last executing test programs:

2.360870743s ago: executing program 0 (id=989):
socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00')
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
unshare(0x6a040000)
r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), r2)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000240)={'team0\x00', <r4=>0x0})
sendmsg$MPTCP_PM_CMD_DEL_ADDR(r1, &(0x7f0000000400)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0xeb54f963537864cc}, 0xc, &(0x7f0000000280)={&(0x7f0000000540)={0xbc, r3, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x48, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r4}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x6}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x2c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r4}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r4}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r4}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}]}, 0xbc}, 0x1, 0x0, 0x0, 0x8000}, 0x8884)
socket(0x8, 0x3, 0x0)
r5 = socket(0x2, 0x3, 0xff)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x18)
socket$kcm(0x2, 0x1, 0x84)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r6)
r7 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r6, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x200}, 0x1c)
listen(r7, 0x0)
r8 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r8, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10)
r9 = accept(r7, 0x0, 0x0)
r10 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r11 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$ifreq_SIOCGIFINDEX_vcan(r11, 0x8933, &(0x7f0000000100)={'vxcan1\x00'})
sendmsg$IPSET_CMD_CREATE(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)=ANY=[@ANYRES64=r5], 0x64}, 0x1, 0x0, 0x0, 0x4000090}, 0x44004)
write$bt_hci(r10, &(0x7f0000000080)=ANY=[], 0x6)
sendmsg$TEAM_CMD_OPTIONS_SET(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0x4008040}, 0x4004840)
connect$unix(r9, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e)

1.49073017s ago: executing program 0 (id=1001):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
close(r4)
r5 = socket$unix(0x1, 0x1, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001c80)={&(0x7f00000007c0)=@newqdisc={0x464, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x438, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x4, 0x6, 0xfffffff9, 0xffffffff, 0x7fffffff, 0x5, 0xc, 0x5c8e, 0x1, 0xff, 0x9, 0x0, 0x3, 0x7ff, 0x5, 0x8, 0x3, 0x1, 0x400, 0x1, 0x4, 0x401, 0xfffffffd, 0x400, 0x7, 0x7ff, 0x5, 0x7, 0x1000, 0xb00, 0xd1, 0x5, 0x2c, 0x8, 0x15, 0xfff, 0x100, 0x3, 0x3, 0x8, 0x3, 0x3, 0x0, 0x8000, 0x7, 0xd, 0x23c5, 0x7, 0x5, 0x2, 0x36c9, 0x7, 0x3a, 0x3d72, 0x5, 0x6, 0x2, 0x8, 0x205, 0xd, 0x120, 0x5, 0x9, 0x200, 0x4, 0xb, 0x1, 0x8, 0x10000, 0x9, 0x5, 0x200, 0x1, 0xe, 0x7, 0x408, 0x1ff, 0x4, 0x100, 0x2, 0x101, 0x7, 0x213c7c20, 0x8000, 0x0, 0x7f, 0x83, 0xffffffff, 0xe7, 0x2, 0x6, 0x2, 0x400, 0x6, 0x3cc, 0x5, 0x6, 0x8, 0x1, 0x51, 0x7, 0xfffffffd, 0x9, 0x9, 0x7fff, 0x0, 0x0, 0x5, 0x7, 0x7fff, 0x81, 0x4, 0x39, 0x5, 0x8, 0x3, 0x3e, 0x7, 0x3ff, 0xb, 0x9, 0x65, 0x400, 0x1c, 0xf, 0x2, 0x9, 0x0, 0x1, 0xffff5a1c, 0x8, 0x1, 0x10, 0x1, 0x0, 0x2, 0xc0000000, 0x1, 0x1, 0x81, 0x0, 0x5, 0x8, 0x1000, 0x5, 0x7, 0xe, 0x4, 0x10000, 0xbb, 0x10000, 0x9, 0x408, 0x10, 0x3, 0x8, 0x3, 0x8, 0x7c2d, 0xdb39, 0x1585, 0x2, 0x6, 0xb, 0x23, 0x8, 0x6c4f3964, 0x2, 0x7, 0x46, 0x1, 0x48, 0x40000, 0x4f, 0x3, 0x1, 0x401, 0x8, 0x2a93110b, 0x2, 0x1, 0x0, 0xae2e, 0xcf, 0x3, 0xdb27, 0x3, 0x1, 0x8218, 0x6, 0x9, 0xff, 0x9, 0x401, 0x8, 0x6, 0xbbe0, 0x63e, 0x2, 0xa480000, 0x2, 0x8, 0xc, 0x0, 0x6, 0xd, 0x8, 0x2, 0x4, 0xffff, 0x3f7, 0x9, 0x8, 0x9, 0x2020, 0x3, 0x3, 0xffff, 0x6, 0x331, 0x80000000, 0x9, 0x2875, 0x8, 0x64633386, 0x2, 0x4, 0x8, 0x400, 0x9, 0x3, 0x9, 0x6, 0xfbce, 0x1, 0x9c, 0x6, 0x4, 0x8e4aec0a, 0x5, 0x68bf, 0x3, 0x2, 0x0, 0xc2fb, 0x0, 0x9, 0x0, 0xd, 0x7, 0x2, 0x4, 0x8, 0x81, 0xa, 0x207]}, @TCA_TBF_PARMS={0x28, 0x1, {{0xa, 0x2, 0xffff, 0x7, 0xcc, 0x3}, {0x0, 0x1, 0x7, 0x8, 0x7f, 0x9}, 0xa6, 0x7, 0x1bb6}}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x464}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r7, {}, {0x2, 0xb}, {0xd, 0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x10000, 0xffffe000}}]}}]}, 0x48}}, 0x4008000)
ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})

1.361061788s ago: executing program 0 (id=1003):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1) (async)
r2 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_PORT_GET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="20000000051401002abd7000fcdbdf250800010000000000080007"], 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x4000010) (async)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$inet_sctp_SCTP_INITMSG(r4, 0x84, 0x2, &(0x7f00000004c0), &(0x7f0000000500)=0x8)
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000000)=ANY=[@ANYBLOB="88000000", @ANYRES16=0x0, @ANYBLOB="01002abd7000fedbdf253b00000008000300", @ANYRES32=0x0, @ANYBLOB="6a0033008000e1000802110000000802110000005050505050500000030000000000000064000140010003010e0406f8970000020005030037022a01032d1a02000c02000000000004003000013449254048bab31a5875000f000000077206030303"], 0x88}, 0x1, 0x0, 0x0, 0x880}, 0x0)
socket$kcm(0xa, 0x3, 0x87)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async)
r6 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async)
write$tun(r5, &(0x7f0000000040)=ANY=[@ANYBLOB="034886dd120000000000140000006000000003088700fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef) (async)
r7 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r3)
sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r3, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000380)={&(0x7f0000000140)={0x1c, r7, 0x100, 0x70bd26, 0x25dfdbfb, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x7c413346d8e18207}, 0x2004040) (async)
r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
close(r8) (async)
r9 = socket$unix(0x1, 0x1, 0x0) (async)
r10 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r11=>0x0})
sendmsg$nl_route_sched(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x8000000, {0x0, 0x0, 0x0, r11, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xfffffffd, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x7}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) (async)
sendmsg$nl_route_sched(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0x80000, {0x0, 0x0, 0x0, r11, {0x0, 0x11}, {0xffe6, 0xb}, {0xb, 0xc}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x6, 0x1, 0xffff, 0x0, 0xffffffff, 0x75, 0x46b, 0x9, 0x9}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4000000) (async)
ioctl$SIOCSIFHWADDR(r8, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})

1.307648098s ago: executing program 0 (id=1005):
socket$igmp(0x2, 0x3, 0x2)
socket$netlink(0x10, 0x3, 0x0)
r0 = socket(0x10, 0x803, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff})
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e24, 0x2, @empty, 0xcac2d78a}}, 0x0, 0x0, 0x3f, 0x0, "ee8b0e650926a96ecc136e7fb980e989db9e8bf9b93129488f651a8de213eb94cd46e19d9c65a018444a131f4da58ae36556dd38ea6c029607462029add09240005c6776267517308a3d40aa1c788df6"}, 0xd8)
connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x304}, "25ace3f62b00ee00", "acba84f0a6731f234db1cc7f3f382ad796bd667cb12ea99509873931d2873103", "0f9dafb4", "ec3ffd9afd96e6c0"}, 0x38)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4)
ioctl$int_in(r2, 0x5452, &(0x7f0000000180)=0x1)
writev(r2, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1)
shutdown(r2, 0x1)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1200000009000000080000000200000000000000", @ANYRES32=0x1, @ANYBLOB="0000000000000000000000bff9a3299648e7fdd7", @ANYRES32=0x0, @ANYRES32], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r3}, &(0x7f0000000180), &(0x7f0000000100)=r1}, 0x20)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10)
ppoll(&(0x7f0000000500)=[{r4}], 0x1, 0x0, 0x0, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000140)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0xffffffff, 0x0, 0x0, 0x4, 0x2, 0x1}})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000001800490400000000000014000a100000000000000100000008001e0001000000"], 0x24}}, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008001500b7040000000000008500000058"], 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

879.019036ms ago: executing program 2 (id=1009):
r0 = socket(0x10, 0x803, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000000)={'syztnl1\x00', &(0x7f0000000880)={'syztnl2\x00', 0x0, 0x0, 0xdf, 0xd, 0x0, 0x5f, @private1, @loopback={0xfec0ffff00000000, 0xffff8881114a4aa8}, 0x8000, 0x2f00, 0xdd27, 0xc6}})

875.746766ms ago: executing program 2 (id=1010):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async)
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0x0, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x34, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x8, 0x6, 0x30000}, @TCA_FQ_QUANTUM={0x8, 0x3, 0x10}, @TCA_FQ_FLOW_DEFAULT_RATE={0x8, 0x6, 0x4}, @TCA_FQ_RATE_ENABLE={0x8}, @TCA_FQ_BUCKETS_LOG={0x8, 0x8, 0x20}, @TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x8001}]}}]}, 0x60}}, 0x0) (async)
sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000e40)=@newtfilter={0x84, 0x2c, 0xd27, 0x70bd2d, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0x0, 0x3}, {}, {0xfff3, 0xffe0}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0xd, 0xd0ea, 0x20000001, 0x3, 0x4}, 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x50}, 0x0)
r4 = socket(0x400000000010, 0x3, 0x0) (async)
r5 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000002080)=@delchain={0x10a8, 0x66, 0x425, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff2}, {}, {0xb, 0xfff3}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x1078, 0x2, [@TCA_CGROUP_POLICE={0xc70, 0x2, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0xfff, 0x4892, 0x5, 0x1000, 0x3, 0x25d7, 0x6, 0x1, 0x1, 0x1, 0x401, 0xa52, 0x3ff, 0x1, 0xdfc, 0x3, 0x7ff, 0x5, 0x54e, 0x273, 0xf, 0x9, 0x7fffffff, 0x197, 0x2, 0x4, 0x8, 0x4, 0xea, 0x54000000, 0x10001, 0x1, 0x3, 0x8, 0x101, 0x10001, 0x4, 0xfffffffa, 0x715d, 0x4, 0x601, 0x401, 0x7, 0x8, 0x3, 0x5, 0x7, 0x81e, 0xce1f, 0xffffff8a, 0x1, 0x1, 0x5, 0x6, 0x0, 0x0, 0x5, 0x5, 0x7, 0x3, 0x1, 0x10d, 0x0, 0x9, 0x0, 0x8, 0x7, 0xbd6f, 0x1, 0x4, 0x7fffffff, 0x9, 0x7fffffff, 0xffff787c, 0xf717, 0xfffff800, 0x9, 0x40, 0x5, 0x6, 0xfffffff8, 0x6, 0x10000, 0x222376f7, 0x1, 0x9, 0xbe, 0xdb, 0x8, 0x4, 0x10, 0x0, 0x6, 0x2, 0x7f, 0x0, 0x3, 0x2, 0x10000, 0xfffffff8, 0x3ff, 0xd, 0x5, 0x0, 0x2, 0x1ff, 0x2, 0xc7, 0x0, 0xffc, 0x3, 0x4, 0x8, 0x9, 0x7, 0x4, 0x3497, 0x6, 0x6, 0x5, 0xffff, 0x7ff, 0x63b48ada, 0x1, 0x10001, 0x2, 0x80000000, 0x80, 0x3, 0xa, 0xff1, 0x3, 0x3, 0x9, 0x5, 0x4, 0x425fdecf, 0x80, 0x8899, 0xffffffef, 0x0, 0xffffffff, 0xfff, 0x0, 0x7, 0x3, 0x7, 0x81, 0x5f8, 0x1, 0x0, 0x2, 0x7, 0x28000, 0x3, 0x101, 0x2, 0x10001, 0xfffffffa, 0x401, 0x1, 0x9, 0x0, 0x1, 0x3, 0xfffffff8, 0x7, 0x3, 0xe, 0xfffffffe, 0x8, 0x7cf4f91, 0xe0a, 0x3, 0x6, 0xf48, 0x4, 0xe3, 0x4, 0xfffffffe, 0xb60b, 0x80000000, 0xc85, 0xb0, 0x2, 0x6, 0x5b8b, 0x0, 0x1, 0xd, 0x2, 0x4, 0x8000002, 0x9, 0xfffff801, 0x1, 0x2, 0x4, 0x8, 0xfffffffc, 0x6, 0x1, 0x1000, 0x6d000000, 0x8, 0x4, 0x9, 0x3, 0x9, 0x8, 0x5, 0xc509, 0x5, 0x4, 0x8, 0x2, 0x0, 0x3c2eaf3d, 0x772c, 0x6, 0xffffa4ac, 0x8, 0x0, 0x6, 0x800, 0xd3, 0x8, 0x1fd60, 0x6, 0xff, 0x59, 0x7cd1, 0x4, 0x5, 0x4, 0x1, 0x2, 0x5, 0xd7, 0x0, 0x10, 0x1ff, 0x6, 0xa5e4, 0x3, 0x6, 0x1, 0x6, 0x9, 0x5, 0x7, 0x3, 0x27, 0x1000, 0x1, 0x5]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x9}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x4}, @TCA_POLICE_RATE={0x404, 0x2, [0x3, 0x2, 0x12, 0x8, 0xf610, 0xecb3, 0xa, 0x8, 0x9, 0x7fffffff, 0x0, 0x1, 0x9, 0x7, 0x9, 0x2, 0x401, 0x4, 0x8001, 0xf25e, 0x8000, 0x3, 0x1, 0x7000000, 0x800088, 0xa611, 0x8, 0x240000, 0x5, 0x8, 0xb10c, 0x2, 0x9, 0x81, 0xffffffff, 0x8000, 0xc, 0x4, 0xb920, 0xb, 0x1, 0xfffffffb, 0x4, 0x80, 0x5, 0x1006, 0xfff, 0x5, 0x9, 0x200, 0x844, 0x5, 0x4, 0x5, 0x90c, 0x0, 0x0, 0x40, 0x9, 0x9, 0xfffffffc, 0x7, 0xb, 0x0, 0xd400, 0x2, 0x4, 0xfffffffd, 0x3d, 0x7fff, 0x81, 0xb, 0x0, 0xb, 0x0, 0x41, 0x5, 0x1, 0x0, 0xea3, 0x8, 0x3, 0xa0, 0x0, 0xffffffff, 0x8, 0x80000001, 0x4, 0x2, 0x7, 0xfffffff8, 0xd, 0x4799, 0x5, 0x5, 0x2, 0x6c50, 0x5, 0x2, 0x4, 0x0, 0xdd8d, 0x0, 0x4, 0x7, 0x0, 0x8, 0xa8b6, 0xe, 0x6, 0x80000001, 0x2, 0x2525, 0x6, 0x9, 0x72, 0x3, 0x6, 0x5, 0xec, 0x7ff, 0x38, 0x10, 0x6, 0x4, 0xff, 0x0, 0x5, 0x6, 0x97, 0x133, 0x0, 0xc1a, 0x8, 0x8, 0x2, 0x990, 0x3dfd780c, 0x7c, 0xae7, 0x5, 0x0, 0x2, 0x9, 0x6, 0x0, 0x9, 0x2, 0x2, 0x40, 0x1, 0x2450000, 0x1, 0x7ff, 0xec6b, 0x7, 0x8, 0x6, 0x80, 0x3, 0x6, 0x100, 0x5, 0x400, 0x3, 0x7e06, 0xf08, 0x10, 0x2, 0x5, 0xef7f, 0x1, 0x4, 0x6, 0x9, 0x5, 0x6, 0x4, 0x6, 0x4, 0x3d, 0x3, 0x80000001, 0x3, 0x3, 0x4, 0x8, 0x4, 0x5, 0x2, 0xffff7fff, 0x8, 0x6, 0x6, 0x6, 0xd26c, 0x1, 0xffff, 0x6, 0x3, 0x4, 0x8, 0x31, 0x12000000, 0xd2878be, 0x6, 0x0, 0x10, 0x1d36, 0x75af, 0x80, 0x8, 0x8, 0x4, 0xc9, 0x80, 0x7f, 0x2, 0x6, 0x5, 0x1, 0x7, 0x0, 0x6da, 0xfffffff9, 0x1, 0xffff199e, 0xf, 0x0, 0x6, 0x40, 0x1, 0x6, 0x0, 0x7, 0x80000000, 0x987, 0x2, 0x8000, 0x80000000, 0x2, 0xfff, 0xbf2, 0xffffffff, 0x194, 0x1, 0x51c, 0x7, 0x1a5, 0xcff6, 0x1, 0x401, 0x10, 0x0, 0xdc6, 0x7ff]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x6, 0xb8db, 0x10000, 0xffffffff, 0x2, 0x7, 0x3, 0xfffffffe, 0x1ff, 0x3, 0x80, 0x4, 0x8, 0x3, 0x0, 0x0, 0xfffffffb, 0xd353, 0x1, 0xfff0000, 0x3, 0x1, 0x4, 0xd1, 0x6, 0x7, 0x0, 0xe71a, 0xfffffffe, 0x2d3f, 0xfff, 0x5, 0x1, 0x7, 0xfffffffa, 0x400, 0x0, 0x7, 0x7, 0x6, 0x1, 0x53, 0x0, 0xd5, 0x200, 0x5, 0x1, 0x74a, 0xc848, 0x5, 0x8, 0xfff, 0x10000, 0x0, 0xfffffff5, 0xb, 0x4191, 0x6, 0x0, 0xf3ab, 0x9, 0xe000000, 0xb227, 0x100, 0x4048, 0x0, 0x80000001, 0xe, 0x1, 0x0, 0xffff, 0x5, 0x0, 0x101, 0x2, 0x1, 0xfff, 0x2, 0x5, 0xfffff64e, 0xffffffff, 0xa59, 0x40, 0xddf, 0xfffffd28, 0x8, 0x0, 0x1ff, 0x5, 0x8, 0xac9, 0x0, 0x937e, 0xfffffff9, 0x1, 0x4, 0x3, 0x0, 0x919, 0x8, 0x3, 0xffffffff, 0x7fff, 0x7f, 0xffff, 0x1, 0x7, 0x5, 0xffff0002, 0x75b3, 0x2915, 0xa2c600, 0x1, 0x4, 0x1, 0xfffffff5, 0x7, 0x9, 0x4, 0x67e1, 0xb, 0x7f, 0xfff, 0x1, 0x0, 0x88a, 0x0, 0x9, 0x8, 0xfffffffc, 0x400, 0x7, 0x5, 0x200, 0x10001, 0x94000000, 0x2, 0x8, 0xb6, 0x5, 0x8, 0x7d95, 0x3ff, 0xe402, 0x4471, 0x8a7, 0x4, 0x9, 0x5, 0xa5, 0xffffff80, 0x3, 0x10000, 0xf368, 0x20e7cdbb, 0x0, 0xfffffff9, 0xff, 0x8, 0x5, 0x80000, 0xffff, 0x7, 0x7, 0x2, 0xc, 0x799f386d, 0x5, 0x0, 0x0, 0x7a8ebd7e, 0x9, 0x4, 0xd, 0xf, 0x0, 0x196b, 0x80000000, 0x0, 0x5, 0x63, 0x8, 0x5, 0x7aa63c35, 0xfffffff6, 0x3, 0x5, 0x7fffffff, 0x7, 0x7f, 0x800000, 0xffffff87, 0x6, 0x9c7, 0x80000001, 0x2, 0x1, 0x8, 0x5, 0x2d957e9d, 0x4, 0x423, 0xb, 0x4, 0x8, 0x200, 0x10000, 0x1, 0xfffffff7, 0x80000001, 0x6, 0xfffffffa, 0xc, 0x7, 0x1, 0xc00000, 0x8, 0x1, 0x0, 0x2, 0xca17, 0x7, 0x3, 0x81, 0x9, 0x4, 0xfffffffc, 0x8, 0x8, 0x4, 0x10000, 0x22c, 0x6, 0x4, 0xd, 0x0, 0x6, 0xfffffffa, 0x1ff, 0x3, 0x3, 0x7, 0x3, 0x6, 0x226871b2, 0x4, 0x7, 0x0, 0x90e, 0xd, 0x3ff, 0xa, 0xfff, 0x3, 0x0, 0x7fffffff]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x9}, @TCA_POLICE_TBF={0x3c, 0x1, {0x7fffffff, 0x1, 0x5, 0x2, 0x7ff, {0xfb, 0x2, 0x5, 0x2, 0x3e, 0x8}, {0x7, 0x1, 0x6, 0x0, 0xc, 0x57}, 0x4, 0x5, 0x7}}]}, @TCA_CGROUP_EMATCHES={0x224, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x4}}, @TCA_EMATCH_TREE_HDR={0x8}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x101}}, @TCA_EMATCH_TREE_LIST={0x1f8, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0xb0, 0x3, 0x0, 0x0, {{0x4, 0x0, 0x8}, "d2aba0ad2bd3a01f1b5ee6d8340e2e46cf67b1e4a9c0657dfea2235adb00bac81660a010282b207e3fa5c75555063de0c840bba658d65faee03fa83c14e64a4be343395bb6ea7833b057517e1d7386815c7f496e6a58806c1d0e250246930b4167548a2e9345b67a91c7d3fda25a7d6ea45253d1329979d6dbfb6434586cc168588b242ea73e9423e3a90b35a7c06226d20b7eeedfad4de73a1a24d3d2f3365d8c10"}}, @TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0x2, 0x1, 0x2}, {0xfff, 0x80, 0x8001, 0x7, 0x2, 0x2, 0x2}}}, @TCF_EM_IPT={0x2c, 0x1, 0x0, 0x0, {{0x2, 0x9, 0x80}, [@TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x7f}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0xba}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x1}, @TCA_EM_IPT_HOOK={0x8}]}}, @TCF_EM_META={0xd0, 0x3, 0x0, 0x0, {{0x8001, 0x4, 0x8000}, [@TCA_EM_META_LVALUE={0xc, 0x2, [@TCF_META_TYPE_VAR="659f9b5fc7424224"]}, @TCA_EM_META_RVALUE={0xd, 0x3, [@TCF_META_TYPE_VAR="1fad77549858011b1c"]}, @TCA_EM_META_LVALUE={0x29, 0x2, [@TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_VAR="d567da313e", @TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_VAR="4486", @TCF_META_TYPE_VAR="65af58", @TCF_META_TYPE_VAR="73bd41", @TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_INT=0x9]}, @TCA_EM_META_LVALUE={0xc, 0x2, [@TCF_META_TYPE_INT=0x5, @TCF_META_TYPE_INT=0x7]}, @TCA_EM_META_LVALUE={0x33, 0x2, [@TCF_META_TYPE_VAR="f7", @TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_VAR="723c4f3a5573be864dce", @TCF_META_TYPE_VAR="5c9fb4a3d819700cae5c", @TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_VAR="807a560b1c1e", @TCF_META_TYPE_INT=0x2]}, @TCA_EM_META_RVALUE={0x20, 0x3, [@TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_VAR="740cd903a3c4", @TCF_META_TYPE_VAR="a27ea4f476f6", @TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_INT=0x4]}, @TCA_EM_META_LVALUE={0x1a, 0x2, [@TCF_META_TYPE_VAR="ce3bc4689dace77700ba", @TCF_META_TYPE_VAR="f0db9d81d85fe621", @TCF_META_TYPE_INT=0x5]}]}}, @TCF_EM_META={0x30, 0x1, 0x0, 0x0, {{0x3ff, 0x4, 0x4}, [@TCA_EM_META_RVALUE={0x15, 0x3, [@TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_INT, @TCF_META_TYPE_VAR="bd2f387bcc"]}, @TCA_EM_META_RVALUE={0xc, 0x3, [@TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_INT=0x9]}]}}]}]}, @TCA_CGROUP_POLICE={0xc, 0x2, [@TCA_POLICE_RESULT={0x8, 0x5, 0xbcb}]}, @TCA_CGROUP_ACT={0xa4, 0x1, [@m_xt={0xa0, 0xe, 0x0, 0x0, {{0x7}, {0x30, 0x2, 0x0, 0x1, [@TCA_IPT_TABLE={0x24, 0x1, 'security\x00'}, @TCA_IPT_INDEX={0x8, 0x3, 0x1}]}, {0x4b, 0x6, "ea0ca2c1988b1db703e8c8c5e9f27dc6689c66e72670064988de85bfa1589d1ca3f1466d61cffa9714abb3c68ebcc239c7f1d6da7711cb1b52b1e64bbb980becf5fa9798d6c6ca"}, {0xc}, {0xc, 0x8, {0x3, 0x1}}}}]}, @TCA_CGROUP_EMATCHES={0x98, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_IPSET={0x10, 0x3, 0x0, 0x0, {{0x4, 0x8, 0x5}, {0x2, 0x5, 0x2}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}, @TCA_EMATCH_TREE_LIST={0x28, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0x6, 0x7, 0x4}, {{0x0, 0x0, 0x1}, {0x1, 0x1, 0x1, 0x1}}}}, @TCF_EM_IPSET={0x10, 0x2, 0x0, 0x0, {{0x80, 0x8, 0xfffc}, {0x2, 0x6, 0x2}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x48, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x9, 0x7, 0x1}, {{0x1, 0x1}, {0x1, 0x0, 0x0, 0x1}}}}, @TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0x1, 0x7, 0x401}, {{0x4, 0x0, 0x1}, {0x2}}}}, @TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0x5, 0x3, 0xb}, {0x5ec, 0x6, 0xb1ea, 0x5}}}]}]}, @TCA_CGROUP_POLICE={0x54, 0x2, [@TCA_POLICE_AVRATE={0x8, 0x4, 0x3}, @TCA_POLICE_RATE64={0xc, 0x8, 0x1}, @TCA_POLICE_TBF={0x3c, 0x1, {0x200, 0x10000000, 0x401, 0x6, 0x6, {0x3, 0x0, 0x1, 0x795, 0x100, 0x8001}, {0x6, 0x0, 0x1, 0x4, 0x0, 0x14000000}, 0x5656, 0xe7c1, 0x3}}]}, @TCA_CGROUP_EMATCHES={0x44, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x40, 0x2, 0x0, 0x1, [@TCF_EM_IPSET={0x10, 0x2, 0x0, 0x0, {{0x6, 0x8, 0xfff}, {0x4, 0x4, 0x4}}}, @TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x0, 0x3, 0x4}, {0x1000, 0xf, 0x10000, 0x1}}}, @TCF_EM_IPSET={0x10, 0x3, 0x0, 0x0, {{0x8, 0x8, 0x7}, {0x3, 0x4, 0x6}}}]}]}]}}]}, 0x10a8}, 0x1, 0x0, 0x0, 0x8848}, 0x20004800)
socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
ioctl$sock_ifreq(r7, 0x8910, &(0x7f0000000000)={'ip6gretap0\x00', @ifru_mtu=0x6}) (async)
ioctl$sock_netdev_private(r7, 0x8914, &(0x7f0000000000)) (async)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r8}, 0x10) (async)
r9 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r9, 0x0) (async)
r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00'}, 0x94) (async)
r11 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYRESDEC], 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000300)=ANY=[@ANYRES32=r11, @ANYRES32=r10, @ANYBLOB='\a'], 0x10) (async)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r11, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r9}, 0x20) (async)
sendmmsg$inet6(r9, &(0x7f0000002000)=[{{0x0, 0x0, &(0x7f0000000180), 0x1}}, {{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000009c0)='.', 0xc400}], 0x7}}], 0x44, 0x0) (async)
r12 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r12, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) (async)
connect$inet6(r12, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) (async)
setsockopt$inet6_tcp_TCP_ULP(r12, 0x6, 0x1f, &(0x7f0000000300), 0x4) (async)
setsockopt$inet6_tcp_int(r12, 0x11a, 0x3, &(0x7f0000000280)=0x7, 0x4) (async)
setsockopt$inet6_group_source_req(r12, 0x29, 0x2b, &(0x7f0000000280)={0x9, {{0xa, 0x4e24, 0x5, @private1, 0xff}}, {{0xa, 0xfff7, 0x7, @mcast1, 0x80000001}}}, 0x108)

711.393084ms ago: executing program 2 (id=1013):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
r1 = socket$igmp6(0xa, 0x3, 0x3a)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
socket(0x2, 0x80805, 0x0)
setsockopt(r2, 0x84, 0x11, &(0x7f0000000040)="020c0000098011e8", 0x8)
setsockopt$MRT6_ADD_MFC(r1, 0x29, 0x22, &(0x7f0000000000)={{0xa, 0x0, 0x101, @mcast1, 0x8}, {0xa, 0x0, 0xfffffffd, @private2, 0x6}, 0x0, {[0x6, 0x200, 0x1, 0xfffffefc, 0x2d, 0x1, 0x0, 0x200003]}}, 0x5c)
sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c00000015000100000000000000000005000000080001"], 0x1c}, 0x1, 0x0, 0x0, 0x48001}, 0x4000000)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0)
close(r4)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300), r5)
sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r7 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x180, 0x0)
close(r7)
r8 = socket$unix(0x1, 0x1, 0x0)
r9 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r10=>0x0})
sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0xb}, {0xffff, 0xffff}, {0x10, 0xfff1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x0, 0x1, 0x81, 0x7, 0x8, 0x8}, {0x6, 0x1, 0xd, 0x6, 0x6, 0xfb8e000}, 0x6, 0x4, 0x111e}}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x24000011}, 0x0)
sendmsg$nl_route_sched(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r10, {}, {0x2, 0xb}, {0xd, 0xfff3}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}}, 0x4008000)
ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10)
r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003840), 0xffffffffffffffff)
r12 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r12, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r13=>0x0})
sendmsg$NL80211_CMD_SET_CHANNEL(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="01002cbd7800fbdbdf254100000008000300", @ANYRES32=r13, @ANYBLOB="0c009900070000002c000000"], 0x28}}, 0x800)
ioctl$SIOCSIFHWADDR(r7, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})

490.643375ms ago: executing program 2 (id=1015):
ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000040)={<r0=>0xffffffffffffffff, 0x1, 0xb, 0x8})
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TLS_TX(r2, 0x6, 0x1, &(0x7f00000000c0)=@ccm_128={{0x304}, "183d6479dc7ffbb1", "1d7358383b26444ff53b7a25acf27894", "3ec32cc4", "0bef65dddc738a65"}, 0x28)
connect$inet6(r2, &(0x7f0000000240)={0xa, 0x4e22, 0x9, @private0={0xfc, 0x0, '\x00', 0x1}}, 0x1c)
setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000400)={@in6={{0xa, 0x4e24, 0x4, @loopback}}, 0x0, 0x0, 0x41, 0x0, "b208405cce4456e4fc8f2dabd194ff3763f799f91cf7e5e8260998f956ec57c24451db07550335ebf419ebef230a3373685fbacfcf3b6e9633bd997a9bfcf08f6700"}, 0xd8)
setsockopt$inet6_tcp_int(r2, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
bind$netlink(r3, &(0x7f00000016c0)={0x10, 0x0, 0x25dfdbfb, 0x40000044}, 0xc)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000078000000030a01030000000000000000050000000900010073797a300000000008000540000000001c0008800c00024000000000000000000c00014000000000000000000900030073797a3200000000280004800800024000000000140003007465616d5f736c6176655f3000000000080001400000000114000000020a090100000000000000000000000014000000110001"], 0xd4}}, 0x4000010)
connect$inet6(r2, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100000000000000000001000000280001801400040000000000000002000000ffffac1414aa060001000a0080000800060003"], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000)
sendmsg$MPTCP_PM_CMD_SET_LIMITS(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r5, 0x2, 0x70bd29, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040}, 0x4)
write$rfkill(0xffffffffffffffff, &(0x7f0000000200)={0x6, 0x0, 0x0, 0x1}, 0x8)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="5000000010004b0400000000000000007a000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000300012800b0001006272696467650000200002800800080088a8ffff05000700070000000a0003000000000000000000d598dfc778a21b562cefdfe787c01de660f6a08c33548e55bcb549da5b38a113827364c947a624712162c26a3df7cc66d0613f261c4553ec24d87ab98e3b01ad1e060100d60be1d67b4bd98695e96556d55d25ba7e0d3a9397b3fadc17adbdbedb4732a33a86ad456edc1a86399d948fb1d7173a3c604bb27a75f8c7cb749174935e981209d4a95eadb412de0323284f10abf75b46d05764320637130d2488915ec29275e7a5f6eb8d3999f4f2f830b8f0e6bef8b0d2b68b327b"], 0x50}}, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000040)={0xffffffffffffffff, 0x1, 0xb, 0x8}) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
socket$inet6_tcp(0xa, 0x1, 0x0) (async)
setsockopt$inet6_tcp_TLS_TX(r2, 0x6, 0x1, &(0x7f00000000c0)=@ccm_128={{0x304}, "183d6479dc7ffbb1", "1d7358383b26444ff53b7a25acf27894", "3ec32cc4", "0bef65dddc738a65"}, 0x28) (async)
connect$inet6(r2, &(0x7f0000000240)={0xa, 0x4e22, 0x9, @private0={0xfc, 0x0, '\x00', 0x1}}, 0x1c) (async)
setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000400)={@in6={{0xa, 0x4e24, 0x4, @loopback}}, 0x0, 0x0, 0x41, 0x0, "b208405cce4456e4fc8f2dabd194ff3763f799f91cf7e5e8260998f956ec57c24451db07550335ebf419ebef230a3373685fbacfcf3b6e9633bd997a9bfcf08f6700"}, 0xd8) (async)
setsockopt$inet6_tcp_int(r2, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) (async)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
bind$netlink(r3, &(0x7f00000016c0)={0x10, 0x0, 0x25dfdbfb, 0x40000044}, 0xc) (async)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
sendmsg$NFT_BATCH(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000078000000030a01030000000000000000050000000900010073797a300000000008000540000000001c0008800c00024000000000000000000c00014000000000000000000900030073797a3200000000280004800800024000000000140003007465616d5f736c6176655f3000000000080001400000000114000000020a090100000000000000000000000014000000110001"], 0xd4}}, 0x4000010) (async)
connect$inet6(r2, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) (async)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) (async)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100000000000000000001000000280001801400040000000000000002000000ffffac1414aa060001000a0080000800060003"], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) (async)
sendmsg$MPTCP_PM_CMD_SET_LIMITS(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r5, 0x2, 0x70bd29, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040}, 0x4) (async)
write$rfkill(0xffffffffffffffff, &(0x7f0000000200)={0x6, 0x0, 0x0, 0x1}, 0x8) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="5000000010004b0400000000000000007a000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000300012800b0001006272696467650000200002800800080088a8ffff05000700070000000a0003000000000000000000d598dfc778a21b562cefdfe787c01de660f6a08c33548e55bcb549da5b38a113827364c947a624712162c26a3df7cc66d0613f261c4553ec24d87ab98e3b01ad1e060100d60be1d67b4bd98695e96556d55d25ba7e0d3a9397b3fadc17adbdbedb4732a33a86ad456edc1a86399d948fb1d7173a3c604bb27a75f8c7cb749174935e981209d4a95eadb412de0323284f10abf75b46d05764320637130d2488915ec29275e7a5f6eb8d3999f4f2f830b8f0e6bef8b0d2b68b327b"], 0x50}}, 0x0) (async)

411.379353ms ago: executing program 0 (id=1017):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0)
getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x10, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x10, 0x48}, [@ldst={0x3, 0x0, 0x3}], {0x95, 0x0, 0x74}}, &(0x7f0000003ff6)='GPL\x00', 0x8, 0xc3, &(0x7f0000000400)=""/198, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffff52}, 0x37)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="f5ff1b59ee5355b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000305000000000007000000000000", @ANYRES32=0x0, @ANYBLOB="0003311b51130000140012800b00010062726964676500000400028008000a00", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0xc0b0)

409.161754ms ago: executing program 1 (id=1018):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0x20, 0xffffffff, 0x1, 0x1}, 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000140)="e9897844e0f058f1b257b45e6433798dff1b66a5f1c88c354becd737d3019c2e9fe2901c531d42f3e00d4fb21122933e8fe78f727844e723981c439b2a102d15590bd4300bd9955d4023f8d5e228131a1fae67f245f8b376ba939eecc9fa", &(0x7f0000000ac0), 0x3, r0}, 0x38)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a2c000000090a01040000bc7a000000000a001004090001008b797a31000000000d0002"], 0x54}, 0x1, 0x0, 0x0, 0x40040d1}, 0x40)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_TIMEOUT(r2, 0x0, 0x48a, &(0x7f0000000000)={0xfffffff8, 0x6, 0x25}, 0xc)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge0\x00', <r3=>0x0})
unshare(0x24060400)
socket(0x2, 0x2, 0x1)
r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
close(r4)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00')
socket$key(0xf, 0x3, 0x2)
r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r5, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa)
bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, <r6=>0x0}, 0x8)
r7 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=r6, 0x4)
bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000500)={r7, r5, 0x4, r5}, 0x10)
r8 = socket$inet(0x2, 0x2, 0x1)
connect$inet(r8, &(0x7f0000000180)={0x2, 0x0, @remote}, 0x10)
sendmmsg$inet(r8, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f00000004c0)=[{0x0}, {&(0x7f00000000c0)="08001497733f5d3e", 0x2a}], 0x2}}], 0x1, 0x8000)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="540000001300010029bd7000fbdbdf2500000000", @ANYRES32=r3, @ANYBLOB="86ee01000904000005001100010000002c002b800800"], 0x54}}, 0x24008844)

311.454865ms ago: executing program 1 (id=1019):
r0 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0x2, &(0x7f0000000000)=0xe, 0x4)
r1 = accept$netrom(0xffffffffffffffff, 0x0, &(0x7f0000000040))
ioctl$sock_netrom_SIOCDELRT(r1, 0x890c, &(0x7f0000000080)={0x0, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={'rose', 0x0}, 0x9, 'syz1\x00', @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0xa99f, 0x2, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @default, @null, @bcast]})
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$HCIINQUIRY(r2, 0x800448f0, &(0x7f0000000100)={0x4, 0x6, "9245db", 0x1, 0xaf})
ioctl$BTRFS_IOC_DEV_INFO(r1, 0xd000941e, &(0x7f0000000140)={<r3=>0x0, "c0cbce8c9e74595b613836197f560f59"})
ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f0000001140)={r3, "5111c5e4dc0255ccb94c1ae6b7874a16"})
ioctl$FICLONERANGE(r2, 0x4020940d, &(0x7f0000002140)={{r1}, 0xff, 0x0, 0x4})
r4 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_DELAYED_SACK(r4, 0x84, 0x10, &(0x7f0000002180)=@sack_info={0x0, 0x1, 0xff}, 0xc)
r5 = socket$inet_smc(0x2b, 0x1, 0x0)
ioctl$sock_inet_SIOCRTMSG(r5, 0x890d, &(0x7f0000002200)={0x0, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x42}}, {0x2, 0x4e20, @broadcast}, {0x2, 0x4e20, @remote}, 0x80, 0x0, 0x0, 0x0, 0x401, &(0x7f00000021c0)='veth1_to_hsr\x00', 0x2, 0x0, 0x8})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r6, 0x10e, 0x1, &(0x7f0000002280)=0x6, 0x4)
r7 = socket$nl_audit(0x10, 0x3, 0x9)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r7, 0x10e, 0x4, &(0x7f00000022c0)=0x9, 0x4)
r8 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000002340)=@generic={&(0x7f0000002300)='./file0\x00', 0x0, 0x8}, 0x18)
r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000002380)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x5}, 0x50)
bpf$PROG_BIND_MAP(0x23, &(0x7f0000002400)={r8, r9}, 0xc)
r10 = getpid()
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000002480)={r10, 0xffffffffffffffff, 0x0, 0xb, &(0x7f0000002440)='&>,^,!-}$:\x00'}, 0x30)
ioctl$FICLONE(0xffffffffffffffff, 0x40049409, r8)
r11 = accept4$tipc(0xffffffffffffffff, 0x0, &(0x7f00000024c0), 0x800)
ioctl$FIDEDUPERANGE(r11, 0xc0189436, &(0x7f0000002500)={0xfffffffffffffffc, 0x2, 0x5, 0x0, 0x0, [{{r8}, 0x9}, {{r6}, 0x9}, {{r8}, 0xfffffffffffffff9}, {{r9}, 0x6}, {{r8}, 0x34}]})
r12 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r12, &(0x7f00000025c0)={0x28, 0x0, 0x2710, @my=0x0}, 0x10)
socket$kcm(0x29, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000002680)={{r1}, &(0x7f0000002600), &(0x7f0000002640)=r8}, 0x20)
connect$rose(0xffffffffffffffff, &(0x7f0000002700)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x3, [@default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}, 0x40)

309.947674ms ago: executing program 2 (id=1020):
socket$key(0xf, 0x3, 0x2)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket(0x10, 0x3, 0x0)
sendmsg$kcm(r0, 0x0, 0x8085)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, 0x0)
pipe(0x0)
close(0xffffffffffffffff)
socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xcc}, 0x8)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000700)=[@in6={0xa, 0x4e23, 0xe, @empty, 0x4}], 0x1c)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000811010000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41000}, 0x94)
sendmmsg$inet6(r2, &(0x7f00000003c0)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x280020}, 0x1c, &(0x7f00000000c0)=[{&(0x7f0000000540)='\x00', 0x1}], 0x1}}], 0x1, 0x20008050)
setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f0000000040)=ANY=[@ANYRES32=0x0, @ANYRES16, @ANYRES16=r2], 0x1000f)
ioctl$sock_SIOCOUTQ(r1, 0x5411, &(0x7f0000000080))
sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000000)=ANY=[@ANYBLOB="a03700002d00010026bd7000fcdbdf250400000005000b00", @ANYRES32=r1, @ANYBLOB="81120c"], 0x37a0}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000)

309.464763ms ago: executing program 0 (id=1021):
pipe(&(0x7f0000000080))
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000a40)=ANY=[@ANYBLOB="780100001000010000000000fcdbdf2500000000000000000000000000000000fe800000000000000000000000000016fffc0000081e00040000208021000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x178}, 0x1, 0x0, 0x0, 0x24040021}, 0x0)
r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
shutdown(r1, 0x1)
recvmmsg(r1, &(0x7f0000001d00)=[{{0x0, 0x0, &(0x7f0000001640)=[{&(0x7f0000001d40)=""/4078, 0xfee}, {&(0x7f0000000340)=""/141, 0x8d}, {&(0x7f0000002d40)=""/4116, 0x1005}, {&(0x7f0000000400)=""/6, 0x6}, {&(0x7f0000000440)=""/231, 0xe7}], 0x5}}], 0x3ffffbd, 0x0, 0x0)
r2 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000000)={0x2042, 0x4, 0x1}, 0x10)
r3 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r3, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x10000000}}, 0x10)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r4}, 0x10)
unshare(0x62040200)
socket$inet_smc(0x2b, 0x1, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x80)
socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r5, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'streebog256\x00'}, 0x58)
r6 = accept4(r5, 0x0, 0x0, 0x800)
recvmmsg$unix(r6, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000005, 0x8031, 0xffffffffffffffff, 0x0)
r7 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$FS_IOC_SETVERSION(r7, 0x40087602, &(0x7f0000000080)=0x1)
recvmsg(r1, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x10000)
r8 = socket(0x10, 0x3, 0x0)
write(r8, &(0x7f00000000c0)="240000005a001f001007f4f9002304000a04f51108000400020100020800038005000000", 0x24)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001580)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb010018200000000000006c0000006c0000000200000000000000000000070000000000000000070000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d700000000000000000000000000000000a1d8faf5bd23dd800008"], 0x0, 0x86}, 0x28)
openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)

305.824943ms ago: executing program 1 (id=1022):
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000080)=0x40000)
ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000000)=0x31)
r1 = socket(0x10, 0x3, 0x0)
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000001a80)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe50a10a000600014002020c600e41b0000900ac000a0501000000160012000a00ff120048035c3b61c1d67f6f94007134cf6efb8007a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667daffffffffff1f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5b7276505de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000001008af26c8b7b55f4d2a6823a45", 0xd8}], 0x1}, 0x894)
sendmmsg(r1, &(0x7f0000000000), 0x4000000000001f2, 0x0)
r2 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0)
r3 = socket$key(0xf, 0x3, 0x2)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r5 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r4, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x20}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @broadcast}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0x5, 0x0, 0x700, 0x0, 0x14}}}}}, 0x36)
sendmmsg(r3, &(0x7f0000000180), 0x229ffa1c4ce5369, 0x0)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@allocspi={0xf8, 0x16, 0x1, 0xffffffff, 0x0, {{{@in, @in6=@private2, 0x4e20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@mcast1, 0x0, 0x3c}, @in=@broadcast, {0x5, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {0x0, 0x4, 0xfffffffffffffff8}, {0x0, 0x3}, 0x0, 0x0, 0xa}, 0x5, 0x5}}, 0xf8}, 0x1, 0x0, 0x0, 0x1}, 0x4000080)
close(0x3)
r7 = accept4$rose(0xffffffffffffffff, &(0x7f0000000040)=@full={0xb, @dev, @netrom, 0x0, [@remote, @rose, @remote, @netrom, @remote, @null]}, &(0x7f00000000c0)=0x40, 0x80000)
listen(r7, 0x3)

191.316073ms ago: executing program 2 (id=1023):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x207ffffe, 0x4)
bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff})
listen(r1, 0x400004)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4)
setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000000)=0x822, 0x4)
sendto$inet(r2, 0x0, 0x0, 0x404c0c6, &(0x7f0000000180)={0x2, 0x4e21, @remote}, 0x10)
r3 = socket(0xa, 0x3, 0x3a)
ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000040)=@ethtool_link_settings={0x4d, 0x0, 0x4, 0x0, 0x7, 0x0, 0x0, 0x0, 0x20, 0xfd, [0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x4, 0x2]}})
r4 = socket$inet6_mptcp(0xa, 0x1, 0x106)
r5 = socket(0x10, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, @remote, @empty, 0x7800, 0x80, 0xfffffffc, 0xdc67}})
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kfree\x00', r6}, 0x10)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f00000002c0)={'syztnl1\x00', 0x0})
connect$inet6(r4, &(0x7f0000000040)={0xa, 0x4001, 0xfffffffc, @loopback, 0xfffffffa}, 0x1c)
r7 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r7, &(0x7f0000000280), 0x0)
setsockopt$inet6_IPV6_DSTOPTS(r3, 0x29, 0x3b, &(0x7f0000000200)=ANY=[@ANYBLOB="7307000000000000072000000002060f060008000000000000000f000000000000000500000000000000c204000000f1010700000000000000c20400018001c2040000000800000082"], 0x48)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_netfilter(r8, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000040)={0x14, 0x4, 0xa, 0x101, 0x70bd28, 0x25dfdbff, {0x1, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x2004d805}, 0x8000)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x5, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000004830000000000000fa40000007010000080020007500feff0000820095"], 0x0, 0x4}, 0x94)
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000011c0)=@newtaction={0xe6c, 0x30, 0x25, 0x0, 0x0, {}, [{0xe58, 0x1, [@m_pedit={0xe54, 0x1, 0x0, 0x0, {{0xa}, {0xe28, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x4}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x7}, {0x0, 0x0, 0x0, 0xfffffffd}, {}, {0x0, 0x2}, {}, {}, {}, {0xfffffffc}, {}, {}, {}, {}, {0xb0}, {}, {0x0, 0x0, 0x0, 0x4}, {0x0, 0x0, 0x0, 0x20}, {0x0, 0x0, 0x0, 0x100000}, {}, {}, {}, {0x7}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {}, {}, {}, {0x0, 0x800000}, {}, {}, {0x0, 0xea3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x2, 0xfffffffd}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0xfffffffd}, {0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe6c}}, 0x0)
r10 = socket$nl_route(0x10, 0x3, 0x0)
pselect6(0x40, &(0x7f0000000140)={0x5, 0x6, 0x8, 0x8, 0x0, 0x2, 0x0, 0x8}, &(0x7f0000000180)={0x9, 0x2, 0x7fff, 0x22c, 0x5, 0x0, 0xa9e, 0x7}, &(0x7f00000001c0)={0x7fffffff, 0x9, 0x81, 0xa1, 0x3, 0xff, 0x1, 0xffff}, 0x0, 0x0)
sendmsg$nl_route(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8000}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x0)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef)

99.285125ms ago: executing program 1 (id=1024):
r0 = socket$inet6_sctp(0xa, 0x801, 0x84)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @private1, 0x7}, 0x1c)
shutdown(r0, 0x1) (async)
getsockopt$inet_sctp6_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f00000001c0)={0x0, 0x401, 0xfffffffd, 0x534, 0x6, 0x8, 0x6, 0x8c, {0x0, @in6={{0xa, 0x4e20, 0x1f, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x81}}, 0x4, 0x1, 0x5, 0x5}}, &(0x7f0000000000)=0xb0) (async)
pwritev(r0, &(0x7f0000000180)=[{&(0x7f0000001180)="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", 0x1000}, {&(0x7f0000000600)="113db5131d1a2b22d8201d5dd24de949aec1221fb19f23f463fcf8322c09a939a51cb6353a47c4d54ce04aba82ea6d007baa972524ec48fc547a56340d83f95ec88691e9fae644ba5a2625e1deb1c79a1a8c294ddbdbf4c42474cd889db1a53ec7e63b14007a27ad5425ce5814997709ba9d8ad69f8ecbd56821518898d9c4d1f48889110e8687d977e5b6f379a8dc73c9fc3f4192074dde51c6b8f02c31de510ef9d8d04bd316758c0b9537fa36415f681e2924610d6d247ac0", 0xba}, {&(0x7f0000000440)="bec46fad508b4ab15d2915b605baef9f076620e2c05bcbab4c0e03b3727b95ed6a76c1d31f9cb17bd2b7070dead0902bef74e7d6642e2a93f95fa584d882bb46cff84d504ea02d7d16f32bb4beda5c", 0x4f}], 0x3, 0x9001, 0x7f) (async)
r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000700)=ANY=[@ANYBLOB="1000000004000000040000000600000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000006c0000000400"], 0x50)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000180)={r1, &(0x7f00000005c0)="dc9b709847", &(0x7f00000003c0)=""/79}, 0x20) (async)
r2 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000000)={0x4800}, 0x10) (async)
sendmsg$nl_generic(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="180000001600010a00e4ffffffffff030005"], 0x18}}, 0x0) (async)
r3 = socket$inet_mptcp(0x2, 0x1, 0x106)
getsockopt$inet_mptcp_buf(r3, 0x11c, 0x3, &(0x7f0000000280)=""/209, &(0x7f0000000080)=0xd1) (async)
r4 = socket$kcm(0x10, 0x2, 0x0) (async)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) (async)
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000340)={'ipvlan0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@delqdisc={0x24, 0x26, 0x1, 0x60bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0xf, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x4081}, 0x2400c800) (async)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r5, 0x0)
getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f00000000c0)=@assoc_value, &(0x7f0000000140)=0x8) (async)
sendmsg$kcm(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000500)="d8000000180081054e81f782db4cb904021d0800fe007c05e8fe55a10a0015000200142603600e12080005007f370401a8001600640006000400027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2e98a61e284ce5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970392", 0xd8}], 0x1}, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0) (async)
r9 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) (async)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'macvlan0\x00'})
sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="5c000000100003052abd70000100008000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800c0001006d6163766c616e002400028008000100100000000400058008000300030000000a000400aaaaaaaaaaaa000008002c00ffffff7f"], 0x5c}}, 0x0)

74.398422ms ago: executing program 1 (id=1025):
r0 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendmmsg$inet6(r0, &(0x7f0000002680)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000040)="18", 0x1}], 0x1}}, {{&(0x7f0000000140)={0xa, 0x4e20, 0x0, @private0, 0x80000001}, 0x1c, &(0x7f0000000800)=[{&(0x7f0000000180)="ed", 0x1}], 0x1}}], 0x2, 0x0)
shutdown(r0, 0x1)
getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x82, &(0x7f0000000340), &(0x7f0000000480)=0x10)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000009b40)=@newtaction={0x7c, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x68, 0x1, [@m_tunnel_key={0x64, 0x1, 0x0, 0x0, {{0xf}, {0x34, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x4, 0xb, @empty}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x7c}}, 0x0)
r2 = socket$key(0xf, 0x3, 0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, 0xffffffffffffffff, 0x0)
setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x11, &(0x7f0000000880)=0x3, 0x4)
r3 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r2, 0x8983, &(0x7f0000000840)={0x6, 'wlan1\x00', {0xb46}, 0x5})
setsockopt$SO_J1939_ERRQUEUE(r3, 0x6b, 0x4, &(0x7f0000000fc0), 0x4)
sendmsg$key(r2, &(0x7f0000000040)={0xa, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="0203fe020d00000000000000000000000300060000000004020000000000b9c200000000000000000000020001000000000000000900000000ac1414aa0000000000000000020008000800000034000000000000000100140035000000"], 0x68}, 0x1, 0x7}, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x12, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000003100000095"], &(0x7f0000000080)='GPL\x00', 0x6, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
close(0x3)
r6 = socket$inet6(0xa, 0x80002, 0x0)
connect$inet6(r6, &(0x7f0000000000)={0xa, 0x4e2a, 0xffffffff, @mcast2, 0x9}, 0x1c)
setsockopt$inet_int(r5, 0x0, 0x32, &(0x7f0000000f00)=0x1000000, 0x4)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r4, 0xc020f509, &(0x7f0000000000)={<r7=>r4, 0x9, 0x47d3, 0x100000000})
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000005c0)={r7, 0x58, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r8=>0x0}}, 0x10)
r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0)
socket$can_bcm(0x1d, 0x2, 0x2)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xd, 0x12, r9, 0x1f4d2000)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000740)=@bpf_tracing={0x1a, 0x15, &(0x7f00000003c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r7}}, {}, [@map_idx_val={0x18, 0x3, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1000}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r7}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000001c0)='syzkaller\x00', 0x81, 0x65, &(0x7f00000004c0)=""/101, 0x41000, 0x4, '\x00', r8, 0x18, 0xffffffffffffffff, 0x8, &(0x7f0000000600)={0x9, 0x2}, 0x8, 0x10, &(0x7f0000000640)={0x3, 0x9, 0xde, 0x40}, 0x10, 0x10555, r7, 0x5, &(0x7f0000000680)=[r7, r7, r7, r7, r7, r7, r9, 0x1], &(0x7f00000006c0)=[{0x3, 0x3, 0xf, 0x5}, {0x5, 0x5, 0xf, 0x2}, {0x0, 0x4, 0x4, 0x8}, {0x2, 0x5, 0x4}, {0x1, 0x1, 0x4, 0x9}], 0x10, 0xffffcc03}, 0x94)
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r10, &(0x7f000000c2c0)={0x0, 0xfffffffffffffe01, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000060a0b0400000000000000000200000038000480340001800b00010074617267657400002400028010000100434f4e4e5345434d41524b0005000300ef00000008000240000000000900010073797a30000000000900020073797a320000000014000580080002400000000208000140e1"], 0xa0}}, 0x0)
write$tcp_congestion(r7, &(0x7f0000000100)='vegas\x00', 0x6)

0s ago: executing program 1 (id=1026):
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
getsockopt(r0, 0x28, 0x1, 0x0, 0x0)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0)
ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000280)=0x3)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_GET_COALESCE(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x14}}, 0x0)
getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x8f)
bind$x25(r3, &(0x7f00000001c0), 0x12)
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, &(0x7f00000000c0)={<r5=>0x0, 0xc51, 0x20, 0x8, 0x3}, &(0x7f0000000100)=0x18)
r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$ETHTOOL_MSG_CHANNELS_GET(r7, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=r6, @ANYBLOB="3ffb99b81d3a0378f44122"], 0x14}}, 0x0)
setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r3, 0x84, 0x77, &(0x7f0000000180)={r5, 0x16a, 0x7, [0x200, 0x5, 0x1, 0x7, 0x3, 0x4, 0x5]}, 0x16)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000030400000006000000005dcc0300", @ANYRES32=r4, @ANYBLOB="71e79fd800000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r8], 0x3c}}, 0x0)
r9 = socket$tipc(0x1e, 0x5, 0x0)
setsockopt$TIPC_GROUP_JOIN(r9, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10)
bind$tipc(r9, 0x0, 0x0)
close(0x3)
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)=@newtfilter={0x34, 0x10, 0x1, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x74, r4, {0xffe0}, {}, {0xa, 0x1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}]}, 0x34}, 0x1, 0xf0ffffffffffff, 0x0, 0x4004140}, 0x0)

kernel console output (not intermixed with test programs):

_1
[   61.941280][ T6137] batman_adv: batadv0: Removing interface: batadv_slave_1
[   62.021564][ T6143] tipc: Started in network mode
[   62.023509][ T6143] tipc: Node identity 22b30ac7c782, cluster identity 4711
[   62.027230][ T6143] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   62.031104][ T6143] syzkaller0: entered promiscuous mode
[   62.033671][ T6143] syzkaller0: entered allmulticast mode
[   62.050589][ T6145] pim6reg: entered allmulticast mode
[   62.052618][ T6146] pim6reg: left allmulticast mode
[   62.063158][ T6143] tipc: Resetting bearer <eth:syzkaller0>
[   62.068302][ T6142] tipc: Resetting bearer <eth:syzkaller0>
[   62.079772][ T6142] tipc: Disabling bearer <eth:syzkaller0>
[   62.120479][ T6149] __nla_validate_parse: 12 callbacks suppressed
[   62.120494][ T6149] netlink: 64 bytes leftover after parsing attributes in process `syz.1.60'.
[   62.127650][ T6149] netlink: 'syz.1.60': attribute type 1 has an invalid length.
[   62.146288][ T6149] 8021q: adding VLAN 0 to HW filter on device bond0
[   62.251238][ T6158] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   62.254000][ T6158] syzkaller0: entered promiscuous mode
[   62.257205][ T6158] syzkaller0: entered allmulticast mode
[   62.267577][ T6158] tipc: Resetting bearer <eth:syzkaller0>
[   62.270468][ T6157] tipc: Resetting bearer <eth:syzkaller0>
[   62.279498][ T6157] tipc: Disabling bearer <eth:syzkaller0>
[   62.348367][ T6164] syzkaller0: entered promiscuous mode
[   62.350551][ T6164] syzkaller0: entered allmulticast mode
[   62.364954][ T6164] dvmrp8: entered allmulticast mode
[   62.420485][ T6163] dvmrp8: left allmulticast mode
[   62.467771][ T6170] netlink: 8 bytes leftover after parsing attributes in process `syz.1.66'.
[   62.474784][ T6170] gretap0: entered promiscuous mode
[   62.539837][ T6172] 8021q: adding VLAN 0 to HW filter on device bond2
[   62.614899][ T6172] bond_slave_0: entered promiscuous mode
[   62.617159][ T6172] bond_slave_1: entered promiscuous mode
[   62.619887][ T6172] 8021q: adding VLAN 0 to HW filter on device macvlan2
[   62.624771][ T6172] bond2: (slave macvlan2): Enslaving as a backup interface with an up link
[   62.634668][ T6180] netlink: 8 bytes leftover after parsing attributes in process `syz.1.69'.
[   62.654210][ T6180] netlink: 96 bytes leftover after parsing attributes in process `syz.1.69'.
[   62.660100][ T6181] IPVS: sync thread started: state = MASTER, mcast_ifn = geneve0, syncid = 4, id = 0
[   62.716914][   T54] Bluetooth: hci0: command tx timeout
[   62.718937][   T54] Bluetooth: hci1: command tx timeout
[   62.719351][ T5852] Bluetooth: hci2: command tx timeout
[   63.014896][ T6191] netlink: 4 bytes leftover after parsing attributes in process `syz.2.72'.
[   63.205465][ T6194] vlan2: entered promiscuous mode
[   63.210292][ T6194] vlan2: entered allmulticast mode
[   63.212466][ T6194] hsr_slave_1: entered allmulticast mode
[   63.219719][ T6194] 8021q: VLANs not supported on gre0
[   63.223216][ T6194] netlink: 4 bytes leftover after parsing attributes in process `syz.2.73'.
[   63.462331][ T6204] syz_tun: entered allmulticast mode
[   63.469949][ T6204] dvmrp8: entered allmulticast mode
[   63.478025][ T6204] syz_tun: left allmulticast mode
[   63.480171][ T6204] dvmrp8: left allmulticast mode
[   63.604643][ T6218] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   63.624753][ T6218] syzkaller0: entered promiscuous mode
[   63.627764][ T6218] syzkaller0: entered allmulticast mode
[   63.674565][ T6218] tipc: Resetting bearer <eth:syzkaller0>
[   63.690964][ T6217] tipc: Resetting bearer <eth:syzkaller0>
[   63.716555][ T6217] tipc: Disabling bearer <eth:syzkaller0>
[   63.745104][ T6231] netlink: 60 bytes leftover after parsing attributes in process `syz.0.81'.
[   63.751240][ T6231] netlink: 52 bytes leftover after parsing attributes in process `syz.0.81'.
[   63.757464][ T6231] tap0: tun_chr_ioctl cmd 1074025676
[   63.759180][ T6231] tap0: owner set to 0
[   63.763631][ T5878] IPVS: starting estimator thread 0...
[   63.765833][ T6231] IPVS: set_ctl: invalid protocol: 33 172.20.20.170:0
[   63.876307][ T6233] IPVS: using max 46 ests per chain, 110400 per kthread
[   64.058657][ T6252] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   64.069480][ T6252] syzkaller0: entered promiscuous mode
[   64.077025][ T6252] syzkaller0: entered allmulticast mode
[   64.086952][ T6252] bond0: Caught tx_queue_len zero misconfig
[   64.146555][ T6252] tipc: Resetting bearer <eth:syzkaller0>
[   64.169521][ T6251] tipc: Resetting bearer <eth:syzkaller0>
[   64.185226][ T6251] tipc: Disabling bearer <eth:syzkaller0>
[   64.193945][ T6260] netlink: 12 bytes leftover after parsing attributes in process `syz.0.88'.
[   64.438685][ T6279] IPVS: set_ctl: invalid protocol: 40 224.0.0.2:20002
[   64.584550][ T6289] netlink: 'syz.1.93': attribute type 83 has an invalid length.
[   65.215439][ T6317] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   65.228210][ T6317] syzkaller0: entered promiscuous mode
[   65.233881][ T6317] syzkaller0: entered allmulticast mode
[   65.266574][ T6317] tipc: Resetting bearer <eth:syzkaller0>
[   65.304902][ T6323] netlink: 20 bytes leftover after parsing attributes in process `syz.2.96'.
[   65.321636][ T6316] tipc: Resetting bearer <eth:syzkaller0>
[   65.335449][ T6316] tipc: Disabling bearer <eth:syzkaller0>
[   65.365820][ T6323] netlink: 'syz.2.96': attribute type 3 has an invalid length.
[   65.875261][ T6369] netlink: 'syz.2.107': attribute type 1 has an invalid length.
[   65.929050][ T6369] bond3: (slave vti0): The slave device specified does not support setting the MAC address
[   65.933396][ T6369] bond3: (slave vti0): Setting fail_over_mac to active for active-backup mode
[   65.941924][ T6369] bond3: (slave vti0): making interface the new active one
[   65.943405][ T6371] netlink: 'syz.0.108': attribute type 1 has an invalid length.
[   65.945573][ T6369] bond3: (slave vti0): Enslaving as an active interface with an up link
[   65.977242][ T6371] 8021q: adding VLAN 0 to HW filter on device bond1
[   65.982687][ T6383] vlan2: entered allmulticast mode
[   65.983283][ T6388] netlink: 'syz.2.111': attribute type 1 has an invalid length.
[   65.984539][ T6383] bridge_slave_0: entered allmulticast mode
[   66.030306][ T6388] bond4: (slave bridge1): making interface the new active one
[   66.033433][ T6388] bond4: (slave bridge1): Enslaving as an active interface with an up link
[   66.161430][  T661] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.175645][  T661] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.265707][ T6403] tipc: Started in network mode
[   66.273980][ T6403] tipc: Node identity 6e4d54f544e8, cluster identity 4711
[   66.288470][ T6403] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   66.294530][ T6403] syzkaller0: entered promiscuous mode
[   66.302292][ T6403] syzkaller0: entered allmulticast mode
[   66.340376][ T6403] tipc: Resetting bearer <eth:syzkaller0>
[   66.350684][ T6399] tipc: Resetting bearer <eth:syzkaller0>
[   66.366898][ T6399] tipc: Disabling bearer <eth:syzkaller0>
[   66.382938][ T6391] netlink: 'syz.0.112': attribute type 13 has an invalid length.
[   66.383959][ T6407] lo: Caught tx_queue_len zero misconfig
[   66.388828][ T6391] netlink: 'syz.0.112': attribute type 17 has an invalid length.
[   66.401760][ T6391] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[   66.437683][ T6410] netlink: 'syz.1.118': attribute type 1 has an invalid length.
[   66.542224][ T6415] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[   66.795965][ T6436] netlink: 'syz.0.123': attribute type 4 has an invalid length.
[   66.800053][ T6437] netlink: 'syz.0.123': attribute type 4 has an invalid length.
[   67.159281][ T6458] bond0: (slave netdevsim0): Enslaving as an active interface with a down link
[   67.256688][ T6467] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   67.262236][ T6467] tipc: Resetting bearer <eth:syzkaller0>
[   67.268709][ T6465] tipc: Disabling bearer <eth:syzkaller0>
[   67.281046][ T6466] bond2: (slave ip6gretap1): Enslaving as a backup interface with an up link
[   67.290061][   T12] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond
[   67.298556][ T6466] 8021q: adding VLAN 0 to HW filter on device bond2
[   67.349748][ T6466] veth5: entered promiscuous mode
[   67.359417][ T6466] bond2: (slave veth5): Enslaving as a backup interface with a down link
[   67.406518][   T12] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond
[   67.480501][ T6484] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   67.504237][ T6490] __nla_validate_parse: 13 callbacks suppressed
[   67.504252][ T6490] netlink: 32 bytes leftover after parsing attributes in process `syz.1.138'.
[   67.634592][ T6476] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   67.643319][ T6497] netlink: 36 bytes leftover after parsing attributes in process `syz.1.139'.
[   67.906336][ T6500] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20003
[   68.242068][ T6505] netlink: 8 bytes leftover after parsing attributes in process `syz.2.141'.
[   68.310818][ T6507] syzkaller0: entered promiscuous mode
[   68.313025][ T6507] syzkaller0: entered allmulticast mode
[   68.409379][ T6510] netlink: 64 bytes leftover after parsing attributes in process `syz.2.144'.
[   68.421955][ T6510] netlink: 28 bytes leftover after parsing attributes in process `syz.2.144'.
[   68.425788][ T6510] netlink: 4 bytes leftover after parsing attributes in process `syz.2.144'.
[   68.438013][ T6512] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[   68.452650][ T6510] dummy0: entered promiscuous mode
[   68.454980][ T6510] team0: entered promiscuous mode
[   68.457369][ T6510] team_slave_0: entered promiscuous mode
[   68.459353][ T6510] team_slave_1: entered promiscuous mode
[   68.462208][ T6510] dummy0: left promiscuous mode
[   68.464864][ T6510] team0: left promiscuous mode
[   68.466808][ T6510] team_slave_0: left promiscuous mode
[   68.468855][ T6510] team_slave_1: left promiscuous mode
[   68.621927][ T6524] syz_tun: entered allmulticast mode
[   68.632187][ T6524] dvmrp8: entered allmulticast mode
[   68.714097][ T6533] netlink: 28 bytes leftover after parsing attributes in process `syz.2.152'.
[   68.715132][ T6530] 8021q: adding VLAN 0 to HW filter on device bond2
[   68.762836][ T6534] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   68.778415][ T6530] 8021q: adding VLAN 0 to HW filter on device macvlan2
[   68.783799][ T6530] bond2: (slave macvlan2): Enslaving as a backup interface with a down link
[   68.791384][ T6528] xfrm0: entered promiscuous mode
[   68.798941][ T6528] xfrm0: entered allmulticast mode
[   68.866189][ T6538] bridge0: port 2(bridge_slave_1) entered disabled state
[   68.870146][ T6538] bridge0: port 1(bridge_slave_0) entered disabled state
[   68.879543][ T6538] netlink: 16 bytes leftover after parsing attributes in process `syz.2.153'.
[   68.882675][ T6538] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check.
[   68.898970][ T6534] netlink: 28 bytes leftover after parsing attributes in process `syz.0.150'.
[   68.933615][ T6534] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   68.959949][ T6547] netlink: 136 bytes leftover after parsing attributes in process `syz.2.155'.
[   69.015645][ T6528] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   69.339232][ T6567] syz_tun (unregistering): left allmulticast mode
[   69.356412][ T6569] erspan0: entered promiscuous mode
[   69.375197][ T6573] ip6tnl1: entered promiscuous mode
[   69.377457][ T6573] ip6tnl1: entered allmulticast mode
[   69.380488][ T6573] team0: Device ip6tnl1 is up. Set it down before adding it as a team port
[   69.782797][ T6595] bond0: (slave netdevsim0): Releasing backup interface
[   69.795869][ T6595] bond2: (slave ip6gretap1): Removing an active aggregator
[   69.797183][ T6600] validate_nla: 13 callbacks suppressed
[   69.797197][ T6600] netlink: 'syz.1.168': attribute type 1 has an invalid length.
[   69.803320][ T6595] bond2: (slave ip6gretap1): Releasing backup interface
[   69.811815][ T6595] bond2: (slave ip6gretap1): the permanent HWaddr of slave - 6e:31:50:b6:07:ed - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[   69.828717][ T6595] bond2: (slave veth5): Releasing backup interface
[   69.850035][ T6597] vlan2: entered promiscuous mode
[   69.852359][ T6597] dummy0: entered promiscuous mode
[   69.982842][ T6602] netlink: 'syz.0.166': attribute type 10 has an invalid length.
[   70.006665][ T6602] 8021q: adding VLAN 0 to HW filter on device bond0
[   70.009660][ T6602] bond0: (slave wlan1): Opening slave failed
[   70.145095][ T6614] veth5: entered promiscuous mode
[   70.245606][ T6618] bond_slave_0: left promiscuous mode
[   70.262980][ T6622] netlink: 'syz.2.172': attribute type 21 has an invalid length.
[   70.276911][ T6618] bond_slave_1: left promiscuous mode
[   70.277316][ T6622] netlink: 'syz.2.172': attribute type 22 has an invalid length.
[   70.299243][ T6622] netlink: 'syz.2.172': attribute type 23 has an invalid length.
[   70.313860][ T6622] netlink: 'syz.2.172': attribute type 25 has an invalid length.
[   70.330815][ T6622] netlink: 'syz.2.172': attribute type 26 has an invalid length.
[   70.341892][ T6621] netlink: 'syz.1.173': attribute type 1 has an invalid length.
[   70.431766][ T6618] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   70.524276][ T6618] vlan2: left promiscuous mode
[   70.526474][ T6618] dummy0: left promiscuous mode
[   70.562103][   T12] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[   70.565904][   T12] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   70.578638][   T12] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[   70.582566][   T12] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   70.588464][   T12] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[   70.591932][   T12] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   70.601153][   T12] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[   70.605489][   T12] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   70.615995][ T6625] netlink: 'syz.1.173': attribute type 1 has an invalid length.
[   70.781837][ T6649] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   70.809256][ T6651] netlink: 'syz.2.179': attribute type 1 has an invalid length.
[   70.973321][ T6661] pim6reg1: entered promiscuous mode
[   70.975632][ T6661] pim6reg1: entered allmulticast mode
[   71.025977][ T6663] xt_socket: unknown flags 0xd0
[   71.041075][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[   71.095419][ T6670] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   71.240653][ T6680] bridge1: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms)
[   71.773671][ T6690] team_slave_0: Caught tx_queue_len zero misconfig
[   71.836532][ T6690] sch_tbf: burst 6 is lower than device team_slave_0 mtu (1514) !
[   72.062085][ T6697] bond7: entered promiscuous mode
[   72.065530][ T6697] 8021q: adding VLAN 0 to HW filter on device bond7
[   72.587563][ T6682] syz.1.188 (6682) used greatest stack depth: 18240 bytes left
[   73.028603][ T6683] syz.1.188 (6683) used greatest stack depth: 16896 bytes left
[   73.114534][ T6779] __nla_validate_parse: 18 callbacks suppressed
[   73.114551][ T6779] netlink: 152 bytes leftover after parsing attributes in process `syz.1.197'.
[   73.185021][ T6787] 8021q: adding VLAN 0 to HW filter on device bond8
[   73.201456][ T6787] veth3: entered promiscuous mode
[   73.205803][ T6787] bond8: (slave veth3): Enslaving as an active interface with a down link
[   73.211609][ T6787] netlink: 28 bytes leftover after parsing attributes in process `syz.2.199'.
[   73.232564][ T6791] macvlan1: entered promiscuous mode
[   73.236207][ T6791] ipvlan0: entered promiscuous mode
[   73.238960][ T6791] ipvlan0: left promiscuous mode
[   73.240284][ T6795] netlink: 28 bytes leftover after parsing attributes in process `syz.2.201'.
[   73.244399][ T6791] macvlan1: left promiscuous mode
[   73.304379][ T6798] k*]: entered promiscuous mode
[   73.329653][ T6801] netlink: 12 bytes leftover after parsing attributes in process `syz.1.203'.
[   73.333647][ T6802] netlink: 12 bytes leftover after parsing attributes in process `syz.1.203'.
[   73.349958][ T6802] netlink: 12 bytes leftover after parsing attributes in process `syz.1.203'.
[   73.354101][ T6801] netlink: 12 bytes leftover after parsing attributes in process `syz.1.203'.
[   73.358753][   T13] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   73.362697][   T13] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   73.368426][   T13] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   73.372019][   T13] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   73.449379][ T6809] netlink: 4 bytes leftover after parsing attributes in process `syz.2.205'.
[   73.452329][ T6809] batman_adv: batadv0: Removing interface: batadv_slave_0
[   73.611952][ T6813] netlink: 12 bytes leftover after parsing attributes in process `syz.2.207'.
[   73.620145][ T6813] xfrm1: entered promiscuous mode
[   73.621863][ T6813] xfrm1: entered allmulticast mode
[   73.632997][ T6813] netlink: 64 bytes leftover after parsing attributes in process `syz.2.207'.
[   73.671769][ T6815] 8021q: adding VLAN 0 to HW filter on device bond3
[   73.678800][ T6816] vlan2: entered allmulticast mode
[   73.680617][ T6816] batadv0: entered allmulticast mode
[   73.708557][ T6822] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on
[   73.724308][ T6822] bond9: entered promiscuous mode
[   73.727963][ T6822] bond9: entered allmulticast mode
[   73.729953][ T6822] 8021q: adding VLAN 0 to HW filter on device bond9
[   73.757212][ T6826] pim6reg: entered allmulticast mode
[   73.764767][ T6826] pim6reg: left allmulticast mode
[   73.818402][ T6835] bridge3: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms)
[   73.901115][ T6846] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode
[   74.076264][   T54] Bluetooth: hci2: command 0x0405 tx timeout
[   74.140324][ T6851] mac80211_hwsim hwsim3 wlan1: left allmulticast mode
[   74.143299][ T6851] bond0: (slave wlan1): Opening slave failed
[   74.178302][ T6853] bond10: entered promiscuous mode
[   74.180644][ T6853] bond10: entered allmulticast mode
[   74.184847][ T6853] 8021q: adding VLAN 0 to HW filter on device bond10
[   74.202014][ T6853] bridge4: entered promiscuous mode
[   74.205035][ T6853] bridge4: entered allmulticast mode
[   74.208668][ T6853] bond10: (slave bridge4): Enslaving as a backup interface with an up link
[   74.286393][   T13] bond10: Warning: No 802.3ad response from the link partner for any adapters in the bond
[   74.356569][ T6857] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not bonding slave
[   74.359869][ T6857] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1)
[   74.364398][ T6857] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   74.374921][ T6857] syzkaller0: entered promiscuous mode
[   74.378759][ T6857] syzkaller0: entered allmulticast mode
[   74.398993][ T6856] tipc: Resetting bearer <eth:syzkaller0>
[   74.408490][ T6856] tipc: Disabling bearer <eth:syzkaller0>
[   74.682510][ T6865] bridge3: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms)
[   74.817872][ T6867] validate_nla: 12 callbacks suppressed
[   74.817882][ T6867] netlink: 'syz.1.222': attribute type 1 has an invalid length.
[   74.873099][ T6867] bond5: entered promiscuous mode
[   74.877983][ T6867] 8021q: adding VLAN 0 to HW filter on device bond5
[   74.913677][ T6869] 8021q: adding VLAN 0 to HW filter on device bond5
[   74.925762][ T6869] bond5: (slave wireguard0): The slave device specified does not support setting the MAC address
[   74.952018][ T6869] bond5: (slave wireguard0): Setting fail_over_mac to active for active-backup mode
[   74.965400][ T6869] bond5: (slave wireguard0): making interface the new active one
[   74.969077][ T6869] wireguard0: entered promiscuous mode
[   74.972188][ T6869] bond5: (slave wireguard0): Enslaving as an active interface with an up link
[   75.189755][ T6884] netlink: 'syz.2.225': attribute type 1 has an invalid length.
[   75.284416][ T6887] netlink: 'syz.2.227': attribute type 4 has an invalid length.
[   75.327219][ T6888] netlink: 'syz.1.226': attribute type 16 has an invalid length.
[   75.329799][ T6888] netlink: 'syz.1.226': attribute type 17 has an invalid length.
[   75.369020][ T6888] 8021q: adding VLAN 0 to HW filter on device team0
[   75.373863][ T6889] netlink: 'syz.2.227': attribute type 4 has an invalid length.
[   75.386758][ T6888] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   76.290090][ T6905] netlink: 'syz.2.229': attribute type 7 has an invalid length.
[   76.293137][ T6905] netlink: 'syz.2.229': attribute type 8 has an invalid length.
[   76.420394][ T6907] 8021q: VLANs not supported on team0
[   76.483990][ T6911] gtp0: entered promiscuous mode
[   76.575359][ T6914] netlink: 'syz.2.234': attribute type 13 has an invalid length.
[   76.596144][ T6914] netlink: 'syz.2.234': attribute type 17 has an invalid length.
[   76.611337][ T6914] erspan0: left promiscuous mode
[   76.653277][ T6914] 8021q: adding VLAN 0 to HW filter on device bond0
[   76.671178][ T6914] 8021q: adding VLAN 0 to HW filter on device team0
[   76.690633][ T6914] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   76.720515][ T6915] xfrm0: entered promiscuous mode
[   76.722518][ T6915] xfrm0: entered allmulticast mode
[   76.755419][ T6914] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   76.767859][ T6917] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   76.771292][ T6917] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   76.833807][ T6915] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   76.859715][ T6917] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   76.863131][ T6917] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   76.940190][ T6917] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   76.944005][ T6917] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   76.953159][ T6923] bridge0: entered allmulticast mode
[   77.000713][ T6925] 8021q: adding VLAN 0 to HW filter on device macvlan2
[   77.013122][ T6917] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   77.017679][ T6917] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   77.083228][ T5862] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[   77.087039][ T5862] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   77.099793][ T5862] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[   77.103380][ T5862] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   77.118629][ T5862] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[   77.123106][ T5862] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   77.134520][ T5862] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[   77.139192][ T5862] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   77.575330][ T6949] mac80211_hwsim hwsim5 wlan0: entered promiscuous mode
[   77.928981][ T6953] bridge0: port 1(syz_tun) entered blocking state
[   77.932167][ T6953] bridge0: port 1(syz_tun) entered disabled state
[   77.938074][ T6953] syz_tun: entered promiscuous mode
[   77.995500][ T6955] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   77.999961][ T6955] syzkaller0: entered promiscuous mode
[   78.002081][ T6955] syzkaller0: entered allmulticast mode
[   78.009871][ T6955] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[   78.020823][ T6955] tipc: Resetting bearer <eth:syzkaller0>
[   78.024814][ T6954] tipc: Resetting bearer <eth:syzkaller0>
[   78.032268][ T6954] tipc: Disabling bearer <eth:syzkaller0>
[   78.118058][ T6957] __nla_validate_parse: 17 callbacks suppressed
[   78.118068][ T6957] netlink: 4 bytes leftover after parsing attributes in process `syz.0.246'.
[   78.174389][ T6959] netlink: 52 bytes leftover after parsing attributes in process `syz.0.246'.
[   78.213335][ T6961] netlink: 4 bytes leftover after parsing attributes in process `syz.0.247'.
[   78.213359][ T6962] netlink: 4 bytes leftover after parsing attributes in process `syz.0.247'.
[   78.388126][ T6965] lo speed is unknown, defaulting to 1000
[   78.391485][ T6965] lo speed is unknown, defaulting to 1000
[   78.398998][ T6965] lo speed is unknown, defaulting to 1000
[   78.403574][ T6965] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[   78.414130][ T6965] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[   78.461884][ T6965] lo speed is unknown, defaulting to 1000
[   78.465623][ T6965] lo speed is unknown, defaulting to 1000
[   78.468833][ T6965] lo speed is unknown, defaulting to 1000
[   78.640145][ T6978] bond11: entered promiscuous mode
[   78.642501][ T6978] bond11: entered allmulticast mode
[   78.645256][ T6978] 8021q: adding VLAN 0 to HW filter on device bond11
[   78.660581][ T6978] bridge5: entered promiscuous mode
[   78.662820][ T6978] bridge5: entered allmulticast mode
[   78.664996][ T6978] bond11: (slave bridge5): Enslaving as a backup interface with an up link
[   78.746314][ T5877] bond11: Warning: No 802.3ad response from the link partner for any adapters in the bond
[   78.783466][    T9] lo speed is unknown, defaulting to 1000
[   78.785572][    T9] syz2: Port: 1 Link DOWN
[   78.838587][ T6985] pim6reg1: entered promiscuous mode
[   78.840878][ T6985] pim6reg1: entered allmulticast mode
[   78.922362][ T6989] netlink: 4 bytes leftover after parsing attributes in process `syz.2.254'.
[   78.931655][ T6989] netlink: 36 bytes leftover after parsing attributes in process `syz.2.254'.
[   78.963104][ T6991] bridge_slave_0: left allmulticast mode
[   78.965374][ T6991] bridge_slave_0: left promiscuous mode
[   78.969364][ T6991] bridge0: port 1(bridge_slave_0) entered disabled state
[   78.974038][ T6991] bridge_slave_1: left allmulticast mode
[   78.976353][ T6991] bridge_slave_1: left promiscuous mode
[   78.978750][ T6991] bridge0: port 2(bridge_slave_1) entered disabled state
[   78.983632][ T6991] bond0: (slave bond_slave_0): Releasing backup interface
[   78.988209][ T6991] bond0: (slave bond_slave_1): Releasing backup interface
[   78.993876][ T6991] team0: Port device team_slave_0 removed
[   78.998700][ T6991] team0: Port device team_slave_1 removed
[   79.001547][ T6991] bond2: (slave macvlan2): Removing an active aggregator
[   79.005232][ T6991] bond2: (slave macvlan2): Releasing backup interface
[   79.009922][ T6991] bond3: (slave vti0): Releasing backup interface
[   79.013992][ T6991] bond4: (slave bridge1): Releasing active interface
[   79.018772][ T6991] bond8: (slave veth3): Releasing active interface
[   79.022874][ T6991] bond10: (slave bridge4): Removing an active aggregator
[   79.027946][ T6991] bond10: (slave bridge4): Releasing backup interface
[   79.031392][ T6991] bridge4: left promiscuous mode
[   79.033579][ T6991] bridge4: left allmulticast mode
[   79.039399][ T6991] bond11: (slave bridge5): Removing an active aggregator
[   79.043148][ T6991] bond11: (slave bridge5): Releasing backup interface
[   79.047162][ T6991] bridge5: left promiscuous mode
[   79.049495][ T6991] bridge5: left allmulticast mode
[   79.127742][ T6998] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   79.131805][ T6998] syzkaller0: entered promiscuous mode
[   79.133925][ T6998] syzkaller0: entered allmulticast mode
[   79.142805][ T6998] sctp: [Deprecated]: syz.2.257 (pid 6998) Use of struct sctp_assoc_value in delayed_ack socket option.
[   79.142805][ T6998] Use struct sctp_sack_info instead
[   79.161299][ T6997] tipc: Resetting bearer <eth:syzkaller0>
[   79.170212][ T6997] tipc: Disabling bearer <eth:syzkaller0>
[   79.275259][ T7002] netlink: 44 bytes leftover after parsing attributes in process `syz.1.258'.
[   79.305281][ T7004] 8021q: adding VLAN 0 to HW filter on device bond4
[   79.319355][ T7004] veth7: entered promiscuous mode
[   79.323446][ T7004] bond4: (slave veth7): Enslaving as a backup interface with a down link
[   79.331115][ T7004] syz_tun: left promiscuous mode
[   79.333130][ T7004] bridge0: port 1(syz_tun) entered disabled state
[   79.348459][ T7004] bond4: (slave veth7): Releasing backup interface
[   80.081184][ T7013] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   80.084241][ T7013] syzkaller0: entered promiscuous mode
[   80.087615][ T7013] syzkaller0: entered allmulticast mode
[   80.094549][ T7013] tipc: Resetting bearer <eth:syzkaller0>
[   80.100093][ T7012] tipc: Resetting bearer <eth:syzkaller0>
[   80.111629][ T7012] tipc: Disabling bearer <eth:syzkaller0>
[   80.257444][ T7016] lo speed is unknown, defaulting to 1000
[   80.308732][ T7020] netlink: 12 bytes leftover after parsing attributes in process `syz.0.264'.
[   80.370308][ T7024] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   80.381907][ T7026] validate_nla: 5 callbacks suppressed
[   80.381919][ T7026] netlink: 'syz.0.266': attribute type 1 has an invalid length.
[   80.400402][ T7026] netlink: 92 bytes leftover after parsing attributes in process `syz.0.266'.
[   80.418388][ T7026] netlink: 28 bytes leftover after parsing attributes in process `syz.0.266'.
[   80.491450][ T7024] lo speed is unknown, defaulting to 1000
[   80.564341][ T7036] netlink: 'syz.0.267': attribute type 1 has an invalid length.
[   80.598889][ T7036] 8021q: adding VLAN 0 to HW filter on device bond5
[   80.653116][ T7041] syzkaller0: entered promiscuous mode
[   80.655796][ T7041] syzkaller0: entered allmulticast mode
[   80.743567][ T7044] bridge2: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms)
[   81.296600][   T51] cfg80211: failed to load regulatory.db
[   81.715331][ T7075] netlink: 'syz.2.276': attribute type 1 has an invalid length.
[   81.854745][ T7083] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   81.876587][ T7084] syzkaller0: entered promiscuous mode
[   81.879241][ T7084] syzkaller0: entered allmulticast mode
[   81.923475][ T7083] tipc: Resetting bearer <eth:syzkaller0>
[   81.941419][ T7083] tipc: Disabling bearer <eth:syzkaller0>
[   81.955474][ T7088] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   82.011494][ T7097] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   82.154273][ T7118] netlink: 'syz.2.288': attribute type 1 has an invalid length.
[   82.215871][ T7120] pim6reg99999999: entered allmulticast mode
[   82.345021][ T7130] lo speed is unknown, defaulting to 1000
[   82.423565][ T7137] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   82.427099][ T7137] IPv6: NLM_F_CREATE should be set when creating new route
[   82.430071][ T7137] IPv6: NLM_F_CREATE should be set when creating new route
[   82.444327][ T7137] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   82.448345][ T7137] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   82.452531][ T7137] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   82.463128][ T7137] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   82.465917][ T7137] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   82.469002][ T7137] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   82.471560][ T7137] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   82.474258][ T7137] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   82.477863][ T7137] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   82.480752][ T7137] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   82.483678][ T7137] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   82.525834][ T7144] lo speed is unknown, defaulting to 1000
[   82.572455][ T7145] netlink: 'syz.1.295': attribute type 5 has an invalid length.
[   82.579936][   T10] IPVS: starting estimator thread 0...
[   82.584498][ T7145] ieee802154 phy0 wpan0: encryption failed: -22
[   82.614362][ T7148] 8021q: adding VLAN 0 to HW filter on device bond2
[   82.669111][ T7146] IPVS: using max 48 ests per chain, 115200 per kthread
[   82.878270][   T54] Bluetooth: hci2: command 0x0405 tx timeout
[   82.924453][ T7165] netlink: 'syz.2.300': attribute type 2 has an invalid length.
[   82.942742][ T7165] k*: entered promiscuous mode
[   82.975777][ T7165] 8021q: adding VLAN 0 to HW filter on device bond0
[   82.978922][ T7165] 8021q: adding VLAN 0 to HW filter on device team0
[   82.984975][ T7165] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   82.993842][ T7168] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   83.003992][   T51] lo speed is unknown, defaulting to 1000
[   83.009352][   T51] syz2: Port: 1 Link ACTIVE
[   83.089536][ T7176] bond2: option mode: unable to set because the bond device is up
[   83.216182][ T7178] netlink: 'syz.0.304': attribute type 9 has an invalid length.
[   83.467827][ T7187] netlink: 'syz.1.307': attribute type 1 has an invalid length.
[   83.492675][ T7187] 8021q: adding VLAN 0 to HW filter on device bond7
[   83.504710][ T7187] bond7: (slave ip6gretap1): making interface the new active one
[   83.508466][ T7187] bond7: (slave ip6gretap1): Enslaving as an active interface with an up link
[   83.548845][ T7187] veth7: entered promiscuous mode
[   83.619914][ T7192] mac80211_hwsim hwsim6 wlan1: entered allmulticast mode
[   83.637165][ T7192] bond2: (slave macvlan2): Releasing backup interface
[   83.644334][ T7192] bond5: (slave wireguard0): Releasing backup interface
[   83.647248][ T7192] wireguard0: left promiscuous mode
[   83.651784][ T7192] bond7: (slave ip6gretap1): Releasing active interface
[   83.672321][ T7192] netlink: 'syz.1.308': attribute type 10 has an invalid length.
[   83.675805][ T7192] mac80211_hwsim hwsim6 wlan1: left allmulticast mode
[   84.034311][ T7208] netlink: 'syz.0.312': attribute type 10 has an invalid length.
[   84.038574][ T7208] __nla_validate_parse: 17 callbacks suppressed
[   84.038582][ T7208] netlink: 40 bytes leftover after parsing attributes in process `syz.0.312'.
[   84.050223][ T7208] geneve0: entered promiscuous mode
[   84.052759][ T7208] team0: Port device geneve0 added
[   84.057374][ T7208] netlink: 40 bytes leftover after parsing attributes in process `syz.0.312'.
[   84.351625][ T7215] netlink: 4 bytes leftover after parsing attributes in process `syz.0.314'.
[   84.360582][ T7215] bond6: (slave ip6gretap2): making interface the new active one
[   84.364295][ T7215] bond6: (slave ip6gretap2): Enslaving as an active interface with an up link
[   84.382868][ T7226] bond2: option mode: unable to set because the bond device is up
[   84.462152][ T7234] netlink: 20 bytes leftover after parsing attributes in process `syz.2.318'.
[   84.472399][ T7234] batadv0: entered promiscuous mode
[   84.640958][ T7238] workqueue: Failed to create a rescuer kthread for wq "bond12": -EINTR
[   84.651336][ T7243] dvmrp0: entered allmulticast mode
[   84.804924][ T7258] syzkaller1: entered promiscuous mode
[   84.808044][ T7258] syzkaller1: entered allmulticast mode
[   84.811204][ T7258] PF_CAN: dropped non conform CAN skbuff: dev type 280, len 324
[   87.248367][ T7275] validate_nla: 3 callbacks suppressed
[   87.248381][ T7275] netlink: 'syz.0.325': attribute type 4 has an invalid length.
[   87.303432][ T7276] netlink: 'syz.0.325': attribute type 4 has an invalid length.
[   88.030483][ T7280] lo speed is unknown, defaulting to 1000
[   88.118690][ T7287] bond0: (slave rose0): Error: Device can not be enslaved while up
[   88.123847][ T7280] netlink: 28 bytes leftover after parsing attributes in process `syz.2.326'.
[   89.148188][ T7292] bridge3: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms)
[   89.202348][ T7298] vlan2: entered allmulticast mode
[   89.991184][ T7298] vlan2: entered allmulticast mode
[   90.464450][ T7330] bridge7: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms)
[   90.592437][ T7342] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   90.598023][ T7343] syzkaller0: entered promiscuous mode
[   90.604449][ T7343] syzkaller0: entered allmulticast mode
[   90.624096][ T7343] tipc: Resetting bearer <eth:syzkaller0>
[   90.649760][ T7343] tipc: Disabling bearer <eth:syzkaller0>
[   90.662791][ T7346] pim6reg: entered allmulticast mode
[   90.665722][ T7341] pim6reg: left allmulticast mode
[   91.045078][ T7355] netlink: 92 bytes leftover after parsing attributes in process `syz.0.349'.
[   91.050544][ T7355] netlink: 92 bytes leftover after parsing attributes in process `syz.0.349'.
[   91.199030][ T7357] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   91.269925][ T7359] team0: Port device geneve0 removed
[   91.294495][ T7359] bond6: (slave ip6gretap2): Releasing active interface
[   91.306282][ T7360] syzkaller0: entered promiscuous mode
[   91.308618][ T7360] syzkaller0: entered allmulticast mode
[   91.329667][ T7361] lo speed is unknown, defaulting to 1000
[   91.364290][ T7356] tipc: Resetting bearer <eth:syzkaller0>
[   91.397936][ T7356] tipc: Disabling bearer <eth:syzkaller0>
[   91.598628][ T7365] netlink: 'syz.1.352': attribute type 1 has an invalid length.
[   91.660240][ T7368] netlink: 'syz.0.353': attribute type 3 has an invalid length.
[   91.694144][ T7368] netlink: 'syz.0.353': attribute type 1 has an invalid length.
[   91.799822][ T7366] bond8: (slave gretap1): making interface the new active one
[   91.809352][ T7366] bond8: (slave gretap1): Enslaving as an active interface with an up link
[   91.953100][ T7376] macvtap1: entered promiscuous mode
[   91.955026][ T7376] macvtap1: entered allmulticast mode
[   91.984078][ T7376] dummy0: entered promiscuous mode
[   91.994312][ T7378] IPVS: length: 224 != 8
[   92.000951][ T7376] team0: Device macvtap1 failed to register rx_handler
[   92.033518][ T7376] dummy0: left promiscuous mode
[   92.126604][ T7380] netlink: 24 bytes leftover after parsing attributes in process `syz.1.357'.
[   92.169745][ T7380] netlink: 'syz.1.357': attribute type 8 has an invalid length.
[   92.172895][ T7380] netlink: 4 bytes leftover after parsing attributes in process `syz.1.357'.
[   92.211976][ T7380] bond0: entered promiscuous mode
[   92.224909][ T7380] bond0: left promiscuous mode
[   92.513048][ T7393] netlink: 32 bytes leftover after parsing attributes in process `syz.1.361'.
[   92.552982][ T7394] netlink: 8 bytes leftover after parsing attributes in process `syz.1.361'.
[   92.860495][ T7402] netlink: 20 bytes leftover after parsing attributes in process `syz.0.362'.
[   93.071366][ T7408] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   93.078866][ T7408] syzkaller0: entered promiscuous mode
[   93.083186][ T7408] syzkaller0: entered allmulticast mode
[   93.122750][ T7408] tipc: Resetting bearer <eth:syzkaller0>
[   93.140160][ T7409] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[   93.169072][ T7409] tipc: Resetting bearer <eth:syzkaller0>
[   93.182855][ T7409] tipc: Disabling bearer <eth:syzkaller0>
[   93.464088][ T7418] netlink: 'syz.1.367': attribute type 4 has an invalid length.
[   93.478362][ T7418] netlink: 8 bytes leftover after parsing attributes in process `syz.1.367'.
[   93.497020][ T7418] netlink: 8 bytes leftover after parsing attributes in process `syz.1.367'.
[   93.602511][ T7433] netlink: 24 bytes leftover after parsing attributes in process `syz.2.371'.
[   93.629284][ T7431] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   93.632689][ T7431] syzkaller0: entered promiscuous mode
[   93.635107][ T7431] syzkaller0: entered allmulticast mode
[   93.639853][ T7433] netlink: 'syz.2.371': attribute type 10 has an invalid length.
[   93.645786][ T7433] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[   93.670677][ T7431] tipc: Resetting bearer <eth:syzkaller0>
[   93.676538][ T7430] tipc: Resetting bearer <eth:syzkaller0>
[   93.688422][ T7430] tipc: Disabling bearer <eth:syzkaller0>
[   93.796591][ T7442] syzkaller0: entered promiscuous mode
[   93.798920][ T7442] syzkaller0: entered allmulticast mode
[   93.904671][ T7447] syzkaller1: entered promiscuous mode
[   93.907158][ T7447] syzkaller1: entered allmulticast mode
[   93.981424][ T7450] netlink: 'syz.0.376': attribute type 13 has an invalid length.
[   93.989225][ T7447] bond0 (unregistering): Released all slaves
[   94.089459][ T7451] netlink: 'syz.2.377': attribute type 7 has an invalid length.
[   94.144797][ T7453] bridge9: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms)
[   94.160995][ T7421] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[   94.276505][ T7466] vlan0: entered promiscuous mode
[   94.305160][ T7470] netlink: 'syz.0.383': attribute type 30 has an invalid length.
[   94.643346][ T7479] netlink: 'syz.1.385': attribute type 4 has an invalid length.
[   94.659793][ T7485] bridge5: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms)
[   94.695499][ T7487] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   94.701233][ T7487] syzkaller0: entered promiscuous mode
[   94.703654][ T7487] syzkaller0: entered allmulticast mode
[   94.774630][ T7488] tipc: Resetting bearer <eth:syzkaller0>
[   94.922866][ T7486] tipc: Resetting bearer <eth:syzkaller0>
[   94.934453][ T7486] tipc: Disabling bearer <eth:syzkaller0>
[   95.400729][ T7516] syz_tun: entered allmulticast mode
[   95.438897][ T7516] xfrm0: left promiscuous mode
[   95.440851][ T7516] xfrm0: left allmulticast mode
[   95.445329][ T7516] mac80211_hwsim hwsim5 wlan0: left promiscuous mode
[   95.454982][ T7516] bond7: left promiscuous mode
[   95.457373][ T7516] veth3: left promiscuous mode
[   95.459538][ T7516] xfrm1: left promiscuous mode
[   95.461419][ T7516] xfrm1: left allmulticast mode
[   95.463126][ T7516] bond9: left promiscuous mode
[   95.465023][ T7516] bond9: left allmulticast mode
[   95.467642][ T7516] bond10: left promiscuous mode
[   95.469961][ T7516] bond10: left allmulticast mode
[   95.472760][ T7516] bond11: left promiscuous mode
[   95.474690][ T7516] bond11: left allmulticast mode
[   95.479899][ T7516] batadv0: left promiscuous mode
[   95.484718][   T10] lo speed is unknown, defaulting to 1000
[   95.488163][   T10] syz2: Port: 1 Link DOWN
[   95.591581][ T7529] netlink: 'syz.2.393': attribute type 7 has an invalid length.
[   95.595046][ T7529] netlink: 'syz.2.393': attribute type 8 has an invalid length.
[   95.667929][ T7537] lo speed is unknown, defaulting to 1000
[   96.159793][ T7577] netlink: 'syz.2.398': attribute type 30 has an invalid length.
[   96.382215][ T7600] __nla_validate_parse: 13 callbacks suppressed
[   96.382226][ T7600] netlink: 12 bytes leftover after parsing attributes in process `syz.1.400'.
[   96.402223][ T7600] bridge4: port 1(veth7) entered blocking state
[   96.404511][ T7600] bridge4: port 1(veth7) entered disabled state
[   96.414428][ T7600] veth7: entered allmulticast mode
[   96.421970][ T7600] veth7: entered promiscuous mode
[   96.439638][ T7600] bridge4: port 2(veth0_to_bond) entered blocking state
[   96.442705][ T7600] bridge4: port 2(veth0_to_bond) entered disabled state
[   96.445950][ T7600] veth0_to_bond: entered allmulticast mode
[   96.451132][ T7600] veth0_to_bond: entered promiscuous mode
[   96.471251][ T7600] vlan2: entered allmulticast mode
[   96.473575][ T7600] veth1: entered allmulticast mode
[   96.476033][ T7600] bridge4: port 3(vlan2) entered blocking state
[   96.481020][ T7600] bridge4: port 3(vlan2) entered disabled state
[   96.485044][ T7600] vlan2: entered promiscuous mode
[   96.489187][ T7600] veth1: entered promiscuous mode
[   96.499933][ T7600] netlink: 8 bytes leftover after parsing attributes in process `syz.1.400'.
[   96.662643][ T7631] netlink: 'syz.2.405': attribute type 17 has an invalid length.
[   96.673354][ T7631] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   96.679865][  T792] lo speed is unknown, defaulting to 1000
[   96.682238][  T792] syz2: Port: 1 Link ACTIVE
[   96.789249][ T7632] team0: Port device dummy0 added
[   96.811606][ T7643] netlink: 8 bytes leftover after parsing attributes in process `syz.2.406'.
[   96.817812][ T7632] team0: Port device dummy0 removed
[   96.864031][ T7647] netlink: 4 bytes leftover after parsing attributes in process `syz.2.407'.
[   96.868287][ T7647] netlink: 4 bytes leftover after parsing attributes in process `syz.2.407'.
[   96.873662][ T7647] netlink: 4 bytes leftover after parsing attributes in process `syz.2.407'.
[   96.878942][ T7647] netlink: 4 bytes leftover after parsing attributes in process `syz.2.407'.
[   96.882143][ T7647] netlink: 4 bytes leftover after parsing attributes in process `syz.2.407'.
[   96.885371][ T7647] netlink: 4 bytes leftover after parsing attributes in process `syz.2.407'.
[   96.890435][ T7647] netlink: 4 bytes leftover after parsing attributes in process `syz.2.407'.
[   96.905575][ T7647] syz_tun: left allmulticast mode
[   97.118756][ T7659] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0)
[   97.126908][ T7654] 8021q: adding VLAN 0 to HW filter on device bond6
[   97.338762][ T7671] syzkaller1: entered promiscuous mode
[   97.341180][ T7671] syzkaller1: entered allmulticast mode
[   97.478399][ T7675] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   97.482013][ T7675] syzkaller0: entered promiscuous mode
[   97.484619][ T7675] syzkaller0: entered allmulticast mode
[   97.500250][ T7675] tipc: Resetting bearer <eth:syzkaller0>
[   97.503522][ T7674] tipc: Resetting bearer <eth:syzkaller0>
[   97.512484][ T7674] tipc: Disabling bearer <eth:syzkaller0>
[   97.525574][ T7678] (unnamed net_device) (uninitialized): option packets_per_slave: mode dependency failed, not supported in mode 802.3ad(4)
[   97.536975][ T7680] (unnamed net_device) (uninitialized): up delay (1024) is not a multiple of miimon (100), value rounded to 1000 ms
[   97.543117][ T7680] (unnamed net_device) (uninitialized): down delay (4) is not a multiple of miimon (100), value rounded to 0 ms
[   97.575560][ T7683] sit2: entered promiscuous mode
[   97.625261][ T7688] syzkaller0: entered promiscuous mode
[   97.627810][ T7688] syzkaller0: entered allmulticast mode
[   97.732477][ T7693] k*]: entered promiscuous mode
[   97.758788][ T7693] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   97.768004][ T7693] veth0_to_team: entered promiscuous mode
[   97.769933][ T7693] veth0_to_team: entered allmulticast mode
[   97.795950][ T7697] lo speed is unknown, defaulting to 1000
[   97.818643][ T7707] sctp: [Deprecated]: syz.0.423 (pid 7707) Use of struct sctp_assoc_value in delayed_ack socket option.
[   97.818643][ T7707] Use struct sctp_sack_info instead
[   97.837729][ T7707] sctp: [Deprecated]: syz.0.423 (pid 7707) Use of struct sctp_assoc_value in delayed_ack socket option.
[   97.837729][ T7707] Use struct sctp_sack_info instead
[   97.855222][ T7707] sctp: [Deprecated]: syz.0.423 (pid 7707) Use of struct sctp_assoc_value in delayed_ack socket option.
[   97.855222][ T7707] Use struct sctp_sack_info instead
[   97.868803][ T7707] sctp: [Deprecated]: syz.0.423 (pid 7707) Use of struct sctp_assoc_value in delayed_ack socket option.
[   97.868803][ T7707] Use struct sctp_sack_info instead
[   97.882863][ T7704] vlan0: entered promiscuous mode
[   97.888278][ T7707] sctp: [Deprecated]: syz.0.423 (pid 7707) Use of struct sctp_assoc_value in delayed_ack socket option.
[   97.888278][ T7707] Use struct sctp_sack_info instead
[   97.896005][ T7707] sctp: [Deprecated]: syz.0.423 (pid 7707) Use of struct sctp_assoc_value in delayed_ack socket option.
[   97.896005][ T7707] Use struct sctp_sack_info instead
[   97.904045][ T7707] sctp: [Deprecated]: syz.0.423 (pid 7707) Use of struct sctp_assoc_value in delayed_ack socket option.
[   97.904045][ T7707] Use struct sctp_sack_info instead
[   97.917757][ T7707] sctp: [Deprecated]: syz.0.423 (pid 7707) Use of struct sctp_assoc_value in delayed_ack socket option.
[   97.917757][ T7707] Use struct sctp_sack_info instead
[   97.928520][ T7707] sctp: [Deprecated]: syz.0.423 (pid 7707) Use of struct sctp_assoc_value in delayed_ack socket option.
[   97.928520][ T7707] Use struct sctp_sack_info instead
[   97.933906][ T7707] sctp: [Deprecated]: syz.0.423 (pid 7707) Use of struct sctp_assoc_value in delayed_ack socket option.
[   97.933906][ T7707] Use struct sctp_sack_info instead
[   97.943697][ T7697] vlan0: entered promiscuous mode
[   97.945395][ T7697] gretap0: entered promiscuous mode
[   98.047958][ T7727] 8021q: adding VLAN 0 to HW filter on device bond0
[   98.150240][ T7739] vlan3: entered promiscuous mode
[   98.152662][ T7739] vlan3: entered allmulticast mode
[   98.154967][ T7739] hsr_slave_1: entered allmulticast mode
[   98.214188][ T7735] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20003
[   98.277108][ T7743] bridge_slave_0: entered promiscuous mode
[   98.311017][ T7743] batman_adv: batadv0: Adding interface: ip6gretap3
[   98.314040][ T7743] batman_adv: batadv0: The MTU of interface ip6gretap3 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   98.326800][ T7743] batman_adv: batadv0: Interface activated: ip6gretap3
[   98.743429][ T7763] 8021q: adding VLAN 0 to HW filter on device bond9
[   98.747170][ T7763] bond8: (slave bond9): Enslaving as an active interface with an up link
[   98.757738][ T7763] bond8 (unregistering): (slave bond9): Releasing backup interface
[   98.765870][ T7763] bond8 (unregistering): Released all slaves
[   98.779184][ T7770] validate_nla: 8 callbacks suppressed
[   98.779196][ T7770] netlink: 'syz.2.439': attribute type 30 has an invalid length.
[   98.892327][ T7778] bridge7: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms)
[   98.918033][ T7780] veth0_to_bond: left allmulticast mode
[   98.920135][ T7780] veth0_to_bond: left promiscuous mode
[   98.922674][ T7780] bridge4: port 2(veth0_to_bond) entered disabled state
[   98.943124][ T7780] bond8: (slave gretap1): Releasing active interface
[   98.952699][ T7780] veth7: left allmulticast mode
[   98.955572][ T7780] veth7: left promiscuous mode
[   98.962964][ T7780] bridge4: port 1(veth7) entered disabled state
[   98.978915][ T7780] vlan2: left promiscuous mode
[   98.981031][ T7780] veth1: left promiscuous mode
[   98.989163][ T7780] bridge4: port 3(vlan2) entered disabled state
[   99.003873][ T7780] netlink: 'syz.1.442': attribute type 10 has an invalid length.
[   99.016781][ T7780] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[   99.021344][ T7780] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[   99.089393][ T7792] bond0: entered promiscuous mode
[   99.091487][ T7792] netdevsim netdevsim2 netdevsim0: entered promiscuous mode
[   99.094720][ T7792] bond0: left promiscuous mode
[   99.097113][ T7792] netdevsim netdevsim2 netdevsim0: left promiscuous mode
[   99.152591][ T7795] lo speed is unknown, defaulting to 1000
[   99.395997][ T7810] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   99.405248][ T7809] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[   99.413858][ T7810] syzkaller0: entered promiscuous mode
[   99.415897][ T7810] syzkaller0: entered allmulticast mode
[   99.431554][ T7809] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[   99.448912][ T7810] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[   99.463302][   T51] lo speed is unknown, defaulting to 1000
[   99.465355][   T51] syz2: Port: 1 Link DOWN
[   99.889258][ T7822] bond0: (slave netdevsim0): Releasing backup interface
[  100.016578][ T7810] tipc: Resetting bearer <eth:syzkaller0>
[  100.178613][ T7839] batadv1: entered promiscuous mode
[  100.223557][ T7808] tipc: Resetting bearer <eth:syzkaller0>
[  100.227781][ T7840] IPVS: set_ctl: invalid protocol: 59 224.0.0.2:20000
[  100.261135][ T7808] tipc: Disabling bearer <eth:syzkaller0>
[  100.340620][ T7839] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  100.343757][    T9] IPVS: starting estimator thread 0...
[  100.436760][ T7841] IPVS: using max 47 ests per chain, 112800 per kthread
[  100.473183][ T7856] netlink: 'syz.2.463': attribute type 1 has an invalid length.
[  100.498614][ T7856] 8021q: adding VLAN 0 to HW filter on device bond13
[  100.515285][ T7856] vlan0: entered allmulticast mode
[  100.517692][ T7856] batadv0: entered allmulticast mode
[  100.520742][ T7856] bond13: (slave vlan0): Opening slave failed
[  100.592696][ T7862] lo speed is unknown, defaulting to 1000
[  100.702356][ T7869] vlan0: entered allmulticast mode
[  100.704833][ T7869] bridge_slave_0: entered allmulticast mode
[  100.863236][ T7882] netlink: 'syz.1.469': attribute type 9 has an invalid length.
[  100.945733][ T7889] netlink: 'syz.2.473': attribute type 1 has an invalid length.
[  100.969927][ T7896] netlink: 'syz.1.476': attribute type 1 has an invalid length.
[  100.970353][ T7897] IPVS: set_ctl: invalid protocol: 94 255.255.255.255:20001
[  100.991696][ T7896] bond10: (slave vxcan3): The slave device specified does not support setting the MAC address
[  100.997661][ T7896] bond10: (slave vxcan3): Error -95 calling set_mac_address
[  101.028850][ T7897] bond0: (slave gretap0): Opening slave failed
[  101.035884][ T7897] bond0: (slave gretap0): Opening slave failed
[  101.040069][ T7897] bond0: (slave gretap0): Opening slave failed
[  101.043289][ T7897] bond0: (slave gretap0): Opening slave failed
[  101.049473][ T7902] gretap2: entered promiscuous mode
[  101.054039][ T7902] bond10: (slave gretap2): making interface the new active one
[  101.059551][ T7902] bond10: (slave gretap2): Enslaving as an active interface with an up link
[  101.062960][ T7897] bond0: (slave gretap0): Opening slave failed
[  101.075246][ T7897] bond0: (slave gretap0): Opening slave failed
[  101.084214][ T7902] macvlan3: entered promiscuous mode
[  101.088910][ T7902] macvlan3: entered allmulticast mode
[  101.091628][ T7902] bond10: entered promiscuous mode
[  101.094255][ T7902] 8021q: adding VLAN 0 to HW filter on device macvlan3
[  101.101901][ T7902] bond10: (slave macvlan3): the slave hw address is in use by the bond; giving it the hw address of gretap2
[  101.108046][ T7902] bond10: left promiscuous mode
[  101.130244][ T7897] bond0: (slave gretap0): Opening slave failed
[  101.158839][ T7905] batadv2: entered promiscuous mode
[  101.161257][ T7905] batadv2: entered allmulticast mode
[  101.239246][ T7915] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  101.380201][ T7922] lo speed is unknown, defaulting to 1000
[  101.680369][ T7930] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode
[  101.703374][ T7930] batman_adv: batadv0: Interface deactivated: ip6gretap3
[  101.705809][ T7930] batman_adv: batadv0: Removing interface: ip6gretap3
[  101.765939][ T7932] netlink: 'syz.0.482': attribute type 9 has an invalid length.
[  101.769043][ T7932] netlink: 'syz.0.482': attribute type 10 has an invalid length.
[  101.772979][ T7932] mac80211_hwsim hwsim3 wlan1: left allmulticast mode
[  101.788982][ T7932] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  101.792980][ T7932] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  102.397470][ T7937] __nla_validate_parse: 99 callbacks suppressed
[  102.397482][ T7937] netlink: 36 bytes leftover after parsing attributes in process `syz.2.483'.
[  102.403646][ T7935] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue
[  102.700116][ T7957] netlink: 'syz.2.488': attribute type 1 has an invalid length.
[  102.736051][ T7957] bond14: (slave ip6gretap2): Enslaving as a backup interface with an up link
[  102.758897][ T7962] syzkaller1: entered promiscuous mode
[  102.761222][ T7962] syzkaller1: entered allmulticast mode
[  102.792280][ T7957] veth5: entered promiscuous mode
[  102.964295][ T7971] bond10: (slave gretap2): Releasing active interface
[  102.968395][ T7974] netlink: 'syz.0.493': attribute type 1 has an invalid length.
[  102.990368][ T7974] 8021q: adding VLAN 0 to HW filter on device bond8
[  103.000480][ T7971] veth9: entered promiscuous mode
[  103.025976][ T7974] bond8: (slave veth9): Enslaving as an active interface with a down link
[  103.042987][ T7974] gretap2: entered promiscuous mode
[  103.048657][ T7974] bond8: (slave gretap2): making interface the new active one
[  103.052044][ T7974] bond8: (slave gretap2): Enslaving as an active interface with an up link
[  103.068221][ T7974] macvlan0: entered promiscuous mode
[  103.070021][ T7974] macvlan0: entered allmulticast mode
[  103.076351][ T7974] bond8: entered promiscuous mode
[  103.078943][ T7974] 8021q: adding VLAN 0 to HW filter on device macvlan0
[  103.081708][ T7974] bond8: (slave macvlan0): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  103.098238][ T7974] bond8: left promiscuous mode
[  103.102884][ T7972] ieee802154 phy0 wpan0: encryption failed: -22
[  103.129210][ T7971] team0: Mode changed to "loadbalance"
[  103.136450][ T7972] team0: Unable to change to the same mode the team is in
[  103.153767][ T7977] netlink: 12 bytes leftover after parsing attributes in process `syz.2.494'.
[  103.261965][ T7980] netlink: 24 bytes leftover after parsing attributes in process `syz.1.495'.
[  103.290016][ T7980] team0: Unable to change to the same mode the team is in
[  103.296472][ T7987] lo speed is unknown, defaulting to 1000
[  103.341317][ T7992] tunl0: Caught tx_queue_len zero misconfig
[  103.381943][ T7996] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  103.828829][ T8005] netlink: 4 bytes leftover after parsing attributes in process `syz.2.501'.
[  104.205128][ T8009] netlink: 20 bytes leftover after parsing attributes in process `syz.1.502'.
[  104.210337][ T8009] netlink: 20 bytes leftover after parsing attributes in process `syz.1.502'.
[  104.221397][ T8009] netlink: 3 bytes leftover after parsing attributes in process `syz.1.502'.
[  104.225723][ T8009] 0X: renamed from caif0
[  104.239969][ T8009] 0X: entered allmulticast mode
[  104.242423][ T8009] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check.
[  104.250780][ T8012] netdevsim netdevsim0 netdevsim0: entered allmulticast mode
[  104.328372][ T8017] bridge9: entered allmulticast mode
[  104.346841][ T8019] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  104.350418][ T8019] syzkaller0: entered promiscuous mode
[  104.353028][ T8019] syzkaller0: entered allmulticast mode
[  104.370163][ T8019] tipc: Resetting bearer <eth:syzkaller0>
[  104.376578][ T8019] netlink: 'syz.1.505': attribute type 10 has an invalid length.
[  104.387609][ T8018] tipc: Resetting bearer <eth:syzkaller0>
[  104.399120][ T8018] tipc: Disabling bearer <eth:syzkaller0>
[  104.605444][ T8026] netlink: 'syz.2.507': attribute type 2 has an invalid length.
[  104.650651][ T8026] 8021q: adding VLAN 0 to HW filter on device bond0
[  104.655073][ T8026] 8021q: adding VLAN 0 to HW filter on device team0
[  104.667919][ T8026] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  104.675020][  T792] lo speed is unknown, defaulting to 1000
[  104.680644][  T792] syz2: Port: 1 Link ACTIVE
[  104.819948][ T8038] veth0: entered promiscuous mode
[  104.850740][ T8038] netlink: 4 bytes leftover after parsing attributes in process `syz.1.512'.
[  105.044759][ T8051] netlink: 12 bytes leftover after parsing attributes in process `syz.1.516'.
[  105.178361][ T5862] syzkaller0: tun_net_xmit 76
[  105.181100][ T5862] syzkaller0: tun_net_xmit 48
[  105.206990][    T9] syzkaller0: tun_net_xmit 76
[  105.333230][ T8067] bond10: entered promiscuous mode
[  105.335651][ T8067] bond10: entered allmulticast mode
[  105.338612][ T8067] 8021q: adding VLAN 0 to HW filter on device bond10
[  105.359937][ T8067] bond11: entered promiscuous mode
[  105.362246][ T8067] bond11: entered allmulticast mode
[  105.364969][ T8067] 8021q: adding VLAN 0 to HW filter on device bond11
[  105.367406][    T9] syzkaller0: tun_net_xmit 76
[  105.387095][ T8067] bond12: entered promiscuous mode
[  105.389452][ T8067] bond12: entered allmulticast mode
[  105.392165][ T8067] 8021q: adding VLAN 0 to HW filter on device bond12
[  105.415538][ T8067] bond13: entered promiscuous mode
[  105.419576][ T8067] bond13: entered allmulticast mode
[  105.422303][ T8067] 8021q: adding VLAN 0 to HW filter on device bond13
[  105.448826][ T8067] bond14: entered promiscuous mode
[  105.451178][ T8067] bond14: entered allmulticast mode
[  105.453770][ T8067] 8021q: adding VLAN 0 to HW filter on device bond14
[  105.476651][ T8067] bond15: entered promiscuous mode
[  105.480001][ T8067] bond15: entered allmulticast mode
[  105.484009][ T8067] 8021q: adding VLAN 0 to HW filter on device bond15
[  105.506406][ T8067] bond16: entered promiscuous mode
[  105.508722][ T8067] bond16: entered allmulticast mode
[  105.511433][ T8067] 8021q: adding VLAN 0 to HW filter on device bond16
[  105.534546][ T8067] bond17: entered promiscuous mode
[  105.537419][ T8067] bond17: entered allmulticast mode
[  105.540355][ T8067] 8021q: adding VLAN 0 to HW filter on device bond17
[  105.574532][ T8067] bond18: entered promiscuous mode
[  105.577138][ T8067] bond18: entered allmulticast mode
[  105.579750][ T8067] 8021q: adding VLAN 0 to HW filter on device bond18
[  105.581653][ T8083] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR
[  105.615995][ T8067] bond19: entered promiscuous mode
[  105.622898][ T8067] bond19: entered allmulticast mode
[  105.625423][ T8067] 8021q: adding VLAN 0 to HW filter on device bond19
[  105.646320][    T9] syzkaller0: tun_net_xmit 76
[  105.649457][ T8067] bond20: entered promiscuous mode
[  105.651754][ T8067] bond20: entered allmulticast mode
[  105.654394][ T8067] 8021q: adding VLAN 0 to HW filter on device bond20
[  105.698399][ T8067] bond21: entered promiscuous mode
[  105.700688][ T8067] bond21: entered allmulticast mode
[  105.703300][ T8067] 8021q: adding VLAN 0 to HW filter on device bond21
[  105.724321][ T8067] bond22: entered promiscuous mode
[  105.728526][ T8067] bond22: entered allmulticast mode
[  105.731093][ T8067] 8021q: adding VLAN 0 to HW filter on device bond22
[  105.846068][ T8067] bond23: entered promiscuous mode
[  105.849394][ T8067] bond23: entered allmulticast mode
[  105.852203][ T8067] 8021q: adding VLAN 0 to HW filter on device bond23
[  105.855735][    T9] lo speed is unknown, defaulting to 1000
[  105.862058][    T9] syz2: Port: 1 Link DOWN
[  105.880913][ T8067] bond24: entered promiscuous mode
[  105.883360][ T8067] bond24: entered allmulticast mode
[  105.886906][ T8067] 8021q: adding VLAN 0 to HW filter on device bond24
[  105.912534][ T8067] bond25: entered promiscuous mode
[  105.914751][ T8067] bond25: entered allmulticast mode
[  105.917613][ T8067] 8021q: adding VLAN 0 to HW filter on device bond25
[  105.949042][ T8067] bond26: entered promiscuous mode
[  105.951288][ T8067] bond26: entered allmulticast mode
[  105.953782][ T8067] 8021q: adding VLAN 0 to HW filter on device bond26
[  105.987992][ T8067] bond27: entered promiscuous mode
[  105.990368][ T8067] bond27: entered allmulticast mode
[  105.992987][ T8067] 8021q: adding VLAN 0 to HW filter on device bond27
[  106.015697][ T8067] bond28: entered promiscuous mode
[  106.018906][ T8067] bond28: entered allmulticast mode
[  106.022215][ T8067] 8021q: adding VLAN 0 to HW filter on device bond28
[  106.044821][ T8067] bond29: entered promiscuous mode
[  106.047836][ T8067] bond29: entered allmulticast mode
[  106.050417][ T8067] 8021q: adding VLAN 0 to HW filter on device bond29
[  106.065334][ T8118] netlink: 12 bytes leftover after parsing attributes in process `syz.2.525'.
[  106.076960][ T8067] bond30: entered promiscuous mode
[  106.079106][ T8067] bond30: entered allmulticast mode
[  106.081171][ T8067] 8021q: adding VLAN 0 to HW filter on device bond30
[  106.107631][ T8067] bond31: entered promiscuous mode
[  106.109491][ T8067] bond31: entered allmulticast mode
[  106.111588][ T8067] 8021q: adding VLAN 0 to HW filter on device bond31
[  106.128673][ T8118] 8021q: adding VLAN 0 to HW filter on device bond17
[  106.132625][ T8118] bond16: (slave bond17): Enslaving as an active interface with an up link
[  106.148965][ T8067] bond32: entered promiscuous mode
[  106.150964][ T8067] bond32: entered allmulticast mode
[  106.153247][ T8067] 8021q: adding VLAN 0 to HW filter on device bond32
[  106.445218][ T8139] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  106.448149][ T8139] syzkaller0: entered promiscuous mode
[  106.449952][ T8139] syzkaller0: entered allmulticast mode
[  106.468813][ T8139] tipc: Resetting bearer <eth:syzkaller0>
[  106.471518][ T8138] tipc: Resetting bearer <eth:syzkaller0>
[  106.482606][ T8138] tipc: Disabling bearer <eth:syzkaller0>
[  106.634635][ T8153] netlink: 'syz.0.534': attribute type 1 has an invalid length.
[  106.648267][ T8153] bond33: entered promiscuous mode
[  106.650405][ T8153] 8021q: adding VLAN 0 to HW filter on device bond33
[  106.663784][ T8153] 8021q: adding VLAN 0 to HW filter on device bond33
[  106.666649][ T8153] bond33: (slave wireguard0): The slave device specified does not support setting the MAC address
[  106.672657][ T8153] bond33: (slave wireguard0): Setting fail_over_mac to active for active-backup mode
[  106.681350][ T8153] bond33: (slave wireguard0): making interface the new active one
[  106.684888][ T8153] wireguard0: entered promiscuous mode
[  106.688711][ T8153] bond33: (slave wireguard0): Enslaving as an active interface with an up link
[  107.131722][ T8164] syz_tun: entered allmulticast mode
[  107.136180][ T8163] syz_tun: left allmulticast mode
[  107.163447][ T8166] netlink: 'syz.2.538': attribute type 1 has an invalid length.
[  107.187897][ T8166] bond18: entered promiscuous mode
[  107.190342][ T8166] bond18: entered allmulticast mode
[  107.192813][ T8166] 8021q: adding VLAN 0 to HW filter on device bond18
[  107.205711][ T8167] bridge11: entered promiscuous mode
[  107.208368][ T8167] bridge11: entered allmulticast mode
[  107.211225][ T8167] bond18: (slave bridge11): Enslaving as a backup interface with an up link
[  107.259536][ T8172] bridge12: entered promiscuous mode
[  107.261761][ T8172] bridge12: entered allmulticast mode
[  107.296887][ T5862] bond18: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  107.308562][ T8174] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  107.312719][ T8174] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  107.317230][ T8174] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  107.322061][ T8174] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  107.328913][ T8174] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  107.416339][ T5862] bond18: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  107.474442][ T8183] __nla_validate_parse: 14 callbacks suppressed
[  107.474494][ T8183] netlink: 32 bytes leftover after parsing attributes in process `syz.2.542'.
[  107.568016][ T8197] netlink: 224 bytes leftover after parsing attributes in process `syz.2.545'.
[  107.655449][ T8199] netlink: 20 bytes leftover after parsing attributes in process `syz.0.546'.
[  107.661716][ T8199] netlink: 20 bytes leftover after parsing attributes in process `syz.0.546'.
[  107.678786][ T8203] openvswitch: netlink: Unknown VXLAN extension attribute 0
[  107.689519][ T8206] netlink: 8 bytes leftover after parsing attributes in process `syz.0.548'.
[  107.693262][ T8206] netlink: 4 bytes leftover after parsing attributes in process `syz.0.548'.
[  107.700409][ T8206] netlink: 'syz.0.548': attribute type 7 has an invalid length.
[  107.718045][ T8206] netlink: 8 bytes leftover after parsing attributes in process `syz.0.548'.
[  107.722009][ T8206] netlink: 4 bytes leftover after parsing attributes in process `syz.0.548'.
[  107.725849][ T8206] netlink: 'syz.0.548': attribute type 7 has an invalid length.
[  107.726941][ T8203] netlink: 'syz.2.547': attribute type 1 has an invalid length.
[  107.769433][ T8203] bridge13: entered promiscuous mode
[  107.774802][ T8203] bond19: (slave bridge13): making interface the new active one
[  107.781107][ T8203] bond19: (slave bridge13): Enslaving as an active interface with an up link
[  107.805802][ T8212] bond8: (slave veth9): Releasing active interface
[  107.809073][ T8212] bond8: (slave veth9): the permanent HWaddr of slave - 1a:a8:29:81:73:5e - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  107.823677][ T8212] bond8: (slave gretap2): Releasing active interface
[  107.847773][ T8212] bond33: (slave wireguard0): Releasing backup interface
[  107.850864][ T8212] wireguard0: left promiscuous mode
[  107.883580][ T8215] lo speed is unknown, defaulting to 1000
[  107.932756][ T8212] A link change request failed with some changes committed already. Interface bond1 may have been left with an inconsistent configuration, please check.
[  108.934675][ T8228] syzkaller0: entered promiscuous mode
[  108.937411][ T8228] syzkaller0: entered allmulticast mode
[  108.941120][ T8227] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  108.959620][ T8225] tipc: Resetting bearer <eth:syzkaller0>
[  108.963962][ T8224] tipc: Resetting bearer <eth:syzkaller0>
[  108.986302][ T8224] tipc: Disabling bearer <eth:syzkaller0>
[  109.012328][ T8230] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  109.031037][ T8230] netlink: 12 bytes leftover after parsing attributes in process `syz.1.553'.
[  109.055671][ T8233] netlink: 'syz.2.554': attribute type 10 has an invalid length.
[  109.141210][ T8245] delete_channel: no stack
[  109.186619][ T8242] netlink: 4 bytes leftover after parsing attributes in process `syz.1.556'.
[  109.268800][ T8259] trusted_key: syz.2.560 sent an empty control message without MSG_MORE.
[  109.387396][ T8270] erspan0: entered promiscuous mode
[  109.421383][ T8275] .70: renamed from hsr0 (while UP)
[  109.426018][ T8275] .70: entered allmulticast mode
[  109.431710][ T8275] hsr_slave_0: entered allmulticast mode
[  109.434552][ T8275] hsr_slave_1: entered allmulticast mode
[  109.440399][ T8275] A link change request failed with some changes committed already. Interface .70 may have been left with an inconsistent configuration, please check.
[  110.451158][ T8295] IPv6: sit3: Disabled Multicast RS
[  110.454204][ T8295] sit3: entered allmulticast mode
[  110.564223][ T8303] bond2: option mode: unable to set because the bond device is up
[  110.645611][ T8303] 8021q: adding VLAN 0 to HW filter on device macvlan3
[  110.654695][ T8303] bond2: (slave macvlan3): Enslaving as a backup interface with a down link
[  110.669945][ T8312] bond2: (slave macvlan4): Error -98 calling set_mac_address
[  110.947089][ T8340] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  110.952487][ T8340] tipc: Resetting bearer <eth:syzkaller0>
[  111.020333][ T8344] tipc: Disabling bearer <eth:syzkaller0>
[  111.030419][ T8352] netlink: 'syz.1.578': attribute type 1 has an invalid length.
[  111.072722][ T8347] netlink: 'syz.0.577': attribute type 10 has an invalid length.
[  111.109518][ T8347] netdevsim netdevsim0 netdevsim0: left allmulticast mode
[  111.132550][ T8354] C: renamed from team_slave_0
[  111.136376][ T8354] netlink: 'syz.2.579': attribute type 3 has an invalid length.
[  111.146323][ T8354] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  111.202791][ T8364] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  111.209817][ T8364] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  111.230663][ T8370] netlink: 'syz.2.583': attribute type 13 has an invalid length.
[  111.233454][ T8370] netlink: 'syz.2.583': attribute type 17 has an invalid length.
[  111.256714][ T8368] netlink: 'syz.1.582': attribute type 5 has an invalid length.
[  111.270486][ T8370] 8021q: adding VLAN 0 to HW filter on device bond0
[  111.274517][ T8370] 8021q: adding VLAN 0 to HW filter on device team0
[  111.278311][ T8372] IPVS: Scheduler module ip_vs_sip not found
[  111.282700][ T8370] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  111.289930][   T51] lo speed is unknown, defaulting to 1000
[  111.296735][   T51] syz2: Port: 1 Link ACTIVE
[  111.301133][ T8368] geneve0: entered promiscuous mode
[  111.303336][ T8368] geneve0: entered allmulticast mode
[  111.311698][ T8364] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  111.319369][ T8364] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  111.342842][ T5877] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 256 - 0
[  111.356030][ T5877] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 256 - 0
[  111.425203][ T8381] netlink: 'syz.0.586': attribute type 1 has an invalid length.
[  111.461380][ T8381] bond34: (slave geneve4): making interface the new active one
[  111.465219][ T8381] bond34: (slave geneve4): Enslaving as an active interface with an up link
[  111.471787][ T5877] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0
[  111.475648][ T5877] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0
[  111.479467][ T5877] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0
[  111.483181][ T5877] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0
[  111.489627][ T8381] 8021q: adding VLAN 0 to HW filter on device bond34
[  111.519842][ T8384] x9: renamed from bridge_slave_0 (while UP)
[  111.708221][ T8392] bond14: (slave ip6gretap2): Releasing backup interface
[  111.715313][ T8392] bond16: (slave bond17): Releasing backup interface
[  111.720881][ T8392] bond18: (slave bridge11): Removing an active aggregator
[  111.723913][ T8392] bond18: (slave bridge11): Releasing backup interface
[  111.727383][ T8392] bridge11: left promiscuous mode
[  111.729511][ T8392] bridge11: left allmulticast mode
[  111.736905][ T8392] bond19: (slave bridge13): Releasing active interface
[  111.760002][ T8392] A link change request failed with some changes committed already. Interface bond4 may have been left with an inconsistent configuration, please check.
[  111.940329][ T8406] 8021q: adding VLAN 0 to HW filter on device bond2
[  112.240273][ T8417] netlink: 'syz.2.596': attribute type 1 has an invalid length.
[  112.324756][ T8422] syzkaller1: entered promiscuous mode
[  112.328635][ T8422] syzkaller1: entered allmulticast mode
[  112.333062][ T8421] syzkaller0: entered promiscuous mode
[  112.335141][ T8421] syzkaller0: entered allmulticast mode
[  112.549217][ T8433] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  112.565960][ T8428] lo speed is unknown, defaulting to 1000
[  112.658800][ T8364] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  112.662404][ T8364] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  112.665644][ T8364] netdevsim netdevsim1 eth1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[  112.729437][ T8364] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  112.733480][ T8364] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  112.737502][ T8364] netdevsim netdevsim1 eth0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[  112.815861][ T5911] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  112.822232][ T5911] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 256 - 0
[  112.825641][ T5911] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 6081 - 0
[  112.845927][ T5911] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  112.850064][ T5911] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 256 - 0
[  112.852828][ T5911] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 6081 - 0
[  112.855442][ T8439] __nla_validate_parse: 15 callbacks suppressed
[  112.855454][ T8439] netlink: 36 bytes leftover after parsing attributes in process `syz.2.601'.
[  112.862078][ T5911] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  112.865638][ T5911] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 256 - 0
[  112.870232][ T5911] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 6081 - 0
[  112.873171][ T5911] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  112.880195][ T5911] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 256 - 0
[  112.883595][ T5911] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 6081 - 0
[  112.978042][ T8443] netlink: 16 bytes leftover after parsing attributes in process `syz.2.603'.
[  112.990796][ T8443] batman_adv: batadv0: Adding interface: dummy0
[  112.993785][ T8443] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  113.005886][ T8443] batman_adv: batadv0: Interface activated: dummy0
[  113.022976][ T8443] batadv0: mtu less than device minimum
[  113.026525][ T8443] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  113.031202][ T8443] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  113.035212][ T8443] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  113.039396][ T8443] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  113.043661][ T8443] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  113.059378][ T8441] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  113.070282][ T8443] batman_adv: batadv0: Adding interface: ip6gretap3
[  113.073075][ T8443] batman_adv: batadv0: The MTU of interface ip6gretap3 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  113.083734][ T8443] batman_adv: batadv0: Interface activated: ip6gretap3
[  113.145546][ T8441] netlink: 40 bytes leftover after parsing attributes in process `syz.1.602'.
[  113.275523][ T8453] wg1: entered promiscuous mode
[  113.278521][ T8453] wg1: entered allmulticast mode
[  113.292362][ T8452] netlink: 'syz.1.605': attribute type 10 has an invalid length.
[  113.302604][ T8452] team0: Port device dummy0 added
[  113.372715][ T8433] tipc: Disabling bearer <eth:syzkaller0>
[  113.591225][ T8462] netlink: 'syz.0.608': attribute type 1 has an invalid length.
[  113.594392][ T8462] netlink: 224 bytes leftover after parsing attributes in process `syz.0.608'.
[  113.611885][ T8462] netlink: 4 bytes leftover after parsing attributes in process `syz.0.608'.
[  113.841204][ T8468] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  113.845271][ T8468] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  113.925706][ T8468] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  113.929135][ T8468] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  114.010680][ T8468] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  114.014696][ T8468] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  114.042554][ T8470] netlink: 48 bytes leftover after parsing attributes in process `syz.2.611'.
[  114.083064][ T8468] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  114.087870][ T8468] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  114.129448][ T8474] 8021q: adding VLAN 0 to HW filter on device bond20
[  114.149110][ T8474] vlan0: entered allmulticast mode
[  114.151900][ T8474] bond20: (slave vlan0): Opening slave failed
[  114.209118][   T12] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 20000 - 0
[  114.216282][   T12] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 6081 - 0
[  114.226520][   T12] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 20000 - 0
[  114.229219][   T12] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 6081 - 0
[  114.245088][ T5911] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 20000 - 0
[  114.248438][ T5911] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 6081 - 0
[  114.251613][ T5911] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 20000 - 0
[  114.254528][ T5911] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 6081 - 0
[  114.599232][ T8495] netlink: 4 bytes leftover after parsing attributes in process `syz.2.618'.
[  114.609100][ T8495] netlink: 4 bytes leftover after parsing attributes in process `syz.2.618'.
[  114.802114][ T8508] netlink: 40 bytes leftover after parsing attributes in process `syz.2.622'.
[  114.808797][ T8508] dummy0: entered promiscuous mode
[  114.811564][ T8508] batman_adv: batadv0: Interface deactivated: dummy0
[  114.814371][ T8508] batman_adv: batadv0: Removing interface: dummy0
[  114.819032][ T8508] bridge0: port 1(dummy0) entered blocking state
[  114.821894][ T8508] bridge0: port 1(dummy0) entered disabled state
[  114.824835][ T8508] dummy0: entered allmulticast mode
[  114.836456][ T8508] bridge0: port 1(dummy0) entered blocking state
[  114.839136][ T8508] bridge0: port 1(dummy0) entered forwarding state
[  114.894546][ T8510] vlan2: entered allmulticast mode
[  114.897275][ T8510] dummy0: entered allmulticast mode
[  115.017585][ T8521] netlink: 4 bytes leftover after parsing attributes in process `syz.1.626'.
[  115.166045][ T8542] net_ratelimit: 35 callbacks suppressed
[  115.166054][ T8542] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  115.315244][ T8550] vlan1: entered allmulticast mode
[  115.319423][ T8550] bridge0: entered allmulticast mode
[  115.321943][ T8550] bridge14: port 1(vlan1) entered blocking state
[  115.324673][ T8550] bridge14: port 1(vlan1) entered disabled state
[  115.329119][ T8550] vlan1: entered promiscuous mode
[  115.331235][ T8550] bridge0: entered promiscuous mode
[  115.362916][ T8552] syz_tun: entered allmulticast mode
[  115.370290][ T8554] dvmrp8: entered allmulticast mode
[  115.381489][ T8554] syz_tun: left allmulticast mode
[  115.383251][ T8554] dvmrp8: left allmulticast mode
[  116.476635][ T8568] 8021q: adding VLAN 0 to HW filter on device bond21
[  116.513823][ T8574] validate_nla: 6 callbacks suppressed
[  116.513833][ T8574] netlink: 'syz.2.639': attribute type 1 has an invalid length.
[  116.545231][ T8568] bond21 (unregistering): Released all slaves
[  116.573717][ T8574] 8021q: adding VLAN 0 to HW filter on device bond21
[  116.587303][ T8576] bond21: (slave gretap3): making interface the new active one
[  116.591333][ T8576] bond21: (slave gretap3): Enslaving as an active interface with an up link
[  117.157435][ T8597] netlink: 'syz.1.645': attribute type 10 has an invalid length.
[  117.335710][ T8607] netlink: 'syz.1.648': attribute type 1 has an invalid length.
[  117.870055][ T8629] __nla_validate_parse: 10 callbacks suppressed
[  117.870068][ T8629] netlink: 12 bytes leftover after parsing attributes in process `syz.2.652'.
[  117.894808][ T8629] vlan3: entered allmulticast mode
[  117.897156][ T8629] veth0_macvtap: entered allmulticast mode
[  117.900027][ T8629] bridge15: port 1(vlan3) entered blocking state
[  117.902935][ T8629] bridge15: port 1(vlan3) entered disabled state
[  117.907780][ T8629] vlan3: entered promiscuous mode
[  118.189329][ T8642] netlink: 'syz.1.655': attribute type 10 has an invalid length.
[  118.193307][ T8642] netlink: 12 bytes leftover after parsing attributes in process `syz.1.655'.
[  118.210810][ T8642] netlink: 68 bytes leftover after parsing attributes in process `syz.1.655'.
[  118.214495][ T8642] netlink: 12 bytes leftover after parsing attributes in process `syz.1.655'.
[  118.223558][ T8642] netlink: 68 bytes leftover after parsing attributes in process `syz.1.655'.
[  118.301142][ T8646] netlink: 12 bytes leftover after parsing attributes in process `syz.1.657'.
[  118.304344][ T8646] netlink: 8 bytes leftover after parsing attributes in process `syz.1.657'.
[  118.342774][ T8652] netlink: 'syz.2.659': attribute type 2 has an invalid length.
[  118.345918][ T8652] netlink: 119 bytes leftover after parsing attributes in process `syz.2.659'.
[  118.421281][ T8660] vlan4: entered promiscuous mode
[  118.510848][ T8662] netlink: 8 bytes leftover after parsing attributes in process `syz.2.662'.
[  118.851281][ T8679] dummy0: left allmulticast mode
[  118.855972][ T8679] bridge0: port 1(dummy0) entered disabled state
[  118.862483][ T8679] batman_adv: batadv0: Interface deactivated: ip6gretap3
[  118.864913][ T8679] batman_adv: batadv0: Removing interface: ip6gretap3
[  118.869670][ T8679] vlan1: left promiscuous mode
[  118.871807][ T8679] bridge0: left promiscuous mode
[  118.874250][ T8679] bridge14: port 1(vlan1) entered disabled state
[  118.884135][ T8679] bond21: (slave gretap3): Releasing active interface
[  118.894059][ T8679] vlan3: left promiscuous mode
[  118.896923][ T8679] bridge15: port 1(vlan3) entered disabled state
[  118.903503][ T5852] Bluetooth: hci2: link tx timeout
[  118.905639][ T5852] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  118.946885][ T5852] Bluetooth: hci2: link tx timeout
[  118.951762][ T5852] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  118.971289][ T8673] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  118.975829][ T8673] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  118.989606][ T5852] Bluetooth: hci2: link tx timeout
[  118.991667][ T5852] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  119.196584][ T8701] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  119.201256][ T5852] Bluetooth: hci2: link tx timeout
[  119.203308][ T5852] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  119.223150][ T8704] tap0: tun_chr_ioctl cmd 2147783527
[  119.225924][ T8704] tap0: tun_chr_ioctl cmd 1074025677
[  119.229481][ T8704] tap0: linktype set to 774
[  119.283271][ T8707] sit0: Caught tx_queue_len zero misconfig
[  119.289192][ T8707] netlink: 8 bytes leftover after parsing attributes in process `syz.1.668'.
[  119.340869][ T8711] netlink: 'syz.1.670': attribute type 5 has an invalid length.
[  119.353230][ T8711] netlink: 'syz.1.670': attribute type 21 has an invalid length.
[  119.357844][ T8711] netlink: 'syz.1.670': attribute type 22 has an invalid length.
[  119.360791][ T8711] netlink: 'syz.1.670': attribute type 23 has an invalid length.
[  119.363511][ T8711] netlink: 'syz.1.670': attribute type 25 has an invalid length.
[  119.589522][ T8722] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  119.593566][ T8723] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  119.686128][ T5852] Bluetooth: hci2: link tx timeout
[  119.687878][ T5852] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  120.316932][  T792] tipc: Node number set to 715478261
[  120.956383][ T5852] Bluetooth: hci2: command 0x0405 tx timeout
[  122.345996][ T5852] Bluetooth: hci2: link tx timeout
[  122.549828][ T8737] 0X: renamed from caif0
[  122.554472][ T8737] 0X: entered allmulticast mode
[  122.559646][ T8737] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check.
[  123.010621][ T8744] lo speed is unknown, defaulting to 1000
[  123.031262][ T8735] macvtap1: entered allmulticast mode
[  123.033735][ T8735] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode
[  123.041971][ T8735] mac80211_hwsim hwsim4 wlan0: left allmulticast mode
[  123.121885][ T8755] __nla_validate_parse: 7 callbacks suppressed
[  123.121969][ T8755] netlink: 4 bytes leftover after parsing attributes in process `syz.0.679'.
[  123.130291][ T8755] team0: Caught tx_queue_len zero misconfig
[  123.133984][ T5862] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 20000 - 0
[  123.139153][ T5862] netdevsim netdevsim0 eth0: unset [1, 1] type 2 family 0 port 6081 - 0
[  123.154446][ T5862] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 20000 - 0
[  123.159226][ T5862] netdevsim netdevsim0 eth1: unset [1, 1] type 2 family 0 port 6081 - 0
[  123.168251][ T5862] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 20000 - 0
[  123.172159][ T5862] netdevsim netdevsim0 eth2: unset [1, 1] type 2 family 0 port 6081 - 0
[  123.197518][ T5862] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 20000 - 0
[  123.201089][ T5862] netdevsim netdevsim0 eth3: unset [1, 1] type 2 family 0 port 6081 - 0
[  123.341565][ T8781] netlink: 4 bytes leftover after parsing attributes in process `syz.2.684'.
[  123.353104][ T8781] vlan0: entered promiscuous mode
[  123.361492][ T8781] geneve1: entered promiscuous mode
[  123.365156][ T8781] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check.
[  123.392465][ T8782] netlink: 240 bytes leftover after parsing attributes in process `syz.0.686'.
[  123.520868][ T8791] team0: Refused to change device type
[  123.640392][ T8806] 0X: left allmulticast mode
[  123.674327][ T8806] .70: left allmulticast mode
[  123.687177][ T8806] hsr_slave_0: left allmulticast mode
[  123.688982][ T8806] hsr_slave_1: left allmulticast mode
[  123.702939][ T8806] vlan0: left promiscuous mode
[  123.725992][ T8806] sit1: left promiscuous mode
[  123.738784][ T8806] veth5: left promiscuous mode
[  123.753250][ T8806] bond5: left promiscuous mode
[  123.788981][ T8806] gretap2: left promiscuous mode
[  123.791372][ T8806] veth9: left promiscuous mode
[  123.803728][ T8806] geneve0: left promiscuous mode
[  123.805533][ T8806] geneve0: left allmulticast mode
[  123.815889][ T5862] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  123.820009][ T5862] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 256 - 0
[  123.823685][ T5862] netdevsim netdevsim1 eth0: unset [1, 1] type 2 family 0 port 6081 - 0
[  123.829289][ T5862] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  123.832793][ T5862] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 256 - 0
[  123.836025][ T5862] netdevsim netdevsim1 eth1: unset [1, 1] type 2 family 0 port 6081 - 0
[  123.845022][ T5862] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  123.852910][ T5862] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 256 - 0
[  123.857197][ T5862] netdevsim netdevsim1 eth2: unset [1, 1] type 2 family 0 port 6081 - 0
[  123.860132][ T5862] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  123.862970][ T5862] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 256 - 0
[  123.865830][ T5862] netdevsim netdevsim1 eth3: unset [1, 1] type 2 family 0 port 6081 - 0
[  123.933558][ T8825] netlink: 4 bytes leftover after parsing attributes in process `syz.1.695'.
[  123.984533][ T8828] validate_nla: 1 callbacks suppressed
[  123.984547][ T8828] netlink: 'syz.2.696': attribute type 12 has an invalid length.
[  123.992552][ T8828] netlink: 9472 bytes leftover after parsing attributes in process `syz.2.696'.
[  124.071729][ T8833] netlink: 'syz.2.697': attribute type 1 has an invalid length.
[  124.075230][ T8833] netlink: 'syz.2.697': attribute type 4 has an invalid length.
[  124.081364][ T8833] netlink: 188 bytes leftover after parsing attributes in process `syz.2.697'.
[  124.091148][ T8833] netlink: 64 bytes leftover after parsing attributes in process `syz.2.697'.
[  124.095111][ T8833] netlink: 64 bytes leftover after parsing attributes in process `syz.2.697'.
[  124.101504][ T8833] netlink: 48 bytes leftover after parsing attributes in process `syz.2.697'.
[  124.298446][ T8839] netlink: 'syz.2.699': attribute type 2 has an invalid length.
[  124.302264][ T8839] netlink: 'syz.2.699': attribute type 2 has an invalid length.
[  124.358737][ T8846] netlink: 'syz.2.701': attribute type 1 has an invalid length.
[  124.384921][ T8846] 8021q: adding VLAN 0 to HW filter on device bond22
[  124.403716][ T8846] bond22: (slave veth5): Enslaving as an active interface with a down link
[  124.442014][ T8850] netlink: 'syz.2.702': attribute type 1 has an invalid length.
[  124.478591][ T8850] workqueue: Failed to create a rescuer kthread for wq "bond23": -EINTR
[  124.541691][ T8855] netlink: 24 bytes leftover after parsing attributes in process `syz.2.703'.
[  124.680019][ T8862] lo speed is unknown, defaulting to 1000
[  124.882774][ T8871] lo speed is unknown, defaulting to 1000
[  125.092306][ T8878] netlink: 'syz.2.708': attribute type 1 has an invalid length.
[  125.145896][ T8878] bond23: entered promiscuous mode
[  125.149015][ T8878] bond23: entered allmulticast mode
[  125.153378][ T8878] 8021q: adding VLAN 0 to HW filter on device bond23
[  125.176661][ T8878] bridge17: entered promiscuous mode
[  125.179038][ T8878] bridge17: entered allmulticast mode
[  125.181798][ T8878] bond23: (slave bridge17): Enslaving as a backup interface with an up link
[  125.267107][ T5877] bond23: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  125.312163][   T10] lo speed is unknown, defaulting to 1000
[  125.314715][   T10] syz2: Port: 1 Link DOWN
[  125.455529][ T8886] netlink: 'syz.2.710': attribute type 7 has an invalid length.
[  125.461729][ T8886] netlink: 'syz.2.710': attribute type 8 has an invalid length.
[  125.534883][ T8900] batman_adv: batadv0: Adding interface: ip6gretap2
[  125.538954][ T8900] batman_adv: batadv0: The MTU of interface ip6gretap2 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  125.551513][ T8900] batman_adv: batadv0: Interface activated: ip6gretap2
[  125.634498][ T1097] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  125.638961][ T1097] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  125.700455][ T8921] sctp: [Deprecated]: syz.1.717 (pid 8921) Use of int in maxseg socket option.
[  125.700455][ T8921] Use struct sctp_assoc_value instead
[  125.916651][ T5852] Bluetooth: hci2: command 0x0405 tx timeout
[  126.620343][ T8942] 8021q: adding VLAN 0 to HW filter on device bond35
[  126.812530][ T8959] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  126.817094][ T8959] syzkaller0: entered promiscuous mode
[  126.819407][ T8959] syzkaller0: entered allmulticast mode
[  126.834372][ T8959] tipc: Resetting bearer <eth:syzkaller0>
[  126.837471][ T8958] tipc: Resetting bearer <eth:syzkaller0>
[  126.847804][ T8958] tipc: Disabling bearer <eth:syzkaller0>
[  127.008768][ T8978] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  127.012177][ T8978] syzkaller0: entered promiscuous mode
[  127.014608][ T8978] syzkaller0: entered allmulticast mode
[  127.077281][ T8978] tipc: Resetting bearer <eth:syzkaller0>
[  127.155175][ T8988] lo speed is unknown, defaulting to 1000
[  127.291528][ T8983] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  127.585067][ T9008] lo speed is unknown, defaulting to 1000
[  127.836907][ T9024] gretap0: left promiscuous mode
[  127.842739][ T9024] erspan0: left promiscuous mode
[  127.872235][ T9024] 8021q: adding VLAN 0 to HW filter on device team0
[  127.879857][ T9024] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check.
[  127.891976][ T9026] bridge12: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms)
[  127.923641][ T9027] xfrm0: entered promiscuous mode
[  127.926232][ T9027] xfrm0: entered allmulticast mode
[  127.941094][ T9023] lo speed is unknown, defaulting to 1000
[  128.005737][ T9022] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  128.058080][  T793] tipc: Node number set to 3845196487
[  128.400993][ T9039] 8021q: adding VLAN 0 to HW filter on device bond6
[  128.484978][ T9042] bond6: option mode: unable to set because the bond device is up
[  128.488528][ T9042] __nla_validate_parse: 22 callbacks suppressed
[  128.488535][ T9042] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.743'.
[  128.571739][ T9044] netlink: 'syz.0.744': attribute type 11 has an invalid length.
[  128.649431][ T9055] 8021q: adding VLAN 0 to HW filter on device bond36
[  128.663213][ T9055] vlan0: entered allmulticast mode
[  128.690616][ T9059] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  128.727889][ T9059] batman_adv: batadv0: Interface deactivated: ip6gretap2
[  128.737727][ T9060] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  128.741199][ T9060] syzkaller0: entered promiscuous mode
[  128.743212][ T9060] syzkaller0: entered allmulticast mode
[  128.759512][ T9060] tipc: Resetting bearer <eth:syzkaller0>
[  128.764455][ T9058] tipc: Resetting bearer <eth:syzkaller0>
[  128.774724][ T9058] tipc: Disabling bearer <eth:syzkaller0>
[  129.630979][ T9072] netlink: 12 bytes leftover after parsing attributes in process `syz.1.752'.
[  129.633981][ T9072] netlink: 12 bytes leftover after parsing attributes in process `syz.1.752'.
[  129.674403][ T9074] validate_nla: 5 callbacks suppressed
[  129.674415][ T9074] netlink: 'syz.1.753': attribute type 1 has an invalid length.
[  129.679937][ T9074] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  129.710109][ T9076] netlink: 32 bytes leftover after parsing attributes in process `syz.1.754'.
[  129.715175][ T9076] netlink: 'syz.1.754': attribute type 1 has an invalid length.
[  129.734448][ T9076] 8021q: adding VLAN 0 to HW filter on device bond11
[  129.742151][ T9076] bond11: (slave gretap3): making interface the new active one
[  129.745161][ T9076] bond11: (slave gretap3): Enslaving as an active interface with an up link
[  129.879596][ T8967] tipc: Resetting bearer <eth:syzkaller0>
[  129.889938][ T8967] tipc: Disabling bearer <eth:syzkaller0>
[  129.905057][ T9092] netlink: 68 bytes leftover after parsing attributes in process `syz.0.756'.
[  129.910089][ T5877] nci: nci_add_new_protocol: the target found does not have the desired protocol
[  130.004448][ T9095] lo speed is unknown, defaulting to 1000
[  130.043648][ T9101] netlink: 12 bytes leftover after parsing attributes in process `syz.0.760'.
[  130.059071][ T9095] netlink: 12 bytes leftover after parsing attributes in process `syz.2.758'.
[  130.067381][ T9095] netlink: 12 bytes leftover after parsing attributes in process `syz.2.758'.
[  130.067905][ T5877] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  130.074850][ T5877] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  130.078844][ T5877] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  130.083271][ T5877] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  130.103504][ T9107] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  130.714840][ T9132] pim6reg: left allmulticast mode
[  130.717587][ T9132] bridge0: left allmulticast mode
[  130.783633][ T9138] mac80211_hwsim hwsim6 syzkaller0: Caught tx_queue_len zero misconfig
[  130.797635][ T9138] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  130.804100][ T9138] mac80211_hwsim hwsim6 syzkaller0: entered promiscuous mode
[  130.808871][ T9138] mac80211_hwsim hwsim6 syzkaller0: entered allmulticast mode
[  130.849349][ T9142] bridge7: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms)
[  130.943447][ T9149] netlink: 'syz.1.770': attribute type 4 has an invalid length.
[  130.947651][ T9149] netlink: 'syz.1.770': attribute type 4 has an invalid length.
[  131.194236][ T9156] netlink: 24 bytes leftover after parsing attributes in process `syz.0.772'.
[  131.233473][ T9156] netlink: 'syz.0.772': attribute type 10 has an invalid length.
[  131.313350][ T9163] lo speed is unknown, defaulting to 1000
[  131.523409][ T9177] bridge14: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms)
[  131.579114][ T9181] netlink: 8 bytes leftover after parsing attributes in process `syz.0.777'.
[  131.624236][ T9184] macsec1: entered promiscuous mode
[  131.626566][ T9184] dummy0: entered promiscuous mode
[  131.628635][ T9184] macsec1: entered allmulticast mode
[  131.665847][ T9189] openvswitch: netlink: Flow key attribute not present in set flow.
[  131.728206][ T9194] bridge15: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms)
[  131.782304][ T9200] netlink: 'syz.1.784': attribute type 1 has an invalid length.
[  131.794855][ T9200] netlink: 'syz.1.784': attribute type 1 has an invalid length.
[  131.847322][ T9204] 8021q: adding VLAN 0 to HW filter on device team0
[  131.860824][ T9204] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  131.907518][ T9216] netlink: 'syz.1.789': attribute type 12 has an invalid length.
[  131.934341][ T9209] lo: Caught tx_queue_len zero misconfig
[  131.962448][ T9219] netlink: 'syz.1.790': attribute type 1 has an invalid length.
[  131.984977][ T9219] bond12: entered promiscuous mode
[  131.989003][ T9219] 8021q: adding VLAN 0 to HW filter on device bond12
[  131.995855][ T9219] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  131.999178][ T9219] IPv6: NLM_F_CREATE should be set when creating new route
[  132.002342][ T9219] IPv6: NLM_F_CREATE should be set when creating new route
[  132.003711][ T9222] netlink: 'syz.2.791': attribute type 10 has an invalid length.
[  132.006379][ T9219] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  132.049126][ T9225] bridge8: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms)
[  132.154786][ T9236] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  132.170965][ T9235] mac80211_hwsim hwsim6 syzkaller0: left promiscuous mode
[  132.179713][ T9235] mac80211_hwsim hwsim6 syzkaller0: left allmulticast mode
[  132.244468][ T6753] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  132.254477][ T6753] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  132.316537][ T9248] pimreg: entered allmulticast mode
[  132.330585][ T9248] dvmrp8: entered allmulticast mode
[  132.342356][ T9247] pimreg: left allmulticast mode
[  132.344325][ T9247] dvmrp8: left allmulticast mode
[  132.481334][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[  132.510517][ T9256] lo speed is unknown, defaulting to 1000
[  132.673656][ T9261] team0: Device dummy0 failed to register rx_handler
[  132.842699][ T9267] lo speed is unknown, defaulting to 1000
[  133.186037][ T9274] team0: Port device dummy0 removed
[  133.189982][ T9274] bond2: (slave macvlan3): Releasing backup interface
[  133.193234][ T9274] batman_adv: batadv0: Removing interface: ip6gretap2
[  133.197246][ T9274] bond11: (slave gretap3): Releasing active interface
[  133.258356][ T9274] ieee802154 phy0 wpan0: encryption failed: -22
[  133.262509][ T9274] team0: Unable to change to the same mode the team is in
[  133.305161][ T9276] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  133.404023][ T9281] bridge18: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms)
[  133.538110][ T9296] __nla_validate_parse: 12 callbacks suppressed
[  133.538121][ T9296] netlink: 16 bytes leftover after parsing attributes in process `syz.2.814'.
[  133.671745][ T9309] netlink: 12 bytes leftover after parsing attributes in process `syz.1.818'.
[  133.701348][ T9309] netlink: 28 bytes leftover after parsing attributes in process `syz.1.818'.
[  133.705945][ T9312] bridge9: port 1(veth0_to_bond) entered blocking state
[  133.719884][ T9312] bridge9: port 1(veth0_to_bond) entered disabled state
[  133.732814][ T9312] veth0_to_bond: entered allmulticast mode
[  133.744634][ T9312] veth0_to_bond: entered promiscuous mode
[  133.773975][ T9322] netlink: 4 bytes leftover after parsing attributes in process `syz.2.820'.
[  133.777960][ T9307] netlink: 71 bytes leftover after parsing attributes in process `syz.0.817'.
[  133.915003][ T9326] 8021q: adding VLAN 0 to HW filter on device team0
[  133.922544][ T9326] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check.
[  133.962437][ T9330] netlink: 40 bytes leftover after parsing attributes in process `syz.1.823'.
[  134.005034][ T9331] 8021q: adding VLAN 0 to HW filter on device bond24
[  134.024338][ T9331] bond24: (slave ip6erspan0): making interface the new active one
[  134.030498][ T9331] bond24: (slave ip6erspan0): Enslaving as an active interface with an up link
[  134.273579][ T9356] lo speed is unknown, defaulting to 1000
[  134.317695][ T9357] netlink: 40 bytes leftover after parsing attributes in process `syz.1.830'.
[  134.694688][ T9370] netlink: 9 bytes leftover after parsing attributes in process `syz.0.832'.
[  134.700970][ T9370] ..0: renamed from hsr0
[  134.705786][ T9370] ..0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  134.713040][ T9370] ..0: entered allmulticast mode
[  134.715321][ T9370] hsr_slave_0: entered allmulticast mode
[  134.721736][ T9370] A link change request failed with some changes committed already. Interface ..0 may have been left with an inconsistent configuration, please check.
[  134.839024][ T9380] validate_nla: 7 callbacks suppressed
[  134.839036][ T9380] netlink: 'syz.2.835': attribute type 13 has an invalid length.
[  134.842992][ T9379] netlink: 28 bytes leftover after parsing attributes in process `syz.1.837'.
[  134.843511][ T9380] netlink: 'syz.2.835': attribute type 17 has an invalid length.
[  134.882300][ T9380] 8021q: adding VLAN 0 to HW filter on device bond0
[  134.885757][ T9380] 8021q: adding VLAN 0 to HW filter on device team0
[  134.890285][ T9380] 0X: left allmulticast mode
[  134.892442][ T9380] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check.
[  134.898561][  T792] lo speed is unknown, defaulting to 1000
[  134.900562][  T792] syz2: Port: 1 Link ACTIVE
[  134.908054][ T9382] netlink: 37 bytes leftover after parsing attributes in process `syz.1.837'.
[  134.940109][ T9380] lo speed is unknown, defaulting to 1000
[  135.004466][ T9374] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  135.140979][ T9395] bond0: Device is already in use.
[  135.209785][ T9398] netlink: 'syz.1.842': attribute type 12 has an invalid length.
[  135.304878][ T9402] netlink: 'syz.1.844': attribute type 1 has an invalid length.
[  135.330591][ T9402] bond13: (slave gretap4): making interface the new active one
[  135.335674][ T9402] bond13: (slave gretap4): Enslaving as an active interface with an up link
[  135.515279][ T9411] vlan1: entered promiscuous mode
[  135.525803][ T9411] macvtap0: entered promiscuous mode
[  135.772118][ T9427] batadv1: entered promiscuous mode
[  135.810259][ T9431] team0: entered promiscuous mode
[  135.812878][ T9431] hsr1: Slave B (team0) is not up; please bring it up to get a fully working HSR network
[  135.827390][ T9434] lo speed is unknown, defaulting to 1000
[  135.950501][ T9441] bridge16: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms)
[  136.013751][ T9447] macvtap0: entered promiscuous mode
[  136.019455][ T9447] vlan0: entered promiscuous mode
[  136.021619][ T9447] macvtap0: entered allmulticast mode
[  136.023742][ T9447] vlan0: entered allmulticast mode
[  136.025481][ T9447] veth0_vlan: entered allmulticast mode
[  136.174026][ T9459] netlink: 'syz.2.861': attribute type 1 has an invalid length.
[  136.210194][ T9462] pim6reg: entered allmulticast mode
[  136.213702][ T9462] pim6reg: left allmulticast mode
[  136.289861][ T9465] netlink: 'syz.2.863': attribute type 13 has an invalid length.
[  136.293384][ T9465] netlink: 'syz.2.863': attribute type 17 has an invalid length.
[  136.303375][ T9465] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check.
[  136.714383][ T9470] bridge19: entered allmulticast mode
[  136.880512][ T9477] bridge17: entered promiscuous mode
[  136.882386][ T9477] bridge17: entered allmulticast mode
[  136.928530][ T9482] pim6reg: entered allmulticast mode
[  137.184325][ T9510] netlink: 'syz.0.876': attribute type 17 has an invalid length.
[  137.190284][ T9510] netlink: 'syz.0.876': attribute type 27 has an invalid length.
[  137.191361][ T9508] bond14: entered promiscuous mode
[  137.197646][ T9508] bond14: entered allmulticast mode
[  137.199668][ T9508] 8021q: adding VLAN 0 to HW filter on device bond14
[  137.220813][ T9510] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  137.241520][ T9510] lo speed is unknown, defaulting to 1000
[  137.241790][ T9512] tun0: tun_chr_ioctl cmd 1074025672
[  137.246013][ T9512] tun0: ignored: set checksum disabled
[  137.296802][ T9502] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  137.364409][ T9525] veth0_to_bond: left allmulticast mode
[  137.367315][ T9525] veth0_to_bond: left promiscuous mode
[  137.370459][ T9525] bridge9: port 1(veth0_to_bond) entered disabled state
[  137.382083][ T9525] bond13: (slave gretap4): Releasing active interface
[  137.437717][ T9532] syzkaller0: entered promiscuous mode
[  137.439730][ T9532] syzkaller0: entered allmulticast mode
[  137.442821][ T9533] veth0_vlan: mtu greater than device maximum
[  137.449863][ T9532] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0x5
[  137.545283][ T9536] netlink: 'syz.1.885': attribute type 1 has an invalid length.
[  137.569471][ T9536] 8021q: adding VLAN 0 to HW filter on device bond15
[  137.593113][ T9536] bond15: (slave veth1): Enslaving as an active interface with a down link
[  137.701883][ T9546] bond16: (slave ip6gretap3): Enslaving as a backup interface with an up link
[  137.709171][ T9546] 8021q: adding VLAN 0 to HW filter on device bond16
[  137.711532][   T12] bond16: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  137.788393][ T9546] bond16 (unregistering): (slave ip6gretap3): Removing an active aggregator
[  137.792814][ T9546] bond16 (unregistering): (slave ip6gretap3): Releasing backup interface
[  137.798309][ T9546] bond16 (unregistering): Released all slaves
[  137.905452][ T9556] 8021q: adding VLAN 0 to HW filter on device bond25
[  137.932755][ T9557] veth7: entered promiscuous mode
[  137.950346][ T9557] bond25: (slave veth7): Enslaving as an active interface with an up link
[  138.059660][  T793] lo speed is unknown, defaulting to 1000
[  138.067846][  T793] syz2: Port: 1 Link DOWN
[  138.075520][ T9570] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  138.142548][ T9572] veth13: entered promiscuous mode
[  138.172646][ T9581] 8021q: adding VLAN 0 to HW filter on device bond16
[  138.291151][ T9582] gretap0: Device is already in use.
[  138.302495][   T13] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  138.305331][   T13] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  138.308544][   T13] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  138.313812][ T9591] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  138.316615][   T13] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  138.321858][ T9591] syzkaller0: entered promiscuous mode
[  138.323830][ T9591] syzkaller0: entered allmulticast mode
[  138.335396][ T9591] tipc: Resetting bearer <eth:syzkaller0>
[  138.342284][ T9590] tipc: Resetting bearer <eth:syzkaller0>
[  138.349495][ T9590] tipc: Disabling bearer <eth:syzkaller0>
[  138.624307][ T9606] 8021q: adding VLAN 0 to HW filter on device bond38
[  138.631565][ T9606] bond0: (slave bond38): Enslaving as an active interface with a down link
[  138.682653][ T9614] lo speed is unknown, defaulting to 1000
[  138.893936][ T9614] __nla_validate_parse: 22 callbacks suppressed
[  138.893951][ T9614] netlink: 16 bytes leftover after parsing attributes in process `syz.0.904'.
[  139.066058][ T9614] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  139.423028][ T9624] bridge18: entered promiscuous mode
[  139.424817][ T9624] bridge18: entered allmulticast mode
[  139.547474][ T9628] lo speed is unknown, defaulting to 1000
[  139.582451][ T9629] netlink: 36 bytes leftover after parsing attributes in process `syz.1.907'.
[  139.813929][ T9635] netlink: 32 bytes leftover after parsing attributes in process `syz.2.909'.
[  139.820064][ T9628] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  139.941493][ T9641] Bluetooth: MGMT ver 1.23
[  139.944125][ T9641] netlink: 8 bytes leftover after parsing attributes in process `syz.1.910'.
[  139.947446][ T9641] netlink: 28 bytes leftover after parsing attributes in process `syz.1.910'.
[  139.952727][ T9641] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  140.040422][ T9646] validate_nla: 8 callbacks suppressed
[  140.040431][ T9646] netlink: 'syz.2.913': attribute type 13 has an invalid length.
[  140.045998][ T9647] netlink: 'syz.2.913': attribute type 13 has an invalid length.
[  140.049336][ T9646] netlink: 'syz.2.913': attribute type 17 has an invalid length.
[  140.052699][ T9647] netlink: 'syz.2.913': attribute type 17 has an invalid length.
[  140.079934][ T9646] 8021q: adding VLAN 0 to HW filter on device bond0
[  140.083440][ T9646] 8021q: adding VLAN 0 to HW filter on device team0
[  140.089012][ T9646] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check.
[  140.099826][ T6981] lo speed is unknown, defaulting to 1000
[  140.101959][ T6981] syz2: Port: 1 Link ACTIVE
[  140.105321][ T9647] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check.
[  140.145874][ T9648] netlink: 32 bytes leftover after parsing attributes in process `syz.1.912'.
[  140.193093][ T9656] netlink: 24 bytes leftover after parsing attributes in process `syz.1.915'.
[  140.308590][ T9663] netlink: 28 bytes leftover after parsing attributes in process `syz.2.914'.
[  140.312063][ T9663] netlink: 8 bytes leftover after parsing attributes in process `syz.2.914'.
[  140.315980][ T9663] netlink: 'syz.2.914': attribute type 10 has an invalid length.
[  140.415044][ T9664] netlink: 24 bytes leftover after parsing attributes in process `syz.1.917'.
[  140.533909][ T9668] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on
[  140.550980][ T9668] bond39: entered promiscuous mode
[  140.553179][ T9668] bond39: entered allmulticast mode
[  140.555555][ T9668] 8021q: adding VLAN 0 to HW filter on device bond39
[  141.122435][ T9678] bond22: (slave veth5): Releasing active interface
[  141.129430][ T9678] bond23: (slave bridge17): Removing an active aggregator
[  141.132970][ T9678] bond23: (slave bridge17): Releasing backup interface
[  141.137391][ T9678] bridge17: left promiscuous mode
[  141.140016][ T9678] bridge17: left allmulticast mode
[  141.144924][ T9678] bond24: (slave ip6erspan0): Releasing active interface
[  141.158664][ T9678] bond25: (slave veth7): Releasing backup interface
[  141.170023][ T9678] netlink: 'syz.2.921': attribute type 10 has an invalid length.
[  141.178652][ T9678] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  141.182898][ T9678] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  141.276306][ T9687] netlink: 'syz.1.924': attribute type 13 has an invalid length.
[  141.278984][ T9687] netlink: 'syz.1.924': attribute type 17 has an invalid length.
[  141.294317][ T9687] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check.
[  141.685089][ T9711] vlan1: entered promiscuous mode
[  141.690042][ T9711] bond0: entered promiscuous mode
[  141.780116][ T9716] netlink: 'syz.0.933': attribute type 8 has an invalid length.
[  141.792533][ T9717] ..0: renamed from .70
[  141.797150][ T9717] ..0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  141.801291][ T9717] ..0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  141.807770][ T9717] ..0: entered allmulticast mode
[  141.809919][ T9717] hsr_slave_0: entered allmulticast mode
[  141.811935][ T9717] hsr_slave_1: entered allmulticast mode
[  141.815303][ T9717] A link change request failed with some changes committed already. Interface ..0 may have been left with an inconsistent configuration, please check.
[  142.129125][ T9728] netlink: 'syz.2.936': attribute type 30 has an invalid length.
[  142.244773][ T9734] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR
[  142.592941][ T9756] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  142.600492][ T9757] syzkaller0: entered allmulticast mode
[  142.606809][ T9756] tipc: Resetting bearer <eth:syzkaller0>
[  142.610945][ T9755] tipc: Disabling bearer <eth:syzkaller0>
[  142.933522][ T9783] bond34: (slave geneve4): Releasing active interface
[  142.940486][ T9783] bond0: (slave bond38): Releasing active interface
[  142.972928][ T9786] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  143.043365][ T9788] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes.
[  143.097417][ T9790] lo speed is unknown, defaulting to 1000
[  143.215751][ T9794] 8021q: adding VLAN 0 to HW filter on device bond40
[  143.306969][ T9794] bond40 (unregistering): Released all slaves
[  143.334956][ T9798] vlan1: entered promiscuous mode
[  143.339789][ T9798] bond0: entered promiscuous mode
[  143.420370][ T9806] delete_channel: no stack
[  143.729857][ T9833] erspan0: entered promiscuous mode
[  143.743757][ T9833] erspan0: left promiscuous mode
[  143.780270][ T9834] 8021q: adding VLAN 0 to HW filter on device bond26
[  143.890511][ T9846] 8021q: adding VLAN 0 to HW filter on device macvlan1
[  143.894478][ T9846] bond6: (slave macvlan1): Enslaving as a backup interface with a down link
[  143.952317][ T9859] __nla_validate_parse: 17 callbacks suppressed
[  143.952328][ T9859] netlink: 36 bytes leftover after parsing attributes in process `syz.2.969'.
[  144.013206][ T9870] bond17: (slave bridge0): Enslaving as a backup interface with an up link
[  144.052692][ T9871] tipc: Resetting bearer <eth:syzkaller0>
[  144.069279][ T9871] vlan0: left allmulticast mode
[  144.071012][ T9871] veth0_vlan: left allmulticast mode
[  144.072817][ T9871] vlan0: left promiscuous mode
[  144.124438][ T9879] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  144.132814][ T9879] mac80211_hwsim hwsim6 syzkaller0: entered promiscuous mode
[  144.135730][ T9879] mac80211_hwsim hwsim6 syzkaller0: entered allmulticast mode
[  144.141895][ T9879] tipc: Resetting bearer <eth:syzkaller0>
[  144.154146][ T9879] tipc: Resetting bearer <eth:syzkaller0>
[  144.214194][ T9884] netlink: 4 bytes leftover after parsing attributes in process `syz.2.977'.
[  144.264474][ T9892] netlink: 40 bytes leftover after parsing attributes in process `syz.2.979'.
[  144.310678][ T9896] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  144.314136][ T9896] syzkaller0: entered promiscuous mode
[  144.321254][ T9896] syzkaller0: entered allmulticast mode
[  144.343407][ T9900] vlan2: entered allmulticast mode
[  144.353045][ T9896] tipc: Resetting bearer <eth:syzkaller0>
[  144.359279][ T9895] tipc: Resetting bearer <eth:syzkaller0>
[  144.369781][ T9895] tipc: Disabling bearer <eth:syzkaller0>
[  144.532529][ T9910] (unnamed net_device) (uninitialized): up delay (1024) is not a multiple of miimon (100), value rounded to 1000 ms
[  144.538077][ T9910] (unnamed net_device) (uninitialized): down delay (4) is not a multiple of miimon (100), value rounded to 0 ms
[  144.619570][ T9912] tipc: Resetting bearer <eth:syzkaller0>
[  144.635961][ T9912] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  144.802810][ T9862] delete_channel: no stack
[  145.369472][ T9920] netlink: 4 bytes leftover after parsing attributes in process `syz.2.986'.
[  145.483358][ T9926] validate_nla: 5 callbacks suppressed
[  145.483367][ T9926] netlink: 'syz.1.987': attribute type 13 has an invalid length.
[  145.494880][ T9926] netlink: 'syz.1.987': attribute type 17 has an invalid length.
[  145.515257][ T9926] 8021q: adding VLAN 0 to HW filter on device team0
[  145.520747][ T9926] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check.
[  145.580729][ T9925] lo speed is unknown, defaulting to 1000
[  145.618993][ T9926] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  145.722591][ T9925] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  145.733835][ T9928] netlink: 4 bytes leftover after parsing attributes in process `syz.2.988'.
[  145.803946][ T9937] lo speed is unknown, defaulting to 1000
[  146.208041][ T9960] netlink: 'syz.2.993': attribute type 7 has an invalid length.
[  146.211237][ T9959] netlink: 'syz.2.993': attribute type 7 has an invalid length.
[  146.324088][ T9967] netlink: 348 bytes leftover after parsing attributes in process `syz.2.996'.
[  146.331858][ T9968] netlink: 348 bytes leftover after parsing attributes in process `syz.2.996'.
[  146.364379][ T9967] syzkaller1: entered promiscuous mode
[  146.367200][ T9967] syzkaller1: entered allmulticast mode
[  146.412200][ T9972] netlink: 36 bytes leftover after parsing attributes in process `syz.1.997'.
[  146.544605][ T9982] netlink: 'syz.2.1000': attribute type 1 has an invalid length.
[  146.566958][ T9982] 8021q: adding VLAN 0 to HW filter on device bond29
[  146.579757][ T9982] bond29: (slave gretap4): making interface the new active one
[  146.583550][ T9982] bond29: (slave gretap4): Enslaving as an active interface with an up link
[  146.620809][ T9985] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  146.623849][ T9985] syzkaller0: entered promiscuous mode
[  146.625952][ T9985] syzkaller0: entered allmulticast mode
[  146.630973][ T9985] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1514) !
[  146.635335][ T9988] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1002'.
[  146.641932][ T9985] tipc: Resetting bearer <eth:syzkaller0>
[  146.648812][ T9984] tipc: Resetting bearer <eth:syzkaller0>
[  146.658181][ T9984] tipc: Disabling bearer <eth:syzkaller0>
[  146.852051][T10000] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1004'.
[  146.860475][T10000] netlink: 'syz.2.1004': attribute type 10 has an invalid length.
[  147.081362][ T5911] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  147.084228][ T5911] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  147.087468][ T5911] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  147.090199][ T5911] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  147.287284][T10023] netlink: 'syz.1.1011': attribute type 7 has an invalid length.
[  147.290443][T10023] netlink: 'syz.1.1011': attribute type 8 has an invalid length.
[  147.360593][T10026] netlink: 'syz.1.1012': attribute type 1 has an invalid length.
[  147.412967][T10026] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  147.421582][T10026] 8021q: adding VLAN 0 to HW filter on device bond18
[  147.425737][T10034] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  147.430333][T10034] syzkaller0: entered promiscuous mode
[  147.432605][T10034] syzkaller0: entered allmulticast mode
[  147.440400][T10034] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  147.460408][T10034] tipc: Resetting bearer <eth:syzkaller0>
[  147.466986][T10033] tipc: Resetting bearer <eth:syzkaller0>
[  147.482422][T10033] tipc: Disabling bearer <eth:syzkaller0>
[  147.677683][T10042] netlink: 'syz.2.1015': attribute type 8 has an invalid length.
[  147.741205][T10044] bond42: entered promiscuous mode
[  147.743245][T10044] bond42: entered allmulticast mode
[  147.755841][T10044] bridge20: entered promiscuous mode
[  147.760336][T10044] bridge20: entered allmulticast mode
[  147.763683][T10044] bond42: (slave bridge20): making interface the new active one
[  147.770055][T10044] bond42: (slave bridge20): Enslaving as an active interface with an up link
[  147.881197][T10058] lo speed is unknown, defaulting to 1000
[  148.083474][T10060] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  148.112722][  T792] lo speed is unknown, defaulting to 1000
[  148.115267][  T792] syz2: Port: 1 Link DOWN
[  148.157906][ T5911] 
[  148.158916][ T5911] ============================================
[  148.161061][ T5911] WARNING: possible recursive locking detected
[  148.163519][ T5911] syzkaller #0 Not tainted
[  148.165646][ T5911] --------------------------------------------
[  148.168920][ T5911] kworker/u8:4/5911 is trying to acquire lock:
[  148.171513][ T5911] ffff88802803e558 (&qdisc_xmit_lock_key#4){+.-.}-{3:3}, at: sch_direct_xmit+0x153/0x4b0
[  148.175752][ T5911] 
[  148.175752][ T5911] but task is already holding lock:
[  148.178792][ T5911] ffff888024b88558 (&qdisc_xmit_lock_key#4){+.-.}-{3:3}, at: sch_direct_xmit+0x153/0x4b0
[  148.183028][ T5911] 
[  148.183028][ T5911] other info that might help us debug this:
[  148.186560][ T5911]  Possible unsafe locking scenario:
[  148.186560][ T5911] 
[  148.189628][ T5911]        CPU0
[  148.191176][ T5911]        ----
[  148.192687][ T5911]   lock(&qdisc_xmit_lock_key#4);
[  148.194840][ T5911]   lock(&qdisc_xmit_lock_key#4);
[  148.196993][ T5911] 
[  148.196993][ T5911]  *** DEADLOCK ***
[  148.196993][ T5911] 
[  148.200394][ T5911]  May be due to missing lock nesting notation
[  148.200394][ T5911] 
[  148.204038][ T5911] 15 locks held by kworker/u8:4/5911:
[  148.206052][ T5911]  #0: ffff888023102948 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  148.210370][ T5911]  #1: ffffc90003e3fbc0 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  148.214568][ T5911]  #2: ffffffff8f538ac8 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_dad_work+0x112/0x14b0
[  148.217790][ T5911]  #3: ffff88802ab76538 (&idev->mc_lock){+.+.}-{4:4}, at: ipv6_mc_dad_complete+0x32/0x410
[  148.220939][ T5911]  #4: ffffffff8e139ee0 (rcu_read_lock){....}-{1:3}, at: mld_sendpack+0x1de/0xd80
[  148.224611][ T5911]  #5: ffffffff8e139ee0 (rcu_read_lock){....}-{1:3}, at: ip6_finish_output2+0x701/0x16a0
[  148.228460][ T5911]  #6: ffffffff8e139f40 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x27b/0x3b50
[  148.231724][ T5911]  #7: ffffffff8e139ee0 (rcu_read_lock){....}-{1:3}, at: bond_start_xmit+0xf8/0x1a10
[  148.234886][ T5911]  #8: ffffffff8e139f40 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x27b/0x3b50
[  148.238711][ T5911]  #9: ffff888031337258 (dev->qdisc_tx_busylock ?: &qdisc_tx_busylock#3){+...}-{3:3}, at: __dev_queue_xmit+0x138a/0x3b50
[  148.243725][ T5911]  #10: ffff888024b88558 (&qdisc_xmit_lock_key#4){+.-.}-{3:3}, at: sch_direct_xmit+0x153/0x4b0
[  148.248122][ T5911]  #11: ffffffff8e139ee0 (rcu_read_lock){....}-{1:3}, at: ip_output+0x60/0x3c0
[  148.251903][ T5911]  #12: ffffffff8e139ee0 (rcu_read_lock){....}-{1:3}, at: ip_finish_output2+0x452/0x1160
[  148.256057][ T5911]  #13: ffffffff8e139f40 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x27b/0x3b50
[  148.260223][ T5911]  #14: ffff888030f37258 (dev->qdisc_tx_busylock ?: &qdisc_tx_busylock#3){+...}-{3:3}, at: __dev_queue_xmit+0x138a/0x3b50
[  148.265479][ T5911] 
[  148.265479][ T5911] stack backtrace:
[  148.268015][ T5911] CPU: 0 UID: 0 PID: 5911 Comm: kworker/u8:4 Not tainted syzkaller #0 PREEMPT(full) 
[  148.268029][ T5911] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  148.268036][ T5911] Workqueue: ipv6_addrconf addrconf_dad_work
[  148.268051][ T5911] Call Trace:
[  148.268056][ T5911]  <TASK>
[  148.268063][ T5911]  dump_stack_lvl+0x189/0x250
[  148.268087][ T5911]  ? __pfx_dump_stack_lvl+0x10/0x10
[  148.268099][ T5911]  ? __pfx__printk+0x10/0x10
[  148.268112][ T5911]  ? skb_network_protocol+0x508/0x760
[  148.268126][ T5911]  ? print_lock_name+0xde/0x100
[  148.268168][ T5911]  print_deadlock_bug+0x28b/0x2a0
[  148.268181][ T5911]  validate_chain+0x1a3f/0x2140
[  148.268192][ T5911]  ? validate_xmit_xfrm+0xbf/0x1160
[  148.268210][ T5911]  ? __pfx_validate_xmit_xfrm+0x10/0x10
[  148.268226][ T5911]  ? __pfx_netif_skb_features+0x10/0x10
[  148.268239][ T5911]  ? rcu_is_watching+0x15/0xb0
[  148.268251][ T5911]  __lock_acquire+0xab9/0xd20
[  148.268269][ T5911]  ? sch_direct_xmit+0x153/0x4b0
[  148.268283][ T5911]  lock_acquire+0x120/0x360
[  148.268297][ T5911]  ? sch_direct_xmit+0x153/0x4b0
[  148.268315][ T5911]  _raw_spin_lock+0x2e/0x40
[  148.268328][ T5911]  ? sch_direct_xmit+0x153/0x4b0
[  148.268341][ T5911]  sch_direct_xmit+0x153/0x4b0
[  148.268357][ T5911]  ? __pfx_sch_direct_xmit+0x10/0x10
[  148.268374][ T5911]  __dev_queue_xmit+0x1857/0x3b50
[  148.268389][ T5911]  ? __dev_queue_xmit+0x27b/0x3b50
[  148.268404][ T5911]  ? neigh_resolve_output+0x438/0x750
[  148.268421][ T5911]  ? __pfx___dev_queue_xmit+0x10/0x10
[  148.268433][ T5911]  ? read_seqbegin+0x122/0x250
[  148.268447][ T5911]  ? neigh_resolve_output+0x438/0x750
[  148.268462][ T5911]  ? lockdep_hardirqs_on+0x9c/0x150
[  148.268478][ T5911]  ? read_seqbegin+0x1ac/0x250
[  148.268492][ T5911]  ? __pfx_read_seqbegin+0x10/0x10
[  148.268506][ T5911]  ? __local_bh_enable_ip+0x12d/0x1c0
[  148.268516][ T5911]  ? eth_header+0x11b/0x200
[  148.268527][ T5911]  ? __asan_memcpy+0x40/0x70
[  148.268547][ T5911]  ip_finish_output2+0xd40/0x1160
[  148.268563][ T5911]  ? ip_finish_output2+0x452/0x1160
[  148.268576][ T5911]  ? __pfx_ip_finish_output2+0x10/0x10
[  148.268589][ T5911]  ? ip_skb_dst_mtu+0x1a5/0xab0
[  148.268601][ T5911]  ? ip_skb_dst_mtu+0x866/0xab0
[  148.268613][ T5911]  ? ip_finish_output+0x33a/0x3f0
[  148.268625][ T5911]  ip_output+0x2a1/0x3c0
[  148.268637][ T5911]  ? ip_output+0x60/0x3c0
[  148.268648][ T5911]  iptunnel_xmit+0x592/0xa40
[  148.268667][ T5911]  ip_tunnel_xmit+0x1c41/0x2390
[  148.268688][ T5911]  ? __pfx_ip_tunnel_xmit+0x10/0x10
[  148.268700][ T5911]  ? gre_build_header+0x3fd/0xa40
[  148.268715][ T5911]  ? __pfx_gre_build_header+0x10/0x10
[  148.268729][ T5911]  gre_tap_xmit+0x590/0x7a0
[  148.268742][ T5911]  ? __pfx_gre_tap_xmit+0x10/0x10
[  148.268752][ T5911]  ? __lock_acquire+0xab9/0xd20
[  148.268769][ T5911]  dev_hard_start_xmit+0x2d7/0x830
[  148.268786][ T5911]  sch_direct_xmit+0x241/0x4b0
[  148.268801][ T5911]  ? __pfx_sch_direct_xmit+0x10/0x10
[  148.268818][ T5911]  __dev_queue_xmit+0x1857/0x3b50
[  148.268829][ T5911]  ? __lock_acquire+0xab9/0xd20
[  148.268846][ T5911]  ? __dev_queue_xmit+0x27b/0x3b50
[  148.268860][ T5911]  ? unwind_next_frame+0xa5/0x2390
[  148.268873][ T5911]  ? unwind_next_frame+0xa5/0x2390
[  148.268885][ T5911]  ? __pfx___dev_queue_xmit+0x10/0x10
[  148.268897][ T5911]  ? unwind_next_frame+0xa5/0x2390
[  148.268909][ T5911]  ? unwind_next_frame+0xa5/0x2390
[  148.268920][ T5911]  ? unwind_next_frame+0x19ae/0x2390
[  148.268933][ T5911]  ? unwind_next_frame+0xa5/0x2390
[  148.268944][ T5911]  ? ret_from_fork_asm+0x1a/0x30
[  148.268962][ T5911]  ? __lock_acquire+0xab9/0xd20
[  148.268979][ T5911]  bond_dev_queue_xmit+0x10b/0x1e0
[  148.268994][ T5911]  ? __pfx_bond_dev_queue_xmit+0x10/0x10
[  148.269007][ T5911]  ? bond_do_alb_xmit+0x600/0x820
[  148.269022][ T5911]  bond_start_xmit+0x779/0x1a10
[  148.269039][ T5911]  ? bond_start_xmit+0xf8/0x1a10
[  148.269054][ T5911]  ? __pfx_bond_start_xmit+0x10/0x10
[  148.269079][ T5911]  ? netif_skb_features+0xa69/0x1540
[  148.269091][ T5911]  ? validate_xmit_xfrm+0xbf/0x1160
[  148.269108][ T5911]  ? __pfx_validate_xmit_xfrm+0x10/0x10
[  148.269124][ T5911]  ? __pfx_netif_skb_features+0x10/0x10
[  148.269135][ T5911]  ? __lock_acquire+0xab9/0xd20
[  148.269185][ T5911]  dev_hard_start_xmit+0x2d7/0x830
[  148.269202][ T5911]  __dev_queue_xmit+0x1b8d/0x3b50
[  148.269217][ T5911]  ? __dev_queue_xmit+0x27b/0x3b50
[  148.269232][ T5911]  ? fib_rules_lookup+0x96/0xe90
[  148.269242][ T5911]  ? __pfx_fib_rules_lookup+0x10/0x10
[  148.269253][ T5911]  ? __pfx___dev_queue_xmit+0x10/0x10
[  148.269264][ T5911]  ? l3mdev_update_flow+0x4d1/0x640
[  148.269277][ T5911]  ? __lock_acquire+0xab9/0xd20
[  148.269293][ T5911]  ? __lock_acquire+0xab9/0xd20
[  148.269312][ T5911]  ? ip6_finish_output2+0xf99/0x16a0
[  148.269326][ T5911]  ip6_finish_output2+0x11bc/0x16a0
[  148.269341][ T5911]  ? ip6_finish_output2+0x701/0x16a0
[  148.269357][ T5911]  ? __pfx_ip6_finish_output2+0x10/0x10
[  148.269372][ T5911]  ? ip6_mtu+0x7d/0x3f0
[  148.269385][ T5911]  ? ip6_finish_output+0x2ef/0x4e0
[  148.269399][ T5911]  NF_HOOK+0x9e/0x380
[  148.269414][ T5911]  ? __pfx_NF_HOOK+0x10/0x10
[  148.269428][ T5911]  ? __pfx_xfrm_lookup_with_ifid+0x10/0x10
[  148.269441][ T5911]  ? do_raw_spin_unlock+0x4d/0x240
[  148.269454][ T5911]  ? icmp6_dst_alloc+0x3a5/0x420
[  148.269467][ T5911]  ? icmp6_dst_alloc+0x3a5/0x420
[  148.269481][ T5911]  mld_sendpack+0x800/0xd80
[  148.269499][ T5911]  ? mld_sendpack+0x1de/0xd80
[  148.269512][ T5911]  ? __pfx_mld_sendpack+0x10/0x10
[  148.269531][ T5911]  ? mld_send_initial_cr+0x352/0x550
[  148.269544][ T5911]  ipv6_mc_dad_complete+0x88/0x410
[  148.269557][ T5911]  addrconf_dad_completed+0x6d5/0xd60
[  148.269570][ T5911]  ? __pfx_addrconf_dad_completed+0x10/0x10
[  148.269581][ T5911]  ? addrconf_dad_work+0xd83/0x14b0
[  148.269593][ T5911]  addrconf_dad_work+0xc36/0x14b0
[  148.269604][ T5911]  ? __lock_acquire+0xab9/0xd20
[  148.269619][ T5911]  ? __pfx_addrconf_dad_work+0x10/0x10
[  148.269630][ T5911]  ? process_scheduled_works+0x9ef/0x17b0
[  148.269642][ T5911]  ? _raw_spin_unlock_irq+0x23/0x50
[  148.269655][ T5911]  ? process_scheduled_works+0x9ef/0x17b0
[  148.269664][ T5911]  ? process_scheduled_works+0x9ef/0x17b0
[  148.269674][ T5911]  process_scheduled_works+0xae1/0x17b0
[  148.269689][ T5911]  ? __pfx_process_scheduled_works+0x10/0x10
[  148.269703][ T5911]  worker_thread+0x8a0/0xda0
[  148.269718][ T5911]  kthread+0x711/0x8a0
[  148.269732][ T5911]  ? __pfx_worker_thread+0x10/0x10
[  148.269742][ T5911]  ? __pfx_kthread+0x10/0x10
[  148.269754][ T5911]  ? _raw_spin_unlock_irq+0x23/0x50
[  148.269768][ T5911]  ? lockdep_hardirqs_on+0x9c/0x150
[  148.269781][ T5911]  ? __pfx_kthread+0x10/0x10
[  148.269793][ T5911]  ret_from_fork+0x3fc/0x770
[  148.269805][ T5911]  ? __pfx_ret_from_fork+0x10/0x10
[  148.269817][ T5911]  ? __switch_to_asm+0x39/0x70
[  148.269829][ T5911]  ? __switch_to_asm+0x33/0x70
[  148.269841][ T5911]  ? __pfx_kthread+0x10/0x10
[  148.269854][ T5911]  ret_from_fork_asm+0x1a/0x30
[  148.269873][ T5911]  </TASK>

VM DIAGNOSIS:
08:43:27  Registers:
info registers vcpu 0

CPU#0
RAX=000000000000005b RBX=000000000000005b RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc90003e3d670
R8 =ffff888021628237 R9 =1ffff110042c5046 R10=dffffc0000000000 R11=ffffffff854f38c0
R12=dffffc0000000000 R13=ffffffff99afd8c1 R14=ffffffff99df2420 R15=0000000000000000
RIP=ffffffff854f393c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b8618000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fbc9bf74c40 CR3=0000000030624000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007f795c597498 00007f795c597470 XMM03=00007f795c5974a8 00007f795c5974a0
XMM04=00007f795d0fd100 00007f795c597460 XMM05=00007f795c597478 00007f795c5974c0
XMM06=00007f795c5974b8 00007f795c5974b0 XMM07=00007f795c5974a8 00007f795c5974a0
XMM08=0000000000000000 00007f795c412ee7 XMM09=0000000000000000 00007f795c412fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=1ffff11007559014 RBX=ffffc900001b7a60 RCX=ccf86a88c9e3be00 RDX=0000000000000000
RSI=ffffffff8be337e0 RDI=ffffc900001b7a60 RBP=ffffc900001b7b50 RSP=ffffc900001b78d0
R8 =ffffffff8fa38e37 R9 =1ffffffff1f471c6 R10=dffffc0000000000 R11=fffffbfff1f471c7
R12=dffffc0000000000 R13=1ffff92000036f4c R14=ffff88803aac80a0 R15=ffff88803aac8190
RIP=ffffffff81a827af RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c18000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000055e5747e17e8 CR3=000000010ddb8000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000001 XMM01=0000000000000015 000000000003bf12
XMM02=ffffffffffffffff f10819d003020400 XMM03=e40308040019e003 0070756f72676301
XMM04=0000000000000000 0000000000000000 XMM05=00005555885481c2 0000555588547ac0
XMM06=0000000000000000 0000000000000000 XMM07=fffffffffffe1000 4003021000300368
XMM08=1000059003040400 19e40308040019e0 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
