last executing test programs:

2.503678331s ago: executing program 1 (id=2775):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000bc0), r1)
sendmsg$TIPC_NL_BEARER_DISABLE(r1, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f0000000c00)={0x14, r2, 0x1, 0x70bd27, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40c0}, 0x44010)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', <r3=>0x0})
setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000040)={@multicast2, @rand_addr=0x64010100, r3}, 0xc)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001ac0)=@newlink={0x48, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_ADDRESS={0xa, 0x1, @dev}, @IFLA_MTU={0x8, 0x4, 0xff2}]}, 0x48}}, 0x0)

2.240724517s ago: executing program 1 (id=2777):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) (async)
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x1}, 0x1c) (async)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000005300)=[{0x80000006, 0x66}]}, 0x10)
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='GPL\x00'}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f271a76d2686dd4c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r4 = socket$netlink(0x10, 0x3, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sched_kthread_stop\x00', r3}, 0x10)
sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000010001fff000000000000000000060000", @ANYRES32=0x0, @ANYBLOB="0000000000000000180012800e0001007769726567756172640000000400028008000a00b8"], 0x40}}, 0x0)

1.890993059s ago: executing program 1 (id=2780):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, &(0x7f00000002c0)=""/216, &(0x7f0000000000)=0xd8)
r1 = socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xc, &(0x7f0000000240)=@assoc_value={<r2=>0x0}, &(0x7f0000000200)=0x8)
getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000200)={r2, 0x4}, &(0x7f0000000280)=0x8)
r3 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_SET(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="24000000021401002abd700001dcdf250800010000000000090002"], 0x24}, 0x1, 0x0, 0x0, 0x4000801}, 0x40810)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f0000000200)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d491009b3426c8928f3d97cb", 0x10)
r5 = accept4(r4, 0x0, 0x0, 0x0)
ioctl$int_in(r5, 0x5452, &(0x7f0000000100)=0x8000)
read$alg(r5, &(0x7f0000000000)=""/35, 0x23)
sendmsg$alg(r5, &(0x7f0000002a00)={0x0, 0x0, &(0x7f0000002980)=[{&(0x7f0000002800)='a', 0x1}], 0x1, 0x0, 0x0, 0x20000044}, 0x24040011)
accept4$phonet_pipe(r5, &(0x7f0000000180), &(0x7f0000000580)=0x10, 0x80000)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0010000100000000000000"], 0xc4}}, 0x0)
sendmsg$nl_xfrm(r6, &(0x7f00000000c0)={0x0, 0xa00, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c6d411fae9332debe0006001d00010000000000000096bacdf900000a00ff000100000000000000d7183eafd3911a22a5c56117eaf67ef016c609b8cef3af47a9c5dbe859a4366c6499e6d3c84cd099a50788c3f415a95b58cdb9fd1bd6ff4751bbbaa69e5737bd3bcb27b12c44e1508b010685f04e3389aaa1963193f2219721388ad5509fa2114435ca656919bb98060682dd7096c49590e3db7fbc8304c49f1d4aa7ed4f2aa14454baf1b0cfa9a0c70fe425bc54857767c09e142cd9c63b82d22d243f5582868d6b61a4e76d569f1d9ebf69b71d6dc1d3"], 0x1c}}, 0x0)
r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610428000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x1, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffd8b, 0xffffffffffffffff}, 0x48)
ioctl$PPPIOCNEWUNIT(r7, 0xc004743e, &(0x7f0000000300)=0x2)
ioctl$PPPIOCSMRRU(r7, 0x4004743b, 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'aead\x00', 0x0, 0x0, 'rfc7539esp(ctr-camellia-aesni,rmd256)\x00'}, 0x58)
r8 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
r9 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
bind$bt_hci(r9, &(0x7f0000000000)={0x27}, 0x62)
bind$bt_hci(r8, &(0x7f0000000000)={0x27}, 0x74)
close(0x4)
r10 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000003c0)="5c00000013006bcd9e3fe3dceb48aa31086b8703110000001fa1ff0000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0)

1.720154579s ago: executing program 1 (id=2785):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000400)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e00000000000000000024000280040001001c0003800c0001"], 0x50}}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000007111ae00000000008510000002000000850000000500000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000002f80)={0x0, 0x0, 0x0}, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={r3, 0x11e, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x63, 0x10, &(0x7f0000002e00), &(0x7f0000001000), 0x8, 0xa0, 0x8, 0x0, 0x0}}, 0x10)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={r3, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
unshare(0x68040200)
r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x10)
syz_emit_ethernet(0x3e, &(0x7f0000000280)=ANY=[@ANYBLOB="0180c2000000bbbbbbbbbbbb0800450000300068000000019078ac1e0001ac1414aa030190781200183f25180000000000000001e7f57f0000017f000001"], 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfffff000)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x84)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="6800000010003b1500"/20, @ANYRESOCT=r2, @ANYBLOB="00000000000000003000128008000100736974002400028008000300e0"], 0x68}, 0x1, 0x0, 0x0, 0x24008844}, 0x8000)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$devlink(&(0x7f00000007c0), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_NEW(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={0x40, r7, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0x256d}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x84}, 0x40080)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0xfffffffffffffe2a)

1.290036312s ago: executing program 2 (id=2788):
r0 = socket(0x1e, 0x4, 0x0)
connect$tipc(r0, &(0x7f0000000040)=@id={0x1e, 0x3, 0x0, {0x4e25, 0x2}}, 0x10)
socket$kcm(0x10, 0x2, 0x10)
r1 = socket$can_j1939(0x1d, 0x2, 0x7)
setsockopt$SO_J1939_SEND_PRIO(r1, 0x6b, 0x3, &(0x7f0000000800)=0x1, 0x4)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x1)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000140)=ANY=[@ANYBLOB="38000000540001000100000000000000070000009bc3b927113cc568801021274acc9551989eadef06d9bdd0ddb680d17557ec48264046f672b5e346756fd8823f7fe9a47892f1e9ce77497b595f303af21d18d5ddc9ff063222f8b3", @ANYRES32=0x0, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="01000300ac1e000100000000000000000000000086dd0000"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0)
socket$vsock_stream(0x28, 0x1, 0x0)
syz_emit_ethernet(0x39, &(0x7f0000000080)={@multicast, @multicast, @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "fec000", 0x35, 0x3a, 0x0, @private0={0xfc, 0x0, '\x00', 0xfe}, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x3, {0x0, 0x6, "18b088", 0x0, 0x0, 0xfe, @remote, @local, [], "fafb17c133"}}}}}}}, 0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ac0), r2)
sendmsg$IEEE802154_LLSEC_SETPARAMS(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000000)={0x20, r3, 0x5, 0x0, 0x0, {0x22}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x20}}, 0x2000c094)

1.182295928s ago: executing program 2 (id=2790):
r0 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f00000001c0)=0x200000, 0x4)
getsockopt$XDP_STATISTICS(r0, 0x11b, 0x7, &(0x7f00000002c0), &(0x7f0000000300)=0x30)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
unshare(0x6a040000)
r2 = socket(0x11, 0x3, 0x1000)
ioctl$sock_inet_SIOCADDRT(r2, 0x890b, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x2a}, 0x2e)
r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r2)
sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r2, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r4, 0xec5463756c5da89b, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x1ff}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x74c}]}, 0x24}, 0x1, 0x0, 0x0, 0x8010}, 0x4000804)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000180)='afs_call\x00', r3, 0x0, 0xfffffffffffffffe}, 0x18)

990.603306ms ago: executing program 1 (id=2793):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001fc0)=ANY=[@ANYBLOB="441500001000010400008de9b7181f4be5110000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b00010062726964676500001400028006002700070000000500290006000000"], 0x44}}, 0x0)

914.891593ms ago: executing program 1 (id=2794):
r0 = socket(0x10, 0x3, 0x0) (async)
r1 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r1, &(0x7f0000000440)={0x900, 0x0, &(0x7f0000000400)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020afc090700000026bd7002fedbdf2505001a00fe8000000000000000000000000000aa64010100000c00002c003000ca862220e83f1ad7"], 0x38}}, 0x40408c0) (async)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) (async)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r3 = openat$cgroup_procs(r2, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r3, &(0x7f0000000c40), 0x12) (async)
r4 = openat$cgroup_procs(r2, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0)
pread64(r4, &(0x7f0000001840)=""/4096, 0x1000, 0x1) (async)
socket$nl_rdma(0x10, 0x3, 0x14) (async)
r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80)
r6 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r5}, 0x8)
close(r6)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r5, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) (async)
bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000080)={r6, r5, 0x4, r5}, 0x10) (async)
r7 = socket(0x10, 0x3, 0x0) (async)
r8 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', <r9=>0x0})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}}, 0x0) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x124, 0x2c, 0xd2b, 0x70bd2b, 0x35dfdbfb, {0x0, 0x0, 0x0, r9, {0xf, 0x3}, {}, {0xfff1, 0xfff2}}, [@filter_kind_options=@f_u32={{0x8}, {0xf8, 0x2, [@TCA_U32_SEL={0xf4, 0x5, {0x10, 0x9, 0xe, 0x10da, 0xa760, 0x0, 0x10, 0xfc, [{0xffff8001, 0xf073, 0x4010000, 0x8000}, {0x40, 0x80000001, 0xfffffffe, 0xffffffff}, {0x2, 0x9, 0x2}, {0x2008, 0x80000000, 0x1e0a}, {0xffffffff, 0x9, 0x800, 0x100}, {0x5e3, 0x4, 0x8e, 0x3}, {0x2, 0xffffffff, 0x5, 0x1ad}, {0x3ff, 0xb, 0x3, 0xa6d}, {0x1, 0x5, 0x5127, 0x800}, {0x6, 0x1, 0x2, 0x1}, {0x40, 0x40, 0x3, 0x5}, {0x2, 0x8, 0x6, 0x201}, {0x5, 0x406, 0x2, 0xfffffeff}, {0x94b0, 0x81, 0x80000001, 0xfffffffc}]}}]}}]}, 0x124}, 0x1, 0x0, 0x0, 0x48001}, 0x4000) (async)
r10 = socket$nl_route(0x10, 0x3, 0x0) (async)
r11 = socket(0x10, 0x803, 0x2)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r11) (async)
getsockname$packet(r11, &(0x7f0000000680)={0x11, 0x0, <r12=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14)
sendmsg$nl_route(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r12, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) (async)
sendmsg$nl_route_sched(r7, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x2c, 0x24, 0x5820a61ca228651, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r12, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) (async)
sendmsg$nl_route_sched(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000006c0)=@newtfilter={0x34, 0x28, 0x575ac7824d421509, 0x70bd2d, 0x4, {0x0, 0x0, 0x0, r12, {0x10}, {0x1}, {0xfff1, 0x3d}}, [@filter_kind_options=@f_bpf={{0x8}, {0x8, 0x2, [@TCA_BPF_ACT={0x4}]}}]}, 0x34}}, 0x40) (async)
write(r0, &(0x7f0000000580)="240000001e005f031400ff01000000f80a00b3586ff606c2e553797c080008e467dc0200", 0x24)
recvmmsg(r0, &(0x7f0000005180), 0x400000000000166, 0x1a000, 0x0)

662.117598ms ago: executing program 2 (id=2797):
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.bfq.idle_time\x00', 0x0, 0x0)
r1 = socket$isdn(0x22, 0x2, 0x24)
close(r1)
setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000080)=@req={0x8, 0x24d8b06d, 0x7, 0x3f73}, 0x10)
r2 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_int(r2, 0x0, 0x22, &(0x7f0000000900), 0x2)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000980)=ANY=[@ANYBLOB="84000000", @ANYRES16=r4, @ANYBLOB="010000000000fbdbdf2501000000080002000000000005000500000000000800030001000000480001800500020020000000060001000200000008000600feffff7f080003"], 0x84}, 0x1, 0x0, 0x0, 0x4800}, 0x20000000)
r5 = socket(0xa, 0x3, 0x3a)
ioctl$FS_IOC_GETFSMAP(r5, 0xc0c0583b, &(0x7f0000000400)={0x0, 0x0, 0x4, 0x0, '\x00', [{0x0, 0x3, 0x8, 0x916, 0x7, 0xb1}, {0xe6ed, 0x9, 0x6, 0x0, 0x0, 0x5}], ['\x00', '\x00', '\x00', '\x00']})
ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000000)={'lo\x00', &(0x7f0000000100)=@ethtool_per_queue_op={0x4b, 0xf, [0x5, 0x401, 0x0, 0x4, 0xde, 0x8000, 0xffff8001, 0x7, 0x1, 0x4, 0x8, 0x5b, 0xffffffff, 0x10000, 0x5, 0x4, 0x1, 0x200, 0x7, 0x1, 0x4, 0x9, 0x8000, 0x4, 0x2, 0x6e08, 0x4, 0xacd2, 0x2, 0x7, 0x80, 0x9, 0xb, 0x9, 0x0, 0x2, 0x3, 0x0, 0x4, 0x1, 0x101, 0x8, 0x1, 0x6, 0x2, 0x9, 0x2, 0xec, 0x2, 0x7, 0x4, 0x10001, 0x7, 0xa, 0x948, 0x1, 0x5, 0xb6, 0x90, 0x4, 0x5, 0x4, 0xcb53, 0x3, 0x0, 0xf4, 0x3, 0x8, 0x0, 0x7f, 0x6000, 0x800, 0x2, 0x1b9e, 0x3, 0x1, 0x801, 0xfb9, 0xdb, 0x7f, 0x2, 0x92, 0x8, 0x5, 0x7, 0x7, 0xaf7c, 0x8d5, 0x3, 0x81, 0xe2e2, 0x4, 0x1, 0x6, 0xfff, 0x18a4, 0x1000000, 0x800000, 0x4c02, 0x1, 0x7fffffff, 0x6, 0x401, 0x3, 0x3, 0x0, 0x9, 0x9, 0x9, 0x9, 0x6, 0x5, 0x0, 0x3, 0xfffffffd, 0x1ff, 0x101, 0x0, 0x78e9f457, 0x3eaf, 0x0, 0x9, 0xc10f6de, 0x35, 0x9, 0x3, 0xfffffffc, 0x2], "eb96e3c85b923683561e7547799506bdcf62d607dee4425f0e6582d79d55cca4c5e7453c3e5419d4dd3c838a53c97eaf671e369576680a06cc8adf9a3cc42c65d7711b5db970380fb01f76baf38564a7621ce97ad4a424b040923cff05b2f51518fab4b86807963a37fed0dcad16b6c5714c9d5f4f07cc282f54145985bf88eb756238707d3e220da9712f80da4cd8d761258fb35a0d362979779f66b3572ac912bffa62881bdca9f2dfaaebba6c6ed394b52a1acebe73025bc863a926567be1467f26f59381b6fe68d652b2c31158c6013ad5c4bcc35a14a9dce10d39c8c7c5b85e81"}})

659.806178ms ago: executing program 0 (id=2798):
r0 = socket$inet(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'gre0\x00', <r2=>0x0})
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x1, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x2b, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000280)={r4, 0x0, 0x0}, 0x20)
close(0x3)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x80000000, 0x1}, 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r5}, 0x38)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r3, &(0x7f0000000280), &(0x7f0000000000)=""/6, 0x2}, 0x20)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="400000001000210400"/20, @ANYRES32=r2, @ANYBLOB="00000001004e21000000000000000000005b07b10800000000000000000ff960efc1f535e5c85a84cb2ce429a4744b5b37f31885946b2a24643bd68ec791b7eac7ed465306f4b38e24681d81c8aad13e185c1e97ebdd6fff2086675a40f9a31dcf2f960ec566"], 0x40}}, 0x90)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', <r7=>0x0})
r8 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0xac, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r7, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x7c, 0x2, [@TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x2}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1], 0x0, [0x8, 0x6, 0x3c, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x401]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x1}]}}]}, 0xac}}, 0x0)

561.501685ms ago: executing program 0 (id=2799):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000000)={0x0, @in6={{0xa, 0x4e20, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x90)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2}, [@call={0x85, 0x0, 0x0, 0x8a}]}, &(0x7f0000000240)='syzkaller\x00'}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
r2 = socket(0x2000000000000021, 0x2, 0x10000000000002)
connect$rxrpc(r2, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x8, @multicast2}}, 0x24)
sendmmsg(r2, &(0x7f0000000d00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0xe000}, 0x5}, {{0x0, 0x0, 0x0, 0x0, &(0x7f000000a380)=ANY=[], 0x4a8}}], 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x4, 0x5, 0x2, 0x4038a09, 0x4, @empty, @mcast2={0xff, 0x5}, 0x0, 0x0, 0x0, 0x5}})
unshare(0x6a040000)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
unshare(0x600)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000100)={'vlan0\x00', 0x400})
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket(0x1, 0x803, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=ANY=[@ANYBLOB="4800000010000104000500"/20, @ANYRES32=r7, @ANYBLOB="000000000000000028001280090001007665746800000000180002"], 0x48}}, 0x0)
mmap(&(0x7f0000a7f000/0x2000)=nil, 0x2000, 0x9, 0x13, r2, 0x7f652000)
r8 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r8, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f848140000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0)
r9 = socket$rxrpc(0x21, 0x2, 0x2)
connect$rxrpc(r9, &(0x7f0000000500)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e24, 0x3961, @remote, 0x6}}, 0x24)
r10 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r10, &(0x7f00000000c0)={0x0, 0x8, &(0x7f0000000000)=[{&(0x7f0000000340)="5c00000013006bcd9e3fe3dc4e48aa31086b8703140000001f03000000330000040014000d000a000d0000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x840)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, &(0x7f0000000340)=""/75, &(0x7f00000003c0)="6adcd3da9edb59240e8971b926407c19a8db884ccf7520c146ca6edb19f42d4968f43cd7a91f6ba3cfc2d4a4928cbf8fa0c9f5f856fa20b0f68eb27fdd7c1987a97ad1f49baa2def4f0c06178e846da8145f985c8c28e09877a6f224ff9052f2fd6ba0391e6ae51fe41d0fc111df8c4333c19c132d90d1610bb045ea7c38a353c2d06655128be785752e4518a82b52f9f2", &(0x7f0000000600)="d8b8554e0d1c686676f67bbefb4ee16c42942a8c43e0c658346dc9986923ceb17a2ef6127fde361aa8d16af81ded9ed06086bd48a6943f0e3993ab3e441b2b866b307d0d4e5acabed95342d9ce0f56481d96384ac6a0bd6dcbc7b3ceec14fa41bf168985127e0ec1bd704712757912095afc44cdde636606f69f55e83e43e019fa60dd8e6b9aa3087857dd2d1ed56f2e868a7c0b5bba892bf7fe2f37468c7fa01b9a318d20b26c3d407a933023079b751749ed22cf7fe6f6f5aa6d6b81504eae68dbfa27615014224736b18f102f2f060c1ca564f4c9beab26e0ec299942490f66bbe76d2c9c276c4e", 0x4, r4, 0x4}, 0x38)
r11 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, r3}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r11}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x0, 0x3, 0xa, 0x2}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {0x7, 0x0, 0x0, 0x9}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r4}, {}, {0x46, 0x8, 0xfff1, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, 0x0, 0x5, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, @sk_msg=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000540)={0x0, 0x1, 0x0, 0x2, 0x9, 0x200, 0x0, 0xa77a, {0x0, @in6={{0xa, 0x4e22, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0xfffffff7}}, 0x74, 0x4, 0xe60e, 0x8, 0x7}}, &(0x7f0000000280)=0xb0)

512.020714ms ago: executing program 2 (id=2800):
socket$igmp6(0xa, 0x3, 0x2)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, 0x0, 0x0)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000180)=@gcm_256={{0x303}, "c4915c7f49541ce8", "9b84f987950ff3df25fa8f46983d34157e047d27ae4a46a6d15608a32cbaa5bc", '\x00', "be0ea450d5a50003"}, 0x38)
socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000280)={'vxcan1\x00'})
r1 = socket$inet6(0xa, 0x800000000000002, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge0\x00', <r3=>0x0})
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000001d00070f000000000000000007000000", @ANYRES32=r3, @ANYBLOB="40002700060010"], 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50)
socket(0x10, 0x3, 0x0)
socket(0x10, 0x3, 0x0)
socket$packet(0x11, 0x2, 0x300)
socket$inet6_sctp(0xa, 0x801, 0x84)
socket(0x10, 0x3, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000070000000000010073797a30000000005c000000090a0104000000000000000f0700000008000a40000000000900020073797a3100000000090001001e6a7a3000000000080005400000000d08000640ffffff00080003400000000810001180090001"], 0xe4}}, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0xfffffffffffffe01, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000060a0b0400000000000000000200000038000480340001800b00010074617267657400002400028010000100434f4e4e5345434d41524b0005000300ef00000008000240000000000900010073797a30000000000900020073797a32000000001400058008000240000000ce07"], 0xa0}}, 0x14b6deac033214c2)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0)
r6 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000001580)={0x0, @in={{0x2, 0x0, @empty}}}, &(0x7f0000000540)=0x9c)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure_enabled\x00', 0x26e1, 0x0)

362.076226ms ago: executing program 2 (id=2801):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newsa={0xf0, 0x10, 0x713, 0x0, 0x25dfdbfc, {{@in6=@local, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x4e21, 0x2, 0xa, 0x0, 0x0, 0x6c, 0x0, 0xee00}, {@in6=@private1, 0xfe, 0x32}, @in6=@ipv4={'\x00', '\xff\xff', @remote}, {0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x5, 0x543}, {0x7, 0x7fffffffffffffff}, {0x0, 0x9}, 0x70bd2c, 0x3500, 0x2, 0x4, 0x0, 0x30}}, 0xf0}, 0x1, 0x0, 0x0, 0x880}, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000300)={0x0, 0xffffffffffffffff, 0x0, 0x10, &(0x7f00000002c0)=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', <r4=>0x0}, 0x30)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000340)={r4}, 0x4)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000240), r5)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={<r8=>0xffffffffffffffff})
sendmsg$NBD_CMD_CONNECT(r6, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000000c0)={0x38, r7, 0x1, 0xffffffff, 0x0, {}, [@NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r8}}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fff}]}, 0x38}}, 0x20000000)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r3, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24040090}, 0xc0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'syztnl0\x00', &(0x7f0000000140)={'syztnl0\x00', <r9=>0x0, 0x7, 0x8000, 0x0, 0xffff, {{0x16, 0x4, 0x1, 0x21, 0x58, 0x65, 0x0, 0x6, 0x2f, 0x0, @multicast1, @loopback, {[@ra={0x94, 0x4}, @rr={0x7, 0x13, 0xe9, [@multicast1, @private=0xa010102, @empty, @remote]}, @ssrr={0x89, 0x1f, 0x42, [@loopback, @loopback, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x12}, @rand_addr=0x64010100, @private=0xa010101]}, @rr={0x7, 0xb, 0x29, [@broadcast, @local]}, @noop]}}}}})
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r9, 0x32b}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8, 0x9, 0x2}, @IFLA_BOND_ARP_ALL_TARGETS={0x8, 0xa, 0x1}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000000}, 0x880)
openat$cgroup(0xffffffffffffffff, &(0x7f00000001c0)='syz1\x00', 0x200002, 0x0)

210.455225ms ago: executing program 0 (id=2802):
bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x80, 0x5, 0x1000}, 0x48) (async)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000800)=ANY=[@ANYRES16=r0, @ANYRES16, @ANYBLOB="40c4acf0c28aedb281b2514b823ad56d94e8653d0bc9036a0ddae57e4b85d4c7ae1cd05404c1eac9bdae21d9e91d56ff08a38b5ba3568feddef18162f8552179a0840c60d274e9e317d0d28ecb921d8786547627166cb14d35c195cd6416bdbd11b9b0f6efe44c82024e9cd231b4ad8bd874ec8e5fbf28cf663e179cbe960c16f7b113d460110c1a9a281136aa2e99", @ANYRES64=r1, @ANYRES64], &(0x7f0000000340)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) (async, rerun: 64)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) (async, rerun: 64)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(0xffffffffffffffff, 0x84, 0x65, &(0x7f0000000200)=[@in6={0xa, 0x4e21, 0x5, @mcast2, 0x1}, @in={0x2, 0x4e24, @multicast2}, @in6={0xa, 0x4e22, 0xc5, @mcast1, 0x40}, @in={0x2, 0x4e1d, @local}, @in6={0xa, 0x4e24, 0x9, @private0, 0x4}, @in={0x2, 0x4e21, @remote}, @in={0x2, 0x4e22, @broadcast}], 0x94) (async)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)=ANY=[], 0x10) (async, rerun: 64)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xa, 0x4, 0x6, 0x6, 0x2, 0xffffffffffffffff, 0x3}, 0x50) (rerun: 64)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000440), &(0x7f0000000580), 0x1f93, r3}, 0x38)
getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000180)=@assoc_value, &(0x7f0000000240)=0x8) (async, rerun: 64)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[], 0x7c}}, 0x0) (async, rerun: 64)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x20, 0x0, 0x0, 0x3e57}, {0x6}]}, 0x10) (async)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=@allocspi={0x160, 0x16, 0x1, 0x0, 0x0, {{{@in6=@loopback, @in=@broadcast, 0x0, 0x0, 0x0, 0x8}, {@in=@dev, 0x0, 0x6c}, @in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x0, 0x7fff}, [@replay_esn_val={0x24, 0x17, {0x2, 0x70bd2b, 0x70bd28, 0x70bd29, 0x70bd2b, 0x36405ff2, [0x27f4, 0x7]}}, @tmpl={0x44, 0x5, [{{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4d2, 0x3c}, 0xa, @in=@multicast1, 0x3503, 0x1, 0x2, 0x4, 0x0, 0x7, 0x7ff}]}]}, 0x160}}, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000380)={'vcan0\x00', <r7=>0x0}) (async)
r8 = socket$can_j1939(0x1d, 0x2, 0x7)
bind$can_j1939(r8, &(0x7f0000000080)={0x1d, r7, 0x0, {0x0, 0x0, 0x4}}, 0x18)
r9 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async)
sendmsg$NL80211_CMD_DEL_PMKSA(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x400c4) (async)
r10 = socket$l2tp(0x2, 0x2, 0x73)
bind$inet(r10, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) (async)
syz_emit_ethernet(0x74, &(0x7f0000000000)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x73, 0x0, @private=0x300, @multicast1}, {0x0, 0x0, 0xfffffe9a, 0x0, @gue={{0x2}}}}}}}, 0x0) (async)
ioctl$sock_SIOCINQ(r10, 0x541b, &(0x7f00000001c0)) (async)
sendmsg$netlink(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="200000002d0001000000ea001000000004000080050011802efff20004001d"], 0x20}], 0x1}, 0x300)
sendmsg$can_j1939(r8, &(0x7f00000001c0)={&(0x7f0000000040), 0x18, &(0x7f0000000180)={&(0x7f00000000c0)="92", 0x1a000}}, 0xee) (async)
setsockopt$SO_J1939_FILTER(r8, 0x6b, 0x1, &(0x7f0000000280)=[{0x1, 0x2, {0x1}, {0x1, 0xff, 0x2}, 0xff}, {0x3, 0x2, {0x2, 0xf0, 0x2}, {0x3ca1d9a9d3f903f4, 0xff, 0x2}, 0x1, 0xff}, {0x0, 0xfffffffffffffffb, {0x2, 0xf0, 0x2}, {0x1}, 0xfe, 0xff}], 0x60) (async, rerun: 32)
sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=@newtfilter={0x24, 0x11, 0x101, 0x70bd25, 0x100000, {0x0, 0x0, 0x74, r7, {0x5, 0xb}, {0x4, 0xfff3}, {0xfff1, 0xffe0}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4014}, 0xc4) (rerun: 32)

184.643486ms ago: executing program 0 (id=2803):
socket$netlink(0x10, 0x3, 0x0) (async)
r0 = socket(0xf, 0x803, 0x0) (async)
r1 = socket(0x1, 0x800, 0x3)
getsockname$packet(r1, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x51)
sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000ac0)={0x0}, 0x1, 0x0, 0x0, 0x800}, 0x4000885) (async, rerun: 64)
getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (rerun: 64)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000580)=@framed={{}, [@printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x83000000}, {0x85, 0x0, 0x0, 0x71}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x18) (async)
socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'bond0\x00', <r4=>0x0}) (async)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x803, 0x0)
bind$netlink(r6, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) (async)
getsockname$packet(r6, &(0x7f0000000600)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r7, 0x1}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x4}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40040}, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0) (async)
sendmsg$kcm(r0, &(0x7f0000000940)={&(0x7f0000000640)=@phonet={0x23, 0x4, 0x41, 0x4}, 0x80, &(0x7f0000000700), 0x0, &(0x7f0000000740)=[{0xf8, 0x10c, 0x10, "b9d0f077fb47d7348b11914724ef9c5cfec895a349153cff890194542d3c844bf846a6204ce3283cbc7e0bb59ae342d4b34389300504781d1b610e5c2fbe003ca4a2e94754754b8887554ee7050b4d84772674aea48884f7c60c9bb8ad151831d6c94bc6af9bfd164f784dbdd5d72fc371b480f66d780c77e8e9807968e7dcff758cb8c426efdeff911f117e0bb4ba7330cb3bc3659214a3dd5af09aa6bafe8a9611ffd4f4b6add726a1b7ca999590320cc7f08d0e381b6455f3428f2132a78b847fcd8200b11a4bc08ebc547d7c9f62f979d24cf5316e30c74964dc933ebca15fd4"}, {0xf8, 0x113, 0xc0c, "aabfdd28812345d96735cb024ff47d2ec2cc5c3d25aeca3b73d766e3bd8013311c6d3463ddb68b2699fd852ce67b3f2aefe1ba413104759658832c28419571d8fbea7071242a4ccf5eec64dd82d6fd219aeccc36439c801cf89b989c895558667c62cfe93c808d4dc59826220b45e42f2bb9a59d599abdb139fa8c0e45a6bf10491cbdd984509cf67900ac9c81aee8d9f10e0dff23db87b20ce8c3893383944ca67fb539684c3d9ba07f127e44a8a7dc6579e5baa2fb579fcfba5d5a81ddfc713d37433a882b2898416648368f8c210e3a9a100f060b759411356da57d98abee042045f29a3389fa"}], 0x1f0}, 0x850) (async, rerun: 64)
r9 = socket(0x1, 0x803, 0x0) (rerun: 64)
r10 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$int_in(r10, 0x5452, &(0x7f0000000300)=0x80000000) (async)
listen(r10, 0x0)
sendmsg$RDMA_NLDEV_CMD_SYS_SET(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x18, 0x1407, 0x100, 0x70bd29, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x805}, 0x40094) (async)
r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1200000004000000040000001200000002000200", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000a80)={r11, &(0x7f0000000940), &(0x7f0000000a40)=@tcp6=r10}, 0x20) (async)
recvmmsg(r10, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)=""/52, 0x34}], 0x1}, 0xe}], 0x2, 0x0, 0x0) (async)
shutdown(r10, 0x1) (async)
getsockname$packet(r9, &(0x7f0000000500)={0x11, 0x0, <r12=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001400)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8, 0xa, r12}]}, 0x44}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x44800)

51.835043ms ago: executing program 0 (id=2804):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffe0}, {0xb, 0xffff}, {0x5, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x2000081) (async)
pipe(&(0x7f0000000000)={<r0=>0xffffffffffffffff})
read(r0, 0x0, 0x0) (async)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x35, 0x0, 0x0) (async)
sendto$inet6(r1, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (async)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000000)={0x3, {{0x2, 0x0, @multicast2}}}, 0x88) (async)
setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000001040)={0x3, {{0x2, 0x0, @multicast1}}}, 0x88) (async)
setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, &(0x7f00000007c0)=ANY=[@ANYBLOB="040000000000000002004e23e0"], 0x90) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=@newqdisc={0x70, 0x24, 0x200, 0xf0bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xfff1, 0xffe0}, {0xa, 0xe}, {0x10, 0xfff2}}, [@TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xff, 0x4, 0x7, 0x200, 0x0, 0x6159, 0x0, 0x1}}, {0x6, 0x2, [0x0]}}]}, @qdisc_kind_options=@q_pfifo={{0xa}, {0x8, 0x2, 0x6}}, @qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x70}}, 0x20004055)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0)
r3 = socket$kcm(0x10, 0x2, 0x0) (async)
r4 = socket$phonet_pipe(0x23, 0x5, 0x2)
setsockopt$PNPIPE_HANDLE(r4, 0x113, 0x3, &(0x7f0000004500)=0xa57, 0x4) (async)
recvmsg(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000001740)=""/4081, 0xff1}, {&(0x7f00000047c0)=""/4058, 0xfda}, {&(0x7f0000000180)=""/244, 0xf4}, {&(0x7f0000000c00)=""/131, 0x83}, {&(0x7f00000012c0)=""/68, 0x44}], 0x5}, 0x40000002) (async)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003e000b05d25a806c8c6f94f90224fc60100005", 0x17}], 0x1}, 0x0) (async)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'})
r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl(r5, 0x8b32, &(0x7f0000000040)) (async)
sendmsg$inet(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000fc0)=[{&(0x7f00000016c0)="4c00000012006bab9a3fe3d86e17aa0a046b4877c4aaf68187bae53dca2ba35bda6a876c1d0048007ea608649e7524765f0ef82e3c0000a705259a3658f60a84c9f4d4938037e70e4509c5bb", 0x4c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x20000000) (async)
syz_emit_ethernet(0x52, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd606410a6001c0000000000000000007e5000ffff00000000fe8000d1dfeb3b3619d460ee000000000000000000000000aa0400a6c756cdf9a157b64679a9"], 0x0) (async)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) (async)
r7 = socket$inet6_sctp(0xa, 0x1, 0x84)
ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000380)={r7, r0})
ioctl(r6, 0x8b2c, &(0x7f0000000040)) (async)
r8 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r8, &(0x7f00000002c0), 0x0, 0x800)

1.639172ms ago: executing program 2 (id=2805):
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r0 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@dev={0xac, 0x14, 0x14, 0x1a}, @loopback}, 0xc)
r1 = socket$netlink(0x10, 0x3, 0x0)
writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000380)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fdd411efc40800040000000000000000", 0x39}], 0x1)
writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000400)="390004001300034700bb5be1c3e4feff060000000000190004000400ad0002000000000000060488627df400f93132", 0x2f}], 0x1)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1801000001ffffeb00000000eb658e0d850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NBD_CMD_RECONFIGURE(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="c0000000", @ANYRES16=r4, @ANYBLOB="010025bd7000fcdbdf25030000000c0006000200000000000000080001"], 0xc0}}, 0xc0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x18)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f00000003c0)={'ip6gre0\x00', &(0x7f00000000c0)={'syztnl2\x00', 0x0, 0x4, 0x0, 0x0, 0xcbf, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @local, 0x8000, 0x8, 0x101, 0xd66}})
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x4, 0x5, 0x2, 0x4038a09, 0x4, @empty, @mcast2={0xff, 0x5}, 0x0, 0x0, 0x0, 0x5}})
sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f00000005c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000580)={&(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x48}, 0x1, 0x0, 0x0, 0x20008040}, 0x20004004)
r6 = socket$netlink(0x10, 0x3, 0x0)
r7 = socket$netlink(0x10, 0x3, 0xc)
r8 = socket$igmp(0x2, 0x3, 0x2)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000180)={'bond0\x00', <r9=>0x0})
r10 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r9}, 0x90)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000580)={r10, r9, 0x25, 0x2, @val=@tcx={@void, @value=r10}}, 0x1c)
bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="070000000400000008020000210000"], 0x50)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00'}, 0x18)
bind$netlink(r7, &(0x7f0000000040)={0x10, 0x0, 0x25dfdbfb, 0x20}, 0xc)
r11 = socket$nl_netfilter(0x10, 0x3, 0xc)
r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0200000004000000040000000600000000000000c716835557ec01aa646e96fd5fdb186ee19f94545de0ec73902545f221293bf870aee736ad5fbdcc0a37bdfa0c02af1cd1713a850f50c596cfc7db5933b3fd8f4709abed6fb42f54068315ba611db2322f632a05b16dd54c8e0ed65169b7d2b6fb298b396ed578cffc18f0e9201badeaaa5a2387a162798a71499c69cb4fdc511db32fbe020c02cbd6b1fdd7d59881df49f149a0927e366e2214f26a4f9f2295dec451b49da24e62a28c971ee207d907f7869ce6", @ANYRESDEC=r9, @ANYRES32, @ANYRES16=r6], 0x50)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0d00000004000000040000000000010000000000", @ANYRES32=r12, @ANYBLOB="00000000000000ff0f00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000300"/28], 0x48)
sendmsg$IPCTNL_MSG_CT_NEW(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="a800000000010904000500000000000002000000240001801400018008000100e000000108000200ac1e01010c00028005000100000009002400028014000180080001000000010908000200ac1e00010c000280050001000000000044000f800800014000000006080003400000002b080003400000000808000240000000400800014000000000fb0001400000000708000140000044f10800034000000003080007"], 0xa8}}, 0x0)
socket$netlink(0x10, 0x3, 0x0)
socketpair(0x1e, 0x2, 0x6, &(0x7f0000000480))

0s ago: executing program 0 (id=2806):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x402080, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r3 = socket(0x10, 0x803, 0x0)
r4 = socket(0x400000000010, 0x3, 0x0)
r5 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
r7 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000a00)=@newtfilter={0x48, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x8, 0x2}, {}, {0x7, 0xb}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_KEY_ENC_IPV6_DST={0x14, 0x21, @private2={0xfc, 0x2, '\x00', 0x1}}]}}]}, 0x48}}, 0x400c084)
r9 = socket$netlink(0x10, 0x3, 0x0)
r10 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_ADD_TX_TS(r3, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x2c, 0x0, 0x8, 0x70bd28, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2000000}, 0x44880)
sendmsg$IPVS_CMD_SET_INFO(r10, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, <r11=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r11, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0)
sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYRES8=r9, @ANYRES32=0x0, @ANYBLOB="00000000003f0000440012800b00010067656e6576650000340002800500030003000000060005004e20000005000400ab000000050009000100000005000a0001000000050009000100000008000a00", @ANYRES8=r1], 0x6c}, 0x1, 0x0, 0x0, 0x1}, 0x0)
sendto$packet(r10, &(0x7f0000000600)="61021105d4b2113b551661e8d830ea4c47a4b4f9721ad95810c8b1e1e49faeec6e32c6861211a80806cad33f2886cdbd27fe4d43d805ee1ca77cd6a8dd59304bd900cbe002385579bd15a9c0e0f5f1cde41a6af356f5abca05f3eb1e2f29aabe9fbaa5c28f6a5d55b9e2926aa968377aee590a7035e819bf8abee2f4607cfe41f5a166221753fcaf003d8678e241456c045387a3f466ea1a", 0x98, 0x8000, 0x0, 0x0)
r12 = socket(0x10, 0x803, 0x2)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r12)
getsockname$packet(r12, &(0x7f0000000100)={0x11, 0x0, <r13=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r13, @ANYBLOB="0100"], 0x3c}}, 0x0)
r14 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0)
ioctl$TUNSETIFF(r14, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
write$tun(r14, &(0x7f0000000440)=ANY=[@ANYBLOB="70000000ffffffffffffaaaaaaeaaabb08004500452c00000000002f9078ac1e0001e00000010000655800189078040000000000000088a8ffff00000000"], 0xfdef)
ioctl$TUNSETIFF(r14, 0x400454ca, &(0x7f0000000180)={'syz_tun\x00', 0x2})
r15 = socket$inet_sctp(0x2, 0x1, 0x84)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r15, 0x8933, &(0x7f0000000240))

kernel console output (not intermixed with test programs):

50][T13175] bond54: (slave bridge30): Enslaving as an active interface with an up link
[  249.008208][T13167] lo speed is unknown, defaulting to 1000
[  249.247407][T13192] wg1 speed is unknown, defaulting to 1000
[  249.250134][T13192] vxcan1 speed is unknown, defaulting to 1000
[  249.290409][T13189] netlink: 'syz.2.1772': attribute type 10 has an invalid length.
[  249.307324][T13189] batadv0: left promiscuous mode
[  249.310196][T13189] netlink: 'syz.2.1772': attribute type 10 has an invalid length.
[  249.315378][T13189] batadv0: entered promiscuous mode
[  249.317459][T13189] bridge23: port 1(batadv0) entered blocking state
[  249.325873][T13189] bridge23: port 1(batadv0) entered disabled state
[  249.727557][ T6422] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled
[  249.731237][ T6422] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled
[  249.756327][T13192] lo speed is unknown, defaulting to 1000
[  249.995462][T13209] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  250.005669][T13209] netlink: 'syz.0.1775': attribute type 1 has an invalid length.
[  250.036904][T13209] 8021q: adding VLAN 0 to HW filter on device bond61
[  250.422818][ T5236] Bluetooth: hci2: command 0x0405 tx timeout
[  250.536970][T13212] netlink: 'syz.2.1776': attribute type 10 has an invalid length.
[  250.568249][T13214] __nla_validate_parse: 8 callbacks suppressed
[  250.568269][T13214] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1777'.
[  250.575183][T13214] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1777'.
[  250.679184][T13216] veth41: entered promiscuous mode
[  250.879321][T13230] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1779'.
[  250.989725][T13236] netlink: 20824 bytes leftover after parsing attributes in process `syz.1.1780'.
[  251.025658][T13240] IPVS: set_ctl: invalid protocol: 115 172.20.20.170:20004
[  251.214128][T13248] netlink: 'syz.0.1783': attribute type 10 has an invalid length.
[  251.218820][T13248] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1783'.
[  251.287324][T13259] netlink: 'syz.0.1787': attribute type 1 has an invalid length.
[  251.303475][T13257] netlink: 'syz.2.1786': attribute type 1 has an invalid length.
[  251.327643][T13259] 8021q: adding VLAN 0 to HW filter on device bond62
[  251.357979][T13259] veth29: entered promiscuous mode
[  251.361754][T13259] bond62: (slave veth29): Enslaving as an active interface with an up link
[  251.382799][T13263] netlink: 'syz.0.1787': attribute type 1 has an invalid length.
[  251.530898][T13278] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1791'.
[  251.543965][T13278] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1791'.
[  251.548803][T13275] vlan6: entered promiscuous mode
[  251.550525][T13275] bridge0: entered promiscuous mode
[  251.559543][ T1090] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  251.562086][ T1090] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  251.690281][T13291] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1794'.
[  251.724029][T13287] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1793'.
[  251.788006][T13290] wg1 speed is unknown, defaulting to 1000
[  251.790971][T13290] vxcan1 speed is unknown, defaulting to 1000
[  251.835131][T13300] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1797'.
[  251.857191][T13300] 8021q: adding VLAN 0 to HW filter on device bond55
[  251.886905][T13300] macvlan5: entered promiscuous mode
[  251.888974][T13300] macvlan5: entered allmulticast mode
[  251.891622][T13300] bond55: entered promiscuous mode
[  251.898771][T13300] 8021q: adding VLAN 0 to HW filter on device macvlan5
[  251.917682][T13300] bond55: left promiscuous mode
[  251.946797][T13290] lo speed is unknown, defaulting to 1000
[  252.097310][T13312] wg1 speed is unknown, defaulting to 1000
[  252.103921][T13315] geneve6: entered promiscuous mode
[  252.106023][T13315] geneve6: entered allmulticast mode
[  252.109216][ T6422] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  252.112032][ T6422] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  252.114052][T13315] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input6
[  252.118499][T13312] vxcan1 speed is unknown, defaulting to 1000
[  252.122375][ T6422] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  252.126122][ T6422] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  252.153618][T13315] IPVS: set_ctl: invalid protocol: 135 100.1.1.0:20002
[  252.206246][T13321] netlink: 'syz.2.1802': attribute type 1 has an invalid length.
[  252.231362][T13321] 8021q: adding VLAN 0 to HW filter on device bond56
[  252.259407][T13322] bond56: (slave veth43): Enslaving as an active interface with a down link
[  252.395658][T13312] lo speed is unknown, defaulting to 1000
[  253.056497][T13347] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[  253.197267][T13360] bond57: (slave bridge0): Releasing active interface
[  253.549955][T13380] wg1 speed is unknown, defaulting to 1000
[  253.558711][T13380] vxcan1 speed is unknown, defaulting to 1000
[  253.779359][T13380] lo speed is unknown, defaulting to 1000
[  254.160652][T13388] netlink: 'syz.0.1816': attribute type 10 has an invalid length.
[  254.231274][T13390] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  254.564633][T13406] tipc: Resetting bearer <eth:syzkaller0>
[  254.630380][T13406] mac80211_hwsim hwsim7 wlan1: left promiscuous mode
[  254.744499][ T6422] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  254.749862][ T6422] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  254.763193][ T6422] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  254.766510][ T6422] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  254.930529][T13423] netlink: 'syz.1.1824': attribute type 10 has an invalid length.
[  254.940330][T13423] bridge29: port 2(0!) entered blocking state
[  254.943339][T13423] bridge29: port 2(0!) entered disabled state
[  254.946594][T13423] !: entered allmulticast mode
[  255.118039][T13429] netlink: 'syz.2.1826': attribute type 20 has an invalid length.
[  255.121162][T13429] netlink: 'syz.2.1826': attribute type 21 has an invalid length.
[  255.429405][T13438] wg1 speed is unknown, defaulting to 1000
[  255.441427][T13438] vxcan1 speed is unknown, defaulting to 1000
[  255.510499][T13445] : entered promiscuous mode
[  255.551185][T13447] netlink: 'syz.1.1831': attribute type 10 has an invalid length.
[  255.554403][T13447] !: left allmulticast mode
[  255.560693][T13447] bridge29: port 2(0!) entered disabled state
[  255.564347][T13449] netlink: 'syz.1.1831': attribute type 10 has an invalid length.
[  255.612796][T13438] lo speed is unknown, defaulting to 1000
[  255.635423][T13449] bridge29: port 2(0!) entered blocking state
[  255.637628][T13449] bridge29: port 2(0!) entered disabled state
[  255.639752][T13449] !: entered allmulticast mode
[  255.688376][T13458] __nla_validate_parse: 11 callbacks suppressed
[  255.688387][T13458] netlink: 84 bytes leftover after parsing attributes in process `syz.1.1833'.
[  255.696697][T13454] wg1 speed is unknown, defaulting to 1000
[  255.699417][T13454] vxcan1 speed is unknown, defaulting to 1000
[  255.761636][T13460] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1834'.
[  255.911089][T13468] netlink: 'syz.1.1836': attribute type 10 has an invalid length.
[  255.940563][T13454] lo speed is unknown, defaulting to 1000
[  255.945809][T13468] netlink: 'syz.1.1836': attribute type 10 has an invalid length.
[  255.970926][T13468] bridge29: port 1(syz_tun) entered disabled state
[  255.987269][T13468] bond13: option mode: unable to set because the bond device is up
[  255.991619][T13468] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1836'.
[  256.003851][T13471] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1837'.
[  256.018712][T13468] bond13: (slave macvlan0): Enslaving as a backup interface with a down link
[  256.296698][T13473] syzkaller1: entered promiscuous mode
[  256.298502][T13473] syzkaller1: entered allmulticast mode
[  256.479721][T13482] A link change request failed with some changes committed already. Interface veth1_vlan may have been left with an inconsistent configuration, please check.
[  256.644977][T13487] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1842'.
[  256.779985][T13488] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1843'.
[  256.804975][T13488] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  256.815322][T13488] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1843'.
[  256.896777][T13500] 8021q: VLANs not supported on caif0
[  256.900799][T13498] bond13: option mode: unable to set because the bond device has slaves
[  256.941611][T13502] netlink: 'syz.2.1847': attribute type 1 has an invalid length.
[  256.975716][T13502] 8021q: adding VLAN 0 to HW filter on device bond57
[  256.996433][T13498] bond13: (slave macvlan1): Error -98 calling set_mac_address
[  257.014738][T13507] netlink: 'syz.0.1848': attribute type 13 has an invalid length.
[  257.017634][T13507] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1848'.
[  257.019812][T13509] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1849'.
[  257.021007][T13507] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1848'.
[  257.144790][T13509] wg1 speed is unknown, defaulting to 1000
[  257.148452][T13509] vxcan1 speed is unknown, defaulting to 1000
[  257.194557][T13519] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  257.259598][T13519] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  257.318954][T13519] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  257.367156][T13519] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  257.412391][T13509] lo speed is unknown, defaulting to 1000
[  257.480885][ T5876] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 20000 - 0
[  257.495222][ T7078] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 20000 - 0
[  257.519746][ T7078] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 20000 - 0
[  257.540390][ T5875] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 20000 - 0
[  257.870628][T13543] 8021q: adding VLAN 0 to HW filter on device bond59
[  257.910495][T13546] veth17: entered promiscuous mode
[  257.919368][T13546] bond59: (slave veth17): Enslaving as an active interface with an up link
[  258.456799][T13571] wg1 speed is unknown, defaulting to 1000
[  258.460515][T13571] vxcan1 speed is unknown, defaulting to 1000
[  258.470386][T13573] batadv0 (unregistering): left promiscuous mode
[  258.472503][T13573] bridge23: port 1(batadv0) entered disabled state
[  258.605947][T13571] lo speed is unknown, defaulting to 1000
[  258.629476][T13576] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  259.334389][T13611] wg1 speed is unknown, defaulting to 1000
[  259.338064][T13611] vxcan1 speed is unknown, defaulting to 1000
[  259.629643][T13623] nbd: nbd0 already in use
[  259.659626][T13623] block nbd0: NBD_DISCONNECT
[  259.663112][T13623] block nbd0: Send disconnect failed -107
[  259.799687][T13618] 8021q: adding VLAN 0 to HW filter on device bond64
[  259.813078][T13611] lo speed is unknown, defaulting to 1000
[  259.924753][T13626] bond65: entered promiscuous mode
[  259.926952][T13626] bond65: entered allmulticast mode
[  259.940190][T13626] 8021q: adding VLAN 0 to HW filter on device bond65
[  260.130744][T13638] validate_nla: 4 callbacks suppressed
[  260.130759][T13638] netlink: 'syz.1.1879': attribute type 1 has an invalid length.
[  260.541837][T13662] smc: removing ib device syz2
[  261.141010][T13696] netlink: 'syz.0.1888': attribute type 1 has an invalid length.
[  261.321894][T13696] 8021q: adding VLAN 0 to HW filter on device bond66
[  261.480697][T13687] wg1 speed is unknown, defaulting to 1000
[  261.504774][T13687] lo speed is unknown, defaulting to 1000
[  261.551130][T13709] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  261.676422][T13710] __nla_validate_parse: 16 callbacks suppressed
[  261.676437][T13710] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1889'.
[  261.743042][T13709] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1889'.
[  262.011883][T13721] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1891'.
[  262.086517][T13721] macvtap1: entered promiscuous mode
[  262.088587][T13721] mac80211_hwsim hwsim5 wlan1: entered promiscuous mode
[  262.167497][T13727] netlink: 'syz.0.1893': attribute type 10 has an invalid length.
[  262.217488][T13725] netlink: 'syz.1.1892': attribute type 2 has an invalid length.
[  262.226453][T13725] syzkaller0 speed is unknown, defaulting to 1000
[  262.235249][T13725] syzkaller0 speed is unknown, defaulting to 1000
[  262.260927][T13725] syzkaller0 speed is unknown, defaulting to 1000
[  262.302375][T13725] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  262.317448][T13731] bridge16: entered promiscuous mode
[  262.321481][T13731] bridge16: entered allmulticast mode
[  262.346291][T13725] syzkaller0 speed is unknown, defaulting to 1000
[  262.366880][T13725] syzkaller0 speed is unknown, defaulting to 1000
[  262.375398][T13725] syzkaller0 speed is unknown, defaulting to 1000
[  262.404437][T13734] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1894'.
[  262.481666][T13738] netlink: 'syz.1.1895': attribute type 1 has an invalid length.
[  262.567010][T13738] workqueue: Failed to create a rescuer kthread for wq "bond60": -EINTR
[  262.729480][T13753] wg1 speed is unknown, defaulting to 1000
[  262.755754][T13753] lo speed is unknown, defaulting to 1000
[  262.822053][T13759] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1899'.
[  262.877881][T13765] netlink: 'syz.0.1899': attribute type 1 has an invalid length.
[  262.885153][T13763] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1900'.
[  263.043993][T13761] netlink: 'syz.0.1899': attribute type 1 has an invalid length.
[  263.066539][T13767] pim6reg: entered allmulticast mode
[  263.140919][T13757] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1898'.
[  263.174140][T13757] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1898'.
[  263.209015][T13753] syzkaller0 speed is unknown, defaulting to 1000
[  263.547065][T13795] netlink: 'syz.1.1904': attribute type 1 has an invalid length.
[  263.605291][T13795] bond60: entered promiscuous mode
[  263.607832][T13795] 8021q: adding VLAN 0 to HW filter on device bond60
[  263.718008][T13800] netlink: 'syz.0.1905': attribute type 1 has an invalid length.
[  263.723071][T13795] bond60: (slave bridge0): making interface the new active one
[  263.726138][T13795] bridge0: entered promiscuous mode
[  263.729333][T13795] bond60: (slave bridge0): Enslaving as an active interface with an up link
[  263.827058][T13800] vlan0: entered allmulticast mode
[  263.828740][T13800] bond67: entered allmulticast mode
[  263.939899][T13813] netlink: 'syz.1.1908': attribute type 1 has an invalid length.
[  263.981873][T13813] bond61: entered promiscuous mode
[  263.984076][T13813] bond61: entered allmulticast mode
[  263.990087][T13813] 8021q: adding VLAN 0 to HW filter on device bond61
[  264.005824][T13813] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1908'.
[  264.010796][T13813] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1908'.
[  264.099464][T13813] bond0: left promiscuous mode
[  264.159249][   T47] lo speed is unknown, defaulting to 1000
[  264.161231][   T47] syz1: Port: 1 Link DOWN
[  264.447497][T13844] bond58: entered promiscuous mode
[  264.449614][T13844] bond58: entered allmulticast mode
[  264.452061][T13844] 8021q: adding VLAN 0 to HW filter on device bond58
[  264.502288][T13848] pimreg: left allmulticast mode
[  264.537544][T13850] syz_tun: left allmulticast mode
[  264.539718][T13850] syz_tun: left promiscuous mode
[  264.542024][T13850] bridge29: port 1(syz_tun) entered disabled state
[  264.550489][T13850] !: left allmulticast mode
[  264.554702][T13850] bridge29: port 2(0!) entered disabled state
[  264.559365][T13851] rdma_rxe: rxe_newlink: failed to add lo
[  264.562187][T13850] bond35: (slave bridge19): Removing an active aggregator
[  264.567466][T13850] bond35: (slave bridge19): Releasing backup interface
[  264.570222][T13850] bridge19: left promiscuous mode
[  264.572133][T13850] bridge19: left allmulticast mode
[  264.576581][T13850] bond40: (slave bridge22): Releasing active interface
[  264.580664][T13850] bond48: (slave bridge32): Releasing active interface
[  264.586046][T13850] bond53: (slave bridge34): Releasing active interface
[  264.589848][T13850] bond54: (slave veth13): Releasing active interface
[  264.595913][T13850] bond55: (slave veth15): Releasing active interface
[  264.599636][T13850] bond58: (slave bridge36): Releasing active interface
[  264.607715][T13850] bond13: (slave macvlan0): Releasing backup interface
[  264.613728][T13850] bond59: (slave veth17): Releasing backup interface
[  264.619296][T13850] bond60: (slave bridge0): Releasing backup interface
[  264.621993][T13850] bridge0: left promiscuous mode
[  264.650847][T13850] A link change request failed with some changes committed already. Interface veth0_to_bond may have been left with an inconsistent configuration, please check.
[  265.096518][   T55] Bluetooth: hci2: link tx timeout
[  265.103922][   T55] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  265.116792][ T5236] Bluetooth: hci2: link tx timeout
[  265.118621][ T5236] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  265.123345][T13883] RDS: rds_bind could not find a transport for ::ffff:172.30.1.2, load rds_tcp or rds_rdma?
[  265.174627][ T5236] Bluetooth: hci2: link tx timeout
[  265.176306][ T5236] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  265.206250][ T5236] Bluetooth: hci2: link tx timeout
[  265.208337][ T5236] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  265.307204][T13892] netlink: 'syz.0.1929': attribute type 4 has an invalid length.
[  265.322924][T13892] netlink: 'syz.0.1929': attribute type 4 has an invalid length.
[  265.406285][T13898] netlink: 'syz.2.1930': attribute type 8 has an invalid length.
[  265.454936][T13898] openvswitch: netlink: Unexpected mask (mask=40040, allowed=10048)
[  265.458520][ T5236] Bluetooth: hci2: link tx timeout
[  265.460525][ T5236] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  265.523518][T13903] netlink: 'syz.0.1931': attribute type 11 has an invalid length.
[  265.559704][T13906] netlink: 'syz.2.1932': attribute type 10 has an invalid length.
[  265.592733][T13906] netlink: 'syz.2.1932': attribute type 10 has an invalid length.
[  265.601118][T13908] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  265.731838][T13917] bond20: (slave macvlan5): Enslaving as an active interface with a down link
[  265.801030][T13922] 8021q: adding VLAN 0 to HW filter on device bond68
[  265.837915][T13916] macsec1: entered promiscuous mode
[  265.840103][T13916] bond68: entered promiscuous mode
[  265.853033][T13916] macsec1: entered allmulticast mode
[  265.854775][T13916] bond68: entered allmulticast mode
[  265.859687][T13916] bond68: left allmulticast mode
[  265.861516][T13916] bond68: left promiscuous mode
[  265.956559][T13929] siw: device registration error -23
[  265.996435][T13931] netlink: 'syz.1.1938': attribute type 1 has an invalid length.
[  266.152376][T13937] netlink: 'syz.0.1939': attribute type 1 has an invalid length.
[  266.194822][T13937] 8021q: adding VLAN 0 to HW filter on device bond69
[  266.199510][ T5236] Bluetooth: hci2: link tx timeout
[  266.201764][ T5236] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  266.252531][T13937] veth31: entered promiscuous mode
[  266.256735][T13937] bond69: (slave veth31): Enslaving as an active interface with a down link
[  266.267193][T13948] pim6reg99999999: entered allmulticast mode
[  266.358154][T13954] netlink: 'syz.0.1945': attribute type 19 has an invalid length.
[  266.551825][T13968] siw: device registration error -23
[  266.729524][ T5236] Bluetooth: hci2: link tx timeout
[  266.731586][ T5236] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  266.757414][T13983] netdevsim0: entered allmulticast mode
[  266.763244][T13983] netdevsim0: refused to change device tx_queue_len
[  267.154243][ T5236] Bluetooth: hci2: command 0x0405 tx timeout
[  267.198621][T13988] netlink: 'syz.2.1951': attribute type 1 has an invalid length.
[  267.229261][T13988] 8021q: adding VLAN 0 to HW filter on device bond59
[  267.268430][T13988] veth1: entered promiscuous mode
[  267.274676][T13988] erspan0: entered allmulticast mode
[  267.280421][T13988] bond59: (slave erspan0): making interface the new active one
[  267.286234][T13988] bond59: (slave erspan0): Enslaving as an active interface with an up link
[  267.546799][T13991] __nla_validate_parse: 25 callbacks suppressed
[  267.546848][T13991] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1953'.
[  267.559318][T13991] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1953'.
[  267.577165][T13991] gretap5: entered promiscuous mode
[  267.579184][T13991] gretap5: entered allmulticast mode
[  267.591312][T13995] syzkaller0: left promiscuous mode
[  267.594048][T13995] syzkaller0: left allmulticast mode
[  267.596546][T13995] tipc: Resetting bearer <eth:syzkaller0>
[  267.776043][T14005] (: entered promiscuous mode
[  268.066876][T14007] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0
[  268.097647][T14007] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1957'.
[  268.175714][T14013] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1958'.
[  268.179456][T14013] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1958'.
[  268.234123][T14017] IPVS: set_ctl: invalid protocol: 44 10.1.1.1:20003
[  268.308170][T14021] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1961'.
[  268.399930][T14019] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1960'.
[  268.600457][T14037] wg1 speed is unknown, defaulting to 1000
[  268.604250][T14037] lo speed is unknown, defaulting to 1000
[  268.667500][T14046] vlan1: entered allmulticast mode
[  268.669610][T14046] bond62: entered allmulticast mode
[  268.756157][T14055] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  268.765201][T14055] tipc: Enabled bearer <udp:syz2>, priority 10
[  268.807298][T14059] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1966'.
[  268.817086][T14059] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1966'.
[  268.849071][T14059] 8021q: adding VLAN 0 to HW filter on device bond63
[  268.874467][T14048] 8021q: adding VLAN 0 to HW filter on device bond72
[  268.879797][T14037] syzkaller0 speed is unknown, defaulting to 1000
[  268.888303][T14059] macvlan1: entered promiscuous mode
[  268.890467][T14059] macvlan1: entered allmulticast mode
[  268.893134][    C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  268.897544][T14059] bond63: entered promiscuous mode
[  268.899766][T14059] 8021q: adding VLAN 0 to HW filter on device macvlan1
[  268.904975][T14059] bond63: left promiscuous mode
[  269.096070][T14069] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1968'.
[  269.162787][    C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  269.454909][T14090] workqueue: Failed to create a rescuer kthread for wq "bond60": -EINTR
[  269.654908][T14109] RDS: rds_bind could not find a transport for ::ffff:172.30.1.2, load rds_tcp or rds_rdma?
[  269.692946][    C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  269.890126][T14117] erspan0: left allmulticast mode
[  269.907864][T14117] 8021q: adding VLAN 0 to HW filter on device team0
[  269.912362][T14117] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  269.933055][T14117] RDS: rds_bind could not find a transport for ::ffff:10.1.1.0, load rds_tcp or rds_rdma?
[  269.973353][T14120] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  269.988348][T14119] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  269.994677][   T47] lo speed is unknown, defaulting to 1000
[  269.996437][   T47] syz1: Port: 1 Link ACTIVE
[  270.010496][T14117] bond59: (slave erspan0): Releasing active interface
[  270.019362][T14117] tipc: Resetting bearer <eth:syzkaller0>
[  270.026631][T14117] bond54: (slave bridge30): Releasing active interface
[  270.035070][T14117] bond56: (slave veth43): Releasing active interface
[  270.040369][T14117] bond20: (slave macvlan5): Releasing active interface
[  270.060212][T14126] A link change request failed with some changes committed already. Interface veth1_vlan may have been left with an inconsistent configuration, please check.
[  270.389063][T14151] validate_nla: 13 callbacks suppressed
[  270.389079][T14151] netlink: 'syz.1.1990': attribute type 1 has an invalid length.
[  270.407082][T14153] netlink: 'syz.0.1991': attribute type 6 has an invalid length.
[  270.428772][T14151] 8021q: adding VLAN 0 to HW filter on device bond64
[  270.449754][T14151] bond64: (slave veth25): Enslaving as an active interface with a down link
[  270.467776][T14151] macvlan1: entered promiscuous mode
[  270.469817][T14151] macvlan1: entered allmulticast mode
[  270.472402][T14151] bond64: entered promiscuous mode
[  270.474778][T14151] 8021q: adding VLAN 0 to HW filter on device macvlan1
[  270.477769][T14151] bond64: (slave macvlan1): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  270.492188][T14151] bond64: left promiscuous mode
[  270.561252][T14159] openvswitch: netlink: IPv4 tunnel dst address is zero
[  270.567557][T14159] netlink: 'syz.0.1993': attribute type 13 has an invalid length.
[  270.575268][T14159] netlink: 'syz.0.1993': attribute type 17 has an invalid length.
[  270.580799][T14159] netdevsim0: left allmulticast mode
[  270.591725][T14159] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  270.620673][T14162] dvmrp1: entered allmulticast mode
[  270.626444][T14162] dvmrp1: left allmulticast mode
[  270.798138][T14171] netlink: 'syz.0.1997': attribute type 1 has an invalid length.
[  270.826287][T14171] bond73: entered promiscuous mode
[  270.828788][T14171] 8021q: adding VLAN 0 to HW filter on device bond73
[  270.899908][T14171] 8021q: adding VLAN 0 to HW filter on device bond74
[  270.915714][T14171] bond73: (slave bond74): making interface the new active one
[  270.918811][T14171] bond74: entered promiscuous mode
[  270.922132][T14171] bond73: (slave bond74): Enslaving as an active interface with an up link
[  271.183933][T14191] 8021q: adding VLAN 0 to HW filter on device batadv0
[  271.187952][T14191] team0: Failed to send port change of device batadv0 via netlink (err -105)
[  271.193110][T14191] team0: Failed to send options change via netlink (err -105)
[  271.196228][T14191] team0: Port device batadv0 added
[  271.246756][T14196] wg1 speed is unknown, defaulting to 1000
[  271.250761][T14196] lo speed is unknown, defaulting to 1000
[  271.434609][T14196] syzkaller0 speed is unknown, defaulting to 1000
[  271.542771][T14201] netlink: 'syz.2.2003': attribute type 2 has an invalid length.
[  271.637798][T14205] netlink: 'syz.0.2004': attribute type 1 has an invalid length.
[  271.847409][T14218] netlink: 'syz.0.2005': attribute type 1 has an invalid length.
[  271.922791][T14221] netlink: 'syz.2.2007': attribute type 10 has an invalid length.
[  271.927864][T14221] team0: Port device geneve0 added
[  271.930191][T14221] netlink: 'syz.2.2007': attribute type 10 has an invalid length.
[  271.933907][ T5875] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  271.940690][ T5875] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  271.943832][ T5875] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  271.946363][ T5875] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  271.951351][ T6422] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  271.963527][ T6422] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  271.966223][ T6422] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  271.973082][ T6422] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  272.052351][T14227] 8021q: adding VLAN 0 to HW filter on device bond65
[  272.069953][T14227] vlan1: entered allmulticast mode
[  272.166756][T14232] 8021q: adding VLAN 0 to HW filter on device bond60
[  272.193536][T14232] vlan6: entered allmulticast mode
[  272.195201][T14232] batadv0: entered allmulticast mode
[  272.217058][T14239] bridge29: entered allmulticast mode
[  272.578581][T14259] 8021q: adding VLAN 0 to HW filter on device bond76
[  272.597234][T14259] vlan0: entered allmulticast mode
[  272.600179][T14259] bond76: (slave vlan0): Opening slave failed
[  272.711178][T14262] can: request_module (can-proto-0) failed.
[  273.050447][T14276] __nla_validate_parse: 54 callbacks suppressed
[  273.050463][T14276] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2025'.
[  273.071633][T14278] wg1 speed is unknown, defaulting to 1000
[  273.081103][T14278] lo speed is unknown, defaulting to 1000
[  273.140365][T14280] netlink: 3 bytes leftover after parsing attributes in process `syz.2.2026'.
[  273.188809][T14282] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2027'.
[  273.279104][T14282] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2027'.
[  273.282405][T14282] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2027'.
[  273.286152][T14282] bridge: RTM_NEWNEIGH with invalid state 0x2c
[  273.289361][T14278] syzkaller0 speed is unknown, defaulting to 1000
[  273.292454][  T963] smc: removing ib device syz!
[  273.454415][T14290] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2028'.
[  273.862631][    C1] net_ratelimit: 4 callbacks suppressed
[  273.862648][    C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  273.978926][T14309] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2033'.
[  274.126582][T14309] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2033'.
[  274.182976][T14325] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2033'.
[  274.369854][T14334] bond61: (slave bridge23): making interface the new active one
[  274.386169][T14334] bond61: (slave bridge23): Enslaving as an active interface with an up link
[  274.549705][ T5910] IPVS: starting estimator thread 0...
[  274.608802][T14354] bond63: (slave bridge32): making interface the new active one
[  274.612536][T14354] bond63: (slave bridge32): Enslaving as an active interface with an up link
[  274.643518][T14355] IPVS: using max 64 ests per chain, 153600 per kthread
[  274.676560][T14362] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2041'.
[  274.799470][T14368] 8021q: adding VLAN 0 to HW filter on device bond64
[  274.817439][T14368] bond64: entered promiscuous mode
[  274.819360][T14368] bond64: entered allmulticast mode
[  274.849717][T14371] tipc: Enabled bearer <ib:caif0>, priority 14
[  274.902883][    C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  275.507478][T14395] validate_nla: 47 callbacks suppressed
[  275.507492][T14395] netlink: 'syz.0.2049': attribute type 1 has an invalid length.
[  275.571479][T14395] 8021q: adding VLAN 0 to HW filter on device bond78
[  275.580084][T14389] bond78: (slave wlan0): Enslaving as an active interface with a down link
[  275.732413][T14404] netlink: 'syz.0.2052': attribute type 13 has an invalid length.
[  275.739329][T14404] netlink: 'syz.0.2052': attribute type 17 has an invalid length.
[  275.747982][T14404] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  275.878900][T14413] netlink: 'syz.2.2053': attribute type 1 has an invalid length.
[  275.942626][    C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  276.057897][T14427] wg1 speed is unknown, defaulting to 1000
[  276.085347][T14427] lo speed is unknown, defaulting to 1000
[  276.088956][T14427] syzkaller0 speed is unknown, defaulting to 1000
[  276.195760][T14438] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  276.251291][T14438] netlink: 'syz.0.2058': attribute type 1 has an invalid length.
[  276.262691][T14438] netlink: 'syz.0.2058': attribute type 2 has an invalid length.
[  276.396324][T14452] netlink: 'syz.2.2061': attribute type 7 has an invalid length.
[  276.399077][T14452] netlink: 'syz.2.2061': attribute type 8 has an invalid length.
[  276.765553][T14501] netlink: 'syz.0.2070': attribute type 1 has an invalid length.
[  276.781803][T14501] 8021q: adding VLAN 0 to HW filter on device bond79
[  276.791230][T14502] bridge38: entered promiscuous mode
[  276.793878][T14502] bridge38: entered allmulticast mode
[  276.982662][    C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  277.015571][T14511] mac80211_hwsim hwsim2 syzkaller0: entered allmulticast mode
[  277.189426][T14506] mac80211_hwsim hwsim2 syzkaller0: left allmulticast mode
[  277.230909][T14519] netlink: 'syz.1.2073': attribute type 83 has an invalid length.
[  277.473138][   T13] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  277.476526][   T13] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  277.480704][   T13] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  277.486662][   T13] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  278.022724][    C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  278.111845][T14559] __nla_validate_parse: 16 callbacks suppressed
[  278.111861][T14559] netlink: 1284 bytes leftover after parsing attributes in process `syz.2.2082'.
[  278.125688][T14559] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2082'.
[  278.131685][T14559] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2082'.
[  278.202300][T14565] 8021q: adding VLAN 0 to HW filter on device bond80
[  278.432915][T14574] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2087'.
[  278.474585][T14579] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2088'.
[  278.535766][T14584] bridge0: failed insert local address into bridge forwarding table
[  278.538424][T14584] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2089'.
[  278.820253][T14591] wg1 speed is unknown, defaulting to 1000
[  278.834188][T14591] lo speed is unknown, defaulting to 1000
[  278.841038][T14591] syzkaller0 speed is unknown, defaulting to 1000
[  278.905800][T14594] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2092'.
[  279.072760][    C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  279.074476][T14602] bridge20: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  279.106239][T14607] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2094'.
[  279.121516][T14607] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2094'.
[  279.163189][T14610] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2095'.
[  279.184817][T14613] bond66: (slave vxcan1): The slave device specified does not support setting the MAC address
[  279.188918][T14613] bond66: (slave vxcan1): Error -95 calling set_mac_address
[  279.334902][T14629] bond67: entered promiscuous mode
[  279.337415][T14629] 8021q: adding VLAN 0 to HW filter on device bond67
[  279.360425][T14632] 8021q: adding VLAN 0 to HW filter on device bond82
[  279.372309][T14626] vlan0: entered allmulticast mode
[  279.374964][T14626] bond82: (slave vlan0): Opening slave failed
[  279.505203][T14640] batadv_slave_1: entered promiscuous mode
[  279.574295][T14639] batadv_slave_1: left promiscuous mode
[  280.102917][    C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  280.280523][T14700] bridge21: entered allmulticast mode
[  280.346219][T14703] vlan0: entered allmulticast mode
[  280.348442][T14703] bridge0: entered allmulticast mode
[  280.350717][T14703] bridge22: port 1(vlan0) entered blocking state
[  280.356663][T14703] bridge22: port 1(vlan0) entered disabled state
[  280.361185][T14703] vlan0: entered promiscuous mode
[  280.798115][T14738] syzkaller1: entered promiscuous mode
[  280.800278][T14738] syzkaller1: entered allmulticast mode
[  281.138365][T14759] tap0: tun_chr_ioctl cmd 1074025676
[  281.140525][T14759] tap0: owner set to 0
[  281.153268][    C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  281.178754][T14762] IPVS: set_ctl: invalid protocol: 60 10.1.1.2:20000
[  281.230220][T14753] batadv_slave_0: left promiscuous mode
[  281.234259][T14753] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  281.288151][T14768] validate_nla: 15 callbacks suppressed
[  281.288162][T14768] netlink: 'syz.2.2125': attribute type 1 has an invalid length.
[  281.318885][T14770] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  281.332178][T14770] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  281.339369][T14771] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  281.396797][T14779] netlink: 'syz.2.2128': attribute type 2 has an invalid length.
[  281.406543][T14779] : entered promiscuous mode
[  281.500686][T14788] netlink: 'syz.0.2131': attribute type 19 has an invalid length.
[  281.533765][T14791] team0: Port device geneve0 removed
[  281.535322][T14793] netlink: 'syz.0.2133': attribute type 1 has an invalid length.
[  281.536454][T14791] tipc: Resetting bearer <eth:syzkaller0>
[  281.553408][T14791] team0: Port device batadv0 removed
[  281.556766][T14791] bond61: (slave bridge23): Releasing active interface
[  281.564070][T14791] bond63: (slave bridge32): Releasing active interface
[  281.606234][T14793] 8021q: adding VLAN 0 to HW filter on device bond84
[  281.620098][T14791] netlink: 'syz.2.2132': attribute type 10 has an invalid length.
[  281.638570][T14796] 8021q: adding VLAN 0 to HW filter on device bond84
[  281.641544][T14796] bond84: (slave vxcan9): The slave device specified does not support setting the MAC address
[  281.646493][T14796] bond84: (slave vxcan9): Error -95 calling set_mac_address
[  281.656193][T14791] mac80211_hwsim hwsim7 wlan1: left allmulticast mode
[  281.667330][T14793] veth35: entered promiscuous mode
[  281.671867][T14793] bond84: (slave veth35): Enslaving as an active interface with a down link
[  281.678860][T14791] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  281.682213][T14791] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  281.689062][ T4972] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  281.691675][ T4972] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  281.723067][ T5876] bond78: (slave wlan0): failed to get link speed/duplex
[  281.795745][T14800] netlink: 'syz.0.2134': attribute type 1 has an invalid length.
[  281.842987][   T13] bond78: (slave wlan0): failed to get link speed/duplex
[  281.954691][   T13] bond78: (slave wlan0): failed to get link speed/duplex
[  282.002869][T14811] wg1 speed is unknown, defaulting to 1000
[  282.006732][T14811] lo speed is unknown, defaulting to 1000
[  282.010522][T14811] syzkaller0 speed is unknown, defaulting to 1000
[  282.259769][T14816] bond5: option mode: unable to set because the bond device has slaves
[  282.319337][T14818] dvmrp1: entered allmulticast mode
[  282.322128][T14818] dvmrp1: left allmulticast mode
[  282.453103][T14828] netlink: 'syz.2.2140': attribute type 1 has an invalid length.
[  282.485804][T14828] 8021q: adding VLAN 0 to HW filter on device bond67
[  282.875876][T14852] netlink: 'syz.0.2146': attribute type 1 has an invalid length.
[  282.898884][T14852] 8021q: adding VLAN 0 to HW filter on device bond86
[  282.926378][T14852] 8021q: adding VLAN 0 to HW filter on device bond86
[  282.929321][T14852] bond86: (slave vxcan9): The slave device specified does not support setting the MAC address
[  282.935274][T14852] bond86: (slave vxcan9): Error -95 calling set_mac_address
[  282.943461][T14856] netlink: 'syz.1.2148': attribute type 2 has an invalid length.
[  283.212371][T14869] __nla_validate_parse: 17 callbacks suppressed
[  283.212388][T14869] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2150'.
[  283.221437][T14869] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2150'.
[  283.231736][ T5876] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  283.235215][T14869] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2150'.
[  283.238043][ T5876] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  283.240615][ T5876] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  283.243522][T14869] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2150'.
[  283.246767][ T5876] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  283.341691][T14878] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2154'.
[  283.347072][T14882] pim6reg1: entered promiscuous mode
[  283.348792][T14882] pim6reg1: entered allmulticast mode
[  283.418777][T14890] netlink: 'syz.2.2156': attribute type 1 has an invalid length.
[  283.465592][T14890] 8021q: adding VLAN 0 to HW filter on device bond68
[  283.549975][T14901] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2158'.
[  283.581411][T14901] 8021q: adding VLAN 0 to HW filter on device bond87
[  283.811330][T14907] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2160'.
[  283.966511][T14930] netlink: 3 bytes leftover after parsing attributes in process `syz.2.2163'.
[  283.976057][T14930] batadv3: entered promiscuous mode
[  283.977878][T14930] batadv3: entered allmulticast mode
[  284.044465][T14933] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2165'.
[  284.083285][   T13] net_ratelimit: 21 callbacks suppressed
[  284.083299][   T13] bond78: (slave wlan0): failed to get link speed/duplex
[  284.128068][T14937] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2166'.
[  284.164633][T14937] veth45: entered promiscuous mode
[  284.193311][   T13] bond78: (slave wlan0): failed to get link speed/duplex
[  284.272853][    C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  284.286209][T14942] bridge0: entered allmulticast mode
[  284.334809][   T13] bond78: (slave wlan0): failed to get link speed/duplex
[  284.435583][T14954] wg1 speed is unknown, defaulting to 1000
[  284.438309][T14954] lo speed is unknown, defaulting to 1000
[  284.441480][T14954] syzkaller0 speed is unknown, defaulting to 1000
[  284.514097][   T13] bond78: (slave wlan0): failed to get link speed/duplex
[  284.624832][ T7078] bond78: (slave wlan0): failed to get link speed/duplex
[  284.733398][   T13] bond78: (slave wlan0): failed to get link speed/duplex
[  284.843555][ T7277] bond78: (slave wlan0): failed to get link speed/duplex
[  284.916068][T15005] bridge0: entered promiscuous mode
[  284.941048][T15007] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  284.954843][ T7078] bond78: (slave wlan0): failed to get link speed/duplex
[  285.052056][T15013] rdma_rxe: rxe_newlink: failed to add lo
[  285.215450][T15025] bridge: RTM_NEWNEIGH with invalid state 0x2c
[  285.341067][T15031] C: renamed from lo (while UP)
[  285.395426][T15038] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  285.398622][T15038] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  285.442236][T15040] wg1 speed is unknown, defaulting to 1000
[  285.446670][T15040] lo speed is unknown, defaulting to 1000
[  285.450172][T15040] syzkaller0 speed is unknown, defaulting to 1000
[  285.606805][T15050] wg1 speed is unknown, defaulting to 1000
[  285.614290][T15050] lo speed is unknown, defaulting to 1000
[  285.617904][T15050] syzkaller0 speed is unknown, defaulting to 1000
[  285.778213][T15055] bridge: RTM_NEWNEIGH with unconfigured vlan 4 on bridge0
[  285.933660][T15065] wg1 speed is unknown, defaulting to 1000
[  285.941156][T15065] lo speed is unknown, defaulting to 1000
[  285.944979][T15065] syzkaller0 speed is unknown, defaulting to 1000
[  285.965761][T15070] bond68: entered promiscuous mode
[  285.967736][T15070] 8021q: adding VLAN 0 to HW filter on device bond68
[  285.990941][T15070] 8021q: adding VLAN 0 to HW filter on device bond68
[  285.993528][T15070] bond68: (slave vcan0): The slave device specified does not support setting the MAC address
[  285.997889][T15070] bond68: (slave vcan0): Error -95 calling set_mac_address
[  286.075644][T15075] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  286.291770][T15080] wg1 speed is unknown, defaulting to 1000
[  286.297620][T15080] lo speed is unknown, defaulting to 1000
[  286.301436][T15080] syzkaller0 speed is unknown, defaulting to 1000
[  286.362105][T15085] wg1 speed is unknown, defaulting to 1000
[  286.369729][T15085] lo speed is unknown, defaulting to 1000
[  286.376408][T15085] syzkaller0 speed is unknown, defaulting to 1000
[  286.560863][T15092] validate_nla: 8 callbacks suppressed
[  286.560875][T15092] netlink: 'syz.0.2204': attribute type 1 has an invalid length.
[  286.728726][T15103] vti1: entered promiscuous mode
[  286.795411][T15103] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  286.815856][T15103] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  286.878843][T15103] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  286.883221][T15119] netlink: 'syz.1.2209': attribute type 10 has an invalid length.
[  286.886132][T15103] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  286.900961][T15119] netlink: 'syz.1.2209': attribute type 10 has an invalid length.
[  286.925540][T15119] bond13: (slave macvlan1): Enslaving as a backup interface with a down link
[  286.929553][T15103] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  286.938353][T15103] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  286.996219][T15103] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  287.003238][T15103] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  287.089921][ T5876] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  287.095409][ T5876] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 20000 - 0
[  287.107556][ T5876] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  287.110667][ T5876] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 20000 - 0
[  287.131680][   T13] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  287.145555][   T13] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 20000 - 0
[  287.170827][   T13] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  287.191582][   T13] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 20000 - 0
[  287.249679][T15136] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  287.340239][T15142] can: request_module (can-proto-0) failed.
[  287.355397][T15147] can: request_module (can-proto-0) failed.
[  287.377291][T15142] netlink: 'syz.0.2214': attribute type 10 has an invalid length.
[  287.384256][T15142] netlink: 'syz.0.2214': attribute type 10 has an invalid length.
[  289.148974][ T7277] net_ratelimit: 41 callbacks suppressed
[  289.148992][ T7277] bond78: (slave wlan0): failed to get link speed/duplex
[  289.262968][ T6422] bond78: (slave wlan0): failed to get link speed/duplex
[  289.373046][ T6422] bond78: (slave wlan0): failed to get link speed/duplex
[  289.472751][    C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  289.483008][ T5876] bond78: (slave wlan0): failed to get link speed/duplex
[  289.593106][ T6422] bond78: (slave wlan0): failed to get link speed/duplex
[  289.703017][ T7277] bond78: (slave wlan0): failed to get link speed/duplex
[  289.813063][ T7277] bond78: (slave wlan0): failed to get link speed/duplex
[  289.923019][ T5876] bond78: (slave wlan0): failed to get link speed/duplex
[  290.033091][ T7277] bond78: (slave wlan0): failed to get link speed/duplex
[  294.233690][   T12] net_ratelimit: 41 callbacks suppressed
[  294.233709][   T12] bond78: (slave wlan0): failed to get link speed/duplex
[  294.343547][   T13] bond78: (slave wlan0): failed to get link speed/duplex
[  294.452647][   T12] bond78: (slave wlan0): failed to get link speed/duplex
[  294.572798][ T6422] bond78: (slave wlan0): failed to get link speed/duplex
[  294.662578][    C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  294.683106][   T12] bond78: (slave wlan0): failed to get link speed/duplex
[  294.792632][ T7277] bond78: (slave wlan0): failed to get link speed/duplex
[  294.903188][ T7277] bond78: (slave wlan0): failed to get link speed/duplex
[  295.012881][ T6422] bond78: (slave wlan0): failed to get link speed/duplex
[  295.123308][ T6422] bond78: (slave wlan0): failed to get link speed/duplex
[  299.323586][ T6422] net_ratelimit: 41 callbacks suppressed
[  299.323604][ T6422] bond78: (slave wlan0): failed to get link speed/duplex
[  299.433047][ T6422] bond78: (slave wlan0): failed to get link speed/duplex
[  299.543625][ T7078] bond78: (slave wlan0): failed to get link speed/duplex
[  299.653727][ T5876] bond78: (slave wlan0): failed to get link speed/duplex
[  299.763867][ T5876] bond78: (slave wlan0): failed to get link speed/duplex
[  299.862652][    C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  299.873235][ T6422] bond78: (slave wlan0): failed to get link speed/duplex
[  299.990847][ T6422] bond78: (slave wlan0): failed to get link speed/duplex
[  300.103688][ T6422] bond78: (slave wlan0): failed to get link speed/duplex
[  300.212838][   T12] bond78: (slave wlan0): failed to get link speed/duplex
[  304.333601][ T7078] net_ratelimit: 40 callbacks suppressed
[  304.333620][ T7078] bond78: (slave wlan0): failed to get link speed/duplex
[  304.443301][ T7078] bond78: (slave wlan0): failed to get link speed/duplex
[  304.553262][ T7078] bond78: (slave wlan0): failed to get link speed/duplex
[  304.662899][ T7078] bond78: (slave wlan0): failed to get link speed/duplex
[  304.773385][ T6422] bond78: (slave wlan0): failed to get link speed/duplex
[  304.882993][ T6422] bond78: (slave wlan0): failed to get link speed/duplex
[  304.993082][ T6422] bond78: (slave wlan0): failed to get link speed/duplex
[  305.062753][    C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  305.113196][ T6422] bond78: (slave wlan0): failed to get link speed/duplex
[  305.222847][ T7078] bond78: (slave wlan0): failed to get link speed/duplex
[  309.353408][ T6422] net_ratelimit: 40 callbacks suppressed
[  309.353432][ T6422] bond78: (slave wlan0): failed to get link speed/duplex
[  309.463806][   T12] bond78: (slave wlan0): failed to get link speed/duplex
[  309.573029][   T12] bond78: (slave wlan0): failed to get link speed/duplex
[  309.683446][   T12] bond78: (slave wlan0): failed to get link speed/duplex
[  309.793872][ T5876] bond78: (slave wlan0): failed to get link speed/duplex
[  309.903598][ T7078] bond78: (slave wlan0): failed to get link speed/duplex
[  310.023422][ T5876] bond78: (slave wlan0): failed to get link speed/duplex
[  310.133650][   T12] bond78: (slave wlan0): failed to get link speed/duplex
[  310.243527][   T12] bond78: (slave wlan0): failed to get link speed/duplex
[  310.272827][    C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  314.363413][ T6422] net_ratelimit: 39 callbacks suppressed
[  314.363438][ T6422] bond78: (slave wlan0): failed to get link speed/duplex
[  314.422700][    C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  314.473110][ T6422] bond78: (slave wlan0): failed to get link speed/duplex
[  314.583858][ T7277] bond78: (slave wlan0): failed to get link speed/duplex
[  314.693003][ T7277] bond78: (slave wlan0): failed to get link speed/duplex
[  314.803185][ T7277] bond78: (slave wlan0): failed to get link speed/duplex
[  314.912925][ T7277] bond78: (slave wlan0): failed to get link speed/duplex
[  315.023066][ T7277] bond78: (slave wlan0): failed to get link speed/duplex
[  315.143876][ T7277] bond78: (slave wlan0): failed to get link speed/duplex
[  315.253068][ T6422] bond78: (slave wlan0): failed to get link speed/duplex
[  319.075754][T15197] netlink: 'syz.1.2217': attribute type 1 has an invalid length.
[  319.082969][T15197] __nla_validate_parse: 21 callbacks suppressed
[  319.082981][T15197] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2217'.
[  319.158110][T15210] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  319.261553][T15224] netlink: 'syz.2.2223': attribute type 1 has an invalid length.
[  319.372261][T15239] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2228'.
[  319.376458][T15240] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2228'.
[  319.385653][T15239] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2228'.
[  319.390919][T15240] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2228'.
[  319.438877][T15246] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  319.441325][T15238] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2227'.
[  319.453634][T15241] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[  319.456074][T15241] CPU: 1 UID: 0 PID: 15241 Comm: syz.0.2228 Not tainted syzkaller #0 PREEMPT(full) 
[  319.456085][T15241] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  319.456091][T15241] Call Trace:
[  319.456096][T15241]  <TASK>
[  319.456101][T15241]  dump_stack_lvl+0x189/0x250
[  319.456120][T15241]  ? __pfx_dump_stack_lvl+0x10/0x10
[  319.456130][T15241]  ? __pfx__printk+0x10/0x10
[  319.456146][T15241]  ? kernfs_path_from_node+0x2f/0x290
[  319.456156][T15241]  ? kernfs_path_from_node+0x250/0x290
[  319.456164][T15241]  ? kernfs_path_from_node+0x2f/0x290
[  319.456174][T15241]  sysfs_warn_dup+0x8e/0xa0
[  319.456184][T15241]  sysfs_do_create_link_sd+0xc0/0x110
[  319.456194][T15241]  device_add_class_symlinks+0x1cf/0x240
[  319.456206][T15241]  device_add+0x475/0xb50
[  319.456216][T15241]  wiphy_register+0x1ba6/0x28d0
[  319.456235][T15241]  ? __pfx_wiphy_register+0x10/0x10
[  319.456243][T15241]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  319.456260][T15241]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  319.456274][T15241]  ieee80211_register_hw+0x3484/0x4100
[  319.456294][T15241]  ? ieee80211_register_hw+0x14c1/0x4100
[  319.456310][T15241]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  319.456322][T15241]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  319.456336][T15241]  ? __hrtimer_setup+0x187/0x210
[  319.456345][T15241]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  319.456360][T15241]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  319.456386][T15241]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  319.456396][T15241]  ? trace_kmalloc+0x1f/0xd0
[  319.456407][T15241]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  319.456418][T15241]  ? kstrndup+0xbf/0x160
[  319.456432][T15241]  hwsim_new_radio_nl+0xea4/0x1b10
[  319.456445][T15241]  ? __pfx___nla_validate_parse+0x10/0x10
[  319.456467][T15241]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  319.456488][T15241]  ? __nla_parse+0x40/0x60
[  319.456498][T15241]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  319.456528][T15241]  genl_family_rcv_msg_doit+0x215/0x300
[  319.456544][T15241]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  319.456562][T15241]  ? bpf_lsm_capable+0x9/0x20
[  319.456574][T15241]  ? security_capable+0x7e/0x2e0
[  319.456592][T15241]  genl_rcv_msg+0x60e/0x790
[  319.456606][T15241]  ? __pfx_genl_rcv_msg+0x10/0x10
[  319.456615][T15241]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  319.456633][T15241]  netlink_rcv_skb+0x208/0x470
[  319.456640][T15241]  ? __lock_acquire+0xab9/0xd20
[  319.456674][T15241]  ? __pfx_genl_rcv_msg+0x10/0x10
[  319.456692][T15241]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  319.456710][T15241]  ? down_read+0x1ad/0x2e0
[  319.456723][T15241]  genl_rcv+0x28/0x40
[  319.456733][T15241]  netlink_unicast+0x82f/0x9e0
[  319.456751][T15241]  ? __pfx_netlink_unicast+0x10/0x10
[  319.456764][T15241]  ? netlink_sendmsg+0x642/0xb30
[  319.456771][T15241]  ? skb_put+0x11b/0x210
[  319.456783][T15241]  netlink_sendmsg+0x805/0xb30
[  319.456796][T15241]  ? __pfx_netlink_sendmsg+0x10/0x10
[  319.456806][T15241]  ? aa_sock_msg_perm+0xf1/0x1d0
[  319.456816][T15241]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  319.456825][T15241]  ? __pfx_netlink_sendmsg+0x10/0x10
[  319.456834][T15241]  __sock_sendmsg+0x21c/0x270
[  319.456849][T15241]  ____sys_sendmsg+0x505/0x830
[  319.456862][T15241]  ? __pfx_____sys_sendmsg+0x10/0x10
[  319.456877][T15241]  ? import_iovec+0x74/0xa0
[  319.456889][T15241]  ___sys_sendmsg+0x21f/0x2a0
[  319.456900][T15241]  ? __pfx____sys_sendmsg+0x10/0x10
[  319.456942][T15241]  ? __fget_files+0x2a/0x420
[  319.456951][T15241]  ? __fget_files+0x3a0/0x420
[  319.456963][T15241]  __x64_sys_sendmsg+0x19b/0x260
[  319.456975][T15241]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  319.456990][T15241]  ? rcu_is_watching+0x15/0xb0
[  319.457001][T15241]  ? do_syscall_64+0xbe/0x3b0
[  319.457015][T15241]  do_syscall_64+0xfa/0x3b0
[  319.457023][T15241]  ? lockdep_hardirqs_on+0x9c/0x150
[  319.457032][T15241]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  319.457039][T15241]  ? exc_page_fault+0x9f/0xf0
[  319.457048][T15241]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  319.457056][T15241] RIP: 0033:0x7fb90138eba9
[  319.457065][T15241] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  319.457073][T15241] RSP: 002b:00007fb8ff5f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  319.457082][T15241] RAX: ffffffffffffffda RBX: 00007fb9015d6180 RCX: 00007fb90138eba9
[  319.457088][T15241] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000012
[  319.457093][T15241] RBP: 00007fb901411e19 R08: 0000000000000000 R09: 0000000000000000
[  319.457098][T15241] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  319.457102][T15241] R13: 00007fb9015d6218 R14: 00007fb9015d6180 R15: 00007ffd567b22d8
[  319.457116][T15241]  </TASK>
[  319.624355][    C1] net_ratelimit: 41 callbacks suppressed
[  319.624369][    C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  319.630219][ T7277] bond78: (slave wlan0): failed to get link speed/duplex
[  319.657042][T15251] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2230'.
[  319.669872][T15251] netlink: 'syz.2.2230': attribute type 1 has an invalid length.
[  319.691667][T15251] 8021q: adding VLAN 0 to HW filter on device bond69
[  319.713815][T15255] wg1 speed is unknown, defaulting to 1000
[  319.719527][T15255] lo speed is unknown, defaulting to 1000
[  319.723106][T15255] syzkaller0 speed is unknown, defaulting to 1000
[  319.821524][T15259] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  319.825971][T15259] syzkaller0: entered promiscuous mode
[  319.828193][T15259] syzkaller0: entered allmulticast mode
[  319.830420][T15259] tipc: Resetting bearer <eth:syzkaller0>
[  319.848507][T15259] netlink: 3 bytes leftover after parsing attributes in process `syz.2.2232'.
[  319.855643][   T12] bond78: (slave wlan0): failed to get link speed/duplex
[  319.965563][T15265] netlink: 'syz.2.2234': attribute type 2 has an invalid length.
[  319.968451][T15265] netlink: 'syz.2.2234': attribute type 2 has an invalid length.
[  319.973284][ T7277] bond78: (slave wlan0): failed to get link speed/duplex
[  319.979685][T15265] netlink: 'syz.2.2234': attribute type 1 has an invalid length.
[  319.997737][T15265] bond70: entered promiscuous mode
[  319.999879][T15265] 8021q: adding VLAN 0 to HW filter on device bond70
[  320.025788][T15265] 8021q: adding VLAN 0 to HW filter on device bond71
[  320.030080][T15265] bond70: (slave bond71): making interface the new active one
[  320.032883][T15265] bond71: entered promiscuous mode
[  320.035278][T15265] bond70: (slave bond71): Enslaving as an active interface with an up link
[  320.055728][T15265] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2234'.
[  320.084383][ T7078] bond78: (slave wlan0): failed to get link speed/duplex
[  320.144479][T15280] netlink: 'syz.1.2237': attribute type 1 has an invalid length.
[  320.169663][T15280] bond69: entered promiscuous mode
[  320.171793][T15280] 8021q: adding VLAN 0 to HW filter on device bond69
[  320.193344][ T7277] bond78: (slave wlan0): failed to get link speed/duplex
[  320.214984][T15286] netlink: 'syz.2.2238': attribute type 1 has an invalid length.
[  320.237548][T15286] 8021q: adding VLAN 0 to HW filter on device bond72
[  320.242176][T15290] netlink: 'syz.0.2240': attribute type 1 has an invalid length.
[  320.245405][T15289] netlink: 'syz.0.2240': attribute type 1 has an invalid length.
[  320.260697][T15286] 8021q: adding VLAN 0 to HW filter on device bond72
[  320.263636][T15286] bond72: (slave vxcan1): The slave device specified does not support setting the MAC address
[  320.268419][T15286] bond72: (slave vxcan1): Error -95 calling set_mac_address
[  320.297912][T15289] 8021q: adding VLAN 0 to HW filter on device bond89
[  320.322396][T15293] bond72: (slave bridge0): Enslaving as an active interface with a down link
[  320.328767][T15285] wg1 speed is unknown, defaulting to 1000
[  320.371672][T15285] lo speed is unknown, defaulting to 1000
[  320.374596][ T7277] bond78: (slave wlan0): failed to get link speed/duplex
[  320.379431][T15285] syzkaller0 speed is unknown, defaulting to 1000
[  320.514815][T15308] openvswitch: netlink: Message has 4 unknown bytes.
[  320.517361][T15308] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  320.521487][ T7078] bond78: (slave wlan0): failed to get link speed/duplex
[  320.569908][T15308] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2243'.
[  320.696808][T15315] 8021q: adding VLAN 0 to HW filter on device bond90
[  320.776731][T15318] bridge33: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  320.858680][T15328] siw: device registration error -23
[  321.136543][T15352] batadv_slave_1: entered promiscuous mode
[  321.170212][T15352] batadv_slave_1 (unregistering): left promiscuous mode
[  321.247880][T15356] tipc: Resetting bearer <eth:syzkaller0>
[  321.255449][T15356] bond70: (slave bond71): Releasing backup interface
[  321.261128][T15356] bond71: left promiscuous mode
[  321.279366][T15356] bond72: (slave bridge0): Releasing active interface
[  321.557372][T15375] 8021q: adding VLAN 0 to HW filter on device bond20
[  321.664726][T15377] bridge23: port 1(veth0_to_bond) entered blocking state
[  321.667855][T15377] bridge23: port 1(veth0_to_bond) entered disabled state
[  321.670850][T15377] veth0_to_bond: entered allmulticast mode
[  321.677948][T15377] veth0_to_bond: entered promiscuous mode
[  321.995702][T15402] erspan0: entered promiscuous mode
[  322.000939][T15402] erspan0: left promiscuous mode
[  322.273925][T15416] siw: device registration error -23
[  322.477293][T15428] bond13: (slave ip6gretap0): Enslaving as a backup interface with an up link
[  322.699608][T15430] 8021q: adding VLAN 0 to HW filter on device bond74
[  322.718080][T15430] vlan4: entered allmulticast mode
[  322.721528][T15430] bond74: (slave vlan4): Opening slave failed
[  322.814551][T15433] can: request_module (can-proto-0) failed.
[  322.828691][T15433] team0: Port device dummy0 added
[  322.836580][T15433] team0: Port device dummy0 removed
[  322.930222][T15438] unknown channel width for channel at 909000KHz?
[  322.932662][T15438] unknown channel width for channel at 909000KHz?
[  323.019875][T15441] wg1 speed is unknown, defaulting to 1000
[  323.022741][T15441] lo speed is unknown, defaulting to 1000
[  323.025467][T15441] syzkaller0 speed is unknown, defaulting to 1000
[  323.100379][T15447] team0: Port device macvlan1 added
[  323.143583][T15449] Can't find ip_set type hash:ipmark
[  323.320435][T15462] wg1 speed is unknown, defaulting to 1000
[  323.333074][T15462] lo speed is unknown, defaulting to 1000
[  323.336768][T15462] syzkaller0 speed is unknown, defaulting to 1000
[  323.384579][T15467] bridge: RTM_NEWNEIGH with unconfigured vlan 4 on bridge0
[  323.524956][T15482] bond0: entered promiscuous mode
[  323.527190][T15482] bond0: left promiscuous mode
[  324.004187][T15523] 8021q: adding VLAN 0 to HW filter on device bond71
[  324.031251][T15524] 8021q: adding VLAN 0 to HW filter on device bond92
[  324.061327][T15523] bond71: (slave veth27): Enslaving as an active interface with a down link
[  324.091053][T15523] 8021q: adding VLAN 0 to HW filter on device batadv4
[  324.097123][T15523] bond71: (slave batadv4): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open
[  324.227661][T15530] validate_nla: 16 callbacks suppressed
[  324.227677][T15530] netlink: 'syz.1.2297': attribute type 13 has an invalid length.
[  324.233861][T15531] __nla_validate_parse: 27 callbacks suppressed
[  324.233870][T15531] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2298'.
[  324.253610][T15530] netlink: 'syz.1.2297': attribute type 17 has an invalid length.
[  324.343617][T15540] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2301'.
[  324.346563][T15540] tipc: Disabling bearer <udp:syz2>
[  324.351419][T15540] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[  324.424431][T15549] netlink: 'syz.1.2302': attribute type 1 has an invalid length.
[  324.463656][T15549] 8021q: adding VLAN 0 to HW filter on device bond72
[  324.478548][T15556] bridge34: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  324.561998][   T55] Bluetooth: hci2: link tx timeout
[  324.565334][   T55] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa
[  324.652630][T15556] batadv_slave_0: entered promiscuous mode
[  324.658211][T15556] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2305'.
[  324.679361][T15556] netlink: 428 bytes leftover after parsing attributes in process `syz.2.2305'.
[  324.696479][T15556] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2305'.
[  324.723566][ T5876] net_ratelimit: 44 callbacks suppressed
[  324.723578][ T5876] bond78: (slave wlan0): failed to get link speed/duplex
[  324.749966][T15578] netlink: 'syz.1.2309': attribute type 12 has an invalid length.
[  324.822605][    C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  324.833306][   T12] bond78: (slave wlan0): failed to get link speed/duplex
[  324.850307][T15584] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2311'.
[  324.855755][T15581] wg1 speed is unknown, defaulting to 1000
[  324.857264][T15584] bond0: Device is already in use.
[  324.860431][T15581] lo speed is unknown, defaulting to 1000
[  324.866534][T15581] syzkaller0 speed is unknown, defaulting to 1000
[  324.896749][T15586] bond0: default FDB implementation only supports local addresses
[  324.943954][ T5876] bond78: (slave wlan0): failed to get link speed/duplex
[  325.059440][ T7078] bond78: (slave wlan0): failed to get link speed/duplex
[  325.083072][T15591] wg1 speed is unknown, defaulting to 1000
[  325.085764][T15591] lo speed is unknown, defaulting to 1000
[  325.088567][T15591] syzkaller0 speed is unknown, defaulting to 1000
[  325.146277][T15600] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2314'.
[  325.164396][   T12] bond78: (slave wlan0): failed to get link speed/duplex
[  325.273267][ T7277] bond78: (slave wlan0): failed to get link speed/duplex
[  325.383703][   T12] bond78: (slave wlan0): failed to get link speed/duplex
[  325.517337][   T12] bond78: (slave wlan0): failed to get link speed/duplex
[  325.556881][T15617] wg1 speed is unknown, defaulting to 1000
[  325.578275][T15617] lo speed is unknown, defaulting to 1000
[  325.581931][T15617] syzkaller0 speed is unknown, defaulting to 1000
[  325.585388][T15621] netlink: 'syz.1.2318': attribute type 10 has an invalid length.
[  325.597510][T15621] netlink: 'syz.1.2318': attribute type 10 has an invalid length.
[  325.601698][T15621] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2318'.
[  325.695167][ T5236] Bluetooth: hci2: link tx timeout
[  325.697177][ T5236] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa
[  325.703779][   T13] bond78: (slave wlan0): failed to get link speed/duplex
[  325.712864][T15622] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2319'.
[  325.741134][T15625] wg1 speed is unknown, defaulting to 1000
[  325.838102][T15625] lo speed is unknown, defaulting to 1000
[  325.852846][T15629] netlink: 'syz.0.2321': attribute type 9 has an invalid length.
[  325.875658][T15625] syzkaller0 speed is unknown, defaulting to 1000
[  326.015157][T15633] netlink: 'syz.0.2322': attribute type 1 has an invalid length.
[  326.052409][T15633] 8021q: adding VLAN 0 to HW filter on device bond93
[  326.106123][T15634] 8021q: adding VLAN 0 to HW filter on device bond93
[  326.119983][T15634] bond93: (slave vxcan9): The slave device specified does not support setting the MAC address
[  326.140409][T15634] bond93: (slave vxcan9): Error -95 calling set_mac_address
[  326.178971][T15631] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2320'.
[  326.275904][T15654] netlink: 'syz.0.2324': attribute type 1 has an invalid length.
[  326.337206][T15652] 8021q: adding VLAN 0 to HW filter on device bond94
[  326.350009][T15653] veth0_to_bond: left allmulticast mode
[  326.352412][T15653] veth0_to_bond: left promiscuous mode
[  326.355349][T15653] bridge23: port 1(veth0_to_bond) entered disabled state
[  326.577075][T15668] bond13: option mode: unable to set because the bond device has slaves
[  326.586533][ T5236] Bluetooth: hci2: command 0x0405 tx timeout
[  326.614266][T15674] netlink: 'syz.2.2330': attribute type 1 has an invalid length.
[  326.777886][T15674] 8021q: adding VLAN 0 to HW filter on device bond75
[  327.019626][T15685] wg1 speed is unknown, defaulting to 1000
[  327.028461][T15685] lo speed is unknown, defaulting to 1000
[  327.031375][T15685] syzkaller0 speed is unknown, defaulting to 1000
[  327.381158][T15701] 8021q: adding VLAN 0 to HW filter on device bond73
[  327.413187][T15706] vlan0: entered allmulticast mode
[  327.420108][T15706] bond73: (slave vlan0): Opening slave failed
[  327.611152][T15725] wg1 speed is unknown, defaulting to 1000
[  327.620982][T15725] lo speed is unknown, defaulting to 1000
[  327.625917][T15725] syzkaller0 speed is unknown, defaulting to 1000
[  327.671938][T15729] syz.2.2339 (15729) used obsolete PPPIOCDETACH ioctl
[  327.911135][T15744] veth3: left promiscuous mode
[  327.918991][T15744] bond4: left promiscuous mode
[  327.920527][T15744] bond4: left allmulticast mode
[  327.922239][T15744] tipc: Resetting bearer <eth:syzkaller0>
[  327.931988][T15744] mac80211_hwsim hwsim3 syzkaller0: left promiscuous mode
[  327.935036][T15744] mac80211_hwsim hwsim3 syzkaller0: left allmulticast mode
[  327.938375][T15744] ipvlan2: left allmulticast mode
[  327.940235][T15744] bond7: left allmulticast mode
[  327.944701][T15744] gretap2: left promiscuous mode
[  327.946354][T15744] gretap2: left allmulticast mode
[  327.948208][T15744] geneve0: left promiscuous mode
[  327.949892][T15744] geneve0: left allmulticast mode
[  327.954801][T15744] bridge7: left allmulticast mode
[  327.958186][T15744] bond30: left promiscuous mode
[  327.959841][T15744] bond31: left promiscuous mode
[  327.962006][T15744] veth15: left promiscuous mode
[  327.965084][T15744] bond34: left promiscuous mode
[  327.966740][T15744] bond34: left allmulticast mode
[  327.968527][T15744] bridge10: left promiscuous mode
[  327.970416][T15744] bridge10: left allmulticast mode
[  327.972792][T15744] gretap3: left allmulticast mode
[  327.975467][T15744] vlan2: left promiscuous mode
[  327.977174][T15744] vlan2: left allmulticast mode
[  327.979941][T15744] hsr_slave_1: left allmulticast mode
[  327.982068][T15744] bond43: left promiscuous mode
[  327.985068][T15744] bridge11: left promiscuous mode
[  327.986859][T15744] bridge11: left allmulticast mode
[  327.989898][T15744] vlan3: left promiscuous mode
[  327.992094][T15744] bond47: left promiscuous mode
[  327.994039][T15744] gretap5: left promiscuous mode
[  327.995988][T15744] vlan3: left allmulticast mode
[  327.997834][T15744] bond47: left allmulticast mode
[  327.999624][T15744] gretap5: left allmulticast mode
[  328.001717][T15744] veth19: left promiscuous mode
[  328.004170][T15744] veth23: left promiscuous mode
[  328.006587][T15744] bond55: left promiscuous mode
[  328.008426][T15744] bond56: left promiscuous mode
[  328.025738][T15744] veth27: left promiscuous mode
[  328.028399][T15744] ip6gretap7: left promiscuous mode
[  328.046621][T15744] veth29: left promiscuous mode
[  328.056850][T15744] bond65: left promiscuous mode
[  328.058629][T15744] bond65: left allmulticast mode
[  328.064103][T15744] mac80211_hwsim hwsim5 wlan1: left promiscuous mode
[  328.066831][T15744] macvtap1: left promiscuous mode
[  328.069674][T15744] bridge16: left promiscuous mode
[  328.071643][T15744] bridge16: left allmulticast mode
[  328.078990][T15744] veth31: left promiscuous mode
[  328.095178][T15744] bond73: left promiscuous mode
[  328.096771][T15744] bond74: left promiscuous mode
[  328.114766][T15744] bridge21: left allmulticast mode
[  328.121540][T15744] veth35: left promiscuous mode
[  328.132152][T15744] vti1: left promiscuous mode
[  328.222167][T15752] hsr_slave_0: left promiscuous mode
[  328.229853][T15755] tipc: Failed to remove unknown binding: 66,1,1/2146116027:1653126373/1653126375
[  328.233681][T15752] hsr_slave_1: left promiscuous mode
[  328.236076][T15755] tipc: Failed to remove unknown binding: 66,1,1/2146116027:1653126373/1653126375
[  328.252250][ T7277] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  328.256050][ T7277] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 20000 - 0
[  328.258901][ T7277] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  328.261950][ T7277] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 20000 - 0
[  328.276072][ T7277] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  328.279164][ T7277] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 20000 - 0
[  328.281894][ T7277] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  328.285139][ T7277] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 20000 - 0
[  328.323916][   T47] lo speed is unknown, defaulting to 1000
[  328.325863][   T47] syz1: Port: 1 Link DOWN
[  328.559024][T15776] 8021q: adding VLAN 0 to HW filter on device bond77
[  328.587912][T15776] bond77: (slave wlan0): Enslaving as an active interface with a down link
[  328.591680][T15785] bond13: option mode: unable to set because the bond device has slaves
[  328.606656][T15776] vlan4: entered allmulticast mode
[  328.608715][T15776] veth1: entered allmulticast mode
[  328.611326][T15776] bond77: (slave vlan4): Opening slave failed
[  329.345391][T15828] validate_nla: 6 callbacks suppressed
[  329.345405][T15828] netlink: 'syz.2.2352': attribute type 13 has an invalid length.
[  329.352228][T15828] netlink: 'syz.2.2352': attribute type 17 has an invalid length.
[  329.360460][T15828] 8021q: adding VLAN 0 to HW filter on device team0
[  329.481841][T15844] netlink: 'syz.2.2355': attribute type 1 has an invalid length.
[  329.487816][T15844] workqueue: Failed to create a rescuer kthread for wq "bond78": -EINTR
[  329.519869][T15851] team0: Port device macvlan1 removed
[  329.526850][T15851] tipc: Resetting bearer <eth:syzkaller0>
[  329.536589][T15851] bond77: (slave wlan0): Releasing active interface
[  329.558297][T15851] __nla_validate_parse: 13 callbacks suppressed
[  329.558308][T15851] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2356'.
[  329.575069][T15851] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2356'.
[  329.635373][T15854] wg1 speed is unknown, defaulting to 1000
[  329.638413][T15854] lo speed is unknown, defaulting to 1000
[  329.641055][T15854] syzkaller0 speed is unknown, defaulting to 1000
[  329.789867][T15867] netlink: 'syz.1.2359': attribute type 1 has an invalid length.
[  329.798947][T15867] netlink: 'syz.1.2359': attribute type 3 has an invalid length.
[  329.804930][T15867] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2359'.
[  329.811348][T15867] NCSI netlink: No device for ifindex 246
[  329.984864][T15874] wg1 speed is unknown, defaulting to 1000
[  329.990922][T15874] lo speed is unknown, defaulting to 1000
[  330.015595][T15874] syzkaller0 speed is unknown, defaulting to 1000
[  330.022779][    C1] net_ratelimit: 17 callbacks suppressed
[  330.022789][    C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  330.041045][T15880] netlink: 'syz.0.2360': attribute type 10 has an invalid length.
[  330.090376][T15882] 8021q: adding VLAN 0 to HW filter on device bond74
[  330.138899][T15886] bond2: (slave veth3): Releasing active interface
[  330.146504][T15886] bond3: (slave bridge1): Releasing active interface
[  330.157298][T15886] bond8: (slave gretap1): Releasing active interface
[  330.164929][T15886] bond9: (slave ip6erspan0): Releasing active interface
[  330.177897][T15886] bond14: (slave geneve2): Releasing backup interface
[  330.191056][T15886] bond19: (slave veth7): Releasing active interface
[  330.200512][T15886] bond20: (slave bridge5): Releasing active interface
[  330.211956][T15893] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2362'.
[  330.220985][T15886] bond21: (slave veth9): Releasing active interface
[  330.229271][T15886] bond5: (slave ip6gretap4): Releasing backup interface
[  330.236144][T15886] batman_adv: batadv0: Removing interface: ipvlan3
[  330.247651][T15886] bond30: (slave bond31): Releasing backup interface
[  330.252734][T15886] bond33: (slave veth15): Releasing active interface
[  330.268530][T15886] bond36: (slave gretap4): Releasing active interface
[  330.280168][T15886] bond47: (slave gretap5): Releasing active interface
[  330.287221][T15886] bond49: (slave veth19): Releasing active interface
[  330.290830][T15886] bond50: (slave veth23): Releasing active interface
[  330.294631][T15886] bond54: (slave veth25): Releasing active interface
[  330.298676][T15886] bond55: (slave bond56): Releasing backup interface
[  330.301929][T15886] bond57: (slave geneve3): Releasing active interface
[  330.305672][T15886] bond60: (slave geneve4): Releasing active interface
[  330.309272][T15886] bond62: (slave veth29): Releasing backup interface
[  330.315963][T15886] bond69: (slave veth31): Releasing active interface
[  330.319109][T15886] bond78: (slave wlan0): Releasing active interface
[  330.322307][T15886] bond73: (slave bond74): Releasing backup interface
[  330.325934][T15886] vlan0: left allmulticast mode
[  330.327653][T15886] bridge0: left allmulticast mode
[  330.329244][T15886] vlan0: left promiscuous mode
[  330.331078][T15886] bridge22: port 1(vlan0) entered disabled state
[  330.338654][T15886] bond84: (slave veth35): Releasing active interface
[  330.342026][T15889] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[  330.365340][T15896] wg1 speed is unknown, defaulting to 1000
[  330.368275][T15896] lo speed is unknown, defaulting to 1000
[  330.371843][T15896] syzkaller0 speed is unknown, defaulting to 1000
[  330.510942][T15906] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2364'.
[  330.716315][T15914] ip6gretap3: entered promiscuous mode
[  330.861805][T15935] netlink: 'syz.2.2371': attribute type 6 has an invalid length.
[  330.886971][T15935] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2371'.
[  330.891291][T15936] netlink: 'syz.2.2371': attribute type 12 has an invalid length.
[  330.899464][T15936] netlink: 9472 bytes leftover after parsing attributes in process `syz.2.2371'.
[  330.908629][T15939] netlink: 'syz.0.2372': attribute type 4 has an invalid length.
[  330.913563][T15939] netlink: 'syz.0.2372': attribute type 4 has an invalid length.
[  330.941594][T15936] netlink: 9472 bytes leftover after parsing attributes in process `syz.2.2371'.
[  331.001987][T15944] smc: net device bond0 erased user defined pnetid SYZ
[  331.018936][T15948] netlink: 256 bytes leftover after parsing attributes in process `syz.2.2374'.
[  331.022079][T15948] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2374'.
[  331.072665][    C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  331.242870][T15944] bond0 (unregistering): Released all slaves
[  331.274355][T15960] bond78: (slave vxcan1): The slave device specified does not support setting the MAC address
[  331.280239][T15960] bond78: (slave vxcan1): Error -95 calling set_mac_address
[  331.396605][T15966] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  331.533587][T15973] 8021q: adding VLAN 0 to HW filter on device bond75
[  331.838273][T16015] wg1 speed is unknown, defaulting to 1000
[  331.841097][T16015] lo speed is unknown, defaulting to 1000
[  331.844564][T16015] syzkaller0 speed is unknown, defaulting to 1000
[  332.102649][    C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  332.920113][T16046] IPv6: sit3: Disabled Multicast RS
[  332.925906][T16046] sit3: entered allmulticast mode
[  332.947006][T16042] bridge40: entered promiscuous mode
[  332.948945][T16042] bridge40: entered allmulticast mode
[  333.030386][T16050] bridge35: entered allmulticast mode
[  333.152617][    C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  334.095788][T16098] wg1 speed is unknown, defaulting to 1000
[  334.115771][T16098] lo speed is unknown, defaulting to 1000
[  334.119384][T16098] syzkaller0 speed is unknown, defaulting to 1000
[  334.182635][    C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  334.294909][T16111] dvmrp8: entered allmulticast mode
[  334.300789][T16111] dvmrp8: left allmulticast mode
[  334.332093][T16119] sctp: [Deprecated]: syz.2.2414 (pid 16119) Use of int in max_burst socket option.
[  334.332093][T16119] Use struct sctp_assoc_value instead
[  334.453803][T16127] IPVS: Unknown mcast interface: vetN1_macvtap
[  334.536017][T16134] bridge0: port 1(hsr_slave_0) entered blocking state
[  334.539968][T16134] bridge0: port 1(hsr_slave_0) entered disabled state
[  334.547132][T16134] hsr_slave_0: entered allmulticast mode
[  334.550421][T16134] hsr_slave_0: entered promiscuous mode
[  334.724632][T16142] validate_nla: 11 callbacks suppressed
[  334.724642][T16142] netlink: 'syz.1.2419': attribute type 10 has an invalid length.
[  334.730926][T16143] netlink: 'syz.1.2419': attribute type 10 has an invalid length.
[  334.763700][T16143] netlink: 'syz.1.2419': attribute type 2 has an invalid length.
[  334.766067][T16143] __nla_validate_parse: 15 callbacks suppressed
[  334.766074][T16143] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2419'.
[  334.784653][T16142] netlink: 'syz.1.2419': attribute type 2 has an invalid length.
[  334.787444][T16142] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2419'.
[  334.799787][T16148] netlink: 'syz.0.2421': attribute type 4 has an invalid length.
[  334.802421][T16148] netlink: 17 bytes leftover after parsing attributes in process `syz.0.2421'.
[  334.874609][T16152] netlink: 'syz.2.2422': attribute type 8 has an invalid length.
[  334.904101][T16156] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2423'.
[  335.007939][T16169] netlink: 'syz.2.2422': attribute type 10 has an invalid length.
[  335.023320][T16170] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2424'.
[  335.065600][T16173] netlink: 'syz.2.2422': attribute type 10 has an invalid length.
[  335.069010][T16173] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2422'.
[  335.072031][T16165] wg1 speed is unknown, defaulting to 1000
[  335.075512][T16165] lo speed is unknown, defaulting to 1000
[  335.078400][T16165] syzkaller0 speed is unknown, defaulting to 1000
[  335.085620][T16170] hsr_slave_0: left allmulticast mode
[  335.087563][T16170] hsr_slave_0: left promiscuous mode
[  335.089411][T16170] bridge0: port 1(hsr_slave_0) entered disabled state
[  335.222694][    C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  335.491842][T16184] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  335.495510][T16184] mac80211_hwsim hwsim2 syzkaller0: entered promiscuous mode
[  335.498368][T16184] mac80211_hwsim hwsim2 syzkaller0: entered allmulticast mode
[  335.508428][T16184] tipc: Resetting bearer <eth:syzkaller0>
[  335.517276][ T5897] syzkaller0 speed is unknown, defaulting to 1000
[  335.589232][T16189] netlink: 'syz.0.2428': attribute type 1 has an invalid length.
[  335.627239][T16195] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2430'.
[  335.629611][T16189] 8021q: adding VLAN 0 to HW filter on device bond0
[  335.710725][T16199] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2431'.
[  335.723435][T16199] Bluetooth: MGMT ver 1.23
[  335.803472][T16202] netlink: del zone limit has 4 unknown bytes
[  335.811915][   T26] tipc: Resetting bearer <eth:syzkaller0>
[  335.821476][T16202] siw: device registration error -23
[  335.852427][T16208] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  335.878649][T16212] netlink: 'syz.0.2436': attribute type 1 has an invalid length.
[  335.887760][T16212] bond5: (slave vcan0): The slave device specified does not support setting the MAC address
[  335.897644][T16212] bond5: (slave vcan0): Error -95 calling set_mac_address
[  335.947482][T16225] bond5: (slave vcan0): The slave device specified does not support setting the MAC address
[  335.952372][T16225] bond5: (slave vcan0): Error -95 calling set_mac_address
[  335.979816][T16217] bond80: entered promiscuous mode
[  335.981713][T16217] 8021q: adding VLAN 0 to HW filter on device bond80
[  335.988437][T16212] 8021q: adding VLAN 0 to HW filter on device bond5
[  336.112591][T16239] wg1 speed is unknown, defaulting to 1000
[  336.115283][T16239] lo speed is unknown, defaulting to 1000
[  336.128294][T16239] syzkaller0 speed is unknown, defaulting to 1000
[  336.257041][T16251] openvswitch: netlink: Flow actions attr not present in new flow.
[  336.262718][    C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  336.304727][T16253] wg1 speed is unknown, defaulting to 1000
[  336.308220][T16253] lo speed is unknown, defaulting to 1000
[  336.311691][T16253] syzkaller0 speed is unknown, defaulting to 1000
[  336.422654][T16266] mac80211_hwsim hwsim2 ;: renamed from wlan0
[  336.514368][T16270] 8021q: adding VLAN 0 to HW filter on device bond76
[  336.785851][T16282] can: request_module (can-proto-0) failed.
[  336.863826][T16293] dvmrp0: entered allmulticast mode
[  336.905139][T16293] wg1 speed is unknown, defaulting to 1000
[  336.912339][T16293] lo speed is unknown, defaulting to 1000
[  336.915331][T16293] syzkaller0 speed is unknown, defaulting to 1000
[  337.072323][T16303] pim6reg1: entered promiscuous mode
[  337.075540][T16303] pim6reg1: entered allmulticast mode
[  337.285253][T16317] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2460'.
[  337.288156][T16317] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2460'.
[  337.312768][    C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  337.460641][T16340] wg1 speed is unknown, defaulting to 1000
[  337.463900][T16340] lo speed is unknown, defaulting to 1000
[  337.466426][T16340] syzkaller0 speed is unknown, defaulting to 1000
[  337.515816][T16345] bond81: entered promiscuous mode
[  337.517984][T16345] 8021q: adding VLAN 0 to HW filter on device bond81
[  337.557789][T16345] 8021q: adding VLAN 0 to HW filter on device bond81
[  337.561124][T16345] bond81: (slave wireguard0): The slave device specified does not support setting the MAC address
[  337.566454][T16345] bond81: (slave wireguard0): Error -95 calling set_mac_address
[  337.840775][T16355] RDS: rds_bind could not find a transport for ::ffff:172.30.1.3, load rds_tcp or rds_rdma?
[  338.020024][T16375] vxcan1: entered allmulticast mode
[  338.091770][T16380] 8021q: adding VLAN 0 to HW filter on device bond77
[  338.108685][T16380] bond77: (slave veth31): Enslaving as an active interface with a down link
[  338.169931][T16380] macvlan5: entered promiscuous mode
[  338.174188][T16380] macvlan5: entered allmulticast mode
[  338.178882][T16380] bond77: entered promiscuous mode
[  338.181576][T16380] 8021q: adding VLAN 0 to HW filter on device macvlan5
[  338.186127][T16380] bond77: (slave macvlan5): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  338.195009][T16380] bond77: left promiscuous mode
[  338.215522][T16387] 8021q: adding VLAN 0 to HW filter on device bond20
[  338.218073][T16387] bond20: (slave vcan0): The slave device specified does not support setting the MAC address
[  338.222254][T16387] bond20: (slave vcan0): Error -95 calling set_mac_address
[  338.309583][ T7277] bond13: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  338.322260][T16390] 8021q: adding VLAN 0 to HW filter on device bond13
[  338.342662][    C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  338.422933][ T7277] bond13: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  338.628355][T16406] bond78: (slave bridge0): making interface the new active one
[  338.631217][T16406] bond78: (slave bridge0): Enslaving as an active interface with an up link
[  338.743782][T16413] wg1 speed is unknown, defaulting to 1000
[  338.747296][T16413] lo speed is unknown, defaulting to 1000
[  338.751178][T16413] syzkaller0 speed is unknown, defaulting to 1000
[  339.051529][T16420] batadv_slave_0: entered promiscuous mode
[  339.060288][T16419] batadv_slave_0: left promiscuous mode
[  339.392717][    C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  339.446657][T16468] xt_limit: Overflow, try lower: 604147548/4200216962
[  339.493135][T16474] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode
[  339.495494][T16474] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode
[  339.498880][T16474] tipc: Resetting bearer <eth:syzkaller0>
[  339.536929][T16483] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode
[  339.543517][T16474] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  339.546498][T16483] mac80211_hwsim hwsim7 wlan1: left allmulticast mode
[  339.552026][T16483] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  339.561204][T16483] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  340.329845][T16518] validate_nla: 21 callbacks suppressed
[  340.329857][T16518] netlink: 'syz.1.2509': attribute type 1 has an invalid length.
[  340.333559][T16519] netlink: 'syz.1.2509': attribute type 1 has an invalid length.
[  340.351234][T16519] bond80: entered promiscuous mode
[  340.355292][T16519] 8021q: adding VLAN 0 to HW filter on device bond80
[  340.366438][T16519] bond80: (slave bridge41): making interface the new active one
[  340.369293][T16519] bridge41: entered promiscuous mode
[  340.373160][T16519] bond80: (slave bridge41): Enslaving as an active interface with an up link
[  340.401705][T16518] bond80: (slave bridge42): Enslaving as a backup interface with an up link
[  340.422707][    C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  340.494971][T16527] __nla_validate_parse: 20 callbacks suppressed
[  340.494982][T16527] netlink: 8560 bytes leftover after parsing attributes in process `syz.1.2511'.
[  340.546127][T16530] bond0: Device is already in use.
[  340.641885][T16537] can: request_module (can-proto-0) failed.
[  340.645180][T16537] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2513'.
[  340.650698][T16537] netlink: 'syz.2.2513': attribute type 10 has an invalid length.
[  340.655194][T16537] team0: Port device dummy0 added
[  340.657739][T16537] netlink: 'syz.2.2513': attribute type 10 has an invalid length.
[  340.662866][T16537] team0: Port device dummy0 removed
[  340.665254][T16532] netlink: 'syz.1.2511': attribute type 10 has an invalid length.
[  340.781494][T16540] wg1 speed is unknown, defaulting to 1000
[  340.784614][T16540] lo speed is unknown, defaulting to 1000
[  340.787250][T16540] syzkaller0 speed is unknown, defaulting to 1000
[  340.808998][T16543] netlink: 'syz.2.2514': attribute type 10 has an invalid length.
[  340.833457][T16545] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2515'.
[  340.845090][T16543] netlink: 'syz.2.2514': attribute type 10 has an invalid length.
[  340.847502][T16543] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2514'.
[  341.079012][T16558] tipc: Resetting bearer <eth:syzkaller0>
[  341.100895][T16558] netlink: 'syz.2.2518': attribute type 10 has an invalid length.
[  341.107487][T16558] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  341.111108][T16558] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  341.332050][T16568] wg1 speed is unknown, defaulting to 1000
[  341.335983][T16568] lo speed is unknown, defaulting to 1000
[  341.339107][T16568] syzkaller0 speed is unknown, defaulting to 1000
[  341.462542][    C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  341.518625][T16580] netlink: 80 bytes leftover after parsing attributes in process `syz.0.2524'.
[  341.522060][T16580] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2524'.
[  341.562424][T16583] wg1 speed is unknown, defaulting to 1000
[  341.568303][T16583] lo speed is unknown, defaulting to 1000
[  341.572173][T16583] syzkaller0 speed is unknown, defaulting to 1000
[  341.949648][T16593] netlink: 'syz.2.2526': attribute type 1 has an invalid length.
[  341.979043][T16593] 8021q: adding VLAN 0 to HW filter on device bond82
[  342.000648][T16593] bond82: (slave wlan0): Enslaving as an active interface with a down link
[  342.027135][T16593] vlan4: entered allmulticast mode
[  342.029099][T16593] bond82: (slave vlan4): Opening slave failed
[  342.124858][T16595] wg1 speed is unknown, defaulting to 1000
[  342.127436][T16595] lo speed is unknown, defaulting to 1000
[  342.130010][T16595] syzkaller0 speed is unknown, defaulting to 1000
[  342.224153][T16602] netlink: 'syz.1.2528': attribute type 10 has an invalid length.
[  342.441263][T16618] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2531'.
[  342.476486][T16618] 8021q: adding VLAN 0 to HW filter on device bond81
[  342.483440][T16618] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2531'.
[  342.486818][T16618] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2531'.
[  342.502621][    C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  343.242784][T16626] pim6reg1: entered promiscuous mode
[  343.244786][T16626] pim6reg1: entered allmulticast mode
[  343.400209][T16630] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2535'.
[  343.421518][T16630] macvlan0: entered promiscuous mode
[  343.427192][T16630] bond0: entered promiscuous mode
[  343.432208][T16630] 8021q: adding VLAN 0 to HW filter on device macvlan0
[  343.552629][    C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  343.726687][T16659] wg1 speed is unknown, defaulting to 1000
[  343.729438][T16659] lo speed is unknown, defaulting to 1000
[  343.736946][T16659] syzkaller0 speed is unknown, defaulting to 1000
[  344.004475][T16682] Unsupported ieee802154 address type: 0
[  344.069091][T16692] dvmrp0: left allmulticast mode
[  344.133403][T16692] rdma_rxe: rxe_newlink: failed to add lo
[  344.161551][T16692] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  344.167735][ T5897] lo speed is unknown, defaulting to 1000
[  344.169967][ T5897] syz1: Port: 1 Link ACTIVE
[  344.220317][T16704] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  344.235558][T16704] A link change request failed with some changes committed already. Interface veth1_vlan may have been left with an inconsistent configuration, please check.
[  344.330752][T16706] macvtap4: entered promiscuous mode
[  344.332419][T16706] mac80211_hwsim hwsim7 wlan1: entered promiscuous mode
[  344.351556][T16710] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  344.539125][T16726] syzkaller0: left promiscuous mode
[  344.542983][T16726] syzkaller0: left allmulticast mode
[  344.545477][T16726] tipc: Resetting bearer <eth:syzkaller0>
[  344.592630][    C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  344.748404][T16748] workqueue: Failed to create a rescuer kthread for wq "bond82": -EINTR
[  344.763619][T16749] wg1 speed is unknown, defaulting to 1000
[  344.771972][T16749] lo speed is unknown, defaulting to 1000
[  344.784639][T16749] syzkaller0 speed is unknown, defaulting to 1000
[  344.915629][T16757] 8021q: adding VLAN 0 to HW filter on device bond83
[  345.124481][T16770] bond85: (slave vxcan1): The slave device specified does not support setting the MAC address
[  345.128357][T16770] bond85: (slave vxcan1): Error -95 calling set_mac_address
[  345.141789][T16774] syzkaller1: entered promiscuous mode
[  345.145050][T16774] syzkaller1: entered allmulticast mode
[  345.171561][T16771] macvlan0: entered promiscuous mode
[  345.174606][T16771] macvlan0: entered allmulticast mode
[  345.176870][T16771] bond85: entered promiscuous mode
[  345.179075][T16771] 8021q: adding VLAN 0 to HW filter on device macvlan0
[  345.191240][T16771] bond85: left promiscuous mode
[  345.498834][T16799] validate_nla: 10 callbacks suppressed
[  345.498848][T16799] netlink: 'syz.2.2572': attribute type 10 has an invalid length.
[  345.623140][    C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  345.697543][T16811] wg1 speed is unknown, defaulting to 1000
[  345.701154][T16811] lo speed is unknown, defaulting to 1000
[  345.709777][T16811] syzkaller0 speed is unknown, defaulting to 1000
[  345.911230][T16841] __nla_validate_parse: 11 callbacks suppressed
[  345.911241][T16841] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2581'.
[  345.987225][T16845] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2582'.
[  346.021369][T16851] openvswitch: : Dropping previously announced user features
[  346.041279][T16850] netlink: 'syz.0.2583': attribute type 1 has an invalid length.
[  346.071247][T16850] 8021q: adding VLAN 0 to HW filter on device bond96
[  346.120442][T16858] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on
[  346.130764][T16858] workqueue: Failed to create a rescuer kthread for wq "bond97": -EINTR
[  346.135080][T16855] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2584'.
[  346.140327][T16855] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2584'.
[  346.210991][T16869] siw: device registration error -23
[  346.337427][T16877] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2589'.
[  346.348278][T16877] tipc: Resetting bearer <eth:syzkaller0>
[  346.354912][T16877] tipc: Resetting bearer <eth:syzkaller0>
[  346.379489][T16879] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  346.389061][T16879] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2590'.
[  346.405431][T16881] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2591'.
[  346.408179][T16881] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2591'.
[  346.518251][T16890] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  346.662584][    C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  346.719894][T16917] wg1 speed is unknown, defaulting to 1000
[  346.723115][T16917] lo speed is unknown, defaulting to 1000
[  346.725721][T16917] syzkaller0 speed is unknown, defaulting to 1000
[  346.771600][T16915] wg1 speed is unknown, defaulting to 1000
[  346.785287][T16915] lo speed is unknown, defaulting to 1000
[  346.790115][T16915] syzkaller0 speed is unknown, defaulting to 1000
[  346.801658][T16919] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  346.817327][T16919] syzkaller0: entered promiscuous mode
[  346.819473][T16919] syzkaller0: entered allmulticast mode
[  346.821374][T16919] tipc: Resetting bearer <eth:syzkaller0>
[  346.847662][T16919] netlink: 'syz.2.2600': attribute type 1 has an invalid length.
[  346.891786][T16919] 8021q: adding VLAN 0 to HW filter on device bond86
[  346.968973][T16927] netlink: 3 bytes leftover after parsing attributes in process `syz.2.2601'.
[  346.981966][T16927] batadv3: entered promiscuous mode
[  346.984460][T16927] batadv3: entered allmulticast mode
[  347.201093][T16935] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2603'.
[  347.406347][T16952] bridge44: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  347.557425][ T5236] Bluetooth: hci2: command 0x0405 tx timeout
[  347.618807][T16955] wg1 speed is unknown, defaulting to 1000
[  347.623736][T16955] lo speed is unknown, defaulting to 1000
[  347.627568][T16955] syzkaller0 speed is unknown, defaulting to 1000
[  347.702803][    C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  348.246624][T16966] netlink: 'syz.1.2609': attribute type 1 has an invalid length.
[  348.270890][T16966] 8021q: adding VLAN 0 to HW filter on device bond83
[  348.277169][T16971] netlink: 'syz.2.2610': attribute type 1 has an invalid length.
[  348.325361][T16971] 8021q: adding VLAN 0 to HW filter on device bond87
[  348.344190][T16971] bond82: (slave wlan0): Releasing active interface
[  348.355024][T16971] bond87: (slave wlan0): Enslaving as an active interface with a down link
[  348.368894][T16971] vlan4: entered allmulticast mode
[  348.371622][T16971] bond87: (slave vlan4): Opening slave failed
[  348.705316][T16983] wg1 speed is unknown, defaulting to 1000
[  348.709233][T16983] lo speed is unknown, defaulting to 1000
[  348.713391][T16983] syzkaller0 speed is unknown, defaulting to 1000
[  348.752704][    C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  348.880378][T16989] netlink: 'syz.0.2614': attribute type 10 has an invalid length.
[  348.911903][T16989] netlink: 'syz.0.2614': attribute type 10 has an invalid length.
[  348.919653][T16989] 8021q: adding VLAN 0 to HW filter on device bond5
[  349.009664][T16994] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  349.130527][T17002] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  349.200849][T17006] netlink: 'syz.0.2618': attribute type 1 has an invalid length.
[  349.262302][T17006] 8021q: adding VLAN 0 to HW filter on device bond97
[  349.311094][T17008] veth39: entered promiscuous mode
[  349.320431][T17008] bond97: (slave veth39): Enslaving as an active interface with a down link
[  349.326884][T17020] netlink: 'syz.2.2621': attribute type 2 has an invalid length.
[  349.330430][T17020] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  349.362713][   T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  349.365329][   T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  349.371772][T17020] wg1 speed is unknown, defaulting to 1000
[  349.386373][T17020] lo speed is unknown, defaulting to 1000
[  349.398252][T17020] syzkaller0 speed is unknown, defaulting to 1000
[  349.416413][T17031] C: entered promiscuous mode
[  349.424032][T17031] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  349.573238][T17038] A link change request failed with some changes committed already. Interface veth0_to_bond may have been left with an inconsistent configuration, please check.
[  349.782628][    C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  349.798824][T17063] wg1 speed is unknown, defaulting to 1000
[  349.801982][T17063] lo speed is unknown, defaulting to 1000
[  349.812805][T17063] syzkaller0 speed is unknown, defaulting to 1000
[  349.849411][T17065] chnl_net:caif_netlink_parms(): no params data found
[  349.858304][T17065] caif1: entered allmulticast mode
[  349.988562][T17074] netlink: 'syz.1.2632': attribute type 1 has an invalid length.
[  350.031096][T17074] 8021q: adding VLAN 0 to HW filter on device bond84
[  350.310799][T17088] wg1 speed is unknown, defaulting to 1000
[  350.319877][T17088] lo speed is unknown, defaulting to 1000
[  350.323472][T17088] syzkaller0 speed is unknown, defaulting to 1000
[  350.684343][T17109] pim6reg1: entered promiscuous mode
[  350.685996][T17109] pim6reg1: entered allmulticast mode
[  350.822579][    C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  350.895574][T17129] validate_nla: 1 callbacks suppressed
[  350.895585][T17129] netlink: 'syz.2.2643': attribute type 10 has an invalid length.
[  350.901005][T17129] netlink: 'syz.2.2643': attribute type 10 has an invalid length.
[  351.057993][T17132] 8021q: adding VLAN 0 to HW filter on device bond85
[  351.069427][T17132] bond0: (slave bond85): Enslaving as an active interface with an up link
[  351.074389][T17129] (unnamed net_device) (uninitialized): option mode: invalid value (36)
[  351.227385][T17137] __nla_validate_parse: 14 callbacks suppressed
[  351.227400][T17137] netlink: 22 bytes leftover after parsing attributes in process `syz.1.2645'.
[  351.235206][T17137] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2645'.
[  351.339414][T17142] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2646'.
[  351.444378][T17145] wg1 speed is unknown, defaulting to 1000
[  351.447195][T17145] lo speed is unknown, defaulting to 1000
[  351.458224][T17148] wg1 speed is unknown, defaulting to 1000
[  351.461093][T17148] lo speed is unknown, defaulting to 1000
[  351.464960][T17145] syzkaller0 speed is unknown, defaulting to 1000
[  351.489418][T17148] syzkaller0 speed is unknown, defaulting to 1000
[  351.652998][T17155] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2650'.
[  351.659722][T17158] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2650'.
[  351.715831][T17145] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2647'.
[  351.719528][T17145] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2647'.
[  351.872595][    C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  351.901262][T17168] rdma_op ffff88811e96c9f0 conn xmit_rdma 0000000000000000
[  351.932118][T17170] netlink: 49 bytes leftover after parsing attributes in process `syz.1.2654'.
[  351.936336][T17170] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2654'.
[  352.014244][T17173] netlink: 'syz.2.2655': attribute type 1 has an invalid length.
[  352.060936][T17173] 8021q: adding VLAN 0 to HW filter on device bond88
[  352.088182][T17173] veth45: entered promiscuous mode
[  352.101763][T17173] bond88: (slave veth45): Enslaving as an active interface with a down link
[  352.123141][T17177] IPVS: sync thread started: state = BACKUP, mcast_ifn = bond0, syncid = 8, id = 0
[  352.124509][T17176] IPVS: stopping backup sync thread 17177 ...
[  352.129182][T17173] erspan0: entered allmulticast mode
[  352.134972][T17173] bond88: (slave erspan0): making interface the new active one
[  352.138563][T17173] erspan0: entered promiscuous mode
[  352.140932][T17173] bond88: (slave erspan0): Enslaving as an active interface with an up link
[  352.150477][T17179] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[  352.168230][T17176] netlink: 260 bytes leftover after parsing attributes in process `syz.0.2656'.
[  352.168296][T17179] netlink: 'syz.1.2657': attribute type 12 has an invalid length.
[  352.201077][T17181] rdma_op ffff88803d7271f0 conn xmit_rdma 0000000000000000
[  352.336132][T17197] netlink: 'syz.2.2664': attribute type 10 has an invalid length.
[  352.361323][T17200] bridge46: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  352.383532][T17200] bridge47: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  352.527534][T17211] macsec1: entered promiscuous mode
[  352.529304][T17211] batadv0: entered promiscuous mode
[  352.533719][T17211] batadv0: left promiscuous mode
[  352.746977][T17231] netlink: 'syz.0.2672': attribute type 1 has an invalid length.
[  352.780783][T17231] 8021q: adding VLAN 0 to HW filter on device bond98
[  352.845500][T17243] netlink: 'syz.0.2675': attribute type 1 has an invalid length.
[  352.862249][T17246] 8021q: adding VLAN 0 to HW filter on device bond5
[  352.868362][T17246] bond5: (slave vcan0): The slave device specified does not support setting the MAC address
[  352.872220][T17246] bond5: (slave vcan0): Error -95 calling set_mac_address
[  352.886249][T17238] wg1 speed is unknown, defaulting to 1000
[  352.889243][T17238] lo speed is unknown, defaulting to 1000
[  352.892036][T17238] syzkaller0 speed is unknown, defaulting to 1000
[  352.902793][    C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  353.112098][T17266] tipc: Failed to remove unknown binding: 66,1,1/2146116027:3316745336/3316745338
[  353.117100][T17266] tipc: Failed to remove unknown binding: 66,1,1/2146116027:3316745336/3316745338
[  353.917603][T17276] netlink: 'syz.1.2682': attribute type 1 has an invalid length.
[  353.942836][    C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  353.950862][T17276] 8021q: adding VLAN 0 to HW filter on device bond86
[  353.980595][T17276] ipvlan0: entered allmulticast mode
[  353.982977][T17276] bond86: entered allmulticast mode
[  354.114460][T17285] netlink: 'syz.0.2685': attribute type 10 has an invalid length.
[  354.129189][T17289] netlink: 'syz.1.2687': attribute type 1 has an invalid length.
[  354.184524][T17289] pim6reg: entered allmulticast mode
[  354.358984][T17306] bridge49: port 1(veth35) entered blocking state
[  354.361835][T17306] bridge49: port 1(veth35) entered disabled state
[  354.369804][T17306] veth35: entered allmulticast mode
[  354.374696][T17306] veth35: entered promiscuous mode
[  354.561231][T17330] wg1 speed is unknown, defaulting to 1000
[  354.565668][T17330] lo speed is unknown, defaulting to 1000
[  354.570987][T17330] syzkaller0 speed is unknown, defaulting to 1000
[  354.710507][T17338] wg1 speed is unknown, defaulting to 1000
[  354.717534][T17338] lo speed is unknown, defaulting to 1000
[  354.724666][T17338] syzkaller0 speed is unknown, defaulting to 1000
[  354.987586][    C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  355.093310][T17368] IPVS: nq: FWM 3 0x00000003 - no destination available
[  355.107634][T17368] wg1 speed is unknown, defaulting to 1000
[  355.110425][T17368] lo speed is unknown, defaulting to 1000
[  355.113479][T17368] syzkaller0 speed is unknown, defaulting to 1000
[  355.498727][T17405] C: left promiscuous mode
[  355.585149][T17402] sctp: [Deprecated]: syz.0.2716 (pid 17402) Use of int in maxseg socket option.
[  355.585149][T17402] Use struct sctp_assoc_value instead
[  355.751912][T17412] 8021q: adding VLAN 0 to HW filter on device bond89
[  355.859563][T17421] mac80211_hwsim hwsim2 syzkaller0: left promiscuous mode
[  355.862067][T17421] mac80211_hwsim hwsim2 syzkaller0: left allmulticast mode
[  355.865507][T17421] tipc: Resetting bearer <eth:syzkaller0>
[  355.874885][T17419] syzkaller0: left promiscuous mode
[  355.876934][T17419] syzkaller0: left allmulticast mode
[  355.879211][T17419] tipc: Resetting bearer <eth:syzkaller0>
[  356.023086][    C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  356.049894][T17435] validate_nla: 7 callbacks suppressed
[  356.049911][T17435] netlink: 'syz.1.2726': attribute type 1 has an invalid length.
[  356.130309][T17441] bond88: (slave vxcan9): The slave device specified does not support setting the MAC address
[  356.139866][T17441] bond88: (slave vxcan9): Error -95 calling set_mac_address
[  356.190773][T17435] macvlan5: entered promiscuous mode
[  356.195787][T17435] macvlan5: entered allmulticast mode
[  356.197994][T17435] bond88: entered promiscuous mode
[  356.199937][T17435] 8021q: adding VLAN 0 to HW filter on device macvlan5
[  356.206517][T17435] bond88: left promiscuous mode
[  356.242129][T17450] __nla_validate_parse: 30 callbacks suppressed
[  356.242144][T17450] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2728'.
[  356.249387][T17450] netlink: 'syz.2.2728': attribute type 1 has an invalid length.
[  356.409648][T17463] netlink: 'syz.1.2732': attribute type 1 has an invalid length.
[  356.697755][T17482] netlink: 'syz.2.2734': attribute type 1 has an invalid length.
[  356.726186][T17482] 8021q: adding VLAN 0 to HW filter on device bond90
[  356.798125][T17490] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2735'.
[  356.889761][T17494] can: request_module (can-proto-0) failed.
[  356.966252][T17499] netlink: 'syz.2.2736': attribute type 10 has an invalid length.
[  356.979999][T17499] team0: Port device dummy0 added
[  356.985137][T17499] netlink: 'syz.2.2736': attribute type 10 has an invalid length.
[  357.001056][T17499] team0: Failed to send options change via netlink (err -105)
[  357.011187][T17499] team0: Failed to send port change of device dummy0 via netlink (err -105)
[  357.023165][T17499] team0: Port device dummy0 removed
[  357.072606][    C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  357.156890][T17507] batadv_slave_1: entered promiscuous mode
[  357.175486][T17507] syzkaller1: entered promiscuous mode
[  357.177852][T17507] syzkaller1: entered allmulticast mode
[  357.342728][T17512] IPVS: length: 141 != 8
[  357.394973][T17513] batadv_slave_1: left promiscuous mode
[  357.402139][T17509] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2738'.
[  357.600594][T17520] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2741'.
[  357.717621][T17524] netlink: 'syz.2.2742': attribute type 1 has an invalid length.
[  357.753392][T17524] bond91: (slave vti1): The slave device specified does not support setting the MAC address
[  357.757359][T17524] bond91: (slave vti1): Setting fail_over_mac to active for active-backup mode
[  357.763915][T17524] bond91: (slave vti1): making interface the new active one
[  357.766995][T17524] bond91: (slave vti1): Enslaving as an active interface with an up link
[  357.809587][T17528] IPVS: set_ctl: invalid protocol: 11612 100.1.1.1:21
[  357.908686][T17532] netlink: 112 bytes leftover after parsing attributes in process `syz.2.2744'.
[  357.922136][T17532] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2744'.
[  357.926652][T17532] netlink: 'syz.2.2744': attribute type 5 has an invalid length.
[  357.929924][T17532] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2744'.
[  357.941260][T17532] geneve7: entered promiscuous mode
[  357.943553][T17532] geneve7: entered allmulticast mode
[  357.947809][   T13] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 256 - 0
[  357.950919][   T13] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 256 - 0
[  357.963676][   T13] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 256 - 0
[  357.973383][   T13] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 256 - 0
[  358.027784][T17535] netlink: 'syz.2.2745': attribute type 1 has an invalid length.
[  358.058365][T17535] 8021q: adding VLAN 0 to HW filter on device bond92
[  358.112639][    C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  358.141783][T17540] netlink: 'syz.2.2746': attribute type 1 has an invalid length.
[  358.195650][T17540] 8021q: adding VLAN 0 to HW filter on device bond93
[  358.228007][T17540] bond93: (slave veth47): Enslaving as an active interface with a down link
[  358.285641][T17549] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2748'.
[  358.290202][T17549] openvswitch: : Dropping previously announced user features
[  358.307217][T17555] macvlan6: entered promiscuous mode
[  358.309336][T17555] macvlan6: entered allmulticast mode
[  358.312164][T17555] bond93: entered promiscuous mode
[  358.323386][T17555] 8021q: adding VLAN 0 to HW filter on device macvlan6
[  358.326275][T17555] bond93: (slave macvlan6): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  358.334011][T17555] bond93: left promiscuous mode
[  358.370824][T17557] mac80211_hwsim hwsim49 wlan0: entered promiscuous mode
[  358.378705][T17557] macsec2: entered promiscuous mode
[  358.380444][T17557] macsec2: entered allmulticast mode
[  358.382242][T17557] mac80211_hwsim hwsim49 wlan0: entered allmulticast mode
[  358.542145][T17567] bond90: entered promiscuous mode
[  358.545174][T17567] 8021q: adding VLAN 0 to HW filter on device bond90
[  358.570370][T17567] bond90: (slave bridge50): making interface the new active one
[  358.579507][T17567] bridge50: entered promiscuous mode
[  358.582760][T17567] bond90: (slave bridge50): Enslaving as an active interface with an up link
[  358.628921][T17573] wg1 speed is unknown, defaulting to 1000
[  358.638570][T17573] lo speed is unknown, defaulting to 1000
[  358.645685][T17573] syzkaller0 speed is unknown, defaulting to 1000
[  358.909060][T17588] bond91: (slave vxcan9): The slave device specified does not support setting the MAC address
[  358.914579][T17588] bond91: (slave vxcan9): Error -95 calling set_mac_address
[  358.998558][T17592] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2757'.
[  359.056935][T17597] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2759'.
[  359.073397][T17594] 8021q: adding VLAN 0 to HW filter on device bond92
[  359.120658][T17601] 8021q: adding VLAN 0 to HW filter on device bond92
[  359.125913][T17601] bond92: (slave vxcan9): The slave device specified does not support setting the MAC address
[  359.131518][T17601] bond92: (slave vxcan9): Error -95 calling set_mac_address
[  359.152678][    C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  359.183454][T17594] bond92: (slave bridge51): Enslaving as an active interface with a down link
[  359.311378][T17609] 8021q: adding VLAN 0 to HW filter on device bond99
[  359.315628][T17606] wg1 speed is unknown, defaulting to 1000
[  359.354064][T17615] 8021q: adding VLAN 0 to HW filter on device bond93
[  359.360373][T17606] lo speed is unknown, defaulting to 1000
[  359.364764][T17606] syzkaller0 speed is unknown, defaulting to 1000
[  359.631104][T17631] 8021q: adding VLAN 0 to HW filter on device bond94
[  359.659295][T17634] mac80211_hwsim hwsim55 wlan1: entered allmulticast mode
[  360.058503][T17650] wg1 speed is unknown, defaulting to 1000
[  360.062230][T17650] lo speed is unknown, defaulting to 1000
[  360.068431][T17652] wg1 speed is unknown, defaulting to 1000
[  360.069485][T17650] syzkaller0 speed is unknown, defaulting to 1000
[  360.071406][T17652] lo speed is unknown, defaulting to 1000
[  360.103743][T17652] syzkaller0 speed is unknown, defaulting to 1000
[  360.182637][    C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  361.066654][T17686] validate_nla: 9 callbacks suppressed
[  361.066666][T17686] netlink: 'syz.0.2781': attribute type 9 has an invalid length.
[  361.125230][T17690] netlink: 'syz.1.2780': attribute type 10 has an invalid length.
[  361.129228][T17690] A link change request failed with some changes committed already. Interface 0! may have been left with an inconsistent configuration, please check.
[  361.156753][T17698] raw_sendmsg: syz.0.2783 forgot to set AF_INET. Fix it!
[  361.232654][    C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  361.261618][T17702] wg1 speed is unknown, defaulting to 1000
[  361.268808][T17705] netlink: 'syz.0.2784': attribute type 10 has an invalid length.
[  361.274923][T17705] netlink: 'syz.0.2784': attribute type 10 has an invalid length.
[  361.275283][T17707] __nla_validate_parse: 11 callbacks suppressed
[  361.275297][T17707] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2786'.
[  361.277695][T17705] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2784'.
[  361.277714][T17705] batadv0: entered promiscuous mode
[  361.290431][T17705] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check.
[  361.316612][T17702] lo speed is unknown, defaulting to 1000
[  361.323009][T17704] wg1 speed is unknown, defaulting to 1000
[  361.330367][T17704] lo speed is unknown, defaulting to 1000
[  361.333020][T17704] syzkaller0 speed is unknown, defaulting to 1000
[  361.338009][T17702] syzkaller0 speed is unknown, defaulting to 1000
[  361.740486][T17732] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2789'.
[  361.827090][T17704] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2785'.
[  361.979233][T17745] can: request_module (can-proto-0) failed.
[  361.985727][T17745] netlink: 'syz.0.2792': attribute type 10 has an invalid length.
[  362.031476][T17745] netlink: 'syz.0.2792': attribute type 10 has an invalid length.
[  362.032139][T17742] wg1 speed is unknown, defaulting to 1000
[  362.042316][T17742] lo speed is unknown, defaulting to 1000
[  362.047225][T17742] syzkaller0 speed is unknown, defaulting to 1000
[  362.177823][T17758] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2796'.
[  362.241612][T17760] delete_channel: no stack
[  362.245226][T17760] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2797'.
[  362.248545][T17760] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2797'.
[  362.251352][T17760] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2797'.
[  362.262644][    C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  362.287949][T17764] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2798'.
[  362.346789][T17768] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  362.386883][T17767] wg1 speed is unknown, defaulting to 1000
[  362.390751][T17767] lo speed is unknown, defaulting to 1000
[  362.395122][T17767] syzkaller0 speed is unknown, defaulting to 1000
[  362.440073][T17772] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2799'.
[  362.464935][T17770] netlink: 'syz.2.2800': attribute type 1 has an invalid length.
[  362.492152][T17767] netlink: 'syz.0.2799': attribute type 10 has an invalid length.
[  362.502118][T17767] netlink: 'syz.0.2799': attribute type 10 has an invalid length.
[  362.625485][T17768] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  362.654895][T17777] nbd2: detected capacity change from 0 to 63
[  362.662811][T17778] block nbd2: NBD_DISCONNECT
[  362.664428][T17778] block nbd2: Disconnected due to user request.
[  362.666382][T17778] block nbd2: shutting down sockets
[  362.680849][    C1] blk_print_req_error: 27 callbacks suppressed
[  362.680860][    C1] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  362.686737][    C1] buffer_io_error: 27 callbacks suppressed
[  362.686749][    C1] Buffer I/O error on dev nbd2, logical block 0, async page read
[  362.692046][    C1] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  362.695619][    C1] Buffer I/O error on dev nbd2, logical block 1, async page read
[  362.698521][    C1] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  362.701827][    C1] Buffer I/O error on dev nbd2, logical block 2, async page read
[  362.704862][    C1] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  362.708287][    C1] Buffer I/O error on dev nbd2, logical block 3, async page read
[  362.716587][T15681] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  362.720100][T15681] Buffer I/O error on dev nbd2, logical block 0, async page read
[  362.725963][T15681] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  362.733585][T15681] Buffer I/O error on dev nbd2, logical block 1, async page read
[  362.745044][T15681] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  362.747820][T15681] Buffer I/O error on dev nbd2, logical block 2, async page read
[  362.750311][T15681] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  362.765748][T15681] Buffer I/O error on dev nbd2, logical block 3, async page read
[  362.767814][T17777] bond95: entered promiscuous mode
[  362.769022][T15681] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  362.770467][T17777] bond95: entered allmulticast mode
[  362.773891][T15681] Buffer I/O error on dev nbd2, logical block 0, async page read
[  362.773975][T15681] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  362.781408][T15681] Buffer I/O error on dev nbd2, logical block 1, async page read
[  362.785209][T15681] ldm_validate_partition_table(): Disk read failed.
[  362.786736][T17777] 8021q: adding VLAN 0 to HW filter on device bond95
[  362.788553][T15681] Dev nbd2: unable to read RDB block 0
[  362.799734][T15681]  nbd2: unable to read partition table
[  362.805479][T15681] ldm_validate_partition_table(): Disk read failed.
[  362.808497][T15681] Dev nbd2: unable to read RDB block 0
[  362.811168][T15681]  nbd2: unable to read partition table
[  362.916441][T17796] netlink: 'syz.2.2805': attribute type 4 has an invalid length.
[  362.924898][T17796] block nbd0: not configured, cannot reconfigure
[  362.966929][T17800] 
[  362.967968][T17800] ======================================================
[  362.970776][T17800] WARNING: possible circular locking dependency detected
[  362.973533][T17800] syzkaller #0 Not tainted
[  362.975388][T17800] ------------------------------------------------------
[  362.978977][T17800] syz.2.2807/17800 is trying to acquire lock:
[  362.981367][T17800] ffffffff8f68e878 (nr_node_list_lock){+...}-{3:3}, at: nr_rt_device_down+0xa9/0x720
[  362.985129][T17800] 
[  362.985129][T17800] but task is already holding lock:
[  362.988095][T17800] ffffffff8f68e818 (nr_neigh_list_lock){+...}-{3:3}, at: nr_rt_device_down+0x28/0x720
[  362.991779][T17800] 
[  362.991779][T17800] which lock already depends on the new lock.
[  362.991779][T17800] 
[  362.995863][T17800] 
[  362.995863][T17800] the existing dependency chain (in reverse order) is:
[  362.999304][T17800] 
[  362.999304][T17800] -> #2 (nr_neigh_list_lock){+...}-{3:3}:
[  363.002461][T17800]        lock_acquire+0x120/0x360
[  363.004429][T17800]        _raw_spin_lock_bh+0x36/0x50
[  363.006488][T17800]        nr_rt_ioctl+0x390/0xd50
[  363.008452][T17800]        sock_do_ioctl+0xdc/0x300
[  363.010491][T17800]        sock_ioctl+0x576/0x790
[  363.012415][T17800]        __se_sys_ioctl+0xfc/0x170
[  363.014381][T17800]        do_syscall_64+0xfa/0x3b0
[  363.016385][T17800]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  363.018858][T17800] 
[  363.018858][T17800] -> #1 (&nr_node->node_lock){+...}-{3:3}:
[  363.021856][T17800]        lock_acquire+0x120/0x360
[  363.023575][T17800]        _raw_spin_lock_bh+0x36/0x50
[  363.025485][T17800]        nr_rt_ioctl+0x193/0xd50
[  363.027425][T17800]        sock_do_ioctl+0xdc/0x300
[  363.029457][T17800]        sock_ioctl+0x576/0x790
[  363.031427][T17800]        __se_sys_ioctl+0xfc/0x170
[  363.033519][T17800]        do_syscall_64+0xfa/0x3b0
[  363.035553][T17800]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  363.038037][T17800] 
[  363.038037][T17800] -> #0 (nr_node_list_lock){+...}-{3:3}:
[  363.041072][T17800]        validate_chain+0xb9b/0x2140
[  363.043139][T17800]        __lock_acquire+0xab9/0xd20
[  363.045215][T17800]        lock_acquire+0x120/0x360
[  363.047260][T17800]        _raw_spin_lock_bh+0x36/0x50
[  363.049403][T17800]        nr_rt_device_down+0xa9/0x720
[  363.051560][T17800]        nr_device_event+0x137/0x150
[  363.053593][T17800]        notifier_call_chain+0x1b6/0x3e0
[  363.055783][T17800]        __dev_notify_flags+0x18d/0x2e0
[  363.057796][T17800]        netif_change_flags+0xe8/0x1a0
[  363.059764][T17800]        dev_change_flags+0x130/0x260
[  363.061744][T17800]        dev_ioctl+0x7b4/0x1150
[  363.063661][T17800]        sock_do_ioctl+0x22c/0x300
[  363.065657][T17800]        sock_ioctl+0x576/0x790
[  363.067517][T17800]        __se_sys_ioctl+0xfc/0x170
[  363.069450][T17800]        do_syscall_64+0xfa/0x3b0
[  363.071462][T17800]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  363.073983][T17800] 
[  363.073983][T17800] other info that might help us debug this:
[  363.073983][T17800] 
[  363.077969][T17800] Chain exists of:
[  363.077969][T17800]   nr_node_list_lock --> &nr_node->node_lock --> nr_neigh_list_lock
[  363.077969][T17800] 
[  363.083303][T17800]  Possible unsafe locking scenario:
[  363.083303][T17800] 
[  363.086244][T17800]        CPU0                    CPU1
[  363.088381][T17800]        ----                    ----
[  363.090524][T17800]   lock(nr_neigh_list_lock);
[  363.092412][T17800]                                lock(&nr_node->node_lock);
[  363.095302][T17800]                                lock(nr_neigh_list_lock);
[  363.098139][T17800]   lock(nr_node_list_lock);
[  363.099978][T17800] 
[  363.099978][T17800]  *** DEADLOCK ***
[  363.099978][T17800] 
[  363.103078][T17800] 2 locks held by syz.2.2807/17800:
[  363.105120][T17800]  #0: ffffffff8f539588 (rtnl_mutex){+.+.}-{4:4}, at: dev_ioctl+0x7a4/0x1150
[  363.108572][T17800]  #1: ffffffff8f68e818 (nr_neigh_list_lock){+...}-{3:3}, at: nr_rt_device_down+0x28/0x720
[  363.112507][T17800] 
[  363.112507][T17800] stack backtrace:
[  363.114846][T17800] CPU: 0 UID: 0 PID: 17800 Comm: syz.2.2807 Not tainted syzkaller #0 PREEMPT(full) 
[  363.114865][T17800] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  363.114874][T17800] Call Trace:
[  363.114881][T17800]  <TASK>
[  363.114889][T17800]  dump_stack_lvl+0x189/0x250
[  363.114910][T17800]  ? __pfx_dump_stack_lvl+0x10/0x10
[  363.114926][T17800]  ? __pfx__printk+0x10/0x10
[  363.114946][T17800]  ? print_lock_name+0xde/0x100
[  363.114966][T17800]  print_circular_bug+0x2ee/0x310
[  363.114984][T17800]  check_noncircular+0x134/0x160
[  363.115001][T17800]  validate_chain+0xb9b/0x2140
[  363.115017][T17800]  ? rt6_disable_ip+0x6b3/0x720
[  363.115033][T17800]  ? __lock_acquire+0xab9/0xd20
[  363.115055][T17800]  __lock_acquire+0xab9/0xd20
[  363.115077][T17800]  ? nr_rt_device_down+0xa9/0x720
[  363.115096][T17800]  lock_acquire+0x120/0x360
[  363.115114][T17800]  ? nr_rt_device_down+0xa9/0x720
[  363.115138][T17800]  ? nr_rt_device_down+0xa9/0x720
[  363.115158][T17800]  _raw_spin_lock_bh+0x36/0x50
[  363.115171][T17800]  ? nr_rt_device_down+0xa9/0x720
[  363.115190][T17800]  nr_rt_device_down+0xa9/0x720
[  363.115210][T17800]  ? do_raw_spin_unlock+0x4d/0x240
[  363.115228][T17800]  nr_device_event+0x137/0x150
[  363.115247][T17800]  notifier_call_chain+0x1b6/0x3e0
[  363.115264][T17800]  __dev_notify_flags+0x18d/0x2e0
[  363.115282][T17800]  ? __pfx___dev_notify_flags+0x10/0x10
[  363.115296][T17800]  ? __dev_change_flags+0x4cc/0x6d0
[  363.115314][T17800]  ? __pfx___dev_change_flags+0x10/0x10
[  363.115356][T17800]  ? full_name_hash+0x92/0xe0
[  363.115375][T17800]  netif_change_flags+0xe8/0x1a0
[  363.115392][T17800]  dev_change_flags+0x130/0x260
[  363.115410][T17800]  dev_ioctl+0x7b4/0x1150
[  363.115425][T17800]  sock_do_ioctl+0x22c/0x300
[  363.115445][T17800]  ? __pfx_sock_do_ioctl+0x10/0x10
[  363.115463][T17800]  ? __lock_acquire+0xab9/0xd20
[  363.115488][T17800]  sock_ioctl+0x576/0x790
[  363.115507][T17800]  ? __pfx_sock_ioctl+0x10/0x10
[  363.115525][T17800]  ? __fget_files+0x2a/0x420
[  363.115536][T17800]  ? __fget_files+0x3a0/0x420
[  363.115547][T17800]  ? __fget_files+0x2a/0x420
[  363.115559][T17800]  ? bpf_lsm_file_ioctl+0x9/0x20
[  363.115577][T17800]  ? __pfx_sock_ioctl+0x10/0x10
[  363.115594][T17800]  __se_sys_ioctl+0xfc/0x170
[  363.115612][T17800]  do_syscall_64+0xfa/0x3b0
[  363.115628][T17800]  ? lockdep_hardirqs_on+0x9c/0x150
[  363.115641][T17800]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  363.115655][T17800]  ? exc_page_fault+0x9f/0xf0
[  363.115676][T17800]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  363.115690][T17800] RIP: 0033:0x7fd8bc38eba9
[  363.115704][T17800] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  363.115716][T17800] RSP: 002b:00007fd8bd2ad038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  363.115732][T17800] RAX: ffffffffffffffda RBX: 00007fd8bc5d5fa0 RCX: 00007fd8bc38eba9
[  363.115743][T17800] RDX: 0000200000000000 RSI: 0000000000008914 RDI: 0000000000000005
[  363.115752][T17800] RBP: 00007fd8bc411e19 R08: 0000000000000000 R09: 0000000000000000
[  363.115762][T17800] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  363.115770][T17800] R13: 00007fd8bc5d6038 R14: 00007fd8bc5d5fa0 R15: 00007ffc9cf5dce8
[  363.115787][T17800]  </TASK>
[  363.302721][    C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  363.454049][ T7277] erspan0: left promiscuous mode
[  364.342613][    C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  365.382659][    C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  366.422609][    C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  367.472581][    C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  368.502615][    C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  369.542609][    C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  370.592695][    C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  371.622559][    C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  372.662819][    C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available

VM DIAGNOSIS:
19:25:05  Registers:
info registers vcpu 0

CPU#0
RAX=000000000000002d RBX=000000000000002d RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000002b99 RDI=0000000000002b9a RBP=00000000000003f8 RSP=ffffc90007d37030
R8 =ffff888106af8237 R9 =1ffff11020d5f046 R10=dffffc0000000000 R11=ffffffff854f4b80
R12=dffffc0000000000 R13=ffffffff99b018ed R14=ffffffff99df6420 R15=0000000000000000
RIP=ffffffff854f4bfc RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007fd8bd2ad6c0 ffffffff 00c00000
GS =0000 ffff8880b8614000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000200000000080 CR3=0000000046b92000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007fd8bc5a7498 00007fd8bc5a7470 XMM03=00007fd8bc5a74a8 00007fd8bc5a74a0
XMM04=00007fd8bd10d100 00007fd8bc5a7460 XMM05=00007fd8bc5a7478 00007fd8bc5a74c0
XMM06=00007fd8bc5a74b8 00007fd8bc5a74b0 XMM07=00007fd8bc5a74a8 00007fd8bc5a74a0
XMM08=0000000000000000 00007fd8bc412ee7 XMM09=0000000000000000 00007fd8bc412fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=1ffff11020d8a001 RBX=ffffffff8f539570 RCX=ffffffff819ce0f8 RDX=0000000000000000
RSI=0000000000000008 RDI=ffffffff8f539520 RBP=1ffffffff1ea72a4 RSP=ffffc90003f4f690
R8 =ffffffff8f539528 R9 =1ffffffff1ea72a4 R10=dffffc0000000000 R11=fffffbfff1ea72a5
R12=ffffffff8f539520 R13=ffffffff8f539570 R14=dffffc0000000000 R15=ffff888108739cc0
RIP=ffffffff822309bd RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c14000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000000110c26ac35 CR3=0000000106256000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=000000001bff8985 0000000000000000 XMM01=0000000030717062 000055fe3c8da078
XMM02=01000100ffffffff 0101000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 000000000000ff00 XMM05=1600000000000000 00000000000002ff
XMM06=1600000000000000 00000000000002ff XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
