ T5558] lo speed is unknown, defaulting to 1000
[  659.889666][ T5558] ip6_vti0 speed is unknown, defaulting to 1000
[  659.890101][ T5557] lo speed is unknown, defaulting to 1000
[  659.932051][ T5562] block nbd1: server does not support multiple connections per device.
[  659.941513][ T5562] block nbd1: shutting down sockets
[  660.074874][ T5557] ip6_vti0 speed is unknown, defaulting to 1000
[  660.510461][ T5598] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  660.513926][ T5598] netdevsim netdevsim0 eth3 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0
[  660.518429][ T5598] netdevsim netdevsim0 eth3 (unregistering): unset [0, 2] type 1 family 0 port 4352 - 0
[  660.521756][ T5598] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  660.525101][ T5598] netdevsim netdevsim0 eth3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[  660.528065][ T5598] netdevsim netdevsim0 eth3 (unregistering): unset [1, 2] type 2 family 0 port 20000 - 0
[  660.633610][ T5598] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  660.636747][ T5598] netdevsim netdevsim0 eth2 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0
[  660.640073][ T5598] netdevsim netdevsim0 eth2 (unregistering): unset [0, 2] type 1 family 0 port 4352 - 0
[  660.645379][ T5598] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  660.648508][ T5598] netdevsim netdevsim0 eth2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[  660.651475][ T5598] netdevsim netdevsim0 eth2 (unregistering): unset [1, 2] type 2 family 0 port 20000 - 0
[  660.791359][ T5598] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  660.795358][ T5598] netdevsim netdevsim0 eth1 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0
[  660.798472][ T5598] netdevsim netdevsim0 eth1 (unregistering): unset [0, 2] type 1 family 0 port 4352 - 0
[  660.801450][ T5598] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  660.807098][ T5598] netdevsim netdevsim0 eth1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[  660.810150][ T5598] netdevsim netdevsim0 eth1 (unregistering): unset [1, 2] type 2 family 0 port 20000 - 0
[  660.876452][ T5598] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  660.880185][ T5598] netdevsim netdevsim0 eth0 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0
[  660.895765][ T5598] netdevsim netdevsim0 eth0 (unregistering): unset [0, 2] type 1 family 0 port 4352 - 0
[  660.900694][ T5598] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  660.904531][ T5598] netdevsim netdevsim0 eth0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[  660.907659][ T5598] netdevsim netdevsim0 eth0 (unregistering): unset [1, 2] type 2 family 0 port 20000 - 0
[  660.976913][ T5607] openvswitch: netlink: Tunnel attr 333 out of range max 16
[  661.095407][ T7996] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  661.100272][ T7996] netdevsim netdevsim0 eth0: set [0, 1] type 1 family 0 port 4352 - 0
[  661.115170][ T7996] netdevsim netdevsim0 eth0: set [0, 2] type 1 family 0 port 2816 - 0
[  661.117772][ T7996] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 20000 - 0
[  661.120426][ T7996] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 6081 - 0
[  661.124863][ T7996] netdevsim netdevsim0 eth0: set [1, 2] type 2 family 0 port 256 - 0
[  661.188387][ T7995] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  661.192039][ T7995] netdevsim netdevsim0 eth1: set [0, 1] type 1 family 0 port 4352 - 0
[  661.196437][ T7995] netdevsim netdevsim0 eth1: set [0, 2] type 1 family 0 port 2816 - 0
[  661.201254][ T7995] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 20000 - 0
[  661.205129][ T7995] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 6081 - 0
[  661.207760][ T7995] netdevsim netdevsim0 eth1: set [1, 2] type 2 family 0 port 256 - 0
[  661.262667][ T7995] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  661.268576][ T7995] netdevsim netdevsim0 eth2: set [0, 1] type 1 family 0 port 4352 - 0
[  661.274533][ T7995] netdevsim netdevsim0 eth2: set [0, 2] type 1 family 0 port 2816 - 0
[  661.280158][ T7995] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 20000 - 0
[  661.287875][ T7995] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 6081 - 0
[  661.290484][ T7995] netdevsim netdevsim0 eth2: set [1, 2] type 2 family 0 port 256 - 0
[  661.323521][ T5478] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  661.326394][ T5478] netdevsim netdevsim0 eth3: set [0, 1] type 1 family 0 port 4352 - 0
[  661.329007][ T5478] netdevsim netdevsim0 eth3: set [0, 2] type 1 family 0 port 2816 - 0
[  661.331623][ T5478] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 20000 - 0
[  661.334759][ T5478] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 6081 - 0
[  661.337339][ T5478] netdevsim netdevsim0 eth3: set [1, 2] type 2 family 0 port 256 - 0
[  661.379174][ T5623] netlink: 'syz.0.13651': attribute type 21 has an invalid length.
[  661.381747][ T5623] netlink: 'syz.0.13651': attribute type 22 has an invalid length.
[  661.386225][ T5623] netlink: 'syz.0.13651': attribute type 23 has an invalid length.
[  661.388990][ T5623] netlink: 136 bytes leftover after parsing attributes in process `syz.0.13651'.
[  661.421719][ T5620] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13650'.
[  661.656699][ T5647] sch_tbf: burst 1023 is lower than device lo mtu (32783) !
[  661.915051][ T5671] bridge0: port 1(vlan5) entered blocking state
[  661.917420][ T5671] bridge0: port 1(vlan5) entered disabled state
[  661.919718][ T5671] vlan5: entered allmulticast mode
[  661.921400][ T5671] bridge0: entered allmulticast mode
[  661.924597][ T5671] vlan5: left allmulticast mode
[  661.926394][ T5671] bridge0: left allmulticast mode
[  662.043195][    C1] ip6_tunnel: ip6tnl5 xmit: Local address not yet configured!
[  662.046625][    C1] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  662.116985][ T5687] veth29: entered promiscuous mode
[  662.119149][ T5687] veth29: entered allmulticast mode
[  662.239905][ T5698] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  662.282148][ T5697] block nbd1: server does not support multiple connections per device.
[  662.291166][ T5697] block nbd1: shutting down sockets
[  662.413537][ T5716] pim6reg: left allmulticast mode
[  662.584074][ T5720] validate_nla: 1 callbacks suppressed
[  662.584084][ T5720] netlink: 'syz.0.13679': attribute type 1 has an invalid length.
[  662.681409][ T5735] netlink: 'syz.2.13684': attribute type 12 has an invalid length.
[  662.695845][    C1] ip6_tunnel: ip6gre3 xmit: Local address not yet configured!
[  662.884165][ T5754] __nla_validate_parse: 4 callbacks suppressed
[  662.884176][ T5754] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13689'.
[  662.914843][ T5753] netlink: 'syz.0.13688': attribute type 2 has an invalid length.
[  662.919390][ T5753] netlink: 'syz.0.13688': attribute type 8 has an invalid length.
[  662.923347][ T5753] netlink: 132 bytes leftover after parsing attributes in process `syz.0.13688'.
[  662.931844][ T5753] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13688'.
[  662.939157][ T5757] netlink: 12 bytes leftover after parsing attributes in process `syz.1.13690'.
[  662.944613][ T5753] bond0: Unable to set down delay as MII monitoring is disabled
[  663.131286][ T5776] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  663.209837][ T5776] syzkaller0: entered promiscuous mode
[  663.225975][ T5776] syzkaller0: entered allmulticast mode
[  663.230615][ T5776] tipc: Resetting bearer <eth:syzkaller0>
[  663.262763][ T5777] veth33: entered promiscuous mode
[  663.279805][ T5776] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13695'.
[  663.325726][    C1] ip6_tunnel: syztnl0 xmit: Local address not yet configured!
[  663.353628][ T5786] IPv6: NLM_F_CREATE should be specified when creating new route
[  663.357006][ T5786] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  663.358245][ T5775] tipc: Resetting bearer <eth:syzkaller0>
[  663.361402][ T5786] IPv6: NLM_F_CREATE should be set when creating new route
[  663.364870][ T5786] IPv6: NLM_F_CREATE should be set when creating new route
[  663.367778][ T5786] IPv6: NLM_F_CREATE should be set when creating new route
[  663.372232][ T5786] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.13700'.
[  663.379320][ T5790] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.13700'.
[  663.630744][ T5801] netlink: 64 bytes leftover after parsing attributes in process `syz.1.13702'.
[  665.444638][ T5775] tipc: Disabling bearer <eth:syzkaller0>
[  665.690529][ T5817] netlink: 'syz.0.13707': attribute type 13 has an invalid length.
[  665.696045][ T5817] netlink: 'syz.0.13707': attribute type 17 has an invalid length.
[  665.785763][ T5815] tipc: Resetting bearer <eth:team0>
[  666.201238][ T5815] bridge1: port 3(veth5) entered disabled state
[  666.203459][ T5815] bridge1: port 1(veth3) entered disabled state
[  666.520643][ T5815] batman_adv: batadv0: Interface deactivated: macvtap1
[  667.017704][ T5817] bridge0: left promiscuous mode
[  667.023077][ T5817] 8021q: adding VLAN 0 to HW filter on device team0
[  667.026071][ T5817] tipc: Resetting bearer <eth:team0>
[  667.030941][ T5817] 8021q: adding VLAN 0 to HW filter on device batadv0
[  667.050314][ T5817] veth1_vlan: left promiscuous mode
[  667.054635][ T5817] veth0_vlan: left promiscuous mode
[  667.057325][ T5817] veth0_vlan: entered promiscuous mode
[  667.061386][ T5817] veth1_vlan: entered promiscuous mode
[  667.066801][ T5817] veth1_macvtap: left promiscuous mode
[  667.069201][ T5817] veth0_macvtap: left promiscuous mode
[  667.072463][ T5817] veth0_macvtap: entered promiscuous mode
[  667.076105][ T5817] veth1_macvtap: entered promiscuous mode
[  667.081386][ T5817] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check.
[  667.098179][ T5478] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  667.110726][ T5478] netdevsim netdevsim0 eth0: unset [0, 1] type 1 family 0 port 4352 - 0
[  667.114445][ T5478] netdevsim netdevsim0 eth0: unset [0, 2] type 1 family 0 port 2816 - 0
[  667.127258][ T5478] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 20000 - 0
[  667.130541][ T5478] netdevsim netdevsim0 eth0: unset [1, 2] type 2 family 0 port 256 - 0
[  667.133948][ T5478] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  667.137312][ T5478] netdevsim netdevsim0 eth1: unset [0, 1] type 1 family 0 port 4352 - 0
[  667.146725][ T5478] netdevsim netdevsim0 eth1: unset [0, 2] type 1 family 0 port 2816 - 0
[  667.151789][ T5478] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 20000 - 0
[  667.155337][ T5478] netdevsim netdevsim0 eth1: unset [1, 2] type 2 family 0 port 256 - 0
[  667.182781][ T5478] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  667.186344][ T5478] netdevsim netdevsim0 eth2: unset [0, 1] type 1 family 0 port 4352 - 0
[  667.189516][ T5478] netdevsim netdevsim0 eth2: unset [0, 2] type 1 family 0 port 2816 - 0
[  667.193098][ T5478] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 20000 - 0
[  667.196468][ T5478] netdevsim netdevsim0 eth2: unset [1, 2] type 2 family 0 port 256 - 0
[  667.199826][ T5478] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  667.203709][ T5478] netdevsim netdevsim0 eth3: unset [0, 1] type 1 family 0 port 4352 - 0
[  667.207007][ T5478] netdevsim netdevsim0 eth3: unset [0, 2] type 1 family 0 port 2816 - 0
[  667.210948][ T5478] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 20000 - 0
[  667.214443][ T5478] netdevsim netdevsim0 eth3: unset [1, 2] type 2 family 0 port 256 - 0
[  667.341554][ T5848] nbd: couldn't find a device at index 0
[  667.493284][ T5861] sctp: [Deprecated]: syz.1.13718 (pid 5861) Use of int in max_burst socket option deprecated.
[  667.493284][ T5861] Use struct sctp_assoc_value instead
[  667.613410][ T5858] syzkaller0: entered promiscuous mode
[  667.615293][ T5858] syzkaller0: entered allmulticast mode
[  667.630414][ T5858] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  667.656628][ T5857] tipc: Resetting bearer <eth:syzkaller0>
[  667.674608][ T5857] tipc: Disabling bearer <eth:syzkaller0>
[  667.778979][ T5867] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13722'.
[  667.862785][ T5874] netlink: 16 bytes leftover after parsing attributes in process `syz.2.13723'.
[  668.015171][ T5879] netlink: 12 bytes leftover after parsing attributes in process `syz.2.13723'.
[  668.063353][ T5881] netlink: 16 bytes leftover after parsing attributes in process `syz.2.13724'.
[  668.117962][ T5883] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  668.222793][ T5887] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13727'.
[  668.366987][ T5893] openvswitch: netlink: Flow key attr not present in new flow.
[  668.532843][ T5900] netlink: 'syz.1.13731': attribute type 3 has an invalid length.
[  668.556597][ T5904] x_tables: unsorted underflow at hook 2
[  668.564926][ T5904] netlink: 'syz.2.13732': attribute type 1 has an invalid length.
[  668.600728][ T5907] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13733'.
[  668.663685][ T5911] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13733'.
[  668.666808][ T5911] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13733'.
[  668.670422][ T5911] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13733'.
[  668.674767][ T5911] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13733'.
[  668.678031][ T5911] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13733'.
[  668.681347][ T5911] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13733'.
[  668.800594][ T5921] lo speed is unknown, defaulting to 1000
[  668.937401][ T5921] ip6_vti0 speed is unknown, defaulting to 1000
[  669.547568][ T5927] netlink: 'syz.1.13740': attribute type 10 has an invalid length.
[  669.867969][ T5942] lo speed is unknown, defaulting to 1000
[  669.997129][ T5942] ip6_vti0 speed is unknown, defaulting to 1000
[  670.399223][ T5959] netlink: 'syz.2.13748': attribute type 3 has an invalid length.
[  670.654974][ T5980] veth0_macvtap: Caught tx_queue_len zero misconfig
[  670.748075][ T5997] x_tables: duplicate underflow at hook 3
[  670.750657][ T5997] tipc: Enabling of bearer <eth:vcan0> rejected, max 3 bearers permitted
[  670.783197][ T5999] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  671.735586][ T6011] netlink: 'syz.2.13765': attribute type 1 has an invalid length.
[  671.830131][ T6022] syzkaller0: entered promiscuous mode
[  671.833880][ T6022] syzkaller0: entered allmulticast mode
[  672.156329][ T6045] block nbd2: not configured, cannot reconfigure
[  673.102768][ T6100] __nla_validate_parse: 13 callbacks suppressed
[  673.102779][ T6100] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13795'.
[  673.205241][ T6107] hmac(sha224: entered promiscuous mode
[  673.208770][ T6107] netlink: 'syz.1.13798': attribute type 12 has an invalid length.
[  673.329400][ T6107] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13798'.
[  673.333076][ T6107] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13798'.
[  673.336207][ T6107] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13798'.
[  673.466875][ T6120] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  673.513093][ T6133] netlink: 52 bytes leftover after parsing attributes in process `syz.2.13802'.
[  673.516606][ T6133] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  673.555414][ T6135] netlink: 12 bytes leftover after parsing attributes in process `syz.1.13803'.
[  673.617349][ T6144] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13806'.
[  673.620154][ T6144] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13806'.
[  673.707752][ T6147] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13807'.
[  673.728314][ T6147] openvswitch: : Dropping previously announced user features
[  673.733133][ T6147] netlink: 16 bytes leftover after parsing attributes in process `syz.1.13807'.
[  673.859965][ T6152] tipc: Enabling of bearer <eth:gre0> rejected, max 3 bearers permitted
[  674.515585][ T6162] bond0: Caught tx_queue_len zero misconfig
[  674.786340][ T6183] syzkaller1: entered promiscuous mode
[  674.788932][ T6183] syzkaller1: entered allmulticast mode
[  674.804502][ T6183] netlink: 'syz.1.13816': attribute type 1 has an invalid length.
[  675.030611][ T6186] 8021q: adding VLAN 0 to HW filter on device bond0
[  675.037373][ T6186] 8021q: adding VLAN 0 to HW filter on device v
[  675.045440][ T6186] wireguard: wg0: Could not create IPv4 socket
[  675.048125][ T6186] A link change request failed with some changes committed already. Interface wg0 may have been left with an inconsistent configuration, please check.
[  675.054835][  T798] lo speed is unknown, defaulting to 1000
[  675.057247][  T798] sqz0: Port: 1 Link ACTIVE
[  675.063829][ T4339] ip6_vti0 speed is unknown, defaulting to 1000
[  675.066859][  T798] lo speed is unknown, defaulting to 1000
[  675.070569][ T4339] syz2: Port: 1 Link ACTIVE
[  675.073584][ T4339] ip6_vti0 speed is unknown, defaulting to 1000
[  675.093536][ T4341] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  675.202420][ T4341] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  675.294026][T10617] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  675.637497][ T6217] bond26: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  675.663398][ T6217] bond26: (slave lo): Enslaving as an active interface with an up link
[  675.684101][ T6210] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  675.692412][ T6210] Bluetooth: hci1: Error when powering off device on rfkill (-4)
[  675.699860][ T6217] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check.
[  675.731149][ T6210] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  675.733960][ T6210] Bluetooth: hci2: Error when powering off device on rfkill (-4)
[  676.113238][ T6245] netlink: 'syz.2.13834': attribute type 10 has an invalid length.
[  676.144269][ T6245] : entered promiscuous mode
[  676.176651][ T6247] openvswitch: netlink: Unexpected mask (mask=200240, allowed=10048)
[  676.191352][ T6247] tipc: Resetting bearer <eth:team0>
[  676.363125][ T7996] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  676.376078][ T7996] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  676.379657][ T6263] SET target dimension over the limit!
[  676.439281][ T6272] netlink: 'syz.2.13843': attribute type 1 has an invalid length.
[  676.731048][ T6311] openvswitch: netlink: Missing valid actions attribute.
[  676.736014][ T6311] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  677.322317][ T6948] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  678.042252][    C0] bridge0: port 2(bridge_slave_1) entered learning state
[  678.045430][    C0] bridge0: port 3(vlan1) entered learning state
[  678.188847][ T6398] xt_hashlimit: size too large, truncated to 1048576
[  678.636510][ T6424] __nla_validate_parse: 12 callbacks suppressed
[  678.636528][ T6424] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13879'.
[  678.744809][T31446] lo speed is unknown, defaulting to 1000
[  678.750275][T31446] sqz0: Port: 1 Link DOWN
[  678.751827][  T798] ip6_vti0 speed is unknown, defaulting to 1000
[  678.754483][  T798] syz2: Port: 1 Link DOWN
[  678.758451][  T798] lo speed is unknown, defaulting to 1000
[  678.760661][  T798] ip6_vti0 speed is unknown, defaulting to 1000
[  678.989435][ T6445] ip6t_srh: unknown srh match flags  4000
[  679.158504][ T6461] netlink: 32 bytes leftover after parsing attributes in process `syz.0.13889'.
[  679.210088][ T6463] netlink: 'syz.0.13890': attribute type 1 has an invalid length.
[  679.228275][ T6463] 8021q: adding VLAN 0 to HW filter on device bond27
[  679.242641][ T6463] pimreg9: entered allmulticast mode
[  679.261557][ T6463] veth33: entered allmulticast mode
[  679.266660][ T6463] bond27: (slave veth33): Enslaving as an active interface with an up link
[  679.296502][ T6463] bond27 (unregistering): (slave veth33): Releasing backup interface
[  679.301015][ T6463] bond27 (unregistering): Released all slaves
[  679.374105][ T6467] bridge0: port 1(erspan0) entered blocking state
[  679.379217][ T6467] bridge0: port 1(erspan0) entered disabled state
[  679.381407][ T6467] erspan0: entered allmulticast mode
[  679.384161][ T6467] erspan0: entered promiscuous mode
[  679.386541][ T6467] bridge0: port 1(erspan0) entered blocking state
[  679.391688][ T6467] bridge0: port 1(erspan0) entered listening state
[  679.419901][ T6466] erspan0: left allmulticast mode
[  679.422111][ T6466] erspan0: left promiscuous mode
[  679.427218][ T6466] bridge0: port 1(erspan0) entered disabled state
[  679.465792][ T6472] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13893'.
[  679.468746][ T6472] netlink: 80 bytes leftover after parsing attributes in process `syz.0.13893'.
[  679.473215][ T6472] netlink: 'syz.0.13893': attribute type 1 has an invalid length.
[  679.475785][ T6472] netlink: 'syz.0.13893': attribute type 4 has an invalid length.
[  679.478322][ T6472] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.13893'.
[  679.488739][ T6472] netlink: 'syz.0.13893': attribute type 1 has an invalid length.
[  679.496426][ T6472] netlink: 'syz.0.13893': attribute type 4 has an invalid length.
[  679.501777][ T6472] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.13893'.
[  679.508852][ T6474] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13892'.
[  679.616227][ T6472] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13893'.
[  679.884998][ T6487] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13894'.
[  679.910869][ T6495] team_slave_1: Caught tx_queue_len zero misconfig
[  679.943747][ T6495] netlink: 104 bytes leftover after parsing attributes in process `syz.1.13897'.
[  680.369087][ T6513] bond21 (unregistering): Released all slaves
[  680.629120][ T6534] dvmrp6: left allmulticast mode
[  680.856917][ T6542] syzkaller0: entered promiscuous mode
[  680.858896][ T6542] syzkaller0: entered allmulticast mode
[  684.375366][ T6572] netlink: 'syz.2.13920': attribute type 1 has an invalid length.
[  684.529059][ T6582] veth1_to_hsr: Caught tx_queue_len zero misconfig
[  684.756232][ T6590] netlink: 'syz.1.13928': attribute type 16 has an invalid length.
[  684.763597][ T6590] netlink: 'syz.1.13928': attribute type 17 has an invalid length.
[  684.820601][ T6590] 8021q: adding VLAN 0 to HW filter on device bond0
[  684.831337][ T6590] 8021q: adding VLAN 0 to HW filter on device v
[  684.842908][ T6590] wireguard: wg0: Could not create IPv4 socket
[  684.846827][ T6590] A link change request failed with some changes committed already. Interface wg0 may have been left with an inconsistent configuration, please check.
[  684.862793][  T798] lo speed is unknown, defaulting to 1000
[  684.864958][T31446] ip6_vti0 speed is unknown, defaulting to 1000
[  684.867184][T31446] syz2: Port: 1 Link ACTIVE
[  684.871357][  T798] sqz0: Port: 1 Link ACTIVE
[  684.874782][  T798] ip6_vti0 speed is unknown, defaulting to 1000
[  684.879140][  T798] lo speed is unknown, defaulting to 1000
[  684.902814][  T798] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  684.968562][ T6608] __nla_validate_parse: 3 callbacks suppressed
[  684.968666][ T6608] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.13932'.
[  685.051607][ T6610] syzkaller0: entered promiscuous mode
[  685.054044][ T6610] syzkaller0: entered allmulticast mode
[  685.064105][ T6610] netlink: 24 bytes leftover after parsing attributes in process `syz.0.13933'.
[  685.067682][ T6610] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13933'.
[  685.285914][  T798] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  685.327202][ T6626] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.13940'.
[  685.372161][ T7995] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  685.669408][ T6654] openvswitch: netlink: IPv4 tun info is not correct
[  685.797463][ T6659] netlink: 12 bytes leftover after parsing attributes in process `syz.1.13951'.
[  685.800556][ T6659] nbd: couldn't find a device at index 0
[  685.818818][ T6659] SET target dimension over the limit!
[  685.954500][ T6666] netlink: 9 bytes leftover after parsing attributes in process `syz.0.13953'.
[  686.187667][ T6669] infiniband syz1: set down
[  686.189892][ T6669] infiniband syz1: added veth1_to_bond
[  686.213314][ T6669] smbdirect: ib_dev[syz1]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000
[  686.219449][ T6669] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32
[  686.227756][ T6669] smbdirect: ib_dev[syz1]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005
[  686.256520][ T6669] RDS/IB: syz1: added
[  686.260306][ T6669] smc: adding ib device syz1 with port count 1
[  686.265066][ T6669] smc:    ib device syz1 port 1 has no pnetid
[  686.340098][ T6691] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13960'.
[  686.445568][ T7995] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  686.452621][ T7995] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  686.470920][ T6696] netlink: 12 bytes leftover after parsing attributes in process `syz.0.13961'.
[  686.478882][ T6696] netem: incorrect ge model size
[  686.507801][ T6696] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13961'.
[  686.579938][ T6701] netlink: 28 bytes leftover after parsing attributes in process `syz.0.13962'.
[  686.843056][ T6708] lo speed is unknown, defaulting to 1000
[  687.042313][ T4339] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  687.070702][ T6708] ip6_vti0 speed is unknown, defaulting to 1000
[  687.078733][ T6720] netlink: 'syz.2.13968': attribute type 1 has an invalid length.
[  687.284751][ T6729] netlink: 'syz.2.13970': attribute type 1 has an invalid length.
[  687.330031][ T6729] bond22: (slave vxcan1): The slave device specified does not support setting the MAC address
[  687.334548][ T6729] bond22: (slave vxcan1): Error -95 calling set_mac_address
[  687.396812][ T6731] bond22: (slave bridge16): Enslaving as an active interface with a down link
[  687.412975][ T6729] 8021q: adding VLAN 0 to HW filter on device bond22
[  687.760583][ T6746] lo speed is unknown, defaulting to 1000
[  687.973068][ T6759] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  687.979800][ T6759] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  688.036465][ T6764] tipc: Resetting bearer <eth:xfrm0>
[  688.063128][ T4339] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  688.186361][ T6768] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  688.193702][ T6768] mac80211_hwsim hwsim2 syzkaller0: entered promiscuous mode
[  688.197334][ T6768] mac80211_hwsim hwsim2 syzkaller0: entered allmulticast mode
[  688.217182][ T6768] tipc: Resetting bearer <eth:syzkaller0>
[  688.330076][ T6770] vcan0: tx drop: invalid da for name 0xfffffffffffffffd
[  688.477128][ T6746] ip6_vti0 speed is unknown, defaulting to 1000
[  688.919172][ T6789] nbd: must specify at least one socket
[  688.934375][ T4339] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  689.001102][ T6794] wireguard: wg0: Could not create IPv4 socket
[  689.003595][ T6794] A link change request failed with some changes committed already. Interface wg0 may have been left with an inconsistent configuration, please check.
[  689.023272][ T4339] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  689.065340][ T6798] openvswitch: netlink: Actions may not be safe on all matching packets
[  689.174926][ T4339] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  689.198860][ T6804] bond27: option fail_over_mac: invalid value (127)
[  689.211444][ T6804] bond27 (unregistering): Released all slaves
[  689.427629][ T6814] netlink: 'syz.1.13997': attribute type 12 has an invalid length.
[  690.065065][ T6862] __nla_validate_parse: 8 callbacks suppressed
[  690.065085][ T6862] netlink: 36 bytes leftover after parsing attributes in process `syz.0.14015'.
[  690.074884][ T6862] netlink: 'syz.0.14015': attribute type 10 has an invalid length.
[  690.098252][ T6864] netlink: 12 bytes leftover after parsing attributes in process `syz.2.14016'.
[  690.160270][ T6866] netlink: 'syz.1.14017': attribute type 10 has an invalid length.
[  690.176511][ T6866] tap0: tun_chr_ioctl cmd 1074025673
[  690.186675][ T6867] tap0: tun_chr_ioctl cmd 1074025677
[  690.192492][ T6867] tap0: linktype set to 773
[  690.201475][ T6868] tap0: tun_chr_ioctl cmd 1074025677
[  690.207079][ T6868] tap0: linktype set to 773
[  690.242780][ T6870] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[  690.251258][ T6870] nbd: couldn't find a device at index 0
[  690.260695][ T6870] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  690.288520][ T6874] netlink: 12 bytes leftover after parsing attributes in process `syz.2.14020'.
[  690.292756][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  690.307575][ T6874] netlink: 20 bytes leftover after parsing attributes in process `syz.2.14020'.
[  690.498351][ T6894] netlink: 20 bytes leftover after parsing attributes in process `syz.1.14024'.
[  690.503034][ T6888] batadv_slave_0: Caught tx_queue_len zero misconfig
[  690.633943][ T6899] block nbd1: not configured, cannot reconfigure
[  690.640286][ T6899] netlink: 36 bytes leftover after parsing attributes in process `syz.1.14025'.
[  690.847205][ T6905] netlink: 28 bytes leftover after parsing attributes in process `syz.0.14028'.
[  690.993812][ T6911] netlink: 'syz.0.14031': attribute type 8 has an invalid length.
[  691.128108][ T6915] netlink: 8 bytes leftover after parsing attributes in process `syz.0.14032'.
[  691.229952][ T6915] tipc: Resetting bearer <eth:team0>
[  691.474809][ T6915] veth29: left promiscuous mode
[  691.476416][ T6915] veth29: left allmulticast mode
[  691.486185][ T6915] veth33: left allmulticast mode
[  691.493044][   T13] netdevsim netdevsim0 eth0: unset [1, 1] type 2 family 0 port 6081 - 0
[  691.503505][   T13] netdevsim netdevsim0 eth1: unset [1, 1] type 2 family 0 port 6081 - 0
[  691.507698][   T13] netdevsim netdevsim0 eth2: unset [1, 1] type 2 family 0 port 6081 - 0
[  691.515708][   T13] netdevsim netdevsim0 eth3: unset [1, 1] type 2 family 0 port 6081 - 0
[  691.546333][ T6924] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14034'.
[  691.555978][ T6928] netlink: 4 bytes leftover after parsing attributes in process `syz.1.14035'.
[  691.742122][ T6959] netlink: 'syz.0.14044': attribute type 8 has an invalid length.
[  691.779479][ T6950] bond27: option fail_over_mac: invalid value (127)
[  691.790213][ T6950] bond27 (unregistering): Released all slaves
[  696.437314][ T6960] syzkaller0: entered promiscuous mode
[  696.440955][ T6960] syzkaller0: entered allmulticast mode
[  696.580979][ T6993] bridge0: port 3(vlan1) entered disabled state
[  696.583774][ T6993] bridge0: port 2(bridge_slave_1) entered disabled state
[  696.772946][ T6993] batman_adv: 60X: Interface deactivated: batadv_slave_0
[  696.796691][ T6993] batman_adv: 60X: Interface deactivated: batadv_slave_1
[  696.809674][ T6993] tipc: Resetting bearer <eth:xfrm0>
[  696.830680][ T6998] tipc: Failed to remove unknown binding: 66,0,0/4278201412:3270152809/3270152811
[  696.836285][ T6998] tipc: Failed to remove unknown binding: 66,0,0/4278201412:3270152809/3270152810
[  696.898964][ T6998] tipc: Failed to remove unknown binding: 66,0,0/4278201412:3270152809/3270152811
[  696.909420][ T6998] tipc: Failed to remove unknown binding: 66,0,0/4278201412:3270152809/3270152810
[  697.279024][ T6993] bond18: left promiscuous mode
[  697.286097][ T6993] veth31: left promiscuous mode
[  697.306809][ T6993] gretap6: left allmulticast mode
[  697.311453][ T6993] bond20: left promiscuous mode
[  697.354226][ T6993] veth33: left promiscuous mode
[  697.408889][ T6993] mac80211_hwsim hwsim2 syzkaller0: left promiscuous mode
[  697.414865][ T6993] mac80211_hwsim hwsim2 syzkaller0: left allmulticast mode
[  697.469998][ T7000] __nla_validate_parse: 2 callbacks suppressed
[  697.470076][ T7000] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14053'.
[  697.475128][ T7000] netlink: 12 bytes leftover after parsing attributes in process `syz.2.14053'.
[  697.554375][T10617] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  697.559366][T10617] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  697.569649][ T7000] geneve11: entered promiscuous mode
[  697.576947][ T7000] geneve11: entered allmulticast mode
[  697.582922][T10617] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  697.586654][T10617] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  697.590529][T10617] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  697.594367][T10617] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  697.597692][T10617] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  697.625630][ T7005] netlink: 4 bytes leftover after parsing attributes in process `syz.1.14055'.
[  697.631459][ T7005] netlink: 'syz.1.14055': attribute type 1 has an invalid length.
[  697.716613][ T7009] netlink: 'syz.2.14056': attribute type 12 has an invalid length.
[  697.752831][ T7014] netlink: 830 bytes leftover after parsing attributes in process `syz.0.14058'.
[  697.771325][ T7009] netlink: 4 bytes leftover after parsing attributes in process `syz.2.14056'.
[  697.798298][ T7022] netlink: 'syz.0.14060': attribute type 1 has an invalid length.
[  697.801736][ T7022] netlink: 96 bytes leftover after parsing attributes in process `syz.0.14060'.
[  697.810423][ T7022] netlink: 658 bytes leftover after parsing attributes in process `syz.0.14060'.
[  697.823250][ T7022] netlink: 1 bytes leftover after parsing attributes in process `syz.0.14060'.
[  697.837770][ T7022] netlink: 'syz.0.14060': attribute type 1 has an invalid length.
[  697.850030][ T7025] netlink: 72 bytes leftover after parsing attributes in process `syz.2.14061'.
[  697.882201][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  697.899470][ T7035] netlink: 44 bytes leftover after parsing attributes in process `syz.0.14060'.
[  698.075970][ T7044] netlink: 'syz.0.14066': attribute type 4 has an invalid length.
[  698.448401][ T7078] xt_l2tp: invalid flags combination: 8
[  698.814465][ T7105] vlan5: entered promiscuous mode
[  698.816564][ T7105] bridge0: entered promiscuous mode
[  698.992286][ T7122] netlink: 'syz.0.14089': attribute type 2 has an invalid length.
[  698.995702][ T7122] netlink: 'syz.0.14089': attribute type 2 has an invalid length.
[  699.020103][ T7117] netlink: 'syz.2.14091': attribute type 4 has an invalid length.
[  699.048089][ T7117] netlink: 'syz.2.14091': attribute type 4 has an invalid length.
[  699.067001][ T7117] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6
[  699.194483][ T7134] netlink: 'syz.2.14094': attribute type 6 has an invalid length.
[  699.539920][ T7150] netem: change failed
[  699.763841][ T7164] bond27: option min_links: invalid value (18446744073709551612)
[  699.766742][ T7164] bond27: option min_links: allowed values 0 - 2147483647
[  699.770832][ T7164] bond27 (unregistering): Released all slaves
[  700.128942][ T7169] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  700.309740][ T7177] bond0: Device is already in use.
[  701.200543][ T7250] openvswitch: netlink: Actions may not be safe on all matching packets
[  701.345166][ T7260] netlink: 'syz.0.14129': attribute type 11 has an invalid length.
[  702.067828][ T7297] bond24: entered promiscuous mode
[  702.070055][ T7297] bond24: entered allmulticast mode
[  702.073839][ T7297] 8021q: adding VLAN 0 to HW filter on device bond24
[  702.162187][ T7303] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  702.728950][ T7313] sch_tbf: burst 1023 is lower than device lo mtu (11337746) !
[  703.158527][ T7317] ip6tnl0: entered promiscuous mode
[  703.160724][ T7317] __nla_validate_parse: 27 callbacks suppressed
[  703.160734][ T7317] netlink: 8 bytes leftover after parsing attributes in process `syz.0.14149'.
[  703.171309][ T7324] netlink: 4 bytes leftover after parsing attributes in process `syz.1.14151'.
[  703.194249][ T7317] netlink: 12 bytes leftover after parsing attributes in process `syz.0.14149'.
[  703.197865][ T7317] netlink: 12 bytes leftover after parsing attributes in process `syz.0.14149'.
[  703.201584][ T7317] netlink: 58 bytes leftover after parsing attributes in process `syz.0.14149'.
[  703.207815][ T7317] netlink: 36 bytes leftover after parsing attributes in process `syz.0.14149'.
[  703.386287][ T7336] syzkaller0: entered promiscuous mode
[  703.392225][ T7336] syzkaller0: entered allmulticast mode
[  703.619584][ T7343] validate_nla: 8 callbacks suppressed
[  703.619602][ T7343] netlink: 'syz.1.14157': attribute type 62 has an invalid length.
[  703.649423][ T7348] netlink: 14 bytes leftover after parsing attributes in process `syz.0.14158'.
[  703.674868][ T7351] netlink: 24 bytes leftover after parsing attributes in process `syz.2.14159'.
[  703.704466][ T7351] netlink: 'syz.2.14159': attribute type 8 has an invalid length.
[  703.707586][ T7351] netlink: 'syz.2.14159': attribute type 4 has an invalid length.
[  703.907864][ T7373] hsr0: entered promiscuous mode
[  703.915246][ T7373] netlink: 52 bytes leftover after parsing attributes in process `syz.1.14165'.
[  703.918430][ T7373] hsr_slave_0: left promiscuous mode
[  703.920925][ T7373] hsr_slave_1: left promiscuous mode
[  703.926277][ T7373] hsr0 (unregistering): left promiscuous mode
[  703.942900][ T7376] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14166'.
[  703.952190][ T7369] "syz.0.14164" (7369) uses obsolete ecb(arc4) skcipher
[  703.952805][ T7376] gtp4: entered promiscuous mode
[  703.957388][ T7376] gtp4: entered allmulticast mode
[  704.186979][ T7381] veth38: entered allmulticast mode
[  704.328852][ T7390] netlink: 'syz.1.14172': attribute type 21 has an invalid length.
[  704.331969][ T7390] netlink: 'syz.1.14172': attribute type 4 has an invalid length.
[  704.335383][ T7390] netlink: 'syz.1.14172': attribute type 5 has an invalid length.
[  704.339292][ T7385] netlink: 'syz.0.14170': attribute type 2 has an invalid length.
[  704.374912][ T7388] netlink: 'syz.2.14171': attribute type 1 has an invalid length.
[  704.411684][ T7394] netlink: 'syz.1.14174': attribute type 6 has an invalid length.
[  704.416752][ T7394] netlink: 'syz.1.14174': attribute type 23 has an invalid length.
[  704.421507][ T7394] IPv6: NLM_F_CREATE should be specified when creating new route
[  704.636134][ T7417] sctp: [Deprecated]: syz.1.14181 (pid 7417) Use of int in maxseg socket option.
[  704.636134][ T7417] Use struct sctp_assoc_value instead
[  704.773358][   T33] audit: type=1800 audit(1778896980.185:20): pid=7430 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.14185" name="memory.events" dev="tmpfs" ino=23469 res=0 errno=0
[  705.010366][ T7446] lo speed is unknown, defaulting to 1000
[  705.059357][ T7447] Cannot find del_set index 14804 as target
[  705.106451][ T7446] ip6_vti0 speed is unknown, defaulting to 1000
[  707.065209][ T7587] geneve11: left promiscuous mode
[  707.067079][ T7587] geneve11: left allmulticast mode
[  707.070384][ T7587] bond24: left promiscuous mode
[  707.072226][ T7587] bond24: left allmulticast mode
[  707.075654][ T7587] gtp4: left promiscuous mode
[  707.077200][ T7587] gtp4: left allmulticast mode
[  707.083549][ T7996] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  707.087711][ T7996] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  707.106661][ T7996] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  707.111631][ T7996] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  707.373754][ T6948] lo speed is unknown, defaulting to 1000
[  707.377225][ T6948] sqz0: Port: 1 Link DOWN
[  707.379224][ T4341] ip6_vti0 speed is unknown, defaulting to 1000
[  707.381497][ T7996] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  707.383050][ T4341] syz2: Port: 1 Link DOWN
[  707.385621][ T7996] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  707.398189][ T7996] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  707.410967][ T6948] ip6_vti0 speed is unknown, defaulting to 1000
[  707.413549][ T4341] lo speed is unknown, defaulting to 1000
[  707.540209][ T7614] tipc: Resetting bearer <eth:team0>
[  707.549693][ T7614] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  707.551205][ T7610] IPVS: Scheduler module ip_vs_sip not found
[  707.674834][ T7625] sctp: [Deprecated]: syz.1.14237 (pid 7625) Use of struct sctp_assoc_value in delayed_ack socket option.
[  707.674834][ T7625] Use struct sctp_sack_info instead
[  707.681817][ T7626] sctp: [Deprecated]: syz.1.14237 (pid 7626) Use of struct sctp_assoc_value in delayed_ack socket option.
[  707.681817][ T7626] Use struct sctp_sack_info instead
[  707.821181][ T7637] macsec0: entered promiscuous mode
[  707.831370][ T7637] macsec0 (unregistering): left promiscuous mode
[  707.894846][ T7643] rdma_op ffff8881190191f0 conn xmit_rdma 0000000000000000
[  708.016543][ T7650] 8021q: VLANs not supported on ip6_vti0
[  708.143562][ T7660] bond0: entered allmulticast mode
[  708.230919][ T7665] __nla_validate_parse: 29 callbacks suppressed
[  708.230933][ T7665] netlink: 4 bytes leftover after parsing attributes in process `syz.0.14250'.
[  708.406974][ T7668] netlink: 40 bytes leftover after parsing attributes in process `syz.2.14251'.
[  708.410641][ T7669] netlink: 40 bytes leftover after parsing attributes in process `syz.2.14251'.
[  708.414725][ T7668] netlink: 40 bytes leftover after parsing attributes in process `syz.2.14251'.
[  708.425604][ T7669] dvmrp6: entered allmulticast mode
[  708.444209][ T7669] 8021q: adding VLAN 0 to HW filter on device 60X
[  708.457684][ T7669] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check.
[  708.472314][ T7668] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check.
[  708.482962][ T1115] bridge0: port 2(bridge_slave_1) entered blocking state
[  708.485413][ T1115] bridge0: port 2(bridge_slave_1) entered listening state
[  708.977362][ T7678] validate_nla: 8 callbacks suppressed
[  708.977373][ T7678] netlink: 'syz.1.14254': attribute type 1 has an invalid length.
[  709.657247][ T7737] netlink: 4 bytes leftover after parsing attributes in process `syz.2.14268'.
[  709.670727][ T7737] netlink: 12 bytes leftover after parsing attributes in process `syz.2.14268'.
[  709.687299][ T7737] netlink: 36 bytes leftover after parsing attributes in process `syz.2.14268'.
[  709.829704][ T7753] netlink: 'syz.2.14274': attribute type 1 has an invalid length.
[  709.865452][ T7753] 8021q: adding VLAN 0 to HW filter on device bond26
[  709.957367][ T7751] netlink: 52 bytes leftover after parsing attributes in process `syz.0.14270'.
[  709.975156][ T7763] netlink: 20 bytes leftover after parsing attributes in process `syz.2.14277'.
[  710.028473][ T7772] netlink: 'syz.2.14279': attribute type 1 has an invalid length.
[  710.049384][ T7772] bond27: entered promiscuous mode
[  710.051647][ T7772] 8021q: adding VLAN 0 to HW filter on device bond27
[  710.073907][ T7772] 8021q: adding VLAN 0 to HW filter on device bond27
[  710.076958][ T7772] bond27: (slave ip6gre4): The slave device specified does not support setting the MAC address
[  710.081435][ T7772] bond27: (slave ip6gre4): Setting fail_over_mac to active for active-backup mode
[  710.088741][ T7772] bond27: (slave ip6gre4): making interface the new active one
[  710.091234][ T7772] ip6gre4: entered promiscuous mode
[  710.094736][ T7772] bond27: (slave ip6gre4): Enslaving as an active interface with an up link
[  710.098772][ T7775] bond24: (slave vcan0): Releasing backup interface
[  710.107390][ T7775] bond24: Destroying bond
[  710.115655][ T7775] bond24 (unregistering): Released all slaves
[  710.194672][ T7779] veth0_to_hsr: Caught tx_queue_len zero misconfig
[  710.210557][ T7779] netlink: 16 bytes leftover after parsing attributes in process `syz.1.14281'.
[  710.288685][ T7781] netlink: 'syz.1.14282': attribute type 1 has an invalid length.
[  710.305983][ T7781] bond24: entered promiscuous mode
[  710.308066][ T7781] 8021q: adding VLAN 0 to HW filter on device bond24
[  710.321996][ T7781] 8021q: adding VLAN 0 to HW filter on device bond24
[  710.325318][ T7781] bond24: (slave ip6gre5): The slave device specified does not support setting the MAC address
[  710.329701][ T7781] bond24: (slave ip6gre5): Setting fail_over_mac to active for active-backup mode
[  710.337752][ T7781] bond24: (slave ip6gre5): making interface the new active one
[  710.340580][ T7781] ip6gre5: entered promiscuous mode
[  710.343824][ T7781] bond24: (slave ip6gre5): Enslaving as an active interface with an up link
[  710.578150][ T7804] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  711.017598][ T7817] 8021q: adding VLAN 0 to HW filter on device ipvlan0
[  711.397774][ T7831] bond27: entered allmulticast mode
[  711.433199][ T7834] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check.
[  711.529824][   T55] block nbd1: Receive control failed (result -32)
[  711.600453][ T7843] netlink: 'syz.0.14300': attribute type 1 has an invalid length.
[  711.605368][ T7843] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  711.671735][ T7849] netlink: 'syz.0.14302': attribute type 1 has an invalid length.
[  711.903252][ T7874] netlink: 'syz.0.14310': attribute type 5 has an invalid length.
[  711.960747][ T7874] tipc: Resetting bearer <eth:team0>
[  711.964102][ T7874] 8021q: adding VLAN 0 to HW filter on device team0
[  711.967756][ T7874] tipc: Resetting bearer <eth:team0>
[  711.974917][ T7874] 8021q: adding VLAN 0 to HW filter on device batadv0
[  711.995995][ T7874] veth1_vlan: left promiscuous mode
[  711.998312][ T7874] veth0_vlan: left promiscuous mode
[  712.000587][ T7874] veth0_vlan: entered promiscuous mode
[  712.005298][ T7874] veth1_vlan: entered promiscuous mode
[  712.011029][ T7874] veth1_macvtap: left promiscuous mode
[  712.015196][ T7874] veth0_macvtap: left promiscuous mode
[  712.018707][ T7874] veth0_macvtap: entered promiscuous mode
[  712.027752][ T7874] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check.
[  712.065522][ T7993] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  712.069102][ T7993] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  712.077311][ T7879] tipc: Resetting bearer <eth:team0>
[  712.092878][ T7879] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check.
[  712.099167][ T7993] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  712.105771][ T7993] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  712.264862][ T7886] syzkaller0: entered promiscuous mode
[  712.266878][ T7886] syzkaller0: entered allmulticast mode
[  714.829469][ T7907] netlink: 'syz.1.14320': attribute type 1 has an invalid length.
[  714.835509][ T7907] netlink: 'syz.1.14320': attribute type 2 has an invalid length.
[  714.901817][ T7916] sctp: [Deprecated]: syz.2.14324 (pid 7916) Use of struct sctp_assoc_value in delayed_ack socket option.
[  714.901817][ T7916] Use struct sctp_sack_info instead
[  714.932393][ T7916] netlink: 'syz.2.14324': attribute type 2 has an invalid length.
[  714.937489][ T7916] __nla_validate_parse: 18 callbacks suppressed
[  714.937508][ T7916] netlink: 16126 bytes leftover after parsing attributes in process `syz.2.14324'.
[  714.946285][ T7916] netlink: 24 bytes leftover after parsing attributes in process `syz.2.14324'.
[  714.973594][ T7919] netlink: 68 bytes leftover after parsing attributes in process `syz.0.14326'.
[  715.015058][ T7923] netlink: 8 bytes leftover after parsing attributes in process `syz.0.14328'.
[  715.029944][ T7925] netlink: 76 bytes leftover after parsing attributes in process `syz.2.14329'.
[  715.036578][ T7925] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14329'.
[  715.098067][ T7929] netlink: 36 bytes leftover after parsing attributes in process `syz.2.14331'.
[  715.176253][ T7933] netlink: 28 bytes leftover after parsing attributes in process `syz.0.14333'.
[  715.231527][ T7933] netlink: 20 bytes leftover after parsing attributes in process `syz.0.14333'.
[  715.279419][ T7941] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14336'.
[  715.639570][ T7969] netlink: zone id is out of range
[  715.642665][ T7969] netlink: zone id is out of range
[  715.644944][ T7969] netlink: zone id is out of range
[  715.647449][ T7969] netlink: zone id is out of range
[  715.649818][ T7969] netlink: zone id is out of range
[  715.652942][ T7969] netlink: zone id is out of range
[  715.655937][ T7969] netlink: zone id is out of range
[  715.658476][ T7969] netlink: zone id is out of range
[  715.664594][ T7969] netlink: zone id is out of range
[  715.667653][ T7969] netlink: zone id is out of range
[  716.310850][ T8018] netlink: 'syz.1.14359': attribute type 83 has an invalid length.
[  716.629677][ T8052] IPv6: Can't replace route, no match found
[  716.631922][ T8052] IPv6: Can't replace route, no match found
[  716.674519][ T8058] batadv_slave_0: entered allmulticast mode
[  716.720488][ T8063] smc: net device wlan0 applied user defined pnetid SYZ0
[  716.725720][ T8063] smc: ib device syz1 ibport 1 applied user defined pnetid SYZ0
[  716.779650][ T8072] mac80211_hwsim hwsim37 wlan0: entered promiscuous mode
[  717.031691][ T8107] netlink: 'syz.0.14386': attribute type 1 has an invalid length.
[  717.117195][ T8112] team_slave_0: Caught tx_queue_len zero misconfig
[  717.120017][ T8112] netem: incorrect ge model size
[  717.128389][ T8112] netem: change failed
[  717.328897][ T8119] tipc: Resetting bearer <eth:team0>
[  717.647785][T10617] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  717.652222][T10617] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  717.658483][T10617] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  717.663473][T10617] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  718.130525][ T8182] tunl0: Caught tx_queue_len zero misconfig
[  718.912366][ T8212] block nbd2: server does not support multiple connections per device.
[  718.920099][ T8212] block nbd2: shutting down sockets
[  718.961296][ T8215] netlink: 'syz.1.14418': attribute type 9 has an invalid length.
[  719.130569][ T8226] xt_CT: You must specify a L4 protocol and not use inversions on it
[  719.132698][ T8227] x_tables: ip6_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING
[  719.176925][ T8227] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  719.224456][ T8235] mac80211_hwsim hwsim2 syzkaller0: entered promiscuous mode
[  719.227982][ T8235] mac80211_hwsim hwsim2 syzkaller0: entered allmulticast mode
[  719.330596][ T8245] 8021q: adding VLAN 0 to HW filter on device bond28
[  719.410219][ T7996] tipc: Subscription rejected, illegal request
[  719.435047][ T8256] syzkaller0: entered promiscuous mode
[  719.437006][ T8256] syzkaller0: entered allmulticast mode
[  722.638820][ T8269] netlink: 'syz.2.14435': attribute type 29 has an invalid length.
[  722.642898][ T8269] __nla_validate_parse: 36 callbacks suppressed
[  722.642916][ T8269] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14435'.
[  722.956414][ T8309] netlink: 16 bytes leftover after parsing attributes in process `syz.2.14444'.
[  722.965762][ T8309] veth1_to_team: entered promiscuous mode
[  722.971157][ T8309] veth1_to_team: left promiscuous mode
[  723.340118][ T8328] netlink: 'syz.2.14448': attribute type 11 has an invalid length.
[  723.343580][ T8328] netlink: 199828 bytes leftover after parsing attributes in process `syz.2.14448'.
[  723.375586][ T8330] x_tables: ip6_tables: eui64 match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT/FORWARD
[  723.380716][ T8330] netlink: 56 bytes leftover after parsing attributes in process `syz.2.14449'.
[  723.383900][ T8330] ip6tnl0: Caught tx_queue_len zero misconfig
[  723.618151][ T8348] netlink: 8 bytes leftover after parsing attributes in process `syz.0.14456'.
[  723.834783][ T8357] netlink: 132 bytes leftover after parsing attributes in process `syz.1.14459'.
[  723.971750][ T8368] syzkaller0: entered promiscuous mode
[  723.976721][ T8368] syzkaller0: entered allmulticast mode
[  724.058087][ T8377] netlink: 'syz.2.14466': attribute type 30 has an invalid length.
[  724.170086][ T8386] net_ratelimit: 46 callbacks suppressed
[  724.170105][ T8386] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  724.230073][   T33] audit: type=1804 audit(1778896999.635:21): pid=8393 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.14470" name="/newroot/4785/memory.events" dev="tmpfs" ino=24160 res=1 errno=0
[  724.233005][ T8393] netlink: 32 bytes leftover after parsing attributes in process `syz.1.14470'.
[  724.241597][   T33] audit: type=1800 audit(1778896999.635:22): pid=8393 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.14470" name="memory.events" dev="tmpfs" ino=24160 res=0 errno=0
[  724.331474][ T8404] netlink: 'syz.2.14473': attribute type 1 has an invalid length.
[  724.360189][ T8404] netlink: 28 bytes leftover after parsing attributes in process `syz.2.14473'.
[  724.453792][ T8413] netlink: 16 bytes leftover after parsing attributes in process `syz.2.14476'.
[  724.506150][ T8408] netlink: 28 bytes leftover after parsing attributes in process `syz.1.14474'.
[  724.509595][ T8408] netem: change failed
[  724.517438][ T8414] netem: change failed
[  724.535956][ T8408] openvswitch: netlink: Flow actions attr not present in new flow.
[  724.683900][ T8423] netlink: 'syz.2.14478': attribute type 9 has an invalid length.
[  725.079025][ T8446] netlink: 'syz.0.14484': attribute type 1 has an invalid length.
[  725.104796][ T8446] bond27: entered promiscuous mode
[  725.109351][ T8446] 8021q: adding VLAN 0 to HW filter on device bond27
[  725.133105][ T8446] 8021q: adding VLAN 0 to HW filter on device bond27
[  725.142614][ T8446] bond27: (slave ip6gre6): The slave device specified does not support setting the MAC address
[  725.154358][ T8446] bond27: (slave ip6gre6): Setting fail_over_mac to active for active-backup mode
[  725.191652][ T8446] bond27: (slave ip6gre6): making interface the new active one
[  725.197815][ T8446] ip6gre6: entered promiscuous mode
[  725.208288][ T8446] bond27: (slave ip6gre6): Enslaving as an active interface with an up link
[  725.397506][ T8463] veth39: entered promiscuous mode
[  725.408814][ T8464] veth41: entered promiscuous mode
[  725.445089][ T8469] SET target dimension over the limit!
[  725.616827][ T8482] netlink: 'syz.2.14496': attribute type 1 has an invalid length.
[  725.651561][ T8482] 8021q: adding VLAN 0 to HW filter on device bond30
[  725.707642][ T8491] syzkaller0: entered promiscuous mode
[  725.710370][ T8491] syzkaller0: entered allmulticast mode
[  726.015975][ T8523] syzkaller1: entered promiscuous mode
[  726.018465][ T8523] syzkaller1: entered allmulticast mode
[  726.076333][ T8529] netlink: 'syz.2.14509': attribute type 1 has an invalid length.
[  726.257117][ T8544] netlink: 'syz.0.14515': attribute type 3 has an invalid length.
[  726.568918][ T8567] bridge18: entered promiscuous mode
[  726.668990][ T8577] syzkaller0: entered promiscuous mode
[  726.671340][ T8577] syzkaller0: entered allmulticast mode
[  726.675544][ T8581] netlink: 'syz.1.14529': attribute type 1 has an invalid length.
[  726.702283][ T8581] bond30: entered promiscuous mode
[  726.704917][ T8581] 8021q: adding VLAN 0 to HW filter on device bond30
[  727.231525][ T8618] netlink: 'syz.0.14541': attribute type 4 has an invalid length.
[  727.344776][ T8620] 8021q: adding VLAN 0 to HW filter on device v
[  727.363525][ T8620] wireguard: wg0: Could not create IPv4 socket
[  727.374888][ T8620] A link change request failed with some changes committed already. Interface wg0 may have been left with an inconsistent configuration, please check.
[  727.384534][ T4341] lo speed is unknown, defaulting to 1000
[  727.388782][ T6948] ip6_vti0 speed is unknown, defaulting to 1000
[  727.391429][ T4341] sqz0: Port: 1 Link ACTIVE
[  727.398438][ T6948] syz2: Port: 1 Link ACTIVE
[  727.407748][ T6948] lo speed is unknown, defaulting to 1000
[  727.413115][ T6948] ip6_vti0 speed is unknown, defaulting to 1000
[  727.419245][ T4339] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  727.552377][ T4339] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  727.722924][ T8643] __nla_validate_parse: 25 callbacks suppressed
[  727.722941][ T8643] netlink: 16 bytes leftover after parsing attributes in process `syz.2.14550'.
[  727.908121][ T8655] netlink: 44 bytes leftover after parsing attributes in process `syz.2.14554'.
[  727.935283][ T8664] netlink: 4 bytes leftover after parsing attributes in process `syz.0.14556'.
[  727.939738][ T8664] openvswitch: netlink: Message has 2 unknown bytes.
[  728.003189][ T8670] netlink: 25 bytes leftover after parsing attributes in process `syz.2.14558'.
[  728.012345][ T8670] validate_nla: 2 callbacks suppressed
[  728.012357][ T8670] netlink: 'syz.2.14558': attribute type 13 has an invalid length.
[  728.022652][ T8670] netlink: 'syz.2.14558': attribute type 17 has an invalid length.
[  728.027171][ T8673] netlink: 68 bytes leftover after parsing attributes in process `syz.1.14560'.
[  728.044605][ T8675] netlink: 72 bytes leftover after parsing attributes in process `syz.0.14561'.
[  728.048575][ T8670] erspan0: refused to change device tx_queue_len
[  728.050918][ T8670] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check.
[  728.145073][ T8687] netlink: 16 bytes leftover after parsing attributes in process `syz.0.14565'.
[  728.205436][ T8695] ip6t_srh: unknown srh invflags 4000
[  728.269080][ T8698] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14567'.
[  728.296180][ T7996] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  728.349663][ T8705] netlink: 'syz.0.14570': attribute type 1 has an invalid length.
[  728.380464][ T8708] netlink: 196 bytes leftover after parsing attributes in process `syz.2.14571'.
[  728.397615][ T8705] 8021q: adding VLAN 0 to HW filter on device bond28
[  728.403143][ T8710] netlink: 196 bytes leftover after parsing attributes in process `syz.2.14571'.
[  728.428596][ T8709] netlink: 'syz.0.14570': attribute type 1 has an invalid length.
[  728.585428][ T8719] netlink: 'syz.0.14574': attribute type 4 has an invalid length.
[  728.659487][ T8727] netlink: 'syz.2.14577': attribute type 9 has an invalid length.
[  728.726623][ T8729] bridge_slave_1: left allmulticast mode
[  728.729069][ T8729] bridge_slave_1: left promiscuous mode
[  728.731684][ T8729] bridge0: port 2(bridge_slave_1) entered disabled state
[  728.741109][ T8729] batman_adv: 60X: Removing interface: batadv_slave_0
[  728.750052][ T8729] batman_adv: 60X: Removing interface: batadv_slave_1
[  728.755460][ T8729] bond1: (slave ip6gretap1): Releasing active interface
[  728.760881][ T8729] bond0: (slave geneve4): Releasing active interface
[  728.776555][ T8729] gretap4: left allmulticast mode
[  728.781630][ T8729] gretap4: left promiscuous mode
[  728.786731][ T8729] bridge10: port 1(gretap4) entered disabled state
[  728.794160][ T8729] bond3: (slave bond4): Releasing backup interface
[  728.796931][ T8729] bond3: (slave bond4): the permanent HWaddr of slave - 5a:a2:56:3b:97:f9 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  728.802803][ T8729] bond3: (slave gretap5): making interface the new active one
[  728.807140][ T8729] bond3: (slave gretap5): Releasing backup interface
[  728.812632][ T8729] bond6: (slave ip6gretap0): Releasing active interface
[  728.816419][ T8729] batman_adv: 60X: Removing interface: macvlan0
[  728.820373][ T8729] bond10: (slave geneve8): Releasing active interface
[  728.826989][ T8729] vlan1: left allmulticast mode
[  728.829135][ T8729] geneve0: left allmulticast mode
[  728.830855][ T8729] vlan1: left promiscuous mode
[  728.832853][ T8729] geneve0: left promiscuous mode
[  728.834875][ T8729] bridge0: port 3(vlan1) entered disabled state
[  728.840488][ T8729] bond11: (slave geneve9): Releasing active interface
[  728.849713][ T8729] bond18: (slave veth31): Releasing backup interface
[  728.854725][ T8729] bond19: (slave gretap6): Releasing active interface
[  728.858840][ T8729] bond22: (slave bridge16): Releasing active interface
[  728.863982][ T8729] bond27: (slave ip6gre4): Releasing backup interface
[  728.866366][ T8729] ip6gre4: left promiscuous mode
[  729.046182][ T8734] netlink: 'syz.2.14580': attribute type 13 has an invalid length.
[  729.057959][ T8734] openvswitch: netlink: Message has 2 unknown bytes.
[  729.161617][ T8748] mac80211_hwsim hwsim2 syzkaller0: left promiscuous mode
[  729.169872][ T8748] mac80211_hwsim hwsim2 syzkaller0: left allmulticast mode
[  729.324695][ T7993] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  729.335599][ T7993] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  729.462697][ T8757] netlink: 'syz.1.14586': attribute type 13 has an invalid length.
[  729.477609][ T8757] netlink: 'syz.1.14586': attribute type 17 has an invalid length.
[  729.619992][ T5292] lo speed is unknown, defaulting to 1000
[  729.622771][ T6948] ip6_vti0 speed is unknown, defaulting to 1000
[  729.625617][ T6948] syz2: Port: 1 Link DOWN
[  729.670906][ T8757] 8021q: adding VLAN 0 to HW filter on device v
[  729.678870][ T8757] wireguard: wg0: Could not create IPv4 socket
[  729.681511][ T8757] A link change request failed with some changes committed already. Interface wg0 may have been left with an inconsistent configuration, please check.
[  729.745116][ T8763] netlink: 'syz.1.14588': attribute type 4 has an invalid length.
[  729.813602][ T4339] lo speed is unknown, defaulting to 1000
[  729.853662][ T5292] ip6_vti0 speed is unknown, defaulting to 1000
[  729.857080][ T7996] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  729.860709][ T6948] lo speed is unknown, defaulting to 1000
[  729.893008][    T9] ip6_vti0 speed is unknown, defaulting to 1000
[  729.899465][    T9] syz2: Port: 1 Link ACTIVE
[  730.774245][ T8803] tipc: Enabling of bearer <udp:s> rejected, already enabled
[  730.970553][ T8805] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  731.668110][ T8814] sch_tbf: burst 1023 is lower than device lo mtu (1294) !
[  731.716107][ T8815] sch_tbf: burst 1023 is lower than device lo mtu (1294) !
[  732.129966][ T8857] openvswitch: netlink: Key 6 has unexpected len 318 expected 2
[  732.395772][ T8872] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  732.457377][ T8871] tipc: Disabling bearer <eth:syzkaller0>
[  732.637515][ T8901] openvswitch: netlink: Missing key (keys=40, expected=200000)
[  732.796237][ T8910] __nla_validate_parse: 21 callbacks suppressed
[  732.796250][ T8910] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14631'.
[  732.822908][ T8911] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14631'.
[  732.831933][ T8910] netlink: 12 bytes leftover after parsing attributes in process `syz.1.14631'.
[  732.845908][ T8911] netlink: 12 bytes leftover after parsing attributes in process `syz.1.14631'.
[  732.880335][ T8917] team0: entered promiscuous mode
[  732.882489][ T8917] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  733.124952][ T8930] block nbd2: server does not support multiple connections per device.
[  733.129601][ T8930] block nbd2: shutting down sockets
[  733.138936][ T8936] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.14639'.
[  733.150086][ T8936] ksmbd: Unknown IPC event: 1, ignore.
[  733.156566][ T8936] netlink: 14 bytes leftover after parsing attributes in process `syz.2.14639'.
[  733.545008][ T8955] syzkaller1: entered promiscuous mode
[  733.547130][ T8955] syzkaller1: entered allmulticast mode
[  733.688119][ T8959] bridge0: port 1(vlan7) entered blocking state
[  733.690941][ T8959] bridge0: port 1(vlan7) entered disabled state
[  733.694517][ T8959] vlan7: entered allmulticast mode
[  733.697113][ T8959] bridge0: entered allmulticast mode
[  733.707888][ T8959] vlan7: left allmulticast mode
[  733.711448][ T8959] bridge0: left allmulticast mode
[  733.802371][    C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  733.859730][ T8969] netlink: 12 bytes leftover after parsing attributes in process `syz.2.14647'.
[  733.878799][ T8969] netem: incorrect ge model size
[  733.919226][ T8974] netlink: 8 bytes leftover after parsing attributes in process `syz.0.14649'.
[  733.929698][ T8974] netlink: 152 bytes leftover after parsing attributes in process `syz.0.14649'.
[  734.067524][ T8986] validate_nla: 6 callbacks suppressed
[  734.067536][ T8986] netlink: 'syz.0.14653': attribute type 1 has an invalid length.
[  734.121527][ T8986] bond29: (slave bridge19): making interface the new active one
[  734.125043][ T8986] bond29: (slave bridge19): Enslaving as an active interface with an up link
[  734.129656][ T8986] SET target dimension over the limit!
[  734.139854][ T8986] bond29: (slave vlan7): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  734.267815][ T8997] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14658'.
[  734.274443][ T8998] netlink: 'syz.1.14659': attribute type 8 has an invalid length.
[  734.414221][ T9011] bond32: entered promiscuous mode
[  734.422110][ T9011] 8021q: adding VLAN 0 to HW filter on device bond32
[  734.661413][ T9033] xt_bpf: check failed: parse error
[  734.661992][ T9034] xt_bpf: check failed: parse error
[  734.806635][ T9038] sch_tbf: burst 1023 is lower than device lo mtu (11337746) !
[  735.226882][ T9065] netem: incorrect ge model size
[  735.233286][ T9065] netem: change failed
[  735.718598][ T9089] netlink: 'syz.1.14683': attribute type 10 has an invalid length.
[  735.892987][ T9089] 
[  735.894218][ T9089] ======================================================
[  735.896972][ T9089] WARNING: possible circular locking dependency detected
[  735.899844][ T9089] syzkaller #0 Not tainted
[  735.901748][ T9089] ------------------------------------------------------
[  735.904642][ T9089] syz.1.14683/9089 is trying to acquire lock:
[  735.907051][ T9089] ffff888109d7aac8 (&q->elevator_lock){+.+.}-{4:4}, at: elevator_change+0x1b3/0x450
[  735.910753][ T9089] 
[  735.910753][ T9089] but task is already holding lock:
[  735.913751][ T9089] ffff888109d7a5a0 (&q->q_usage_counter(io)#70){++++}-{0:0}, at: elevator_change+0x198/0x450
[  735.917145][ T9089] 
[  735.917145][ T9089] which lock already depends on the new lock.
[  735.917145][ T9089] 
[  735.921247][ T9089] 
[  735.921247][ T9089] the existing dependency chain (in reverse order) is:
[  735.924812][ T9089] 
[  735.924812][ T9089] -> #6 (&q->q_usage_counter(io)#70){++++}-{0:0}:
[  735.928365][ T9089]        blk_alloc_queue+0x546/0x680
[  735.930528][ T9089]        __blk_mq_alloc_disk+0x197/0x390
[  735.932814][ T9089]        nbd_dev_add+0x499/0xb50
[  735.934845][ T9089]        nbd_genl_connect+0x962/0x1cf0
[  735.936958][ T9089]        genl_family_rcv_msg_doit+0x22a/0x330
[  735.939419][ T9089]        genl_rcv_msg+0x61c/0x7a0
[  735.941490][ T9089]        netlink_rcv_skb+0x232/0x4b0
[  735.943678][ T9089]        genl_rcv+0x28/0x40
[  735.945535][ T9089]        netlink_unicast+0x75c/0x8e0
[  735.947694][ T9089]        netlink_sendmsg+0x813/0xb40
[  735.949849][ T9089]        ____sys_sendmsg+0x972/0x9f0
[  735.951960][ T9089]        ___sys_sendmsg+0x2a5/0x360
[  735.954039][ T9089]        __x64_sys_sendmsg+0x1bd/0x2a0
[  735.956248][ T9089]        do_syscall_64+0x15f/0xf80
[  735.958339][ T9089]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  735.960825][ T9089] 
[  735.960825][ T9089] -> #5 (fs_reclaim){+.+.}-{0:0}:
[  735.963782][ T9089]        fs_reclaim_acquire+0x71/0x100
[  735.966012][ T9089]        kmem_cache_alloc_node_noprof+0x4a/0x690
[  735.968437][ T9089]        __alloc_skb+0x1d0/0x7d0
[  735.970489][ T9089]        __ip6_append_data+0x2d3c/0x3f60
[  735.972780][ T9089]        ip6_append_data+0x10f/0x280
[  735.974934][ T9089]        rawv6_sendmsg+0x12d3/0x18e0
[  735.977030][ T9089]        ____sys_sendmsg+0x80a/0x9f0
[  735.979245][ T9089]        ___sys_sendmsg+0x2a5/0x360
[  735.981329][ T9089]        __x64_sys_sendmsg+0x1bd/0x2a0
[  735.983296][ T9089]        do_syscall_64+0x15f/0xf80
[  735.985213][ T9089]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  735.987710][ T9089] 
[  735.987710][ T9089] -> #4 (sk_lock-AF_INET6){+.+.}-{0:0}:
[  735.990751][ T9089]        lock_sock_nested+0x41/0x100
[  735.992865][ T9089]        inet_shutdown+0x6a/0x390
[  735.994935][ T9089]        nbd_mark_nsock_dead+0x2e9/0x560
[  735.997092][ T9089]        sock_shutdown+0x15e/0x260
[  735.999046][ T9089]        nbd_clear_sock+0x24/0x170
[  736.001080][ T9089]        nbd_config_put+0x2dd/0x580
[  736.003140][ T9089]        nbd_genl_connect+0x19d5/0x1cf0
[  736.005297][ T9089]        genl_family_rcv_msg_doit+0x22a/0x330
[  736.007732][ T9089]        genl_rcv_msg+0x61c/0x7a0
[  736.009740][ T9089]        netlink_rcv_skb+0x232/0x4b0
[  736.011795][ T9089]        genl_rcv+0x28/0x40
[  736.013571][ T9089]        netlink_unicast+0x75c/0x8e0
[  736.015707][ T9089]        netlink_sendmsg+0x813/0xb40
[  736.017855][ T9089]        ____sys_sendmsg+0x972/0x9f0
[  736.020017][ T9089]        ___sys_sendmsg+0x2a5/0x360
[  736.022158][ T9089]        __x64_sys_sendmsg+0x1bd/0x2a0
[  736.024383][ T9089]        do_syscall_64+0x15f/0xf80
[  736.026487][ T9089]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  736.029097][ T9089] 
[  736.029097][ T9089] -> #3 (&nsock->tx_lock){+.+.}-{4:4}:
[  736.031608][ T9089]        __mutex_lock+0x1a3/0x1550
[  736.033285][ T9089]        nbd_queue_rq+0x37b/0x1100
[  736.034892][ T9089]        blk_mq_dispatch_rq_list+0xa70/0x1910
[  736.036769][ T9089]        __blk_mq_sched_dispatch_requests+0xdcc/0x1600
[  736.038944][ T9089]        blk_mq_sched_dispatch_requests+0xd7/0x190
[  736.041017][ T9089]        blk_mq_run_hw_queue+0x348/0x4f0
[  736.042861][ T9089]        blk_mq_dispatch_list+0xd16/0xe10
[  736.044700][ T9089]        blk_mq_flush_plug_list+0x48d/0x570
[  736.046658][ T9089]        __blk_flush_plug+0x3ed/0x4d0
[  736.048404][ T9089]        __submit_bio+0x28d/0x580
[  736.050058][ T9089]        submit_bio_noacct_nocheck+0x2f4/0xa40
[  736.052026][ T9089]        block_read_full_folio+0x599/0x830
[  736.053924][ T9089]        filemap_read_folio+0x137/0x3b0
[  736.055746][ T9089]        do_read_cache_folio+0x358/0x590
[  736.057663][ T9089]        read_part_sector+0xb6/0x2b0
[  736.059740][ T9089]        adfspart_check_ICS+0xb1/0x960
[  736.061894][ T9089]        bdev_disk_changed+0x817/0x1770
[  736.064081][ T9089]        blkdev_get_whole+0x380/0x510
[  736.066285][ T9089]        bdev_open+0x31e/0xd30
[  736.068214][ T9089]        blkdev_open+0x470/0x610
[  736.070186][ T9089]        do_dentry_open+0x785/0x14e0
[  736.072303][ T9089]        vfs_open+0x3b/0x340
[  736.074157][ T9089]        path_openat+0x2e08/0x3860
[  736.076157][ T9089]        do_file_open+0x23e/0x4a0
[  736.078055][ T9089]        do_sys_openat2+0x113/0x200
[  736.079716][ T9089]        __x64_sys_openat+0x138/0x170
[  736.081644][ T9089]        do_syscall_64+0x15f/0xf80
[  736.083448][ T9089]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  736.085430][ T9089] 
[  736.085430][ T9089] -> #2 (&cmd->lock){+.+.}-{4:4}:
[  736.087725][ T9089]        __mutex_lock+0x1a3/0x1550
[  736.089368][ T9089]        nbd_queue_rq+0xc6/0x1100
[  736.090973][ T9089]        blk_mq_dispatch_rq_list+0xa70/0x1910
[  736.092918][ T9089]        __blk_mq_sched_dispatch_requests+0xdcc/0x1600
[  736.095098][ T9089]        blk_mq_sched_dispatch_requests+0xd7/0x190
[  736.097214][ T9089]        blk_mq_run_hw_queue+0x348/0x4f0
[  736.099004][ T9089]        blk_mq_dispatch_list+0xd16/0xe10
[  736.100854][ T9089]        blk_mq_flush_plug_list+0x48d/0x570
[  736.102849][ T9089]        __blk_flush_plug+0x3ed/0x4d0
[  736.105002][ T9089]        __submit_bio+0x28d/0x580
[  736.107052][ T9089]        submit_bio_noacct_nocheck+0x2f4/0xa40
[  736.109249][ T9089]        block_read_full_folio+0x599/0x830
[  736.111132][ T9089]        filemap_read_folio+0x137/0x3b0
[  736.112890][ T9089]        do_read_cache_folio+0x358/0x590
[  736.115189][ T9089]        read_part_sector+0xb6/0x2b0
[  736.117327][ T9089]        adfspart_check_ICS+0xb1/0x960
[  736.118993][ T9089]        bdev_disk_changed+0x817/0x1770
[  736.120901][ T9089]        blkdev_get_whole+0x380/0x510
[  736.122730][ T9089]        bdev_open+0x31e/0xd30
[  736.124241][ T9089]        blkdev_open+0x470/0x610
[  736.125838][ T9089]        do_dentry_open+0x785/0x14e0
[  736.127559][ T9089]        vfs_open+0x3b/0x340
[  736.129023][ T9089]        path_openat+0x2e08/0x3860
[  736.130592][ T9089]        do_file_open+0x23e/0x4a0
[  736.132213][ T9089]        do_sys_openat2+0x113/0x200
[  736.133889][ T9089]        __x64_sys_openat+0x138/0x170
[  736.135547][ T9089]        do_syscall_64+0x15f/0xf80
[  736.137213][ T9089]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  736.139330][ T9089] 
[  736.139330][ T9089] -> #1 (set->srcu){.+.+}-{0:0}:
[  736.141826][ T9089]        __synchronize_srcu+0xca/0x300
[  736.143729][ T9089]        elevator_switch+0x1e8/0x7a0
[  736.145390][ T9089]        elevator_change+0x2cc/0x450
[  736.147088][ T9089]        elevator_set_default+0x36c/0x430
[  736.148997][ T9089]        blk_register_queue+0x3e9/0x4e0
[  736.150758][ T9089]        __add_disk+0x677/0xd50
[  736.152446][ T9089]        add_disk_fwnode+0xfb/0x480
[  736.154571][ T9089]        nbd_dev_add+0x72c/0xb50
[  736.156586][ T9089]        nbd_init+0x168/0x1f0
[  736.158475][ T9089]        do_one_initcall+0x250/0x870
[  736.160643][ T9089]        do_initcall_level+0x104/0x190
[  736.162523][ T9089]        do_initcalls+0x59/0xa0
[  736.163952][ T9089]        kernel_init_freeable+0x2a6/0x3e0
[  736.165669][ T9089]        kernel_init+0x1d/0x1d0
[  736.167163][ T9089]        ret_from_fork+0x514/0xb70
[  736.168828][ T9089]        ret_from_fork_asm+0x1a/0x30
[  736.170532][ T9089] 
[  736.170532][ T9089] -> #0 (&q->elevator_lock){+.+.}-{4:4}:
[  736.173057][ T9089]        __lock_acquire+0x15a5/0x2cf0
[  736.174746][ T9089]        lock_acquire+0x106/0x350
[  736.176322][ T9089]        __mutex_lock+0x1a3/0x1550
[  736.177943][ T9089]        elevator_change+0x1b3/0x450
[  736.179687][ T9089]        elevator_set_none+0xb5/0x140
[  736.181401][ T9089]        blk_mq_update_nr_hw_queues+0x5e7/0x1a60
[  736.183461][ T9089]        nbd_start_device+0x17f/0xb10
[  736.185216][ T9089]        nbd_genl_connect+0x165b/0x1cf0
[  736.187023][ T9089]        genl_family_rcv_msg_doit+0x22a/0x330
[  736.188987][ T9089]        genl_rcv_msg+0x61c/0x7a0
[  736.190591][ T9089]        netlink_rcv_skb+0x232/0x4b0
[  736.192300][ T9089]        genl_rcv+0x28/0x40
[  736.193782][ T9089]        netlink_unicast+0x75c/0x8e0
[  736.195507][ T9089]        netlink_sendmsg+0x813/0xb40
[  736.197196][ T9089]        ____sys_sendmsg+0x972/0x9f0
[  736.198809][ T9089]        ___sys_sendmsg+0x2a5/0x360
[  736.200465][ T9089]        __x64_sys_sendmsg+0x1bd/0x2a0
[  736.202239][ T9089]        do_syscall_64+0x15f/0xf80
[  736.203873][ T9089]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  736.205858][ T9089] 
[  736.205858][ T9089] other info that might help us debug this:
[  736.205858][ T9089] 
[  736.208996][ T9089] Chain exists of:
[  736.208996][ T9089]   &q->elevator_lock --> fs_reclaim --> &q->q_usage_counter(io)#70
[  736.208996][ T9089] 
[  736.213123][ T9089]  Possible unsafe locking scenario:
[  736.213123][ T9089] 
[  736.215327][ T9089]        CPU0                    CPU1
[  736.216927][ T9089]        ----                    ----
[  736.218569][ T9089]   lock(&q->q_usage_counter(io)#70);
[  736.220363][ T9089]                                lock(fs_reclaim);
[  736.222464][ T9089]                                lock(&q->q_usage_counter(io)#70);
[  736.224901][ T9089]   lock(&q->elevator_lock);
[  736.226359][ T9089] 
[  736.226359][ T9089]  *** DEADLOCK ***
[  736.226359][ T9089] 
[  736.228879][ T9089] 6 locks held by syz.1.14683/9089:
[  736.230614][ T9089]  #0: ffffffff8fe3fb28 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  736.233440][ T9089]  #1: ffffffff8fe3f960 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  736.236290][ T9089]  #2: ffff8881150ec1c0 (&set->update_nr_hwq_lock){++++}-{4:4}, at: blk_mq_update_nr_hw_queues+0xad/0x1a60
[  736.239952][ T9089]  #3: ffff8881150ec0d0 (&set->tag_list_lock){+.+.}-{4:4}, at: blk_mq_update_nr_hw_queues+0xc0/0x1a60
[  736.243245][ T9089]  #4: ffff888109d7a5a0 (&q->q_usage_counter(io)#70){++++}-{0:0}, at: elevator_change+0x198/0x450
[  736.246357][ T9089]  #5: ffff888109d7a5d8 (&q->q_usage_counter(queue)#53){+.+.}-{0:0}, at: elevator_change+0x198/0x450
[  736.249630][ T9089] 
[  736.249630][ T9089] stack backtrace:
[  736.251495][ T9089] CPU: 0 UID: 0 PID: 9089 Comm: syz.1.14683 Not tainted syzkaller #0 PREEMPT(full) 
[  736.251513][ T9089] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  736.251523][ T9089] Call Trace:
[  736.251529][ T9089]  <TASK>
[  736.251536][ T9089]  dump_stack_lvl+0xe8/0x150
[  736.251550][ T9089]  print_circular_bug+0x2e1/0x300
[  736.251563][ T9089]  check_noncircular+0x12e/0x150
[  736.251576][ T9089]  __lock_acquire+0x15a5/0x2cf0
[  736.251589][ T9089]  ? elevator_change+0x1b3/0x450
[  736.251600][ T9089]  lock_acquire+0x106/0x350
[  736.251608][ T9089]  ? elevator_change+0x1b3/0x450
[  736.251620][ T9089]  __mutex_lock+0x1a3/0x1550
[  736.251632][ T9089]  ? elevator_change+0x1b3/0x450
[  736.251642][ T9089]  ? rcu_is_watching+0x15/0xb0
[  736.251650][ T9089]  ? work_grab_pending+0x3d1/0x990
[  736.251658][ T9089]  ? elevator_change+0x1b3/0x450
[  736.251667][ T9089]  ? __pfx___mutex_lock+0x10/0x10
[  736.251677][ T9089]  ? enable_work+0x17f/0x230
[  736.251687][ T9089]  ? lockdep_hardirqs_on+0x7a/0x110
[  736.251699][ T9089]  ? __cancel_work_sync+0xf7/0x110
[  736.251710][ T9089]  ? blk_mq_cancel_work_sync+0xa5/0xe0
[  736.251718][ T9089]  elevator_change+0x1b3/0x450
[  736.251731][ T9089]  elevator_set_none+0xb5/0x140
[  736.251740][ T9089]  ? __pfx_elevator_set_none+0x10/0x10
[  736.251750][ T9089]  ? xa_load+0x1db/0x210
[  736.251760][ T9089]  blk_mq_update_nr_hw_queues+0x5e7/0x1a60
[  736.251770][ T9089]  ? kernfs_add_one+0x477/0x5c0
[  736.251780][ T9089]  ? __pfx_blk_mq_update_nr_hw_queues+0x10/0x10
[  736.251789][ T9089]  ? sysfs_add_file_mode_ns+0x259/0x300
[  736.251797][ T9089]  nbd_start_device+0x17f/0xb10
[  736.251807][ T9089]  ? device_create_file+0xf4/0x1b0
[  736.251815][ T9089]  nbd_genl_connect+0x165b/0x1cf0
[  736.251821][ T9089]  ? __pfx___nla_validate_parse+0x10/0x10
[  736.251833][ T9089]  ? __pfx_nbd_genl_connect+0x10/0x10
[  736.251841][ T9089]  ? rcu_is_watching+0x15/0xb0
[  736.251851][ T9089]  ? trace_kmalloc+0x2a/0xf0
[  736.251866][ T9089]  ? __nla_parse+0x40/0x60
[  736.251879][ T9089]  ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0
[  736.251890][ T9089]  ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0
[  736.251901][ T9089]  genl_family_rcv_msg_doit+0x22a/0x330
[  736.251916][ T9089]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  736.251929][ T9089]  ? __lock_acquire+0x6b5/0x2cf0
[  736.251941][ T9089]  genl_rcv_msg+0x61c/0x7a0
[  736.251951][ T9089]  ? __pfx_genl_rcv_msg+0x10/0x10
[  736.251961][ T9089]  ? __pfx_nbd_genl_connect+0x10/0x10
[  736.251974][ T9089]  netlink_rcv_skb+0x232/0x4b0
[  736.251987][ T9089]  ? __pfx_genl_rcv_msg+0x10/0x10
[  736.251997][ T9089]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  736.252013][ T9089]  ? down_read+0x270/0x2e0
[  736.252022][ T9089]  ? genl_rcv+0xd/0x40
[  736.252032][ T9089]  genl_rcv+0x28/0x40
[  736.252041][ T9089]  netlink_unicast+0x75c/0x8e0
[  736.252055][ T9089]  netlink_sendmsg+0x813/0xb40
[  736.252072][ T9089]  ? __pfx_netlink_sendmsg+0x10/0x10
[  736.252086][ T9089]  ? aa_sock_msg_perm+0xf1/0x1b0
[  736.252099][ T9089]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  736.252151][ T9089]  ____sys_sendmsg+0x972/0x9f0
[  736.252169][ T9089]  ? __might_fault+0xaf/0x130
[  736.252182][ T9089]  ? __pfx_____sys_sendmsg+0x10/0x10
[  736.252198][ T9089]  ? import_iovec+0x73/0xa0
[  736.252213][ T9089]  ___sys_sendmsg+0x2a5/0x360
[  736.252226][ T9089]  ? __lock_acquire+0x6b5/0x2cf0
[  736.252237][ T9089]  ? __pfx____sys_sendmsg+0x10/0x10
[  736.252252][ T9089]  ? futex_wait+0x2a2/0x390
[  736.252272][ T9089]  ? __fget_files+0x2a/0x420
[  736.252283][ T9089]  ? __fget_files+0x3a0/0x420
[  736.252297][ T9089]  __x64_sys_sendmsg+0x1bd/0x2a0
[  736.252312][ T9089]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  736.252328][ T9089]  ? rcu_is_watching+0x15/0xb0
[  736.252344][ T9089]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  736.252357][ T9089]  do_syscall_64+0x15f/0xf80
[  736.252374][ T9089]  ? trace_irq_disable+0x3b/0x140
[  736.252391][ T9089]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  736.252404][ T9089] RIP: 0033:0x7f2567d9ce59
[  736.252416][ T9089] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  736.252428][ T9089] RSP: 002b:00007f2568c72028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  736.252442][ T9089] RAX: ffffffffffffffda RBX: 00007f2568015fa0 RCX: 00007f2567d9ce59
[  736.252451][ T9089] RDX: 0000000020000000 RSI: 0000200000001ac0 RDI: 0000000000000006
[  736.252468][ T9089] RBP: 00007f2567e32d6f R08: 0000000000000000 R09: 0000000000000000
[  736.252476][ T9089] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  736.252484][ T9089] R13: 00007f2568016038 R14: 00007f2568015fa0 R15: 00007ffc65ba5e78
[  736.252502][ T9089]  </TASK>
[  736.411481][ T9100] bond33: Unable to set peer notification delay as MII monitoring is disabled
[  736.415524][ T9100] bond33 (unregistering): Released all slaves
[  736.512816][ T9089] nbd2: detected capacity change from 0 to 63
[  736.564796][   T54] block nbd2: Receive control failed (result -104)
[  736.565542][T17867] block nbd2: Receive control failed (result -32)
[  742.042276][    C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
